HowTo create jails with Bastille

vim /etc/pkg/FreeBSD.conf

FreeBSD: {
  url: "pkg+http://pkg.FreeBSD.org/${ABI}/latest",
  mirror_type: "srv",
  signature_type: "fingerprints",
  fingerprints: "/usr/share/keys/pkg",
  enabled: yes
}

sysrc bastille_enable=YES

sysrc cloned_interfaces+=lo1
sysrc ifconfig_lo1_name="bastille0"
service netif cloneup

#ext_if="em0"

#set block-policy return
#scrub in on $ext_if all fragment reassemble
set skip on lo

table <jails> persist
nat on $ext_if from <jails> to any -> ($ext_if)

#block in all
#pass out quick modulate state
#antispoof for $ext_if inet
#pass in inet proto tcp from any to any port ssh flags S/SA keep state

sysrc -f /usr/local/etc/bastille/bastille.conf bastille_zfs_enable=YES
sysrc -f /usr/local/etc/bastille/bastille.conf bastille_zfs_zpool=zroot #check with "zpool list"

bastille bootstrap 12.1-RELEASE
bastille create testjail 12.1-RELEASE 192.168.0.50
bastille start

bastille pkg install vim-console tmux
bastille console testjail

pkg install spiped

apt install spiped

[lsde-spiped]
name=Copr repo for spiped owned by lsde
baseurl=https://copr-be.cloud.fedoraproject.org/results/lsde/spiped/epel-7-$basearch/
type=rpm-md
skip_if_unavailable=True
gpgcheck=1
gpgkey=https://copr-be.cloud.fedoraproject.org/results/lsde/spiped/pubkey.gpg
repo_gpgcheck=0
enabled=1
enabled_metadata=1

[lsde-spiped]
yum clean all
yum install spiped

dd if=/dev/urandom of=/root/espiped.key bs=32 count=1

spiped -d -s '[0.0.0.0]:19200' -t '[127.0.0.1]:9200' -k /root/espiped.key

spiped -e -s '[127.0.0.1]:9200' -t 192.168.0.10:19200 -k /root/espiped.key

pkg install redmine apache24 mysql56-server mysql56-client rubygem-passenger-apache

vim /usr/local/etc/apache24/httpd.conf

LoadModule passenger_module /usr/local/lib/ruby/gems/2.4/gems/passenger-6.0.0/buildout/apache2/mod_passenger.so
PassengerRoot /usr/local/lib/ruby/gems/2.4/gems/passenger-6.0.0
PassengerRuby /usr/local/bin/ruby24

#to use ssl uncomment the following lines and set Listen port to 443
#LoadModule ssl_module libexec/apache24/mod_ssl.so
#SSLEngine on
#SSLCertificateFile "/usr/local/etc/apache24/YOUR_SSL.crt"
#SSLCertificateKeyFile "/usr/local/etc/apache24/YOUR_SSL.key"

RailsEnv production
PassengerDefaultUser www
DocumentRoot /usr/local/www/redmine/public/
<Directory "/usr/local/www/redmine/public/">
    Allow from all
    Options -MultiViews
    Require all granted
</Directory>

sysrc mysql_enable=YES
service mysql-server start
mysql -u root

CREATE DATABASE redmine CHARACTER SET utf8;
#CREATE DATABASE redmine_dev CHARACTER SET utf8;
#CREATE DATABASE redmine_test CHARACTER SET utf8;

CREATE USER 'redmine'@'localhost' IDENTIFIED BY 'YourRedminePassword';

GRANT ALL PRIVILEGES ON redmine.* TO 'redmine'@'localhost';
#GRANT ALL PRIVILEGES ON redmine_dev.* TO 'redmine'@'localhost';
#GRANT ALL PRIVILEGES ON redmine_test.* TO 'redmine'@'localhost';
FLUSH PRIVILEGES;

vim /usr/local/www/redmine/config/database.yml

production:
  adapter: mysql2
  database: redmine
  host: localhost
  username: redmine
  password: YourRedminePassword
  encoding: utf8

test:
  adapter: mysql2
  database: redmine_test
  host: localhost
  username: redmine
  password: YourRedminePassword
  encoding: utf8

development:
  adapter: mysql2
  database: redmine_dev
  host: localhost
  username: redmine
  password: YourRedminePassword
  encoding: utf8

cd /usr/local/www/redmine/
bundle install --without development test
bundle exec rake generate_secret_token
setenv RAILS_ENV production
setenv REDMINE_LANG en
bundle exec rake db:migrate
bundle exec rake redmine:load_default_data
mkdir -p tmp tmp/pdf public/plugin_assets
chown -R www:www files log tmp public/plugin_assets
chmod -R 755 files log tmp public/plugin_assets
find files log tmp public/plugin_assets -type f -exec chmod -x {} +

bundle exec rails server webrick -e production

sysrc apache24_enable=YES
service apache24 start

[2018-11-06T12:24:56,663][INFO ][logstash.modules.scaffold] Initializing module {:module_name=>"fb_apache", :directory=>"/usr/share/logstash/modules/fb_apache/configuration"}
[2018-11-06T12:24:56,664][INFO ][logstash.modules.scaffold] Initializing module {:module_name=>"netflow", :directory=>"/usr/share/logstash/modules/netflow/configuration"}

vim /etc/fstab

fdesc   /dev/fd      fdescfs       rw    0    0
proc    /proc        procfs        rw    0    0

mount -a

[salt.utils.process:754 ][ERROR   ][5542] An un-handled exception from the multiprocessing process 'SignalHandlingMultiprocessingProcess-1:59' was caught:
Traceback (most recent call last):
  File "/usr/local/lib/python3.5/dist-packages/salt/utils/process.py", line 747, in _run
    return self._original_run()
[...]
  File "/usr/lib/python3.5/asyncio/base_events.py", line 411, in run_forever
    'Cannot run the event loop while another loop is running')
RuntimeError: Cannot run the event loop while another loop is running

pip3 uninstall tornado
pip3 install tornado==4.5.3

vim /usr/local/etc/elasticsearch/elasticsearch.yml:

xpack.reporting.enabled: False

No up-and-running loopback addresses found, got [name:lo1 (lo1)]

/usr/local/etc/elasticsearch/elasticsearch.yml:

network.host: 10.10.10.2

Shared object "libdl.so.1" not found 

freebsd-update -upgrade -r 11.2-RELEASE
reboot
freebsd-update install
pkg update && pkg upgrade

pw: user 'username' disappeared during update

/usr/sbin/pwd_mkdb -p /etc/master.passwd