Happy Holidays 2021
Pre-releaseBastille 0.9.20211225 "Happy Holidays"
Happy Holidays! Bastille development continues with five months of new features and fixes! These release notes outline the changes you can expect to find in our latest version.
More Linux Improvements
This release adds additional experimental support for Debian 11 "Bullseye", Debian 10 "Buster", Debian 9 "Stretch", Ubuntu 18.04 "Bionic" and Ubuntu 20.04 "Focal". Linux support is maturing thanks to feedback and contributions from the community!
What's more, the CMD
and PKG
sub-commands support these Linux releases!
These changes open up initial support for using templates with Linux containers. Currently limited to CMD
and PKG
only.
Note: this release updates the bastille.conf
. If you are upgrading please merge config changes.
Debian releases
Bullseye
bastille bootstrap bullseye
bastille create -L debian11 bullseye 10.17.89.11
Buster
bastille bootstrap buster
bastille create -L debian10 buster 10.17.89.10
Stretch
bastille bootstrap stretch
bastille create -L debian9 stretch 10.17.89.9
Ubuntu releases
Bionic
bastille bootstrap bionic
bastille create -L ubuntu18 bionic 10.17.89.18
Focal
bastille bootstrap focal
bastille create -L ubuntu20 focal 10.17.89.20
Improvements have also been made to simplify future Linux additions to the codebase.
Linux support for PKG
The pkg
sub-command now supports Ubuntu & Debian containers by using apt
transparently inside the container.
bastille pkg debian11 upgrade
Linux support for CMD
The cmd
sub-command now supports Ubuntu & Debian containers.
bastille cmd debian11 ps -ef
New PKG option
The pkg
sub-command now optionally supports using the hosts package manager instead of the container pkg binary.
bastille pkg -H alcatraz upgrade
bastille pkg --host alcatraz install htop
Exit Codes
CMD now returns exit code for individual jails and ALL jails.
If CMD is executed against ALL jails and any return an error the command will return exit code 1. All jails need to return 0 for the command to return 0.
Timezone settings
Bastille will now use the timezone configured on the host unless otherwise defined in the bastille.conf.
VNET Improvements
This release adds more options to VNET containers including descriptions and usage of existing bridge interfaces.
VNET Bridge
The create
command now supports a -B
option to attach a VNET container to an existing bridge.
bastille create -B alcatraz 13.0-RELEASE 192.168.1.5/24 bridge0
VNET descriptions
VNET interfaces will now be given an interface description including the container name. This will help map containers with interfaces in VNET configurations.
Template Improvements
recursive verify
When using bastille verify
against a template that contains an INCLUDE
statement Bastille will now recursively verify every template in the chain.
bastille update supports templates
You can now easily update templates using bastille update ...
. The syntax supports multiple options as described here:
Update all templates (using git)
bastille update TEMPLATES
Update the bastillebsd-templates/nginx template only
bastille update bastillebsd-templates/nginx
What's Changed
- Fix creation of Linux jails by @cynix in #422
- Fix minor typo in README by @yaazkal in #425
- Refactor: Creates Linux jails bootstrap functions by @yaazkal in #426
- Adds: Debian 9 (Stretch) as a release for linux jails by @yaazkal in #427
- Added logic for setting ipv6_defaultrouter for vnet template by @FloGatt in #429
- Adds: Debian 10 (Buster) as a release for linux jails by @yaazkal in #430
- bastille cmd exit code not respected #272 by @yerrysherry in #303
- improve NO_COLOR detection by @cedwards in #431
- fix overloaded variable in mount command by @cedwards in #432
- basic PKG support for ubuntu/debian containers by @cedwards in #433
- Sets require NETWORKING in the rc script by @yaazkal in #436
- Zfs support to docs by @Bennykillua in #453
- fix image path for zfs support screenshot by @cedwards in #454
- add zfs-support doc to toctree by @cedwards in #455
- minor fix for docs path by @cedwards in #456
- fixing issue with docs (conflict with docutils v0.18) by @cedwards in #457
- Added code and -B option to "create" to allow creating/managing jails attached to external bridge by @draga79 in #465
- Use the devfs_ruleset number from imported iocage jails by @robarnold in #461
- add recursive verify for includes in Bastillefile by @w4andy in #452
- Fix for issue #403 by @zilti in #442
- Fixed to update_fstab() in clone.sh by @frikilax in #446
- update vagrant to FreeBSD-13.0 and install git by @w4andy in #451
- [REF] bootsrap: Removes code duplication to prevent future errors by @yaazkal in #466
- Add a description to the host vnet interface by @robarnold in #459
- TEMPLATE.SH::ADDED:: ability to apply templates using a custom directory path by @frikilax in #445
- Use host's time zone by default for jails by @yaazkal in #467
- use full path when calling jls binary by @cedwards in #469
- hotfix for the VNET interface description patch by @cedwards in #471
- easy way to update templates by @w4andy in #450
- Extra validation for Linux jails, small changes by @JRGTH in #420
- add Debian 11 'bullseye' to Linux supported list by @cedwards in #473
- jls path fix + support using host package manager by @cedwards in #474
- change new PKG option from -P to -H by @cedwards in #475
- accidentally the jail name in run test by @cedwards in #476
New Contributors
- @FloGatt made their first contribution in #429
- @yerrysherry made their first contribution in #303
- @Bennykillua made their first contribution in #453
- @draga79 made their first contribution in #465
- @robarnold made their first contribution in #461
- @w4andy made their first contribution in #452
- @frikilax made their first contribution in #446
Full Changelog: 0.9.20210714...0.9.20211225