Linux Tip - Understanding Chroot - Episode 2 - Rob Braxman Tech
video description
Date: 2022-03-20
Related videos
Comments and reviews: 7
Scott
Thank you so much! Definitely the best intro tutorial I've seen about chroot. I've watched it twice, and now I understand how to set up SFTP (or even SSH) access for users, but not give those users access to the entire system. BTW - I'm using arch, and I had to also copy across my /usr directory. The size of the jail becomes quite large (relatively speaking):
$ du -sh. /-
338M. /bin
4. 3G. /lib
4. 3G. /lib64
7. 5G. /usr
Probably because I have a lot of things installed.
reply
Thank you so much! Definitely the best intro tutorial I've seen about chroot. I've watched it twice, and now I understand how to set up SFTP (or even SSH) access for users, but not give those users access to the entire system. BTW - I'm using arch, and I had to also copy across my /usr directory. The size of the jail becomes quite large (relatively speaking):
$ du -sh. /-
338M. /bin
4. 3G. /lib
4. 3G. /lib64
7. 5G. /usr
Probably because I have a lot of things installed.
reply
Chacko
Hey Rob,
Great stuff. Just wanted to check can we restrict a new user to be in the jailed environment and how would i do that? also is this like a virtual environment where i can play with stuff like installing stuff and if doesn't work out i can delete the folder and everything is gone? Its like a container from what i understand right but with using the same kernel as we are using on our system.
Looking forward for your thoughts on this.
reply
Hey Rob,
Great stuff. Just wanted to check can we restrict a new user to be in the jailed environment and how would i do that? also is this like a virtual environment where i can play with stuff like installing stuff and if doesn't work out i can delete the folder and everything is gone? Its like a container from what i understand right but with using the same kernel as we are using on our system.
Looking forward for your thoughts on this.
reply
Njul
4: 50 You dont' need to copy the /bin /lib /lib64 directories.
You can either mount --bind or cp -alf (to create hard links since symbolic links won't work.
# mount --bind /bin /chroot/bin
# mount --bind /lib /chroot/lib
or
# cp -alf /bin /chroot/bin
# cp -alf /lib /chroot/lib
reply
4: 50 You dont' need to copy the /bin /lib /lib64 directories.
You can either mount --bind or cp -alf (to create hard links since symbolic links won't work.
# mount --bind /bin /chroot/bin
# mount --bind /lib /chroot/lib
or
# cp -alf /bin /chroot/bin
# cp -alf /lib /chroot/lib
reply
Bud
I don't have a source for this off the top of my head, but I've heard youtubers say more than once that a numbered series generally performed worse than a series without.
They say just -SeriesName- + -Topic- will work better.
reply
I don't have a source for this off the top of my head, but I've heard youtubers say more than once that a numbered series generally performed worse than a series without.
They say just -SeriesName- + -Topic- will work better.
reply
Chris
was having a hard time understanding the topic when I was reading about it else where. Your video was very clear and helped me understand chroot way better. Thank you for your video!
reply
was having a hard time understanding the topic when I was reading about it else where. Your video was very clear and helped me understand chroot way better. Thank you for your video!
reply
Ronny
Thanks! chroot is a very interesting! If I remember correctly, the concept is borrowed from FreeBSD jails. a powerful and logical implementation on secure containers.
reply
Thanks! chroot is a very interesting! If I remember correctly, the concept is borrowed from FreeBSD jails. a powerful and logical implementation on secure containers.
reply
Atziluth
I'm using WSL. I got -/bin/bash: error while loading shared libraries: libreadline. so. 8: cannot open shared object file: No such file or directory. -
reply
I'm using WSL. I got -/bin/bash: error while loading shared libraries: libreadline. so. 8: cannot open shared object file: No such file or directory. -
reply
Add a review, comment
Other channel videos
