Migrating Burningboard.net Mastodon Instance to a Multi-Jail FreeBSD Setup

[todsacerdoti]

https://blog.hofstede.it/migrating-burningboardnet-mastodon-instance-to-a-multi-jail-freebsd-setup/index.html

[zimpenfish]

I was going to say "the FediMeteo people probably have some good ideas there because it's what they do" except it's already right there in the acknowledgements (Stefano Marinelli => FediMeteo).

A good read - https://it-notes.dragas.net/2025/02/26/fedimeteo-how-a-tiny-...

[rokkamokka]

If I set this up i would just run every service on the same machine sans jails. Are there any practical benefits to doing it like this? The extra complexity buys some slight measure of security in case one service is exploited, I guess?

[t_tsonev → rokkamokka]

Isolation is certainly one big reason to use jails. You also get independent management of dependencies, and can optionally share the base system.

They're somewhat similar to how you'd use Docker containers on Linux, but have different approach to security and networking.

[Nikkau → rokkamokka]

If you use *BSD, you have to use jails, it's just law

[wink]

I was very confused because this does not seem related to WoltLab Burning Board and it's a Fedi server and not a forum.

[jmclnx]

Very nice, to me FreeBSD Jails is still the best of the breed.