# Pastebin JuGSzyvZ
# /etc/jail.conf.d/jenkins.conf
# https://man.freebsd.org/jail.conf
# https://man.freebsd.org/jail

jenkins {
    host.hostname = 'jenkins';
    host.hostuuid = '9d5d9a0f-a219-5090-844a-e5d69e26c80c';

    meta.tags = "ci";

    path = '/jails/instances/14.2-RELEASE-amd64-amd64/jenkins';

    ip4.addr = 'lo1|100.64.24.38/32';
    ip6.addr = 'ztagim5o45dhe4c|fca2:927d:4de2:8e50:6c98::1826/128';


    exec.start = "/bin/sh /etc/rc";
    exec.stop = "/bin/sh /etc/rc.shutdown jail";
    exec.timeout = 5;
    stop.timeout = 300;

    # move additional dataset into jails if defined
    exec.created+="/sbin/zfs jail jenkins zroot/jailed/jenkins";
    exec.created+="test -c /jails/instances/14.2-RELEASE-amd64-amd64/jenkins/tmp || mount -t tmpfs tmpfs /jails/instances/14.2-RELEASE-amd6
4-amd64/jenkins/tmp";
    exec.release+="umount -f /jails/instances/14.2-RELEASE-amd64-amd64/jenkins/tmp";
    exec.release+="umount -f zroot/jailed/jenkins";
    exec.release+="umount -f /jails/instances/14.2-RELEASE-amd64-amd64/jenkins/dev/fd";
    exec.release+="umount -f /jails/instances/14.2-RELEASE-amd64-amd64/jenkins/dev";
    exec.release+="logger -t jails removed jenkins";

    exec.clean;
    mount.devfs;
    mount.fdescfs;
    persist;

    allow.raw_sockets;
    allow.reserved_ports;
    allow.sysvipc=1;
    allow.noset_hostname;
    children.max=0;
    sysvmsg=disable;
    sysvsem=disable;
    devfs_ruleset=4;
    enforce_statfs=1;
    securelevel=2;
    allow.mount.zfs;
    allow.mount;
}