<![CDATA[A FreeBSD jail should be small.]]>A FreeBSD jail should be small. Installing Python into every jail just so your config management can run is the tail wagging the dog.

I wrote two tiny wrappers to plug cdist directly into jexec on the host.

The result? Full configuration management that asks for nothing but POSIX sh inside the jail itself. Zero daemons. Zero agents.

Link Preview Image
Automating FreeBSD Jails with cdist - Zero Dependencies Inside the Jail

cdist is refreshingly minimal - the target only needs POSIX sh, and the control machine speaks ssh. But cdist expects one ssh endpoint per host, and FreeBSD ...

favicon

Larvitz Blog (blog.hofstede.it)

My cdist-jexec connection plugin scripts: https://codeberg.org/Larvitz/jexec-cdist

]]>https://board.circlewithadot.net/topic/3cff42ac-eaaa-45ab-9241-abb90657b8e4/a-freebsd-jail-should-be-small.RSS for NodeThu, 30 Apr 2026 02:41:45 GMTSun, 12 Apr 2026 08:00:13 GMT60<![CDATA[Reply to A FreeBSD jail should be small. on Sun, 12 Apr 2026 08:41:20 GMT]]>@Larvitz I love this philosophy. Ansible gets pretty annoying cuz you need dependencies on the host for many things. Being able to “compile” to a common target like POSIX shell makes perfect sense.

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/ianthetechie/statuses/116390840246360807https://board.circlewithadot.net/post/https://fosstodon.org/users/ianthetechie/statuses/116390840246360807Sun, 12 Apr 2026 08:41:20 GMT<![CDATA[Reply to A FreeBSD jail should be small. on Sun, 12 Apr 2026 08:37:37 GMT]]>@Larvitz Amazing!

]]>https://board.circlewithadot.net/post/https://neander.social/users/marzlberger/statuses/116390825639980135https://board.circlewithadot.net/post/https://neander.social/users/marzlberger/statuses/116390825639980135Sun, 12 Apr 2026 08:37:37 GMT