This document describes how to set up a FreeBSD jail to host a WordPress site using Nginx and PHP-FPM. It includes steps for creating the jail using ZFS, installing a FreeBSD base system, configuring network interfaces and jail, installing Nginx, PHP-FPM, MySQL, and WordPress, and configuring the web server and database. The host system is configured to proxy and route requests to the jail using Nginx and PF.

1. ÁT|
t©
wordpress
„ l•
hackartist,
DarkKye
Jail „
Ý1
ZFS Ý1
GuestOS
Ý1
Jail
X½$
$¸Ìl
$
Jail D¤
ÄTx $
)T½ $
Nginx/wordpress
„ l•
(¤À $X
php-fpm
$
mysql ¬
wordpress
$X
nginx $
ÁT| t© wordpress „ l•
hackartist, DarkKye
th!nkh@ck
September 4, 2014

2. ÁT|
t©
wordpress
„ l•
hackartist,
DarkKye
Jail „
Ý1
ZFS Ý1
GuestOS
Ý1
Jail
X½$
$¸Ìl
$
Jail D¤
ÄTx $
)T½ $
Nginx/wordpress
„ l•
(¤À $X
php-fpm
$
mysql ¬
wordpress
$X
nginx $
1 Jail „ Ý1
ZFS Ý1
GuestOS Ý1
2 Jail X½$
$¸Ìl $
Jail D¤
ÄTx $
)T½ $
3 Nginx/wordpress „ l•
(¤À $X
php-fpm $
mysql ¬
wordpress $X
nginx $

3. ÁT|
t©
wordpress
„ l•
hackartist,
DarkKye
Jail „
Ý1
ZFS Ý1
GuestOS
Ý1
Jail
X½$
$¸Ìl
$
Jail D¤
ÄTx $
)T½ $
Nginx/wordpress
„ l•
(¤À $X
php-fpm
$
mysql ¬
wordpress
$X
nginx $
ZFS Ý1
¬ „X½t FreeBSDÐ ZFS ´ ˆ0L8Ð ZFS| ø ˆL.
ZFS| ¬©Xt Ĭ 0¥t Dü ©th(¹ˆ ¤Å÷)
ZFS Ý1
zfs create zroot/jails/va-jail
zroot : zpoolX t„
jails : zroot D˜Ð ˆ” zfsX t„
va-jail : Ý1XàX” ZFSX t„

4. ÁT|
t©
wordpress
„ l•
hackartist,
DarkKye
Jail „
Ý1
ZFS Ý1
GuestOS
Ý1
Jail
X½$
$¸Ìl
$
Jail D¤
ÄTx $
)T½ $
Nginx/wordpress
„ l•
(¤À $X
php-fpm
$
mysql ¬
wordpress
$X
nginx $
GuestOS Ý1
FreeBSD 10.0 base

5. | ä´Ü
wget
ftp://ftp.freebsd.org/pub/FreeBSD/releases/amd64/10.0-RELEASE/base.txz
wget
ftp://ftp.freebsd.org/pub/FreeBSD/releases/amd64/10.0-RELEASE/lib32.txz
Base

6. | U•t´ $X
tar -JxvC /jails/jail-server-name/ -f base.txz
tar -JxvC /jails/jail-server-name/ -f lib32.txz

7. ÁT|
t©
wordpress
„ l•
hackartist,
DarkKye
Jail „
Ý1
ZFS Ý1
GuestOS
Ý1
Jail
X½$
$¸Ìl
$
Jail D¤
ÄTx $
)T½ $
Nginx/wordpress
„ l•
(¤À $X
php-fpm
$
mysql ¬
wordpress
$X
nginx $
$¸Ìl $
Ù$ü Ù$t ˆL
Ù$@ ´´ ¬€ LÈä äÜ $D t|h
ifcon

8. g Ù$
ifcon

9. g lo1 create
ifcon

10. g lo1 inet 10.0.0.2 netmask 255.255.255.0
ifcon

11. g lo1 inet 10.0.0.254 netmask 255.255.255.0 alias0
Ù$@ ´´ ¬€t Ù $t (
/etc/rc.conf $
cloned interfaces=lo1
ifcon

12. g lo1=inet 10.0.0.2 netmask 255.255.255.0
ifcon

13. g lo1 alias0=inet 10.0.0.254 netmask 255.255.255.0