- Home
- Container Engines
- AppJail
On the recordRead 9 Oct 202621 facts
AppJail
On the record
- Application deployment
- Makejail files automate jail creation by generating an InitScript and a BuildScript.appjail.readthedocs.io · read 9 Oct 2026
- Audience
- The project says it aims to simplify jail workflows for system administrators and developers.appjail.readthedocs.io · read 9 Oct 2026
- Experimental feature
- TinyJails are described as experimental stripped-down jails intended to be useful for distribution.appjail.readthedocs.io · read 9 Oct 2026
- Installation
- AppJail can be installed from source, as the sysutils/appjail-devel port, or as the sysutils/appjail package.appjail.readthedocs.io · read 9 Oct 2026
- Intended users
- The project says its goal is to simplify jail workflows for sysadmins and developers.appjail.readthedocs.io · read 9 Oct 2026
- Jail features
- It supports thin and thick jails, jail dependencies, startup ordering, and parallel startup of healthcheckers, jails, and NAT.appjail.readthedocs.io · read 9 Oct 2026
- Language
- AppJail is written in POSIX shell and C.appjail.readthedocs.io · read 9 Oct 2026
- Linux jails
- Linux distributions can run in jails for isolated applications unavailable in the FreeBSD ports collection, and this method requires debootstrap.appjail.readthedocs.io · read 9 Oct 2026
- Monitoring
- Healthcheckers can monitor a jail, its services, or other targets the user specifies.appjail.readthedocs.io · read 9 Oct 2026
- Networking
- Features include NAT, port forwarding, IPv4 and IPv6, virtual networks, bridges, VNET, DHCP, and SLAAC.appjail.readthedocs.io · read 9 Oct 2026
- Notable limitation
- TinyJails are identified as experimental, and raw-image jail backups require ZFS.appjail.readthedocs.io · read 9 Oct 2026
- OCI compatibility
- AppJail supports deploying OCI-compatible container images in environments such as FreeBSD jails.appjail.readthedocs.io · read 9 Oct 2026
- OCI integration
- AppJail supports deploying OCI-compatible containers into FreeBSD jails; its OCI command requires buildah and jq.appjail.readthedocs.io · read 9 Oct 2026
- Purpose
- AppJail is an open-source BSD-3 licensed framework for creating isolated, portable environments using FreeBSD jails.appjail.readthedocs.io · read 9 Oct 2026
- Secrets
- AppJail documents encrypted secrets on disk and unencrypted secrets in a non-swap-backed in-memory filesystem, mounted read-only for jails by the recommended option.appjail.readthedocs.io · read 9 Oct 2026
- Secrets limit
- The default in-memory filesystem size for secrets is 32 MiB, and the documentation advises increasing it for larger needs or using disk encryption for larger blobs.appjail.readthedocs.io · read 9 Oct 2026
- Storage and limits
- It supports UFS, ZFS, and RACCT/RCTL resource limits.appjail.readthedocs.io · read 9 Oct 2026
- Storage and networking
- Documented capabilities include UFS and ZFS, NAT, port forwarding, IPv4 and IPv6, virtual networks, bridges, and VNET.appjail.readthedocs.io · read 9 Oct 2026
