[icecast] Placing Icecast in a chroot jail

Alan Silvester mascdman at shaw.ca
Thu Dec 19 08:16:57 UTC 2002



Hi, 

(Sorry for the long email)

As a bit of a learning exercise, I'm trying to place the icecast daemon
in a chroot jail.  I've been mostly sucessful: I can get icecast to
serve the default stream from its jail, however I can't get multiple
streams to work.

I think the problem is that icecast can't resolve addresses in the jail,
however I do have an etc/hosts file and resolv.conf inside the jail. 
When I start icecast outside of the jail the following is dumped to the
log file:
----------
[18/Dec/2002:23:37:18] [0:Main Thread] Icecast Version 1.3.12 Starting..
[18/Dec/2002:23:37:18] [0:Main Thread] Trying to fork
[18/Dec/2002:23:37:18] [0:Main Thread] Detached (pid: 10749)
[18/Dec/2002:23:37:18] [0:Main Thread] Starting main connection
handler...
[18/Dec/2002:23:37:18] [0:Main Thread] Listening on host 192.168.1.40...
[18/Dec/2002:23:37:18] [0:Main Thread] Listening on port 8000...
[18/Dec/2002:23:37:18] [0:Main Thread] Using 'phi.local' as
servername...
[18/Dec/2002:23:37:18] [0:Main Thread] Server limits: 900 clients, 900
clients per source, 10 sources, 5 admins
[18/Dec/2002:23:37:18] [0:Main Thread] WWW Admin interface accessible at
http://phi.local:8000/admin
----------

Inside the jail, I get this:
----------
[18/Dec/2002:23:50:41] [0:Main Thread] Icecast Version 1.3.12 Starting..
[18/Dec/2002:23:50:41] [0:Main Thread] Trying to fork
[18/Dec/2002:23:50:41] [0:Main Thread] Starting main connection
handler...
[18/Dec/2002:23:50:41] [0:Main Thread] WARNING: Resolving the server
name [phi.local] does not work!
[18/Dec/2002:23:50:41] [0:Main Thread] Listening on host 192.168.1.40...
[18/Dec/2002:23:50:41] [0:Main Thread] Listening on port 8000...
[18/Dec/2002:23:50:41] [0:Main Thread] Using 'phi.local' as
servername...
[18/Dec/2002:23:50:41] [0:Main Thread] Server limits: 900 clients, 900
clients per source, 10 sources, 5 admins
[18/Dec/2002:23:50:41] [0:Main Thread] WWW Admin interface accessible at
http://phi.local:8000/admin
----------

etc/hosts
----------
127.0.0.1	localhost.local	local
192.168.1.40	phi.local	phi
----------

etc/resolv.conf
----------
nameserver 192.168.1.254
search local
----------

icecast.conf
----------
location Canada
rp_email icecast at phi.local
server_url http://phi.local/

max_clients 900
max_clients_per_source 900
max_sources 10
max_admins 5
throttle 10.0

use_meta_data 0
streamurllock 0
streamtitletemplate %s
streamurl http://phi.local/
nametemplate %s
desctemplate %s

mount_fallback 0

encoder_password xxx
admin_password xxx
oper_password xxx

touch_freq 5

hostname 192.168.1.40
port 8000
server_name phi.local

force_servername 0

logfile icecast.log
accessfile access.log
usagefile usage.log
logfiledebuglevel 0
consoledebuglevel 0

reverse_lookups 1

console_mode 3

client_timeout 30

kick_clients 0

taticdir /usr/share/icecast/static
templatedir /usr/share/icecast/templates

logdir /var/log/icecast
stats_log stats.log
statshtml_log stats.html
stats_time 10

alias radiofri http://195.7.65.207:6903 

kick_relays 10

transparent_proxy 0

acl_policy 0
allow all 127.0.0.1
allow all 192.168.1.*
----------

Is there some file I'm missing that icecast needs? Is there something
wrong with my configuration?  Any help would be appreciated.

Thanks,
Alan Silvester

--- >8 ----
List archives:  http://www.xiph.org/archives/
icecast project homepage: http://www.icecast.org/
To unsubscribe from this list, send a message to 'icecast-request at xiph.org'
containing only the word 'unsubscribe' in the body.  No subject is needed.
Unsubscribe messages sent to the list will be ignored/filtered.



More information about the Icecast mailing list