Freebsd/appjail

@josephholsten/freebsd/appjailv2026.06.12.1· 1d agoMODELS

01README

AppJail jail lifecycle and inventory via SSH on FreeBSD — sync, makejail, ociRun, start, stop, destroy, jexec, logs

02Models1

@josephholsten/freebsd/appjail/jailv2026.06.12.1jail.ts

fn sync()

List all jails and write one resource per jail name

fn makejail(name: string, makejail: string, vars?: record, buildArgs?: record, options?: array, runtimeArgs?: array)

Create a jail from a Makejail source (appjail makejail). No timeout — image pulls can take time.

Argument	Type	Required	Description
name	string	yes	Jail name
makejail	string	yes	Makejail source — local path or fetch specifier (e.g. gh+owner/repo)
vars?	record	no	Variables passed as -V key=val
buildArgs?	record	no	Build arguments passed as -b key=val
options?	array	no	Options passed as -o option
runtimeArgs?	array	no	Arguments forwarded to the jail at runtime after --

fn start(name: string)

Start a stopped jail (appjail start)

Argument	Type	Required	Description
name	string	yes	Jail name

fn stop(name: string, force: boolean)

Stop a running jail (appjail stop)

Argument	Type	Required	Description
name	string	yes	Jail name
force	boolean	yes	Force-stop without running stop scripts

fn destroy(name: string, force: boolean)

Destroy a jail and remove its configuration (appjail jail destroy). Refuses if the jail is running unless force is set.

Argument	Type	Required	Description
name	string	yes	Jail name
force	boolean	yes	Destroy even if running (passes -f to appjail jail destroy)

fn ociRun(name: string, image: string, detach: boolean, user?: string, options?: array, env?: record)

Deploy an OCI container as a jail (appjail oci run). No timeout — image pulls can take time.

Argument	Type	Required	Description
name	string	yes	Jail name
image	string	yes	OCI image reference (e.g. ghcr.io/owner/app:latest)
detach	boolean	yes	Run in background (-d)
user?	string	no	User to run as (-u)
options?	array	no	Options passed as -o option (e.g. 'overwrite=force', 'virtualnet=:<random> default', 'nat', 'expose=80:80' — expose format is host_port:container_port)
env?	record	no	Environment variables passed as -e KEY=VALUE

fn logs(name: string, lines?: number)

Capture recent log output from a jail (appjail logs tail). Note: OCI jails using s6-log (e.g. daemonless.io images) write logs to /config/logs/... inside the jail — use jexec to read those instead.