FreeBSD introduced its container, OS-level virtualization primitive in 1999 in the form of a security-oriented isolation framework and subsystem called Jails. Similar to OvenVZ Containers in 2005, Solaris Zones, LXC, Docker and other implementations, FreeBSD Jails allow isolation of applications or entire stacks with their own processes, filesystems and users, whilst using the same host operating system kernel.

Out of the box, FreeBSD provides:

• jail command line utility
• jail.conf: configuration file for jails
• rc.conf integration for jail management

These third-party tools aim to simplify and speed up the process of creating and managing FreeBSD jail-based containers on individual hosts, and many include additional support and integration for FreeBSD features such as bhyve virtualization, ZFS, Virtual Networks (VNET), Templating, Import/Export among others.

Command-line (shell) tool and automation framework for jail-based containers.

Released: 2018 ¹⁾

Supports:

• FreeBSD Features: ZFS, VNET
• Other Features: Template Creation, Import, Export
• Has a container / template registry

• BastilleBSD Homepage
• Bastille Port/Package: sysutils/bastille

Command-line (shell) tool for jail-based containers.

Released: 2005 ²⁾

Supports:

• FreeBSD Features: ZFS, VNET (via manual scripting)
• Other Features: Template Creation, Import, Export

• ezjail Homepage
• ezjail Port/Package: sysutils/ezjail

Command-line (Python, originally shell) tool for jail-based containers.

Released: ~2016 ³⁾

Supports:

• FreeBSD Features: ZFS (required), VNET
• Other Features: Template Creation, Import, Export

• iocage Homepage
• iocage Port/Package: sysutils/iocage

Re-implementation (Python) of iocage.

Released: Unknown, but ~2017 ⁴⁾

• ioc GitHub Repository
• ioc Port/Package:sysutils/ioc

Fork of original (shell) iocage

Released: ~2016 (“v2.0.0”) ⁵⁾

• iocell GitHub Repository
• ioc Port/Package: sysutils/iocell

Released: 2018 ⁶⁾

Command-line (shell) tool for jail-based containers.

• pot GitHub Repository
• pot Port/Package: sysutils/pot

Supports:

• FreeBSD Features: ZFS, pf, rctl.
• Orchestration with HashiCorp Nomad ⁷⁾

Command-line and TUI (shell) tool for jail-based containers.

Released: ~2013 ⁸⁾

Supports:

• FreeBSD Features: ZFS, VNET, bhyve, Xen
• Other Features: Templates and Profiles

• cbsd homepage
• cbsd Port/Package: sysutils/cbsd

None of the above orchestration tools have a “run a plain vanilla linux inside the container” feature, but the start/stop/templating feature of them does not prevent a manually created plain-vanilla-linux-jail.

The container tools above can be used as a base for multi-host orchestration, by exporting containers from one host, and either moving the container to another host, or by utilising shared storage (eg: SAN) or ZFS to switch container datasets from one host to another and importing it on the target host.

Additionally the following FreeBSD container orchestration tools are available:

• HashiCorp Nomad (jail-task driver)
• Nomad Port/Package: sysutils/nomad

XXX: add some FreeBSD derived distributions which have their focus (not only) on container virtualisation.

• CloneOS - WebUI for bhyve, jails, xen, …