Pr716

[msimerson]

• includes part of [hardening] base: no /etc/hosts from the host system; dns: install minimal /etc/hosts #716
• adds fallback (when no DNS) entries for basic svs: dns, syslog, bsd_cache
  • including IPv6 when present
• syslog: binds to IPv6 when present

Fixes closes #716

[Copilot]

Pull request overview

Hardens jail host configuration and adds IPv6 syslog support.

Changes:

• Stops copying the host’s /etc/hosts into the base jail.
• Adds minimal DNS, syslog, and BSD cache host entries.
• Configures syslogd to bind IPv6 when available and adds tests.

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
Changes.md	Documents host and syslog updates.
include/network.sh	Generates minimal jail host entries.
mail-toaster.sh	Installs entries into staged jails.
provision/base.sh	Stops copying the host’s hosts file.
provision/host.sh	Adds conditional IPv6 syslog binding.
test/mail-toaster.bats	Tests minimal hosts generation.
test/provision/host.bats	Tests syslog address-family flags.
test/provision/stubs/mail-toaster.sh	Adds the new provisioning stub.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.