Made changes to iocage docs. Came from ticket48768. (iocage#663)

* Made changes to iocage docs. Came from ticket48768.

* Updated with regard to feedback.

* Updated with regard to feedback.

Author: a-stjohn

doc/Makefile

@@ -3,7 +3,7 @@
 
 # You can set these variables from the command line.
 SPHINXOPTS    =
-SPHINXBUILD   = sphinx-build
+SPHINXBUILD   = sphinx-build-3.6
 PAPER         =
 BUILDDIR      = build
 

doc/build/doctrees/advanced-use.doctree

@@ -127,6 +127,11 @@
 <p>Make sure <strong class="command">iocage_enable=&quot;YES&quot;</strong> is set in <code class="file docutils literal"><span class="pre">/etc/rc.conf</span></code>.</p>
 <p>To enable a jail to auto-boot during a system boot, simply run:</p>
 <p><code class="samp docutils literal"><span class="pre">#</span> <span class="pre">iocage</span> <span class="pre">set</span> <span class="pre">boot=on</span> <span class="pre">UUID|NAME</span></code></p>
+<div class="admonition note">
+<p class="first admonition-title">Note</p>
+<p class="last">Setting <strong class="command">boot=on</strong> during jail creation starts the
+jail after the jail is created.</p>
+</div>
 <div class="section" id="boot-priority">
 <span id="index-7"></span><span id="id7"></span><h3>Boot Priority<a class="headerlink" href="#boot-priority" title="Permalink to this headline">¶</a></h3>
 <p>Boot order can be specified by setting the priority value:</p>

doc/build/doctrees/basic-use.doctree

@@ -120,6 +120,9 @@ To enable a jail to auto-boot during a system boot, simply run:
 
 :samp:`# iocage set boot=on UUID|NAME`
 
+.. note:: Setting :command:`boot=on` during jail creation starts the
+   jail after the jail is created.
+
 .. index:: Boot Priority
 .. _Boot Priority:
 

doc/build/doctrees/best-practices.doctree

@@ -74,7 +74,7 @@
 .Op Fl U | -jail_user Ar NAME
 .Op Fl u | -host_user Ar NAME
 .Ar UUID | NAME
-.Cm COMMAND Op Ar ARGS
+.Cm -- COMMAND Op Ar ARGS
 .\" == EXPORT ==
 .Nm
 .Cm export
@@ -498,15 +498,17 @@ UUID/NAME wrapper for
 After invoking
 .Cm exec ,
 specify the jail, any commands to run inside that jail, and any
-arguments for those commands. 
+arguments for those commands.
 .Xr jexec
-also runs commands similar to 
+also runs commands similar to
 .Nm .
 When using
 .Xr jexec
 use the JID instead of the jail name.
-For more info see the manual page for 
+For more info see the manual page for
 .Xr jexec .
+Use -- in front of the specified command to prevent iocage from parsing
+them.
 .Pp
 Options:
 .Bl -tag -width "[-u | --host_user NAME]"
@@ -984,8 +986,6 @@ Stop the jail identified by the shortened UUID.
 Runs
 .Cm freebsd-update
 to update the specified jail to the latest patch level.
-A backup snapshot is automatically created to provide a rollback
-option.
 .Pp
 Example:
 .Pp
@@ -996,6 +996,7 @@ Example:
 Runs
 .Cm freebsd-update
 to upgrade a jail RELEASE to the specified RELEASE.
+A backup snapshot is automatically created to provide a rollback option.
 .Pp
 Options:
 .Bl -tag -width "[-r | --release RELEASE]"
@@ -1605,6 +1606,18 @@ Default: 0
 .Pp
 Source:
 .Xr jail 8
+.It Pf allow_tun= Op 0 | 1
+Unhides tun devices for the jail with an individual devfsruleset.
+Allows the creation of tuns in the jail.
+.Pp
+Default: 0
+.It Pf allow_mlock= Op 0 | 1
+Enables running services that require mlock() in a jail.
+.Pp
+Default: 0
+.Pp
+Source:
+.Xr mlock 2
 .It host_hostuuid=UUID
 .Pp
 Default: UUID
@@ -1804,6 +1817,11 @@ Default: none
 .Pp
 Source:
 .Xr jail(8)
+.It Pf vnet_default_interface= Op none | Ar INTERFACE
+Default network interface used for the VNET bridge interface in the jail.
+Only takes effect when VNET is set.
+.Pp
+Default: none
 .El
 .Sh EXAMPLES
 Set up
@@ -1856,9 +1874,7 @@ Also see
 for how traffic is handled.
 Basically, bridges behave like a network switch.
 .Pp
-The PF firewall is not supported inside VNET jails as of July 2014.
-PF can be enabled for the host.
-IPFW is fully supported inside a VNET jail.
+IPFW and PF are fully supported inside a VNET jail.
 .Pp
 The actual jail name in the
 .Xr jls 8