# Host Validation

Use this file after making host-side changes.

## Canonical checks

```sh
sysctl net.inet.ip.forwarding
ifconfig warden0
service pf status
jls
zpool status
zdb -C zroot | grep ashift
```

## Interpretation

- forwarding off: host routing problem
- `warden0` missing: host bridge persistence problem
- `pf` stopped: NAT/filtering not active
- jail missing: not a host forwarding problem, go back to `warden-bootstrap`
- suspicious `ashift`: storage validation problem for database workloads
