X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?a=blobdiff_plain;f=man%2Fsystemd-nspawn.xml;h=c95a7c0e9a5148600a1adf3e0a2340190b142a42;hb=49888ca9ef9cac69bfc9b6e30e4f8e3376dcae03;hp=bec233c1ca9eb9c056df7dc72a385483b3de8a16;hpb=f4889f656b477887b02caa5e9d27387309c75a87;p=elogind.git
diff --git a/man/systemd-nspawn.xml b/man/systemd-nspawn.xml
index bec233c1c..c95a7c0e9 100644
--- a/man/systemd-nspawn.xml
+++ b/man/systemd-nspawn.xml
@@ -248,6 +248,27 @@
+
+
+
+
+ Sets the mandatory
+ access control (MAC/SELinux) file
+ label to be used by virtual API file
+ systems in the container.
+
+
+
+
+
+
+
+ Sets the mandatory
+ access control (MAC/SELinux) label to be used by
+ processes in the container.
+
+
+
@@ -395,6 +416,18 @@
more than once.
+
+
+
+
+ Turns off any status
+ output by the tool itself. When this
+ switch is used, then the only output
+ by nspawn will be the console output
+ of the container OS
+ itself.
+
+
@@ -456,6 +489,14 @@
btrfs snapshot.
+
+ Example 6
+
+ # chcon system_u:object_r:svirt_sandbox_file_t:s0:c0,c1 -R /srv/container
+# systemd-nspawn -L system_u:object_r:svirt_sandbox_file_t:s0:c0,c1 -Z system_u:system_r:svirt_lxc_net_t:s0:c0,c1 -D /srv/container /bin/sh
+
+ This runs a container with SELinux sandbox labels.
+ Exit status