X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?a=blobdiff_plain;f=man%2Fsystemd.socket.xml;h=7c10c5858bb813df63b30ca7418edbea13651342;hb=1405bef3f1f204fdee001e1d002a8e91a56ef0d3;hp=0d5652b8347d16fd517f1e884bb4aa65c48093b3;hpb=74d005783e355acc784d123024e33bbb66ef9ef1;p=elogind.git diff --git a/man/systemd.socket.xml b/man/systemd.socket.xml index 0d5652b83..7c10c5858 100644 --- a/man/systemd.socket.xml +++ b/man/systemd.socket.xml @@ -55,7 +55,7 @@ Description A unit configuration file whose name ends in - .socket encodes information about + .socket encodes information about an IPC or network socket or a file system FIFO controlled and supervised by systemd, for socket-based activation. @@ -77,9 +77,12 @@ and commands are executed in, and in - systemd.kill5 - which define the way the processes are - terminated. + systemd.kill5, + which define the way the processes are terminated, and + in + systemd.resource-control5, + which configure resource control settings for the + processes of the socket. For each socket file a matching service file (see @@ -93,7 +96,7 @@ foo.socket needs a matching service foo.service if is set. If - is set a service template + is set, a service template file foo@.service must exist from which services are instantiated for each incoming connection. @@ -156,20 +159,22 @@ can be written in various formats: If the address starts with a - slash (/), it is read as file system + slash (/), it is read as file system socket in the AF_UNIX socket family. - If the address starts with an - at symbol (@) it is read as abstract - namespace socket in the AF_UNIX - family. The @ is replaced with a NUL - character before binding. For details - see + If the address starts with an at + symbol (@), it is read as abstract + namespace socket in the + AF_UNIX + family. The @ is + replaced with a + NUL character + before binding. For details, see unix7. If the address string is a - single number it is read as port + single number, it is read as port number to listen on via IPv6. Depending on the value of BindIPv6Only= (see below) this @@ -179,13 +184,13 @@ If the address string is a - string in the format v.w.x.y:z it is + string in the format v.w.x.y:z, it is read as IPv4 specifier for listening on an address v.w.x.y on a port z. If the address string is a - string in the format [x]:y it is read + string in the format [x]:y, it is read as IPv6 address x on a port y. Note that this might make the service available via IPv4, too, depending on @@ -298,7 +303,7 @@ , they will be accessible via IPv6 only. If (which is the - default, surprise!) the system wide + default, surprise!), the system wide default setting is used, as controlled by /proc/sys/net/ipv6/bindv6only, @@ -325,7 +330,7 @@ BindToDevice= Specifies a network interface name to bind this socket - to. If set traffic will only be + to. If set, traffic will only be accepted from the specified network interfaces. This controls the SO_BINDTODEVICE socket option (see @@ -387,8 +392,8 @@ close2 on the received socket before exiting. However, it must not unlink - the socket from a filesystem. It - should note invoke + the socket from a file system. It + should not invoke shutdown2 on sockets it got with Accept=false, but @@ -412,7 +417,7 @@ are coming in, they will be refused until at least one existing connection is terminated. This setting has no - effect for sockets configured with + effect on sockets configured with or datagram sockets. Defaults to 64. @@ -502,6 +507,17 @@ for details. + + ReusePort= + Takes a boolean + value. If true, allows multiple bind2s + to this TCP or UDP port. This + controls the SO_REUSEPORT socket + option. See + socket7 + for details. + + SmackLabel= SmackLabelIPIn= @@ -516,7 +532,7 @@ respectively, i.e. the security label of the FIFO, or the security label for the incoming or outgoing connections - of the socket, respectively. See + of the socket, respectively. See Smack.txt for details. @@ -527,7 +543,7 @@ Takes an integer value. Controls the pipe buffer size of FIFOs configured in this socket - unit. See + unit. See fcntl2 for details. @@ -598,7 +614,7 @@ socket option, which allows AF_UNIX sockets to receive the security context of the sending process in an - ancillary message. Defaults to + ancillary message. Defaults to . @@ -622,7 +638,7 @@ before or after the listening sockets/FIFOs are created and bound, respectively. The first token of the command - line must be an absolute file name, + line must be an absolute filename, then followed by arguments for the process. Multiple command lines may be specified following the same scheme as @@ -657,14 +673,14 @@ will be considered failed and be shut down again. All commands still running, will be terminated forcibly via - SIGTERM, and after another delay of - this time with SIGKILL. (See + SIGTERM, and after another delay of + this time with SIGKILL. (See in systemd.kill5.) Takes a unit-less value in seconds, or a time span value such as "5min 20s". Pass 0 to disable the timeout - logic. Defaults to - 90s. + logic. Defaults to TimeoutStartSec= from the + manager configuration file. @@ -696,12 +712,13 @@ systemd.unit5, systemd.exec5, systemd.kill5, + systemd.resource-control5, systemd.service5, systemd.directives7 - For more extensive descriptions see the "Systemd for Developers" series: + For more extensive descriptions see the "systemd for Developers" series: Socket Activation, Socket Activation, part II, Converting inetd Services,