X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=man%2Fsystemd-nspawn.xml;h=0a661c9257c035499867b6f929c82bd0d26e8154;hp=ffd707092c013d87553066f9ac46ff26a4cd2275;hb=bf175aafd20c9ef974709ef12c5acf836121af33;hpb=a42c8b54b1619078c02f5e439bd2564c6d0f901f diff --git a/man/systemd-nspawn.xml b/man/systemd-nspawn.xml index ffd707092..0a661c925 100644 --- a/man/systemd-nspawn.xml +++ b/man/systemd-nspawn.xml @@ -21,7 +21,8 @@ along with systemd; If not, see . --> - + systemd-nspawn @@ -158,21 +159,6 @@ The following options are understood: - - - - - Prints a short help - text and exits. - - - - - - Prints a version string - and exits. - - @@ -228,37 +214,6 @@ container is used. - - - - Make the container - part of the specified slice, instead - of the - machine.slice. - - - - - - - - Sets the SELinux - security context to be used to label - processes in the container. - - - - - - - - Sets the SELinux security - context to be used to label files in - the virtual API file systems in the - container. - - - @@ -270,17 +225,29 @@ + + + + Make the container + part of the specified slice, instead + of the default + machine.slice. + + + - Turn off networking in - the container. This makes all network - interfaces unavailable in the - container, with the exception of the - loopback device and those specified - with - . If - this option is specified the + Disconnect networking + of the container from the host. This + makes all network interfaces + unavailable in the container, with the + exception of the loopback device and + those specified with + + and configured with + . If + this option is specified, the CAP_NET_ADMIN capability will be added to the set of capabilities the container retains. The latter may be @@ -297,7 +264,7 @@ specified interface from the calling namespace and place it in the container. When the container - terminates it is moved back to the + terminates, it is moved back to the host namespace. Note that implies @@ -308,11 +275,59 @@ - + + + Create a virtual + Ethernet link between host and + container. The host side of the + Ethernet link will be available as a + network interface named after the + container's name (as specified with + ), prefixed + with ve-. The + container side of the the Ethernet + link will be named + host0. Note that + + implies + . + - Mount the root file - system read-only for the - container. + + + + Adds the host side of + the Ethernet link created with + to the + specified bridge. Note that + + implies + . If + this option is used the host side of + the Ethernet link will use the + vb- prefix instead + of ve-. + + + + + + + Sets the SELinux + security context to be used to label + processes in the container. + + + + + + + + Sets the SELinux security + context to be used to label files in + the virtual API file systems in the + container. + @@ -342,7 +357,7 @@ is retained if is specified. If the special value - all is passed all + all is passed, all capabilities are retained. @@ -405,6 +420,14 @@ . + + + + Mount the root file + system read-only for the + container. + + @@ -422,7 +445,7 @@ destination in the container. The option creates read-only bind - mount. + mounts. @@ -439,17 +462,6 @@ more than once. - - - - - Turns off any status - output by the tool itself. When this - switch is used, then the only output - by nspawn will be the console output - of the container OS itself. - - @@ -491,7 +503,7 @@ and shown by tools such as ps1. If the container does not run an init - system it is recommended to set this + system, it is recommended to set this option to no. Note that implies @@ -507,13 +519,13 @@ container in, simply register the service or scope unit systemd-nspawn has - been invoked in in + been invoked in with systemd-machined8. This has no effect if is used. This switch should be used if systemd-nspawn is - invoked from within an a service unit, + invoked from within a service unit, and the service unit's sole purpose is to run a single systemd-nspawn @@ -522,6 +534,38 @@ session. + + + + Control the + architecture ("personality") reported + by + uname2 + in the container. Currently, only + x86 and + x86-64 are + supported. This is useful when running + a 32bit container on a 64bit + host. If this setting is not used + the personality reported in the + container is the same as the one + reported on the + host. + + + + + + + Turns off any status + output by the tool itself. When this + switch is used, the only output + from nspawn will be the console output + of the container OS itself. + + + +