X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=man%2Fsystemd-nspawn.xml;h=1bc61e83a76b048e3f27582a30fc30e4aed65fbc;hp=6a01ffd450aff17b573633131960762212205160;hb=77b6e19458f37cfde127ec6aa9494c0ac45ad890;hpb=e670b166a08b7c1031a9e7d7675fa9a29c3e19c9
diff --git a/man/systemd-nspawn.xml b/man/systemd-nspawn.xml
index 6a01ffd45..1bc61e83a 100644
--- a/man/systemd-nspawn.xml
+++ b/man/systemd-nspawn.xml
@@ -49,7 +49,17 @@
- systemd-nspawn OPTIONSCOMMANDARGS
+ systemd-nspawn
+ OPTIONS
+ COMMAND
+ ARGS
+
+
+
+ systemd-nspawn
+ -b
+ OPTIONS
+ ARGS
@@ -114,21 +124,52 @@
see each other. The PID namespace separation of the
two containers is complete and the containers will
share very few runtime objects except for the
- underlying file system.
+ underlying file system. It is however possible to
+ enter an existing container, see
+ Example 4 below.
+
systemd-nspawn implements the
Container
Interface specification.
+
+ As a safety check
+ systemd-nspawn will verify the
+ existance of /etc/os-release in
+ the container tree before starting the container (see
+ os-release5). It
+ might be necessary to add this file to the container
+ tree manually if the OS of the container is too old to
+ contain this file out-of-the-box.
+
+
+
+ Incompatibility with Auditing
+
+ Note that the kernel auditing subsystem is
+ currently broken when used together with
+ containers. We hence recommend turning it off entirely
+ by booting with audit=0 on the
+ kernel command line, or by turning it off at kernel
+ build time. If auditing is enabled in the kernel
+ operating systems booted in an nspawn container might
+ refuse log-in attempts.Options
- If no arguments are passed the container is set
- up and a shell started in it, otherwise the passed
- command and arguments are executed in it. The
- following options are understood:
+ If option is specified, the
+ arguments are used as arguments for the init
+ binary. Otherwise, COMMAND
+ specifies the program to launch in the container, and
+ the remaining arguments are used as arguments for this
+ program. If is not used and no
+ arguments are specifed, a shell is launched in the
+ container.
+
+ The following options are understood:
@@ -164,7 +205,10 @@
Automatically search
for an init binary and invoke it
instead of a shell or a user supplied
- program.
+ program. If this option is used, arguments
+ specified on the command line are used
+ as arguments for the init binary.
+
@@ -180,6 +224,21 @@
+
+
+
+
+ Sets the machine name
+ for this container. This name may be
+ used to identify this container on the
+ host, and is used to initialize the
+ container's hostname (which the
+ container can choose to override,
+ however). If not specified the last
+ component of the root directory of the
+ container is used.
+
+
@@ -292,6 +351,26 @@
Equivalent to
.
+
+
+
+
+
+ Bind mount a file or
+ directory from the host into the
+ container. Either takes a path
+ argument -- in which case the
+ specified path will be mounted from
+ the host to the same path in the
+ container --, or a colon-separated
+ pair of paths -- in which case the
+ first specified path is the source in
+ the host, and the second path is the
+ destination in the container. The
+ option
+ creates read-only bind
+ mount.
+
@@ -303,7 +382,7 @@
# systemd-nspawn -bD /srv/mycontainer
This installs a minimal Fedora distribution into
- the directory /srv/mycontainer/ and
+ the directory /srv/mycontainer/ and
then boots an OS in a namespace container in
it.
@@ -318,7 +397,6 @@
distribution into the directory
~/debian-tree/ and then spawns a
shell in a namespace container in it.
-
@@ -332,6 +410,24 @@
boots an OS in a namespace container in it.
+
+ Example 4
+
+ To enter the container, PID of one of the
+ processes sharing the new namespaces must be used.
+ systemd-nspawn prints the PID
+ (as viewed from the outside) of the launched process,
+ and it can be used to enter the container.
+
+ # nsenter -m -u -i -n -p -t $PID
+
+ nsenter1
+ is part of
+ util-linux.
+ Kernel support for entering namespaces was added in
+ Linux 3.8.
+
+
Exit status
@@ -344,6 +440,7 @@
systemd1,
chroot1,
+ unshare1,
yum8,
debootstrap8,
pacman8