X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=man%2Fsystemd-nspawn.xml;h=1bc61e83a76b048e3f27582a30fc30e4aed65fbc;hp=d9fb8998952846e1c7cb0b103680d83bfdc7b859;hb=77b6e19458f37cfde127ec6aa9494c0ac45ad890;hpb=f49fd1d57a429d4a05ac86352c017a845f8185b3 diff --git a/man/systemd-nspawn.xml b/man/systemd-nspawn.xml index d9fb89989..1bc61e83a 100644 --- a/man/systemd-nspawn.xml +++ b/man/systemd-nspawn.xml @@ -142,16 +142,19 @@ might be necessary to add this file to the container tree manually if the OS of the container is too old to contain this file out-of-the-box. + + + + Incompatibility with Auditing Note that the kernel auditing subsystem is currently broken when used together with containers. We hence recommend turning it off entirely - when using systemd-nspawn by - booting with audit=0 on the kernel - command line, or by turning it off at kernel build - time. If auditing is enabled in the kernel operating - systems booted in an nspawn container might refuse - log-in attempts. + by booting with audit=0 on the + kernel command line, or by turning it off at kernel + build time. If auditing is enabled in the kernel + operating systems booted in an nspawn container might + refuse log-in attempts.