summaryrefslogtreecommitdiff
path: root/man/systemd-nspawn.xml
Commit message (Collapse)AuthorAge
* remove non-login things from manAndy Wingo2015-04-08
|
* man: fix a bunch of linksZbigniew Jędrzejewski-Szmek2015-03-13
| | | | All hail linkchecker!
* nspawn: make kill signal to use for PID 1 configurableLennart Poettering2015-02-25
|
* nspawn: add support for --property= to set scope propertiesLennart Poettering2015-02-18
| | | | This is similar to systemd-run's --property= setting.
* Reindent man pages to 2chZbigniew Jędrzejewski-Szmek2015-02-03
|
* man: switch yum to dnf for FedoraZbigniew Jędrzejewski-Szmek2015-02-01
| | | | The dnf name is here to stay, we might as well adjust.
* man: document new download magicLennart Poettering2015-01-22
|
* nspawn: add ipvlan supportTom Gundersen2015-01-20
|
* nspawn,machined: change default container image location from ↵Lennart Poettering2015-01-15
| | | | | | | | | | | /var/lib/container to /var/lib/machines Given that this is also the place to store raw disk images which are very much bootable with qemu/kvm it sounds like a misnomer to call the directory "container". Hence, let's change this sooner rather than later, and use the generic name, in particular since we otherwise try to use the generic "machine" preferably over the more specific "container" or "vm".
* nspawn: add "-n" shortcut for "--network-veth"Lennart Poettering2015-01-13
| | | | | | | Now that networkd's IP masquerading support means that running containers with "--network-veth" will provide network access out of the box for the container, let's add a shortcut "-n" for it, to make it easily accessible.
* nspawn: add new option "--port=" for exposing container ports on the local hostLennart Poettering2015-01-13
| | | | This exposes an IP port on the container as local port using DNAT.
* tree-wide: spelling fixesVeres Lajos2014-12-30
| | | | | | | https://github.com/vlajos/misspell_fixer https://github.com/torstehu/systemd/commit/b6fdeb618cf2f3ce1645b3315f15f482710c7ffa Thanks to Torstein Husebo <torstein@huseboe.net>.
* man: fedora 21 has been release, suggest 21 as fedora version in example yum ↵Lennart Poettering2014-12-12
| | | | command line
* nspawn: when booting in ephemeral mode, append random token to machine nameLennart Poettering2014-12-12
| | | | | | | | | Also, when booting up an ephemeral container of / use the system hostname as default machine name. This way specifiyng -M is unnecessary when booting up an ephemeral container, while allowing any number of ephemeral containers to run from the same tree.
* nspawn: beef up nspawn with some btrfs magicLennart Poettering2014-12-12
| | | | | | | | This adds --template= to duplicate an OS tree as btrfs snpashot and run it This also adds --ephemeral or -x to create a snapshot of an OS tree and boot that, removing it after exit.
* nspawn: Add try-{host,guest} journal link modesMartin Pitt2014-11-21
| | | | | | | | | | | | | | | | | --link-journal={host,guest} fail if the host does not have persistent journalling enabled and /var/log/journal/ does not exist. Even worse, as there is no stdout/err any more, there is no error message to point that out. Introduce two new modes "try-host" and "try-guest" which don't fail in this case, and instead just silently skip the guest journal setup. Change -j to mean "try-guest" instead of "guest", and fix the wrong --help output for it (it said "host" before). Change systemd-nspawn@.service.in to use "try-guest" so that this unit works with both persistent and non-persistent journals on the host without failing. https://bugs.debian.org/770275
* man: fix project reference for archlinuxRonny Chevalier2014-10-21
|
* man: move one more nspawn example into a proper <example> sectionLennart Poettering2014-10-21
|
* man: use <example> instead of multiple <refsect1> for examplesRonny Chevalier2014-10-21
|
* Fix a few more typosRuben Kerkhof2014-08-30
|
* man: add a mapping for external manpagesZbigniew Jędrzejewski-Szmek2014-07-07
| | | | | | | | | | | | | | | | | | | | | | | | It is annoying when we have dead links on fd.o. Add project='man-pages|die-net|archlinux' to <citerefentry>-ies. In generated html, add external links to http://man7.org/linux/man-pages/man, http://linux.die.net/man/, https://www.archlinux.org/. By default, pages in sections 2 and 4 go to man7, since Michael Kerrisk is the autorative source on kernel related stuff. The rest of links goes to linux.die.net, because they have the manpages. Except for the pacman stuff, since it seems to be only available from archlinux.org. Poor gummiboot gets no link, because gummitboot(8) ain't to be found on the net. According to common wisdom, that would mean that it does not exist. But I have seen Kay using it, so I know it does, and deserves to be found. Can somebody be nice and put it up somewhere?
* man: document nspawn's new --volatile switchLennart Poettering2014-07-04
|
* os-release: define /usr/lib/os-release as fallback for /etc/os-releaseLennart Poettering2014-06-13
| | | | | | | | | | | | | | | | The file should have been in /usr/lib/ in the first place, since it describes the OS container in /usr (and not the configuration in /etc), hence, let's support os-release files in /usr/lib as fallback if no version in /etc exists, following the usual override logic. A prior commit already enabled tmpfiles to create /etc/os-release as a symlink to /usr/lib/os-release should it be missing, thus providing nice compatibility with applications only checking in /etc. While it's probably a good idea if all apps check both locations via a fallback logic, it is only necessary in the early boot process, as long as the /etc/os-release symlink has not been restored, in case we boot with an empty /etc.
* nspawn: add new --tmpfs= option to mount a tmpfs on specific directories, ↵Lennart Poettering2014-06-11
| | | | such as /var
* doc: comma placement corrections and word orderJan Engelhardt2014-05-07
| | | | | Set commas where there should be some. Some improvements to word order.
* doc: corrections to words and formsJan Engelhardt2014-05-07
| | | | | This patch exchange words which are inappropriate for a situation, deletes duplicated words, and adds particles where needed.
* doc: typographical fine tuningJan Engelhardt2014-05-06
|
* man: improve nspawn's --user= documentationLennart Poettering2014-03-11
|
* nspawn: add --image= switch to boot GPT disk images that follow the ↵Lennart Poettering2014-03-10
| | | | Discoverable Partitions Specification
* nspawn: add new switch --network-macvlan= to add a macvlan device to the ↵Lennart Poettering2014-02-25
| | | | container
* man: xinclude --help/--version/--no-pagerZbigniew Jędrzejewski-Szmek2014-02-20
|
* nspawn: when adding a veth interface to a bridge, use the "vb-" rather than ↵Lennart Poettering2014-02-21
| | | | | | | "ve-" interface name prefix This way we can recognize the interfaces later on to apply different host-side configuration to them.
* nspawn: add new --personality= switch to make it easier to run 32bit ↵Lennart Poettering2014-02-18
| | | | containers on a 64bit host
* doc: resolve missing/extraneous words or inappropriate formsJan Engelhardt2014-02-17
| | | | | | | | Issues fixed: * missing words required by grammar * duplicated or extraneous words * inappropriate forms (e.g. singular/plural), and declinations * orthographic misspellings
* doc: update punctuationJan Engelhardt2014-02-17
| | | | Resolve spotted issues related to missing or extraneous commas, dashes.
* nspawn: add new --network-bridge= switchTom Gundersen2014-02-16
| | | | | | | | This adds the host side of the veth link to the given bridge. Also refactor the creation of the veth interfaces a bit to set it up from the host rather than the container. This simplifies the addition to the bridge, but otherwise the behavior is unchanged.
* nspawn: add new --network-veth switch to add a virtual ethernet link to the hostLennart Poettering2014-02-13
|
* nspawn: --private-network should imply CAP_NET_ADMINLennart Poettering2014-02-13
|
* nspawn: add new --network-interface= switch to move an existing interface ↵Lennart Poettering2014-02-13
| | | | into the container
* nspawn: introduce --capability=all for retaining all capabilitiesLennart Poettering2014-02-13
|
* nspawn: newer kernels (>= 3.14) allow resetting the audit loginuid, make use ↵Lennart Poettering2014-02-12
| | | | of this
* machined: optionally, allow registration of pre-existing units (scopesLennart Poettering2014-02-11
| | | | or services) as machine with machined
* nspawn: add --register=yes|no switch to optionally disable registration of ↵Lennart Poettering2014-02-11
| | | | the container with machined
* nspawn: add new --share-system switch to run a container without PID/UTS/IPC ↵Lennart Poettering2014-02-10
| | | | namespacing
* nspawn,man: use a common vocabulary when referring to selinux security contextsLennart Poettering2014-02-10
| | | | | | | | | | | Let's always call the security labels the same way: SMACK: "Smack Label" SELINUX: "SELinux Security Context" And the low-level encapsulation is called "seclabel". Now let's hope we stick to this vocabulary in future, too, and don't mix "label"s and "security contexts" and so on wildly.
* nspawn: rename --file-label to --apifs-label since it's really just about ↵Lennart Poettering2014-02-07
| | | | the API file systems, nothing else
* nspawn: add --quiet switch for turning off any output noiseLennart Poettering2014-02-06
|
* nspawn: various fixes in selinux hookupLennart Poettering2014-02-04
| | | | | | | | | | | | | | | - As suggested, prefix argument variables with "arg_" how we do this usually. - As suggested, don't involve memory allocations when storing command line arguments. - Break --help text at 80 chars - man: explain that this is about SELinux - don't do unnecessary memory allocations when putting together mount option string
* Add SELinux support to systemd-nspawnDan Walsh2014-02-04
| | | | | | | | | | | | | | | | | This patch adds to new options: -Z PROCESS_LABEL This specifies the process label to run on processes run within the container. -L FILE_LABEL The file label to assign to memory file systems created within the container. For example if you wanted to wrap an container with SELinux sandbox labels, you could execute a command line the following chcon system_u:object_r:svirt_sandbox_file_t:s0:c0,c1 -R /srv/container systemd-nspawn -L system_u:object_r:svirt_sandbox_file_t:s0:c0,c1 -Z system_u:system_r:svirt_lxc_net_t:s0:c0,c1 -D /srv/container /bin/sh
* nspawn: add new --setenv= switch to set an environment variable for the ↵Lennart Poettering2013-12-13
| | | | container to spawn
generated by cgit v1.2.3 (git 2.25.1) at 2024-05-21 10:39:49 +0000