SYSTEMD.NSPAWN(5) systemd.nspawn SYSTEMD.NSPAWN(5) (NAME) systemd.nspawn - systemd-nspawn (SYNOPSIS) /etc/systemd/nspawn/machine.nspawn /run/systemd/nspawn/machine.nspawn /var/lib/machines/machine.nspawn (DESCRIPTION) nspawn ( .nspawn) systemd-nspawn(1) . . . systemd-nspawn . systemd .desktop . systemd.syntax(7) . .NSPAWN (.NSPAWN FILE DISCOVERY) .nspawn --machine= systemd-nspawn . /etc/systemd/nspawn/ /run/systemd/nspawn/ . ( ). . . ( ) . . ( ) /etc/systemd/nspawn/ ( ) /var/lib/machines/ ( ) . .nspawn /etc/systemd/nspawn/ . --settings= systemd-nspawn systemd-nspawn(1) . [EXEC] ([EXEC] SECTION OPTIONS) [Exec] : Boot= off . systemd-nspawn init . Parameters= init . --boot systemd-nspawn . ProcessTwo=yes . systemd-nspawn@.service . 226. Ephemeral= off . (snapshot) . --ephemeral . systemd-nspawn(1) . 240. ProcessTwo= off . PID 2 . init (stub) PID 1 . --as-pid2 systemd-nspawn . Boot=yes . 229. Parameters= (whitespace) . ("'") (""") . - Boot= - init . systemd-nspawn . : Boot=no Parameters=a b "c c" systemd-nspawn a b "c c" Boot=yes Parameters=b 'c c' systemd-nspawn --boot b 'c c' . 226. Environment= "=" . . . --setenv= . 226. User= . . . --user= . 226. WorkingDirectory= . . --chdir= . 229. PivotRoot= / (pivot) . (:) . . --pivot-root= . 233. Capability=, DropCapability= (capabilities) ( capabilities(7) ). Capability= . DropCapability= (drop) . --capability= --drop-capability= . Capability= (privileged) .nspawn /etc/systemd/nspawn/ /run/systemd/nspawn/ ( ). DropCapability= . "all" ( ) . (bounding set) (ambient) AmbientCapability= . 226. AmbientCapability= ( capabilities(7) ). AmbientCapability= (inheritable) (ambient) . . --ambient-capability= . "all" . AmbientCapability= Capability= DropCapability= . AmbientCapability= ( ). 248. NoNewPrivileges= PR_SET_NO_NEW_PRIVS (payload) . --no-new-privileges= . systemd-nspawn(1) . 239. KillSignal= SIGTERM nspawn PID 1 . Boot= SIGRTMIN+3 ( init systemd SIGRTMIN+3 ). signal(7) . 230. Personality= (kernel personality) . --personality= . 226. MachineID= (UUID) . --uuid= . ( ). 226. PrivateUsers= (user namespacing) . --private-users= . ( ). systemd-nspawn@.service . 230. PrivateUsersDelegate= . 64K UID/GID . varlink systemd-nsresourced.service(8) bind . --private-users-delegate= . PrivateUsers=managed . 0 . systemd-nspawn(1) . 260. NotifyReady= (notifications) init . --notify-ready= . systemd-nspawn(1) . 231. SystemCallFilter= . --system-call-filter= . systemd- nspawn(1) . 235. RestrictAddressFamilies= . --restrict-address-families= . systemd- nspawn(1) . 261. LimitCPU=, LimitFSIZE=, LimitDATA=, LimitSTACK=, LimitCORE=, LimitRSS=, LimitNOFILE=, LimitAS=, LimitNPROC=, LimitMEMLOCK=, LimitLOCKS=, LimitSIGPENDING=, LimitMSGQUEUE=, LimitNICE=, LimitRTPRIO=, LimitRTTIME= . --rlimit= . systemd- nspawn(1) . 239. OOMScoreAdjust= OOM ( ) . --oom-score-adjust= . systemd-nspawn(1) . 239. CPUAffinity= (CPU affinity) . --cpu-affinity= . systemd-nspawn(1) . 239. Hostname= (kernel hostname) . --hostname= . systemd- nspawn(1) . 239. ResolvConf= /etc/resolv.conf . --resolv-conf= . systemd-nspawn(1) . 239. Timezone= /etc/localtime . --timezone= . systemd-nspawn(1) . 239. LinkJournal= . --link-journal= . systemd-nspawn(1) . 239. SuppressSync= . --suppress-sync= . systemd-nspawn(1) . 250. [FILES] ([FILES] SECTION OPTIONS) [Files] : ReadOnly= off . . --read-only . 226. Volatile= "state" . / (volatile) . --volatile= systemd-nspawn(1) . 226. Bind=, BindReadOnly= bind . (:) . bind . --bind= --bind-ro= systemd-nspawn(1) . ( ). 226. BindUser= (bind) . --bind-user= systemd-nspawn(1) . ( ). 249. BindUserShell= BindUser . --bind-user-shell= systemd-nspawn(1) . ( ). 258. TemporaryFileSystem= "tmpfs" . . "tmpfs" . --tmpfs= systemd-nspawn(1) . ( ). 226. Inaccessible= (mask ). . . --inaccessible= systemd-nspawn(1) . ( ). 242. Overlay=, OverlayReadOnly= overlay . . overlay . --overlay= --overlay-ro= systemd-nspawn(1) . ( ). 233. PrivateUsersOwnership= UID/GID . --private-users-ownership= . ( ). 249. [NETWORK] ([NETWORK] SECTION OPTIONS) [Network] : Private= off . . --private-network . 226. NamespacePath= . ( bind ) /proc/$PID/ns/net . . /run/netns ip-netns(8) NamespacePath=/run/netns/foo. Private= Interface= . --network-namespace-path . 259. VirtualEthernet= . ("veth") . Private=yes . --network-veth . systemd-nspawn@.service . 226. VirtualEthernetExtra= . ("veth") . . . Private=yes . --network-veth-extra= . VirtualEthernet= . Bridge= (bridge) . ( ). 228. Interface= . . --network-interface= Private=yes . ( ). 226. MACVLAN=, IPVLAN= MACVLAN IPVLAN . . --network-macvlan= --network-ipvlan= Private=yes . ( ). 226. Bridge= . VirtualEthernet=yes Private=yes (bridge) . --network-bridge= . ( ). 226. Zone= (zone) . VirtualEthernet=yes Private=yes "vz-" . --network-zone= . ( ). 230. Port= (port) TCP UDP (expose ). --port= systemd-nspawn(1) . ( ). 226. (SEE ALSO) systemd(1), systemd-nspawn(1), systemd.directives(7) systemd 261.2 SYSTEMD.NSPAWN(5)