2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoolxc: linux Container library
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo(C) Copyright Canonical Ltd. 2013
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae YooSerge Hallyn <serge.hallyn@ubuntu.com>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae YooThis library is free software; you can redistribute it and/or
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoomodify it under the terms of the GNU Lesser General Public
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae YooLicense as published by the Free Software Foundation; either
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yooversion 2.1 of the License, or (at your option) any later version.
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae YooThis library is distributed in the hope that it will be useful,
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoobut WITHOUT ANY WARRANTY; without even the implied warranty of
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae YooMERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae YooLesser General Public License for more details.
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae YooYou should have received a copy of the GNU Lesser General Public
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae YooLicense along with this library; if not, write to the Free Software
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae YooFoundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae YooTranslated into Korean
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yooby Sungbae Yoo <sungbae.yoo at samsung.com>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo<!ENTITY commonoptions SYSTEM "@builddir@/common_options.sgml">
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo<!ENTITY seealso SYSTEM "@builddir@/see_also.sgml">
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo <docinfo><date>@LXC_GENERATE_DATE@</date></docinfo>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo <refnamediv>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo <refpurpose>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo Create and attach a nic to another network namespace.
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo NIC 를 생성하여 다른 네임스페이스에 붙이기
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo </refpurpose>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo </refnamediv>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo <refsynopsisdiv>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo <cmdsynopsis>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo <arg choice="req"><replaceable>pid</replaceable></arg>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo <arg choice="req"><replaceable>type</replaceable></arg>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo <arg choice="req"><replaceable>bridge</replaceable></arg>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo <arg choice="opt"><replaceable>nicname</replaceable></arg>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo </cmdsynopsis>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo </refsynopsisdiv>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo <command>lxc-user-nic</command> is a setuid-root program with which
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo unprivileged users may create network interfaces for use by a lxc container.
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo <command>lxc-user-nic</command>는 root로 setuid한 프로그램이므로, 특권이 없는 사용자들도 lxc 컨테이너가 사용할 네트워크 인터페이스를 생성할 수 있다.
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo It will consult the configuration file <filename>@LXC_USERNIC_CONF@</filename>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo to determine the number of interfaces which the calling user is allowed to
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo create, and which bridge he may attach them to. It tracks the
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo number of interfaces each user has created using the file
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo <filename>@LXC_USERNIC_DB@</filename>. It ensures that the calling
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo user is privileged over the network namespace to which the interface
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo will be attached.
4ff8fb6cae48bc4cd376fffa70c69a7cd72425bcSungbae Yoo 이 명령어는 <filename>@LXC_USERNIC_CONF@</filename>을 읽어, 호출한 사용자가 만들수 있는 인터페이스의 수와 어느 브리지에 붙일지 결정한다.
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo 각 사용자가 생성한 인터페이스의 수를 <filename>@LXC_USERNIC_DB@</filename> 파일에 기록한다.
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo 그리고 호출한 사용자가 인터페이스를 붙인 네트워크 네임스페이스에 특권을 갖게 한다.
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo <variablelist>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo <varlistentry>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo The process id for the task to whose network namespace the interface
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo should be attached.
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo 인터페이스가 붙어야하는 네트워크 네임스페이스에 속해있는 프로세스 ID.
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo </varlistentry>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo <varlistentry>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo <option><replaceable>type</replaceable></option>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo The network interface type to attach. Currently only veth is
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo supported. With this type, two interfaces representing each
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo tunnel endpoint are created. One endpoint will be attached
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo to the specified bridge, while the other will be passed into
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo the container.
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo 붙일 네트워크 인터페이스의 형태. 현재는 veth만 지원가능하다. 이 형태에서는 두개의 인터페이스가 각각 터널의 끝지점으로 생성된다. 하나의 끝지점이 특정 브리지에 붙고, 다른 하나는 컨테이너 내부로 넘겨지게 된다.
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo </varlistentry>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo <varlistentry>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo <option><replaceable>bridge</replaceable></option>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo The bridge to which to attach the network interface, for
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo instance <filename>lxcbr0</filename>.
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo 네트워크 인터페이스를 붙일 프리지. 예를 들어, <filename>lxcbr0</filename> 같이 지정 가능하다.
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo </varlistentry>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo <varlistentry>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo <option><replaceable>nicname</replaceable></option>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo The desired interface name in the container. This will be
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo <filename>eth0</filename> if unspecified.
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo 컨테이너내에서 사용할 인터페이스 이름. 지정하지 않는다면 <filename>eth0</filename>로 된다.
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo </varlistentry>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo </variablelist>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo <citerefentry>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo <refentrytitle><command>lxc</command></refentrytitle>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo </citerefentry>,
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo <citerefentry>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo <refentrytitle><command>lxc-start</command></refentrytitle>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo </citerefentry>,
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo <citerefentry>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo <refentrytitle><command>lxc-usernet</command></refentrytitle>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo </citerefentry>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo <para>Daniel Lezcano <email>daniel.lezcano@free.fr</email></para>
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoo<!-- Keep this comment at the end of the file
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae YooLocal variables:
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoosgml-omittag:t
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoosgml-shorttag:t
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoosgml-minimize-attributes:nil
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoosgml-always-quote-attributes:t
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoosgml-indent-step:2
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoosgml-indent-data:t
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoosgml-parent-document:nil
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoosgml-default-dtd-file:nil
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoosgml-exposed-tags:nil
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoosgml-local-catalogs:nil
2b371b262f7272266ff18cc2aff65176a2c16383Sungbae Yoosgml-local-ecat-files:nil