lxc-unshare.sgml.in revision 250b1eec71b074acdff1c5f6b5a1f0d7d2c20b77
38115c792a2142d264ca2617b11962301f079c0aTrond Norbyelxc: linux Container library
38115c792a2142d264ca2617b11962301f079c0aTrond Norbye(C) Copyright IBM Corp. 2007, 2008
38115c792a2142d264ca2617b11962301f079c0aTrond NorbyeDaniel Lezcano <daniel.lezcano at free.fr>
38115c792a2142d264ca2617b11962301f079c0aTrond NorbyeSerge Hallyn <serge.hallyn at ubuntu.com>
38115c792a2142d264ca2617b11962301f079c0aTrond NorbyeThis library is free software; you can redistribute it and/or
38115c792a2142d264ca2617b11962301f079c0aTrond Norbyemodify it under the terms of the GNU Lesser General Public
38115c792a2142d264ca2617b11962301f079c0aTrond NorbyeLicense as published by the Free Software Foundation; either
38115c792a2142d264ca2617b11962301f079c0aTrond Norbyeversion 2.1 of the License, or (at your option) any later version.
38115c792a2142d264ca2617b11962301f079c0aTrond NorbyeThis library is distributed in the hope that it will be useful,
38115c792a2142d264ca2617b11962301f079c0aTrond Norbyebut WITHOUT ANY WARRANTY; without even the implied warranty of
38115c792a2142d264ca2617b11962301f079c0aTrond NorbyeMERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
38115c792a2142d264ca2617b11962301f079c0aTrond NorbyeLesser General Public License for more details.
3dc379d98a11243103242e2b43b1ab1322795b7eLubos KoscoYou should have received a copy of the GNU Lesser General Public
38115c792a2142d264ca2617b11962301f079c0aTrond NorbyeLicense along with this library; if not, write to the Free Software
38115c792a2142d264ca2617b11962301f079c0aTrond NorbyeFoundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
3dc379d98a11243103242e2b43b1ab1322795b7eLubos Kosco<!ENTITY commonoptions SYSTEM "@builddir@/common_options.sgml">
38115c792a2142d264ca2617b11962301f079c0aTrond Norbye<!ENTITY seealso SYSTEM "@builddir@/see_also.sgml">
38115c792a2142d264ca2617b11962301f079c0aTrond Norbye <docinfo><date>@LXC_GENERATE_DATE@</date></docinfo>
a90c307564052f582357f820eadec4390e6a86c6Trond Norbye <refnamediv>
a90c307564052f582357f820eadec4390e6a86c6Trond Norbye <refpurpose>
a90c307564052f582357f820eadec4390e6a86c6Trond Norbye Run a task in a new set of namespaces.
9a4361e23046cda58b9a5b8f4e11910dc433badaLubos Kosco </refnamediv>
760369283613b2d5c2449cdc5b7a74e16d929750Trond Norbye <refsynopsisdiv>
3dc379d98a11243103242e2b43b1ab1322795b7eLubos Kosco <cmdsynopsis>
e8a20bc0a36e5885fa67503ba58be9c29ef96500Vladimir Kotal <arg choice="req">-s <replaceable>namespaces</replaceable></arg>
a90c307564052f582357f820eadec4390e6a86c6Trond Norbye <arg choice="req">-u <replaceable>user</replaceable></arg>
a90c307564052f582357f820eadec4390e6a86c6Trond Norbye </cmdsynopsis>
760369283613b2d5c2449cdc5b7a74e16d929750Trond Norbye </refsynopsisdiv>
38115c792a2142d264ca2617b11962301f079c0aTrond Norbye <command>lxc-unshare</command> can be used to run a task in a cloned set
5e0ccd8bb84a766f65680b4cc1e43b356d1d78b8Trond Norbye of namespaces. This command is mainly provided for testing purposes.
38115c792a2142d264ca2617b11962301f079c0aTrond Norbye Despite its name, it always uses clone rather than unshare to create
5e0ccd8bb84a766f65680b4cc1e43b356d1d78b8Trond Norbye the new task with fresh namespaces. Apart from testing kernel
38115c792a2142d264ca2617b11962301f079c0aTrond Norbye regressions this should make no difference.
4db6dbfe971f3c68c0945e5da3b6d5a3248054daTrond Norbye <variablelist>
38115c792a2142d264ca2617b11962301f079c0aTrond Norbye <varlistentry>
38115c792a2142d264ca2617b11962301f079c0aTrond Norbye <option>-s <replaceable>namespaces</replaceable></option>
38115c792a2142d264ca2617b11962301f079c0aTrond Norbye Specify the namespaces to attach to, as a pipe-separated list,
38115c792a2142d264ca2617b11962301f079c0aTrond Norbye e.g. <replaceable>NETWORK|IPC</replaceable>. Allowed values are
38115c792a2142d264ca2617b11962301f079c0aTrond Norbye <replaceable>MOUNT</replaceable>, <replaceable>PID</replaceable>,
38115c792a2142d264ca2617b11962301f079c0aTrond Norbye <replaceable>UTSNAME</replaceable>, <replaceable>IPC</replaceable>,
38115c792a2142d264ca2617b11962301f079c0aTrond Norbye <replaceable>NETWORK</replaceable>. This allows one to change
38115c792a2142d264ca2617b11962301f079c0aTrond Norbye the context of the process to e.g. the network namespace of the
5e0ccd8bb84a766f65680b4cc1e43b356d1d78b8Trond Norbye container while retaining the other namespaces as those of the
9a4361e23046cda58b9a5b8f4e11910dc433badaLubos Kosco </varlistentry>
38115c792a2142d264ca2617b11962301f079c0aTrond Norbye <varlistentry>
38115c792a2142d264ca2617b11962301f079c0aTrond Norbye <option>-u <replaceable>user</replaceable></option>
4db6dbfe971f3c68c0945e5da3b6d5a3248054daTrond Norbye Specify a user which the new task should become. This option is
5e0ccd8bb84a766f65680b4cc1e43b356d1d78b8Trond Norbye only valid if a user namespace is unshared.
5e0ccd8bb84a766f65680b4cc1e43b356d1d78b8Trond Norbye </varlistentry>
5e0ccd8bb84a766f65680b4cc1e43b356d1d78b8Trond Norbye </variablelist>
5e0ccd8bb84a766f65680b4cc1e43b356d1d78b8Trond Norbye To spawn a new shell with its own UTS (hostname) namespace,
eb32a77fdb57f20c042b7b79b28a4fb4060cb949Lubos Kosco <programlisting>
eb32a77fdb57f20c042b7b79b28a4fb4060cb949Lubos Kosco </programlisting>
5e0ccd8bb84a766f65680b4cc1e43b356d1d78b8Trond Norbye If the hostname is changed in that shell, the change will not be
eb32a77fdb57f20c042b7b79b28a4fb4060cb949Lubos Kosco reflected on the host.
5e0ccd8bb84a766f65680b4cc1e43b356d1d78b8Trond Norbye To spawn a shell in a new network, pid, and mount namespace,
5e0ccd8bb84a766f65680b4cc1e43b356d1d78b8Trond Norbye <programlisting>
a90c307564052f582357f820eadec4390e6a86c6Trond Norbye </programlisting>
a90c307564052f582357f820eadec4390e6a86c6Trond Norbye The resulting shell will have pid 1 and will see no network interfaces.
a90c307564052f582357f820eadec4390e6a86c6Trond Norbye After re-mounting /proc in that shell,
a90c307564052f582357f820eadec4390e6a86c6Trond Norbye <programlisting>
a90c307564052f582357f820eadec4390e6a86c6Trond Norbye mount -t proc proc /proc
eb32a77fdb57f20c042b7b79b28a4fb4060cb949Lubos Kosco </programlisting>
a90c307564052f582357f820eadec4390e6a86c6Trond Norbye ps output will show there are no other processes in the namespace.
3dc379d98a11243103242e2b43b1ab1322795b7eLubos Kosco <para>Daniel Lezcano <email>daniel.lezcano@free.fr</email></para>
e325ce06d9350834b2eab65f00334d7861354c61Lubos Kosco<!-- Keep this comment at the end of the file
e325ce06d9350834b2eab65f00334d7861354c61Lubos KoscoLocal variables:
fcb68bae47907ba23c545e379c81c3ee6e19f778Lubos Koscosgml-omittag:t
fcb68bae47907ba23c545e379c81c3ee6e19f778Lubos Koscosgml-shorttag:t
eb32a77fdb57f20c042b7b79b28a4fb4060cb949Lubos Koscosgml-minimize-attributes:nil
eb32a77fdb57f20c042b7b79b28a4fb4060cb949Lubos Koscosgml-always-quote-attributes:t
dd1753e157524bbe2e69d24e75044962223191b4Pat Downeysgml-indent-step:2
eb32a77fdb57f20c042b7b79b28a4fb4060cb949Lubos Koscosgml-indent-data:t
eb32a77fdb57f20c042b7b79b28a4fb4060cb949Lubos Koscosgml-parent-document:nil
a90c307564052f582357f820eadec4390e6a86c6Trond Norbyesgml-default-dtd-file:nil
a90c307564052f582357f820eadec4390e6a86c6Trond Norbyesgml-exposed-tags:nil
a90c307564052f582357f820eadec4390e6a86c6Trond Norbyesgml-local-catalogs:nil
a90c307564052f582357f820eadec4390e6a86c6Trond Norbyesgml-local-ecat-files:nil