97a9a944b5887e91042b019776c41d5dd74557aferikabele<?xml version="1.0"?>

97a9a944b5887e91042b019776c41d5dd74557aferikabele<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN" "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd">

5a58787efeb02a1c3f06569d019ad81fd2efa06end<refentry id="tmpfiles.d">

3f08db06526d6901aa08c110b5bc7dde6bc39905nd

5a58787efeb02a1c3f06569d019ad81fd2efa06end <refentryinfo>

a63f0ab647ad2ab72efc9bea7a66e24e9ebc5cc2nd <title>tmpfiles.d</title>

3b3b7fc78d1f5bfc2769903375050048ff41ff26nd <productname>systemd</productname>

ad74a0524a06bfe11b7de9e3b4ce7233ab3bd3f7nd

ad74a0524a06bfe11b7de9e3b4ce7233ab3bd3f7nd <authorgroup>

e1e8390280254f7f0580d701e583f670643d4f3fnilgun <author>

f086b4b402fa9a2fefc7dda85de2a3cc1cd0a654rjung <contrib>Documentation</contrib>

3b3b7fc78d1f5bfc2769903375050048ff41ff26nd <firstname>Brandon</firstname>

5a58787efeb02a1c3f06569d019ad81fd2efa06end <surname>Philips</surname>

5a58787efeb02a1c3f06569d019ad81fd2efa06end <email>brandon@ifup.org</email>

5a58787efeb02a1c3f06569d019ad81fd2efa06end </author>

5a58787efeb02a1c3f06569d019ad81fd2efa06end </authorgroup>

5a58787efeb02a1c3f06569d019ad81fd2efa06end </refentryinfo>

5a58787efeb02a1c3f06569d019ad81fd2efa06end

5a58787efeb02a1c3f06569d019ad81fd2efa06end <refmeta>

06ba4a61654b3763ad65f52283832ebf058fdf1cslive <refentrytitle>tmpfiles.d</refentrytitle>

ced7ef1f8c0df1805da0e87dbc5a1b6282910573nd <manvolnum>5</manvolnum>

9b6a3a558cc90ffdaa0b50bd02546ffec424ded7slive </refmeta>

ced7ef1f8c0df1805da0e87dbc5a1b6282910573nd

b21197dc8e6b8c764fdcc24d4bae8b0eebb6bc4end <refnamediv>

9b6a3a558cc90ffdaa0b50bd02546ffec424ded7slive <refname>tmpfiles.d</refname>

9b6a3a558cc90ffdaa0b50bd02546ffec424ded7slive <refpurpose>Configuration for creation, deletion and cleaning of

9b6a3a558cc90ffdaa0b50bd02546ffec424ded7slive volatile and temporary files</refpurpose>

97a9a944b5887e91042b019776c41d5dd74557aferikabele </refnamediv>

f8396ed8364b56ec8adeaa49cac35a929758a29eslive

ffb01336be79c64046b636e59fa8ddca8ec029edsf <refsynopsisdiv>

f8396ed8364b56ec8adeaa49cac35a929758a29eslive <para><filename>/etc/tmpfiles.d/*.conf</filename></para>

f8396ed8364b56ec8adeaa49cac35a929758a29eslive <para><filename>/run/tmpfiles.d/*.conf</filename></para>

5a58787efeb02a1c3f06569d019ad81fd2efa06end <para><filename>/usr/lib/tmpfiles.d/*.conf</filename></para>

5a58787efeb02a1c3f06569d019ad81fd2efa06end </refsynopsisdiv>

5a58787efeb02a1c3f06569d019ad81fd2efa06end

5a58787efeb02a1c3f06569d019ad81fd2efa06end <refsect1>

deeee6bb6fd94c0ba5f3730b58abd9d299c89ccdnd <title>Description</title>

4db28ee269aa06f7c6232e11cd01f58c3349af23noodl

117c1f888a14e73cdd821dc6c23eb0411144a41cnd <para><command>systemd-tmpfiles</command> uses the configuration

117c1f888a14e73cdd821dc6c23eb0411144a41cnd files from the above directories to describe the creation,

4a31db3c3a0202003c1b9f87affa7cc143e120e5sf cleaning and removal of volatile and temporary files and

117c1f888a14e73cdd821dc6c23eb0411144a41cnd directories which usually reside in directories such as

ffb01336be79c64046b636e59fa8ddca8ec029edsf <filename>/run</filename> or <filename>/tmp</filename>.</para>

117c1f888a14e73cdd821dc6c23eb0411144a41cnd

117c1f888a14e73cdd821dc6c23eb0411144a41cnd <para>Volatile and temporary files and directories are those

117c1f888a14e73cdd821dc6c23eb0411144a41cnd located in <filename>/run</filename> (and its alias

2bc7f1cf720973a67f8ff7a8d523e40569ae5b6cnd <filename>/var/run</filename>), <filename>/tmp</filename>,

117c1f888a14e73cdd821dc6c23eb0411144a41cnd <filename>/var/tmp</filename>, the API file systems such as

117c1f888a14e73cdd821dc6c23eb0411144a41cnd <filename>/sys</filename> or <filename>/proc</filename>, as well

117c1f888a14e73cdd821dc6c23eb0411144a41cnd as some other directories below <filename>/var</filename>.</para>

117c1f888a14e73cdd821dc6c23eb0411144a41cnd

117c1f888a14e73cdd821dc6c23eb0411144a41cnd <para>System daemons frequently require private runtime

117c1f888a14e73cdd821dc6c23eb0411144a41cnd directories below <filename>/run</filename> to place communication

87ffb6e33f3cbef3b9bb406cc2d27039fa336eaatrawick sockets and similar in. For these, consider declaring them in

4db28ee269aa06f7c6232e11cd01f58c3349af23noodl their unit files using <varname>RuntimeDirectory=</varname> (see

5a58787efeb02a1c3f06569d019ad81fd2efa06end <citerefentry><refentrytitle>systemd.exec</refentrytitle><manvolnum>5</manvolnum></citerefentry>

5a58787efeb02a1c3f06569d019ad81fd2efa06end for details), if this is feasible.</para>

5a58787efeb02a1c3f06569d019ad81fd2efa06end </refsect1>

5a58787efeb02a1c3f06569d019ad81fd2efa06end

5a58787efeb02a1c3f06569d019ad81fd2efa06end <refsect1>

5a58787efeb02a1c3f06569d019ad81fd2efa06end <title>Configuration Format</title>

654d8eb036bedc99e90e11910ee02d3421417697rbowen

30471a4650391f57975f60bbb6e4a90be7b284bfhumbedooh <para>Each configuration file shall be named in the style of

5a58787efeb02a1c3f06569d019ad81fd2efa06end <filename><replaceable>package</replaceable>.conf</filename> or

5a58787efeb02a1c3f06569d019ad81fd2efa06end <filename><replaceable>package</replaceable>-<replaceable>part</replaceable>.conf</filename>.

5a58787efeb02a1c3f06569d019ad81fd2efa06end The second variant should be used when it is desirable to make it

9a58dc6a2b26ec128b1270cf48810e705f1a90dbsf easy to override just this part of configuration.</para>

8a6d5edcb07aeccca7afba02a17dd6904d6b206ctrawick

8a6d5edcb07aeccca7afba02a17dd6904d6b206ctrawick <para>Files in <filename>/etc/tmpfiles.d</filename> override files

8a6d5edcb07aeccca7afba02a17dd6904d6b206ctrawick with the same name in <filename>/usr/lib/tmpfiles.d</filename> and

8a6d5edcb07aeccca7afba02a17dd6904d6b206ctrawick <filename>/run/tmpfiles.d</filename>. Files in

06ba4a61654b3763ad65f52283832ebf058fdf1cslive <filename>/run/tmpfiles.d</filename> override files with the same

654d8eb036bedc99e90e11910ee02d3421417697rbowen name in <filename>/usr/lib/tmpfiles.d</filename>. Packages should

06ba4a61654b3763ad65f52283832ebf058fdf1cslive install their configuration files in

06ba4a61654b3763ad65f52283832ebf058fdf1cslive <filename>/usr/lib/tmpfiles.d</filename>. Files in

06ba4a61654b3763ad65f52283832ebf058fdf1cslive <filename>/etc/tmpfiles.d</filename> are reserved for the local

b1b0d8ff12f69d873f28a9bf79dfba6b67b45a4bigalic administrator, who may use this logic to override the

97a9a944b5887e91042b019776c41d5dd74557aferikabele configuration files installed by vendor packages. All

654d8eb036bedc99e90e11910ee02d3421417697rbowen configuration files are sorted by their filename in lexicographic

92510838f2eb125726e15c5eb4f7a23c7a0396e4slive order, regardless of which of the directories they reside in. If

97a9a944b5887e91042b019776c41d5dd74557aferikabele multiple files specify the same path, the entry in the file with

9b6a3a558cc90ffdaa0b50bd02546ffec424ded7slive the lexicographically earliest name will be applied. All other

9b6a3a558cc90ffdaa0b50bd02546ffec424ded7slive conflicting entries will be logged as errors. When two lines are

92510838f2eb125726e15c5eb4f7a23c7a0396e4slive prefix and suffix of each other, then the prefix is always

92510838f2eb125726e15c5eb4f7a23c7a0396e4slive processed first, the suffix later. Lines that take globs are

ffb01336be79c64046b636e59fa8ddca8ec029edsf applied after those accepting no globs. If multiple operations

8a6d5edcb07aeccca7afba02a17dd6904d6b206ctrawick shall be applied on the same file (such as ACL, xattr, file

ffb01336be79c64046b636e59fa8ddca8ec029edsf attribute adjustments) these are always done in the same fixed

8a6d5edcb07aeccca7afba02a17dd6904d6b206ctrawick order. Otherwise, the files/directories are processed in the order

8a6d5edcb07aeccca7afba02a17dd6904d6b206ctrawick they are listed.</para>

8a6d5edcb07aeccca7afba02a17dd6904d6b206ctrawick

8a6d5edcb07aeccca7afba02a17dd6904d6b206ctrawick <para>If the administrator wants to disable a configuration file

8a6d5edcb07aeccca7afba02a17dd6904d6b206ctrawick supplied by the vendor, the recommended way is to place a symlink

9a58dc6a2b26ec128b1270cf48810e705f1a90dbsf to <filename>/dev/null</filename> in

8a6d5edcb07aeccca7afba02a17dd6904d6b206ctrawick <filename>/etc/tmpfiles.d/</filename> bearing the same filename.

9a58dc6a2b26ec128b1270cf48810e705f1a90dbsf </para>

9a58dc6a2b26ec128b1270cf48810e705f1a90dbsf

ffb01336be79c64046b636e59fa8ddca8ec029edsf <para>The configuration format is one line per path containing

8a6d5edcb07aeccca7afba02a17dd6904d6b206ctrawick type, path, mode, ownership, age, and argument fields:</para>

9a58dc6a2b26ec128b1270cf48810e705f1a90dbsf

8a6d5edcb07aeccca7afba02a17dd6904d6b206ctrawick <programlisting>#Type Path Mode UID GID Age Argument

8a6d5edcb07aeccca7afba02a17dd6904d6b206ctrawick d /run/user 0755 root root 10d -

77c77cf89621f21c8e2bbad63058b5eaa5f88d4ajim L /tmp/foobar - - - - /dev/null</programlisting>

8a6d5edcb07aeccca7afba02a17dd6904d6b206ctrawick

9a58dc6a2b26ec128b1270cf48810e705f1a90dbsf <para>Fields may be enclosed within quotes and contain C-style escapes.</para>

ced7ef1f8c0df1805da0e87dbc5a1b6282910573nd

8a6d5edcb07aeccca7afba02a17dd6904d6b206ctrawick <refsect2>

9a58dc6a2b26ec128b1270cf48810e705f1a90dbsf <title>Type</title>

9a58dc6a2b26ec128b1270cf48810e705f1a90dbsf

9a58dc6a2b26ec128b1270cf48810e705f1a90dbsf <para>The type consists of a single letter and optionally an

ced7ef1f8c0df1805da0e87dbc5a1b6282910573nd exclamation mark.</para>

8a6d5edcb07aeccca7afba02a17dd6904d6b206ctrawick

8a6d5edcb07aeccca7afba02a17dd6904d6b206ctrawick <para>The following line types are understood:</para>

8a6d5edcb07aeccca7afba02a17dd6904d6b206ctrawick

4a31db3c3a0202003c1b9f87affa7cc143e120e5sf <variablelist>

4a31db3c3a0202003c1b9f87affa7cc143e120e5sf <varlistentry>

8a6d5edcb07aeccca7afba02a17dd6904d6b206ctrawick <term><varname>f</varname></term>

8a6d5edcb07aeccca7afba02a17dd6904d6b206ctrawick <listitem><para>Create a file if it does not exist yet. If

8a6d5edcb07aeccca7afba02a17dd6904d6b206ctrawick the argument parameter is given, it will be written to the

ffb01336be79c64046b636e59fa8ddca8ec029edsf file. Does not follow symlinks.</para></listitem>

8a6d5edcb07aeccca7afba02a17dd6904d6b206ctrawick </varlistentry>

92510838f2eb125726e15c5eb4f7a23c7a0396e4slive

92510838f2eb125726e15c5eb4f7a23c7a0396e4slive <varlistentry>

97a9a944b5887e91042b019776c41d5dd74557aferikabele <term><varname>F</varname></term>

92510838f2eb125726e15c5eb4f7a23c7a0396e4slive <listitem><para>Create or truncate a file. If the argument

f0fa55ff14fa0bf8fd72d989f6625de6dc3260c8igalic parameter is given, it will be written to the file. Does not follow symlinks.</para>

f0fa55ff14fa0bf8fd72d989f6625de6dc3260c8igalic </listitem>

f0fa55ff14fa0bf8fd72d989f6625de6dc3260c8igalic </varlistentry>

f0fa55ff14fa0bf8fd72d989f6625de6dc3260c8igalic

f0fa55ff14fa0bf8fd72d989f6625de6dc3260c8igalic <varlistentry>

f0fa55ff14fa0bf8fd72d989f6625de6dc3260c8igalic <term><varname>w</varname></term>

f0fa55ff14fa0bf8fd72d989f6625de6dc3260c8igalic <listitem><para>Write the argument parameter to a file, if

f0fa55ff14fa0bf8fd72d989f6625de6dc3260c8igalic the file exists. Lines of this type accept shell-style

f0fa55ff14fa0bf8fd72d989f6625de6dc3260c8igalic globs in place of normal path names. The argument parameter

06ba4a61654b3763ad65f52283832ebf058fdf1cslive will be written without a trailing newline. C-style

e8d485701957d5c6de870111c112e168a894d49and backslash escapes are interpreted. Follows

e8d485701957d5c6de870111c112e168a894d49and symlinks.</para></listitem>

654d8eb036bedc99e90e11910ee02d3421417697rbowen </varlistentry>

654d8eb036bedc99e90e11910ee02d3421417697rbowen

9b6a3a558cc90ffdaa0b50bd02546ffec424ded7slive <varlistentry>

9b6a3a558cc90ffdaa0b50bd02546ffec424ded7slive <term><varname>d</varname></term>

9bcfc3697a91b5215893a7d0206865b13fc72148nd <listitem><para>Create a directory if it does not exist yet.

9b6a3a558cc90ffdaa0b50bd02546ffec424ded7slive </para></listitem>

9b6a3a558cc90ffdaa0b50bd02546ffec424ded7slive </varlistentry>

06ba4a61654b3763ad65f52283832ebf058fdf1cslive

4a31db3c3a0202003c1b9f87affa7cc143e120e5sf <varlistentry>

9b6a3a558cc90ffdaa0b50bd02546ffec424ded7slive <term><varname>D</varname></term>

9b6a3a558cc90ffdaa0b50bd02546ffec424ded7slive <listitem><para>Create or empty a directory.</para></listitem>

709e3a21ba73b8433462959cd56c773454b34441trawick </varlistentry>

709e3a21ba73b8433462959cd56c773454b34441trawick

709e3a21ba73b8433462959cd56c773454b34441trawick <varlistentry>

709e3a21ba73b8433462959cd56c773454b34441trawick <term><varname>v</varname></term>

709e3a21ba73b8433462959cd56c773454b34441trawick <listitem><para>Create a subvolume if the path does not

709e3a21ba73b8433462959cd56c773454b34441trawick exist yet and the file system supports this

709e3a21ba73b8433462959cd56c773454b34441trawick (btrfs). Otherwise create a normal directory, in the same

5a58787efeb02a1c3f06569d019ad81fd2efa06end way as <varname>d</varname>.</para></listitem>

5a58787efeb02a1c3f06569d019ad81fd2efa06end </varlistentry>

3b3b7fc78d1f5bfc2769903375050048ff41ff26nd

ad74a0524a06bfe11b7de9e3b4ce7233ab3bd3f7nd <varlistentry>

ad74a0524a06bfe11b7de9e3b4ce7233ab3bd3f7nd <term><varname>p</varname></term>

e1e8390280254f7f0580d701e583f670643d4f3fnilgun <term><varname>p+</varname></term>

f086b4b402fa9a2fefc7dda85de2a3cc1cd0a654rjung <listitem><para>Create a named pipe (FIFO) if it does not

727872d18412fc021f03969b8641810d8896820bhumbedooh exist yet. If suffixed with <varname>+</varname> and a file

0d0ba3a410038e179b695446bb149cce6264e0abnd already exists where the pipe is to be created, it will be

727872d18412fc021f03969b8641810d8896820bhumbedooh removed and be replaced by the pipe.</para></listitem>

cc7e1025de9ac63bd4db6fe7f71c158b2cf09fe4humbedooh </varlistentry>

0d0ba3a410038e179b695446bb149cce6264e0abnd

cc7e1025de9ac63bd4db6fe7f71c158b2cf09fe4humbedooh <varlistentry>

727872d18412fc021f03969b8641810d8896820bhumbedooh <term><varname>L</varname></term>

0d0ba3a410038e179b695446bb149cce6264e0abnd <term><varname>L+</varname></term>

0d0ba3a410038e179b695446bb149cce6264e0abnd <listitem><para>Create a symlink if it does not exist

0d0ba3a410038e179b695446bb149cce6264e0abnd yet. If suffixed with <varname>+</varname> and a file

ac082aefa89416cbdc9a1836eaf3bed9698201c8humbedooh already exists where the symlink is to be created, it will

0d0ba3a410038e179b695446bb149cce6264e0abnd be removed and be replaced by the symlink. If the argument

0d0ba3a410038e179b695446bb149cce6264e0abnd is omitted, symlinks to files with the same name residing in

0d0ba3a410038e179b695446bb149cce6264e0abnd the directory <filename>/usr/share/factory/</filename> are

727872d18412fc021f03969b8641810d8896820bhumbedooh created.</para></listitem>

0d0ba3a410038e179b695446bb149cce6264e0abnd </varlistentry>

0d0ba3a410038e179b695446bb149cce6264e0abnd

30471a4650391f57975f60bbb6e4a90be7b284bfhumbedooh <varlistentry>

5effc8b39fae5cd169d17f342bfc265705840014rbowen <term><varname>c</varname></term>

d229f940abfb2490dee17979e9a5ff31b7012eb5rbowen <term><varname>c+</varname></term>

0d0ba3a410038e179b695446bb149cce6264e0abnd <listitem><para>Create a character device node if it does

7fec19672a491661b2fe4b29f685bc7f4efa64d4nd not exist yet. If suffixed with <varname>+</varname> and a

7fec19672a491661b2fe4b29f685bc7f4efa64d4nd file already exists where the device node is to be created,

7fec19672a491661b2fe4b29f685bc7f4efa64d4nd it will be removed and be replaced by the device node. It is

5a58787efeb02a1c3f06569d019ad81fd2efa06end recommended to suffix this entry with an exclamation mark to

only create static device nodes at boot, as udev will not

manage static device nodes that are created at runtime.

</para></listitem>

</varlistentry>

<varlistentry>

<term><varname>b</varname></term>

<term><varname>b+</varname></term>

<listitem><para>Create a block device node if it does not

exist yet. If suffixed with <varname>+</varname> and a file

already exists where the device node is to be created, it

will be removed and be replaced by the device node. It is

recommended to suffix this entry with an exclamation mark to

only create static device nodes at boot, as udev will not

manage static device nodes that are created at runtime.

</para></listitem>

</varlistentry>

<varlistentry>

<term><varname>C</varname></term>

<listitem><para>Recursively copy a file or directory, if the

destination files or directories do not exist yet. Note that

this command will not descend into subdirectories if the

destination directory already exists. Instead, the entire

copy operation is skipped. If the argument is omitted, files

from the source directory

<filename>/usr/share/factory/</filename> with the same name

are copied. Does not follow symlinks.</para></listitem>

</varlistentry>

<varlistentry>

<term><varname>x</varname></term>

<listitem><para>Ignore a path during cleaning. Use this type

to exclude paths from clean-up as controlled with the Age

parameter. Note that lines of this type do not influence the

effect of <varname>r</varname> or <varname>R</varname>

lines. Lines of this type accept shell-style globs in place

of normal path names. </para></listitem>

</varlistentry>

<varlistentry>

<term><varname>X</varname></term>

<listitem><para>Ignore a path during cleaning. Use this type

to exclude paths from clean-up as controlled with the Age

parameter. Unlike <varname>x</varname>, this parameter will

not exclude the content if path is a directory, but only

directory itself. Note that lines of this type do not

influence the effect of <varname>r</varname> or

<varname>R</varname> lines. Lines of this type accept

shell-style globs in place of normal path names.

</para></listitem>

</varlistentry>

<varlistentry>

<term><varname>r</varname></term>

<listitem><para>Remove a file or directory if it exists.

This may not be used to remove non-empty directories, use

<varname>R</varname> for that. Lines of this type accept

shell-style globs in place of normal path

names. Does not follow symlinks.</para></listitem>

</varlistentry>

<varlistentry>

<term><varname>R</varname></term>

<listitem><para>Recursively remove a path and all its

subdirectories (if it is a directory). Lines of this type

accept shell-style globs in place of normal path

names. Does not follow symlinks.</para></listitem>

</varlistentry>

<varlistentry>

<term><varname>z</varname></term>

<listitem><para>Adjust the access mode, group and user, and

restore the SELinux security context of a file or directory,

if it exists. Lines of this type accept shell-style globs in

place of normal path names. Does not follow symlinks.</para></listitem>

</varlistentry>

<varlistentry>

<term><varname>Z</varname></term>

<listitem><para>Recursively set the access mode, group and

user, and restore the SELinux security context of a file or

directory if it exists, as well as of its subdirectories and

the files contained therein (if applicable). Lines of this

type accept shell-style globs in place of normal path

names. Does not follow symlinks. </para></listitem>

</varlistentry>

<varlistentry>

<term><varname>t</varname></term>

<listitem><para>Set extended attributes. Lines of this type

accept shell-style globs in place of normal path names.

This can be useful for setting SMACK labels. Does not follow

symlinks.</para></listitem>

</varlistentry>

<varlistentry>

<term><varname>T</varname></term>

<listitem><para>Recursively set extended attributes. Lines

of this type accept shell-style globs in place of normal

path names. This can be useful for setting SMACK

labels. Does not follow symlinks. </para></listitem>

</varlistentry>

<varlistentry>

<term><varname>h</varname></term>

<listitem><para>Set file/directory attributes. Lines of this type

accept shell-style globs in place of normal path names.</para>

<para>The format of the argument field is

<varname>[+-=][aAcCdDeijsStTu] </varname>. The prefix

<varname>+</varname> (the default one) causes the

attribute(s) to be added; <varname>-</varname> causes the

attribute(s) to be removed; <varname>=</varname> causes the

attributes to set exactly as the following letters. The

letters <literal>aAcCdDeijsStTu</literal> select the new

attributes for the files, see

<citerefentry><refentrytitle>chattr</refentrytitle>

<manvolnum>1</manvolnum></citerefentry> for further information.

</para>

<para>Passing only <varname>=</varname> as argument resets

all the file attributes listed above. It has to be pointed

out that the <varname>=</varname> prefix, limits itself to

the attributes corresponding to the letters listed here. All

other attributes will be left untouched. Does not follow

symlinks.</para>

</listitem>

</varlistentry>

<varlistentry>

<term><varname>H</varname></term>

<listitem><para>Recursively set file/directory attributes. Lines

of this type accept shell-style globs in place of normal

path names. Does not follow symlinks.

</para></listitem>

</varlistentry>

<varlistentry>

<term><varname>a</varname></term>

<term><varname>a+</varname></term>

<listitem><para>Set POSIX ACLs (access control lists). If

suffixed with <varname>+</varname>, specified entries will

be added to the existing set.

<command>systemd-tmpfiles</command> will automatically add

the required base entries for user and group based on the

access mode of the file, unless base entries already exist

or are explictly specified. The mask will be added if not

specified explicitly or already present. Lines of this type

accept shell-style globs in place of normal path names. This

can be useful for allowing additional access to certain

files. Does not follow symlinks.</para></listitem>

</varlistentry>

<varlistentry>

<term><varname>A</varname></term>

<term><varname>A+</varname></term>

<listitem><para>Same as <varname>a</varname> and

<varname>a+</varname>, but recursive. Does not follow

symlinks.</para></listitem>

</varlistentry>

</variablelist>

<para>If the exclamation mark is used, this line is only safe of

execute during boot, and can break a running system. Lines

without the exclamation mark are presumed to be safe to execute

at any time, e.g. on package upgrades.

<command>systemd-tmpfiles</command> will execute line with an

exclamation mark only if option <option>--boot</option> is

given.</para>

<para>For example:

<programlisting># Make sure these are created by default so that nobody else can

d /tmp/.X11-unix 1777 root root 10d

# Unlink the X11 lock files

r! /tmp/.X[0-9]*-lock</programlisting>

The second line in contrast to the first one would break a

running system, and will only be executed with

<option>--boot</option>.</para>

</refsect2>

<refsect2>

<title>Path</title>

<para>The file system path specification supports simple

specifier expansion. The following expansions are

understood:</para>

<table>

<title>Specifiers available</title>

<tgroup cols='3' align='left' colsep='1' rowsep='1'>

<colspec colname="spec" />

<colspec colname="mean" />

<colspec colname="detail" />

<thead>

<row>

<entry>Specifier</entry>

<entry>Meaning</entry>

<entry>Details</entry>

</row>

</thead>

<tbody>

<row>

<entry><literal>%m</literal></entry>

<entry>Machine ID</entry>

<entry>The machine ID of the running system, formatted as string. See <citerefentry><refentrytitle>machine-id</refentrytitle><manvolnum>5</manvolnum></citerefentry> for more information.</entry>

</row>

<row>

<entry><literal>%b</literal></entry>

<entry>Boot ID</entry>

<entry>The boot ID of the running system, formatted as string. See <citerefentry><refentrytitle>random</refentrytitle><manvolnum>4</manvolnum></citerefentry> for more information.</entry>

</row>

<row>

<entry><literal>%H</literal></entry>

<entry>Host name</entry>

<entry>The hostname of the running system.</entry>

</row>

<row>

<entry><literal>%v</literal></entry>

<entry>Kernel release</entry>

<entry>Identical to <command>uname -r</command> output.</entry>

</row>

<row>

<entry><literal>%%</literal></entry>

<entry>Escaped %</entry>

<entry>Single percent sign.</entry>

</row>

</tbody>

</tgroup>

</table>

</refsect2>

<refsect2>

<title>Mode</title>

<para>The file access mode to use when creating this file or

directory. If omitted or when set to <literal>-</literal>, the

default is used: 0755 for directories, 0644 for all other file

objects. For <varname>z</varname>, <varname>Z</varname> lines,

if omitted or when set to <literal>-</literal>, the file access

mode will not be modified. This parameter is ignored for

<varname>x</varname>, <varname>r</varname>,

<varname>R</varname>, <varname>L</varname>, <varname>t</varname>,

and <varname>a</varname> lines.</para>

<para>Optionally, if prefixed with <literal>~</literal>, the

access mode is masked based on the already set access bits for

existing file or directories: if the existing file has all

executable bits unset, all executable bits are removed from the

new access mode, too. Similarly, if all read bits are removed

from the old access mode, they will be removed from the new

access mode too, and if all write bits are removed, they will be

removed from the new access mode too. In addition, the

sticky/SUID/SGID bit is removed unless applied to a

directory. This functionality is particularly useful in

conjunction with <varname>Z</varname>.</para>

</refsect2>

<refsect2>

<title>UID, GID</title>

<para>The user and group to use for this file or directory. This

may either be a numeric user/group ID or a user or group

name. If omitted or when set to <literal>-</literal>, the

default 0 (root) is used. For <varname>z</varname>,

<varname>Z</varname> lines, when omitted or when set to

<literal>-</literal>, the file ownership will not be

modified. These parameters are ignored for <varname>x</varname>,

<varname>r</varname>, <varname>R</varname>,

<varname>L</varname>, <varname>t</varname>, and

<varname>a</varname> lines.</para>

</refsect2>

<refsect2>

<title>Age</title>

<para>The date field, when set, is used to decide what files to

delete when cleaning. If a file or directory is older than the

current time minus the age field, it is deleted. The field

format is a series of integers each followed by one of the

following postfixes for the respective time units:

<constant>s</constant>,

<constant>m</constant> or <constant>min</constant>,

<constant>h</constant>,

<constant>d</constant>,

<constant>w</constant>,

<constant>ms</constant>,

<constant>us</constant>,

respectively meaning seconds, minutes, hours, days, weeks,

milliseconds, and microseconds. Full names of the time units can

be used too.

</para>

<para>If multiple integers and units are specified, the time

values are summed. If an integer is given without a unit,

<constant>s</constant> is assumed.

</para>

<para>When the age is set to zero, the files are cleaned

unconditionally.</para>

<para>The age field only applies to lines

starting with <varname>d</varname>,

<varname>D</varname>, <varname>v</varname>,

<varname>C</varname>, <varname>x</varname> and

<varname>X</varname>. If omitted or set to

<literal>-</literal>, no automatic clean-up is

done.</para>

<para>If the age field starts with a tilde character

<literal>~</literal>, the clean-up is only applied to files and

directories one level inside the directory specified, but not

the files and directories immediately inside it.</para>

</refsect2>

<refsect2>

<title>Argument</title>

<para>For <varname>L</varname> lines determines the destination

path of the symlink. For <varname>c</varname>,

<varname>b</varname> determines the major/minor of the device

node, with major and minor formatted as integers, separated by

<literal>:</literal>, e.g. <literal>1:3</literal>. For

<varname>f</varname>, <varname>F</varname>, and

<varname>w</varname> may be used to specify a short string that

is written to the file, suffixed by a newline. For

<varname>C</varname>, specifies the source file or

directory. For <varname>t</varname>, <varname>T</varname>

determines extended attributes to be set. For

<varname>a</varname>, <varname>A</varname> determines ACL

attributes to be set. For <varname>h</varname>,

<varname>H</varname> determines the file attributes to

set. Ignored for all other lines.</para>

</refsect2>

</refsect1>

<refsect1>

<title>Example</title>

<example>

<title>/etc/tmpfiles.d/screen.conf example</title>

<para><command>screen</command> needs two directories created at

boot with specific modes and ownership.</para>

<programlisting>d /run/screens 1777 root root 10d

d /run/uscreens 0755 root root 10d12h

t /run/screen - - - - user.name="John Smith" security.SMACK64=screen</programlisting>

</example>

<example>

<title>/etc/tmpfiles.d/abrt.conf example</title>

<para><command>abrt</command> needs a directory created at boot with specific mode and ownership and its content should be preserved.</para>

<programlisting>d /var/tmp/abrt 0755 abrt abrt

x /var/tmp/abrt/*</programlisting>

</example>

</refsect1>

<refsect1>

<title>See Also</title>

<para>

<citerefentry><refentrytitle>systemd</refentrytitle><manvolnum>1</manvolnum></citerefentry>,

<citerefentry><refentrytitle>systemd-tmpfiles</refentrytitle><manvolnum>8</manvolnum></citerefentry>,

<citerefentry><refentrytitle>systemd-delta</refentrytitle><manvolnum>1</manvolnum></citerefentry>,

<citerefentry><refentrytitle>systemd.exec</refentrytitle><manvolnum>5</manvolnum></citerefentry>,

<citerefentry project='man-pages'><refentrytitle>attr</refentrytitle><manvolnum>5</manvolnum></citerefentry>,

<citerefentry project='man-pages'><refentrytitle>getfattr</refentrytitle><manvolnum>1</manvolnum></citerefentry>,

<citerefentry project='man-pages'><refentrytitle>setfattr</refentrytitle><manvolnum>1</manvolnum></citerefentry>,

<citerefentry project='man-pages'><refentrytitle>setfacl</refentrytitle><manvolnum>1</manvolnum></citerefentry>,

<citerefentry project='man-pages'><refentrytitle>getfacl</refentrytitle><manvolnum>1</manvolnum></citerefentry>,

<citerefentry project='man-pages'><refentrytitle>chattr</refentrytitle><manvolnum>1</manvolnum></citerefentry>

</para>

</refsect1>

</refentry>