SYSTEMD.NSPAWN(5) systemd.nspawn SYSTEMD.NSPAWN(5) systemd.nspawn - /etc/systemd/nspawn/machine.nspawn /run/systemd/nspawn/machine.nspawn /var/lib/machines/machine.nspawn nspawn ( .nspawn) systemd-nspawn(1). . . systemd-nspawn . .desktop systemd. systemd.syntax(7) . .NSPAWN .nspawn --machine= systemd-nspawn . /etc/systemd/nspawn/ /run/systemd/nspawn/. ( ). . . ( ) . . ( ) /etc/systemd/nspawn/ ( ) /var/lib/machines/ ( ) . .nspawn /etc/systemd/nspawn/ . --settings= systemd-nspawn' systemd-nspawn(1) . [EXEC] [Exec] : Boot= off. systemd-nspawn init . Parameters= init. --boot systemd-nspawn. ProcessTwo=yes. systemd-nspawn@.service. 226. Ephemeral= off . --ephemeral. systemd-nspawn(1) . 240. ProcessTwo= off. PID 2. init PID 1. --as-pid2 systemd-nspawn. Boot=yes. 229. = . ("'") (""") . - Boot= - init. systemd-nspawn. : Boot=no, Parameters=a b "c c" systemd-nspawn a b "c c" Boot=yes, Parameters=b 'c c' systemd-nspawn --boot b 'c c'. 226. Environment= "=". . . --setenv=. 226. User= UNIX. . '. --user=. 226. WorkingDirectory= . '. --chdir=. 229. PivotRoot= / . . '. --pivot-root=. 233. Capability=, DropCapability= Linux ( capabilities(7) ). Capability= . DropCapability= . --capability= --drop-capability=. Capability= .nspawn /etc/systemd/nspawn/ /run/system/nspawn/ ( ). DropCapability= . "all" ( ). AmbientCapability=. 226. AmbientCapability= Linux ( capabilities(7) ). AmbientCapability= . . --ambient-capability=. "all" . AmbientCapability= Capability= DropCapability=. AmbientCapability= ( ). 248. NoNewPrivileges= PR_SET_NO_NEW_PRIVS . --no-new-privileges=. systemd-nspawn(1) . 239. KillSignal= PID 1 nspawn SIGTERM . SIGRTMIN+3 Boot= ( init systemd SIGRTMIN+3 ). signal(7). 230. Personality= . --personality=. 226. MachineID= 128- (UUID) . --uuid=. ( ). 226. PrivateUsers= . --private-users= . ( ). systemd-nspawn@.service. 230. PrivateUsersDelegate= . 64K UID/GID . varlink systemd-nsresourced.service(8) bind-mount . --private-users-delegate=. PrivateUsers=managed. 0. systemd-nspawn(1) . 260. NotifyReady= init . --notify-ready= . systemd-nspawn(1) . 231. SystemCallFilter= . --system-call-filter= . systemd-nspawn(1) . 235. LimitCPU= LimitFSIZE= LimitDATA= LimitSTACK= LimitCORE= LimitRSS= LimitNOFILE= LimitAS= LimitNPROC= LimitMEMLOCK= LimitLOCKS= LimitSIGPENDING= LimitMSGQUEUE= LimitNICE= LimitRTPRIO= LimitRTTIME= . --rlimit= . systemd-nspawn(1) . 239. OOMScoreAdjust= OOM. --oom-score-adjust= . systemd-nspawn(1) . 239. CPUAffinity= . --cpu-affinity= . systemd-nspawn(1) . 239. Hostname= . --hostname= . systemd-nspawn(1) . 239. ResolvConf= /etc/resolv.conf . --resolv-conf= . systemd-nspawn(1) . 239. Timezone= /etc/localtime . --timezone= . systemd-nspawn(1) . 239. LinkJournal= . --link-journal= . systemd-nspawn(1) . 239. SuppressSync= . --suppress-sync= . systemd-nspawn(1) . 250. [FILES] [Files] : ReadOnly= off. . --read-only. 226. Volatile= "state". / . --volatile= systemd-nspawn(1) . 226. Bind=, BindReadOnly= . . . --bind= --bind-ro= systemd-nspawn(1) . ( ). 226. BindUser= . --bind-user= systemd-nspawn(1) . ( ). 249. BindUserShell= BindUser . --bind-user-shell= systemd-nspawn(1) . ( ). 258. TemporaryFileSystem= "tmpfs" . . "tmpfs" . --tmpfs= systemd-nspawn(1) . ( ). 226. Inaccessible= . . . --inaccessible= systemd-nspawn(1) . ( ). 242. Overlay=, OverlayReadOnly= . . . --overlay= --overlay-ro= systemd-nspawn(1) . ( ). 233. PrivateUsersOwnership= UID/GID . --private-users-ownership=. ( ). 249. [NETWORK] [Network] : Private= off. . --private-network. 226. NamespacePath= . ( ) /proc/$PID/ns/net. . /run/netns ip-netns(8) NamespacePath=/run/netns/foo. Private= Interface=. --network-namespace-path. 259. VirtualEthernet= . ("veth") . Private=yes. --network-veth. systemd-nspawn@.service. 226. VirtualEthernetExtra= . ("veth") . . . Private=yes. --network-veth-extra= . VirtualEthernet=. Bridge= . ( ). 228. Interface= . . --network-interface= Private=yes. ( ). 226. MACVLAN= IPVLAN= MACVLAN IPVLAN . . --network-macvlan= --network-ipvlan= Private=yes. ( ). 226. Bridge= . VirtualEthernet=yes Private=yes . --network-bridge=. ( ). 226. Zone= . VirtualEthernet=yes Private=yes "vz-". --network-zone=. ( ). 230. Port= TCP UDP . --port= systemd-nspawn(1) . ( ). 226. systemd(1), systemd-nspawn(1), systemd.directives(7) 3 . . : . systemd 260.2 SYSTEMD.NSPAWN(5)