X-Git-Url: http://git.linux-vserver.org/cgi-bin/gitweb.cgi?a=blobdiff_plain;f=doc%2Fconfiguration.xml;h=967e2333b2c1d52a37dfc9732227a37850422b5c;hb=8c969ef86ca0c4aff7dd1d1dc483dc9cd10c79bd;hp=040605f00d1c71dcb355ad457ff0b986a0674e45;hpb=fb1b131fb3e0ba481a7868359f8a2c91eb91def2;p=util-vserver.git diff --git a/doc/configuration.xml b/doc/configuration.xml index 040605f..967e233 100644 --- a/doc/configuration.xml +++ b/doc/configuration.xml @@ -37,10 +37,10 @@ the 'barrier' attribute. Else, common chroot(2) exploits are possible. - + -Enable namespace cleanup globally. It can be overridden for a single vserver -by setting the nonamespace-cleanup flag +Disable namespace cleanup globally. It can be overridden for a single vserver +by setting the namespace-cleanup flag there. @@ -62,6 +62,20 @@ NOTE: this link exists in 0.30.202+ only; in previous versions it was a vserver specific setting. + + + +Contains the pathname of the shell which will be used by the "vserver +... enter" command. Can be overridden by the +per-guest shell. + + + + + +The default fstab file to put in newly built guests. + + @@ -89,6 +103,33 @@ from this uri and install it at a temporary place. + + + 'x' is an arbitrary name, replace it with e.g. device names + + When this file exists, the device can be opened + + + When this file exists, the device can be created (if the guest has CAP_MKNOD) + + + +When this file exists, target will +have to exist as well and opening the device will in fact open the target device + + + + This file will let you specify unimplemented flags manually + + + Contains the name of a device node + + + Contains the device node of the target node to open instead of the device when remap is set + + + + @@ -101,7 +142,7 @@ is invoked from the kernel. This should point somewhere e.g. into -See vshelper/action. +See vshelper/action. @@ -204,6 +245,14 @@ When this file exists, vlogin isn't used on vserver <guest> enter. + + + + +A list of default options to supply to vserver ... build, one option per line. + + + @@ -214,6 +263,34 @@ interface will be executed. + + + This directory contains some files which will be copied to the guests during build. + + The default /etc/hosts file. + + + The default /etc/nsswitch.conf file. + + + The default /etc/krb5.conf file. + + + The default /etc/krb.conf file. + + + The default /etc/krb.realms file. + + + The default /etc/ldap.conf file. + + + The default /etc/localtime file. + + + The default /etc/resolv.conf file. + + @@ -364,6 +441,13 @@ url="http://svn.linux-vserver.org/svn/util-vserver/trunk/lib/ccaps-v13.c">lib/cc for possible values. + + +Contains the network capabilities. See lib/ncaps-net.c +for possible values. + + @@ -381,30 +465,24 @@ the 'barrier' attribute. Else, common chroot(2) exploits are possible. - + -Overrides the global namespace-cleanup flag and disables +Overrides the global nonamespace-cleanup flag and enables namespace cleanup for the current vserver. - - -Enable namespace cleanup for the current vserver. - - - -List of paths to skip during namespace cleanup. This overrides the -global namespace-cleanup-skip +List of paths to skip during namespace cleanup. This overrides the global +namespace-cleanup-skip file. -[experimental; name is subject of possible change] Contains the +[deprecated; use sched instead] Contains the scheduler parameters, one per line. The Hard CPU limit uses a mechanism called a Token Bucket. the @@ -470,7 +548,7 @@ Contains per line a capability. This file is used for the 2.4 kernel only; for 2.6 use bcapabilities. - + Contains the pathname of the shell which will be used by the "vserver ... enter" command. @@ -530,6 +608,13 @@ Apply the current ulimit to the whole context --> + + +Contains a network flag per line. See lib/nflags-net.c +for possible values. + + Contains the context which shall be used for the vserver. @@ -677,7 +762,7 @@ assumed. - + restart The action which is going to be executed when a vshelper event @@ -734,7 +819,7 @@ skipped. -See vshelper/action. +See vshelper/action. @@ -1211,13 +1296,13 @@ in the first line. The special keyword 'inf' is recognized. -A file which contains the hard- of the given resource in the first +A file which contains the hard-limit of the given resource in the first line. The special keyword 'inf' is recognized. -A file which contains the soft- of the given resource in the first +A file which contains the soft-limit of the given resource in the first line. The special keyword 'inf' is recognized. @@ -1226,7 +1311,8 @@ line. The special keyword 'inf' is recognized. A directory with resource limits. Possible resources are cpu, fsize, -data, stack, core, rss, nproc, nofile, memlock, as and locks. This +data, stack, core, rss, nproc, nofile, memlock, as, locks, msgqueue, +nsock, openfd, anon, shmem, semary, nsems and dentry. This configuration will be honored for kernel 2.6 only. @@ -1237,19 +1323,19 @@ in the first line. The special keyword 'inf' is recognized. -A file which contains the hard- of the given resource in the first +A file which contains the hard-limit of the given resource in the first line. The special keyword 'inf' is recognized. -A file which contains the soft- of the given resource in the first +A file which contains the soft-limit of the given resource in the first line. The special keyword 'inf' is recognized. -A file which contains the guaranted minimum of the given resource in +A file which contains the guaranteed minimum of the given resource in the first line. The special keyword 'inf' is recognized. @@ -1300,6 +1386,18 @@ tools and can *not* be modified. + + + 'x' is an arbitrary name, replace it with e.g. integers + + The sysctl setting + + + The value + + + + The name of the cpuset for this vserver @@ -1320,5 +1418,71 @@ tools and can *not* be modified. When this file exists, the cpuset will be assumed to exist already + + + + The initial amount of tokens to put in the bucket + + + The minimum amount of tokens required to unhold the context + + + The bucket's size + + + Amount of tokens to add each interval + + + The interval between refills of the bucket + + + Bias added to priorities calculated within the guest (result is clamped to -20/+19) + + + Amount of tokens to add each interval2 when advancing idle time + + + The interval between refills of the bucket when advancing idle time + + + When this file exists, advancing idle time is activated + + + This directory contains per-CPU and/or per-bucket specific settings. Remember to set the cpu-id file. All CPUs inherit the global settings. + + The initial amount of tokens to put in the bucket + + + The minimum amount of tokens required to unhold the context + + + The bucket's size + + + Amount of tokens to add each interval + + + The interval between refills of the bucket + + + Bias added to priorities calculated within the guest (result is clamped to -20/+19) + + + Amount of tokens to add each interval2 when advancing idle time + + + The interval between refills of the bucket when advancing idle time + + + When this file exists, advancing idle time is activated + + + The CPU to apply these settings to + + + The bucket to apply these settings to + + +