X-Git-Url: http://git.linux-vserver.org/cgi-bin/gitweb.cgi?a=blobdiff_plain;f=doc%2Fconfiguration.xml;h=aad5b5e9c7f2cc2f3b1b7c3dd0b998d54db7b363;hb=eb2b61482b63dd90091e1037ef68ba4441ee09d3;hp=ed7559091c5ff41a82f80dc217a62d89ae8f9b95;hpb=2bda779c80eed2b973bb6a13e35c49fd549e2a86;p=util-vserver.git
diff --git a/doc/configuration.xml b/doc/configuration.xml
index ed75590..aad5b5e 100644
--- a/doc/configuration.xml
+++ b/doc/configuration.xml
@@ -37,14 +37,20 @@ the 'barrier' attribute. Else, common chroot(2) exploits are possible.
-
+
-Enable namespace cleanup globally. It can be overridden for a single vserver
-by setting the nonamespace-cleanup flag
+Disable namespace cleanup globally. It can be overridden for a single vserver
+by setting the namespace-cleanup flag
there.
+
+
+List of paths to skip during namespace cleanup.
+
+
+
Path of the vserver run reverse directory. This directory contains
@@ -56,12 +62,40 @@ NOTE: this link exists in 0.30.202+ only; in previous versions it was
a vserver specific setting.
+
+
+
+Contains the pathname of the shell which will be used by the "vserver
+... enter" command. Can be overridden by the
+per-guest shell.
+
+
+
+
+
+The default fstab file to put in newly built guests.
+
+
+
+
+
+If this file exists, kernel-side dynamic contexts will be used by the "vserver
+... build" command. Otherwise a context will be generated, based on the
+contents of context.next.
+
+
+
+
+
+The context id to use for the next guest created by "vserver ... build".
+
+ /vservers/.pkg
-
+
The default apt.conf which is going to be used. It is overridden by
distribution specific configuration file.
@@ -83,6 +117,33 @@ from this uri and install it at a temporary place.
+
+
+ 'x' is an arbitrary name, replace it with e.g. device names
+
+ When this file exists, the device can be opened
+
+
+ When this file exists, the device can be created (if the guest has CAP_MKNOD)
+
+
+
+When this file exists, target will
+have to exist as well and opening the device will in fact open the target device
+
+
+
+ This file will let you specify unimplemented flags manually
+
+
+ Contains the name of a device node
+
+
+ Contains the device node of the target node to open instead of the device when remap is set
+
+
+
+
@@ -95,7 +156,7 @@ is invoked from the kernel. This should point somewhere e.g. into
-See vshelper/action.
+See vshelper/action.
@@ -190,6 +251,22 @@ operation will fail. Most tools assume 'on' as the default value.
+
+
+
+
+When this file exists, vlogin isn't used on vserver <guest> enter.
+
+
+
+
+
+
+
+A list of default options to supply to vserver ... build, one option per line.
+
+
+
@@ -200,6 +277,34 @@ interface will be executed.
+
+
+ This directory contains some files which will be copied to the guests during build.
+
+ The default /etc/hosts file.
+
+
+ The default /etc/nsswitch.conf file.
+
+
+ The default /etc/krb5.conf file.
+
+
+ The default /etc/krb.conf file.
+
+
+ The default /etc/krb.realms file.
+
+
+ The default /etc/ldap.conf file.
+
+
+ The default /etc/localtime file.
+
+
+ The default /etc/resolv.conf file.
+
+
@@ -338,19 +443,25 @@ the vserver is stopped, this can be a dangling symlink.
-[experimental; name is subject of possible change] Contains the system capabilities. See
+Contains the system capabilities. See
lib/bcaps-v13.c
for possible values.
-[experimental; name is subject of possible change] Contains the
-context capabilities. See lib/ccaps-v13.c
for possible values.
+
+
+Contains the network capabilities. See lib/ncaps-net.c
+for possible values.
+
+
@@ -368,22 +479,24 @@ the 'barrier' attribute. Else, common chroot(2) exploits are possible.
-
+
-Overrides the global namespace-cleanup flag and disables
+Overrides the global nonamespace-cleanup flag and enables
namespace cleanup for the current vserver.
-
+
-Enable namespace cleanup for the current vserver.
+List of paths to skip during namespace cleanup. This overrides the global
+namespace-cleanup-skip
+file.
-
+
-[experimental; name is subject of possible change] Contains the
+[deprecated; use sched instead] Contains the
scheduler parameters, one per line.
The Hard CPU limit uses a mechanism called a Token Bucket. the
@@ -449,7 +562,7 @@ Contains per line a capability. This file is used for the 2.4 kernel
only; for 2.6 use bcapabilities.
-
+
Contains the pathname of the shell which will be used by the "vserver
... enter" command.
@@ -493,7 +606,7 @@ The new process and its children will share a common
Limit the number of process in the vserver according to
ulimit setting. Normally, ulimit is a per user thing.
-With this flag, it becomes a per vserver thing.
+With this flag, it becomes a per vserver thing.
@@ -509,6 +622,13 @@ Apply the current ulimit to the whole context
-->
+
+
+Contains a network flag per line. See lib/nflags-net.c
+for possible values.
+
+
Contains the context which shall be used for the vserver.
@@ -656,7 +776,7 @@ assumed.
-
+ restart
The action which is going to be executed when a vshelper event
@@ -713,7 +833,7 @@ skipped.
-See vshelper/action.
+See vshelper/action.
@@ -815,7 +935,7 @@ The name of the current vserver.
Repository of initialize like scripts. Before executing the script,
the configuration directory will be made the working directory.
-
+ See initialize.
@@ -856,7 +976,7 @@ The name of the current vserver.
Repository of prepre-start like scripts. Before executing the script,
the configuration directory will be made the working directory.
-
+ See prepre-start.
@@ -898,7 +1018,7 @@ The name of the current vserver.
Repository of pre-start like scripts. Before executing these scripts,
the vserver root directory will be made the working directory.
-
+
See pre-start.
@@ -982,7 +1102,7 @@ The name of the current vserver.
Repository of pre-stop like scripts. Before executing the script, the
vserver root directory will be made the working directory.
-
+
See pre-stop.
@@ -1180,24 +1300,23 @@ interface will be executed.
A directory with ulimits. Possible resources are cpu, data, fsize,
-locks, memlock, nofile, nproc, rss and/or stack. This configuration
-will be honored for kernel 2.4 only.
-
+locks, memlock, nofile, nproc, rss and/or stack.
+
A file which contains the hard- and soft-limit of the given resource
in the first line. The special keyword 'inf' is recognized.
-
+
-A file which contains the hard- of the given resource in the first
+A file which contains the hard-limit of the given resource in the first
line. The special keyword 'inf' is recognized.
-
+
-A file which contains the soft- of the given resource in the first
+A file which contains the soft-limit of the given resource in the first
line. The special keyword 'inf' is recognized.
@@ -1206,30 +1325,31 @@ line. The special keyword 'inf' is recognized.
A directory with resource limits. Possible resources are cpu, fsize,
-data, stack, core, rss, nproc, nofile, memlock, as and locks. This
+data, stack, core, rss, nproc, nofile, memlock, as, locks, msgqueue,
+nsock, openfd, anon, shmem, semary, nsems and dentry. This
configuration will be honored for kernel 2.6 only.
-
+
A file which contains the hard- and soft-limit of the given resource
in the first line. The special keyword 'inf' is recognized.
-
+
-A file which contains the hard- of the given resource in the first
+A file which contains the hard-limit of the given resource in the first
line. The special keyword 'inf' is recognized.
-
+
-A file which contains the soft- of the given resource in the first
+A file which contains the soft-limit of the given resource in the first
line. The special keyword 'inf' is recognized.
-A file which contains the guaranted minimum of the given resource in
+A file which contains the guaranteed minimum of the given resource in
the first line. The special keyword 'inf' is recognized.
@@ -1280,6 +1400,18 @@ tools and can *not* be modified.
+
+
+ 'x' is an arbitrary name, replace it with e.g. integers
+
+ The sysctl setting
+
+
+ The value
+
+
+
+
The name of the cpuset for this vserver
@@ -1300,5 +1432,71 @@ tools and can *not* be modified.
When this file exists, the cpuset will be assumed to exist already
+
+
+
+ The initial amount of tokens to put in the bucket
+
+
+ The minimum amount of tokens required to unhold the context
+
+
+ The bucket's size
+
+
+ Amount of tokens to add each interval
+
+
+ The interval between refills of the bucket
+
+
+ Bias added to priorities calculated within the guest (result is clamped to -20/+19)
+
+
+ Amount of tokens to add each interval2 when advancing idle time
+
+
+ The interval between refills of the bucket when advancing idle time
+
+
+ When this file exists, advancing idle time is activated
+
+
+ This directory contains per-CPU and/or per-bucket specific settings. Remember to set the cpu-id file. All CPUs inherit the global settings.
+
+ The initial amount of tokens to put in the bucket
+
+
+ The minimum amount of tokens required to unhold the context
+
+
+ The bucket's size
+
+
+ Amount of tokens to add each interval
+
+
+ The interval between refills of the bucket
+
+
+ Bias added to priorities calculated within the guest (result is clamped to -20/+19)
+
+
+ Amount of tokens to add each interval2 when advancing idle time
+
+
+ The interval between refills of the bucket when advancing idle time
+
+
+ When this file exists, advancing idle time is activated
+
+
+ The CPU to apply these settings to
+
+
+ The bucket to apply these settings to
+
+
+