diff options
Diffstat (limited to 'upstream/debian-unstable/man8')
202 files changed, 3614 insertions, 3866 deletions
diff --git a/upstream/debian-unstable/man8/autolog.8 b/upstream/debian-unstable/man8/autolog.8 index 9e080db4..eaa820e9 100644 --- a/upstream/debian-unstable/man8/autolog.8 +++ b/upstream/debian-unstable/man8/autolog.8 @@ -85,9 +85,9 @@ present. Kyle Bateman <kyle@actarg.com> (autolog 0.35), .PD 0 .TP -James Dingwall <james.dingwall@zynstra.com> +James Dingwall <james.dingwall@ncrvoyix.com> .TP - (autolog 0.41) + (autolog 0.42.1) .PD .PP This manual page was modified for \fBDebian\fP by Paul Telford <pxt@debian.org> diff --git a/upstream/debian-unstable/man8/badblocks.8 b/upstream/debian-unstable/man8/badblocks.8 index 0b0d8644..f264b720 100644 --- a/upstream/debian-unstable/man8/badblocks.8 +++ b/upstream/debian-unstable/man8/badblocks.8 @@ -1,5 +1,5 @@ .\" -*- nroff -*- -.TH BADBLOCKS 8 "February 2023" "E2fsprogs version 1.47.0" +.TH BADBLOCKS 8 "May 2024" "E2fsprogs version 1.47.1" .SH NAME badblocks \- search a device for bad blocks .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/bridge.8 b/upstream/debian-unstable/man8/bridge.8 index a60964bb..bb02bd27 100644 --- a/upstream/debian-unstable/man8/bridge.8 +++ b/upstream/debian-unstable/man8/bridge.8 @@ -22,6 +22,7 @@ bridge \- show / manipulate bridge addresses and devices \fB\-s\fR[\fItatistics\fR] | \fB\-n\fR[\fIetns\fR] name | \fB\-b\fR[\fIatch\fR] filename | +\fB\-com\fR[\fIpressvlans\fR] | \fB\-c\fR[\fIolor\fR] | \fB\-p\fR[\fIretty\fR] | \fB\-j\fR[\fIson\fR] | @@ -188,6 +189,25 @@ bridge \- show / manipulate bridge addresses and devices .IR SRC_VNI " ]" .ti -8 +.B "bridge mdb flush" +.BI dev " DEV " +.RB "[ " port +.IR PORT " ]" +.RB "[ " vid +.IR VID " ]" +.RB "[ " src_vni +.IR SRC_VNI " ]" +.RB "[ " proto +.IR PROTO " ]" +.RB "[ " [no]permanent " ]" +.RB "[ " dst +.IR IPADDR " ]" +.RB "[ " dst_port +.IR DST_PORT " ]" +.RB "[ " vni +.IR VNI " ]" + +.ti -8 .BR "bridge vlan" " { " add " | " del " } " .B dev .I DEV @@ -327,6 +347,11 @@ If there were any errors during execution of the commands, the application return code will be non zero. .TP +.BR "\-com", " \-compressvlans" +Show compressed VLAN list. It will show continuous VLANs with the range instead +of separated VLANs. Default is off. + +.TP .BR \-c [ color ][ = { always | auto | never } Configure color output. If parameter is omitted or .BR always , @@ -1172,6 +1197,54 @@ the VLAN ID. Only relevant when the bridge is VLAN-aware. the source VNI Network Identifier. Only relevant when the VXLAN device is in external mode. +.SS bridge mdb flush - flush multicast group database entries. + +This command flushes the matching multicast group database entries. + +.TP +.BI dev " DEV" +the interface where this group address is associated. + +.TP +.BI port " PORT" +the target port for the operation. If the bridge device is specified then only +entries pointing to the bridge itself will be deleted. + +.TP +.BI vid " VID" +the VLAN ID for the operation. Match entries only with the specified VLAN ID. + +.TP +.BI src_vni " SRC_VNI" +the source VNI Network Identifier for the operation. Match entries only with +the specified source VNI. + +.TP +.BI proto " PROTO" +the routing protocol identifier for the operation. Match entries only with the +specified routing protocol. Can be a number or a string from the file +/etc/iproute2/rt_protos. + +.TP +.B [no]permanent +if specified then only permanent entries will be deleted or respectively if +"no" is prepended then only non-permanent (temp) entries will be deleted. + +.TP +.BI dst " IPADDR" +the IP address of the destination VXLAN tunnel endpoint where the multicast +receivers reside. Match entries only with the specified destination IP. + +.TP +.BI dst_port " DST_PORT" +the UDP destination port number to use to connect to the remote VXLAN tunnel +endpoint. Match entries only with the specified destination port number. + +.TP +.BI vni " VNI" +the VXLAN VNI Network Identifier to use to connect to the remote VXLAN tunnel +endpoint. Match entries only with the specified destination VNI. + .SH bridge vlan - VLAN filter list .B vlan diff --git a/upstream/debian-unstable/man8/btrfs-balance.8 b/upstream/debian-unstable/man8/btrfs-balance.8 index 4b1c21f9..1f0d9cbd 100644 --- a/upstream/debian-unstable/man8/btrfs-balance.8 +++ b/upstream/debian-unstable/man8/btrfs-balance.8 @@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]] .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]] .in \\n[rst2man-indent\\n[rst2man-indent-level]]u .. -.TH "BTRFS-BALANCE" "8" "Feb 28, 2024" "6.6.3" "BTRFS" +.TH "BTRFS-BALANCE" "8" "Mar 24, 2024" "6.6.3" "BTRFS" .SH NAME btrfs-balance \- balance block groups on a btrfs filesystem .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/btrfs-check.8 b/upstream/debian-unstable/man8/btrfs-check.8 index 3eb4a872..bb4721ae 100644 --- a/upstream/debian-unstable/man8/btrfs-check.8 +++ b/upstream/debian-unstable/man8/btrfs-check.8 @@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]] .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]] .in \\n[rst2man-indent\\n[rst2man-indent-level]]u .. -.TH "BTRFS-CHECK" "8" "Feb 28, 2024" "6.6.3" "BTRFS" +.TH "BTRFS-CHECK" "8" "Mar 24, 2024" "6.6.3" "BTRFS" .SH NAME btrfs-check \- check or repair a btrfs filesystem .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/btrfs-convert.8 b/upstream/debian-unstable/man8/btrfs-convert.8 index 89ff6942..dbcf271a 100644 --- a/upstream/debian-unstable/man8/btrfs-convert.8 +++ b/upstream/debian-unstable/man8/btrfs-convert.8 @@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]] .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]] .in \\n[rst2man-indent\\n[rst2man-indent-level]]u .. -.TH "BTRFS-CONVERT" "8" "Feb 28, 2024" "6.6.3" "BTRFS" +.TH "BTRFS-CONVERT" "8" "Mar 24, 2024" "6.6.3" "BTRFS" .SH NAME btrfs-convert \- convert from ext2/3/4 or reiserfs filesystem to btrfs in-place .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/btrfs-device.8 b/upstream/debian-unstable/man8/btrfs-device.8 index 68d592c5..37a211c6 100644 --- a/upstream/debian-unstable/man8/btrfs-device.8 +++ b/upstream/debian-unstable/man8/btrfs-device.8 @@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]] .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]] .in \\n[rst2man-indent\\n[rst2man-indent-level]]u .. -.TH "BTRFS-DEVICE" "8" "Feb 28, 2024" "6.6.3" "BTRFS" +.TH "BTRFS-DEVICE" "8" "Mar 24, 2024" "6.6.3" "BTRFS" .SH NAME btrfs-device \- manage devices of btrfs filesystems .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/btrfs-filesystem.8 b/upstream/debian-unstable/man8/btrfs-filesystem.8 index 5633ff85..d845ff3b 100644 --- a/upstream/debian-unstable/man8/btrfs-filesystem.8 +++ b/upstream/debian-unstable/man8/btrfs-filesystem.8 @@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]] .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]] .in \\n[rst2man-indent\\n[rst2man-indent-level]]u .. -.TH "BTRFS-FILESYSTEM" "8" "Feb 28, 2024" "6.6.3" "BTRFS" +.TH "BTRFS-FILESYSTEM" "8" "Mar 24, 2024" "6.6.3" "BTRFS" .SH NAME btrfs-filesystem \- command group that primarily does work on the whole filesystems .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/btrfs-find-root.8 b/upstream/debian-unstable/man8/btrfs-find-root.8 index 25408ac3..238072e3 100644 --- a/upstream/debian-unstable/man8/btrfs-find-root.8 +++ b/upstream/debian-unstable/man8/btrfs-find-root.8 @@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]] .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]] .in \\n[rst2man-indent\\n[rst2man-indent-level]]u .. -.TH "BTRFS-FIND-ROOT" "8" "Feb 28, 2024" "6.6.3" "BTRFS" +.TH "BTRFS-FIND-ROOT" "8" "Mar 24, 2024" "6.6.3" "BTRFS" .SH NAME btrfs-find-root \- filter to find btrfs root .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/btrfs-image.8 b/upstream/debian-unstable/man8/btrfs-image.8 index 958baaf2..e7ec214f 100644 --- a/upstream/debian-unstable/man8/btrfs-image.8 +++ b/upstream/debian-unstable/man8/btrfs-image.8 @@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]] .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]] .in \\n[rst2man-indent\\n[rst2man-indent-level]]u .. -.TH "BTRFS-IMAGE" "8" "Feb 28, 2024" "6.6.3" "BTRFS" +.TH "BTRFS-IMAGE" "8" "Mar 24, 2024" "6.6.3" "BTRFS" .SH NAME btrfs-image \- create/restore an image of the filesystem .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/btrfs-inspect-internal.8 b/upstream/debian-unstable/man8/btrfs-inspect-internal.8 index 52ea4080..6d1efd95 100644 --- a/upstream/debian-unstable/man8/btrfs-inspect-internal.8 +++ b/upstream/debian-unstable/man8/btrfs-inspect-internal.8 @@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]] .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]] .in \\n[rst2man-indent\\n[rst2man-indent-level]]u .. -.TH "BTRFS-INSPECT-INTERNAL" "8" "Feb 28, 2024" "6.6.3" "BTRFS" +.TH "BTRFS-INSPECT-INTERNAL" "8" "Mar 24, 2024" "6.6.3" "BTRFS" .SH NAME btrfs-inspect-internal \- query various internal information .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/btrfs-map-logical.8 b/upstream/debian-unstable/man8/btrfs-map-logical.8 index 1fc7379f..583d2bc2 100644 --- a/upstream/debian-unstable/man8/btrfs-map-logical.8 +++ b/upstream/debian-unstable/man8/btrfs-map-logical.8 @@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]] .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]] .in \\n[rst2man-indent\\n[rst2man-indent-level]]u .. -.TH "BTRFS-MAP-LOGICAL" "8" "Feb 28, 2024" "6.6.3" "BTRFS" +.TH "BTRFS-MAP-LOGICAL" "8" "Mar 24, 2024" "6.6.3" "BTRFS" .SH NAME btrfs-map-logical \- map btrfs logical extent to physical extent .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/btrfs-property.8 b/upstream/debian-unstable/man8/btrfs-property.8 index f00bb77c..8f6df48c 100644 --- a/upstream/debian-unstable/man8/btrfs-property.8 +++ b/upstream/debian-unstable/man8/btrfs-property.8 @@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]] .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]] .in \\n[rst2man-indent\\n[rst2man-indent-level]]u .. -.TH "BTRFS-PROPERTY" "8" "Feb 28, 2024" "6.6.3" "BTRFS" +.TH "BTRFS-PROPERTY" "8" "Mar 24, 2024" "6.6.3" "BTRFS" .SH NAME btrfs-property \- get/set/list properties for given filesystem object .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/btrfs-qgroup.8 b/upstream/debian-unstable/man8/btrfs-qgroup.8 index 2ccc6a92..b80d399d 100644 --- a/upstream/debian-unstable/man8/btrfs-qgroup.8 +++ b/upstream/debian-unstable/man8/btrfs-qgroup.8 @@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]] .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]] .in \\n[rst2man-indent\\n[rst2man-indent-level]]u .. -.TH "BTRFS-QGROUP" "8" "Feb 28, 2024" "6.6.3" "BTRFS" +.TH "BTRFS-QGROUP" "8" "Mar 24, 2024" "6.6.3" "BTRFS" .SH NAME btrfs-qgroup \- control the quota group of a btrfs filesystem .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/btrfs-quota.8 b/upstream/debian-unstable/man8/btrfs-quota.8 index cdf46589..ff45ab3a 100644 --- a/upstream/debian-unstable/man8/btrfs-quota.8 +++ b/upstream/debian-unstable/man8/btrfs-quota.8 @@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]] .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]] .in \\n[rst2man-indent\\n[rst2man-indent-level]]u .. -.TH "BTRFS-QUOTA" "8" "Feb 28, 2024" "6.6.3" "BTRFS" +.TH "BTRFS-QUOTA" "8" "Mar 24, 2024" "6.6.3" "BTRFS" .SH NAME btrfs-quota \- control the global quota status of a btrfs filesystem .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/btrfs-receive.8 b/upstream/debian-unstable/man8/btrfs-receive.8 index 069e680f..b8f3d96e 100644 --- a/upstream/debian-unstable/man8/btrfs-receive.8 +++ b/upstream/debian-unstable/man8/btrfs-receive.8 @@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]] .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]] .in \\n[rst2man-indent\\n[rst2man-indent-level]]u .. -.TH "BTRFS-RECEIVE" "8" "Feb 28, 2024" "6.6.3" "BTRFS" +.TH "BTRFS-RECEIVE" "8" "Mar 24, 2024" "6.6.3" "BTRFS" .SH NAME btrfs-receive \- receive subvolumes from send stream .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/btrfs-replace.8 b/upstream/debian-unstable/man8/btrfs-replace.8 index 5c326e27..bd104225 100644 --- a/upstream/debian-unstable/man8/btrfs-replace.8 +++ b/upstream/debian-unstable/man8/btrfs-replace.8 @@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]] .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]] .in \\n[rst2man-indent\\n[rst2man-indent-level]]u .. -.TH "BTRFS-REPLACE" "8" "Feb 28, 2024" "6.6.3" "BTRFS" +.TH "BTRFS-REPLACE" "8" "Mar 24, 2024" "6.6.3" "BTRFS" .SH NAME btrfs-replace \- replace devices managed by btrfs with other device .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/btrfs-rescue.8 b/upstream/debian-unstable/man8/btrfs-rescue.8 index ba6f3e0c..779cc834 100644 --- a/upstream/debian-unstable/man8/btrfs-rescue.8 +++ b/upstream/debian-unstable/man8/btrfs-rescue.8 @@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]] .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]] .in \\n[rst2man-indent\\n[rst2man-indent-level]]u .. -.TH "BTRFS-RESCUE" "8" "Feb 28, 2024" "6.6.3" "BTRFS" +.TH "BTRFS-RESCUE" "8" "Mar 24, 2024" "6.6.3" "BTRFS" .SH NAME btrfs-rescue \- recover a damaged btrfs filesystem .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/btrfs-restore.8 b/upstream/debian-unstable/man8/btrfs-restore.8 index a643f77f..c2143d3a 100644 --- a/upstream/debian-unstable/man8/btrfs-restore.8 +++ b/upstream/debian-unstable/man8/btrfs-restore.8 @@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]] .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]] .in \\n[rst2man-indent\\n[rst2man-indent-level]]u .. -.TH "BTRFS-RESTORE" "8" "Feb 28, 2024" "6.6.3" "BTRFS" +.TH "BTRFS-RESTORE" "8" "Mar 24, 2024" "6.6.3" "BTRFS" .SH NAME btrfs-restore \- try to restore files from a damaged filesystem image .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/btrfs-scrub.8 b/upstream/debian-unstable/man8/btrfs-scrub.8 index 386ac720..c35c849b 100644 --- a/upstream/debian-unstable/man8/btrfs-scrub.8 +++ b/upstream/debian-unstable/man8/btrfs-scrub.8 @@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]] .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]] .in \\n[rst2man-indent\\n[rst2man-indent-level]]u .. -.TH "BTRFS-SCRUB" "8" "Feb 28, 2024" "6.6.3" "BTRFS" +.TH "BTRFS-SCRUB" "8" "Mar 24, 2024" "6.6.3" "BTRFS" .SH NAME btrfs-scrub \- scrub btrfs filesystem, verify block checksums .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/btrfs-select-super.8 b/upstream/debian-unstable/man8/btrfs-select-super.8 index 81adca29..be40524a 100644 --- a/upstream/debian-unstable/man8/btrfs-select-super.8 +++ b/upstream/debian-unstable/man8/btrfs-select-super.8 @@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]] .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]] .in \\n[rst2man-indent\\n[rst2man-indent-level]]u .. -.TH "BTRFS-SELECT-SUPER" "8" "Feb 28, 2024" "6.6.3" "BTRFS" +.TH "BTRFS-SELECT-SUPER" "8" "Mar 24, 2024" "6.6.3" "BTRFS" .SH NAME btrfs-select-super \- overwrite primary superblock with a backup copy .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/btrfs-send.8 b/upstream/debian-unstable/man8/btrfs-send.8 index 6d88cc21..36352776 100644 --- a/upstream/debian-unstable/man8/btrfs-send.8 +++ b/upstream/debian-unstable/man8/btrfs-send.8 @@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]] .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]] .in \\n[rst2man-indent\\n[rst2man-indent-level]]u .. -.TH "BTRFS-SEND" "8" "Feb 28, 2024" "6.6.3" "BTRFS" +.TH "BTRFS-SEND" "8" "Mar 24, 2024" "6.6.3" "BTRFS" .SH NAME btrfs-send \- generate a stream of changes between two subvolume snapshots .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/btrfs-subvolume.8 b/upstream/debian-unstable/man8/btrfs-subvolume.8 index b89ff5d5..dd57afab 100644 --- a/upstream/debian-unstable/man8/btrfs-subvolume.8 +++ b/upstream/debian-unstable/man8/btrfs-subvolume.8 @@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]] .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]] .in \\n[rst2man-indent\\n[rst2man-indent-level]]u .. -.TH "BTRFS-SUBVOLUME" "8" "Feb 28, 2024" "6.6.3" "BTRFS" +.TH "BTRFS-SUBVOLUME" "8" "Mar 24, 2024" "6.6.3" "BTRFS" .SH NAME btrfs-subvolume \- manage btrfs subvolumes .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/btrfs.8 b/upstream/debian-unstable/man8/btrfs.8 index 39f107fd..da9ec4fd 100644 --- a/upstream/debian-unstable/man8/btrfs.8 +++ b/upstream/debian-unstable/man8/btrfs.8 @@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]] .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]] .in \\n[rst2man-indent\\n[rst2man-indent-level]]u .. -.TH "BTRFS" "8" "Feb 28, 2024" "6.6.3" "BTRFS" +.TH "BTRFS" "8" "Mar 24, 2024" "6.6.3" "BTRFS" .SH NAME btrfs \- a toolbox to manage btrfs filesystems .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/btrfstune.8 b/upstream/debian-unstable/man8/btrfstune.8 index a87283c5..e934f4ca 100644 --- a/upstream/debian-unstable/man8/btrfstune.8 +++ b/upstream/debian-unstable/man8/btrfstune.8 @@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]] .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]] .in \\n[rst2man-indent\\n[rst2man-indent-level]]u .. -.TH "BTRFSTUNE" "8" "Feb 28, 2024" "6.6.3" "BTRFS" +.TH "BTRFSTUNE" "8" "Mar 24, 2024" "6.6.3" "BTRFS" .SH NAME btrfstune \- tune various filesystem parameters .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/chroot.8 b/upstream/debian-unstable/man8/chroot.8 index 06be5b4e..03450e1e 100644 --- a/upstream/debian-unstable/man8/chroot.8 +++ b/upstream/debian-unstable/man8/chroot.8 @@ -1,5 +1,5 @@ .\" DO NOT MODIFY THIS FILE! It was generated by help2man 1.48.5. -.TH CHROOT "8" "January 2024" "GNU coreutils 9.4" "User Commands" +.TH CHROOT "8" "March 2024" "GNU coreutils 9.4" "User Commands" .SH NAME chroot \- run command or interactive shell with special root directory .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/cron.8 b/upstream/debian-unstable/man8/cron.8 index e1f29004..04265757 100644 --- a/upstream/debian-unstable/man8/cron.8 +++ b/upstream/debian-unstable/man8/cron.8 @@ -1,348 +1,475 @@ -.\"/* Copyright 1988,1990,1993 by Paul Vixie -.\" * All rights reserved -.\" * -.\" * Distribute freely, except: don't remove my name from the source or -.\" * documentation (don't take credit for my work), mark your changes (don't -.\" * get me blamed for your possible bugs), don't alter or remove this -.\" * notice. May be sold if buildable source is provided to buyer. No -.\" * warrantee of any kind, express or implied, is included with this -.\" * software; use at your own risk, responsibility for damages (if any) to -.\" * anyone resulting from the use of this software rests entirely with the -.\" * user. -.\" * -.\" * Send bug reports, bug fixes, enhancements, requests, flames, etc., and -.\" * I'll try to keep a version up to date. I can be reached as follows: -.\" * Paul Vixie <paul@vix.com> uunet!decwrl!vixie!paul -.\" */ +'\" t +.\" Title: Cron +.\" Author: Paul Vixie <paul@vix.com> +.\" Generator: DocBook XSL Stylesheets vsnapshot <http://docbook.sf.net/> +.\" Date: 03/26/2024 +.\" Manual: cron User Manual +.\" Source: cron +.\" Language: English .\" -.\" $Id: cron.8,v 2.2 1993/12/28 08:34:43 vixie Exp $ -.\" -.TH CRON 8 "19 April 2010" -.UC 4 -.SH NAME +.TH "CRON" "8" "03/26/2024" "cron" "cron User Manual" +.\" ----------------------------------------------------------------- +.\" * Define some portability stuff +.\" ----------------------------------------------------------------- +.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ +.\" http://bugs.debian.org/507673 +.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html +.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ +.ie \n(.g .ds Aq \(aq +.el .ds Aq ' +.\" ----------------------------------------------------------------- +.\" * set default formatting +.\" ----------------------------------------------------------------- +.\" disable hyphenation +.nh +.\" disable justification (adjust text to left margin only) +.ad l +.\" ----------------------------------------------------------------- +.\" * MAIN CONTENT STARTS HERE * +.\" ----------------------------------------------------------------- +.SH "NAME" cron \- daemon to execute scheduled commands (Vixie Cron) -.SH SYNOPSIS -cron -.RB [ \-f ] -.RB [ \-l ] -.RB [ \-L -.IR loglevel ] -.RB [ \-n -.IR fqdn ] -.RB [ \-x -.IR debugflags ] - -cron -.RB [ \-N ] -.SH DESCRIPTION -.I cron -is started automatically from /etc/init.d on entering multi-user -runlevels. -.SH OPTIONS -.TP 8 -.B \-f -Stay in foreground mode, don't daemonize. -.TP -.B \-l -Enable LSB compliant names for /etc/cron.d files. This setting, however, does -not affect the parsing of files under /etc/cron.hourly, /etc/cron.daily, -/etc/cron.weekly or /etc/cron.monthly. -.TP -.B \-n -Include the FQDN in the subject when sending mails. By default, cron will -abbreviate the hostname. -.TP -.B \-N -Run cron jobs Now, immediately, and exit. This option is useful to perform -tests. -.TP -.B \-L loglevel -Tell cron what to log about \fBjobs\fR (errors are logged regardless of this -value) as the sum of the following values: -.br -.RS 12 -.IP \fB1\fR +.SH "SYNOPSIS" +.HP \w'\fBcron\fR\ 'u +\fBcron\fR [\fB\-f\fR] [\fB\-l\fR] [\fB\-L\ \fR\fB\fIloglevel\fR\fR] [\fB\-n\ \fR\fB\fIfqdn\fR\fR] [\fB\-x\ \fR\fB\fIdebugflags\fR\fR] +.HP \w'\fBcron\fR\ 'u +\fBcron\fR [\fB\-N\fR] +.SH "DESCRIPTION" +.PP +\fBcron\fR +is started automatically from +/etc/init\&.d +on entering multi\-user runlevels\&. +.SH "OPTIONS" +.PP +\fB\-f\fR +.RS 4 +Stay in foreground mode, don\*(Aqt daemonize\&. +.RE +.PP +\fB\-l\fR +.RS 4 +Enable LSB compliant names for /etc/cron\&.d files\&. This setting, however, does not affect the parsing of files under +/etc/cron\&.hourly, +/etc/cron\&.daily, +/etc/cron\&.weekly +or +/etc/cron\&.monthly\&. +.RE +.PP +\fB\-n \fR\fB\fIfqdn\fR\fR +.RS 4 +Include the FQDN in the subject when sending mails\&. By default, cron will abbreviate the hostname\&. +.RE +.PP +\fB\-N \fR +.RS 4 +Run cron jobs Now, immediately, and exit\&. This option is useful to perform tests\&. +.RE +.PP +\fB\-L \fR\fB\fIloglevel\fR\fR +.RS 4 +Tell cron what to log about +\fIjobs\fR +(errors are logged regardless of this value) as the sum of the following values: +.PP +1 +.RS 4 will log the start of all cron jobs -.IP \fB2\fR +.RE +.PP +2 +.RS 4 will log the end of all cron jobs -.IP \fB4\fR +.RE +.PP +4 +.RS 4 will log all failed jobs (exit status != 0) -.IP \fB8\fR +.RE +.PP +8 +.RS 4 will log the process number of all cron jobs .RE -.IP -The default is to log the start of all jobs (1). -Logging will be disabled if -.I levels -is set to zero (0). -A value of fifteen (15) will select all options. -.TP -.B \-x debugflags -Tell cron to be more verbose and output debugging information; debugflags is -the sum of those values: -.br -.RS 12 -.IP \fB1\fR -"ext": ... -.IP \fB2\fR -"sch": ... -.IP \fB4\fR -"proc": ... -.IP \fB8\fR -"pars": ... -.IP \fB16\fR -"load": ... -.IP \fB32\fR -"misc": ... -.IP \fB64\fR -"test": ... -.IP \fB128\fR -"bit": ... -.RE -.SH NOTES -.PP -.I cron -searches its spool area (/var/spool/cron/crontabs) for crontab -files (which are named after accounts in -/etc/passwd); crontabs found are loaded into memory. Note that -crontabs in this directory should not be accessed directly - -the -.I crontab -command should be used to access and update them. - -.I cron -also reads /etc/crontab, which is in a slightly different format (see -.IR crontab (5)). -In Debian, the content of /etc/crontab is predefined -to run programs under /etc/cron.hourly, /etc/cron.daily, -/etc/cron.weekly and /etc/cron.monthly. This configuration is specific to -Debian, see the note under -.B DEBIAN SPECIFIC -below. - +.sp +The default is to log the start of all jobs (1)\&. Logging will be disabled if levels is set to zero (0)\&. A value of fifteen (15) will select all options\&. +.RE +.PP +\fB\-x \fR\fB\fIdebugflags\fR\fR +.RS 4 +Tell cron to be more verbose and output debugging information; debugflags is the sum of those values: +.PP +1 +.RS 4 +"ext": \&.\&.\&. +.RE +.PP +2 +.RS 4 +"sch": \&.\&.\&. +.RE +.PP +4 +.RS 4 +"proc": \&.\&.\&. +.RE +.PP +8 +.RS 4 +"pars": \&.\&.\&. +.RE +.PP +16 +.RS 4 +"load": \&.\&. +.RE +.PP +32 +.RS 4 +"misc": \&.\&.\&. +.RE +.PP +64 +.RS 4 +"test": \&.\&.\&. +.RE +.PP +128 +.RS 4 +"bit": \&.\&.\&. +.RE +.sp +.RE +.SH "NOTES" +.PP +\fBcron\fR +searches its spool area (/var/spool/cron/crontabs/) for crontab files (which are named after accounts in +/etc/passwd); crontabs found are loaded into memory\&. Note that crontabs in this directory should not be accessed directly \- the +\fBcrontab\fR +command should be used to access and update them\&. +.PP +\fBcron\fR +also reads +/etc/crontab, which is in a slightly different format (see +\fBcrontab\fR(5))\&. In Debian, the content of +/etc/crontab +is predefined to run programs under +/etc/cron\&.hourly, +/etc/cron\&.daily, +/etc/cron\&.weekly +and +/etc/cron\&.monthly\&. This configuration is specific to Debian, see the note under DEBIAN SPECIFIC below\&. +.PP Additionally, in Debian, -.I cron -reads the files in the /etc/cron.d directory. -.I cron -treats the files in /etc/cron.d as in the same way as the /etc/crontab -file (they follow the special format of that file, -i.e.\& they include the -.I user -field). However, they are independent of /etc/crontab: they do not, for -example, inherit environment variable settings from it. This change is -specific to Debian see the note under -.B DEBIAN SPECIFIC -below. - -Like /etc/crontab, the files in the /etc/cron.d directory are -monitored for changes. -The system administrator may create cron jobs in /etc/cron.d/ -with file names like "local" or "local-foo". - - -/etc/crontab and the files in /etc/cron.d must be owned by root, and must not -be group- or other-writable. In contrast to the spool area, the files -under /etc/cron.d or the files under /etc/cron.hourly, /etc/cron.daily, -/etc/cron.weekly and /etc/cron.monthly may also be symlinks, -provided that both the symlink and the file it points to are owned by root. -The files under /etc/cron.d do not need to be executable, while the files -under /etc/cron.hourly, /etc/cron.daily, -/etc/cron.weekly and /etc/cron.monthly do, as they are run by -.I run-parts -(see -.IR run-parts (8) -for more information). - -.I cron -then wakes up every minute, examining all stored crontabs, checking -each command to see if it should be run in the current minute. When -executing commands, any output is mailed to the owner of the crontab -(or to the user named in the MAILTO environment variable in the -crontab, if such exists) from the owner of the crontab (or from the email -address given in the MAILFROM environment variable in the crontab, if -such exists). The children copies of cron running these -processes have their name coerced to uppercase, as will be seen in the -syslog and ps output. +\fBcron\fR +reads the files in the +/etc/cron\&.d +directory\&. +\fBcron\fR +treats the files in +/etc/cron\&.d +as in the same way as the +/etc/crontab +file (they follow the special format of that file, i\&.e\&. they include the +\fIuser\fR +field)\&. However, they are independent of +/etc/crontab: they do not, for example, inherit environment variable settings from it\&. This change is specific to Debian see the note under +\fIDEBIAN SPECIFIC\fR +below\&. +.PP +Like +/etc/crontab, the files in the +/etc/cron\&.d +directory are monitored for changes\&. The system administrator may create cron jobs in +/etc/cron\&.d/ +with file names like "local" or "local\-foo"\&. +.PP +/etc/crontab +and the files in +/etc/cron\&.d +must be owned by root, and must not be group\- or other\-writable\&. In contrast to the spool area, the files under +/etc/cron\&.d +or the files under +/etc/cron\&.hourly, +/etc/cron\&.daily, +/etc/cron\&.weekly +and +/etc/cron\&.monthly +may also be symlinks, provided that both the symlink and the file it points to are owned by root\&. The files under +/etc/cron\&.d +do not need to be executable, while the files under +/etc/cron\&.hourly, +/etc/cron\&.daily, +/etc/cron\&.weekly +and +/etc/cron\&.monthly +do, as they are run by run\-parts (see +\fBrun-parts\fR(8) +for more information)\&. +.PP +\fBcron\fR +then wakes up every minute, examining all stored crontabs, checking each command to see if it should be run in the current minute\&. When executing commands, any output is mailed to the owner of the crontab (or to the user named in the MAILTO environment variable in the crontab, if such exists) from the owner of the crontab (or from the email address given in the MAILFROM environment variable in the crontab, if such exists)\&. The children copies of cron running these processes have their name coerced to uppercase, as will be seen in the syslog and ps output\&. .PP Additionally, -.I cron -checks each minute to see if its spool directory's modtime (or the modtime -on the -.I /etc/crontab -file) -has changed, and if it has, -.I cron -will then examine the modtime on all crontabs and reload those which have -changed. Thus -.I cron -need not be restarted whenever a crontab file is modified. Note that the -.IR crontab (1) -command updates the modtime of the spool directory whenever it changes a -crontab. -.PP -Special considerations exist when the clock is changed by less than 3 -hours, for example at the beginning and end of daylight savings -time. If the time has moved forwards, those jobs which would have -run in the time that was skipped will be run soon after the change. -Conversely, if the time has moved backwards by less than 3 hours, -those jobs that fall into the repeated time will not be re-run. -.PP -Only jobs that run at a particular time (not specified as -@hourly, nor with '*' in the hour or minute specifier) are -affected. Jobs which are specified with wildcards are run based on the -new time immediately. -.PP -Clock changes of more than 3 hours are considered to be corrections to -the clock, and the new time is used immediately. -.PP -.I cron -logs its action to the syslog facility 'cron', and logging may be -controlled using the standard -.IR syslogd (8) -facility. -.SH ENVIRONMENT +\fBcron\fR +checks each minute to see if its spool directory\*(Aqs modtime (or the modtime on the +/etc/crontab +file) has changed, and if it has, +\fBcron\fR +will then examine the modtime on all crontabs and reload those which have changed\&. Thus +\fBcron\fR +need not be restarted whenever a crontab file is modified\&. Note that the +\fBcrontab\fR(1) +command updates the modtime of the spool directory whenever it changes a crontab\&. +.PP +Special considerations exist when the clock is changed by less than 3 hours, for example at the beginning and end of daylight savings time\&. If the time has moved forwards, those jobs which would have run in the time that was skipped will be run soon after the change\&. Conversely, if the time has moved backwards by less than 3 hours, those jobs that fall into the repeated time will not be re\-run\&. +.PP +Only jobs that run at a particular time (not specified as @hourly, nor with \*(Aq*\*(Aq in the hour or minute specifier) are affected\&. Jobs which are specified with wildcards are run based on the new time immediately\&. +.PP +Clock changes of more than 3 hours are considered to be corrections to the clock, and the new time is used immediately\&. +.PP +\fBcron\fR +logs its action to the syslog facility \*(Aqcron\*(Aq, and logging may be controlled using the standard +\fBsyslogd\fR(8) +facility\&. +.SH "ENVIRONMENT" +.PP If configured in -.I /etc/default/cron +\fI/etc/default/cron\fR in Debian systems, the -.I cron +\fBcron\fR daemon localisation settings environment can be managed through the use of -.I /etc/environment +\fI/etc/environment\fR or through the use of -.I /etc/default/locale -with values from the latter overriding values from the former. These -files are read and they will be used to setup the LANG, LC_ALL, and -LC_CTYPE environment variables. These variables are then used to set the -charset of mails, which defaults to 'C'. +\fI/etc/default/locale\fR +with values from the latter overriding values from the former\&. These files are read and they will be used to setup the LANG, LC_ALL, and LC_CTYPE environment variables\&. These variables are then used to set the charset of mails, which defaults to \*(AqC\*(Aq\&. .PP This does -.B NOT -affect the environment of tasks running under cron. For more information -on how to modify the environment of tasks, consult -.IR crontab (5). +\fINOT\fR +affect the environment of tasks running under cron\&. For more information on how to modify the environment of tasks, consult +\fBcrontab\fR(5)\&. .PP The daemon will use, if present, the definition from -.I /etc/localtime -for the timezone. -.PP -The environment can be redefined in user's crontab definitions but -.I cron -will only handle tasks in a single timezone. - -.SH DEBIAN SPECIFIC -.PP -Debian introduces some changes to -.I cron -that were not originally available upstream. The most significant -changes introduced are: - -.IP \(em -Support for /etc/cron.{hourly,daily,weekly,monthly} via /etc/crontab, -.IP \(em -Support for /etc/cron.d (drop-in dir for package crontabs), -.IP \(em +\fI/etc/localtime\fR +for the timezone\&. +.PP +The environment can be redefined in user\*(Aqs crontab definitions but cron will only handle tasks in a single timezone\&. +.SH "DEBIAN SPECIFIC" +.PP +Debian introduces some changes to cron that were not originally available upstream\&. The most significant changes introduced are: +.sp +.RS 4 +.ie n \{\ +\h'-04'\(bu\h'+03'\c +.\} +.el \{\ +.sp -1 +.IP \(bu 2.3 +.\} +Support for +/etc/cron\&.{hourly,daily,weekly,monthly} +via/etc/crontab, +.RE +.sp +.RS 4 +.ie n \{\ +\h'-04'\(bu\h'+03'\c +.\} +.el \{\ +.sp -1 +.IP \(bu 2.3 +.\} +Support for +/etc/cron\&.d +(drop\-in dir for package crontabs), +.RE +.sp +.RS 4 +.ie n \{\ +\h'-04'\(bu\h'+03'\c +.\} +.el \{\ +.sp -1 +.IP \(bu 2.3 +.\} PAM support, -.IP \(em +.RE +.sp +.RS 4 +.ie n \{\ +\h'-04'\(bu\h'+03'\c +.\} +.el \{\ +.sp -1 +.IP \(bu 2.3 +.\} SELinux support, -.IP \(em +.RE +.sp +.RS 4 +.ie n \{\ +\h'-04'\(bu\h'+03'\c +.\} +.el \{\ +.sp -1 +.IP \(bu 2.3 +.\} auditlog support, -.IP \(em -DST and other time-related changes/fixes, -.IP \(em +.RE +.sp +.RS 4 +.ie n \{\ +\h'-04'\(bu\h'+03'\c +.\} +.el \{\ +.sp -1 +.IP \(bu 2.3 +.\} +DST and other time\-related changes/fixes, +.RE +.sp +.RS 4 +.ie n \{\ +\h'-04'\(bu\h'+03'\c +.\} +.el \{\ +.sp -1 +.IP \(bu 2.3 +.\} SGID crontab(1) instead of SUID root, -.IP \(em -Debian-specific file locations and commands, -.IP \(em -Debian-specific configuration (/etc/default/cron), -.IP \(em -numerous other smaller features and fixes. - -.PP -Support for /etc/cron.hourly, /etc/cron.daily, /etc/cron.weekly and -/etc/cron.monthly is provided in Debian through the default setting -of the /etc/crontab file (see the system-wide example in -.IR crontab (5)). -The default system-wide crontab contains four tasks: run every hour, every -day, every week and every month. Each of these tasks will execute -.B run-parts -providing each one of the directories as an argument. -These tasks are disabled if -.B anacron -is installed (except for the hourly task) to prevent conflicts between -both daemons. - -As described above, the files under these directories have to pass -some sanity checks including the following: be executable, be owned by root, -not be writable by group or other and, if symlinks, point to files owned by -root. Additionally, the file names must conform to the filename requirements -of -.BR run-parts : -they must be entirely made up of letters, digits and can only contain the -special signs underscores ('_') and hyphens ('-'). Any file that does -not conform to these requirements will not be executed by -.BR run-parts . -For example, any file containing dots will be ignored. -This is done to prevent cron from running any of the files -that are left by the Debian package management system when handling files in -/etc/cron.d/ as configuration files (i.e.\& files ending in -\&.dpkg-dist, \&.dpkg-orig, \&.dpkg-old, and \&.dpkg-new). - -This feature can be used by system administrators and packages to include -tasks that will be run at defined intervals. Files created by packages in these -directories should be named after the package that supplies them. - -.PP -Support for /etc/cron.d is included in the -.I cron -daemon itself, which handles this location as the system-wide crontab spool. -This directory can contain any file defining tasks following the format -used in /etc/crontab, i.e.\& unlike the user cron spool, these files must -provide the username to run the task as in the task definition. - -Files in this directory have to be owned by root, do not need to be executable -(they are configuration files, just like /etc/crontab) and -must conform to the same naming convention as used by -.IR run-parts "(8) :" -they -must consist solely of upper- and lower-case letters, digits, underscores, -and hyphens. This means that they -.B cannot -contain any dots. -If the -.B \-l +.RE +.sp +.RS 4 +.ie n \{\ +\h'-04'\(bu\h'+03'\c +.\} +.el \{\ +.sp -1 +.IP \(bu 2.3 +.\} +Debian\-specific file locations and commands, +.RE +.sp +.RS 4 +.ie n \{\ +\h'-04'\(bu\h'+03'\c +.\} +.el \{\ +.sp -1 +.IP \(bu 2.3 +.\} +Debian\-specific configuration (/etc/default/cron), +.RE +.sp +.RS 4 +.ie n \{\ +\h'-04'\(bu\h'+03'\c +.\} +.el \{\ +.sp -1 +.IP \(bu 2.3 +.\} +numerous other smaller features and fixes\&. +.RE +.PP +Support for +/etc/cron\&.hourly, +/etc/cron\&.daily, +/etc/cron\&.weekly +and +/etc/cron\&.monthly +is provided in Debian through the default setting of the +/etc/crontab +file (see the system\-wide example in +\fBcrontab\fR(5))\&. The default system\-wide crontab contains four tasks: run every hour, every day, every week and every month\&. Each of these tasks will execute +\fBrun\-parts\fR +providing each one of the directories as an argument\&. These tasks are disabled if +\fBanacron\fR +is installed (except for the hourly task) to prevent conflicts between both daemons\&. +.PP +As described above, the files under these directories have to pass some sanity checks including the following: be executable, be owned by root, not be writable by group or other and, if symlinks, point to files owned by root\&. Additionally, the file names must conform to the filename requirements of +\fBrun\-parts\fR: they must be entirely made up of letters, digits and can only contain the special signs underscores (\*(Aq_\*(Aq) and hyphens (\*(Aq\-\*(Aq)\&. Any file that does not conform to these requirements will not be executed by +\fBrun\-parts\fR\&. For example, any file containing dots will be ignored\&. This is done to prevent cron from running any of the files that are left by the Debian package management system when handling files in /etc/cron\&.d/ as configuration files (i\&.e\&. files ending in \&.dpkg\-dist, \&.dpkg\-orig, \&.dpkg\-old, and \&.dpkg\-new)\&. +.PP +This feature can be used by system administrators and packages to include tasks that will be run at defined intervals\&. Files created by packages in these directories should be named after the package that supplies them\&. +.PP +Support for +/etc/cron\&.d +is included in the +\fBcron\fR +daemon itself, which handles this location as the system\-wide crontab spool\&. This directory can contain any file defining tasks following the format used in +/etc/crontab, i\&.e\&. unlike the user cron spool, these files must provide the username to run the task as in the task definition\&. +.PP +Files in this directory have to be owned by root, do not need to be executable (they are configuration files, just like +/etc/crontab) and must conform to the same naming convention as used by +\fBrun-parts\fR(8) +: they must consist solely of upper\- and lower\-case letters, digits, underscores, and hyphens\&. This means that they +\fIcannot\fR +contain any dots\&. If the +\fI\-l\fR option is specified to -.I cron -(this option can be setup through /etc/default/cron, see below), then they must -conform to the LSB namespace specification, exactly as in the -.B \-\-lsbsysinit +\fBcron\fR +(this option can be setup through +/etc/default/cron, see below), then they must conform to the LSB namespace specification, exactly as in the +\fI\-\-lsbsysinit\fR option in -.IR run-parts . - -The intended purpose of this feature is to allow packages that require -finer control of their scheduling than the -/etc/cron.{hourly,daily,weekly,monthly} -directories to add a crontab file to /etc/cron.d. Such files -should be named after the package that supplies them. - - +\fBrun\-parts\fR\&. +.PP +The intended purpose of this feature is to allow packages that require finer control of their scheduling than the +/etc/cron\&.{hourly,daily,weekly,monthly} +directories to add a crontab file to +/etc/cron\&.d\&. Such files should be named after the package that supplies them\&. +.PP Also, the default configuration of -.I cron +\fBcron\fR is controlled by -.I /etc/default/cron -which is read by the init.d script that launches the -.I cron -daemon. This file determines whether -.I cron -will read the system's environment variables and makes it possible to add -additional options to the -.I cron -program before it is executed, either to configure its logging or to define how -it will treat the files under /etc/cron.d. - +/etc/default/cron +which is read by the init\&.d script that launches the +\fBcron\fR +daemon\&. This file determines whether cron will read the system\*(Aqs environment variables and makes it possible to add additional options to the +\fBcron\fR +program before it is executed, either to configure its logging or to define how it will treat the files under +/etc/cron\&.d\&. .SH "SEE ALSO" -crontab(1), crontab(5), run-parts(8) -.SH AUTHOR -Paul Vixie <paul@vix.com> is the author of -.I cron -and original creator of this manual page. This page has also been modified for -Debian by Steve Greenland, Javier Fernandez-Sanguino and Christian Kastner. - +.PP +\fBcrontab\fR(1), +\fBcrontab\fR(5), +\fBrun-parts\fR(8) +.SH "AUTHORS" +.PP +\fBPaul Vixie\fR <\&paul@vix\&.com\&> +.RS 4 +Wrote this manpage (1994)\&. +.RE +.PP +\fBSteve Greenland\fR <\&stevegr@debian\&.org\&> +.RS 4 +Maintained the package (1996\-2005)\&. +.RE +.PP +\fBJavier Fern\('andez\-Sanguino Pe\(~na\fR <\&jfs@debian\&.org\&> +.RS 4 +Maintained the package (2005\-2014)\&. +.RE +.PP +\fBChristian Kastner\fR <\&ckk@debian\&.org\&> +.RS 4 +Maintained the package (2010\-2016)\&. +.RE +.PP +\fBGeorges Khaznadar\fR <\&georgesk@debian\&.org\&> +.RS 4 +Maintained the package (2022\-2024)\&. +.RE +.SH "COPYRIGHT" +.br +Copyright \(co 1994 Paul Vixie +.br +.PP +Distribute freely, except: don\*(Aqt remove my name from the source or documentation (don\*(Aqt take credit for my work), mark your changes (don\*(Aqt get me blamed for your possible bugs), don\*(Aqt alter or remove this notice\&. May be sold if buildable source is provided to buyer\&. No warranty of any kind, express or implied, is included with this software; use at your own risk, responsibility for damages (if any) to anyone resulting from the use of this software rests entirely with the user\&. +.PP +Since year 1994, many modifications were made in this manpage, authored by Debian Developers which maintained +cron; above is a short list, more information can be found in the file +/usr/share/doc/cron/copyright\&. +.sp diff --git a/upstream/debian-unstable/man8/cryptdisks_start.8 b/upstream/debian-unstable/man8/cryptdisks_start.8 index f620b57f..f8ec13d9 100644 --- a/upstream/debian-unstable/man8/cryptdisks_start.8 +++ b/upstream/debian-unstable/man8/cryptdisks_start.8 @@ -2,12 +2,12 @@ .\" Title: cryptdisks_start .\" Author: [see the "AUTHOR" section] .\" Generator: DocBook XSL Stylesheets vsnapshot <http://docbook.sf.net/> -.\" Date: 2024-02-26 +.\" Date: 2024-04-14 .\" Manual: cryptsetup manual -.\" Source: cryptsetup 2:2.7.0-1 +.\" Source: cryptsetup 2:2.7.2-2 .\" Language: English .\" -.TH "CRYPTDISKS_START" "8" "2024\-02\-26" "cryptsetup 2:2\&.7\&.0\-1" "cryptsetup manual" +.TH "CRYPTDISKS_START" "8" "2024\-04\-14" "cryptsetup 2:2\&.7\&.2\-2" "cryptsetup manual" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff --git a/upstream/debian-unstable/man8/cryptdisks_stop.8 b/upstream/debian-unstable/man8/cryptdisks_stop.8 index 83199125..1cf8f853 100644 --- a/upstream/debian-unstable/man8/cryptdisks_stop.8 +++ b/upstream/debian-unstable/man8/cryptdisks_stop.8 @@ -2,12 +2,12 @@ .\" Title: cryptdisks_stop .\" Author: [see the "AUTHOR" section] .\" Generator: DocBook XSL Stylesheets vsnapshot <http://docbook.sf.net/> -.\" Date: 2024-02-26 +.\" Date: 2024-04-14 .\" Manual: cryptsetup manual -.\" Source: cryptsetup 2:2.7.0-1 +.\" Source: cryptsetup 2:2.7.2-2 .\" Language: English .\" -.TH "CRYPTDISKS_STOP" "8" "2024\-02\-26" "cryptsetup 2:2\&.7\&.0\-1" "cryptsetup manual" +.TH "CRYPTDISKS_STOP" "8" "2024\-04\-14" "cryptsetup 2:2\&.7\&.2\-2" "cryptsetup manual" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff --git a/upstream/debian-unstable/man8/debugfs.8 b/upstream/debian-unstable/man8/debugfs.8 index 8b6a600d..67c24f31 100644 --- a/upstream/debian-unstable/man8/debugfs.8 +++ b/upstream/debian-unstable/man8/debugfs.8 @@ -2,7 +2,7 @@ .\" Copyright 1993, 1994, 1995 by Theodore Ts'o. All Rights Reserved. .\" This file may be copied under the terms of the GNU Public License. .\" -.TH DEBUGFS 8 "February 2023" "E2fsprogs version 1.47.0" +.TH DEBUGFS 8 "May 2024" "E2fsprogs version 1.47.1" .SH NAME debugfs \- ext2/ext3/ext4 file system debugger .SH SYNOPSIS @@ -268,9 +268,24 @@ number, otherwise use the .B s_mmp_block field in the superblock to locate and use the existing MMP block. .TP -.BI dx_hash " [-h hash_alg] [-s hash_seed] filename" +.BI dx_hash " [-cv] [-h hash_alg] [-s hash_seed] filename" Calculate the directory hash of .IR filename . +The +.I -c +option will casefold the filename before calculating the hash. The +.I -v +option will make the +.B dx_hash +command more verbose and print the hash algorithm and hash seed to +calculate the hash. +If a file system is open, use the hash_seed and +default hash_algorithm used by the file system, although these can be +overridden by the +.I -h +and +.I -s +options. The hash algorithm specified with .I -h may be diff --git a/upstream/debian-unstable/man8/depmod.8 b/upstream/debian-unstable/man8/depmod.8 index 06f5f4c3..1a78e5a6 100644 --- a/upstream/debian-unstable/man8/depmod.8 +++ b/upstream/debian-unstable/man8/depmod.8 @@ -2,12 +2,12 @@ .\" Title: depmod .\" Author: Jon Masters <jcm@jonmasters.org> .\" Generator: DocBook XSL Stylesheets vsnapshot <http://docbook.sf.net/> -.\" Date: 02/13/2024 +.\" Date: 05/26/2024 .\" Manual: depmod .\" Source: kmod .\" Language: English .\" -.TH "DEPMOD" "8" "02/13/2024" "kmod" "depmod" +.TH "DEPMOD" "8" "05/26/2024" "kmod" "depmod" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff --git a/upstream/debian-unstable/man8/devlink-rate.8 b/upstream/debian-unstable/man8/devlink-rate.8 index bcec3c31..f09ac4ac 100644 --- a/upstream/debian-unstable/man8/devlink-rate.8 +++ b/upstream/debian-unstable/man8/devlink-rate.8 @@ -149,7 +149,7 @@ These parameter accept integer meaning weight or priority of a node. - set rate object parent to existing node with name \fINODE_NAME\fR or unset parent. Rate limits of the parent node applied to all it's children. Actual behaviour is details of driver's implementation. Setting parent to empty ("") -name due to the kernel logic threated as parent unset. +name due to the kernel logic treated as parent unset. .SS devlink port function rate add - create node rate object with specified parameters. Creates rate object of type node and sets parameters. Parameters same as for the diff --git a/upstream/debian-unstable/man8/dumpe2fs.8 b/upstream/debian-unstable/man8/dumpe2fs.8 index e1b15c0c..98fa185d 100644 --- a/upstream/debian-unstable/man8/dumpe2fs.8 +++ b/upstream/debian-unstable/man8/dumpe2fs.8 @@ -2,7 +2,7 @@ .\" Copyright 1993, 1994, 1995 by Theodore Ts'o. All Rights Reserved. .\" This file may be copied under the terms of the GNU Public License. .\" -.TH DUMPE2FS 8 "February 2023" "E2fsprogs version 1.47.0" +.TH DUMPE2FS 8 "May 2024" "E2fsprogs version 1.47.1" .SH NAME dumpe2fs \- dump ext2/ext3/ext4 file system information .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/e2freefrag.8 b/upstream/debian-unstable/man8/e2freefrag.8 index 510cbb32..795337c1 100644 --- a/upstream/debian-unstable/man8/e2freefrag.8 +++ b/upstream/debian-unstable/man8/e2freefrag.8 @@ -1,5 +1,5 @@ .\" -*- nroff -*- -.TH E2FREEFRAG 8 "February 2023" "E2fsprogs version 1.47.0" +.TH E2FREEFRAG 8 "May 2024" "E2fsprogs version 1.47.1" .SH NAME e2freefrag \- report free space fragmentation information .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/e2fsck.8 b/upstream/debian-unstable/man8/e2fsck.8 index 68b867cf..f06d79dd 100644 --- a/upstream/debian-unstable/man8/e2fsck.8 +++ b/upstream/debian-unstable/man8/e2fsck.8 @@ -2,7 +2,7 @@ .\" Copyright 1993, 1994, 1995 by Theodore Ts'o. All Rights Reserved. .\" This file may be copied under the terms of the GNU Public License. .\" -.TH E2FSCK 8 "February 2023" "E2fsprogs version 1.47.0" +.TH E2FSCK 8 "May 2024" "E2fsprogs version 1.47.1" .SH NAME e2fsck \- check a Linux ext2/ext3/ext4 file system .SH SYNOPSIS @@ -44,8 +44,9 @@ e2fsck \- check a Linux ext2/ext3/ext4 file system is used to check the ext2/ext3/ext4 family of file systems. For ext3 and ext4 file systems that use a journal, if the system has been shut down uncleanly without any errors, normally, after replaying the -committed transactions in the journal, the file system should be -marked as clean. Hence, for file systems that use journaling, +committed transactions in the journal, the file system should be +marked as clean. +Hence, for file systems that use journaling, .B e2fsck will normally replay the journal and exit, unless its superblock indicates that further checking is required. @@ -63,12 +64,14 @@ option is specified, and .BR \-c , .BR \-l , or -.B -L +.B \-L options are .I not -specified. However, even if it is safe to do so, the results printed by +specified. +However, even if it is safe to do so, the results printed by .B e2fsck -are not valid if the file system is mounted. If +are not valid if the file system is mounted. +If .B e2fsck asks whether or not you should check a file system which is mounted, the only correct answer is ``no''. Only experts who really know what @@ -80,10 +83,10 @@ is run in interactive mode (meaning that none of .BR \-y , .BR \-n , or -.BR \-p +.B \-p are specified), the program will ask the user to fix each problem found in the -file system. A response of 'y' will fix the error; 'n' will leave the error -unfixed; and 'a' will fix the problem and all subsequent problems; pressing +file system. A response of \&'y' will fix the error; \&'n' will leave the error +unfixed; and \&'a' will fix the problem and all subsequent problems; pressing Enter will proceed with the default response, which is printed before the question mark. Pressing Control-C terminates e2fsck immediately. .SH OPTIONS @@ -113,7 +116,7 @@ program using the option to print out where the superblocks exist, supposing .B mke2fs is supplied with arguments that are consistent with the file system's layout -(e.g. blocksize, blocks per group, +(e.g.\& blocksize, blocks per group, .BR sparse_super , etc.). .IP @@ -170,7 +173,7 @@ Print debugging output (useless unless you are debugging .B \-D Optimize directories in file system. This option causes e2fsck to try to optimize all directories, either by re-indexing them if the -file system supports directory indexing, or by sorting and compressing +file system supports directory indexing, or by sorting and compressing directories for smaller directories, or for file systems using traditional linear directories. .IP @@ -204,86 +207,92 @@ Set the version of the extended attribute blocks which will require while checking the file system. The version number may be 1 or 2. The default extended attribute version format is 2. .TP -.BI journal_only +.B journal_only Only replay the journal if required, but do not perform any further checks or repairs. .TP -.BI fragcheck +.B fragcheck During pass 1, print a detailed report of any discontiguous blocks for files in the file system. .TP -.BI discard +.B discard Attempt to discard free blocks and unused inode blocks after the full file system check (discarding blocks is useful on solid state devices and sparse -/ thin-provisioned storage). Note that discard is done in pass 5 AFTER the +/ thin-provisioned storage). +Note that discard is done in pass 5 AFTER the file system has been fully checked and only if it does not contain recognizable -errors. However there might be cases where +errors. +However there might be cases where .B e2fsck does not fully recognize a problem and hence in this case this option may prevent you from further manual data recovery. .TP -.BI nodiscard -Do not attempt to discard free blocks and unused inode blocks. This option is -exactly the opposite of discard option. This is set as default. +.B nodiscard +Do not attempt to discard free blocks and unused inode blocks. +This option is exactly the opposite of discard option. +This is set as default. .TP -.BI no_optimize_extents +.B no_optimize_extents Do not offer to optimize the extent tree by eliminating unnecessary width or depth. This can also be enabled in the options section of .BR /etc/e2fsck.conf . .TP -.BI optimize_extents +.B optimize_extents Offer to optimize the extent tree by eliminating unnecessary width or depth. This is the default unless otherwise specified in .BR /etc/e2fsck.conf . .TP -.BI inode_count_fullmap +.B inode_count_fullmap Trade off using memory for speed when checking a file system with a large number of hard-linked files. The amount of memory required is proportional to the number of inodes in the file system. For large file -systems, this can be gigabytes of memory. (For example, a 40TB file system +systems, this can be gigabytes of memory. (For example, a 40\ TB file system with 2.8 billion inodes will consume an additional 5.7 GB memory if this optimization is enabled.) This optimization can also be enabled in the options section of .BR /etc/e2fsck.conf . .TP -.BI no_inode_count_fullmap +.B no_inode_count_fullmap Disable the .B inode_count_fullmap optimization. This is the default unless otherwise specified in .BR /etc/e2fsck.conf . .TP -.BI readahead_kb +.B readahead_kb Use this many KiB of memory to pre-fetch metadata in the hopes of reducing e2fsck runtime. By default, this is set to the size of two block groups' inode -tables (typically 4MiB on a regular ext4 file system); if this amount is more +tables (typically 4\ MiB on a regular ext4 file system); if this amount is more than 1/50th of total physical memory, readahead is disabled. Set this to zero to disable readahead entirely. .TP -.BI bmap2extent +.B bmap2extent Convert block-mapped files to extent-mapped files. .TP -.BI fixes_only +.B fixes_only Only fix damaged metadata; do not optimize htree directories or compress -extent trees. This option is incompatible with the -D and -E bmap2extent +extent trees. This option is incompatible with the \-D and \-E bmap2extent options. .TP -.BI check_encoding +.B check_encoding Force verification of encoded filenames in case-insensitive directories. This is the default mode if the file system has the strict flag enabled. .TP -.BI unshare_blocks +.B unshare_blocks If the file system has shared blocks, with the shared blocks read-only feature enabled, then this will unshare all shared blocks and unset the read-only -feature bit. If there is not enough free space then the operation will fail. +feature bit. +If there is not enough free space then the operation will fail. If the file system does not have the read-only feature bit, but has shared -blocks anyway, then this option will have no effect. Note when using this +blocks anyway, then this option will have no effect. +Note when using this option, if there is no free space to clone blocks, there is no prompt to delete files and instead the operation will fail. .IP -Note that unshare_blocks implies the "-f" option to ensure that all passes -are run. Additionally, if "-n" is also specified, e2fsck will simulate trying -to allocate enough space to deduplicate. If this fails, the exit code will -be non-zero. +Note that unshare_blocks implies the "\-f" option to ensure that all passes +are run. +Additionally, if "\-n" is also specified, e2fsck will simulate trying +to allocate enough space to deduplicate. +If this fails, the exit code will be non-zero. .RE .TP .B \-f @@ -299,7 +308,7 @@ time trials. Set the pathname where the external-journal for this file system can be found. .TP -.BI \-k +.B \-k When combined with the .B \-c option, any existing bad blocks in the bad blocks list are preserved, @@ -318,7 +327,7 @@ of the file system. Hence, .BR badblocks (8) must be given the blocksize of the file system in order to obtain correct results. As a result, it is much simpler and safer to use the -.B -c +.B \-c option to .BR e2fsck , since it will assure that the correct parameters are passed to the @@ -391,7 +400,9 @@ options. .TP .BI \-z " undo_file" Before overwriting a file system block, write the old contents of the block to -an undo file. This undo file can be used with e2undo(8) to restore the old +an undo file. This undo file can be used with +.BR e2undo (8) +to restore the old contents of the file system should something go wrong. If the empty string is passed as the undo_file argument, the undo file will be written to a file named e2fsck-\fIdevice\fR.e2undo in the directory specified via the @@ -403,24 +414,23 @@ The exit code returned by .B e2fsck is the sum of the following conditions: .br -\ 0\ \-\ No errors -.br -\ 1\ \-\ File system errors corrected + 0 \-\ No errors .br -\ 2\ \-\ File system errors corrected, system should + 1 \-\ File system errors corrected .br -\ \ \ \ be rebooted + 2 \-\ File system errors corrected, system should .br -\ 4\ \-\ File system errors left uncorrected + \ \ be rebooted .br -\ 8\ \-\ Operational error + 4 \-\ File system errors left uncorrected .br -\ 16\ \-\ Usage or syntax error + 8 \-\ Operational error .br -\ 32\ \-\ E2fsck canceled by user request + 16 \-\ Usage or syntax error .br -\ 128\ \-\ Shared library error + 32 \-\ E2fsck canceled by user request .br + 128 \-\ Shared library error .SH SIGNALS The following signals have the following effect when sent to .BR e2fsck . @@ -454,7 +464,7 @@ the messages printed by are in English; if your system has been configured so that .BR e2fsck 's -messages have been translated into another language, please set the the +messages have been translated into another language, please set the .B LC_ALL environment variable to .B C @@ -492,7 +502,7 @@ Always include the full version string which displays when it is run, so I know which version you are running. .SH ENVIRONMENT .TP -.BI E2FSCK_CONFIG +.B E2FSCK_CONFIG Determines the location of the configuration file (see .BR e2fsck.conf (5)). .SH AUTHOR diff --git a/upstream/debian-unstable/man8/e2image.8 b/upstream/debian-unstable/man8/e2image.8 index 25673488..c379e330 100644 --- a/upstream/debian-unstable/man8/e2image.8 +++ b/upstream/debian-unstable/man8/e2image.8 @@ -2,7 +2,7 @@ .\" Copyright 2001 by Theodore Ts'o. All Rights Reserved. .\" This file may be copied under the terms of the GNU Public License. .\" -.TH E2IMAGE 8 "February 2023" "E2fsprogs version 1.47.0" +.TH E2IMAGE 8 "May 2024" "E2fsprogs version 1.47.1" .SH NAME e2image \- Save critical ext2/ext3/ext4 file system metadata to a file diff --git a/upstream/debian-unstable/man8/e2label.8 b/upstream/debian-unstable/man8/e2label.8 index 29adae7e..d946cffc 100644 --- a/upstream/debian-unstable/man8/e2label.8 +++ b/upstream/debian-unstable/man8/e2label.8 @@ -2,7 +2,7 @@ .\" Copyright 1993, 1994, 1995 by Theodore Ts'o. All Rights Reserved. .\" This file may be copied under the terms of the GNU Public License. .\" -.TH E2LABEL 8 "February 2023" "E2fsprogs version 1.47.0" +.TH E2LABEL 8 "May 2024" "E2fsprogs version 1.47.1" .SH NAME e2label \- Change the label on an ext2/ext3/ext4 file system .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/e2mmpstatus.8 b/upstream/debian-unstable/man8/e2mmpstatus.8 index 47a4624e..684448d0 100644 --- a/upstream/debian-unstable/man8/e2mmpstatus.8 +++ b/upstream/debian-unstable/man8/e2mmpstatus.8 @@ -1,7 +1,7 @@ .\" -*- nroff -*- .\" This file may be copied under the terms of the GNU Public License. .\" -.TH E2MMPSTATUS 8 "February 2023" "E2fsprogs version 1.47.0" +.TH E2MMPSTATUS 8 "May 2024" "E2fsprogs version 1.47.1" .SH NAME e2mmpstatus \- Check MMP status of an ext4 file system .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/e2scrub.8 b/upstream/debian-unstable/man8/e2scrub.8 index 6923c679..f9cbcc03 100644 --- a/upstream/debian-unstable/man8/e2scrub.8 +++ b/upstream/debian-unstable/man8/e2scrub.8 @@ -1,4 +1,4 @@ -.TH E2SCRUB 8 "February 2023" "E2fsprogs version 1.47.0" +.TH E2SCRUB 8 "May 2024" "E2fsprogs version 1.47.1" .SH NAME e2scrub - check the contents of a mounted ext[234] file system .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/e2scrub_all.8 b/upstream/debian-unstable/man8/e2scrub_all.8 index a2b962d9..968a8fff 100644 --- a/upstream/debian-unstable/man8/e2scrub_all.8 +++ b/upstream/debian-unstable/man8/e2scrub_all.8 @@ -1,4 +1,4 @@ -.TH E2SCRUB 8 "February 2023" "E2fsprogs version 1.47.0" +.TH E2SCRUB 8 "May 2024" "E2fsprogs version 1.47.1" .SH NAME e2scrub_all - check all mounted ext[234] file systems for errors. .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/e2undo.8 b/upstream/debian-unstable/man8/e2undo.8 index 8b90f7aa..be27b33e 100644 --- a/upstream/debian-unstable/man8/e2undo.8 +++ b/upstream/debian-unstable/man8/e2undo.8 @@ -2,7 +2,7 @@ .\" Copyright 2008 by Theodore Ts'o. All Rights Reserved. .\" This file may be copied under the terms of the GNU Public License. .\" -.TH E2UNDO 8 "February 2023" "E2fsprogs version 1.47.0" +.TH E2UNDO 8 "May 2024" "E2fsprogs version 1.47.1" .SH NAME e2undo \- Replay an undo log for an ext2/ext3/ext4 file system .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/e4crypt.8 b/upstream/debian-unstable/man8/e4crypt.8 index 579397f2..9ef53a71 100644 --- a/upstream/debian-unstable/man8/e4crypt.8 +++ b/upstream/debian-unstable/man8/e4crypt.8 @@ -1,4 +1,4 @@ -.TH E4CRYPT 8 "February 2023" "E2fsprogs version 1.47.0" +.TH E4CRYPT 8 "May 2024" "E2fsprogs version 1.47.1" .SH NAME e4crypt \- ext4 file system encryption utility .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/filefrag.8 b/upstream/debian-unstable/man8/filefrag.8 index 5cfa0523..7cf6a239 100644 --- a/upstream/debian-unstable/man8/filefrag.8 +++ b/upstream/debian-unstable/man8/filefrag.8 @@ -1,5 +1,5 @@ .\" -*- nroff -*- -.TH FILEFRAG 8 "February 2023" "E2fsprogs version 1.47.0" +.TH FILEFRAG 8 "May 2024" "E2fsprogs version 1.47.1" .SH NAME filefrag \- report on file fragmentation .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/fsck.btrfs.8 b/upstream/debian-unstable/man8/fsck.btrfs.8 index c876d718..e52c91ca 100644 --- a/upstream/debian-unstable/man8/fsck.btrfs.8 +++ b/upstream/debian-unstable/man8/fsck.btrfs.8 @@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]] .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]] .in \\n[rst2man-indent\\n[rst2man-indent-level]]u .. -.TH "FSCK.BTRFS" "8" "Feb 28, 2024" "6.6.3" "BTRFS" +.TH "FSCK.BTRFS" "8" "Mar 24, 2024" "6.6.3" "BTRFS" .SH NAME fsck.btrfs \- do nothing, successfully .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/grub-bios-setup.8 b/upstream/debian-unstable/man8/grub-bios-setup.8 index 6548dee0..2cfd5fe5 100644 --- a/upstream/debian-unstable/man8/grub-bios-setup.8 +++ b/upstream/debian-unstable/man8/grub-bios-setup.8 @@ -1,5 +1,5 @@ .\" DO NOT MODIFY THIS FILE! It was generated by help2man 1.49.3. -.TH GRUB-BIOS-SETUP "8" "January 2024" "GRUB 2.12-1" "System Administration Utilities" +.TH GRUB-BIOS-SETUP "8" "April 2024" "GRUB 2.12-2" "System Administration Utilities" .SH NAME grub-bios-setup \- set up a device to boot using GRUB .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/grub-macbless.8 b/upstream/debian-unstable/man8/grub-macbless.8 index 5882dcb2..76784283 100644 --- a/upstream/debian-unstable/man8/grub-macbless.8 +++ b/upstream/debian-unstable/man8/grub-macbless.8 @@ -1,5 +1,5 @@ .\" DO NOT MODIFY THIS FILE! It was generated by help2man 1.49.3. -.TH GRUB-MACBLESS "8" "January 2024" "GRUB 2.12-1" "System Administration Utilities" +.TH GRUB-MACBLESS "8" "April 2024" "GRUB 2.12-2" "System Administration Utilities" .SH NAME grub-macbless \- bless a mac file/directory .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/grub-mkconfig.8 b/upstream/debian-unstable/man8/grub-mkconfig.8 index c8512364..68ba49ee 100644 --- a/upstream/debian-unstable/man8/grub-mkconfig.8 +++ b/upstream/debian-unstable/man8/grub-mkconfig.8 @@ -1,5 +1,5 @@ .\" DO NOT MODIFY THIS FILE! It was generated by help2man 1.49.3. -.TH GRUB-MKCONFIG "8" "January 2024" "GRUB 2.12-1" "System Administration Utilities" +.TH GRUB-MKCONFIG "8" "April 2024" "GRUB 2.12-2" "System Administration Utilities" .SH NAME grub-mkconfig \- generate a GRUB configuration file .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/grub-mkdevicemap.8 b/upstream/debian-unstable/man8/grub-mkdevicemap.8 index 6371d2c8..13c0da1a 100644 --- a/upstream/debian-unstable/man8/grub-mkdevicemap.8 +++ b/upstream/debian-unstable/man8/grub-mkdevicemap.8 @@ -1,5 +1,5 @@ .\" DO NOT MODIFY THIS FILE! It was generated by help2man 1.49.3. -.TH GRUB-MKDEVICEMAP "8" "January 2024" "GRUB 2.12-1" "System Administration Utilities" +.TH GRUB-MKDEVICEMAP "8" "April 2024" "GRUB 2.12-2" "System Administration Utilities" .SH NAME grub-mkdevicemap \- make a device map file automatically .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/grub-probe.8 b/upstream/debian-unstable/man8/grub-probe.8 index 3a59e198..aa921f19 100644 --- a/upstream/debian-unstable/man8/grub-probe.8 +++ b/upstream/debian-unstable/man8/grub-probe.8 @@ -1,5 +1,5 @@ .\" DO NOT MODIFY THIS FILE! It was generated by help2man 1.49.3. -.TH GRUB-PROBE "8" "January 2024" "GRUB 2.12-1" "System Administration Utilities" +.TH GRUB-PROBE "8" "April 2024" "GRUB 2.12-2" "System Administration Utilities" .SH NAME grub-probe \- probe device information for GRUB .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/iconvconfig.8 b/upstream/debian-unstable/man8/iconvconfig.8 index f02eede8..bf26594b 100644 --- a/upstream/debian-unstable/man8/iconvconfig.8 +++ b/upstream/debian-unstable/man8/iconvconfig.8 @@ -2,7 +2,7 @@ .\" .\" SPDX-License-Identifier: GPL-2.0-or-later .\" -.TH iconvconfig 8 2022-10-30 "Linux man-pages 6.05.01" +.TH iconvconfig 8 2024-05-02 "Linux man-pages 6.8" .SH NAME iconvconfig \- create iconv module configuration cache .SH SYNOPSIS @@ -21,12 +21,12 @@ Loading and parsing such a configuration file would slow down programs that use .BR iconv (3), so a caching mechanism is employed. -.PP +.P The .B iconvconfig program reads iconv module configuration files and writes a fast-loading gconv module configuration cache file. -.PP +.P In addition to the system provided gconv modules, the user can specify custom gconv module directories with the environment variable .BR GCONV_PATH . @@ -40,7 +40,9 @@ is not set. Do not search the system default gconv directory, only the directories provided on the command line. .TP -.BI \-o " outputfile" ", \-\-output=" outputfile +.BI \-\-output= outputfile +.TQ +.BI \-o\~ outputfile Use .I outputfile for output instead of the system default cache location. @@ -56,13 +58,17 @@ the gconv module configuration would be read from and the cache would be written to .IR foo/usr/lib/gconv/gconv\-modules.cache . .TP -.BR \-? ", " \-\-help +.B \-\-help +.TQ +.B \-? Print a usage summary and exit. .TP -.B "\-\-usage" +.B \-\-usage Print a short usage summary and exit. .TP -.BR \-V ", " \-\-version +.B \-\-version +.TQ +.B \-V Print the version number, license, and disclaimer of warranty for .BR iconv . .SH EXIT STATUS @@ -77,7 +83,7 @@ Usual system default gconv module configuration file. .TP .I /usr/lib/gconv/gconv\-modules.cache Usual system gconv module configuration cache. -.PP +.P Depending on the architecture, the above files may instead be located at directories with the path prefix .IR /usr/lib64 . diff --git a/upstream/debian-unstable/man8/insmod.8 b/upstream/debian-unstable/man8/insmod.8 index db184080..c04ec344 100644 --- a/upstream/debian-unstable/man8/insmod.8 +++ b/upstream/debian-unstable/man8/insmod.8 @@ -2,12 +2,12 @@ .\" Title: insmod .\" Author: Jon Masters <jcm@jonmasters.org> .\" Generator: DocBook XSL Stylesheets vsnapshot <http://docbook.sf.net/> -.\" Date: 02/13/2024 +.\" Date: 05/26/2024 .\" Manual: insmod .\" Source: kmod .\" Language: English .\" -.TH "INSMOD" "8" "02/13/2024" "kmod" "insmod" +.TH "INSMOD" "8" "05/26/2024" "kmod" "insmod" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff --git a/upstream/debian-unstable/man8/intro.8 b/upstream/debian-unstable/man8/intro.8 index 23fbcbd9..9afb40e7 100644 --- a/upstream/debian-unstable/man8/intro.8 +++ b/upstream/debian-unstable/man8/intro.8 @@ -7,7 +7,7 @@ .\" Modified Sat Jul 24 17:35:48 1993 by Rik Faith (faith@cs.unc.edu) .\" 2007-10-23 mtk: minor rewrites, and added paragraph on exit status .\" -.TH intro 8 2022-10-30 "Linux man-pages 6.05.01" +.TH intro 8 2024-05-02 "Linux man-pages 6.8" .SH NAME intro \- introduction to administration and privileged commands .SH DESCRIPTION @@ -15,7 +15,7 @@ Section 8 of the manual describes commands which either can be or are used only by the superuser, like system-administration commands, daemons, and hardware-related commands. -.PP +.P As with the commands described in Section 1, the commands described in this section terminate with an exit status that indicates whether the command succeeded or failed. diff --git a/upstream/debian-unstable/man8/ip-address.8 b/upstream/debian-unstable/man8/ip-address.8 index 8e0de0e9..277c5068 100644 --- a/upstream/debian-unstable/man8/ip-address.8 +++ b/upstream/debian-unstable/man8/ip-address.8 @@ -146,7 +146,8 @@ ip-address \- protocol address management .BR ipvlan " |" .BR lowpan " |" .BR geneve " |" -.BR macsec " ]" +.BR macsec " |" +.BR netkit " ]" .SH "DESCRIPTION" The diff --git a/upstream/debian-unstable/man8/ip-ioam.8 b/upstream/debian-unstable/man8/ip-ioam.8 index 1bdc0ece..c723d782 100644 --- a/upstream/debian-unstable/man8/ip-ioam.8 +++ b/upstream/debian-unstable/man8/ip-ioam.8 @@ -49,12 +49,17 @@ ip-ioam \- IPv6 In-situ OAM (IOAM) .RI " { " ID " | " .BR none " }" +.ti -8 +.B ip ioam monitor + .SH DESCRIPTION The \fBip ioam\fR command is used to configure IPv6 In-situ OAM (IOAM6) internal parameters, namely IOAM namespaces and schemas. .PP Those parameters also include the mapping between an IOAM namespace and an IOAM schema. +.PP +The \fBip ioam monitor\fR command displays IOAM data received. .SH EXAMPLES .PP diff --git a/upstream/debian-unstable/man8/ip-l2tp.8 b/upstream/debian-unstable/man8/ip-l2tp.8 index 9aba6bec..7109c0a0 100644 --- a/upstream/debian-unstable/man8/ip-l2tp.8 +++ b/upstream/debian-unstable/man8/ip-l2tp.8 @@ -392,7 +392,7 @@ If L2TP is being used over IPv6, use the IPv6 defrag module. .SH INTEROPERABILITY .PP Unmanaged (static) L2TPv3 tunnels are supported by some network -equipment equipment vendors such as Cisco. +equipment vendors such as Cisco. .PP In Linux, L2TP Hello messages are not supported in unmanaged tunnels. Hello messages are used by L2TP clients and servers to detect diff --git a/upstream/debian-unstable/man8/ip-link.8 b/upstream/debian-unstable/man8/ip-link.8 index 209ae825..e3c71efd 100644 --- a/upstream/debian-unstable/man8/ip-link.8 +++ b/upstream/debian-unstable/man8/ip-link.8 @@ -63,7 +63,7 @@ ip-link \- network device configuration .RI "[ " ARGS " ]" .ti -8 -.BR "ip link set " { +.BR "ip link" " { " set " | " change " } " { .IR DEVICE " | " .BI "group " GROUP } @@ -247,6 +247,7 @@ ip-link \- network device configuration .BR macvlan " | " .BR macvtap " | " .BR netdevsim " |" +.BR netkit " |" .BR nlmon " |" .BR rmnet " |" .BR sit " |" @@ -384,6 +385,9 @@ Link types: .BR netdevsim - Interface for netdev API tests .sp +.BR netkit +- BPF-programmable network device +.sp .BR nlmon - Netlink monitoring device .sp @@ -441,6 +445,11 @@ TCP for IPv6 on this device when the size is greater than 65536. specifies the recommended maximum size of a IPv4 Generic Segment Offload packet the new device should accept. This is especially used to enable BIG TCP for IPv4 on this device by setting to a size greater than 65536. +Note that +.B gso_max_size +needs to be set to a size greater than or equal to +.B gso_ipv4_max_size +to really enable BIG TCP for IPv4. .TP .BI gso_max_segs " SEGMENTS " @@ -849,6 +858,46 @@ tunnel. .in -8 .TP +netkit Type Support +For a link of type +.I netkit +the following additional arguments are supported: + +.BI "ip link add " DEVICE +.BR type " netkit " +[ +.BI mode " MODE " +] [ +.I "POLICY " +] [ +.BR peer +[ +.I "POLICY " +] [ +.I "NAME " +] ] + +.in +8 + +.sp +.BI mode " MODE" +- specifies the operation mode of the netkit device with "l3" and "l2" +as possible values. Default option is "l3". + +.sp +.I "POLICY" +- specifies the default device policy when no BPF programs are attached +with "forward" and "blackhole" as possible values. Default option is +"forward". Specifying policy before the peer option refers to the primary +device, after the peer option refers to the peer device. + +.sp +.I "NAME" +- specifies the device name of the peer device. + +.in -8 + +.TP IPIP, SIT Type Support For a link of type .IR IPIP or SIT diff --git a/upstream/debian-unstable/man8/ip-netns.8 b/upstream/debian-unstable/man8/ip-netns.8 index 0c03fdb3..cad9c55b 100644 --- a/upstream/debian-unstable/man8/ip-netns.8 +++ b/upstream/debian-unstable/man8/ip-netns.8 @@ -98,7 +98,7 @@ If NAME is available in /run/netns this command creates a new network namespace and assigns NAME. .TP -.B ip netns attach NAME PID - create a new named network namespace +.B ip netns attach NAME PID - assign a name to the network namespace of the process .sp If NAME is available in /run/netns this command attaches the network namespace of the process PID to NAME as if it were created with ip netns. diff --git a/upstream/debian-unstable/man8/ip-route.8 b/upstream/debian-unstable/man8/ip-route.8 index 8a7553c2..aa8a1a87 100644 --- a/upstream/debian-unstable/man8/ip-route.8 +++ b/upstream/debian-unstable/man8/ip-route.8 @@ -29,6 +29,7 @@ ip-route \- routing table management .ti -8 .B ip route get .I ROUTE_GET_FLAGS +.B [ to ] .IR ADDRESS " [ " .BI from " ADDRESS " iif " STRING" .RB " ] [ " oif @@ -44,7 +45,9 @@ ip-route \- routing table management .B sport .IR NUMBER " ] [ " .B dport -.IR NUMBER " ] " +.IR NUMBER " ] [" +.B as +.IR ADDRESS " ]" .ti -8 .BR "ip route" " { " add " | " del " | " change " | " append " | "\ @@ -263,9 +266,14 @@ throw " | " unreachable " | " prohibit " | " blackhole " | " nat " ]" .ti -8 .IR ROUTE_GET_FLAGS " := " -.BR " [ " -.BR fibmatch -.BR " ] " +.IR ROUTE_GET_FLAG " [ " +.IR ROUTE_GET_FLAGS " ] " + +.ti -8 +.IR ROUTE_GET_FLAG " := " +.BR "[ " +.BR connected " | " fibmatch " | " notify +.BR "]" .SH DESCRIPTION .B ip route diff --git a/upstream/debian-unstable/man8/ip.8 b/upstream/debian-unstable/man8/ip.8 index 72227d44..fdae57c5 100644 --- a/upstream/debian-unstable/man8/ip.8 +++ b/upstream/debian-unstable/man8/ip.8 @@ -19,10 +19,12 @@ ip \- show / manipulate routing, network devices, interfaces and tunnels .ti -8 .IR OBJECT " := { " -.BR link " | " address " | " addrlabel " | " route " | " rule " | " neigh " | "\ - ntable " | " tunnel " | " tuntap " | " maddress " | " mroute " | " mrule " | "\ - monitor " | " xfrm " | " netns " | " l2tp " | " tcp_metrics " | " token " | "\ - macsec " | " vrf " | " mptcp " | " ioam " | " stats " }" +.BR address " | " addrlabel " | " fou " | " help " | " ila " | " ioam " | "\ + l2tp " | " link " | " macsec " | " maddress " | " monitor " | " mptcp " | "\ + mroute " | " mrule " | " neighbor " | " neighbour " | " netconf " | "\ + netns " | " nexthop " | " ntable " | " ntbl " | " route " | " rule " | "\ + sr " | " tap " | " tcpmetrics " | " token " | " tunnel " | " tuntap " | "\ + vrf " | " xfrm " }" .sp .ti -8 @@ -255,6 +257,14 @@ Request the kernel to send the applied configuration back. - label configuration for protocol address selection. .TP +.B fou +- Foo-over-UDP receive port configuration. + +.TP +.B ila +- manage identifier locator addresses (ILA). + +.TP .B ioam - manage IOAM namespaces and IOAM schemas. @@ -267,6 +277,10 @@ Request the kernel to send the applied configuration back. - network device. .TP +.B macsec +- MACsec device configuration. + +.TP .B maddress - multicast address. @@ -291,10 +305,18 @@ Request the kernel to send the applied configuration back. - manage ARP or NDISC cache entries. .TP +.B netconf +- network configuration monitoring. + +.TP .B netns - manage network namespaces. .TP +.B nexthop +- manage nexthop objects. + +.TP .B ntable - manage the neighbor cache's operation. @@ -307,12 +329,16 @@ Request the kernel to send the applied configuration back. - rule in routing policy database. .TP +.B sr +- manage IPv6 segment routing. + +.TP .B stats - manage and show interface statistics. .TP .B tcp_metrics/tcpmetrics -- manage TCP Metrics +- manage TCP Metrics. .TP .B token @@ -415,19 +441,24 @@ was written by Alexey N. Kuznetsov and added in Linux 2.2. .SH SEE ALSO .BR ip-address (8), .BR ip-addrlabel (8), +.BR ip-fou (8), .BR ip-ioam (8), .BR ip-l2tp (8), .BR ip-link (8), +.BR ip-macsec (8), .BR ip-maddress (8), .BR ip-monitor (8), .BR ip-mptcp (8), .BR ip-mroute (8), .BR ip-neighbour (8), +.BR ip-netconf (8), .BR ip-netns (8), +.BR ip-nexthop (8), .BR ip-ntable (8), .BR ip-route (8), .BR ip-rule (8), -.BR ip-stats (8) +.BR ip-sr (8), +.BR ip-stats (8), .BR ip-tcp_metrics (8), .BR ip-token (8), .BR ip-tunnel (8), diff --git a/upstream/debian-unstable/man8/kernel-install.8 b/upstream/debian-unstable/man8/kernel-install.8 index 6c8d93d9..06b06a4e 100644 --- a/upstream/debian-unstable/man8/kernel-install.8 +++ b/upstream/debian-unstable/man8/kernel-install.8 @@ -1,5 +1,5 @@ '\" t -.TH "KERNEL\-INSTALL" "8" "" "systemd 255" "kernel-install" +.TH "KERNEL\-INSTALL" "8" "" "systemd 256~rc3" "kernel-install" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -25,6 +25,8 @@ kernel-install \- Add and remove kernel and initrd images to and from /boot .HP \w'\fBkernel\-install\fR\ 'u \fBkernel\-install\fR [OPTIONS...] add \fIKERNEL\-VERSION\fR \fIKERNEL\-IMAGE\fR [\fIINITRD\-FILE\fR...] .HP \w'\fBkernel\-install\fR\ 'u +\fBkernel\-install\fR [OPTIONS...] add\-all +.HP \w'\fBkernel\-install\fR\ 'u \fBkernel\-install\fR [OPTIONS...] remove \fIKERNEL\-VERSION\fR .HP \w'\fBkernel\-install\fR\ 'u \fBkernel\-install\fR [OPTIONS...] inspect [\fIKERNEL\-VERSION\fR] [\fIKERNEL\-IMAGE\fR] [\fIINITRD\-FILE\fR...] @@ -454,7 +456,7 @@ Print a short version string and exit\&. Do not pipe output into a pager\&. .RE .PP -\fB\-\-json=\fR\fIMODE\fR +\fB\-\-json=\fR\fB\fIMODE\fR\fR .RS 4 Shows output formatted as JSON\&. Expects one of "short" @@ -634,7 +636,14 @@ will be prepended before can be set to override the location of the configuration files read by \fBkernel\-install\fR\&. When set, install\&.conf, -entry\-token, and other files will be read from this directory\&. +entry\-token, and other files will be read from this directory only\&. Note that this path is relative to the host, and in particular +\fIsymlinks in this directory are resolved relative to the host\fR, even if +\fB\-\-root=\fR\fB\fIroot\fR\fR +is used\&. This means that it is generally +\fInot\fR +correct to use this variable to specify a directory underneath +\fIroot\fR +if symlinks are used there\&. .PP \fI$KERNEL_INSTALL_PLUGINS\fR can be set to override the list of plugins executed by @@ -745,7 +754,7 @@ will be used\&. Added in version 198\&. .RE .PP -/etc/kernel/install\&.conf, /usr/lib/kernel/install\&.conf +/etc/kernel/install\&.conf, /run/kernel/install\&.conf, /usr/local/lib/kernel/install\&.conf, /usr/lib/kernel/install\&.conf, /etc/kernel/install\&.conf\&.d/*\&.conf, /run/kernel/install\&.conf\&.d/*\&.conf, /usr/local/lib/kernel/install\&.conf\&.d/*\&.conf, /usr/lib/kernel/install\&.conf\&.d/*\&.conf .RS 4 Configuration file with options for \fBkernel\-install\fR, as a series of @@ -753,7 +762,8 @@ Configuration file with options for assignments, compatible with shell syntax, following the same rules as described in \fBos-release\fR(5)\&. The first of the files that is found will be used\&. \fI$KERNEL_INSTALL_CONF_ROOT\fR -may be used to override the search path; see below for details\&. +may be used to override the search path; see below for details\&. Drop\-in files may also be used to extend the configuration with overrides, see +\fBsystemd.unit\fR(5)\&. .sp Currently, the following keys are supported: \fIMACHINE_ID=\fR, @@ -814,12 +824,7 @@ environment variable is set, it will override the search path\&. The files will from the directory specified by the environment variable\&. When the variable is not set, the listed paths are tried in turn, and the first file that exists is used\&. .SH "SEE ALSO" .PP -\fBmachine-id\fR(5), -\fBos-release\fR(5), -\fBdepmod\fR(8), -\fBsystemd-boot\fR(7), -\fBukify\fR(1), -\m[blue]\fBBoot Loader Specification\fR\m[]\&\s-2\u[2]\d\s+2 +\fBmachine-id\fR(5), \fBos-release\fR(5), \fBdepmod\fR(8), \fBsystemd-boot\fR(7), \fBukify\fR(1), \m[blue]\fBBoot Loader Specification\fR\m[]\&\s-2\u[2]\d\s+2 .SH "NOTES" .IP " 1." 4 Nowadays actually CPIO archives used as an "initramfs", rather than "initrd". See diff --git a/upstream/debian-unstable/man8/kmod.8 b/upstream/debian-unstable/man8/kmod.8 index 249bcff4..e89cf47e 100644 --- a/upstream/debian-unstable/man8/kmod.8 +++ b/upstream/debian-unstable/man8/kmod.8 @@ -2,12 +2,12 @@ .\" Title: kmod .\" Author: Lucas De Marchi <lucas.de.marchi@gmail.com> .\" Generator: DocBook XSL Stylesheets vsnapshot <http://docbook.sf.net/> -.\" Date: 02/13/2024 +.\" Date: 05/26/2024 .\" Manual: kmod .\" Source: kmod .\" Language: English .\" -.TH "KMOD" "8" "02/13/2024" "kmod" "kmod" +.TH "KMOD" "8" "05/26/2024" "kmod" "kmod" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff --git a/upstream/debian-unstable/man8/ld.so.8 b/upstream/debian-unstable/man8/ld.so.8 index afd29c52..f33e7b02 100644 --- a/upstream/debian-unstable/man8/ld.so.8 +++ b/upstream/debian-unstable/man8/ld.so.8 @@ -4,7 +4,7 @@ .\" Various parts: .\" Copyright (C) 2007-9, 2013, 2016 Michael Kerrisk <mtk.manpages@gmail.com> .\" -.TH ld.so 8 2023-07-18 "Linux man-pages 6.05.01" +.TH ld.so 8 2024-05-08 "Linux man-pages 6.8" .SH NAME ld.so, ld\-linux.so \- dynamic linker/loader .SH SYNOPSIS @@ -15,7 +15,7 @@ to the dynamic linker can be passed and, in the ELF case, the dynamic linker which is stored in the .B .interp section of the program is executed) or directly by running: -.PP +.P .I /lib/ld\-linux.so.* [OPTIONS] [PROGRAM [ARGUMENTS]] .SH DESCRIPTION @@ -25,14 +25,14 @@ and .B ld\-linux.so* find and load the shared objects (shared libraries) needed by a program, prepare the program to run, and then run it. -.PP +.P Linux binaries require dynamic linking (linking at run time) unless the .B \-static option was given to .BR ld (1) during compilation. -.PP +.P The program .B ld.so handles a.out binaries, a binary format used long ago. @@ -46,7 +46,7 @@ support files and programs .BR ldconfig (8), and .IR /etc/ld.so.conf ). -.PP +.P When resolving shared object dependencies, the dynamic linker first inspects each dependency string to see if it contains a slash (this can occur if @@ -54,14 +54,13 @@ a shared object pathname containing slashes was specified at link time). If a slash is found, then the dependency string is interpreted as a (relative or absolute) pathname, and the shared object is loaded using that pathname. -.PP +.P If a shared object dependency does not contain a slash, then it is searched for in the following order: .IP (1) 5 Using the directories specified in the DT_RPATH dynamic section attribute of the binary if present and DT_RUNPATH attribute does not exist. -Use of DT_RPATH is deprecated. .IP (2) Using the environment variable .BR LD_LIBRARY_PATH , @@ -132,7 +131,7 @@ in the filename arguments to the and .BR dlmopen (3) functions. -.PP +.P The substituted tokens are as follows: .TP .IR $ORIGIN " (or equivalently " ${ORIGIN} ) @@ -187,7 +186,7 @@ value in the auxiliary vector (see .\" .\" ld.so lets names be abbreviated, so $O will work for $ORIGIN; .\" Don't do this!! -.PP +.P Note that the dynamic string tokens have to be quoted properly when set from a shell, to prevent their expansion as shell or environment variables. @@ -208,6 +207,14 @@ The objects in .I list are delimited by colons. .TP +.BI \-\-glibc-hwcaps-mask " list" +only search built-in subdirectories if in +.IR list . +.TP +.BI \-\-glibc-hwcaps-prepend " list" +Search glibc-hwcaps subdirectories in +.IR list . +.TP .B \-\-inhibit\-cache Do not use .IR /etc/ld.so.cache . @@ -238,6 +245,16 @@ are delimited by colons or spaces. .B \-\-list List all dependencies and how they are resolved. .TP +.BR \-\-list\-diagnostics " (since glibc 2.33)" +Print system diagnostic information in a machine-readable format, +such as some internal loader variables, +the auxiliary vector +(see +.BR getauxval (3)), +and the environment variables. +On some architectures, +the command might print additional information +(like the cpu features used in GNU indirect function selection on x86). .BR \-\-list\-tunables " (since glibc 2.33)" Print the names and values of all tunables, along with the minimum and maximum allowed values. @@ -280,6 +297,17 @@ Other environment variables treated in this way include: .BR GETCONF_DIR , .BR HOSTALIASES , .BR LOCALDOMAIN , +.BR LD_AUDIT , +.BR LD_DEBUG , +.BR LD_DEBUG_OUTPUT , +.BR LD_DYNAMIC_WEAK , +.BR LD_HWCAP_MASK , +.BR LD_LIBRARY_PATH , +.BR LD_ORIGIN_PATH , +.BR LD_PRELOAD , +.BR LD_PROFILE , +.BR LD_SHOW_AUXV , +.BR LOCALDOMAIN , .BR LOCPATH , .BR MALLOC_TRACE , .BR NIS_PATH , @@ -289,7 +317,7 @@ Other environment variables treated in this way include: .BR TMPDIR , and .BR TZDIR . -.PP +.P A binary is executed in secure-execution mode if the .B AT_SECURE entry in the auxiliary vector (see @@ -310,7 +338,7 @@ A nonzero value may have been set by a Linux Security Module. .SS Environment variables Among the more important environment variables are the following: .TP -.BR LD_ASSUME_KERNEL " (since glibc 2.2.3)" +.BR LD_ASSUME_KERNEL " (from glibc 2.2.3 to glibc 2.36)" Each shared object can inform the dynamic linker of the minimum kernel ABI version that it requires. (This requirement is encoded in an ELF note section that is viewable via @@ -457,7 +485,7 @@ If set (to any value), causes the program to list its dynamic dependencies, as if run by .BR ldd (1), instead of running normally. -.PP +.P Then there are lots of more or less obscure variables, many obsolete or only for internal use. .TP @@ -627,8 +655,11 @@ Since glibc 2.3.4, .B LD_DYNAMIC_WEAK is ignored in secure-execution mode. .TP -.BR LD_HWCAP_MASK " (since glibc 2.1)" +.BR LD_HWCAP_MASK " (from glibc 2.1 to glibc 2.38)" Mask for hardware capabilities. +Since glibc 2.26, +the option might be ignored +if glibc does not support tunables. .TP .BR LD_ORIGIN_PATH " (since glibc 2.1)" Path where the binary is found. @@ -663,7 +694,7 @@ Profiling output is appended to the file whose name is: .IP Since glibc 2.2.5, .B LD_PROFILE -is ignored in secure-execution mode. +uses a different default path in secure-execution mode. .TP .BR LD_PROFILE_OUTPUT " (since glibc 2.1)" Directory where @@ -677,10 +708,6 @@ then the default is is ignored in secure-execution mode; instead .I /var/profile is always used. -(This detail is relevant only before glibc 2.2.5, -since in later glibc versions, -.B LD_PROFILE -is also ignored in secure-execution mode.) .TP .BR LD_SHOW_AUXV " (since glibc 2.1)" If this environment variable is defined (with any value), @@ -691,7 +718,7 @@ Since glibc 2.3.4, .B LD_SHOW_AUXV is ignored in secure-execution mode. .TP -.BR LD_TRACE_PRELINKING " (since glibc 2.4)" +.BR LD_TRACE_PRELINKING " (from glibc 2.4 to glibc 2.35)" If this environment variable is defined, trace prelinking of the object whose name is assigned to this environment variable. @@ -702,7 +729,7 @@ If the object name is not recognized, .\" (This is what seems to happen, from experimenting) then all prelinking activity is traced. .TP -.BR LD_USE_LOAD_BIAS " (since glibc 2.3.3)" +.BR LD_USE_LOAD_BIAS " (from glibc 2.3.3 to glibc 2.35)" .\" http://sources.redhat.com/ml/libc-hacker/2003-11/msg00127.html .\" Subject: [PATCH] Support LD_USE_LOAD_BIAS .\" Jakub Jelinek @@ -788,7 +815,7 @@ as a temporary workaround to a library misconfiguration issue.) .I lib*.so* shared objects .SH NOTES -.SS Hardware capabilities +.SS Legacy Hardware capabilities (from glibc 2.5 to glibc 2.37) Some shared objects are compiled using hardware-specific instructions which do not exist on every CPU. Such objects should be installed in directories whose names define the @@ -823,6 +850,65 @@ z900, z990, z9-109, z10, zarch .B x86 (32-bit only) acpi, apic, clflush, cmov, cx8, dts, fxsr, ht, i386, i486, i586, i686, mca, mmx, mtrr, pat, pbe, pge, pn, pse36, sep, ss, sse, sse2, tm +.P +The legacy hardware capabilities support has the drawback that +each new feature added grows the search path exponentially, +because it has to be added to +every combination of the other existing features. +.P +For instance, on x86 32-bit, +if the hardware supports +.B i686 +and +.BR sse2 , +the resulting search path will be +.BR i686/sse2:i686:sse2:. . +A new capability +.B newcap +will set the search path to +.BR newcap/i686/sse2:newcap/i686:newcap/sse2:newcap:i686/sse2:i686:sse2: . +.\" +.SS glibc Hardware capabilities (from glibc 2.33) +.TP +.\" The initial discussion on various pitfalls of the old scheme is +.\" <https://sourceware.org/pipermail/libc-alpha/2020-May/113757.html> +.\" and the patchset that proposes the glibc-hwcap support is +.\" <https://sourceware.org/pipermail/libc-alpha/2020-June/115250.html> +glibc 2.33 added a new hardware capability scheme, +where under each CPU architecture, +certain levels can be defined, +grouping support for certain features or special instructions. +Each architecture level has +a fixed set of paths that it adds to the dynamic linker search list, +depending on the hardware of the machine. +Since each new architecture level is +not combined with previously existing ones, +the new scheme does not have the drawback of +growing the dynamic linker search list uncontrollably. +.P +For instance, on x86 64-bit, +if the hardware supports +.B x86_64-v3 +(for instance Intel Haswell or AMD Excavator), +the resulting search path will be +.B glibc-hwcaps/x86-64-v3:glibc-hwcaps/x86-64-v2:. +.\" The x86_64 architectures levels are defined the official ABI: +.\" <https://gitlab.com/x86-psABIs/x86-64-ABI/-/blob/master/x86-64-ABI/low-level-sys-info.tex> +.\" The PowerPC and s390x are glibc defined ones based on chip +.\" support (which maps to ISA levels). +The following paths are currently supported, in priority order. +.TP +.B PowerPC (64-bit little-endian only) +power10, power9 +.TP +.B s390 (64-bit only) +z16, z15, z14, z13 +.TP +.B x86 (64-bit only) +x86-64-v4, x86-64-v3, x86-64-v2 +.P +glibc 2.37 removed support for the legacy hardware capabilities. +.\" .SH SEE ALSO .BR ld (1), .BR ldd (1), diff --git a/upstream/debian-unstable/man8/ldconfig.8 b/upstream/debian-unstable/man8/ldconfig.8 index 5bbfd863..efbbf1a2 100644 --- a/upstream/debian-unstable/man8/ldconfig.8 +++ b/upstream/debian-unstable/man8/ldconfig.8 @@ -5,7 +5,7 @@ .\" .\" Modified, 6 May 2002, Michael Kerrisk, <mtk.manpages@gmail.com> .\" Change listed order of /usr/lib and /lib -.TH ldconfig 8 2023-03-11 "Linux man-pages 6.05.01" +.TH ldconfig 8 2024-05-02 "Linux man-pages 6.8" .SH NAME ldconfig \- configure dynamic linker run-time bindings .SH SYNOPSIS @@ -49,7 +49,7 @@ while and .I /usr/lib64 are used for 64-bit libraries. -.PP +.P The cache is used by the run-time linker, .I ld.so or @@ -63,7 +63,7 @@ determining which versions should have their links updated. .B \%ldconfig should normally be run by the superuser as it may require write permission on some root owned directories and files. -.PP +.P .B \%ldconfig will look only at files that are named .I lib*.so* @@ -78,20 +78,20 @@ like this example, where the middle file .RB ( libfoo.so.1 here) is the SONAME for the library: -.PP +.P .in +4n .EX libfoo.so \-> libfoo.so.1 \-> libfoo.so.1.12 .EE .in -.PP +.P Failure to follow this pattern may result in compatibility issues after an upgrade. .SH OPTIONS .TP -.BI \-c\~ fmt -.TQ .BI \-\-format= fmt +.TQ +.BI \-c\~ fmt (Since glibc 2.2) .\" commit 45eca4d141c047950db48c69c8941163d0a61fcd Use cache format @@ -121,9 +121,9 @@ Use instead of .IR /etc/ld.so.conf . .TP -.B \-i -.TQ .B \-\-ignore\-aux\-cache +.TQ +.B \-i (Since glibc 2.7) .\" commit 27d9ffda17df4d2388687afd12897774fde39bcc Ignore auxiliary cache file. @@ -148,9 +148,9 @@ Unless is also specified, links are still updated. .TP -.B \-p -.TQ .B \-\-print\-cache +.TQ +.B \-p Print the lists of directories and candidate libraries stored in the current cache. .TP @@ -159,18 +159,18 @@ Change to and use .I root as the root directory. .TP -.B \-v -.TQ .B \-\-verbose +.TQ +.B \-v Verbose mode. Print current version number, the name of each directory as it is scanned, and any links that are created. Overrides quiet mode. .TP -.B \-V -.TQ .B \-\-version +.TQ +.B \-V Print program version. .TP .B \-X diff --git a/upstream/debian-unstable/man8/lsmod.8 b/upstream/debian-unstable/man8/lsmod.8 index 393ca19e..0942ee19 100644 --- a/upstream/debian-unstable/man8/lsmod.8 +++ b/upstream/debian-unstable/man8/lsmod.8 @@ -2,12 +2,12 @@ .\" Title: lsmod .\" Author: Jon Masters <jcm@jonmasters.org> .\" Generator: DocBook XSL Stylesheets vsnapshot <http://docbook.sf.net/> -.\" Date: 02/13/2024 +.\" Date: 05/26/2024 .\" Manual: lsmod .\" Source: kmod .\" Language: English .\" -.TH "LSMOD" "8" "02/13/2024" "kmod" "lsmod" +.TH "LSMOD" "8" "05/26/2024" "kmod" "lsmod" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff --git a/upstream/debian-unstable/man8/lspci.8 b/upstream/debian-unstable/man8/lspci.8 index 84e0fb05..8914b785 100644 --- a/upstream/debian-unstable/man8/lspci.8 +++ b/upstream/debian-unstable/man8/lspci.8 @@ -1,4 +1,4 @@ -.TH lspci 8 "01 May 2023" "pciutils-3.10.0" "The PCI Utilities" +.TH lspci 8 "05 April 2024" "pciutils-3.12.0" "The PCI Utilities" .SH NAME lspci \- list all PCI devices .SH SYNOPSIS @@ -116,7 +116,7 @@ Show PCI vendor and device codes as both numbers and names. Use DNS to query the central PCI ID database if a device is not found in the local .B pci.ids file. If the DNS query succeeds, the result is cached in -.B ~/.pciids-cache +.B $XDG_CACHE_HOME/pci-ids and it is recognized in subsequent runs even if .B -q is not given any more. Please use this switch inside automated scripts only @@ -345,7 +345,7 @@ utility to download the most recent version. .B /usr/share/misc/pci.ids.gz If lspci is compiled with support for compression, this file is tried before pci.ids. .TP -.B ~/.pciids-cache +.B $XDG_CACHE_HOME/pci-ids All ID's found in the DNS query mode are cached in this file. .SH BUGS diff --git a/upstream/debian-unstable/man8/luksformat.8 b/upstream/debian-unstable/man8/luksformat.8 index bb21ec87..4492bdd2 100644 --- a/upstream/debian-unstable/man8/luksformat.8 +++ b/upstream/debian-unstable/man8/luksformat.8 @@ -55,7 +55,7 @@ .\" ======================================================================== .\" .IX Title "LUKSFORMAT 8" -.TH LUKSFORMAT 8 2024-02-26 2:2.7.0-1 "Administrative commands" +.TH LUKSFORMAT 8 2024-04-14 2:2.7.2-2 "Administrative commands" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/upstream/debian-unstable/man8/mke2fs.8 b/upstream/debian-unstable/man8/mke2fs.8 index d39c024b..74644166 100644 --- a/upstream/debian-unstable/man8/mke2fs.8 +++ b/upstream/debian-unstable/man8/mke2fs.8 @@ -2,7 +2,7 @@ .\" Copyright 1993, 1994, 1995 by Theodore Ts'o. All Rights Reserved. .\" This file may be copied under the terms of the GNU Public License. .\" -.TH MKE2FS 8 "February 2023" "E2fsprogs version 1.47.0" +.TH MKE2FS 8 "May 2024" "E2fsprogs version 1.47.1" .SH NAME mke2fs \- create an ext2/ext3/ext4 file system .SH SYNOPSIS @@ -23,7 +23,7 @@ mke2fs \- create an ext2/ext3/ext4 file system ] [ .B \-d -.I root-directory +.I root-directory|tarball ] [ .B \-D @@ -232,16 +232,18 @@ test is used instead of a fast read-only test. .TP .B \-C " cluster-size" Specify the size of cluster in bytes for file systems using the bigalloc -feature. Valid cluster-size values are from 2048 to 256M bytes per -cluster. This can only be specified if the bigalloc feature is -enabled. (See the +feature. Valid cluster-size values range from 2 to 32768 times the +filesystem blocksize and must be a power of 2. The cluster-size can +only be specified if the bigalloc feature is enabled. (See the .B ext4 (5) man page for more details about bigalloc.) The default cluster size if bigalloc is enabled is 16 times the block size. .TP -.BI \-d " root-directory" -Copy the contents of the given directory into the root directory of the -file system. +.BI \-d " root-directory|tarball" +Copy the contents of the given directory or tarball into the root directory of the +file system. Tarball input is only available if mke2fs was compiled with +libarchive support enabled and if the libarchive shared library is available +at run-time. The special value "-" will read a tarball from standard input. .TP .B \-D Use direct I/O when writing to the disk. This avoids mke2fs dirtying a @@ -406,6 +408,11 @@ The \fBroot_owner=\fR option allows explicitly specifying these values, and avoid side-effects for users that do not expect the contents of the file system to change based on the user running \fBmke2fs\fR. .TP +.BI root_perms [=permissions] +Specify the root directory permissions in octal format. If no permissions +are specified then the root directory permissions would be set in accordance with +the default filesystem umask. +.TP .B test_fs Set a flag in the file system superblock indicating that it may be mounted using experimental kernel code, such as the ext4dev file system. @@ -508,8 +515,8 @@ The default inode size is controlled by the file. In the .B mke2fs.conf file shipped with e2fsprogs, the default inode size is 256 bytes for -most file systems, except for small file systems where the inode size -will be 128 bytes. +all file systems, except for the GNU Hurd since it only supports +128-byte inodes. .TP .B \-j Create the file system with an ext3 journal. If the diff --git a/upstream/debian-unstable/man8/mkfs.btrfs.8 b/upstream/debian-unstable/man8/mkfs.btrfs.8 index 7de405ca..c521075a 100644 --- a/upstream/debian-unstable/man8/mkfs.btrfs.8 +++ b/upstream/debian-unstable/man8/mkfs.btrfs.8 @@ -28,7 +28,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]] .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]] .in \\n[rst2man-indent\\n[rst2man-indent-level]]u .. -.TH "MKFS.BTRFS" "8" "Feb 28, 2024" "6.6.3" "BTRFS" +.TH "MKFS.BTRFS" "8" "Mar 24, 2024" "6.6.3" "BTRFS" .SH NAME mkfs.btrfs \- create a btrfs filesystem .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/mkfs.xfs.8 b/upstream/debian-unstable/man8/mkfs.xfs.8 index 891570d0..e4852572 100644 --- a/upstream/debian-unstable/man8/mkfs.xfs.8 +++ b/upstream/debian-unstable/man8/mkfs.xfs.8 @@ -504,6 +504,33 @@ directories. By default, .B mkfs.xfs will not enable DAX mode. +.TP +.BI concurrency= value +Create enough allocation groups to handle the desired level of concurrency. +The goal of this calculation scheme is to set the number of allocation groups +to an integer multiple of the number of writer threads desired, to minimize +contention of AG locks. +This scheme will neither create fewer AGs than would be created by the default +configuration, nor will it create AGs smaller than 4GB. +This option is not compatible with the +.B agcount +or +.B agsize +options. +The magic value +.I nr_cpus +or +.I 1 +or no value at all will set this parameter to the number of active processors +in the system. +If the kernel advertises that the data device is a non-mechanical storage +device, +.B mkfs.xfs +will use this new geometry calculation scheme. +The magic value of +.I 0 +forces use of the older AG geometry calculations that is used for mechanical +storage. .RE .TP .B \-f @@ -768,6 +795,25 @@ if you want to disable this feature for older kernels which don't support it. .IP This option is only tunable on the deprecated V4 format. +.TP +.BI concurrency= value +Allocate a log that is estimated to be large enough to handle the desired level +of concurrency without userspace program threads contending for log space. +This scheme will neither create a log smaller than the minimum required, +nor create a log larger than the maximum possible. +This option is only valid for internal logs and is not compatible with the +size option. +This option is not compatible with the +.B logdev +or +.B size +options. +The magic value +.I nr_cpus +or +.I 1 +or no value at all will set this parameter to the number of active processors +in the system. .RE .PP .PD 0 diff --git a/upstream/debian-unstable/man8/mklost+found.8 b/upstream/debian-unstable/man8/mklost+found.8 index 54e39f90..03b89355 100644 --- a/upstream/debian-unstable/man8/mklost+found.8 +++ b/upstream/debian-unstable/man8/mklost+found.8 @@ -2,17 +2,17 @@ .\" Copyright 1993, 1994, 1995 by Theodore Ts'o. All Rights Reserved. .\" This file may be copied under the terms of the GNU Public License. .\" -.TH MKLOST+FOUND 8 "February 2023" "E2fsprogs version 1.47.0" +.TH MKLOST+FOUND 8 "May 2024" "E2fsprogs version 1.47.1" .SH NAME -mklost+found \- create a lost+found directory on a mounted Linux -second extended file system +mklost+found \- create a lost+found directory on a mounted +ext2/ext3/ext4 file system .SH SYNOPSIS .B mklost+found .SH DESCRIPTION .B mklost+found is used to create a .I lost+found -directory in the current working directory on a Linux second extended +directory in the current working directory on an ext2/ext3/ext4 file system. There is normally a .I lost+found directory in the root directory of each file system. diff --git a/upstream/debian-unstable/man8/modinfo.8 b/upstream/debian-unstable/man8/modinfo.8 index e384bd3d..c8b20bc5 100644 --- a/upstream/debian-unstable/man8/modinfo.8 +++ b/upstream/debian-unstable/man8/modinfo.8 @@ -2,12 +2,12 @@ .\" Title: modinfo .\" Author: Jon Masters <jcm@jonmasters.org> .\" Generator: DocBook XSL Stylesheets vsnapshot <http://docbook.sf.net/> -.\" Date: 02/13/2024 +.\" Date: 05/26/2024 .\" Manual: modinfo .\" Source: kmod .\" Language: English .\" -.TH "MODINFO" "8" "02/13/2024" "kmod" "modinfo" +.TH "MODINFO" "8" "05/26/2024" "kmod" "modinfo" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff --git a/upstream/debian-unstable/man8/modprobe.8 b/upstream/debian-unstable/man8/modprobe.8 index fd26259c..80947d69 100644 --- a/upstream/debian-unstable/man8/modprobe.8 +++ b/upstream/debian-unstable/man8/modprobe.8 @@ -2,12 +2,12 @@ .\" Title: modprobe .\" Author: Jon Masters <jcm@jonmasters.org> .\" Generator: DocBook XSL Stylesheets vsnapshot <http://docbook.sf.net/> -.\" Date: 02/13/2024 +.\" Date: 05/26/2024 .\" Manual: modprobe .\" Source: kmod .\" Language: English .\" -.TH "MODPROBE" "8" "02/13/2024" "kmod" "modprobe" +.TH "MODPROBE" "8" "05/26/2024" "kmod" "modprobe" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff --git a/upstream/debian-unstable/man8/net.8 b/upstream/debian-unstable/man8/net.8 index 2ee50abd..b7148b24 100644 --- a/upstream/debian-unstable/man8/net.8 +++ b/upstream/debian-unstable/man8/net.8 @@ -2,12 +2,12 @@ .\" Title: net .\" Author: [see the "AUTHOR" section] .\" Generator: DocBook XSL Stylesheets vsnapshot <http://docbook.sf.net/> -.\" Date: 02/19/2024 +.\" Date: 05/29/2024 .\" Manual: System Administration tools -.\" Source: Samba 4.19.5-Debian +.\" Source: Samba 4.20.1-Debian .\" Language: English .\" -.TH "NET" "8" "02/19/2024" "Samba 4\&.19\&.5\-Debian" "System Administration tools" +.TH "NET" "8" "05/29/2024" "Samba 4\&.20\&.1\-Debian" "System Administration tools" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -31,7 +31,7 @@ net \- Tool for administration of Samba and remote CIFS servers\&. .SH "SYNOPSIS" .HP \w'\ 'u -net {<ads|rap|rpc>} [\-h|\-\-help] [\-d|\-\-debuglevel=DEBUGLEVEL] [\-\-debug\-stdout] [\-\-configfile=CONFIGFILE] [\-\-option=name=value] [\-l|\-\-log\-basename=LOGFILEBASE] [\-\-leak\-report] [\-\-leak\-report\-full] [\-R|\-\-name\-resolve=NAME\-RESOLVE\-ORDER] [\-O|\-\-socket\-options=SOCKETOPTIONS] [\-m|\-\-max\-protocol=MAXPROTOCOL] [\-n|\-\-netbiosname=NETBIOSNAME] [\-\-netbios\-scope=SCOPE] [\-W|\-\-workgroup=WORKGROUP] [\-\-realm=REALM] [\-U|\-\-user=[DOMAIN/]USERNAME[%PASSWORD]] [\-N|\-\-no\-pass] [\-\-password=STRING] [\-\-pw\-nt\-hash] [\-A|\-\-authentication\-file=FILE] [\-P|\-\-machine\-pass] [\-\-simple\-bind\-dn=DN] [\-\-use\-kerberos=desired|required|off] [\-\-use\-krb5\-ccache=CCACHE] [\-\-use\-winbind\-ccache] [\-\-client\-protection=sign|encrypt|off] [\-V|\-\-version] [\-w|\-\-target\-workgroup\ workgroup] [\-I|\-\-ipaddress\ ip\-address] [\-p|\-\-port\ port] [\-\-myname] [\-S|\-\-server\ server] [\-\-long] [\-v|\-\-verbose] [\-f|\-\-force] [\-\-request\-timeout\ seconds] [\-t|\-\-timeout\ seconds] [\-\-dns\-ttl\ TTL\-IN\-SECONDS] [\-i|\-\-stdin] +net {<ads|rap|rpc>} [\-h|\-\-help] [\-d|\-\-debuglevel=DEBUGLEVEL] [\-\-debug\-stdout] [\-\-configfile=CONFIGFILE] [\-\-option=name=value] [\-l|\-\-log\-basename=LOGFILEBASE] [\-\-leak\-report] [\-\-leak\-report\-full] [\-R|\-\-name\-resolve=NAME\-RESOLVE\-ORDER] [\-O|\-\-socket\-options=SOCKETOPTIONS] [\-m|\-\-max\-protocol=MAXPROTOCOL] [\-n|\-\-netbiosname=NETBIOSNAME] [\-\-netbios\-scope=SCOPE] [\-W|\-\-workgroup=WORKGROUP] [\-\-realm=REALM] [\-U|\-\-user=[DOMAIN/]USERNAME[%PASSWORD]] [\-N|\-\-no\-pass] [\-\-password=STRING] [\-\-pw\-nt\-hash] [\-A|\-\-authentication\-file=FILE] [\-P|\-\-machine\-pass] [\-\-simple\-bind\-dn=DN] [\-\-use\-kerberos=desired|required|off] [\-\-use\-krb5\-ccache=CCACHE] [\-\-use\-winbind\-ccache] [\-\-client\-protection=sign|encrypt|off] [\-V|\-\-version] [\-w|\-\-target\-workgroup\ workgroup] [\-I|\-\-ipaddress\ ip\-address] [\-p|\-\-port\ port] [\-\-myname] [\-S|\-\-server\ server] [\-\-long] [\-v|\-\-verbose] [\-f|\-\-force] [\-\-request\-timeout\ seconds] [\-t|\-\-timeout\ seconds] [\-\-dns\-ttl\ TTL\-IN\-SECONDS] [\-i|\-\-stdin] [\-\-witness\-registration=REGISTRATION_UUID] [\-\-witness\-net\-name=REGEX] [\-\-witness\-share\-name=REGEX] [\-\-witness\-ip\-address=REGEX] [\-\-witness\-client\-computer\-name=REGEX] [\-\-witness\-apply\-to\-all] [\-\-witness\-new\-node=NODEID] [\-\-witness\-new\-ip=IPADDRESS] [\-\-witness\-forced\-response=JSON] .SH "DESCRIPTION" .PP This tool is part of the @@ -261,6 +261,51 @@ Follow symlinks encountered while traversing a directory\&. Specify the Time to Live (TTL) of DNS records\&. DNS records will be created or updated with the given TTL\&. The TTL is specified in seconds\&. Can be used with "net ads dns register" and "net ads join"\&. The default is 3600 seconds\&. .RE .PP +\-\-witness\-registration=REGISTRATION_UUID +.RS 4 +This does a direct lookup for REGISTRATION_UUID instead of doing a database traversal\&. +.RE +.PP +\-\-witness\-net\-name=REGEX +.RS 4 +This specifies the \*(Aqserver name\*(Aq the client registered for monitoring\&. +.RE +.PP +\-\-witness\-share\-name=REGEX +.RS 4 +This specifies the \*(Aqshare name\*(Aq the client registered for monitoring\&. Note that the share name is optional in the registration, otherwise an empty string is matched\&. +.RE +.PP +\-\-witness\-ip\-address=REGEX +.RS 4 +This specifies the ip address the client registered for monitoring\&. +.RE +.PP +\-\-witness\-client\-computer\-name=REGEX +.RS 4 +This specifies the client computer name the client specified in the registration\&. Note it is just a string chosen by the client itself\&. +.RE +.PP +\-\-witness\-apply\-to\-all +.RS 4 +This selects all registrations\&. +.RE +.PP +\-\-witness\-new\-node=NODEID +.RS 4 +By specifying a NODEID all ip addresses currently available on the given node are included in the response\&. By specifying \*(Aq\-1\*(Aq as NODEID all ip addresses of the cluster are included in the response\&. +.RE +.PP +\-\-witness\-new\-ip=IPADDRESS +.RS 4 +By specifying an IPADDRESS only the specified ip address is included in the response\&. +.RE +.PP +\-\-witness\-forced\-response=JSON +.RS 4 +This allows the generation of very complex witness_notifyResponse structures\&. +.RE +.PP \-d|\-\-debuglevel=DEBUGLEVEL .RS 4 \fIlevel\fR @@ -1302,10 +1347,10 @@ Windows SPN A Windows SPN is of the format \*(Aqserviceclass/host:port\*(Aq, it is used to create a kerberos principal \*(Aqserviceclass/host@realm\*(Aq which will be written to the keytab file\&. .RE .PP -Unlike old versions no computer AD objects are modified by this command\&. To preserve the bevhaviour of older clients \*(Aqnet ads keytab ad_update_ads\*(Aq is available\&. +Unlike old versions no computer AD objects are modified by this command\&. To preserve the behaviour of older clients \*(Aqnet ads keytab ad_update_ads\*(Aq is available\&. .SS "ADS KEYTAB \fIADD_UPDATE_ADS\fR \fI(principal | machine | serviceclass | windows SPN\fR" .PP -Adds a new keytab entry (see section for net ads keytab add)\&. In addition to adding entries to the keytab file corrosponding Windows SPNs are created from the entry passed to this command\&. These SPN(s) added to the AD computer account object associated with the client machine running this command for the following entry types; +Adds a new keytab entry (see section for net ads keytab add)\&. In addition to adding entries to the keytab file corresponding Windows SPNs are created from the entry passed to this command\&. These SPN(s) added to the AD computer account object associated with the client machine running this command for the following entry types; .PP serviceclass .RS 4 @@ -1589,14 +1634,8 @@ The default if no "acl" is given is "Everyone:R", which means any authenticated The optional "guest_ok" has the same effect as the parameter of the same name in /etc/samba/smb\&.conf, in that it allows guest access to this user defined share\&. This parameter is only allowed if the global parameter "usershare allow guests" has been set to true in the /etc/samba/smb\&.conf\&. - - -There is no separate command to modify an existing user defined share, -just use the "net usershare add [sharename]" command using the same -sharename as the one you wish to modify and specify the new options -you wish\&. The Samba smbd daemon notices user defined share modifications -at connect time so will see the change immediately, there is no need -to restart smbd on adding, deleting or changing a user defined share\&. +.PP +There is no separate command to modify an existing user defined share, just use the "net usershare add [sharename]" command using the same sharename as the one you wish to modify and specify the new options you wish\&. The Samba smbd daemon notices user defined share modifications at connect time so will see the change immediately, there is no need to restart smbd on adding, deleting or changing a user defined share\&. .SS "USERSHARE DELETE sharename" .PP Deletes the user defined share by name\&. The Samba smbd daemon immediately notices this change, although it will not disconnect any users currently connected to the deleted share\&. @@ -2534,6 +2573,260 @@ is a required parameter to load the provisioning from a file\&. .RE .PP Example: net offlinejoin requestodj \-U administrator%secret loadfile=provisioning\&.txt +.SS "WITNESS" +.PP +Starting with version 4\&.20 Samba has support for the SMB Witness service in a cluster\&. +.PP +The following witness commands are implemented: +.RS 4 + +net witness list List witness registrations from rpcd_witness_registration\&.tdb\&. +.RE +.RS 4 + +net witness client\-move Generate client move notifications for witness registrations to a new ip or node\&. +.RE +.RS 4 + +net witness share\-move Generate share move notifications for witness registrations to a new ip or node\&. +.RE +.RS 4 + +net witness force\-unregister Force unregistrations for witness registrations\&. +.RE +.RS 4 + +net witness force\-response Force an AsyncNotify response based on json input (mostly for testing)\&. +.RE +.SS "WITNESS LIST" +.PP +List witness registrations from rpcd_witness_registration\&.tdb +.PP +Note: Only supported with clustering=yes! +.PP +Machine readable output can be generated with the following option: +.PP +\-\-json +.PP +The selection of registrations can be limited by the following options: +.PP +\-\-witness\-registration=REGISTRATION_UUID +.PP +This does a direct lookup for REGISTRATION_UUID instead of doing a database traversal\&. +.PP +The following options all take a POSIX Extended Regular Expression, which can further filter the selection of registrations\&. These options are applied as logical AND, but each REGEX allows specifying multiple strings using the pipe symbol\&. +.PP +\-\-witness\-net\-name=REGEX +.PP +This specifies the \*(Aqserver name\*(Aq the client registered for monitoring\&. +.PP +\-\-witness\-share\-name=REGEX +.PP +This specifies the \*(Aqshare name\*(Aq the client registered for monitoring\&. Note that the share name is optional in the registration, otherwise an empty string is matched\&. +.PP +\-\-witness\-ip\-address=REGEX +.PP +This specifies the ip address the client registered for monitoring\&. +.PP +\-\-witness\-client\-computer\-name=REGEX +.PP +This specifies the client computer name the client specified in the registration\&. Note it is just a string chosen by the client itself\&. +.SS "WITNESS CLIENT-MOVE" +.PP +Generate client move notifications for witness registrations to a new ip or node +.PP +Note: Only supported with clustering=yes! +.PP +Machine readable output can be generated with the following option: +.PP +\-\-json +.PP +The selection of registrations can be limited by the following options: +.PP +\-\-witness\-registration=REGISTRATION_UUID +.PP +This does a direct lookup for REGISTRATION_UUID instead of doing a database traversal\&. +.PP +The following options all take a POSIX Extended Regular Expression, which can further filter the selection of registrations\&. These options are applied as logical AND, but each REGEX allows specifying multiple strings using the pipe symbol\&. +.PP +\-\-witness\-net\-name=REGEX +.PP +This specifies the \*(Aqserver name\*(Aq the client registered for monitoring\&. +.PP +\-\-witness\-share\-name=REGEX +.PP +This specifies the \*(Aqshare name\*(Aq the client registered for monitoring\&. Note that the share name is optional in the registration, otherwise an empty string is matched\&. +.PP +\-\-witness\-ip\-address=REGEX +.PP +This specifies the ip address the client registered for monitoring\&. +.PP +\-\-witness\-client\-computer\-name=REGEX +.PP +This specifies the client computer name the client specified in the registration\&. Note it is just a string chosen by the client itself\&. +.PP +If the update should be applied to all registrations it needs to be explicitly specified: +.PP +\-\-witness\-apply\-to\-all +.PP +This selects all registrations\&. Note: This is mutual exclusive to the above options\&. +.PP +The content of the CLIENT_MOVE notification contains ip addresses specified by (exactly one) of the following options: +.PP +\-\-witness\-new\-node=NODEID +.PP +By specifying a NODEID all ip addresses currently available on the given node are included in the response\&. By specifying \*(Aq\-1\*(Aq as NODEID all ip addresses of the cluster are included in the response\&. +.PP +\-\-witness\-new\-ip=IPADDRESS +.PP +By specifying an IPADDRESS only the specified ip address is included in the response\&. +.SS "WITNESS SHARE-MOVE" +.PP +Generate share move notifications for witness registrations to a new ip or node +.PP +Note: Only supported with clustering=yes! +.PP +Machine readable output can be generated with the following option: +.PP +\-\-json +.PP +The selection of registrations can be limited by the following options: +.PP +\-\-witness\-registration=REGISTRATION_UUID +.PP +This does a direct lookup for REGISTRATION_UUID instead of doing a database traversal\&. +.PP +The following options all take a POSIX Extended Regular Expression, which can further filter the selection of registrations\&. These options are applied as logical AND, but each REGEX allows specifying multiple strings using the pipe symbol\&. +.PP +\-\-witness\-net\-name=REGEX +.PP +This specifies the \*(Aqserver name\*(Aq the client registered for monitoring\&. +.PP +\-\-witness\-share\-name=REGEX +.PP +This specifies the \*(Aqshare name\*(Aq the client registered for monitoring\&. Note that the share name is optional in the registration, otherwise an empty string is matched\&. +.PP +\-\-witness\-ip\-address=REGEX +.PP +This specifies the ip address the client registered for monitoring\&. +.PP +\-\-witness\-client\-computer\-name=REGEX +.PP +This specifies the client computer name the client specified in the registration\&. Note it is just a string chosen by the client itself\&. +.PP +If the update should be applied to all registrations it needs to be explicitly specified: +.PP +\-\-witness\-apply\-to\-all +.PP +This selects all registrations\&. Note: This is mutual exclusive to the above options\&. +.PP +Note: This only applies to registrations with a non empty share name! +.PP +The content of the SHARE_MOVE notification contains ip addresses specified by (exactly one) of the following options: +.PP +\-\-witness\-new\-node=NODEID +.PP +By specifying a NODEID all ip addresses currently available on the given node are included in the response\&. By specifying \*(Aq\-1\*(Aq as NODEID all ip addresses of the cluster are included in the response\&. +.PP +\-\-witness\-new\-ip=IPADDRESS +.PP +By specifying an IPADDRESS only the specified ip address is included in the response\&. +.SS "WITNESS FORCE-UNREGISTER" +.PP +Force unregistrations for witness registrations +.PP +Note: Only supported with clustering=yes! +.PP +Machine readable output can be generated with the following option: +.PP +\-\-json +.PP +The selection of registrations can be limited by the following options: +.PP +\-\-witness\-registration=REGISTRATION_UUID +.PP +This does a direct lookup for REGISTRATION_UUID instead of doing a database traversal\&. +.PP +The following options all take a POSIX Extended Regular Expression, which can further filter the selection of registrations\&. These options are applied as logical AND, but each REGEX allows specifying multiple strings using the pipe symbol\&. +.PP +\-\-witness\-net\-name=REGEX +.PP +This specifies the \*(Aqserver name\*(Aq the client registered for monitoring\&. +.PP +\-\-witness\-share\-name=REGEX +.PP +This specifies the \*(Aqshare name\*(Aq the client registered for monitoring\&. Note that the share name is optional in the registration, otherwise an empty string is matched\&. +.PP +\-\-witness\-ip\-address=REGEX +.PP +This specifies the ip address the client registered for monitoring\&. +.PP +\-\-witness\-client\-computer\-name=REGEX +.PP +This specifies the client computer name the client specified in the registration\&. Note it is just a string chosen by the client itself\&. +.PP +If the update should be applied to all registrations it needs to be explicitly specified: +.PP +\-\-witness\-apply\-to\-all +.PP +This selects all registrations\&. Note: This is mutual exclusive to the above options\&. +.PP +The selected registrations are removed on the server and any pending AsyncNotify request will get a NOT_FOUND error\&. +.PP +Typically this triggers a clean re\-registration on the client\&. +.SS "WITNESS FORCE-RESPONSE" +.PP +Force an AsyncNotify response based on json input (mostly for testing) +.PP +Note: Only supported with clustering=yes! +.PP +Machine readable output can be generated with the following option: +.PP +\-\-json +.PP +The selection of registrations can be limited by the following options: +.PP +\-\-witness\-registration=REGISTRATION_UUID +.PP +This does a direct lookup for REGISTRATION_UUID instead of doing a database traversal\&. +.PP +The following options all take a POSIX Extended Regular Expression, which can further filter the selection of registrations\&. These options are applied as logical AND, but each REGEX allows specifying multiple strings using the pipe symbol\&. +.PP +\-\-witness\-net\-name=REGEX +.PP +This specifies the \*(Aqserver name\*(Aq the client registered for monitoring\&. +.PP +\-\-witness\-share\-name=REGEX +.PP +This specifies the \*(Aqshare name\*(Aq the client registered for monitoring\&. Note that the share name is optional in the registration, otherwise an empty string is matched\&. +.PP +\-\-witness\-ip\-address=REGEX +.PP +This specifies the ip address the client registered for monitoring\&. +.PP +\-\-witness\-client\-computer\-name=REGEX +.PP +This specifies the client computer name the client specified in the registration\&. Note it is just a string chosen by the client itself\&. +.PP +If the update should be applied to all registrations it needs to be explicitly specified: +.PP +\-\-witness\-apply\-to\-all +.PP +This selects all registrations\&. Note: This is mutual exclusive to the above options\&. +.PP +Note this is designed for testing and debugging! +.PP +In short it is not designed to be used by administrators, but developers and automated tests\&. +.PP +By default an empty response with WERR_OK is generated, but basically any valid response can be specified by a specifying a JSON string: +.PP +\-\-witness\-forced\-response=JSON +.PP +This allows the generation of very complex witness_notifyResponse structures\&. +.PP +As this is for developers, please read the code in order to understand all possible values of the JSON string format\&.\&.\&. +.PP +See \*(Aqnet help witness force\-response\*(Aq for further details\&. .SS "HELP [COMMAND]" .PP Gives usage information for the specified command\&. diff --git a/upstream/debian-unstable/man8/nss-myhostname.8 b/upstream/debian-unstable/man8/nss-myhostname.8 index d2e92b58..0b9fab58 100644 --- a/upstream/debian-unstable/man8/nss-myhostname.8 +++ b/upstream/debian-unstable/man8/nss-myhostname.8 @@ -1,5 +1,5 @@ '\" t -.TH "NSS\-MYHOSTNAME" "8" "" "systemd 255" "nss-myhostname" +.TH "NSS\-MYHOSTNAME" "8" "" "systemd 256~rc3" "nss-myhostname" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -173,9 +173,4 @@ In this case, the local hostname is \fIomega\fR\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBnss-systemd\fR(8), -\fBnss-resolve\fR(8), -\fBnss-mymachines\fR(8), -\fBnsswitch.conf\fR(5), -\fBgetent\fR(1) +\fBsystemd\fR(1), \fBnss-systemd\fR(8), \fBnss-resolve\fR(8), \fBnss-mymachines\fR(8), \fBnsswitch.conf\fR(5), \fBgetent\fR(1) diff --git a/upstream/debian-unstable/man8/nss-mymachines.8 b/upstream/debian-unstable/man8/nss-mymachines.8 index 60a2b3a7..9a540e9c 100644 --- a/upstream/debian-unstable/man8/nss-mymachines.8 +++ b/upstream/debian-unstable/man8/nss-mymachines.8 @@ -1,5 +1,5 @@ '\" t -.TH "NSS\-MYMACHINES" "8" "" "systemd 255" "nss-mymachines" +.TH "NSS\-MYMACHINES" "8" "" "systemd 256~rc3" "nss-mymachines" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -130,11 +130,4 @@ Connection to machine rawhide terminated\&. .\} .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd-machined.service\fR(8), -\fBmachinectl\fR(1), -\fBnss-systemd\fR(8), -\fBnss-resolve\fR(8), -\fBnss-myhostname\fR(8), -\fBnsswitch.conf\fR(5), -\fBgetent\fR(1) +\fBsystemd\fR(1), \fBsystemd-machined.service\fR(8), \fBmachinectl\fR(1), \fBnss-systemd\fR(8), \fBnss-resolve\fR(8), \fBnss-myhostname\fR(8), \fBnsswitch.conf\fR(5), \fBgetent\fR(1) diff --git a/upstream/debian-unstable/man8/nss-resolve.8 b/upstream/debian-unstable/man8/nss-resolve.8 index 5c12c8d4..f63ec532 100644 --- a/upstream/debian-unstable/man8/nss-resolve.8 +++ b/upstream/debian-unstable/man8/nss-resolve.8 @@ -1,5 +1,5 @@ '\" t -.TH "NSS\-RESOLVE" "8" "" "systemd 255" "nss-resolve" +.TH "NSS\-RESOLVE" "8" "" "systemd 256~rc3" "nss-resolve" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -165,10 +165,4 @@ netgroup: nis .\} .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd-resolved\fR(8), -\fBnss-systemd\fR(8), -\fBnss-myhostname\fR(8), -\fBnss-mymachines\fR(8), -\fBnsswitch.conf\fR(5), -\fBsystemd.syntax\fR(5) +\fBsystemd\fR(1), \fBsystemd-resolved\fR(8), \fBnss-systemd\fR(8), \fBnss-myhostname\fR(8), \fBnss-mymachines\fR(8), \fBnsswitch.conf\fR(5), \fBsystemd.syntax\fR(5) diff --git a/upstream/debian-unstable/man8/nss-systemd.8 b/upstream/debian-unstable/man8/nss-systemd.8 index 31d5b1ba..07517bbd 100644 --- a/upstream/debian-unstable/man8/nss-systemd.8 +++ b/upstream/debian-unstable/man8/nss-systemd.8 @@ -1,5 +1,5 @@ '\" t -.TH "NSS\-SYSTEMD" "8" "" "systemd 255" "nss-systemd" +.TH "NSS\-SYSTEMD" "8" "" "systemd 256~rc3" "nss-systemd" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -206,16 +206,7 @@ vu\-rawhide\-1000 1637 pts/8 \-zsh .\} .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd.exec\fR(5), -\fBnss-resolve\fR(8), -\fBnss-myhostname\fR(8), -\fBnss-mymachines\fR(8), -\fBsystemd-userdbd.service\fR(8), -\fBsystemd-homed.service\fR(8), -\fBsystemd-machined.service\fR(8), -\fBnsswitch.conf\fR(5), -\fBgetent\fR(1) +\fBsystemd\fR(1), \fBsystemd.exec\fR(5), \fBnss-resolve\fR(8), \fBnss-myhostname\fR(8), \fBnss-mymachines\fR(8), \fBsystemd-userdbd.service\fR(8), \fBsystemd-homed.service\fR(8), \fBsystemd-machined.service\fR(8), \fBnsswitch.conf\fR(5), \fBgetent\fR(1) .SH "NOTES" .IP " 1." 4 User/Group Record Lookup API via Varlink diff --git a/upstream/debian-unstable/man8/pam_getenv.8 b/upstream/debian-unstable/man8/pam_getenv.8 index ce6f9664..0315f4b0 100644 --- a/upstream/debian-unstable/man8/pam_getenv.8 +++ b/upstream/debian-unstable/man8/pam_getenv.8 @@ -55,7 +55,7 @@ .\" ======================================================================== .\" .IX Title "PAM_GETENV 8" -.TH PAM_GETENV 8 2024-02-28 "Debian GNU/Linux" "User Contributed Perl Documentation" +.TH PAM_GETENV 8 2024-04-08 "Debian GNU/Linux" "User Contributed Perl Documentation" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/upstream/debian-unstable/man8/pam_systemd.8 b/upstream/debian-unstable/man8/pam_systemd.8 index 21a69f0e..07843595 100644 --- a/upstream/debian-unstable/man8/pam_systemd.8 +++ b/upstream/debian-unstable/man8/pam_systemd.8 @@ -1,5 +1,5 @@ '\" t -.TH "PAM_SYSTEMD" "8" "" "systemd 255" "pam_systemd" +.TH "PAM_SYSTEMD" "8" "" "systemd 256~rc3" "pam_systemd" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -136,15 +136,80 @@ The following options are understood: .RS 4 Takes a string argument which sets the session class\&. The \fIXDG_SESSION_CLASS\fR -environment variable (see below) takes precedence\&. One of -"user", -"greeter", -"lock\-screen" -or -"background"\&. See +environment variable (see below) takes precedence\&. See \fBsd_session_get_class\fR(3) -for details about the session class\&. +for a way to query the class of a session\&. The following session classes are defined: .sp +.it 1 an-trap +.nr an-no-space-flag 1 +.nr an-break-flag 1 +.br +.B Table\ \&1.\ \&Session Classes +.TS +allbox tab(:); +lB lB. +T{ +Name +T}:T{ +Explanation +T} +.T& +l l +l l +l l +l l +l l +l l +l l +l l +l l. +T{ +\fBuser\fR +T}:T{ +A regular interactive user session\&. This is the default class for sessions for which a TTY or X display is known at session registration time\&. +T} +T{ +\fBuser\-early\fR +T}:T{ +Similar to "user" but sessions of this class are not ordered after systemd\-user\-sessions\&.service, i\&.e\&. may be started before regular sessions are allowed to be established\&. This session class is the default for sessions of the root user that would otherwise qualify for the \fBuser\fR class, see above\&. (Added in v256\&.) +T} +T{ +\fBuser\-incomplete\fR +T}:T{ +Similar to "user" but for sessions which are not fully set up yet, i\&.e\&. have no home directory mounted or similar\&. This is used by \fBsystemd-homed.service\fR(8) to allow users to log in via \fBssh\fR before their home directory is mounted, delaying the mount until the user provided the unlock password\&. Sessions of this class are upgraded to the regular \fBuser\fR class once the home directory is activated\&. +T} +T{ +\fBgreeter\fR +T}:T{ +Similar to "user" but for sessions that are spawned by a display manager ephemerally and which prompt the user for login credentials\&. +T} +T{ +\fBlock\-screen\fR +T}:T{ +Similar to "user" but for sessions that are spawned by a display manager ephemerally and which show a lock screen that can be used to unlock locked user accounts or sessions\&. +T} +T{ +\fBbackground\fR +T}:T{ +Used for background sessions, such as those invoked by \fBcron\fR and similar tools\&. This is the default class for sessions for which no TTY or X display is known at session registration time\&. +T} +T{ +\fBbackground\-light\fR +T}:T{ +Similar to \fBbackground\fR, but sessions of this class will not pull in the user@\&.service of the user, and thus possibly have no services of the user running\&. (Added in v256\&.) +T} +T{ +\fBmanager\fR +T}:T{ +The user@\&.service service of the user is registered under this session class\&. (Added in v256\&.) +T} +T{ +\fBmanager\-early\fR +T}:T{ +Similar to \fBmanager\fR, but for the root user\&. Compare with the \fBuser\fR vs\&. \fBuser\-early\fR situation\&. (Added in v256\&.) +T} +.TE +.sp 1 Added in version 197\&. .RE .PP @@ -397,18 +462,7 @@ session required pam_unix\&.so .\} .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd-logind.service\fR(8), -\fBlogind.conf\fR(5), -\fBloginctl\fR(1), -\fBpam_systemd_home\fR(8), -\fBpam.conf\fR(5), -\fBpam.d\fR(5), -\fBpam\fR(8), -\fBpam_loginuid\fR(8), -\fBsystemd.scope\fR(5), -\fBsystemd.slice\fR(5), -\fBsystemd.service\fR(5) +\fBsystemd\fR(1), \fBsystemd-logind.service\fR(8), \fBlogind.conf\fR(5), \fBloginctl\fR(1), \fBpam_systemd_home\fR(8), \fBpam.conf\fR(5), \fBpam.d\fR(5), \fBpam\fR(8), \fBpam_loginuid\fR(8), \fBsystemd.scope\fR(5), \fBsystemd.slice\fR(5), \fBsystemd.service\fR(5) .SH "NOTES" .IP " 1." 4 JSON User Records diff --git a/upstream/debian-unstable/man8/pam_systemd_home.8 b/upstream/debian-unstable/man8/pam_systemd_home.8 index 866cecd2..d67b0fe4 100644 --- a/upstream/debian-unstable/man8/pam_systemd_home.8 +++ b/upstream/debian-unstable/man8/pam_systemd_home.8 @@ -1,5 +1,5 @@ '\" t -.TH "PAM_SYSTEMD_HOME" "8" "" "systemd 255" "pam_systemd_home" +.TH "PAM_SYSTEMD_HOME" "8" "" "systemd 256~rc3" "pam_systemd_home" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -134,14 +134,7 @@ session required pam_unix\&.so .\} .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd-homed.service\fR(8), -\fBhomed.conf\fR(5), -\fBhomectl\fR(1), -\fBpam_systemd\fR(8), -\fBpam.conf\fR(5), -\fBpam.d\fR(5), -\fBpam\fR(8) +\fBsystemd\fR(1), \fBsystemd-homed.service\fR(8), \fBhomed.conf\fR(5), \fBhomectl\fR(1), \fBpam_systemd\fR(8), \fBpam.conf\fR(5), \fBpam.d\fR(5), \fBpam\fR(8) .SH "NOTES" .IP " 1." 4 JSON user record diff --git a/upstream/debian-unstable/man8/pam_systemd_loadkey.8 b/upstream/debian-unstable/man8/pam_systemd_loadkey.8 index 679dfd2e..7de8ce75 100644 --- a/upstream/debian-unstable/man8/pam_systemd_loadkey.8 +++ b/upstream/debian-unstable/man8/pam_systemd_loadkey.8 @@ -1,5 +1,5 @@ '\" t -.TH "PAM_SYSTEMD_LOADKEY" "8" "" "systemd 255" "pam_systemd_loadkey" +.TH "PAM_SYSTEMD_LOADKEY" "8" "" "systemd 256~rc3" "pam_systemd_loadkey" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -44,10 +44,53 @@ The following options are understood: \fIkeyname=\fR .RS 4 Takes a string argument which sets the keyname to read\&. The default is -"cryptsetup", which is used by +"cryptsetup"\&. During boot, \fBsystemd-cryptsetup@.service\fR(8) -to store LUKS passphrase during boot\&. +stores a passphrase or PIN in the keyring\&. The LUKS2 volume key can also be used, via the +\fBlink\-volume\-key\fR +option in +\fBcrypttab\fR(5)\&. .sp +.it 1 an-trap +.nr an-no-space-flag 1 +.nr an-break-flag 1 +.br +.B Table\ \&1.\ \& Possible values for \fIkeyname\fR\&. +.TS +allbox tab(:); +lB lB. +T{ +Value +T}:T{ +Description +T} +.T& +l l +l l +l l +l l. +T{ +cryptsetup +T}:T{ +Passphrase or recovery key +T} +T{ +fido2\-pin +T}:T{ +Security token PIN +T} +T{ +luks2\-pin +T}:T{ +LUKS2 token PIN +T} +T{ +tpm2\-pin +T}:T{ +TPM2 PIN +T} +.TE +.sp 1 Added in version 255\&. .RE .PP @@ -71,6 +114,7 @@ sddm\-autologin): .\} .nf \-auth optional pam_systemd_loadkey\&.so +\-auth optional pam_gnome_keyring\&.so \-session optional pam_gnome_keyring\&.so auto_start \-session optional pam_kwallet5\&.so auto_start diff --git a/upstream/debian-unstable/man8/pcilmr.8 b/upstream/debian-unstable/man8/pcilmr.8 new file mode 100644 index 00000000..9ff22464 --- /dev/null +++ b/upstream/debian-unstable/man8/pcilmr.8 @@ -0,0 +1,182 @@ +.TH PCILMR 8 "05 April 2024" "pciutils-3.12.0" "The PCI Utilities" +.SH NAME +pcilmr \- margin PCIe Links +.SH SYNOPSIS +.B pcilmr +.RB [ "--margin" ] +.RI [ "<margining options>" ] " <downstream component> ..." +.br +.B pcilmr --full +.RI [ "<margining options>" ] +.br +.B pcilmr --scan +.SH CONFIGURATION +List of the requirements for links and system settings +to run the margining test. + +.B BIOS settings +(depends on the system, relevant for server baseboards +with Xeon CPUs): +.IP \[bu] 3 +Turn off PCIe Leaky Bucket Feature, Re-Equalization and Link Degradation; +.IP \[bu] +Set Error Thresholds to 0; +.IP \[bu] +Intel VMD for NVMe SSDs - in case of strange behavior of the +.BR pcilmr, +try to run it with the VMD turned off. +.PP +.B Device (link) requirements: +.IP +.I "Configured by the user before running the utility, the utility does not change them:" +.RS +.IP \[bu] 3 +The current Link data rate must be 16.0 GT/s or higher (right now +utility supports 16 GT/s and 32 GT/s Links); +.IP \[bu] +Link Downstream Component must be at D0 Power Management State. +.RE +.IP +.I "Configured by the utility during operation, utility set them to their original " +.I "state after receiving the results:" +.RS +.IP \[bu] 3 +The ASPM must be disabled in both the Downstream Port and Upstream Port; +.IP \[bu] +The Hardware Autonomous Speed Disable bit of the Link Control 2 register must be Set in both the +Downstream Port and Upstream Port; +.IP \[bu] +The Hardware Autonomous Width Disable bit of the Link Control register must be Set in both the +Downstream Port and Upstream Port. +.SH DESCRIPTION +.B pcilmr +utility allows you to take advantage of the PCIe Lane Margining at the Receiver +capability which is mandatory for all Ports supporting a data rate of 16.0 GT/s or +higher, including Pseudo Ports (Retimers). Lane Margining at Receiver enables system +software to obtain the margin information of a given Receiver while the Link is in the +L0 state. The margin information includes both voltage and time, in either direction from +the current Receiver position. Margining support for timing is required, while support +for voltage is optional at 16.0 GT/s and required at 32.0 GT/s and higher data rates. Also, +independent time margining and independent voltage margining is optional. + +Utility allows to get an approximation of the eye margin diagram in the form of a rhombus +(by four points). Lane Margining at the Receiver capability enables users to margin PCIe +links without a hardware debugger and without the need to stop the target system. Utility +can be useful to debug link issues due to receiver margins. + +However, the utility results may be not particularly accurate and, as it was found out during +testing, specific devices provide rather dubious capability support and the reliability of +the information they provide is questionable. The PCIe specification provides reference values +for the eye diagram, which are also used by the +.B pcilmr +to evaluate the results, but it seems that it makes sense to contact the +manufacturer of a particular device for references. + +The PCIe Base Specification Revision 5.0 sets allowed range for Timing Margin from 20%\~UI to 50%\~UI and +for Voltage Margin from 50\~mV to 500\~mV. Utility uses 30%\~UI as the recommended +value for Timing - taken from NVIDIA presentation ("PCIe 4.0 Mass Electrical Margins Data +Collection"). + +.B pcilmr +requires root privileges (to access Extended Configuration Space), but during our testing +there were no problems with the devices and they successfully returned to their normal initial +state after the end of testing. + +.SH OPTIONS +.SS Device Specifier +.B "<device/component>" \t +.RI [ "<domain>" :] <bus> : <dev> . <func> +(see +.BR lspci (8)) +.SS Utility Modes +.TP +.BI --margin " <downstream component> ..." +Margin selected Links. +.TP +.B --full +Margin all ready for testing (in a meaning similar to the +.B --scan +option) Links in the system (one by one). +.TP +.B --scan +Scan for Links with negotiated speed 16 GT/s or higher. Mark "Ready" those of them +in which at least one of the Link sides have Margining Ready bit set meaning that +these Links are ready for testing and you can run utility on them. +.SS Margining Test options +.TP +.B -c +Print Device Lane Margining Capabilities only. Do not run margining. +.TP +\fB\-l\fI <lane>\fP[\fI,<lane>...\fP] +Specify lanes for margining. +.br +Remember that Device may use Lane Reversal for Lane numbering. However, utility +uses logical lane numbers in arguments and for logging. Utility will automatically +determine Lane Reversal and tune its calls. +.br +Default: all link lanes. +.TP +.BI -e " <errors>" +Specify Error Count Limit for margining. +.br +Default: 4. +.TP +\fB-r\fI <recvn>\fP[\fI,<recvn>...\fP] +Specify Receivers to select margining targets. +.br +Default: all available Receivers (including Retimers). +.TP +.BI -p " <parallel_lanes>" +Specify number of lanes to margin simultaneously. +.br +According to spec it's possible for Receiver to margin up to MaxLanes + 1 +lanes simultaneously, but during testing, performing margining on several +lanes simultaneously led to results that were different from sequential +margining, so this feature requires additional verification and +.I -p +option right now is for experiments mostly. +.br +Default: 1. +.PP +.B "Use only one of -T/-t options at the same time (same for -V/-v)." +.br +.B "Without these options utility will use MaxSteps from Device" +.B "capabilities as test limit." +.TP +.B -T +Time Margining will continue until the Error Count is no more +than an Error Count Limit. Use this option to find Link limit. +.TP +.BI -t " <steps>" +Specify maximum number of steps for Time Margining. +.TP +.B -V +Same as +.I -T +option, but for Voltage. +.TP +.BI -v " <steps>" +Specify maximum number of steps for Voltage Margining. +.SS Margining Log options +.TP +.BI -o " <directory>" +Save margining results in csv form into the specified directory. Utility +will generate file with the name in form of +.RI "\[dq]lmr_" "<downstream component>" "_Rx" # _ <timestamp> ".csv\[dq]" +for each successfully tested receiver. + +.SH EXAMPLES +Utility syntax example: +.RS +.BI "pcilmr -l" " 0,1 " "-r" " 1,6 " "-TV" " ab:0.0 52:0.0" +.RE + +.UR https://gist.github.com/bombanya/f2b15263712757ffba1a11eea011c419 +Examples of collected results on different systems. +.UE + +.SH SEE ALSO +.nh +.BR lspci (8), +.B PCI Express Base Specification (Lane Margining at Receiver) +.hy diff --git a/upstream/debian-unstable/man8/poweroff.8 b/upstream/debian-unstable/man8/poweroff.8 index 92c73aa8..d49ad72e 100644 --- a/upstream/debian-unstable/man8/poweroff.8 +++ b/upstream/debian-unstable/man8/poweroff.8 @@ -1,5 +1,5 @@ '\" t -.TH "POWEROFF" "8" "" "systemd 255" "poweroff" +.TH "POWEROFF" "8" "" "systemd 256~rc3" "poweroff" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -41,7 +41,7 @@ The following options are understood: \fB\-\-help\fR .RS 4 Print a short help text and exit\&. -.PP +.sp Added in version 253\&. .RE .PP @@ -133,7 +133,4 @@ results in halting the machine only (leaving power on), and is required to actually power it off\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemctl\fR(1), -\fBshutdown\fR(8), -\fBwall\fR(1) +\fBsystemd\fR(1), \fBsystemctl\fR(1), \fBshutdown\fR(8), \fBwall\fR(1) diff --git a/upstream/debian-unstable/man8/pppd-radattr.8 b/upstream/debian-unstable/man8/pppd-radattr.8 index 22d190bb..bcaad3b2 100644 --- a/upstream/debian-unstable/man8/pppd-radattr.8 +++ b/upstream/debian-unstable/man8/pppd-radattr.8 @@ -41,4 +41,4 @@ options to pppd. .BR pppd (8) " pppd-radius" (8) .SH AUTHOR -David F. Skoll <dfs@roaringpenguin.com> +Dianne Skoll <dianne@skoll.ca> diff --git a/upstream/debian-unstable/man8/pppd-radius.8 b/upstream/debian-unstable/man8/pppd-radius.8 index a8c103c2..08b97fbf 100644 --- a/upstream/debian-unstable/man8/pppd-radius.8 +++ b/upstream/debian-unstable/man8/pppd-radius.8 @@ -64,4 +64,4 @@ Framed-IP-Address attribute. .BR pppd (8) " pppd-radattr" (8) .SH AUTHOR -David F. Skoll <dfs@roaringpenguin.com> +Dianne Skoll <dianne@skoll.ca> diff --git a/upstream/debian-unstable/man8/pppd.8 b/upstream/debian-unstable/man8/pppd.8 index 36156d6e..79b5bea5 100644 --- a/upstream/debian-unstable/man8/pppd.8 +++ b/upstream/debian-unstable/man8/pppd.8 @@ -55,8 +55,8 @@ non-privileged user. .I speed An option that is a decimal number is taken as the desired baud rate for the serial device. On systems such as -4.4BSD and NetBSD, any speed can be specified. Other systems -(e.g. Linux, SunOS) only support the commonly-used baud rates. +Linux, 4.4BSD and NetBSD, any speed can be specified. Other systems +(e.g. SunOS) only support the commonly-used baud rates. .TP .B asyncmap \fImap This option sets the Async-Control-Character-Map (ACCM) for this end @@ -127,12 +127,6 @@ is no other default route with the same metric. With the default value of -1, the route is only added if there is no default route at all. .TP -.B defaultroute6 -Add a default IPv6 route to the system routing tables, using the peer as -the gateway, when IPv6CP negotiation is successfully completed. -This entry is removed when the PPP connection is broken. This option -is privileged if the \fInodefaultroute6\fR option has been specified. -.TP .B replacedefaultroute This option is a flag to the defaultroute option. If defaultroute is set and this flag is also set, pppd replaces an existing default route @@ -218,11 +212,14 @@ Set the local and/or remote 64-bit interface identifier. Either one may be omitted. The identifier must be specified in standard ASCII notation of IPv6 addresses (e.g. ::dead:beef). If the \fIipv6cp\-use\-ipaddr\fR -option is given, the local identifier is the local IPv4 address (see above). +option is given, the local identifier is the local IPv4 address and the +remote identifier is the remote IPv4 address (see above). +If the \fIipv6cp-use-remotenumber\fR option is given, the remote identifier +is set to the value from \fIremotenumber\fR option. On systems which supports a unique persistent id, such as EUI\-48 derived from the Ethernet MAC address, \fIipv6cp\-use\-persistent\fR option can be -used to replace the \fIipv6 <local>,<remote>\fR option. Otherwise the -identifier is randomized. +used to set local identifier. Otherwise both local and remote identifiers +are randomized. .TP .B active\-filter \fIfilter\-expression Specifies a packet filter to be applied to data packets to determine @@ -266,10 +263,16 @@ compression in the corresponding direction. Use \fInobsdcomp\fR or \fIbsdcomp 0\fR to disable BSD-Compress compression entirely. .TP .B ca \fIca-file -(EAP-TLS) Use the file \fIca-file\fR as the X.509 Certificate Authority +(EAP-TLS, or PEAP) Use the file \fIca-file\fR as the X.509 Certificate Authority (CA) file (in PEM format), needed for setting up an EAP-TLS connection. This option is used on the client-side in conjunction with the \fBcert\fR -and \fBkey\fR options. +and \fBkey\fR options. Either \fIca\fR, or \fIcapath\fR options are required +for PEAP. EAP-TLS may also use the entry in eaptls-client or eaptls-server +for a CA certificate associated with a particular peer. +.TP +.B capath \fIpath +(EAP-TLS, or PEAP) Specify a location that contains public CA certificates. +Either \fIca\fR, or \fIcapath\fR options are required for PEAP. .TP .B cdtrcts Use a non-standard hardware flow control (i.e. DTR/CTS) to control @@ -326,15 +329,15 @@ negotiation by sending its first LCP packet. The default value is or \fBpty\fR option is used. .TP .B crl \fIfilename -(EAP-TLS) Use the file \fIfilename\fR as the Certificate Revocation List +(EAP-TLS, or PEAP) Use the file \fIfilename\fR as the Certificate Revocation List to check for the validity of the peer's certificate. This option is not -mandatory for setting up an EAP-TLS connection. Also see the \fBcrl-dir\fR +mandatory for setting up a TLS connection. Also see the \fBcrl-dir\fR option. .TP .B crl-dir \fIdirectory -(EAP-TLS) Use the directory \fIdirectory\fR to scan for CRL files in +(EAP-TLS, or PEAP) Use the directory \fIdirectory\fR to scan for CRL files in has format ($hash.r0) to check for the validity of the peer's certificate. -This option is not mandatory for setting up an EAP-TLS connection. +This option is not mandatory for setting up a TLS connection. Also see the \fBcrl\fR option. .TP .B debug @@ -354,6 +357,17 @@ Disable MRU [Maximum Receive Unit] negotiation. With this option, pppd will use the default MRU value of 1500 bytes for both the transmit and receive direction. .TP +.B defaultroute6 +Add a default IPv6 route to the system routing tables, using the peer as +the gateway, when IPv6CP negotiation is successfully completed. +This entry is removed when the PPP connection is broken. This option +is privileged if the \fInodefaultroute6\fR option has been specified. +\fBWARNING: Do not enable this option by default\fR. IPv6 routing tables +are managed by kernel (as apposite to IPv4) and IPv6 default route is +configured by kernel automatically too based on ICMPv6 Router Advertisement +packets. This option may conflict with kernel IPv6 route setup and should +be used only for broken IPv6 networks. +.TP .B deflate \fInr,nt Request that the peer compress packets that it sends, using the Deflate scheme, with a maximum window size of \fI2**nr\fR bytes, and @@ -493,12 +507,25 @@ to send configure-Rejects instead to \fIn\fR (default 10). Set the maximum number of IPCP terminate-request transmissions to \fIn\fR (default 3). .TP +.B ipcp\-no\-address +Disable negotiation of addresses via IP-Address IPCP option. +.TP +.B ipcp\-no\-addresses +Disable negotiation of addresses via old-style deprecated IP-Addresses +IPCP option. pppd by default try to use new-style IP-Address IPCP option. +If new-style is not supported by peer or is disabled by \fBipcp\-no\-address\fR +option then pppd fallbacks to old-style deprecated IP-Addresses IPCP option. +When both new-style and old-style are disabled by both \fBipcp\-no\-address\fR +and \fBipcp\-no\-addresses\fR options then negotiation of IP addresses +is completely disabled. +.TP .B ipcp\-restart \fIn Set the IPCP restart interval (retransmission timeout) to \fIn\fR seconds (default 3). .TP .B ipparam \fIstring -Provides an extra parameter to the ip\-up, ip\-pre\-up and ip\-down +Provides an extra parameter most of the notification scripts, most notably +ip\-up, ip\-pre\-up, ip\-down, ipv6\-up, ipv6\-down, auth\-up and auth\-down scripts. If this option is given, the \fIstring\fR supplied is given as the 6th parameter to those scripts. @@ -513,6 +540,23 @@ With this option, pppd will accept the peer's idea of its (remote) IPv6 interface identifier, even if the remote IPv6 interface identifier was specified in an option. .TP +.B ipv6cp\-noremote +Allow pppd to operate without having an IPv6 link local address for the peer. +This option is only available under Linux. Normally, pppd will request the +peer's IPv6 interface identifier (used for composing IPv6 link local address), +and if the peer does not supply it, pppd will generate one for the peer. +With this option, if the peer does not supply its IPv6 interface identifier, +pppd will not ask the peer for it, and will not set the destination IPv6 +link local address of the ppp interface. In this situation, the ppp interface +can be used for routing by creating device routes, but the peer itself cannot +be addressed directly for IPv6 traffic until the peer starts announcing ICMPv6 +Router Advertisement or ICMPv6 Neighbor Advertisement packets. Note that IPv6 +router must announce ICMPv6 Router Advertisement packets. +.TP +.B ipv6cp\-nosendip +Don't send our local IPv6 interface identifier to peer during IPv6 interface +identifier negotiation. +.TP .B ipv6cp\-max\-configure \fIn Set the maximum number of IPv6CP configure-request transmissions to \fIn\fR (default 10). @@ -529,70 +573,6 @@ Set the maximum number of IPv6CP terminate-request transmissions to Set the IPv6CP restart interval (retransmission timeout) to \fIn\fR seconds (default 3). .TP -.B ipx -Enable the IPXCP and IPX protocols. This option is presently only -supported under Linux, and only if your kernel has been configured to -include IPX support. -.TP -.B ipx\-network \fIn -Set the IPX network number in the IPXCP configure request frame to -\fIn\fR, a hexadecimal number (without a leading 0x). There is no -valid default. If this option is not specified, the network number is -obtained from the peer. If the peer does not have the network number, -the IPX protocol will not be started. -.TP -.B ipx\-node \fIn\fB:\fIm -Set the IPX node numbers. The two node numbers are separated from each -other with a colon character. The first number \fIn\fR is the local -node number. The second number \fIm\fR is the peer's node number. Each -node number is a hexadecimal number, at most 10 digits long. The node -numbers on the ipx\-network must be unique. There is no valid -default. If this option is not specified then the node numbers are -obtained from the peer. -.TP -.B ipx\-router\-name \fI<string> -Set the name of the router. This is a string and is sent to the peer -as information data. -.TP -.B ipx\-routing \fIn -Set the routing protocol to be received by this option. More than one -instance of \fIipx\-routing\fR may be specified. The '\fInone\fR' -option (0) may be specified as the only instance of ipx\-routing. The -values may be \fI0\fR for \fINONE\fR, \fI2\fR for \fIRIP/SAP\fR, and -\fI4\fR for \fINLSP\fR. -.TP -.B ipxcp\-accept\-local -Accept the peer's NAK for the node number specified in the ipx\-node -option. If a node number was specified, and non-zero, the default is -to insist that the value be used. If you include this option then you -will permit the peer to override the entry of the node number. -.TP -.B ipxcp\-accept\-network -Accept the peer's NAK for the network number specified in the -ipx\-network option. If a network number was specified, and non-zero, the -default is to insist that the value be used. If you include this -option then you will permit the peer to override the entry of the node -number. -.TP -.B ipxcp\-accept\-remote -Use the peer's network number specified in the configure request -frame. If a node number was specified for the peer and this option was -not specified, the peer will be forced to use the value which you have -specified. -.TP -.B ipxcp\-max\-configure \fIn -Set the maximum number of IPXCP configure request frames which the -system will send to \fIn\fR. The default is 10. -.TP -.B ipxcp\-max\-failure \fIn -Set the maximum number of IPXCP NAK frames which the local system will -send before it rejects the options. The default value is 3. -.TP -.B ipxcp\-max\-terminate \fIn -Set the maximum number of IPXCP terminate request frames before the -local system considers that the peer is not listening to them. The -default value is 3. -.TP .B kdebug \fIn Enable debugging code in the kernel-level PPP driver. The argument values depend on the specific kernel driver, but in general a value of @@ -707,6 +687,11 @@ network control protocol comes up). Terminate after \fIn\fR consecutive failed connection attempts. A value of 0 means no limit. The default value is 10. .TP +.B max-tls-version \fIstring +(EAP-TLS, or PEAP) Configures the max allowed TLS version used during +negotiation with a peer. The default value for this is \fI1.2\fR. Values +allowed for this option is \fI1.0.\fR, \fI1.1\fR, \fI1.2\fR, \fI1.3\fR. +.TP .B modem Use the modem control lines. This option is the default. With this option, pppd will wait for the CD (Carrier Detect) signal from the @@ -846,11 +831,6 @@ hostname. With this option, the peer will have to supply the local IP address during IPCP negotiation (unless it specified explicitly on the command line or in an options file). .TP -.B noipx -Disable the IPXCP and IPX protocols. This option should only be -required if the peer is buggy and gets confused by requests from pppd -for IPXCP negotiation. -.TP .B noktune Opposite of the \fIktune\fR option; disables pppd from changing system settings. @@ -924,6 +904,9 @@ situation, the ppp interface can be used for routing by creating device routes, but the peer itself cannot be addressed directly for IP traffic. .TP +.B nosendip +Don't send our local IP address to peer during IP address negotiation. +.TP .B notty Normally, pppd requires a terminal device. With this option, pppd will allocate itself a pseudo-tty master/slave pair and use the slave @@ -1153,6 +1136,16 @@ The device used by pppd with this option must have sync support. Currently supports Microgate SyncLink adapters under Linux and FreeBSD 2.2.8 and later. .TP +.B tls-verify-method \fIstring +(EAP-TLS, or PEAP) Match the value specified for \fIremotename\fR to that that +of the X509 certificates subject name, common name, or suffix of the common +name. Respective values allowed for this option is: \fInone\fR, \fIsubject\fR, +\fIname\fR, or \fIsuffix\fR. The default value for this option is \fIname\fR. +.TP +.B tls-verify-key-usage +(EAP-TLS, or PEAP) Enables examination of peer certificate's purpose, and +extended key usage attributes. +.TP .B unit \fInum Sets the ppp unit number (for a ppp0 or ppp1 etc interface name) for outbound connections. If the unit is already in use a dynamically allocated number will @@ -1199,6 +1192,16 @@ USEPEERDNS will be set to 1. In addition, pppd will create an /etc/ppp/resolv.conf file containing one or two nameserver lines with the address(es) supplied by the peer. .TP +.B usepeerwins +Ask the peer for up to 2 WINS server addresses. The addresses supplied +by the peer (if any) are passed to the /etc/ppp/ip\-up script in the +environment variables WINS1 and WINS2, and the environment variable +USEPEERWINS will be set to 1. +.LP +Please note that some modems (like the Huawei E220) requires this option in +order to avoid a race condition that results in the incorrect DNS servers +being assigned. +.TP .B user \fIname Sets the name used for authenticating the local system to the peer to \fIname\fR. @@ -1243,8 +1246,9 @@ Attach to existing PPPoE session. For backward compatibility also \fBrp_pppoe_sess\fP option name is supported. .TP .B pppoe-verbose \fIn -Be verbose about discovered access concentrators. For backward -compatibility also \fBrp_pppoe_verbose\fP option name is supported. +Be verbose about discovered access concentrators. When set to 2 or bigger +value then dump also discovery packets. For backward compatibility also +\fBrp_pppoe_verbose\fP option name is supported. .TP .B pppoe-mac \fImacaddr Connect to specified MAC address. @@ -1750,6 +1754,14 @@ IPCP has come up. The IP address for the remote end of the link. This is only set when IPCP has come up. .TP +.B LLLOCAL +The Link-Local IPv6 address for the local end of the link. This is only +set when IPV6CP has come up. +.TP +.B LLREMOTE +The Link-Local IPv6 address for the remote end of the link. This is only +set when IPV6CP has come up. +.TP .B PEERNAME The authenticated name of the peer. This is only set if the peer authenticates itself. @@ -1793,6 +1805,15 @@ option was given). If the peer supplies DNS server addresses, this variable is set to the second DNS server address supplied (whether or not the usepeerdns option was given). +.TP +.B WINS1 +If the peer supplies WINS server addresses, this variable is set to the +first WINS server address supplied. +.TP +.B WINS2 +If the peer supplies WINS server addresses, this variable is set to the +second WINS server address supplied. +.P .P Pppd invokes the following scripts, if they exist. It is not an error if they don't exist. @@ -1801,7 +1822,7 @@ if they don't exist. A program or script which is executed after the remote system successfully authenticates itself. It is executed with the parameters .IP -\fIinterface\-name peer\-name user\-name tty\-device speed\fR +\fIinterface\-name peer\-name user\-name tty\-device speed ipparam\fR .IP Note that this script is not executed if the peer doesn't authenticate itself, for example when the \fInoauth\fR option is used. @@ -1848,34 +1869,6 @@ Similar to /etc/ppp/ip\-down, but it is executed when IPv6 packets can no longer be transmitted on the link. It is executed with the same parameters as the ipv6\-up script. .TP -.B /etc/ppp/ipx\-up -A program or script which is executed when the link is available for -sending and receiving IPX packets (that is, IPXCP has come up). It is -executed with the parameters -.IP -\fIinterface\-name tty\-device speed network\-number local\-IPX\-node\-address -remote\-IPX\-node\-address local\-IPX\-routing\-protocol remote\-IPX\-routing\-protocol -local\-IPX\-router\-name remote\-IPX\-router\-name ipparam pppd\-pid\fR -.IP -The local\-IPX\-routing\-protocol and remote\-IPX\-routing\-protocol field -may be one of the following: -.IP -NONE to indicate that there is no routing protocol -.br -RIP to indicate that RIP/SAP should be used -.br -NLSP to indicate that Novell NLSP should be used -.br -RIP NLSP to indicate that both RIP/SAP and NLSP should be used -.TP -.B /etc/ppp/ipx\-down -A program or script which is executed when the link is no longer -available for sending and receiving IPX packets. This script can be -used for undoing the effects of the /etc/ppp/ipx\-up script. It is -invoked in the same manner and with the same parameters as the ipx\-up -script. -.SH FILES -.TP .B /var/run/ppp\fIn\fB.pid \fR(BSD or Linux), \fB/etc/ppp/ppp\fIn\fB.pid \fR(others) Process-ID for pppd process on ppp interface unit \fIn\fR. .TP diff --git a/upstream/debian-unstable/man8/resize2fs.8 b/upstream/debian-unstable/man8/resize2fs.8 index 52c9e848..7766c5d3 100644 --- a/upstream/debian-unstable/man8/resize2fs.8 +++ b/upstream/debian-unstable/man8/resize2fs.8 @@ -1,8 +1,8 @@ .\" -*- nroff -*- .\" Copyright 1997 by Theodore Ts'o. All Rights Reserved. .\" -.\" .TH RESIZE2FS 8 "February 2023" "E2fsprogs version 1.47.0" -.TH RESIZE2FS 8 "February 2023" "E2fsprogs version 1.47.0" +.\" .TH RESIZE2FS 8 "May 2024" "E2fsprogs version 1.47.1" +.TH RESIZE2FS 8 "May 2024" "E2fsprogs version 1.47.1" .SH NAME resize2fs \- ext2/ext3/ext4 file system resizer .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/rmmod.8 b/upstream/debian-unstable/man8/rmmod.8 index 8b2de3b7..d7097955 100644 --- a/upstream/debian-unstable/man8/rmmod.8 +++ b/upstream/debian-unstable/man8/rmmod.8 @@ -2,12 +2,12 @@ .\" Title: rmmod .\" Author: Jon Masters <jcm@jonmasters.org> .\" Generator: DocBook XSL Stylesheets vsnapshot <http://docbook.sf.net/> -.\" Date: 02/13/2024 +.\" Date: 05/26/2024 .\" Manual: rmmod .\" Source: kmod .\" Language: English .\" -.TH "RMMOD" "8" "02/13/2024" "kmod" "rmmod" +.TH "RMMOD" "8" "05/26/2024" "kmod" "rmmod" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff --git a/upstream/debian-unstable/man8/rpm2archive.8 b/upstream/debian-unstable/man8/rpm2archive.8 index 710d3a0a..8580114f 100644 --- a/upstream/debian-unstable/man8/rpm2archive.8 +++ b/upstream/debian-unstable/man8/rpm2archive.8 @@ -21,7 +21,8 @@ rpm2archive - Create tar archive from RPM Package Manager (RPM) package. .SH SYNOPSIS .PP -\f[B]rpm2archive\f[R] \f[B]{-n|--nocompression}\f[R] \f[I]FILES\f[R] +\f[B]rpm2archive\f[R] \f[B]{-n|--nocompression}\f[R] +\f[B]{-f|--format=pax|cpio}\f[R] \f[I]FILES\f[R] .SH DESCRIPTION .PP \f[B]rpm2archive\f[R] converts the .rpm files specified as arguments to @@ -44,6 +45,12 @@ scenarios. \f[B]-n, --nocompression\f[R] Generate uncompressed tar archive and use \[dq].tar\[dq] as postfix of the file name. +.TP +\f[B]-f, --format=pax|cpio\f[R] +Generate archive in specified format: \f[B]pax\f[R] (the default format) +or \f[B]cpio\f[R]. +Note that the cpio format cannot host files over 4GB in size and is only +supported here for backwards compatibility. .SH EXAMPLES .PP .PD 0 diff --git a/upstream/debian-unstable/man8/runlevel.8 b/upstream/debian-unstable/man8/runlevel.8 index edbabfde..c19e02fc 100644 --- a/upstream/debian-unstable/man8/runlevel.8 +++ b/upstream/debian-unstable/man8/runlevel.8 @@ -1,5 +1,5 @@ '\" t -.TH "RUNLEVEL" "8" "" "systemd 255" "runlevel" +.TH "RUNLEVEL" "8" "" "systemd 256~rc3" "runlevel" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -125,6 +125,4 @@ Added in version 237\&. .RE .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd.target\fR(5), -\fBsystemctl\fR(1) +\fBsystemd\fR(1), \fBsystemd.target\fR(5), \fBsystemctl\fR(1) diff --git a/upstream/debian-unstable/man8/samba-dcerpcd.8 b/upstream/debian-unstable/man8/samba-dcerpcd.8 index 6120df42..e7133e55 100644 --- a/upstream/debian-unstable/man8/samba-dcerpcd.8 +++ b/upstream/debian-unstable/man8/samba-dcerpcd.8 @@ -2,12 +2,12 @@ .\" Title: samba-dcerpcd .\" Author: [see the "AUTHOR" section] .\" Generator: DocBook XSL Stylesheets vsnapshot <http://docbook.sf.net/> -.\" Date: 02/19/2024 +.\" Date: 05/29/2024 .\" Manual: System Administration tools -.\" Source: Samba 4.19.5-Debian +.\" Source: Samba 4.20.1-Debian .\" Language: English .\" -.TH "SAMBA\-DCERPCD" "8" "02/19/2024" "Samba 4\&.19\&.5\-Debian" "System Administration tools" +.TH "SAMBA\-DCERPCD" "8" "05/29/2024" "Samba 4\&.20\&.1\-Debian" "System Administration tools" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -28,7 +28,7 @@ .\" * MAIN CONTENT STARTS HERE * .\" ----------------------------------------------------------------- .SH "NAME" -samba-dcerpcd \- This is one of Samba\*(Aqs DCERPC server processes that can listen on sockets where RPC services are offered and is the parent process of the DCERPC services it invokes\&. Unless separately invoked it is started on demand from smbd or winbind and serves DCERPC only over named pipes (np) as a helper process\&. This will be the standard setup for most installations (standalone/member server/AD server) unless they modify their startup scripts\&. Note in when Samba is configured as an Active Directory Domain controller the samba process that invokes smbd will still provide its normal DCERPC services, not samba\-dcerpcd\&. When separately invoked by system startup scripts or a a daemon, the global smb\&.conf option \m[blue]\fBrpc start on demand helpers = false\fR\m[] MUST be set to allow samba\-dcerpcd to start standalone\&. +samba-dcerpcd \- This is one of Samba\*(Aqs DCERPC server processes that can listen on sockets where RPC services are offered and is the parent process of the DCERPC services it invokes\&. Unless separately invoked it is started on demand from smbd or winbind and serves DCERPC only over named pipes (np) as a helper process\&. This will be the standard setup for most installations (standalone/member server/AD server) unless they modify their startup scripts\&. Note in when Samba is configured as an Active Directory Domain controller the samba process that invokes smbd will still provide its normal DCERPC services, not samba\-dcerpcd\&. When separately invoked by system startup scripts or a daemon, the global smb\&.conf option \m[blue]\fBrpc start on demand helpers = false\fR\m[] MUST be set to allow samba\-dcerpcd to start standalone\&. .SH "SYNOPSIS" .HP \w'\ 'u samba\-dcerpcd [\-D|\-\-daemon] [\-i|\-\-interactive] [\-F|\-\-foreground] [\-\-no\-process\-group] [\-d\ <debug\ level>] [\-\-debug\-stdout] [\-\-configfile=<configuration\ file>] [\-\-option=<name>=<value>] [\-\-leak\-report] [\-\-leak\-report\-full] [\-V|\-\-version] [\-\-libexec\-rpcds] [\-\-np\-helper] [\-\-ready\-signal\-fd=<fd>] [<SERVICE_1>] [<SERVICE_2>] [<\&.\&.\&.>] diff --git a/upstream/debian-unstable/man8/samba-regedit.8 b/upstream/debian-unstable/man8/samba-regedit.8 index 3a3b6eaa..dbb84d96 100644 --- a/upstream/debian-unstable/man8/samba-regedit.8 +++ b/upstream/debian-unstable/man8/samba-regedit.8 @@ -2,12 +2,12 @@ .\" Title: samba-regedit .\" Author: [see the "AUTHOR" section] .\" Generator: DocBook XSL Stylesheets vsnapshot <http://docbook.sf.net/> -.\" Date: 02/19/2024 +.\" Date: 05/29/2024 .\" Manual: System Administration tools -.\" Source: Samba 4.19.5-Debian +.\" Source: Samba 4.20.1-Debian .\" Language: English .\" -.TH "SAMBA\-REGEDIT" "8" "02/19/2024" "Samba 4\&.19\&.5\-Debian" "System Administration tools" +.TH "SAMBA\-REGEDIT" "8" "05/29/2024" "Samba 4\&.20\&.1\-Debian" "System Administration tools" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -365,7 +365,7 @@ In case you need more fine grained control you can use: .RE .SH "VERSION" .PP -This man page is part of version 4\&.19\&.5\-Debian of the Samba suite\&. +This man page is part of version 4\&.20\&.1\-Debian of the Samba suite\&. .SH "SEE ALSO" .PP \fBsmbd\fR(8), diff --git a/upstream/debian-unstable/man8/samba-tool.8 b/upstream/debian-unstable/man8/samba-tool.8 deleted file mode 100644 index 8f4116f4..00000000 --- a/upstream/debian-unstable/man8/samba-tool.8 +++ /dev/null @@ -1,1875 +0,0 @@ -'\" t -.\" Title: samba-tool -.\" Author: [see the "AUTHOR" section] -.\" Generator: DocBook XSL Stylesheets vsnapshot <http://docbook.sf.net/> -.\" Date: 02/19/2024 -.\" Manual: System Administration tools -.\" Source: Samba 4.19.5-Debian -.\" Language: English -.\" -.TH "SAMBA\-TOOL" "8" "02/19/2024" "Samba 4\&.19\&.5\-Debian" "System Administration tools" -.\" ----------------------------------------------------------------- -.\" * Define some portability stuff -.\" ----------------------------------------------------------------- -.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -.\" http://bugs.debian.org/507673 -.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html -.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -.ie \n(.g .ds Aq \(aq -.el .ds Aq ' -.\" ----------------------------------------------------------------- -.\" * set default formatting -.\" ----------------------------------------------------------------- -.\" disable hyphenation -.nh -.\" disable justification (adjust text to left margin only) -.ad l -.\" ----------------------------------------------------------------- -.\" * MAIN CONTENT STARTS HERE * -.\" ----------------------------------------------------------------- -.SH "NAME" -samba-tool \- Main Samba administration tool\&. -.SH "SYNOPSIS" -.HP \w'\ 'u -samba\-tool [\-h] [\-W\ myworkgroup] [\-U\ user] [\-d\ debuglevel] [\-\-v] -.SH "DESCRIPTION" -.PP -This tool is part of the -\fBsamba\fR(7) -suite\&. -.SH "OPTIONS" -.PP -\-h|\-\-help -.RS 4 -Show this help message and exit -.RE -.PP -\-r|\-\-realm=REALM -.RS 4 -Set the realm for the domain\&. -.sp -Note that specifying this parameter here will override the -\m[blue]\fBrealm\fR\m[] -parameter in the -/etc/samba/smb\&.conf -file\&. -.RE -.PP -\-\-simple\-bind\-dn=DN -.RS 4 -DN to use for a simple bind\&. -.RE -.PP -\-\-password -.RS 4 -Specify the password on the commandline\&. -.sp -Be cautious about including passwords in scripts or passing user\-supplied values onto the command line\&. For security it is better to let the Samba client tool ask for the password if needed, or obtain the password once with -kinit\&. -.sp -If \-\-password is not specified, the tool will check the -\fBPASSWD\fR -environment variable, followed by -\fBPASSWD_FD\fR -which is expected to contain an open file descriptor (FD) number\&. -.sp -Finally it will check -\fBPASSWD_FILE\fR -(containing a file path to be opened)\&. The file should only contain the password\&. Make certain that the permissions on the file restrict access from unwanted users! -.sp -While Samba will attempt to scrub the password from the process title (as seen in ps), this is after startup and so is subject to a race\&. -.RE -.PP -\-U|\-\-user=[DOMAIN\e]USERNAME[%PASSWORD] -.RS 4 -Sets the SMB username or username and password\&. -.sp -If %PASSWORD is not specified, the user will be prompted\&. The client will first check the -\fBUSER\fR -environment variable (which is also permitted to also contain the password separated by a %), then the -\fBLOGNAME\fR -variable (which is not permitted to contain a password) and if either exists, the value is used\&. If these environmental variables are not found, the username found in a Kerberos Credentials cache may be used\&. -.sp -A third option is to use a credentials file which contains the plaintext of the username and password\&. This option is mainly provided for scripts where the admin does not wish to pass the credentials on the command line or via environment variables\&. If this method is used, make certain that the permissions on the file restrict access from unwanted users\&. See the -\fI\-A\fR -for more details\&. -.sp -Be cautious about including passwords in scripts or passing user\-supplied values onto the command line\&. For security it is better to let the Samba client tool ask for the password if needed, or obtain the password once with -kinit\&. -.sp -While Samba will attempt to scrub the password from the process title (as seen in ps), this is after startup and so is subject to a race\&. -.RE -.PP -\-W|\-\-workgroup=WORKGROUP -.RS 4 -Set the SMB domain of the username\&. This overrides the default domain which is the domain defined in smb\&.conf\&. If the domain specified is the same as the servers NetBIOS name, it causes the client to log on using the servers local SAM (as opposed to the Domain SAM)\&. -.sp -Note that specifying this parameter here will override the -\m[blue]\fBworkgroup\fR\m[] -parameter in the -/etc/samba/smb\&.conf -file\&. -.RE -.PP -\-N|\-\-no\-pass -.RS 4 -If specified, this parameter suppresses the normal password prompt from the client to the user\&. This is useful when accessing a service that does not require a password\&. -.sp -Unless a password is specified on the command line or this parameter is specified, the client will request a password\&. -.sp -If a password is specified on the command line and this option is also defined the password on the command line will be silently ignored and no password will be used\&. -.RE -.PP -\-\-use\-kerberos=desired|required|off -.RS 4 -This parameter determines whether Samba client tools will try to authenticate using Kerberos\&. For Kerberos authentication you need to use dns names instead of IP addresses when connecting to a service\&. -.sp -Note that specifying this parameter here will override the -\m[blue]\fBclient use kerberos\fR\m[] -parameter in the -/etc/samba/smb\&.conf -file\&. -.RE -.PP -\-\-use\-krb5\-ccache=CCACHE -.RS 4 -Specifies the credential cache location for Kerberos authentication\&. -.sp -This will set \-\-use\-kerberos=required too\&. -.RE -.PP -\-A|\-\-authentication\-file=filename -.RS 4 -This option allows you to specify a file from which to read the username and password used in the connection\&. The format of the file is: -.sp -.if n \{\ -.RS 4 -.\} -.nf - username = <value> - password = <value> - domain = <value> - -.fi -.if n \{\ -.RE -.\} -.sp -Make certain that the permissions on the file restrict access from unwanted users! -.RE -.PP -\-\-ipaddress=IPADDRESS -.RS 4 -IP address of the server -.RE -.PP -\-\-color=always|never|auto -.RS 4 -Indicate whether samba\-tool should use ANSI colour codes in its output\&. If \*(Aqauto\*(Aq (the default), samba\-tool will use colour when its output is directed toward a terminal, unless the NO_COLOR environment variable is set and non\-empty\&. -.sp -The values \*(Aqyes\*(Aq and \*(Aqforce\*(Aq are accepted as synonyms for \*(Aqalways\*(Aq; \*(Aqno\*(Aq and \*(Aqnone\*(Aq for \*(Aqnever\*(Aq; and \*(Aqtty\*(Aq and \*(Aqif\-tty\*(Aq for \*(Aqauto\*(Aq\&. -.sp -Note that asking for colour doesn\*(Aqt mean samba\-tool will necessarily be very colourful\&. Many commands are very monochrome, particularly when successful\&. -.RE -.PP -\-d|\-\-debuglevel=DEBUGLEVEL -.RS 4 -\fIlevel\fR -is an integer from 0 to 10\&. The default value if this parameter is not specified is 1 for client applications\&. -.sp -The higher this value, the more detail will be logged to the log files about the activities of the server\&. At level 0, only critical errors and serious warnings will be logged\&. Level 1 is a reasonable level for day\-to\-day running \- it generates a small amount of information about operations carried out\&. -.sp -Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&. -.sp -Note that specifying this parameter here will override the -\m[blue]\fBlog level\fR\m[] -parameter in the -/etc/samba/smb\&.conf -file\&. -.RE -.PP -\-\-debug\-stdout -.RS 4 -This will redirect debug output to STDOUT\&. By default all clients are logging to STDERR\&. -.RE -.SH "COMMANDS" -.SS "computer" -.PP -Manage computer accounts\&. -.SS "computer add computername [options]" -.PP -Add a new computer to the Active Directory Domain\&. -.PP -The new computer name specified on the command is the sAMAccountName, with or without the trailing dollar sign\&. -.PP -\-\-computerou=COMPUTEROU -.RS 4 -DN of alternative location (with or without domainDN counterpart) to default CN=Computers in which new computer object will be created\&. E\&.g\&. \*(AqOU=OUname\*(Aq\&. -.RE -.PP -\-\-description=DESCRIPTION -.RS 4 -The new computers\*(Aqs description\&. -.RE -.PP -\-\-ip\-address=IP_ADDRESS_LIST -.RS 4 -IPv4 address for the computer\*(Aqs A record, or IPv6 address for AAAA record, can be provided multiple times\&. -.RE -.PP -\-\-service\-principal\-name=SERVICE_PRINCIPAL_NAME_LIST -.RS 4 -Computer\*(Aqs Service Principal Name, can be provided multiple times\&. -.RE -.PP -\-\-prepare\-oldjoin -.RS 4 -Prepare enabled machine account for oldjoin mechanism\&. -.RE -.SS "computer create computername [options]" -.PP -Add a new computer\&. This is a synonym for the -samba\-tool computer add -command and is available for compatibility reasons only\&. Please use -samba\-tool computer add -instead\&. -.SS "computer delete computername [options]" -.PP -Delete an existing computer account\&. -.PP -The computer name specified on the command is the sAMAccountName, with or without the trailing dollar sign\&. -.SS "computer edit computername" -.PP -Edit a computer AD object\&. -.PP -The computer name specified on the command is the sAMAccountName, with or without the trailing dollar sign\&. -.PP -\-\-editor=EDITOR -.RS 4 -Specifies the editor to use instead of the system default, or \*(Aqvi\*(Aq if no system default is set\&. -.RE -.SS "computer list" -.PP -List all computers\&. -.SS "computer move computername new_parent_dn [options]" -.PP -This command moves a computer account into the specified organizational unit or container\&. -.PP -The computername specified on the command is the sAMAccountName, with or without the trailing dollar sign\&. -.PP -The name of the organizational unit or container can be specified as a full DN or without the domainDN component\&. -.SS "computer show computername [options]" -.PP -Display a computer AD object\&. -.PP -The computer name specified on the command is the sAMAccountName, with or without the trailing dollar sign\&. -.PP -\-\-attributes=USER_ATTRS -.RS 4 -Comma separated list of attributes, which will be printed\&. -.RE -.SS "contact" -.PP -Manage contacts\&. -.SS "contact add [contactname] [options]" -.PP -Add a new contact to the Active Directory Domain\&. -.PP -The name of the new contact can be specified by the first argument \*(Aqcontactname\*(Aq or the \-\-given\-name, \-\-initial and \-\-surname arguments\&. If no \*(Aqcontactname\*(Aq is given, contact\*(Aqs name will be made up of the given arguments by combining the given\-name, initials and surname\&. Each argument is optional\&. A dot (\*(Aq\&.\*(Aq) will be appended to the initials automatically\&. -.PP -\-\-ou=OU -.RS 4 -DN of alternative location (with or without domainDN counterpart) in which the new contact will be created\&. E\&.g\&. \*(AqOU=OUname\*(Aq\&. Default is the domain base\&. -.RE -.PP -\-\-description=DESCRIPTION -.RS 4 -The new contacts\*(Aqs description\&. -.RE -.PP -\-\-surname=SURNAME -.RS 4 -Contact\*(Aqs surname\&. -.RE -.PP -\-\-given\-name=GIVEN_NAME -.RS 4 -Contact\*(Aqs given name\&. -.RE -.PP -\-\-initials=INITIALS -.RS 4 -Contact\*(Aqs initials\&. -.RE -.PP -\-\-display\-name=DISPLAY_NAME -.RS 4 -Contact\*(Aqs display name\&. -.RE -.PP -\-\-job\-title=JOB_TITLE -.RS 4 -Contact\*(Aqs job title\&. -.RE -.PP -\-\-department=DEPARTMENT -.RS 4 -Contact\*(Aqs department\&. -.RE -.PP -\-\-company=COMPANY -.RS 4 -Contact\*(Aqs company\&. -.RE -.PP -\-\-mail\-address=MAIL_ADDRESS -.RS 4 -Contact\*(Aqs email address\&. -.RE -.PP -\-\-internet\-address=INTERNET_ADDRESS -.RS 4 -Contact\*(Aqs home page\&. -.RE -.PP -\-\-telephone\-number=TELEPHONE_NUMBER -.RS 4 -Contact\*(Aqs phone number\&. -.RE -.PP -\-\-mobile\-number=MOBILE_NUMBER -.RS 4 -Contact\*(Aqs mobile phone number\&. -.RE -.PP -\-\-physical\-delivery\-office=PHYSICAL_DELIVERY_OFFICE -.RS 4 -Contact\*(Aqs office location\&. -.RE -.SS "contact create [contactname] [options]" -.PP -Add a new contact\&. This is a synonym for the -samba\-tool contact add -command and is available for compatibility reasons only\&. Please use -samba\-tool contact add -instead\&. -.SS "contact delete contactname [options]" -.PP -Delete an existing contact\&. -.PP -The contactname specified on the command is the common name or the distinguished name of the contact object\&. The distinguished name of the contact can be specified with or without the domainDN component\&. -.SS "contact edit contactname" -.PP -Modify a contact AD object\&. -.PP -The contactname specified on the command is the common name or the distinguished name of the contact object\&. The distinguished name of the contact can be specified with or without the domainDN component\&. -.PP -\-\-editor=EDITOR -.RS 4 -Specifies the editor to use instead of the system default, or \*(Aqvi\*(Aq if no system default is set\&. -.RE -.SS "contact list [options]" -.PP -List all contacts\&. -.PP -\-\-full\-dn -.RS 4 -Display contact\*(Aqs full DN instead of the name\&. -.RE -.SS "contact move contactname new_parent_dn [options]" -.PP -This command moves a contact into the specified organizational unit or container\&. -.PP -The contactname specified on the command is the common name or the distinguished name of the contact object\&. The distinguished name of the contact can be specified with or without the domainDN component\&. -.SS "contact show contactname [options]" -.PP -Display a contact AD object\&. -.PP -The contactname specified on the command is the common name or the distinguished name of the contact object\&. The distinguished name of the contact can be specified with or without the domainDN component\&. -.PP -\-\-attributes=CONTACT_ATTRS -.RS 4 -Comma separated list of attributes, which will be printed\&. -.RE -.SS "contact rename contactname [options]" -.PP -Rename a contact and related attributes\&. -.PP -This command allows to set the contact\*(Aqs name related attributes\&. The contact\*(Aqs CN will be renamed automatically\&. The contact\*(Aqs new CN will be made up by combining the given\-name, initials and surname\&. A dot (\*(Aq\&.\*(Aq) will be appended to the initials automatically, if required\&. Use the \-\-force\-new\-cn option to specify the new CN manually and \-\-reset\-cn to reset this change\&. -.PP -Use an empty attribute value to remove the specified attribute\&. -.PP -The contact name specified on the command is the CN\&. -.PP -\-\-surname=SURNAME -.RS 4 -New surname\&. -.RE -.PP -\-\-given\-name=GIVEN_NAME -.RS 4 -New given name\&. -.RE -.PP -\-\-initials=INITIALS -.RS 4 -New initials\&. -.RE -.PP -\-\-force\-new\-cn=NEW_CN -.RS 4 -Specify a new CN (RDN) instead of using a combination of the given name, initials and surname\&. -.RE -.PP -\-\-reset\-cn -.RS 4 -Set the CN to the default combination of given name, initials and surname\&. -.RE -.PP -\-\-display\-name=DISPLAY_NAME -.RS 4 -New display name\&. -.RE -.PP -\-\-mail\-address=MAIL_ADDRESS -.RS 4 -New email address\&. -.RE -.SS "dbcheck" -.PP -Check the local AD database for errors\&. -.SS "delegation" -.PP -Manage Delegations\&. -.SS "delegation add-service accountname principal [options]" -.PP -Add a service principal as msDS\-AllowedToDelegateTo\&. -.SS "delegation del-service accountname principal [options]" -.PP -Delete a service principal as msDS\-AllowedToDelegateTo\&. -.SS "delegation for-any-protocol accountname [(on|off)] [options]" -.PP -Set/unset UF_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION (S4U2Proxy) for an account\&. -.SS "delegation for-any-service accountname [(on|off)] [options]" -.PP -Set/unset UF_TRUSTED_FOR_DELEGATION for an account\&. -.SS "delegation show accountname [options] " -.PP -Show the delegation setting of an account\&. -.SS "dns" -.PP -Manage Domain Name Service (DNS)\&. -.SS "dns add server zone name A|AAAA|PTR|CNAME|NS|MX|SRV|TXT data" -.PP -Add a DNS record\&. -.SS "dns delete server zone name A|AAAA|PTR|CNAME|NS|MX|SRV|TXT data" -.PP -Delete a DNS record\&. -.SS "dns query server zone name A|AAAA|PTR|CNAME|NS|MX|SRV|TXT|ALL [options] data" -.PP -Query a name\&. -.SS "dns roothints server [name] [options]" -.PP -Query root hints\&. -.SS "dns serverinfo server [options]" -.PP -Query server information\&. -.SS "dns update server zone name A|AAAA|PTR|CNAME|NS|MX|SRV|TXT olddata newdata" -.PP -Update a DNS record\&. -.SS "dns zonecreate server zone [options]" -.PP -Create a zone\&. -.SS "dns zonedelete server zone [options]" -.PP -Delete a zone\&. -.SS "dns zoneinfo server zone [options]" -.PP -Query zone information\&. -.SS "dns zonelist server [options]" -.PP -List zones\&. -.SS "domain" -.PP -Manage Domain\&. -.SS "domain backup" -.PP -Create or restore a backup of the domain\&. -.SS "domain backup offline" -.PP -Backup (with proper locking) local domain directories into a tar file\&. -.SS "domain backup online" -.PP -Copy a running DC\*(Aqs current DB into a backup tar file\&. -.SS "domain backup rename" -.PP -Copy a running DC\*(Aqs DB to backup file, renaming the domain in the process\&. -.SS "domain backup restore" -.PP -Restore the domain\*(Aqs DB from a backup\-file\&. -.SS "domain auth policy list" -.PP -List authentication policies on the domain\&. -.PP -\-H, \-\-URL -.RS 4 -LDB URL for database or target server\&. -.RE -.PP -\-\-json -.RS 4 -View authentication policies as JSON instead of a list\&. -.RE -.SS "domain auth policy view" -.PP -View an authentication policy on the domain\&. -.PP -\-H, \-\-URL -.RS 4 -LDB URL for database or target server\&. -.RE -.PP -\-\-name -.RS 4 -Name of the authentication policy to view (required)\&. -.RE -.SS "domain auth policy create" -.PP -Create authentication policies on the domain\&. -.PP -\-H, \-\-URL -.RS 4 -LDB URL for database or target server\&. -.RE -.PP -\-\-name -.RS 4 -Name of the authentication policy (required)\&. -.RE -.PP -\-\-description -.RS 4 -Optional description for the authentication policy\&. -.RE -.PP -\-\-protect -.RS 4 -Protect authentication policy from accidental deletion\&. -.sp -Cannot be used together with \-\-unprotect\&. -.RE -.PP -\-\-unprotect -.RS 4 -Unprotect authentication policy from accidental deletion\&. -.sp -Cannot be used together with \-\-protect\&. -.RE -.PP -\-\-audit -.RS 4 -Only audit authentication policy\&. -.sp -Cannot be used together with \-\-enforce\&. -.RE -.PP -\-\-enforce -.RS 4 -Enforce authentication policy\&. -.sp -Cannot be used together with \-\-audit\&. -.RE -.PP -\-\-strong\-ntlm\-policy -.RS 4 -Strong NTLM Policy (Disabled, Optional, Required)\&. -.RE -.PP -\-\-user\-tgt\-lifetime -.RS 4 -Ticket\-Granting\-Ticket lifetime for user accounts\&. -.RE -.PP -\-\-user\-allow\-ntlm\-auth -.RS 4 -Allow NTLM network authentication when user is restricted to selected devices\&. -.RE -.PP -\-\-service\-tgt\-lifetime -.RS 4 -Ticket\-Granting\-Ticket lifetime for service accounts\&. -.RE -.PP -\-\-service\-allow\-ntlm\-auth -.RS 4 -Allow NTLM network authentication when service is restricted to selected devices\&. -.RE -.PP -\-\-computer\-tgt\-lifetime -.RS 4 -Ticket\-Granting\-Ticket lifetime for computer accounts\&. -.RE -.SS "domain auth policy modify" -.PP -Modify authentication policies on the domain\&. -.PP -\-H, \-\-URL -.RS 4 -LDB URL for database or target server\&. -.RE -.PP -\-\-name -.RS 4 -Name of the authentication policy (required)\&. -.RE -.PP -\-\-description -.RS 4 -Optional description for the authentication policy\&. -.RE -.PP -\-\-protect -.RS 4 -Protect authentication policy from accidental deletion\&. -.sp -Cannot be used together with \-\-unprotect\&. -.RE -.PP -\-\-unprotect -.RS 4 -Unprotect authentication policy from accidental deletion\&. -.sp -Cannot be used together with \-\-protect\&. -.RE -.PP -\-\-audit -.RS 4 -Only audit authentication policy\&. -.sp -Cannot be used together with \-\-enforce\&. -.RE -.PP -\-\-enforce -.RS 4 -Enforce authentication policy\&. -.sp -Cannot be used together with \-\-audit\&. -.RE -.PP -\-\-strong\-ntlm\-policy -.RS 4 -Strong NTLM Policy (Disabled, Optional, Required)\&. -.RE -.PP -\-\-user\-tgt\-lifetime -.RS 4 -Ticket\-Granting\-Ticket lifetime for user accounts\&. -.RE -.PP -\-\-user\-allow\-ntlm\-auth -.RS 4 -Allow NTLM network authentication when user is restricted to selected devices\&. -.RE -.PP -\-\-service\-tgt\-lifetime -.RS 4 -Ticket\-Granting\-Ticket lifetime for service accounts\&. -.RE -.PP -\-\-service\-allow\-ntlm\-auth -.RS 4 -Allow NTLM network authentication when service is restricted to selected devices\&. -.RE -.PP -\-\-computer\-tgt\-lifetime -.RS 4 -Ticket\-Granting\-Ticket lifetime for computer accounts\&. -.RE -.SS "domain auth policy delete" -.PP -Delete authentication policies on the domain\&. -.PP -\-H, \-\-URL -.RS 4 -LDB URL for database or target server\&. -.RE -.PP -\-\-name -.RS 4 -Name of authentication policy to delete (required)\&. -.RE -.PP -\-\-force -.RS 4 -Force authentication policy delete even if it is protected\&. -.RE -.SS "domain auth silo list" -.PP -List authentication silos on the domain\&. -.PP -\-H, \-\-URL -.RS 4 -LDB URL for database or target server\&. -.RE -.PP -\-\-json -.RS 4 -View authentication silos as JSON instead of a list\&. -.RE -.SS "domain auth silo view" -.PP -View an authentication silo on the domain\&. -.PP -\-H, \-\-URL -.RS 4 -LDB URL for database or target server\&. -.RE -.PP -\-\-name -.RS 4 -Name of the authentication silo to view (required)\&. -.RE -.SS "domain auth silo create" -.PP -Create authentication silos on the domain\&. -.PP -\-H, \-\-URL -.RS 4 -LDB URL for database or target server\&. -.RE -.PP -\-\-name -.RS 4 -Name of the authentication silo (required)\&. -.RE -.PP -\-\-description -.RS 4 -Optional description for the authentication silo\&. -.RE -.PP -\-\-policy -.RS 4 -Use single policy for all principals in this silo\&. -.RE -.PP -\-\-user\-policy -.RS 4 -User account policy\&. -.RE -.PP -\-\-service\-policy -.RS 4 -Managed Service Account policy\&. -.RE -.PP -\-\-computer\-policy -.RS 4 -Computer Account policy\&. -.RE -.PP -\-\-protect -.RS 4 -Protect authentication silo from accidental deletion\&. -.sp -Cannot be used together with \-\-unprotect\&. -.RE -.PP -\-\-unprotect -.RS 4 -Unprotect authentication silo from accidental deletion\&. -.sp -Cannot be used together with \-\-protect\&. -.RE -.PP -\-\-audit -.RS 4 -Only audit silo policies\&. -.sp -Cannot be used together with \-\-enforce\&. -.RE -.PP -\-\-enforce -.RS 4 -Enforce silo policies\&. -.sp -Cannot be used together with \-\-audit\&. -.RE -.SS "domain auth silo modify" -.PP -Modify authentication silos on the domain\&. -.PP -\-H, \-\-URL -.RS 4 -LDB URL for database or target server\&. -.RE -.PP -\-\-name -.RS 4 -Name of the authentication silo (required)\&. -.RE -.PP -\-\-description -.RS 4 -Optional description for the authentication silo\&. -.RE -.PP -\-\-policy -.RS 4 -Use single policy for all principals in this silo\&. -.RE -.PP -\-\-user\-policy -.RS 4 -User account policy\&. -.RE -.PP -\-\-service\-policy -.RS 4 -Managed Service Account policy\&. -.RE -.PP -\-\-computer\-policy -.RS 4 -Computer Account policy\&. -.RE -.PP -\-\-protect -.RS 4 -Protect authentication silo from accidental deletion\&. -.sp -Cannot be used together with \-\-unprotect\&. -.RE -.PP -\-\-unprotect -.RS 4 -Unprotect authentication silo from accidental deletion\&. -.sp -Cannot be used together with \-\-protect\&. -.RE -.PP -\-\-audit -.RS 4 -Only audit silo policies\&. -.sp -Cannot be used together with \-\-enforce\&. -.RE -.PP -\-\-enforce -.RS 4 -Enforce silo policies\&. -.sp -Cannot be used together with \-\-audit\&. -.RE -.SS "domain auth silo delete" -.PP -Delete authentication silos on the domain\&. -.PP -\-H, \-\-URL -.RS 4 -LDB URL for database or target server\&. -.RE -.PP -\-\-name -.RS 4 -Name of authentication silo to delete (required)\&. -.RE -.PP -\-\-force -.RS 4 -Force authentication silo delete even if it is protected\&. -.RE -.SS "domain auth silo member add" -.PP -Add a member to an authentication silo\&. -.PP -\-H, \-\-URL -.RS 4 -LDB URL for database or target server\&. -.RE -.PP -\-\-name -.RS 4 -Name of authentication silo (required)\&. -.RE -.PP -\-\-member -.RS 4 -Member to add to the silo (DN or account name)\&. -.RE -.SS "domain auth silo member list" -.PP -List members in an authentication silo\&. -.PP -\-H, \-\-URL -.RS 4 -LDB URL for database or target server\&. -.RE -.PP -\-\-name -.RS 4 -Name of authentication silo (required)\&. -.RE -.PP -\-\-json -.RS 4 -View members as JSON instead of a list\&. -.RE -.SS "domain auth silo member remove" -.PP -Remove a member from an authentication silo\&. -.PP -\-H, \-\-URL -.RS 4 -LDB URL for database or target server\&. -.RE -.PP -\-\-name -.RS 4 -Name of authentication silo (required)\&. -.RE -.PP -\-\-member -.RS 4 -Member to remove from the silo (DN or account name)\&. -.RE -.SS "domain claim claim-type list" -.PP -List claim types on the domain\&. -.PP -\-H, \-\-URL -.RS 4 -LDB URL for database or target server\&. -.RE -.PP -\-\-json -.RS 4 -View claim types as JSON instead of a list\&. -.RE -.SS "domain claim claim-type view" -.PP -View a single claim type on the domain\&. -.PP -\-H, \-\-URL -.RS 4 -LDB URL for database or target server\&. -.RE -.PP -\-\-name -.RS 4 -Display name of claim type to view (required)\&. -.RE -.SS "domain claim claim-type create" -.PP -Create claim types on the domain\&. -.PP -\-H, \-\-URL -.RS 4 -LDB URL for database or target server\&. -.RE -.PP -\-\-attribute -.RS 4 -Attribute of claim type to create (required)\&. -.RE -.PP -\-\-class -.RS 4 -Object classes to set claim type to\&. -.sp -Example: \-\-class=user \-\-class=computer -.RE -.PP -\-\-name -.RS 4 -Optional display name or use attribute name\&. -.RE -.PP -\-\-description -.RS 4 -Optional description or use from attribute\&. -.RE -.PP -\-\-enable -.RS 4 -Enable claim type\&. -.sp -Cannot be used together with \-\-disable\&. -.RE -.PP -\-\-disable -.RS 4 -Disable claim type\&. -.sp -Cannot be used together with \-\-enable\&. -.RE -.PP -\-\-protect -.RS 4 -Protect claim type from accidental deletion\&. -.sp -Cannot be used together with \-\-unprotect\&. -.RE -.PP -\-\-unprotect -.RS 4 -Unprotect claim type from accidental deletion\&. -.sp -Cannot be used together with \-\-protect\&. -.RE -.SS "domain claim claim-type modify" -.PP -Modify claim types on the domain\&. -.PP -\-H, \-\-URL -.RS 4 -LDB URL for database or target server\&. -.RE -.PP -\-\-name -.RS 4 -Display name of claim type to modify (required)\&. -.RE -.PP -\-\-class -.RS 4 -Object classes to set claim type to\&. -.sp -Example: \-\-class=user \-\-class=computer -.RE -.PP -\-\-description -.RS 4 -Set the claim type description\&. -.RE -.PP -\-\-enable -.RS 4 -Enable claim type\&. -.sp -Cannot be used together with \-\-disable\&. -.RE -.PP -\-\-disable -.RS 4 -Disable claim type\&. -.sp -Cannot be used together with \-\-enable\&. -.RE -.PP -\-\-protect -.RS 4 -Protect claim type from accidental deletion\&. -.sp -Cannot be used together with \-\-unprotect\&. -.RE -.PP -\-\-unprotect -.RS 4 -Unprotect claim type from accidental deletion\&. -.sp -Cannot be used together with \-\-protect\&. -.RE -.SS "domain claim claim-type delete" -.PP -Delete claim types on the domain\&. -.PP -\-H, \-\-URL -.RS 4 -LDB URL for database or target server\&. -.RE -.PP -\-\-name -.RS 4 -Display name of claim type to delete (required)\&. -.RE -.PP -\-\-force -.RS 4 -Force claim type delete even if it is protected\&. -.RE -.SS "domain claim value-type list" -.PP -List claim value types on the domain\&. -.PP -\-H, \-\-URL -.RS 4 -LDB URL for database or target server\&. -.RE -.PP -\-\-json -.RS 4 -View claim value types as JSON instead of a list\&. -.RE -.SS "domain claim value-type view" -.PP -View a single claim value type on the domain\&. -.PP -\-H, \-\-URL -.RS 4 -LDB URL for database or target server\&. -.RE -.PP -\-\-name -.RS 4 -Display name of claim value type to view (required)\&. -.RE -.SS "domain classicupgrade [options] classic_smb_conf" -.PP -Upgrade from Samba classic (NT4\-like) database to Samba AD DC database\&. -.SS "domain dcpromo dnsdomain [DC|RODC] [options]" -.PP -Promote an existing domain member or NT4 PDC to an AD DC\&. -.SS "domain demote" -.PP -Demote ourselves from the role of domain controller\&. -.SS "domain exportkeytab keytab [options]" -.PP -Dumps Kerberos keys of the domain into a keytab\&. -.SS "domain info ip_address [options]" -.PP -Print basic info about a domain and the specified DC\&. -.SS "domain join dnsdomain [DC|RODC|MEMBER|SUBDOMAIN] [options]" -.PP -Join a domain as either member or backup domain controller\&. -.SS "domain level show|raise options [options]" -.PP -Show/raise domain and forest function levels\&. -.SS "domain passwordsettings show|set options [options]" -.PP -Show/set password settings\&. -.SS "domain passwordsettings pso" -.PP -Manage fine\-grained Password Settings Objects (PSOs)\&. -.SS "domain passwordsettings pso apply pso-name user-or-group-name [options]" -.PP -Applies a PSO\*(Aqs password policy to a user or group\&. -.SS "domain passwordsettings pso create pso-name precedence [options]" -.PP -Creates a new Password Settings Object (PSO)\&. -.SS "domain passwordsettings pso delete pso-name [options]" -.PP -Deletes a Password Settings Object (PSO)\&. -.SS "domain passwordsettings pso list [options]" -.PP -Lists all Password Settings Objects (PSOs)\&. -.SS "domain passwordsettings pso set pso-name [options]" -.PP -Modifies a Password Settings Object (PSO)\&. -.SS "domain passwordsettings pso show user-name [options]" -.PP -Displays a Password Settings Object (PSO)\&. -.SS "domain passwordsettings pso show-user pso-name [options]" -.PP -Displays the Password Settings that apply to a user\&. -.SS "domain passwordsettings pso unapply pso-name user-or-group-name [options]" -.PP -Updates a PSO to no longer apply to a user or group\&. -.SS "domain provision" -.PP -Promote an existing domain member or NT4 PDC to an AD DC\&. -.SS "domain trust" -.PP -Domain and forest trust management\&. -.SS "domain trust create DOMAIN options [options]" -.PP -Create a domain or forest trust\&. -.SS "domain trust modify DOMAIN options [options]" -.PP -Modify a domain or forest trust\&. -.SS "domain trust delete DOMAIN options [options]" -.PP -Delete a domain trust\&. -.SS "domain trust list options [options]" -.PP -List domain trusts\&. -.SS "domain trust namespaces [DOMAIN] options [options]" -.PP -Manage forest trust namespaces\&. -.SS "domain trust show DOMAIN options [options]" -.PP -Show trusted domain details\&. -.SS "domain trust validate DOMAIN options [options]" -.PP -Validate a domain trust\&. -.SS "drs" -.PP -Manage Directory Replication Services (DRS)\&. -.SS "drs bind" -.PP -Show DRS capabilities of a server\&. -.SS "drs kcc" -.PP -Trigger knowledge consistency center run\&. -.SS "drs options" -.PP -Query or change -\fIoptions\fR -for NTDS Settings object of a domain controller\&. -.SS "drs replicate destination_DC source_DC NC [options]" -.PP -Replicate a naming context between two DCs\&. -.SS "drs showrepl" -.PP -Show replication status\&. The -[\-\-json] -option results in JSON output, and with the -[\-\-summary] -option produces very little output when the replication status seems healthy\&. -.SS "dsacl" -.PP -Administer DS ACLs -.SS "dsacl delete" -.PP -Delete an access list entry on a directory object\&. -.SS "dsacl get" -.PP -Print access list on a directory object\&. -.SS "dsacl set" -.PP -Modify access list on a directory object\&. -.SS "forest" -.PP -Manage Forest configuration\&. -.SS "forest directory_service" -.PP -Manage directory_service behaviour for the forest\&. -.SS "forest directory_service dsheuristics VALUE" -.PP -Modify dsheuristics directory_service configuration for the forest\&. -.SS "forest directory_service show" -.PP -Show current directory_service configuration for the forest\&. -.SS "fsmo" -.PP -Manage Flexible Single Master Operations (FSMO)\&. -.SS "fsmo seize [options]" -.PP -Seize the role\&. -.SS "fsmo show" -.PP -Show the roles\&. -.SS "fsmo transfer [options]" -.PP -Transfer the role\&. -.SS "gpo" -.PP -Manage Group Policy Objects (GPO)\&. -.SS "gpo create displayname [options]" -.PP -Create an empty GPO\&. -.SS "gpo del gpo [options]" -.PP -Delete GPO\&. -.SS "gpo dellink container_dn gpo [options]" -.PP -Delete GPO link from a container\&. -.SS "gpo fetch gpo [options]" -.PP -Download a GPO\&. -.SS "gpo getinheritance container_dn [options]" -.PP -Get inheritance flag for a container\&. -.SS "gpo getlink container_dn [options]" -.PP -List GPO Links for a container\&. -.SS "gpo list username [options]" -.PP -List GPOs for an account\&. -.SS "gpo listall" -.PP -List all GPOs\&. -.SS "gpo listcontainers gpo [options]" -.PP -List all linked containers for a GPO\&. -.SS "gpo setinheritance container_dn block|inherit [options]" -.PP -Set inheritance flag on a container\&. -.SS "gpo setlink container_dn gpo [options]" -.PP -Add or Update a GPO link to a container\&. -.SS "gpo show gpo [options]" -.PP -Show information for a GPO\&. -.SS "gpo manage symlink list" -.PP -List VGP Symbolic Link Group Policy from the sysvol -.SS "gpo manage symlink add" -.PP -Adds a VGP Symbolic Link Group Policy to the sysvol -.SS "gpo manage symlink remove" -.PP -Removes a VGP Symbolic Link Group Policy from the sysvol -.SS "gpo manage files list" -.PP -List VGP Files Group Policy from the sysvol -.SS "gpo manage files add" -.PP -Add VGP Files Group Policy to the sysvol -.SS "gpo manage files remove" -.PP -Remove VGP Files Group Policy from the sysvol -.SS "gpo manage openssh list" -.PP -List VGP OpenSSH Group Policy from the sysvol -.SS "gpo manage openssh set" -.PP -Sets a VGP OpenSSH Group Policy to the sysvol -.SS "gpo manage sudoers add" -.PP -Adds a Samba Sudoers Group Policy to the sysvol\&. -.SS "gpo manage sudoers list" -.PP -List Samba Sudoers Group Policy from the sysvol\&. -.SS "gpo manage sudoers remove" -.PP -Removes a Samba Sudoers Group Policy from the sysvol\&. -.SS "gpo manage scripts startup list" -.PP -List VGP Startup Script Group Policy from the sysvol -.SS "gpo manage scripts startup add" -.PP -Adds VGP Startup Script Group Policy to the sysvol -.SS "gpo manage scripts startup remove" -.PP -Removes VGP Startup Script Group Policy from the sysvol -.SS "gpo manage motd list" -.PP -List VGP MOTD Group Policy from the sysvol\&. -.SS "gpo manage motd set" -.PP -Sets a VGP MOTD Group Policy to the sysvol -.SS "gpo manage issue list" -.PP -List VGP Issue Group Policy from the sysvol\&. -.SS "gpo manage issue set" -.PP -Sets a VGP Issue Group Policy to the sysvol -.SS "gpo manage access add" -.PP -Adds a VGP Host Access Group Policy to the sysvol -.SS "gpo manage access list" -.PP -List VGP Host Access Group Policy from the sysvol -.SS "gpo manage access remove" -.PP -Remove a VGP Host Access Group Policy from the sysvol -.SS "group" -.PP -Manage groups\&. -.SS "group add groupname [options]" -.PP -Create a new AD group\&. -.SS "group create groupname [options]" -.PP -Add a new AD group\&. This is a synonym for the -samba\-tool group add -command and is available for compatibility reasons only\&. Please use -samba\-tool group add -instead\&. -.SS "group addmembers groupname members [options]" -.PP -Add members to an AD group\&. -.SS "group delete groupname [options]" -.PP -Delete an AD group\&. -.SS "group edit groupname" -.PP -Edit a group AD object\&. -.PP -\-\-editor=EDITOR -.RS 4 -Specifies the editor to use instead of the system default, or \*(Aqvi\*(Aq if no system default is set\&. -.RE -.SS "group list" -.PP -List all groups\&. -.SS "group listmembers groupname [options]" -.PP -List all members of the specified AD group\&. -.PP -By default the sAMAccountNames are listed\&. If no sAMAccountName is available, the CN will be used instead\&. -.PP -\-\-full\-dn -.RS 4 -List the distinguished names instead of the sAMAccountNames\&. -.RE -.PP -\-\-hide\-expired -.RS 4 -Do not list expired group members\&. -.RE -.PP -\-\-hide\-disabled -.RS 4 -Do not list disabled group members\&. -.RE -.SS "group move groupname new_parent_dn [options]" -.PP -This command moves a group into the specified organizational unit or container\&. -.PP -The groupname specified on the command is the sAMAccountName\&. -.PP -The name of the organizational unit or container can be specified as a full DN or without the domainDN component\&. -.PP - -.SS "group removemembers groupname members [options]" -.PP -Remove members from the specified AD group\&. -.SS "group show groupname [options]" -.PP -Show group object and it\*(Aqs attributes\&. -.SS "group stats [options]" -.PP -Show statistics for overall groups and group memberships\&. -.SS "group rename groupname [options]" -.PP -Rename a group and related attributes\&. -.PP -This command allows to set the group\*(Aqs name related attributes\&. The group\*(Aqs CN will be renamed automatically\&. The group\*(Aqs CN will be the sAMAccountName\&. Use the \-\-force\-new\-cn option to specify the new CN manually and the \-\-reset\-cn to reset this change\&. -.PP -Use an empty attribute value to remove the specified attribute\&. -.PP -The groupname specified on the command is the sAMAccountName\&. -.PP -\-\-force\-new\-cn=NEW_CN -.RS 4 -Specify a new CN (RDN) instead of using the sAMAccountName\&. -.RE -.PP -\-\-reset\-cn -.RS 4 -Set the CN to the sAMAccountName\&. -.RE -.PP -\-\-mail\-address=MAIL_ADDRESS -.RS 4 -New mail address -.RE -.PP -\-\-samaccountname=SAMACCOUNTNAME -.RS 4 -New account name (sAMAccountName/logon name) -.RE -.SS "ldapcmp \fIURL1\fR \fIURL2\fR \fIdomain|configuration|schema|dnsdomain|dnsforest\fR [options]" -.PP -Compare two LDAP databases\&. -.SS "ntacl" -.PP -Manage NT ACLs\&. -.SS "ntacl changedomsid original-domain-SID new-domain-SID file [options]" -.PP -Change the domain SID for ACLs\&. Can be used to change all entries in acl_xattr when the machine\*(Aqs SID has accidentally changed or the data set has been copied to another machine either via backup/restore or rsync\&. -.PP -\-\-use\-ntvfs -.RS 4 -Set the ACLs directly to the TDB or xattr\&. The POSIX permissions will NOT be changed, only the NT ACL will be stored\&. -.RE -.PP -\-\-service=SERVICE -.RS 4 -Specify the name of the smb\&.conf service to use\&. This option is required in combination with the \-\-use\-s3fs option\&. -.RE -.PP -\-\-use\-s3fs -.RS 4 -Set the ACLs for use with the default s3fs file server via the VFS layer\&. This option requires a smb\&.conf service, specified by the \-\-service=SERVICE option\&. -.RE -.PP -\-\-xattr\-backend=[native|tdb] -.RS 4 -Specify the xattr backend type (native fs or tdb)\&. -.RE -.PP -\-\-eadb\-file=EADB_FILE -.RS 4 -Name of the tdb file where attributes are stored\&. -.RE -.PP -\-\-recursive -.RS 4 -Set the ACLs for directories and their contents recursively\&. -.RE -.PP -\-\-follow\-symlinks -.RS 4 -Follow symlinks when \-\-recursive is specified\&. -.RE -.PP -\-\-verbose -.RS 4 -Verbosely list files and ACLs which are being processed\&. -.RE -.SS "ntacl get file [options]" -.PP -Get ACLs on a file\&. -.SS "ntacl set acl file [options]" -.PP -Set ACLs on a file\&. -.SS "ntacl sysvolcheck" -.PP -Check sysvol ACLs match defaults (including correct ACLs on GPOs)\&. -.SS "ntacl sysvolreset" -.PP -Reset sysvol ACLs to defaults (including correct ACLs on GPOs)\&. -.SS "ou" -.PP -Manage organizational units (OUs)\&. -.SS "ou add ou_dn [options]" -.PP -Add a new organizational unit\&. -.PP -The name of the organizational unit can be specified as a full DN or without the domainDN component\&. -.PP -\-\-description=DESCRIPTION -.RS 4 -Specify OU\*(Aqs description\&. -.RE -.SS "ou create ou_dn [options]" -.PP -Add a new organizational unit\&. This is a synonym for the -samba\-tool ou add -command and is available for compatibility reasons only\&. Please use -samba\-tool ou add -instead\&. -.SS "ou delete ou_dn [options]" -.PP -Delete an organizational unit\&. -.PP -The name of the organizational unit can be specified as a full DN or without the domainDN component\&. -.PP -\-\-force\-subtree\-delete -.RS 4 -Delete organizational unit and all children recursively\&. -.RE -.SS "ou list [options]" -.PP -List all organizational units\&. -.PP -\-\-full\-dn -.RS 4 -Display DNs including the base DN\&. -.RE -.SS "ou listobjects ou_dn [options]" -.PP -List all objects in an organizational unit\&. -.PP -The name of the organizational unit can be specified as a full DN or without the domainDN component\&. -.PP -\-\-full\-dn -.RS 4 -Display DNs including the base DN\&. -.RE -.PP -\-r|\-\-recursive -.RS 4 -List objects recursively\&. -.RE -.SS "ou move old_ou_dn new_parent_dn [options]" -.PP -Move an organizational unit\&. -.PP -The name of the organizational units can be specified as a full DN or without the domainDN component\&. -.SS "ou rename old_ou_dn new_ou_dn [options]" -.PP -Rename an organizational unit\&. -.PP -The name of the organizational units can be specified as a full DN or without the domainDN component\&. -.SS "rodc" -.PP -Manage Read\-Only Domain Controller (RODC)\&. -.SS "rodc preload SID|DN|accountname [options]" -.PP -Preload one account for an RODC\&. -.SS "schema" -.PP -Manage and query schema\&. -.SS "schema attribute modify attribute [options]" -.PP -Modify the behaviour of an attribute in schema\&. -.SS "schema attribute show attribute [options]" -.PP -Display an attribute schema definition\&. -.SS "schema attribute show_oc attribute [options]" -.PP -Show objectclasses that MAY or MUST contain this attribute\&. -.SS "schema objectclass show objectclass [options]" -.PP -Display an objectclass schema definition\&. -.SS "sites" -.PP -Manage sites\&. -.SS "sites list [options]" -.PP -List sites\&. -.PP -\-\-json -.RS 4 -Output as JSON instead of a list -.RE -.SS "sites view site [options]" -.PP -View site details\&. -.SS "sites create site [options]" -.PP -Create a new site\&. -.SS "sites remove site [options]" -.PP -Delete an existing site\&. -.SS "sites subnet list site [options]" -.PP -List subnets for a site\&. -.PP -\-\-json -.RS 4 -Output as JSON instead of a list -.RE -.SS "sites subnet view subnet [options]" -.PP -View subnet details\&. -.SS "sites subnet create subnet site-of-subnet [options]" -.PP -Create a new subnet\&. -.SS "sites subnet remove subnet [options]" -.PP -Delete an existing subnet\&. -.SS "sites subnet set-site subnet site-of-subnet [options]" -.PP -Assign a subnet to a site\&. -.SS "spn" -.PP -Manage Service Principal Names (SPN)\&. -.SS "spn add name user [options]" -.PP -Create a new SPN\&. -.SS "spn delete name [user] [options]" -.PP -Delete an existing SPN\&. -.SS "spn list user [options]" -.PP -List SPNs of a given user\&. -.SS "testparm" -.PP -Check the syntax of the configuration file\&. -.SS "time" -.PP -Retrieve the time on a server\&. -.SS "user" -.PP -Manage users\&. -.SS "user add username [password]" -.PP -Add a new user to the Active Directory Domain\&. -.SS "user create username [password]" -.PP -Add a new user\&. This is a synonym for the -samba\-tool user add -command and is available for compatibility reasons only\&. Please use -samba\-tool user add -instead\&. -.SS "user delete username [options]" -.PP -Delete an existing user account\&. -.SS "user disable username" -.PP -Disable a user account\&. -.SS "user edit username" -.PP -Edit a user account AD object\&. -.PP -\-\-editor=EDITOR -.RS 4 -Specifies the editor to use instead of the system default, or \*(Aqvi\*(Aq if no system default is set\&. -.RE -.SS "user enable username" -.PP -Enable a user account\&. -.SS "user list" -.PP -List all users\&. -.PP -By default the user\*(Aqs sAMAccountNames are listed\&. -.PP -\-\-full\-dn -.RS 4 -List user\*(Aqs distinguished names instead of the sAMAccountNames\&. -.RE -.PP -\-b BASE_DN|\-\-base\-dn=BASE_DN -.RS 4 -Specify base DN to use\&. Only users under the specified base DN will be listed\&. -.RE -.PP -\-\-hide\-expired -.RS 4 -Do not list expired user accounts\&. -.RE -.PP -\-\-hide\-disabled -.RS 4 -Do not list disabled user accounts\&. -.RE -.SS "user setprimarygroup username primarygroupname" -.PP -Set the primary group a user account\&. -.SS "user getgroups username" -.PP -Get the direct group memberships of a user account\&. -.SS "user show username [options]" -.PP -Display a user AD object\&. -.PP -\-\-attributes=USER_ATTRS -.RS 4 -Comma separated list of attributes, which will be printed\&. -.RE -.SS "user move username new_parent_dn [options]" -.PP -This command moves a user account into the specified organizational unit or container\&. -.PP -The username specified on the command is the sAMAccountName\&. -.PP -The name of the organizational unit or container can be specified as a full DN or without the domainDN component\&. -.SS "user password [options]" -.PP -Change password for a user account (the one provided in authentication)\&. -.SS "user rename username [options]" -.PP -Rename a user and related attributes\&. -.PP -This command allows to set the user\*(Aqs name related attributes\&. The user\*(Aqs CN will be renamed automatically\&. The user\*(Aqs new CN will be made up by combining the given\-name, initials and surname\&. A dot (\*(Aq\&.\*(Aq) will be appended to the initials automatically, if required\&. Use the \-\-force\-new\-cn option to specify the new CN manually and \-\-reset\-cn to reset this change\&. -.PP -Use an empty attribute value to remove the specified attribute\&. -.PP -The username specified on the command is the sAMAccountName\&. -.PP -\-\-surname=SURNAME -.RS 4 -New surname -.RE -.PP -\-\-given\-name=GIVEN_NAME -.RS 4 -New given name -.RE -.PP -\-\-initials=INITIALS -.RS 4 -New initials -.RE -.PP -\-\-force\-new\-cn=NEW_CN -.RS 4 -Specify a new CN (RDN) instead of using a combination of the given name, initials and surname\&. -.RE -.PP -\-\-reset\-cn -.RS 4 -Set the CN to the default combination of given name, initials and surname\&. -.RE -.PP -\-\-display\-name=DISPLAY_NAME -.RS 4 -New display name -.RE -.PP -\-\-mail\-address=MAIL_ADDRESS -.RS 4 -New email address -.RE -.PP -\-\-samaccountname=SAMACCOUNTNAME -.RS 4 -New account name (sAMAccountName/logon name) -.RE -.PP -\-\-upn=UPN -.RS 4 -New user principal name -.RE -.SS "user setexpiry username [options]" -.PP -Set the expiration of a user account\&. -.SS "user setpassword username [options]" -.PP -Sets or resets the password of a user account\&. -.SS "user unlock username [options]" -.PP -This command unlocks a user account in the Active Directory domain\&. -.SS "user getpassword username [options]" -.PP -Gets the password of a user account\&. -.SS "user syncpasswords --cache-ldb-initialize [options]" -.PP -Syncs the passwords of all user accounts, using an optional script\&. -.PP -Note that this command should run on a single domain controller only (typically the PDC\-emulator)\&. -.SS "vampire [options] \fIdomain\fR" -.PP -Join and synchronise a remote AD domain to the local server\&. Please note that -samba\-tool vampire -is deprecated, please use -samba\-tool domain join -instead\&. -.SS "visualize [options] \fIsubcommand\fR" -.PP -Produce graphical representations of Samba network state\&. To work out what is happening in a replication graph, it is sometimes helpful to use visualisations\&. -.PP -There are two subcommands, two graphical modes, and (roughly) two modes of operation with respect to the location of authority\&. -.SS "MODES OF OPERATION" -.PP -samba\-tool visualize ntdsconn -.RS 4 -Looks at NTDS connections\&. -.RE -.PP -samba\-tool visualize reps -.RS 4 -Looks at repsTo and repsFrom objects\&. -.RE -.PP -samba\-tool visualize uptodateness -.RS 4 -Looks at replication lag as shown by the uptodateness vectors\&. -.RE -.SS "GRAPHICAL MODES" -.PP -\-\-distance -.RS 4 -Distances between DCs are shown in a matrix in the terminal\&. -.RE -.PP -\-\-dot -.RS 4 -Generate Graphviz dot output (for ntdsconn and reps modes)\&. When viewed using dot or xdot, this shows the network as a graph with DCs as vertices and connections edges\&. Certain types of degenerate edges are shown in different colours or line\-styles\&. -.RE -.PP -\-\-xdot -.RS 4 -Generate Graphviz dot output as with -[\-\-dot] -and attempt to view it immediately using -/usr/bin/xdot\&. -.RE -.PP -\-r -.RS 4 -Normally, -samba\-tool -talks to one database; with the -[\-r] -option attempts are made to contact all the DCs known to the first database\&. This is necessary for -samba\-tool visualize uptodateness -and for -samba\-tool visualize reps -because the repsFrom/To objects are not replicated, and it can reveal replication issues in other modes\&. -.RE -.SS "help" -.PP -Gives usage information\&. -.SH "VERSION" -.PP -This man page is complete for version 4\&.19\&.5\-Debian of the Samba suite\&. -.SH "AUTHOR" -.PP -The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&. diff --git a/upstream/debian-unstable/man8/saned.8 b/upstream/debian-unstable/man8/saned.8 index 1112ade7..b57923d8 100644 --- a/upstream/debian-unstable/man8/saned.8 +++ b/upstream/debian-unstable/man8/saned.8 @@ -24,6 +24,9 @@ saned \- SANE network daemon .B ] .B [ \-e ] .B [ \-h ] +.B [ \-B +.I buffer-size +.B ] .SH DESCRIPTION .B saned @@ -115,33 +118,15 @@ will divert debug output to stderr instead of the syslog default. .TP +.BR \-B ", " \-\-buffer-size=\fIbuffer\-size\fR +specifies the size of the read buffer used for communication with the backend in KB. +Default value is 1MB. + +.TP .BR \-h ", " \-\-help displays a short help message. -.PP -If -.B saned -is run from other programs such as -.BR inetd (8), -.BR xinetd (8) -and -.BR systemd (1), -check that program's documentation on how to pass command-line options. .SH CONFIGURATION -First and foremost: -.B saned -is not intended to be exposed to the internet or other non-trusted -networks. Make sure that access is limited by tcpwrappers and/or a firewall -setup. Don't depend only on -.BR saned 's -own authentication. Don't run -.B saned -as root if it's not necessary. And do -.B not -install -.B saned -as setuid root. -.PP The .I saned.conf configuration file contains both options for the daemon and the access @@ -199,282 +184,6 @@ scan\-client.somedomain.firm .PP The case of the host names does not matter, so AHost.COM is considered identical to ahost.com. -.SH SERVER DAEMON CONFIGURATION -For -.B saned -to work properly in its default mode of operation, it is also necessary to -add the appropriate configuration for -.BR xinetd (8), -.BR inetd (8) -or -.BR systemd (1) -(see below). -Note that your -.BR inetd (8) -must support IPv6 if you want to connect to -.B saned -over IPv6; -.BR xinetd (8), -.BR openbsd-inetd (8) -and -.BR systemd (1) -are known to support IPv6, check the documentation for your -.BR inetd (8) -daemon. -.PP -In the sections below the configuration for -.BR inetd (8), -.BR xinetd (8) -and -.BR systemd (1) -are described in more detail. -.PP -For the configurations below it is necessary to add a line of the following -form to -.IR /etc/services : -.PP -.RS -sane\-port 6566/tcp # SANE network scanner daemon -.RE -.PP -The official IANA short name for port 6566 is "sane\-port". The older name -"sane" is now deprecated. - -.SH INETD CONFIGURATION -It is required to add a single line to the -.BR inetd (8) -configuration file -.IR (/etc/inetd.conf) -. -.PP -The configuration line normally looks like this: -.PP -.RS -sane\-port stream tcp nowait saned.saned /usr/sbin/saned saned -.RE -.PP -However, if your system uses -.BR tcpd (8) -for additional security screening, you may want to disable -.B saned -access control by putting ``+'' in -.IR saned.conf -and use a line of the following form in -.IR /etc/inetd.conf -instead: -.PP -.RS -sane\-port stream tcp nowait saned.saned /usr/sbin/tcpd /usr/sbin/saned -.RE -.PP -Note that both examples assume that there is a -.B saned -group and a -.B saned -user. If you follow this example, please make sure that the -access permissions on the special device are set such that -.B saned -can access the scanner (the program generally needs read and -write access to scanner devices). - -.SH XINETD CONFIGURATION -If -.BR xinetd (8) -is installed on your system instead of -.BR inetd (8) -the following example for -.I /etc/xinetd.conf -may be helpful: -.PP -.RS -.ft CR -.nf -# default: off -# description: The sane server accepts requests -# for network access to a local scanner via the -# network. -service sane\-port -{ - port = 6566 - socket_type = stream - wait = no - user = saned - group = saned - server = /usr/sbin/saned -} -.fi -.ft R -.RE - -.SH SYSTEMD CONFIGURATION -.B saned -can be compiled with explicit -.BR systemd (1) -support. This -will allow logging debugging information to be forwarded -to the -.BR systemd (1) -journal. The -.BR systemd (1) -support requires compilation with the systemd-devel package -installed on the system. This is the preferred option. - -.B saned -can be used with -.BR systemd (1) -without the -.BR systemd (1) -integration compiled in, but then logging of debug information is not supported. - -The -.BR systemd (1) -configuration is different for the 2 options, so both are described below. - -.SH Systemd configuration for saned with systemd support compiled in -For -.BR systemd (1) -configuration we need to add 2 configuration files in -.IR /etc/systemd/system . -.PP -The first file we need to add here is called -.I saned.socket. -It shall have -the following contents: -.PP -.RS -.ft CR -.nf -[Unit] -Description=saned incoming socket - -[Socket] -ListenStream=6566 -Accept=yes -MaxConnections=1 - -[Install] -WantedBy=sockets.target -.fi -.ft R -.RE -.PP -The second file to be added is -.I saned@.service -with the following contents: -.PP -.RS -.ft CR -.nf -[Unit] -Description=Scanner Service -Requires=saned.socket - -[Service] -ExecStart=/usr/sbin/saned -User=saned -Group=saned -StandardInput=null -StandardOutput=syslog -StandardError=syslog -Environment=SANE_CONFIG_DIR=/etc/sane.d -# If you need to debug your configuration uncomment the next line and -# change it as appropriate to set the desired debug options -# Environment=SANE_DEBUG_DLL=255 SANE_DEBUG_BJNP=5 - -[Install] -Also=saned.socket -.fi -.ft R -.RE -.PP -You need to set an environment variable for -.B SANE_CONFIG_DIR -pointing to the directory where -.B saned -can find its configuration files. -You will have to remove the # on the last line and set the variables -for the desired debugging information if required. Multiple variables -can be set by separating the assignments by spaces as shown in the -example above. -.PP -Unlike -.BR xinetd (8) -and -.BR inetd (8), -.BR systemd (1) -allows debugging output from backends set using -.B SANE_DEBUG_XXX -to be captured. See the man-page for your backend to see what options -are supported. -With the service unit as described above, the debugging output is -forwarded to the system log. - -.SH Systemd configuration when saned is compiled without systemd support -This configuration will also work when -.B saned -is compiled WITH -.BR systemd (1) -integration support, but it does not allow debugging information to be logged. -.PP -For -.BR systemd (1) -configuration for -.BR saned , -we need to add 2 configuration files in -.IR /etc/systemd/system . -.PP -The first file we need to add here is called -.I saned.socket. -It is identical to the version for -.BR systemd (1) -with the support compiled in. -It shall have the following contents: -.PP -.RS -.ft CR -.nf -[Unit] -Description=saned incoming socket - -[Socket] -ListenStream=6566 -Accept=yes -MaxConnections=1 - -[Install] -WantedBy=sockets.target -.fi -.ft R -.RE -.PP -The second file to be added is -.IR saned@.service . -This one differs from the version with -.BR systemd (1) -integration compiled in: -.PP -.RS -.ft CR -.nf -[Unit] -Description=Scanner Service -Requires=saned.socket - -[Service] -ExecStart=/usr/sbin/saned -User=saned -Group=saned -StandardInput=socket - -Environment=SANE_CONFIG_DIR=/etc/sane.d - -[Install] -Also=saned.socket -.fi -.ft R -.RE -.PP - .SH FILES .TP .I /etc/hosts.equiv @@ -518,6 +227,28 @@ and .I "/etc/sane.d" being searched (in this order). +.SH NOTES +.B saned +does +.I not +provide confidentiality when communicating with clients. If +.B saned +is exposed directly on the network, other users may be able to intercept +scanned images, or learn passwords for connecting to +.BR saned , +with little effort. Client systems should connect to +.B saned +through a secure tunnel to the server instead. +.PP +.B saned +is not a trusted program and should not run with root privileges. +.PP +Refer to +.I /usr/share/doc/libsane/saned/saned.install.md +for details on configuring +.B saned +as a service. + .SH "SEE ALSO" .BR sane (7), .BR scanimage (1), diff --git a/upstream/debian-unstable/man8/setpci.8 b/upstream/debian-unstable/man8/setpci.8 index f5195791..915ce275 100644 --- a/upstream/debian-unstable/man8/setpci.8 +++ b/upstream/debian-unstable/man8/setpci.8 @@ -1,4 +1,4 @@ -.TH setpci 8 "01 May 2023" "pciutils-3.10.0" "The PCI Utilities" +.TH setpci 8 "05 April 2024" "pciutils-3.12.0" "The PCI Utilities" .SH NAME setpci \- configure PCI devices .SH SYNOPSIS @@ -135,7 +135,7 @@ are hexadecimal numbers. In the latter case, only the bits corresponding to bina ones in the \fImask\fP are changed (technically, this is a read-modify-write operation). .PP -There are several ways how to identity a register: +There are several ways to identify a register: .IP \(bu Tell its address in hexadecimal. .IP \(bu diff --git a/upstream/debian-unstable/man8/shutdown.8 b/upstream/debian-unstable/man8/shutdown.8 index fa4aafcf..9830273b 100644 --- a/upstream/debian-unstable/man8/shutdown.8 +++ b/upstream/debian-unstable/man8/shutdown.8 @@ -1,5 +1,5 @@ '\" t -.TH "SHUTDOWN" "8" "" "systemd 255" "shutdown" +.TH "SHUTDOWN" "8" "" "systemd 256~rc3" "shutdown" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -120,7 +120,4 @@ command in previous init systems (including sysvinit) defaulted to single\-user instead\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemctl\fR(1), -\fBhalt\fR(8), -\fBwall\fR(1) +\fBsystemd\fR(1), \fBsystemctl\fR(1), \fBhalt\fR(8), \fBwall\fR(1) diff --git a/upstream/debian-unstable/man8/sln.8 b/upstream/debian-unstable/man8/sln.8 index 81d9078e..d375cdaf 100644 --- a/upstream/debian-unstable/man8/sln.8 +++ b/upstream/debian-unstable/man8/sln.8 @@ -2,7 +2,7 @@ .\" .\" SPDX-License-Identifier: Linux-man-pages-copyleft .\" -.TH sln 8 2023-01-07 "Linux man-pages 6.05.01" +.TH sln 8 2024-05-02 "Linux man-pages 6.8" .SH NAME sln \- create symbolic links .SH SYNOPSIS @@ -20,13 +20,13 @@ program, it is statically linked. This means that if for some reason the dynamic linker is not working, .B sln can be used to make symbolic links to dynamic libraries. -.PP +.P The command line has two forms. In the first form, it creates .I dest as a new symbolic link to .IR source . -.PP +.P In the second form, .I filelist is a list of space-separated pathname pairs, @@ -34,7 +34,7 @@ and the effect is as if .B sln was executed once for each line of the file, with the two pathnames as the arguments. -.PP +.P The .B sln program supports no command-line options. diff --git a/upstream/debian-unstable/man8/smbpasswd.8 b/upstream/debian-unstable/man8/smbpasswd.8 index d0e69d51..7fb72039 100644 --- a/upstream/debian-unstable/man8/smbpasswd.8 +++ b/upstream/debian-unstable/man8/smbpasswd.8 @@ -2,12 +2,12 @@ .\" Title: smbpasswd .\" Author: [see the "AUTHOR" section] .\" Generator: DocBook XSL Stylesheets vsnapshot <http://docbook.sf.net/> -.\" Date: 02/19/2024 +.\" Date: 05/29/2024 .\" Manual: System Administration tools -.\" Source: Samba 4.19.5-Debian +.\" Source: Samba 4.20.1-Debian .\" Language: English .\" -.TH "SMBPASSWD" "8" "02/19/2024" "Samba 4\&.19\&.5\-Debian" "System Administration tools" +.TH "SMBPASSWD" "8" "05/29/2024" "Samba 4\&.20\&.1\-Debian" "System Administration tools" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -314,7 +314,7 @@ file and neglecting to allow "localhost" access to the smbd\&. In addition, the smbpasswd command is only useful if Samba has been set up to use encrypted passwords\&. .SH "VERSION" .PP -This man page is part of version 4\&.19\&.5\-Debian of the Samba suite\&. +This man page is part of version 4\&.20\&.1\-Debian of the Samba suite\&. .SH "SEE ALSO" .PP \fBsmbpasswd\fR(5), diff --git a/upstream/debian-unstable/man8/ss.8 b/upstream/debian-unstable/man8/ss.8 index 073e9f03..e23af826 100644 --- a/upstream/debian-unstable/man8/ss.8 +++ b/upstream/debian-unstable/man8/ss.8 @@ -24,6 +24,9 @@ Output version information. .B \-H, \-\-no-header Suppress header line. .TP +.B \-Q, \-\-no-queues +Suppress sending and receiving queue columns. +.TP .B \-O, \-\-oneline Print each socket's data on a single line. .TP @@ -40,6 +43,10 @@ established connections) sockets. .B \-l, \-\-listening Display only listening sockets (these are omitted by default). .TP +.B \-B, \-\-bound-inactive +Display only TCP bound but inactive (not listening, connecting, etc.) sockets +(these are omitted by default). +.TP .B \-o, \-\-options Show timer information. For TCP protocol, the output format is: .RS @@ -419,6 +426,12 @@ to FILE after applying filters. If FILE is - stdout is used. Read filter information from FILE. Each line of FILE is interpreted like single command line option. If FILE is - stdin is used. .TP +.B \-\-bpf-maps +Pretty-print all the BPF socket-local data entries for each socket. +.TP +.B \-\-bpf-map-id=MAP_ID +Pretty-print the BPF socket-local data entries for the requested map ID. Can be used more than once. +.TP .B FILTER := [ state STATE-FILTER ] [ EXPRESSION ] Please take a look at the official documentation for details regarding filters. @@ -456,6 +469,9 @@ states except for - opposite to .B bucket +.B bound-inactive +- bound but otherwise inactive sockets (not listening, connecting, etc.) + .SH EXPRESSION .B EXPRESSION diff --git a/upstream/debian-unstable/man8/systemd-ask-password-console.service.8 b/upstream/debian-unstable/man8/systemd-ask-password-console.service.8 index fa9566e6..11623084 100644 --- a/upstream/debian-unstable/man8/systemd-ask-password-console.service.8 +++ b/upstream/debian-unstable/man8/systemd-ask-password-console.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-ASK\-PASSWORD\-CONSOLE\&.SERVICE" "8" "" "systemd 255" "systemd-ask-password-console.service" +.TH "SYSTEMD\-ASK\-PASSWORD\-CONSOLE\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-ask-password-console.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -23,13 +23,18 @@ systemd-ask-password-console.service, systemd-ask-password-console.path, systemd-ask-password-wall.service, systemd-ask-password-wall.path \- Query the user for system passwords on the console and via wall .SH "SYNOPSIS" .PP +.RS 4 systemd\-ask\-password\-console\&.service -.PP +.RE +.RS 4 systemd\-ask\-password\-console\&.path -.PP +.RE +.RS 4 systemd\-ask\-password\-wall\&.service -.PP +.RE +.RS 4 systemd\-ask\-password\-wall\&.path +.RE .SH "DESCRIPTION" .PP systemd\-ask\-password\-console\&.service @@ -51,9 +56,7 @@ or command line parameters\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd-tty-ask-password-agent\fR(1), -\fBwall\fR(1) +\fBsystemd\fR(1), \fBsystemd-tty-ask-password-agent\fR(1), \fBwall\fR(1) .SH "NOTES" .IP " 1." 4 developer documentation diff --git a/upstream/debian-unstable/man8/systemd-backlight@.service.8 b/upstream/debian-unstable/man8/systemd-backlight@.service.8 index 8d42dc12..24d20739 100644 --- a/upstream/debian-unstable/man8/systemd-backlight@.service.8 +++ b/upstream/debian-unstable/man8/systemd-backlight@.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-BACKLIGHT@\&.SERVICE" "8" "" "systemd 255" "systemd-backlight@.service" +.TH "SYSTEMD\-BACKLIGHT@\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-backlight@.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -33,13 +33,22 @@ load [backlight|leds]:DEVICE .SH "DESCRIPTION" .PP systemd\-backlight@\&.service -is a service that restores the display backlight brightness at early boot and saves it at shutdown\&. On disk, the backlight brightness is stored in -/var/lib/systemd/backlight/\&. During loading, if the udev property -\fBID_BACKLIGHT_CLAMP\fR -is not set to false, the brightness is clamped to a value of at least 1 or 5% of maximum brightness, whichever is greater\&. The percentage can be adjusted by specifying a percentage (needs to be suffixed with +is a service that restores the brightness of a display backlight or LED (e\&.g\&. keyboard backlight) device at early boot, and saves it at shutdown\&. The brightness is stored in +/var/lib/systemd/backlight/\&. +.PP +On restoring brightness of a display backlight device, +\fBsystemd\-backlight\fR +reads +\fIID_BACKLIGHT_CLAMP\fR +udev property, that takes a boolean value or a percentage (needs to be suffixed with "%", e\&.g\&. -"30%") to the property -\fBID_BACKLIGHT_CLAMP\fR\&. +"30%")\&. When a percentage is specified, the saved brightness is clamped to a value of at least 1 or the specified percentage of the maximum brightness, whichever is greater\&. When unset or set to true, the brightness is clamped in the same way with percentage 5%\&. When false, the saved brightness will not be clamped, and loaded as is\&. +.PP +On restoring brightness of a LED device, +\fBsystemd\-backlight\fR +reads +\fIID_LEDS_CLAMP\fR +udev property, that also takes a boolean value or a percentage\&. When a percentage is specified, the saved brightness is clamped to the specified percentage of the maximum brightness\&. When set to true, the brightness is clamped in the same way with percentage 5%\&. When unset or set to false, the saved brightness will not be clamped, and loaded as is\&. .SH "KERNEL COMMAND LINE" .PP systemd\-backlight diff --git a/upstream/debian-unstable/man8/systemd-battery-check.service.8 b/upstream/debian-unstable/man8/systemd-battery-check.service.8 index 3dcd7676..b40e8b1e 100644 --- a/upstream/debian-unstable/man8/systemd-battery-check.service.8 +++ b/upstream/debian-unstable/man8/systemd-battery-check.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-BATTERY\-CHECK\&.SERVICE" "8" "" "systemd 255" "systemd-battery-check" +.TH "SYSTEMD\-BATTERY\-CHECK\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-battery-check" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -53,7 +53,7 @@ On success (running on AC power or battery capacity greater than 5%), 0 is retur .PP The following variables are understood: .PP -\fIsystemd\&.battery\-check=\fR\fI\fIBOOL\fR\fR +\fIsystemd\&.battery_check=\fR\fI\fIBOOL\fR\fR .RS 4 Takes a boolean\&. If specified with false, \fBsystemd\-battery\-check\fR diff --git a/upstream/debian-unstable/man8/systemd-binfmt.service.8 b/upstream/debian-unstable/man8/systemd-binfmt.service.8 index da878c7a..66522aa7 100644 --- a/upstream/debian-unstable/man8/systemd-binfmt.service.8 +++ b/upstream/debian-unstable/man8/systemd-binfmt.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-BINFMT\&.SERVICE" "8" "" "systemd 255" "systemd-binfmt.service" +.TH "SYSTEMD\-BINFMT\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-binfmt.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -69,6 +69,4 @@ Print a short version string and exit\&. .RE .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBbinfmt.d\fR(5), -\fBwine\fR(8) +\fBsystemd\fR(1), \fBbinfmt.d\fR(5), \fBwine\fR(8) diff --git a/upstream/debian-unstable/man8/systemd-bless-boot-generator.8 b/upstream/debian-unstable/man8/systemd-bless-boot-generator.8 index 462e7d90..25324133 100644 --- a/upstream/debian-unstable/man8/systemd-bless-boot-generator.8 +++ b/upstream/debian-unstable/man8/systemd-bless-boot-generator.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-BLESS\-BOOT\-GENERATOR" "8" "" "systemd 255" "systemd-bless-boot-generator" +.TH "SYSTEMD\-BLESS\-BOOT\-GENERATOR" "8" "" "systemd 256~rc3" "systemd-bless-boot-generator" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -37,6 +37,4 @@ implements \fBsystemd.generator\fR(7)\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd-bless-boot.service\fR(8), -\fBsystemd-boot\fR(7) +\fBsystemd\fR(1), \fBsystemd-bless-boot.service\fR(8), \fBsystemd-boot\fR(7) diff --git a/upstream/debian-unstable/man8/systemd-bless-boot.service.8 b/upstream/debian-unstable/man8/systemd-bless-boot.service.8 index fc71f4cb..e2f12124 100644 --- a/upstream/debian-unstable/man8/systemd-bless-boot.service.8 +++ b/upstream/debian-unstable/man8/systemd-bless-boot.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-BLESS\-BOOT\&.SERVICE" "8" "" "systemd 255" "systemd-bless-boot.service" +.TH "SYSTEMD\-BLESS\-BOOT\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-bless-boot.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -38,7 +38,7 @@ style boot counting is used\&. Internally, the service operates based on the \fILoaderBootCountPath\fR EFI variable (of the vendor UUID -\fB4a67b082\-0a4c\-41cf\-b6c7\-440b29bb8c4\fR), which is passed from the boot loader to the OS\&. It contains a file system path (relative to the EFI system partition) of the +\fB4a67b082\-0a4c\-41cf\-b6c7\-440b29bb8c4f\fR), which is passed from the boot loader to the OS\&. It contains a file system path (relative to the EFI system partition) of the \m[blue]\fBBoot Loader Specification\fR\m[]\&\s-2\u[1]\d\s+2 compliant boot loader entry file or unified kernel image file that was used to boot up the system\&. \fBsystemd\-bless\-boot\&.service\fR @@ -108,9 +108,7 @@ Print a short version string and exit\&. .RE .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd-boot\fR(7), -\fBsystemd.special\fR(7) +\fBsystemd\fR(1), \fBsystemd-boot\fR(7), \fBsystemd.special\fR(7) .SH "NOTES" .IP " 1." 4 Boot Loader Specification diff --git a/upstream/debian-unstable/man8/systemd-boot-check-no-failures.service.8 b/upstream/debian-unstable/man8/systemd-boot-check-no-failures.service.8 index d3edc66b..4a5705c4 100644 --- a/upstream/debian-unstable/man8/systemd-boot-check-no-failures.service.8 +++ b/upstream/debian-unstable/man8/systemd-boot-check-no-failures.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-BOOT\-CHECK\-NO\-FAILURES\&.SERVICE" "8" "" "systemd 255" "systemd-boot-check-no-failures.service" +.TH "SYSTEMD\-BOOT\-CHECK\-NO\-FAILURES\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-boot-check-no-failures.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -36,5 +36,4 @@ Note that due the simple nature of this check this service is probably not suita boot\-complete\&.target\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd.special\fR(7) +\fBsystemd\fR(1), \fBsystemd.special\fR(7) diff --git a/upstream/debian-unstable/man8/systemd-boot-random-seed.service.8 b/upstream/debian-unstable/man8/systemd-boot-random-seed.service.8 index 8fb4d033..a33c8f0d 100644 --- a/upstream/debian-unstable/man8/systemd-boot-random-seed.service.8 +++ b/upstream/debian-unstable/man8/systemd-boot-random-seed.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-BOOT\-RANDOM\-SEED\&.SERVICE" "8" "" "systemd 255" "systemd-boot-random-seed.service" +.TH "SYSTEMD\-BOOT\-RANDOM\-SEED\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-boot-random-seed.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -100,12 +100,7 @@ service updates the boot loader random seed with a new value derived from the ke This logic should ensure that the kernel\*(Aqs entropy pool is seeded during earliest bool already, if possible, but the highest quality entropy is propagated back to both on\-disk seeds\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBrandom\fR(4), -\fBbootctl\fR(1), -\fBsystemd-boot\fR(7), -\fBsystemd-stub\fR(7), -\fBsystemd-random-seed.service\fR(8) +\fBsystemd\fR(1), \fBrandom\fR(4), \fBbootctl\fR(1), \fBsystemd-boot\fR(7), \fBsystemd-stub\fR(7), \fBsystemd-random-seed.service\fR(8) .SH "NOTES" .IP " 1." 4 Boot Loader Interface diff --git a/upstream/debian-unstable/man8/systemd-bsod.service.8 b/upstream/debian-unstable/man8/systemd-bsod.service.8 index 0c1fc877..781f8f6f 100644 --- a/upstream/debian-unstable/man8/systemd-bsod.service.8 +++ b/upstream/debian-unstable/man8/systemd-bsod.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-BSOD\&.SERVICE" "8" "" "systemd 255" "systemd-bsod" +.TH "SYSTEMD\-BSOD\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-bsod" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -20,12 +20,12 @@ .\" * MAIN CONTENT STARTS HERE * .\" ----------------------------------------------------------------- .SH "NAME" -systemd-bsod.service, systemd-bsod \- Displays boot\-time emergency log message in full screen\&. +systemd-bsod.service, systemd-bsod \- Displays boot\-time emergency log message in full screen .SH "SYNOPSIS" .PP systemd\-bsod\&.service -.HP \w'\fBsystemd\-bsod\fR\ 'u -\fBsystemd\-bsod\fR [OPTIONS...] +.HP \w'\fB/usr/lib/systemd/systemd\-bsod\fR\ 'u +\fB/usr/lib/systemd/systemd\-bsod\fR [OPTIONS...] .SH "DESCRIPTION" .PP systemd\-bsod\&.service @@ -53,6 +53,17 @@ waits continuously for changes in the journal if it doesn\*(Aqt find any emergen .sp Added in version 255\&. .RE +.PP +\fB\-\-tty=\fR\fB\fR +.RS 4 +Specify the TTY to output to\&. By default +\fBsystemd\-bsod\fR +will automatically find a free VT to display the message on\&. If this option is specified a TTY may be selected explicitly\&. Use +\fB\-\-tty=/dev/tty\fR +to direct output to the terminal the command is invoked on\&. +.sp +Added in version 256\&. +.RE .SH "EXIT STATUS" .PP On success (displaying the journal message successfully), 0 is returned, a non\-zero failure code otherwise\&. diff --git a/upstream/debian-unstable/man8/systemd-coredump.8 b/upstream/debian-unstable/man8/systemd-coredump.8 index 842c5fc9..9167d1d9 100644 --- a/upstream/debian-unstable/man8/systemd-coredump.8 +++ b/upstream/debian-unstable/man8/systemd-coredump.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-COREDUMP" "8" "" "systemd 255" "systemd-coredump" +.TH "SYSTEMD\-COREDUMP" "8" "" "systemd 256~rc3" "systemd-coredump" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -464,14 +464,7 @@ user\&.coredump\&.exe="/usr/lib64/firefox/firefox" .sp .SH "SEE ALSO" .PP -\fBcoredump.conf\fR(5), -\fBcoredumpctl\fR(1), -\fBsystemd-journald.service\fR(8), -\fBsystemd-tmpfiles\fR(8), -\fBcore\fR(5), -\fBsysctl.d\fR(5), -\fBsystemd-sysctl.service\fR(8), -\m[blue]\fBsystemd Coredump Handling\fR\m[]\&\s-2\u[1]\d\s+2 +\fBcoredump.conf\fR(5), \fBcoredumpctl\fR(1), \fBsystemd-journald.service\fR(8), \fBsystemd-tmpfiles\fR(8), \fBcore\fR(5), \fBsysctl.d\fR(5), \fBsystemd-sysctl.service\fR(8), \m[blue]\fBsystemd Coredump Handling\fR\m[]\&\s-2\u[1]\d\s+2 .SH "NOTES" .IP " 1." 4 systemd Coredump Handling diff --git a/upstream/debian-unstable/man8/systemd-cryptsetup-generator.8 b/upstream/debian-unstable/man8/systemd-cryptsetup-generator.8 index fda1024a..6ef0e12d 100644 --- a/upstream/debian-unstable/man8/systemd-cryptsetup-generator.8 +++ b/upstream/debian-unstable/man8/systemd-cryptsetup-generator.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-CRYPTSETUP\-GENERATOR" "8" "" "systemd 255" "systemd-cryptsetup-generator" +.TH "SYSTEMD\-CRYPTSETUP\-GENERATOR" "8" "" "systemd 256~rc3" "systemd-cryptsetup-generator" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -223,9 +223,4 @@ Added in version 208\&. .RE .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBcrypttab\fR(5), -\fBsystemd-cryptsetup@.service\fR(8), -\fBsystemd-cryptenroll\fR(1), -\fBcryptsetup\fR(8), -\fBsystemd-fstab-generator\fR(8) +\fBsystemd\fR(1), \fBcrypttab\fR(5), \fBsystemd-cryptsetup@.service\fR(8), \fBsystemd-cryptenroll\fR(1), \fBcryptsetup\fR(8), \fBsystemd-fstab-generator\fR(8) diff --git a/upstream/debian-unstable/man8/systemd-cryptsetup.8 b/upstream/debian-unstable/man8/systemd-cryptsetup.8 index cfa85bc0..3af52b7e 100644 --- a/upstream/debian-unstable/man8/systemd-cryptsetup.8 +++ b/upstream/debian-unstable/man8/systemd-cryptsetup.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-CRYPTSETUP" "8" "" "systemd 255" "systemd-cryptsetup" +.TH "SYSTEMD\-CRYPTSETUP" "8" "" "systemd 256~rc3" "systemd-cryptsetup" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -37,9 +37,9 @@ is used to set up (with \fBattach\fR) and tear down (with \fBdetach\fR) access to an encrypted block device\&. It is primarily used via systemd\-cryptsetup@\&.service -during early boot, but may also be be called manually\&. The positional arguments +during early boot, but may also be called manually\&. The positional arguments \fIVOLUME\fR, -\fISOURCEDEVICE\fR, +\fISOURCE\-DEVICE\fR, \fIKEY\-FILE\fR, and \fICRYPTTAB\-OPTIONS\fR have the same meaning as the fields in @@ -136,14 +136,55 @@ option is set\&. .RE .PP If no suitable key may be acquired via any of the mechanisms describes above, volume activation fails\&. +.SH "CREDENTIALS" +.PP +\fBsystemd\-cryptsetup\fR +supports the service credentials logic as implemented by +\fIImportCredential=\fR/\fILoadCredential=\fR/\fISetCredential=\fR +(see +\fBsystemd.exec\fR(5) +for details)\&. The following credentials are used by +"systemd\-crypsetup@root\&.service" +(generated by +\fBsystemd\-gpt\-auto\-generator\fR) when passed in: +.PP +\fIcryptsetup\&.passphrase\fR +.RS 4 +This credential specifies the passphrase of the LUKS volume\&. +.sp +Added in version 256\&. +.RE +.PP +\fIcryptsetup\&.tpm2\-pin\fR +.RS 4 +This credential specifies the TPM pin\&. +.sp +Added in version 256\&. +.RE +.PP +\fIcryptsetup\&.fido2\-pin\fR +.RS 4 +This credential specifies the FIDO2 token pin\&. +.sp +Added in version 256\&. +.RE +.PP +\fIcryptsetup\&.pkcs11\-pin\fR +.RS 4 +This credential specifies the PKCS11 token pin\&. +.sp +Added in version 256\&. +.RE +.PP +\fIcryptsetup\&.luks2\-pin\fR +.RS 4 +This credential specifies the PIN requested by generic LUKS2 token modules\&. +.sp +Added in version 256\&. +.RE .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd-cryptsetup-generator\fR(8), -\fBcrypttab\fR(5), -\fBsystemd-cryptenroll\fR(1), -\fBcryptsetup\fR(8), -\m[blue]\fBTPM2 PCR Measurements Made by systemd\fR\m[]\&\s-2\u[2]\d\s+2 +\fBsystemd\fR(1), \fBsystemd-cryptsetup-generator\fR(8), \fBcrypttab\fR(5), \fBsystemd-cryptenroll\fR(1), \fBcryptsetup\fR(8), \m[blue]\fBTPM2 PCR Measurements Made by systemd\fR\m[]\&\s-2\u[2]\d\s+2 .SH "NOTES" .IP " 1." 4 password agent logic diff --git a/upstream/debian-unstable/man8/systemd-debug-generator.8 b/upstream/debian-unstable/man8/systemd-debug-generator.8 index 7aa1b11a..1c6e5844 100644 --- a/upstream/debian-unstable/man8/systemd-debug-generator.8 +++ b/upstream/debian-unstable/man8/systemd-debug-generator.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-DEBUG\-GENERATOR" "8" "" "systemd 255" "systemd-debug-generator" +.TH "SYSTEMD\-DEBUG\-GENERATOR" "8" "" "systemd 256~rc3" "systemd-debug-generator" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -60,13 +60,17 @@ option is specified, the debug shell service "debug\-shell\&.service" is pulled into the boot transaction and a debug shell will be spawned during early boot\&. By default, /dev/tty9 -is used, but a specific tty can also be set, either with or without the +is used, but a specific tty can also be specified, either with or without the +/dev/ +prefix\&. To set the tty to use without enabling the debug shell, the +\fBsystemd\&.default_debug_tty=\fR +option can be used which also takes a tty with or without the /dev/ prefix\&. Note that the shell may also be turned on persistently by enabling it with \fBsystemctl\fR(1)\*(Aqs \fBenable\fR command\&. -\fBrd\&.systemd\&.debug_shell=\fR +\fBrd\&.systemd\&.debug_shell\fR is honored only by initial RAM disk (initrd) while \fBsystemd\&.debug_shell\fR is honored only in the main system\&. @@ -74,8 +78,31 @@ is honored only in the main system\&. systemd\-debug\-generator implements \fBsystemd.generator\fR(7)\&. +.SH "SYSTEM CREDENTIALS" +.PP +\fIsystemd\&.extra\-unit\&.*\fR +.RS 4 +Credentials prefixed with +"systemd\&.extra\-unit\&." +specify additional units to add to the final system\&. Note that these additional units are added to both the initrd and the final system\&. +\fIConditionPathExists=!/etc/initrd\-release\fR +can be used to make sure the unit is conditioned out in the initrd\&. Note that this can also be used to mask units, by simply specifying an empty value\&. +.sp +Added in version 256\&. +.RE +.PP +\fIsystemd\&.unit\-dropin\&.*\fR +.RS 4 +Credentials prefixed with +"systemd\&.unit\-dropin\&." +add drop\-ins for the corresponding units in the final system\&. Each credential must be suffixed with the full unit name including the unit extension\&. Its contents must be a valid unit drop\-in file\&. Optionally, the unit name may be followed with +"~", followed by the drop\-in name without the +"\&.conf" +suffix\&. If not specified, the name of the generated drop\-in will be +"50\-credential\&.conf"\&. Note that these additional drop\-ins are added to both the initrd and the final system\&. +.sp +Added in version 256\&. +.RE .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemctl\fR(1), -\fBkernel-command-line\fR(7) +\fBsystemd\fR(1), \fBsystemctl\fR(1), \fBkernel-command-line\fR(7) diff --git a/upstream/debian-unstable/man8/systemd-environment-d-generator.8 b/upstream/debian-unstable/man8/systemd-environment-d-generator.8 index 2e7e31ab..7afa56cf 100644 --- a/upstream/debian-unstable/man8/systemd-environment-d-generator.8 +++ b/upstream/debian-unstable/man8/systemd-environment-d-generator.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-ENVIRONMENT\-D\-GENERATOR" "8" "" "systemd 255" "systemd-environment-d-generator" +.TH "SYSTEMD\-ENVIRONMENT\-D\-GENERATOR" "8" "" "systemd 256~rc3" "systemd-environment-d-generator" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -36,7 +36,4 @@ configuration files and passes it to the user manager instance\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemctl\fR(1), -\fBsystemd.environment-generator\fR(7), -\fBsystemd.generator\fR(7) +\fBsystemd\fR(1), \fBsystemctl\fR(1), \fBsystemd.environment-generator\fR(7), \fBsystemd.generator\fR(7) diff --git a/upstream/debian-unstable/man8/systemd-fsck@.service.8 b/upstream/debian-unstable/man8/systemd-fsck@.service.8 index 5c1cbe90..18d40eb1 100644 --- a/upstream/debian-unstable/man8/systemd-fsck@.service.8 +++ b/upstream/debian-unstable/man8/systemd-fsck@.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-FSCK@\&.SERVICE" "8" "" "systemd 255" "systemd-fsck@.service" +.TH "SYSTEMD\-FSCK@\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-fsck@.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -23,13 +23,18 @@ systemd-fsck@.service, systemd-fsck-root.service, systemd-fsck-usr.service, systemd-fsck \- File system checker logic .SH "SYNOPSIS" .PP +.RS 4 systemd\-fsck@\&.service -.PP +.RE +.RS 4 systemd\-fsck\-root\&.service -.PP +.RE +.RS 4 systemd\-fsck\-usr\&.service -.PP +.RE +.RS 4 /usr/lib/systemd/systemd\-fsck +.RE .SH "DESCRIPTION" .PP systemd\-fsck@\&.service, @@ -116,14 +121,4 @@ Added in version 213\&. .RE .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBfsck\fR(8), -\fBsystemd-quotacheck.service\fR(8), -\fBfsck.btrfs\fR(8), -\fBfsck.cramfs\fR(8), -\fBfsck.ext4\fR(8), -\fBfsck.fat\fR(8), -\fBfsck.hfsplus\fR(8), -\fBfsck.minix\fR(8), -\fBfsck.ntfs\fR(8), -\fBfsck.xfs\fR(8) +\fBsystemd\fR(1), \fBfsck\fR(8), \fBsystemd-quotacheck.service\fR(8), \fBfsck.btrfs\fR(8), \fBfsck.cramfs\fR(8), \fBfsck.ext4\fR(8), \fBfsck.fat\fR(8), \fBfsck.hfsplus\fR(8), \fBfsck.minix\fR(8), \fBfsck.ntfs\fR(8), \fBfsck.xfs\fR(8) diff --git a/upstream/debian-unstable/man8/systemd-fsckd.service.8 b/upstream/debian-unstable/man8/systemd-fsckd.service.8 deleted file mode 100644 index d06646ac..00000000 --- a/upstream/debian-unstable/man8/systemd-fsckd.service.8 +++ /dev/null @@ -1,107 +0,0 @@ -'\" t -.TH "SYSTEMD\-FSCKD\&.SERVICE" "8" "" "systemd 255" "systemd-fsckd.service" -.\" ----------------------------------------------------------------- -.\" * Define some portability stuff -.\" ----------------------------------------------------------------- -.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -.\" http://bugs.debian.org/507673 -.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html -.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -.ie \n(.g .ds Aq \(aq -.el .ds Aq ' -.\" ----------------------------------------------------------------- -.\" * set default formatting -.\" ----------------------------------------------------------------- -.\" disable hyphenation -.nh -.\" disable justification (adjust text to left margin only) -.ad l -.\" ----------------------------------------------------------------- -.\" * MAIN CONTENT STARTS HERE * -.\" ----------------------------------------------------------------- -.SH "NAME" -systemd-fsckd.service, systemd-fsckd.socket, systemd-fsckd \- File system check progress reporting -.SH "SYNOPSIS" -.PP -systemd\-fsckd\&.service -.PP -systemd\-fsckd\&.socket -.PP -/usr/lib/systemd/systemd\-fsckd -.SH "DESCRIPTION" -.PP -systemd\-fsckd\&.service -is a service responsible for receiving file system check progress, and communicating some consolidated data to console and plymouth (if running)\&. It also handles possible check cancellations\&. -.PP -\fBsystemd\-fsckd\fR -receives messages about file system check progress from -\fBfsck\fR -through an UNIX domain socket\&. It can display the progress of the least advanced fsck as well as the total number of devices being checked in parallel to the console\&. It will also send progress messages to plymouth\&. Both the raw data and translated messages are sent, so compiled plymouth themes can use the raw data to display custom messages, and scripted themes, not supporting i18n, can display the translated versions\&. -.PP -\fBsystemd\-fsckd\fR -will instruct plymouth to grab Control+C keypresses\&. When the key is pressed, running checks will be terminated\&. It will also cancel any newly connected fsck instances for the lifetime of -systemd\-fsckd\&. -.SH "PROTOCOL FOR COMMUNICATION WITH PLYMOUTH" -.PP -systemd\-fsckd -passes the following messages to the theme: -.PP -Progress update, sent as a plymouth update message: -"fsckd:<num_devices>:<progress>:<string>" -.PP -"<num_devices>" -.RS 4 -the current number of devices being checked (int) -.RE -.PP -"<progress>" -.RS 4 -the current minimum percentage of all devices being checking (float, from 0 to 100) -.RE -.PP -"<string>" -.RS 4 -a translated message ready to be displayed by the plymouth theme displaying the data above\&. It can be overridden by themes supporting i18n\&. -.RE -.PP -Cancel message, sent as a traditional plymouth message: -"fsckd\-cancel\-msg:<string>" -.PP -"<strings>" -.RS 4 -a translated string ready to be displayed by the plymouth theme indicating that Control+C can be used to cancel current checks\&. It can be overridden (matching only -"fsckd\-cancel\-msg" -prefix) by themes supporting i18n\&. -.RE -.SH "OPTIONS" -.PP -The following options are understood: -.PP -\fB\-h\fR, \fB\-\-help\fR -.RS 4 -Print a short help text and exit\&. -.RE -.PP -\fB\-\-version\fR -.RS 4 -Print a short version string and exit\&. -.RE -.SH "EXIT STATUS" -.PP -On success, 0 is returned, a non\-zero failure code otherwise\&. Note that the daemon stays idle for a while to accept new -fsck -connections before exiting\&. -.SH "SEE ALSO" -.PP -\fBsystemd\fR(1), -\fBsystemd-fsck\fR(8), -\fBfsck\fR(8), -\fBsystemd-quotacheck.service\fR(8), -\fBfsck.btrfs\fR(8), -\fBfsck.cramfs\fR(8), -\fBfsck.ext4\fR(8), -\fBfsck.fat\fR(8), -\fBfsck.hfsplus\fR(8), -\fBfsck.minix\fR(8), -\fBfsck.ntfs\fR(8), -\fBfsck.xfs\fR(8) diff --git a/upstream/debian-unstable/man8/systemd-fstab-generator.8 b/upstream/debian-unstable/man8/systemd-fstab-generator.8 index 3b6f3d17..61d06d09 100644 --- a/upstream/debian-unstable/man8/systemd-fstab-generator.8 +++ b/upstream/debian-unstable/man8/systemd-fstab-generator.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-FSTAB\-GENERATOR" "8" "" "systemd 255" "systemd-fstab-generator" +.TH "SYSTEMD\-FSTAB\-GENERATOR" "8" "" "systemd 256~rc3" "systemd-fstab-generator" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -356,14 +356,7 @@ Added in version 254\&. .RE .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBfstab\fR(5), -\fBsystemd.mount\fR(5), -\fBsystemd.swap\fR(5), -\fBsystemd-cryptsetup-generator\fR(8), -\fBsystemd-gpt-auto-generator\fR(8), -\fBkernel-command-line\fR(7), -\m[blue]\fBKnown Environment Variables\fR\m[]\&\s-2\u[1]\d\s+2 +\fBsystemd\fR(1), \fBfstab\fR(5), \fBsystemd.mount\fR(5), \fBsystemd.swap\fR(5), \fBsystemd-cryptsetup-generator\fR(8), \fBsystemd-gpt-auto-generator\fR(8), \fBkernel-command-line\fR(7), \m[blue]\fBKnown Environment Variables\fR\m[]\&\s-2\u[1]\d\s+2 .SH "NOTES" .IP " 1." 4 Known Environment Variables diff --git a/upstream/debian-unstable/man8/systemd-getty-generator.8 b/upstream/debian-unstable/man8/systemd-getty-generator.8 index a14b9abc..e57b7a32 100644 --- a/upstream/debian-unstable/man8/systemd-getty-generator.8 +++ b/upstream/debian-unstable/man8/systemd-getty-generator.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-GETTY\-GENERATOR" "8" "" "systemd 255" "systemd-getty-generator" +.TH "SYSTEMD\-GETTY\-GENERATOR" "8" "" "systemd 256~rc3" "systemd-getty-generator" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -88,10 +88,7 @@ Added in version 254\&. .RE .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBkernel-command-line\fR(7), -\fBsystemd.system-credentials\fR(7), -\fBagetty\fR(8) +\fBsystemd\fR(1), \fBkernel-command-line\fR(7), \fBsystemd.system-credentials\fR(7), \fBagetty\fR(8) .SH "NOTES" .IP " 1." 4 Container diff --git a/upstream/debian-unstable/man8/systemd-gpt-auto-generator.8 b/upstream/debian-unstable/man8/systemd-gpt-auto-generator.8 index 2282d2fe..2a4a5416 100644 --- a/upstream/debian-unstable/man8/systemd-gpt-auto-generator.8 +++ b/upstream/debian-unstable/man8/systemd-gpt-auto-generator.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-GPT\-AUTO\-GENERATOR" "8" "" "systemd 255" "systemd-gpt-auto-generator" +.TH "SYSTEMD\-GPT\-AUTO\-GENERATOR" "8" "" "systemd 256~rc3" "systemd-gpt-auto-generator" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -31,12 +31,19 @@ is a unit generator that automatically discovers the root partition, /home/, /srv/, /var/, -/var/tmp/, the EFI System Partition, the Extended Boot Loader Partition, and swap partitions and creates mount and swap units for them, based on the partition type GUIDs of GUID partition tables (GPT)\&. See +/var/tmp/, the EFI System Partition (ESP), the Extended Boot Loader Partition (XBOOTLDR), and swap partitions and creates mount and swap units for them, based on the partition type GUIDs of GUID partition tables (GPT)\&. See \m[blue]\fBUEFI Specification\fR\m[]\&\s-2\u[1]\d\s+2, chapter 5 for more details\&. It implements the \m[blue]\fBDiscoverable Partitions Specification\fR\m[]\&\s-2\u[2]\d\s+2\&. .PP Note that this generator has no effect on non\-GPT systems\&. It will also not create mount point configuration for directories which already contain files or if the mount point is explicitly configured in -\fBfstab\fR(5)\&. If the units this generator creates are overridden, for example by units in directories with higher precedence, drop\-ins and additional dependencies created by this generator might still be used\&. +\fBfstab\fR(5)\&. Additionally no unit will be created for the ESP or the XBOOTLDR partition if mount entries are found in the +/boot/ +or +/efi/ +hierarchies in +\fBfstab\fR(5)\&. +.PP +If the units this generator creates are overridden, for example by units in directories with higher precedence, drop\-ins and additional dependencies created by this generator might still be used\&. .PP This generator will only look for the root partition on the same physical disk where the EFI System Partition (ESP) is located\&. Note that support from the boot loader is required: the EFI variable \fILoaderDevicePartUUID\fR @@ -62,9 +69,11 @@ This generator looks for the partitions based on their partition type GUID\&. Th .B Table\ \&1.\ \&Partition Type GUIDs .TS allbox tab(:); -lB lB lB lB. +lB lB lB lB lB. T{ -Partition Type GUID +Partition Type +T}:T{ +GUID T}:T{ Name T}:T{ @@ -73,90 +82,108 @@ T}:T{ Explanation T} .T& -l l l l -l l l l -l l l l -l l l l -l l l l -l l l l -l l l l -l l l l -l l l l -l l l l. +l l l l l +l l l l l +l l l l l +l l l l l +l l l l l +l l l l l +l l l l l +l l l l l +l l l l l +l l l l l. T{ -\fBSD_GPT_ROOT_X86_64\fR \fB4f68bce3\-e8cd\-4db1\-96e7\-fbcaf984b709\fR +\fBSD_GPT_ROOT_X86_64\fR +T}:T{ +\fB4f68bce3\-e8cd\-4db1\-96e7\-fbcaf984b709\fR T}:T{ Root Partition (x86\-64) T}:T{ / T}:T{ -The first partition with this type UUID, located on the same disk as the ESP, is used as the root file system / on AMD64 / 64\-bit x86 systems\&. +The first partition with this type UUID, located on the same disk as the ESP used for booting, is used as the root file system / on AMD64 / 64\-bit x86 systems\&. T} T{ -\fBSD_GPT_ROOT_ARM64\fR \fBb921b045\-1df0\-41c3\-af44\-4c6f280d3fae\fR +\fBSD_GPT_ROOT_ARM64\fR +T}:T{ +\fBb921b045\-1df0\-41c3\-af44\-4c6f280d3fae\fR T}:T{ Root Partition (64\-bit ARM) T}:T{ / T}:T{ -The first partition with this type UUID, located on the same disk as the ESP, is used as the root file system / on AArch64 / 64\-bit ARM systems\&. +The first partition with this type UUID, located on the same disk as the ESP used for booting, is used as the root file system / on AArch64 / 64\-bit ARM systems\&. T} T{ \fBSD_GPT_ROOT_ALPHA\fR \fBSD_GPT_ROOT_ARC\fR \fBSD_GPT_ROOT_ARM\fR \fBSD_GPT_ROOT_ARM64\fR \fBSD_GPT_ROOT_IA64\fR \fBSD_GPT_ROOT_LOONGARCH64\fR \fBSD_GPT_ROOT_MIPS\fR \fBSD_GPT_ROOT_MIPS64\fR \fBSD_GPT_ROOT_MIPS_LE\fR \fBSD_GPT_ROOT_MIPS64_LE\fR \fBSD_GPT_ROOT_PARISC\fR \fBSD_GPT_ROOT_PPC\fR \fBSD_GPT_ROOT_PPC64\fR \fBSD_GPT_ROOT_PPC64_LE\fR \fBSD_GPT_ROOT_RISCV32\fR \fBSD_GPT_ROOT_RISCV64\fR \fBSD_GPT_ROOT_S390\fR \fBSD_GPT_ROOT_S390X\fR \fBSD_GPT_ROOT_TILEGX\fR \fBSD_GPT_ROOT_X86\fR \fBSD_GPT_ROOT_X86_64\fR \fBSD_GPT_USR_ALPHA\fR \fBSD_GPT_USR_ARC\fR \fBSD_GPT_USR_ARM\fR \fBSD_GPT_USR_IA64\fR \fBSD_GPT_USR_LOONGARCH64\fR \fBSD_GPT_USR_MIPS_LE\fR \fBSD_GPT_USR_MIPS64_LE\fR \fBSD_GPT_USR_PARISC\fR \fBSD_GPT_USR_PPC\fR \fBSD_GPT_USR_PPC64\fR \fBSD_GPT_USR_PPC64_LE\fR \fBSD_GPT_USR_RISCV32\fR \fBSD_GPT_USR_RISCV64\fR \fBSD_GPT_USR_S390\fR \fBSD_GPT_USR_S390X\fR \fBSD_GPT_USR_TILEGX\fR \fBSD_GPT_USR_X86\fR T}:T{ -root partitions for other architectures +\&... +T}:T{ +Root partitions for other architectures T}:T{ / T}:T{ -The first partition with the type UUID matching the architecture, located on the same disk as the ESP, is used as the root file system /\&. For the full list and constant values, see \m[blue]\fBDiscoverable Partitions Specification\fR\m[]\&\s-2\u[2]\d\s+2\&. +The first partition with the type UUID matching the architecture, located on the same disk as the ESP used for booting, is used as the root file system /\&. For the full list and constant values, see \m[blue]\fBDiscoverable Partitions Specification\fR\m[]\&\s-2\u[2]\d\s+2\&. T} T{ -\fBSD_GPT_HOME\fR \fB933ac7e1\-2eb4\-4f13\-b844\-0e14e2aef915\fR +\fBSD_GPT_HOME\fR +T}:T{ +\fB933ac7e1\-2eb4\-4f13\-b844\-0e14e2aef915\fR T}:T{ Home Partition T}:T{ /home/ T}:T{ -The first partition with this type UUID on the same disk as the ESP is mounted to /home/\&. +The first partition with this type UUID on the same disk as the root partition is mounted to /home/\&. T} T{ -\fBSD_GPT_SRV\fR \fB3b8f8425\-20e0\-4f3b\-907f\-1a25a76f98e8\fR +\fBSD_GPT_SRV\fR +T}:T{ +\fB3b8f8425\-20e0\-4f3b\-907f\-1a25a76f98e8\fR T}:T{ Server Data Partition T}:T{ /srv/ T}:T{ -The first partition with this type UUID on the same disk as the ESP is mounted to /srv/\&. +The first partition with this type UUID on the same disk as the root partition is mounted to /srv/\&. T} T{ -\fBSD_GPT_VAR\fR \fB4d21b016\-b534\-45c2\-a9fb\-5c16e091fd2d\fR +\fBSD_GPT_VAR\fR +T}:T{ +\fB4d21b016\-b534\-45c2\-a9fb\-5c16e091fd2d\fR T}:T{ Variable Data Partition T}:T{ /var/ T}:T{ -The first partition with this type UUID on the same disk as the ESP is mounted to /var/ \(em under the condition its partition UUID matches the first 128 bit of the HMAC\-SHA256 of the GPT type uuid of this partition keyed by the machine ID of the installation stored in \fBmachine-id\fR(5)\&. +The first partition with this type UUID on the same disk as the root partition is mounted to /var/ \(em under the condition its partition UUID matches the first 128 bit of the HMAC\-SHA256 of the GPT type uuid of this partition keyed by the machine ID of the installation stored in \fBmachine-id\fR(5)\&. T} T{ -\fBSD_GPT_TMP\fR \fB7ec6f557\-3bc5\-4aca\-b293\-16ef5df639d1\fR +\fBSD_GPT_TMP\fR +T}:T{ +\fB7ec6f557\-3bc5\-4aca\-b293\-16ef5df639d1\fR T}:T{ Temporary Data Partition T}:T{ /var/tmp/ T}:T{ -The first partition with this type UUID on the same disk as the ESP is mounted to /var/tmp/\&. +The first partition with this type UUID on the same disk as the root partition is mounted to /var/tmp/\&. T} T{ -\fBSD_GPT_SWAP\fR \fB0657fd6d\-a4ab\-43c4\-84e5\-0933c84b4f4f\fR +\fBSD_GPT_SWAP\fR +T}:T{ +\fB0657fd6d\-a4ab\-43c4\-84e5\-0933c84b4f4f\fR T}:T{ Swap T}:T{ n/a T}:T{ -All partitions with this type UUID on the same disk as the ESP are used as swap\&. +All partitions with this type UUID on the same disk as the root partition are used as swap\&. T} T{ -\fBSD_GPT_ESP\fR \fBc12a7328\-f81f\-11d2\-ba4b\-00a0c93ec93b\fR +\fBSD_GPT_ESP\fR +T}:T{ +\fBc12a7328\-f81f\-11d2\-ba4b\-00a0c93ec93b\fR T}:T{ EFI System Partition (ESP) T}:T{ @@ -165,7 +192,9 @@ T}:T{ The first partition with this type UUID located on the same disk as the root partition is mounted to /boot/ or /efi/, see below\&. T} T{ -\fBSD_GPT_XBOOTLDR\fR \fBbc13c2ff\-59e6\-4262\-a352\-b275fd6f7172\fR +\fBSD_GPT_XBOOTLDR\fR +T}:T{ +\fBbc13c2ff\-59e6\-4262\-a352\-b275fd6f7172\fR T}:T{ Extended Boot Loader Partition T}:T{ @@ -185,34 +214,42 @@ This generator understands the following attribute flags for partitions: .B Table\ \&2.\ \&Partition Attribute Flags .TS allbox tab(:); -lB lB lB. +lB lB lB lB. T{ Flag T}:T{ +Value +T}:T{ Applicable to T}:T{ Explanation T} .T& -l l l -l l l -l l l. +l l l l +l l l l +l l l l. T{ -\fBSD_GPT_FLAG_READ_ONLY\fR \fB0x1000000000000000\fR +\fBSD_GPT_FLAG_READ_ONLY\fR +T}:T{ +\fB0x1000000000000000\fR T}:T{ /, /home/, /srv/, /var/, /var/tmp/, Extended Boot Loader Partition T}:T{ Partition is mounted read\-only T} T{ -\fBSD_GPT_FLAG_NO_AUTO\fR \fB0x8000000000000000\fR +\fBSD_GPT_FLAG_NO_AUTO\fR +T}:T{ +\fB0x8000000000000000\fR T}:T{ /, /home/, /srv/, /var/, /var/tmp/, Extended Boot Loader Partition T}:T{ Partition is not mounted automatically T} T{ -\fBSD_GPT_FLAG_NO_BLOCK_IO_PROTOCOL\fR \fB0x0000000000000002\fR +\fBSD_GPT_FLAG_NO_BLOCK_IO_PROTOCOL\fR +T}:T{ +\fB0x0000000000000002\fR T}:T{ EFI System Partition (ESP) T}:T{ @@ -334,16 +371,7 @@ Added in version 254\&. .RE .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd.mount\fR(5), -\fBsystemd.swap\fR(5), -\fBsystemd-fstab-generator\fR(8), -\fBsystemd-cryptsetup@.service\fR(8), -\fBsystemd-pcrfs@.service\fR(8), -\fBmachine-id\fR(5), -\fBcryptsetup\fR(8), -\fBfstab\fR(5), -\fBbtrfs\fR(8) +\fBsystemd\fR(1), \fBsystemd.mount\fR(5), \fBsystemd.swap\fR(5), \fBsystemd-fstab-generator\fR(8), \fBsystemd-cryptsetup@.service\fR(8), \fBsystemd-pcrfs@.service\fR(8), \fBmachine-id\fR(5), \fBcryptsetup\fR(8), \fBfstab\fR(5), \fBbtrfs\fR(8) .SH "NOTES" .IP " 1." 4 UEFI Specification diff --git a/upstream/debian-unstable/man8/systemd-hibernate-resume-generator.8 b/upstream/debian-unstable/man8/systemd-hibernate-resume-generator.8 index 21c57e3f..1f05f4d8 100644 --- a/upstream/debian-unstable/man8/systemd-hibernate-resume-generator.8 +++ b/upstream/debian-unstable/man8/systemd-hibernate-resume-generator.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-HIBERNATE\-RESUME\-GENERATOR" "8" "" "systemd 255" "systemd-hibernate-resume-generator" +.TH "SYSTEMD\-HIBERNATE\-RESUME\-GENERATOR" "8" "" "systemd 256~rc3" "systemd-hibernate-resume-generator" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -27,12 +27,13 @@ systemd-hibernate-resume-generator \- Unit generator for resume= kernel paramete .SH "DESCRIPTION" .PP \fBsystemd\-hibernate\-resume\-generator\fR -is a generator that initiates the procedure to resume the system from hibernation\&. It creates the -\fBsystemd-hibernate-resume.service\fR(8) -unit according to the value of +is a generator that initiates the procedure to resume the system from hibernation\&. When \fBresume=\fR -parameter specified on the kernel command line, or the value of EFI variable -\fIHibernateLocation\fR, which will instruct the kernel to resume the system from the hibernation image on that device\&. +kernel command line option or +\fIHibernateLocation\fR +EFI variable is detected, it enables the +\fBsystemd-hibernate-resume.service\fR(8) +unit, which will instruct the kernel to resume the system from the hibernation image\&. .SH "KERNEL COMMAND LINE" .PP systemd\-hibernate\-resume\-generator @@ -77,6 +78,4 @@ Added in version 240\&. .RE .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd-hibernate-resume.service\fR(8), -\fBkernel-command-line\fR(7) +\fBsystemd\fR(1), \fBsystemd-hibernate-resume.service\fR(8), \fBkernel-command-line\fR(7) diff --git a/upstream/debian-unstable/man8/systemd-hibernate-resume.service.8 b/upstream/debian-unstable/man8/systemd-hibernate-resume.service.8 index 9117af69..d5109aca 100644 --- a/upstream/debian-unstable/man8/systemd-hibernate-resume.service.8 +++ b/upstream/debian-unstable/man8/systemd-hibernate-resume.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-HIBERNATE\-RESUME\&.SERVICE" "8" "" "systemd 255" "systemd-hibernate-resume.service" +.TH "SYSTEMD\-HIBERNATE\-RESUME\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-hibernate-resume.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -20,11 +20,13 @@ .\" * MAIN CONTENT STARTS HERE * .\" ----------------------------------------------------------------- .SH "NAME" -systemd-hibernate-resume.service, systemd-hibernate-resume \- Resume from hibernation +systemd-hibernate-resume.service, systemd-hibernate-clear.service, systemd-hibernate-resume \- Resume from hibernation .SH "SYNOPSIS" .PP systemd\-hibernate\-resume\&.service .PP +systemd\-hibernate\-clear\&.service +.PP /usr/lib/systemd/systemd\-hibernate\-resume .SH "DESCRIPTION" .PP @@ -33,14 +35,20 @@ initiates the resume from hibernation\&. .PP \fBsystemd\-hibernate\-resume\fR only supports the in\-kernel hibernation implementation, see -\m[blue]\fBSwap suspend\fR\m[]\&\s-2\u[1]\d\s+2\&. Internally, it works by writing the major:minor of specified device node to +\m[blue]\fBSwap suspend\fR\m[]\&\s-2\u[1]\d\s+2\&. Internally, it works by writing the major:minor of selected device node to /sys/power/resume, along with the offset in memory pages (/sys/power/resume_offset) if supported\&. .PP +The resume device node is either passed directly through arguments, or automatically acquired from kernel command line options and/or +\fIHibernateLocation\fR +EFI variable\&. The latter will normally be cleared by +systemd\-hibernate\-resume\&.service +on resumption\&. If a stale variable is detected, it would be cleared by +systemd\-hibernate\-clear\&.service\&. +.PP Failing to initiate a resume is not an error condition\&. It may mean that there was no resume image (e\&. g\&. if the system has been simply powered off and not hibernated)\&. In such cases, the boot is ordinarily continued\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd-hibernate-resume-generator\fR(8) +\fBsystemd\fR(1), \fBsystemd-hibernate-resume-generator\fR(8) .SH "NOTES" .IP " 1." 4 Swap suspend diff --git a/upstream/debian-unstable/man8/systemd-homed.service.8 b/upstream/debian-unstable/man8/systemd-homed.service.8 index b9f44fb1..6ddaf443 100644 --- a/upstream/debian-unstable/man8/systemd-homed.service.8 +++ b/upstream/debian-unstable/man8/systemd-homed.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-HOMED\&.SERVICE" "8" "" "systemd 255" "systemd-homed.service" +.TH "SYSTEMD\-HOMED\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-homed.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -46,6 +46,11 @@ systemd\-homed\&.service synthesizes a local user and group\&. These are made available to the system using the \m[blue]\fBUser/Group Record Lookup API via Varlink\fR\m[]\&\s-2\u[2]\d\s+2, and thus may be browsed with \fBuserdbctl\fR(1)\&. +.PP +systemd\-homed\&.service +also manages blob directories for each home directory it manages\&. See +\m[blue]\fBUser Record Blob Directories\fR\m[]\&\s-2\u[3]\d\s+2 +for more details\&. .SH "KEY MANAGEMENT" .PP User records are cryptographically signed with a public/private key pair (the signature is part of the JSON record itself)\&. For a user to be permitted to log in locally the public key matching the signature of their user record must be installed\&. For a user record to be modified locally the private key matching the signature must be installed locally, too\&. The keys are stored in the @@ -97,12 +102,7 @@ to "quux", and placed under the identical paths there, as currently only a single private key is supported per host\&. Note of course that the latter means that user records generated/signed before the key pair is copied in, lose their validity\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBhomed.conf\fR(5), -\fBhomectl\fR(1), -\fBpam_systemd_home\fR(8), -\fBuserdbctl\fR(1), -\fBorg.freedesktop.home1\fR(5) +\fBsystemd\fR(1), \fBhomed.conf\fR(5), \fBhomectl\fR(1), \fBpam_systemd_home\fR(8), \fBuserdbctl\fR(1), \fBorg.freedesktop.home1\fR(5) .SH "NOTES" .IP " 1." 4 Home Directories @@ -114,3 +114,8 @@ User/Group Record Lookup API via Varlink .RS 4 \%https://systemd.io/USER_GROUP_API .RE +.IP " 3." 4 +User Record Blob Directories +.RS 4 +\%https://systemd.io/USER_RECORD_BLOB_DIRS +.RE diff --git a/upstream/debian-unstable/man8/systemd-hostnamed.service.8 b/upstream/debian-unstable/man8/systemd-hostnamed.service.8 index af2fd26a..d9355215 100644 --- a/upstream/debian-unstable/man8/systemd-hostnamed.service.8 +++ b/upstream/debian-unstable/man8/systemd-hostnamed.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-HOSTNAMED\&.SERVICE" "8" "" "systemd 255" "systemd-hostnamed.service" +.TH "SYSTEMD\-HOSTNAMED\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-hostnamed.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -111,8 +111,4 @@ and for a description of the D\-Bus API\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBhostname\fR(5), -\fBmachine-info\fR(5), -\fBhostnamectl\fR(1), -\fBsethostname\fR(2) +\fBsystemd\fR(1), \fBhostname\fR(5), \fBmachine-info\fR(5), \fBhostnamectl\fR(1), \fBsethostname\fR(2) diff --git a/upstream/debian-unstable/man8/systemd-hwdb.8 b/upstream/debian-unstable/man8/systemd-hwdb.8 index 193b99ef..805f6405 100644 --- a/upstream/debian-unstable/man8/systemd-hwdb.8 +++ b/upstream/debian-unstable/man8/systemd-hwdb.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-HWDB" "8" "" "systemd 255" "systemd-hwdb" +.TH "SYSTEMD\-HWDB" "8" "" "systemd 256~rc3" "systemd-hwdb" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -60,7 +60,7 @@ Print a short help text and exit\&. .SS "systemd\-hwdb [\fIoptions\fR] update" .PP Update the binary database\&. -.SS "systemd\-hwdb [\fIoptions\fR] query [\fIMODALIAS\fR]" +.SS "systemd\-hwdb [\fIoptions\fR] query \fIMODALIAS\fR" .PP Query database and print result\&. .SH "SEE ALSO" diff --git a/upstream/debian-unstable/man8/systemd-importd.service.8 b/upstream/debian-unstable/man8/systemd-importd.service.8 index a9bdd93f..307d9b6e 100644 --- a/upstream/debian-unstable/man8/systemd-importd.service.8 +++ b/upstream/debian-unstable/man8/systemd-importd.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-IMPORTD\&.SERVICE" "8" "" "systemd 255" "systemd-importd.service" +.TH "SYSTEMD\-IMPORTD\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-importd.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -29,9 +29,8 @@ systemd\-importd\&.service .SH "DESCRIPTION" .PP \fBsystemd\-importd\fR -is a system service that allows importing, exporting and downloading of system images suitable for running as VM or containers\&. It is a companion service for -\fBsystemd-machined.service\fR(8), and provides the implementation for -\fBmachinectl\fR(1)\*(Aqs +is a system service that allows importing, exporting and downloading of disk images\&. It provides the implementation for +\fBimportctl\fR(1)\*(Aqs \fBpull\-raw\fR, \fBpull\-tar\fR, \fBimport\-raw\fR, @@ -48,7 +47,4 @@ and for a description of the D\-Bus API\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBmachinectl\fR(1), -\fBsystemd-machined.service\fR(8), -\fBsystemd-nspawn\fR(1) +\fBsystemd\fR(1), \fBimportctl\fR(1), \fBsystemd-machined.service\fR(8), \fBsystemd-nspawn\fR(1) diff --git a/upstream/debian-unstable/man8/systemd-initctl.service.8 b/upstream/debian-unstable/man8/systemd-initctl.service.8 index b88bead9..f6194bd2 100644 --- a/upstream/debian-unstable/man8/systemd-initctl.service.8 +++ b/upstream/debian-unstable/man8/systemd-initctl.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-INITCTL\&.SERVICE" "8" "" "systemd 255" "systemd-initctl.service" +.TH "SYSTEMD\-INITCTL\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-initctl.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff --git a/upstream/debian-unstable/man8/systemd-integritysetup-generator.8 b/upstream/debian-unstable/man8/systemd-integritysetup-generator.8 index 67bc9462..c1ecc500 100644 --- a/upstream/debian-unstable/man8/systemd-integritysetup-generator.8 +++ b/upstream/debian-unstable/man8/systemd-integritysetup-generator.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-INTEGRITYSETUP\-GENERATOR" "8" "" "systemd 255" "systemd-integritysetup-generator" +.TH "SYSTEMD\-INTEGRITYSETUP\-GENERATOR" "8" "" "systemd 256~rc3" "systemd-integritysetup-generator" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -38,6 +38,4 @@ implements \fBsystemd.generator\fR(7)\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd-integritysetup@.service\fR(8), -\fBintegritysetup\fR(8) +\fBsystemd\fR(1), \fBsystemd-integritysetup@.service\fR(8), \fBintegritysetup\fR(8) diff --git a/upstream/debian-unstable/man8/systemd-integritysetup@.service.8 b/upstream/debian-unstable/man8/systemd-integritysetup@.service.8 index badc9c26..d0359743 100644 --- a/upstream/debian-unstable/man8/systemd-integritysetup@.service.8 +++ b/upstream/debian-unstable/man8/systemd-integritysetup@.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-INTEGRITYSETUP@\&.SERVICE" "8" "" "systemd 255" "systemd-integritysetup@.service" +.TH "SYSTEMD\-INTEGRITYSETUP@\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-integritysetup@.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -76,10 +76,7 @@ Added in version 250\&. .RE .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBintegritytab\fR(5), -\fBsystemd-integritysetup-generator\fR(8), -\fBintegritysetup\fR(8) +\fBsystemd\fR(1), \fBintegritytab\fR(5), \fBsystemd-integritysetup-generator\fR(8), \fBintegritysetup\fR(8) .SH "NOTES" .IP " 1." 4 Kernel dm-integrity diff --git a/upstream/debian-unstable/man8/systemd-journal-gatewayd.service.8 b/upstream/debian-unstable/man8/systemd-journal-gatewayd.service.8 index 5ab1dd0b..9d25e9a7 100644 --- a/upstream/debian-unstable/man8/systemd-journal-gatewayd.service.8 +++ b/upstream/debian-unstable/man8/systemd-journal-gatewayd.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-JOURNAL\-GATEWAYD\&.SERVICE" "8" "" "systemd 255" "systemd-journal-gatewayd.service" +.TH "SYSTEMD\-JOURNAL\-GATEWAYD\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-journal-gatewayd.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -237,9 +237,15 @@ Added in version 197\&. .PP \fBRange: entries=\fR\fB\fIcursor\fR\fR\fB[[:\fR\fB\fInum_skip\fR\fR\fB]:\fR\fB\fInum_entries\fR\fR\fB]\fR .PP +\fBRange: realtime=[\fR\fB\fIsince\fR\fR\fB]:[\fR\fB\fIuntil\fR\fR\fB][[:\fR\fB\fInum_skip\fR\fR\fB]:\fR\fB\fInum_entries\fR\fR\fB]\fR +.PP where \fIcursor\fR is a cursor string, +\fIsince\fR +and +\fIuntil\fR +are timestamps (seconds since 1970\-01\-01 00:00:00 UTC), \fInum_skip\fR is an integer, \fInum_entries\fR @@ -309,12 +315,7 @@ curl \*(Aqhttp://localhost:19531/entries?follow&MESSAGE_ID=fc2e22bc6ee647b6b9072 .\} .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBjournalctl\fR(1), -\fBsystemd.journal-fields\fR(7), -\fBsystemd-journald.service\fR(8), -\fBsystemd-journal-remote.service\fR(8), -\fBsystemd-journal-upload.service\fR(8) +\fBsystemd\fR(1), \fBjournalctl\fR(1), \fBsystemd.journal-fields\fR(7), \fBsystemd-journald.service\fR(8), \fBsystemd-journal-remote.service\fR(8), \fBsystemd-journal-upload.service\fR(8) .SH "NOTES" .IP " 1." 4 Journal JSON Format diff --git a/upstream/debian-unstable/man8/systemd-journal-remote.service.8 b/upstream/debian-unstable/man8/systemd-journal-remote.service.8 index 32c6bb3d..3b2d93ab 100644 --- a/upstream/debian-unstable/man8/systemd-journal-remote.service.8 +++ b/upstream/debian-unstable/man8/systemd-journal-remote.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-JOURNAL\-REMOTE\&.SERVICE" "8" "" "systemd 255" "systemd-journal-remote.service" +.TH "SYSTEMD\-JOURNAL\-REMOTE\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-journal-remote.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -60,7 +60,7 @@ will exit\&. .PP Active sources can be specified in the following ways: .PP -[SOURCES...] +[SOURCES] .RS 4 When \fB\-\fR @@ -81,7 +81,7 @@ instance, e\&.g\&. http://some\&.host:19531/ or https://some\&.host:19531/\&. Added in version 239\&. .RE .PP -\fB\-\-getter=\*(Aq\fR\fB\fIPROG\fR\fR\fB \fR\fB[OPTIONS...]\fR\fB\*(Aq\fR +\fB\-\-getter=\*(Aq\fR\fB\fIPROG\fR\fR\fB \fR\fB[OPTIONS]\fR\fB\*(Aq\fR .RS 4 Program to invoke to retrieve data\&. The journal event stream must be generated on standard output\&. .sp @@ -340,11 +340,7 @@ systemd\-journal\-remote \-\-url http://some\&.host:19531/entries?boot&follow .sp .SH "SEE ALSO" .PP -\fBjournal-remote.conf\fR(5), -\fBjournalctl\fR(1), -\fBsystemd-journal-gatewayd.service\fR(8), -\fBsystemd-journal-upload.service\fR(8), -\fBsystemd-journald.service\fR(8) +\fBjournal-remote.conf\fR(5), \fBjournalctl\fR(1), \fBsystemd-journal-gatewayd.service\fR(8), \fBsystemd-journal-upload.service\fR(8), \fBsystemd-journald.service\fR(8) .SH "NOTES" .IP " 1." 4 Journal Export Format diff --git a/upstream/debian-unstable/man8/systemd-journal-upload.service.8 b/upstream/debian-unstable/man8/systemd-journal-upload.service.8 index d74e313e..b08c3eb8 100644 --- a/upstream/debian-unstable/man8/systemd-journal-upload.service.8 +++ b/upstream/debian-unstable/man8/systemd-journal-upload.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-JOURNAL\-UPLOAD\&.SERVICE" "8" "" "systemd 255" "systemd-journal-upload.service" +.TH "SYSTEMD\-JOURNAL\-UPLOAD\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-journal-upload.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -281,8 +281,4 @@ and \fBsystemd\-journal\-upload \-\-help\fR\&. .SH "SEE ALSO" .PP -\fBjournal-upload.conf\fR(5), -\fBsystemd-journal-remote.service\fR(8), -\fBjournalctl\fR(1), -\fBsystemd-journald.service\fR(8), -\fBsystemd-journal-gatewayd.service\fR(8) +\fBjournal-upload.conf\fR(5), \fBsystemd-journal-remote.service\fR(8), \fBjournalctl\fR(1), \fBsystemd-journald.service\fR(8), \fBsystemd-journal-gatewayd.service\fR(8) diff --git a/upstream/debian-unstable/man8/systemd-journald.service.8 b/upstream/debian-unstable/man8/systemd-journald.service.8 index 029e419d..e6844501 100644 --- a/upstream/debian-unstable/man8/systemd-journald.service.8 +++ b/upstream/debian-unstable/man8/systemd-journald.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-JOURNALD\&.SERVICE" "8" "" "systemd 255" "systemd-journald.service" +.TH "SYSTEMD\-JOURNALD\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-journald.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -23,21 +23,30 @@ systemd-journald.service, systemd-journald.socket, systemd-journald-dev-log.socket, systemd-journald-audit.socket, systemd-journald@.service, systemd-journald@.socket, systemd-journald-varlink@.socket, systemd-journald \- Journal service .SH "SYNOPSIS" .PP +.RS 4 systemd\-journald\&.service -.PP +.RE +.RS 4 systemd\-journald\&.socket -.PP +.RE +.RS 4 systemd\-journald\-dev\-log\&.socket -.PP +.RE +.RS 4 systemd\-journald\-audit\&.socket -.PP +.RE +.RS 4 systemd\-journald@\&.service -.PP +.RE +.RS 4 systemd\-journald@\&.socket -.PP +.RE +.RS 4 systemd\-journald\-varlink@\&.socket -.PP +.RE +.RS 4 /usr/lib/systemd/systemd\-journald +.RE .SH "DESCRIPTION" .PP systemd\-journald @@ -268,6 +277,34 @@ command to trigger journal synchronization, and wait for the operation to comple .sp Added in version 228\&. .RE +.SH "CREDENTIALS" +.PP +\fBsystemd\-journald\fR +supports the service credentials logic as implemented by +\fIImportCredential=\fR/\fILoadCredential=\fR/\fISetCredential=\fR +(see +\fBsystemd.exec\fR(5) +for details)\&. The following credentials are used when passed in: +.PP +\fIjournal\&.forward_to_socket\fR +.RS 4 +May contain a socket address to which logs should be forwarded\&. See +\fIForwardToSocket=\fR +in +\fBjournald.conf\fR(5)\&. +.sp +Added in version 256\&. +.RE +.PP +\fIjournal\&.storage\fR +.RS 4 +May be used to specify where journal files should be stored\&. See +\fIStorage=\fR +in +\fBjournald.conf\fR(5)\&. +.sp +Added in version 256\&. +.RE .SH "KERNEL COMMAND LINE" .PP A few configuration parameters from @@ -285,6 +322,15 @@ for information about these settings\&. Added in version 186\&. .RE .PP +\fIsystemd\&.journald\&.max_level_store=\fR, \fIsystemd\&.journald\&.max_level_syslog=\fR, \fIsystemd\&.journald\&.max_level_kmsg=\fR, \fIsystemd\&.journald\&.max_level_console=\fR, \fIsystemd\&.journald\&.max_level_wall=\fR, \fIsystemd\&.journald\&.max_level_socket=\fR +.RS 4 +Controls the maximum log level of messages that are stored in the journal, forwarded to syslog, kmsg, the console, the wall, or a socket\&. This kernel command line options override the settings of the same names in the +\fBjournald.conf\fR(5) +file\&. +.sp +Added in version 232\&. +.RE +.PP Note that these kernel command line options are only honoured by the default namespace, see above\&. .SH "ACCESS CONTROL" .PP @@ -390,15 +436,7 @@ Added in version 228\&. If journal namespacing is used these paths are slightly altered to include a namespace identifier, see above\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBjournalctl\fR(1), -\fBjournald.conf\fR(5), -\fBsystemd.journal-fields\fR(7), -\fBsd-journal\fR(3), -\fBsystemd-coredump\fR(8), -\fBsetfacl\fR(1), -\fBsd_journal_print\fR(3), -\fBpydoc systemd\&.journal\fR +\fBsystemd\fR(1), \fBjournalctl\fR(1), \fBjournald.conf\fR(5), \fBsystemd.journal-fields\fR(7), \fBsd-journal\fR(3), \fBsystemd-coredump\fR(8), \fBsetfacl\fR(1), \fBsd_journal_print\fR(3), \fBpydoc systemd\&.journal\fR .SH "NOTES" .IP " 1." 4 Native Journal Protocol diff --git a/upstream/debian-unstable/man8/systemd-localed.service.8 b/upstream/debian-unstable/man8/systemd-localed.service.8 index eabe5304..55495b4e 100644 --- a/upstream/debian-unstable/man8/systemd-localed.service.8 +++ b/upstream/debian-unstable/man8/systemd-localed.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-LOCALED\&.SERVICE" "8" "" "systemd 255" "systemd-localed.service" +.TH "SYSTEMD\-LOCALED\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-localed.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -44,8 +44,4 @@ and for a description of the D\-Bus API\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBlocale.conf\fR(5), -\fBvconsole.conf\fR(5), -\fBlocalectl\fR(1), -\fBloadkeys\fR(1) +\fBsystemd\fR(1), \fBlocale.conf\fR(5), \fBvconsole.conf\fR(5), \fBlocalectl\fR(1), \fBloadkeys\fR(1) diff --git a/upstream/debian-unstable/man8/systemd-logind.service.8 b/upstream/debian-unstable/man8/systemd-logind.service.8 index f1bf34d2..251b67c2 100644 --- a/upstream/debian-unstable/man8/systemd-logind.service.8 +++ b/upstream/debian-unstable/man8/systemd-logind.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-LOGIND\&.SERVICE" "8" "" "systemd 255" "systemd-logind.service" +.TH "SYSTEMD\-LOGIND\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-logind.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -184,12 +184,7 @@ If you are interested in writing a display manager that makes use of logind, ple \m[blue]\fBWriting Desktop Environments\fR\m[]\&\s-2\u[4]\d\s+2\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd-user-sessions.service\fR(8), -\fBloginctl\fR(1), -\fBlogind.conf\fR(5), -\fBpam_systemd\fR(8), -\fBsd-login\fR(3) +\fBsystemd\fR(1), \fBsystemd-user-sessions.service\fR(8), \fBloginctl\fR(1), \fBlogind.conf\fR(5), \fBpam_systemd\fR(8), \fBsd-login\fR(3) .SH "NOTES" .IP " 1." 4 polkit diff --git a/upstream/debian-unstable/man8/systemd-machine-id-commit.service.8 b/upstream/debian-unstable/man8/systemd-machine-id-commit.service.8 index c76834db..c7b5ec00 100644 --- a/upstream/debian-unstable/man8/systemd-machine-id-commit.service.8 +++ b/upstream/debian-unstable/man8/systemd-machine-id-commit.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-MACHINE\-ID\-COMMIT\&.SERVICE" "8" "" "systemd 255" "systemd-machine-id-commit.service" +.TH "SYSTEMD\-MACHINE\-ID\-COMMIT\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-machine-id-commit.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -53,7 +53,4 @@ is read\-only and initially not initialized\&. In this case, the system manager has been remounted writable and the ID may thus be committed to disk to make it permanent\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd-machine-id-setup\fR(1), -\fBmachine-id\fR(5), -\fBsystemd-firstboot\fR(1) +\fBsystemd\fR(1), \fBsystemd-machine-id-setup\fR(1), \fBmachine-id\fR(5), \fBsystemd-firstboot\fR(1) diff --git a/upstream/debian-unstable/man8/systemd-machined.service.8 b/upstream/debian-unstable/man8/systemd-machined.service.8 index 37940727..76cebba6 100644 --- a/upstream/debian-unstable/man8/systemd-machined.service.8 +++ b/upstream/debian-unstable/man8/systemd-machined.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-MACHINED\&.SERVICE" "8" "" "systemd 255" "systemd-machined.service" +.TH "SYSTEMD\-MACHINED\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-machined.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -159,7 +159,8 @@ If you are interested in writing a VM or container manager that makes use of mac \m[blue]\fBNew Control Group Interfaces\fR\m[]\&\s-2\u[3]\d\s+2\&. .PP The daemon provides both a C library interface (which is shared with -\fBsystemd-logind.service\fR(8)) as well as a D\-Bus interface\&. The library interface may be used to introspect and watch the state of virtual machines/containers\&. The bus interface provides the same but in addition may also be used to register or terminate machines\&. For more information please consult +\fBsystemd-logind.service\fR(8)) as well as a D\-Bus interface and a Varlink interface\&. The library interface may be used to introspect and watch the state of virtual machines/containers\&. The bus interface provides the same but in addition may also be used to register or terminate machines\&. The Varlink interface may be used to register machines with optional extensions, e\&.g\&. with an SSH key / address; it can be queried with +\fBvarlinkctl introspect /run/systemd/machine/io\&.systemd\&.Machine io\&.systemd\&.Machine\fR\&. For more information please consult \fBsd-login\fR(3) and \fBorg.freedesktop.machine1\fR(5) @@ -178,11 +179,7 @@ that employs user namespacing, users/groups are synthesized for the used UIDs/GI or the usual glibc NSS calls\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBmachinectl\fR(1), -\fBsystemd-nspawn\fR(1), -\fBnss-mymachines\fR(8), -\fBsystemd.special\fR(7) +\fBsystemd\fR(1), \fBmachinectl\fR(1), \fBsystemd-nspawn\fR(1), \fBnss-mymachines\fR(8), \fBsystemd.special\fR(7) .SH "NOTES" .IP " 1." 4 gnome-system-monitor diff --git a/upstream/debian-unstable/man8/systemd-makefs@.service.8 b/upstream/debian-unstable/man8/systemd-makefs@.service.8 index b1f51d1b..903a5921 100644 --- a/upstream/debian-unstable/man8/systemd-makefs@.service.8 +++ b/upstream/debian-unstable/man8/systemd-makefs@.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-MAKEFS@\&.SERVICE" "8" "" "systemd 255" "systemd-makefs@.service" +.TH "SYSTEMD\-MAKEFS@\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-makefs@.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -70,15 +70,4 @@ and dm\-crypt partitions (see If the creation of a file system or swap device fails, the mount point or swap is failed too\&. If the growing of a file system fails, a warning is emitted\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd.mount\fR(8), -\fBsystemd-fstab-generator\fR(8), -\fBsystemd-repart\fR(8), -\fBmkfs.btrfs\fR(8), -\fBmkfs.cramfs\fR(8), -\fBmkfs.ext4\fR(8), -\fBmkfs.fat\fR(8), -\fBmkfs.hfsplus\fR(8), -\fBmkfs.minix\fR(8), -\fBmkfs.ntfs\fR(8), -\fBmkfs.xfs\fR(8) +\fBsystemd\fR(1), \fBsystemd.mount\fR(8), \fBsystemd-fstab-generator\fR(8), \fBsystemd-repart\fR(8), \fBmkfs.btrfs\fR(8), \fBmkfs.cramfs\fR(8), \fBmkfs.ext4\fR(8), \fBmkfs.fat\fR(8), \fBmkfs.hfsplus\fR(8), \fBmkfs.minix\fR(8), \fBmkfs.ntfs\fR(8), \fBmkfs.xfs\fR(8) diff --git a/upstream/debian-unstable/man8/systemd-modules-load.service.8 b/upstream/debian-unstable/man8/systemd-modules-load.service.8 index 4aa80ef1..24da2da7 100644 --- a/upstream/debian-unstable/man8/systemd-modules-load.service.8 +++ b/upstream/debian-unstable/man8/systemd-modules-load.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-MODULES\-LOAD\&.SERVICE" "8" "" "systemd 255" "systemd-modules-load.service" +.TH "SYSTEMD\-MODULES\-LOAD\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-modules-load.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -54,5 +54,4 @@ Added in version 187\&. .RE .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBmodules-load.d\fR(5), +\fBsystemd\fR(1), \fBmodules-load.d\fR(5) diff --git a/upstream/debian-unstable/man8/systemd-mountfsd.service.8 b/upstream/debian-unstable/man8/systemd-mountfsd.service.8 new file mode 100644 index 00000000..907537c7 --- /dev/null +++ b/upstream/debian-unstable/man8/systemd-mountfsd.service.8 @@ -0,0 +1,96 @@ +'\" t +.TH "SYSTEMD\-MOUNTFSD\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-mountfsd.service" +.\" ----------------------------------------------------------------- +.\" * Define some portability stuff +.\" ----------------------------------------------------------------- +.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ +.\" http://bugs.debian.org/507673 +.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html +.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ +.ie \n(.g .ds Aq \(aq +.el .ds Aq ' +.\" ----------------------------------------------------------------- +.\" * set default formatting +.\" ----------------------------------------------------------------- +.\" disable hyphenation +.nh +.\" disable justification (adjust text to left margin only) +.ad l +.\" ----------------------------------------------------------------- +.\" * MAIN CONTENT STARTS HERE * +.\" ----------------------------------------------------------------- +.SH "NAME" +systemd-mountfsd.service, systemd-mountfsd \- Disk Image File System Mount Service +.SH "SYNOPSIS" +.PP +systemd\-mountfsd\&.service +.PP +/usr/lib/systemd/systemd\-mountfsd +.SH "DESCRIPTION" +.PP +\fBsystemd\-mountfsd\fR +is a system service that dissects disk images, and returns mount file descriptors for the file systems contained therein to clients, via a Varlink IPC API\&. +.PP +The disk images provided must contain a raw file system image or must follow the +\m[blue]\fBDiscoverable Partitions Specification\fR\m[]\&\s-2\u[1]\d\s+2\&. Before mounting any file systems authenticity of the disk image is established in one or a combination of the following ways: +.sp +.RS 4 +.ie n \{\ +\h'-04' 1.\h'+01'\c +.\} +.el \{\ +.sp -1 +.IP " 1." 4.2 +.\} +If the disk image is located in a regular file in one of the directories +/var/lib/machines/, +/var/lib/portables/, +/var/lib/extensions/, +/var/lib/confexts/ +or their counterparts in the +/etc/, +/run/, +/usr/lib/ +it is assumed to be trusted\&. +.RE +.sp +.RS 4 +.ie n \{\ +\h'-04' 2.\h'+01'\c +.\} +.el \{\ +.sp -1 +.IP " 2." 4.2 +.\} +If the disk image contains a Verity enabled disk image, along with a signature partition with a key in the kernel keyring or in +/etc/verity\&.d/ +(and related directories) the disk image is considered trusted\&. +.RE +.PP +This service provides one +\m[blue]\fBVarlink\fR\m[]\&\s-2\u[2]\d\s+2 +service: +\fBio\&.systemd\&.MountFileSystem\fR +which accepts a file descriptor to a regular file or block device, and returns a number of file descriptors referring to an +\fBfsmount()\fR +file descriptor the client may then attach to a path of their choice\&. +.PP +The returned mounts are automatically allowlisted in the per\-user\-namespace allowlist maintained by +\fBsystemd-nsresourced.service\fR(8)\&. +.PP +The file systems are automatically fsck\*(Aqed before mounting\&. +.SH "SEE ALSO" +.PP +\fBsystemd\fR(1), +\fBsystemd-nsresourced.service\fR(8) +.SH "NOTES" +.IP " 1." 4 +Discoverable Partitions Specification +.RS 4 +\%https://uapi-group.org/specifications/specs/discoverable_partitions_specification/ +.RE +.IP " 2." 4 +Varlink +.RS 4 +\%https://varlink.org/ +.RE diff --git a/upstream/debian-unstable/man8/systemd-network-generator.service.8 b/upstream/debian-unstable/man8/systemd-network-generator.service.8 index e2d012e7..5a39caa3 100644 --- a/upstream/debian-unstable/man8/systemd-network-generator.service.8 +++ b/upstream/debian-unstable/man8/systemd-network-generator.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-NETWORK\-GENERATOR\&.SERVICE" "8" "" "systemd 255" "systemd-network-generator.service" +.TH "SYSTEMD\-NETWORK\-GENERATOR\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-network-generator.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -68,7 +68,7 @@ option accepts the special value Added in version 245\&. .RE .PP -\fIifname=\fR, \fInet\&.ifname\-policy=\fR +\fIifname=\fR, \fInet\&.ifname_policy=\fR .RS 4 Translated into \fBsystemd.link\fR(5) @@ -91,8 +91,36 @@ See and \fBsystemd-udevd.service\fR(8) for option syntax and details\&. +.SH "CREDENTIALS" +.PP +\fBsystemd\-network\-generator\fR +supports the service credentials logic as implemented by +\fIImportCredential=\fR/\fILoadCredential=\fR/\fISetCredential=\fR +(see +\fBsystemd.exec\fR(5) +for details)\&. The following credentials are used when passed in: +.PP +\fInetwork\&.conf\&.*\fR, \fInetwork\&.link\&.*\fR, \fInetwork\&.netdev\&.*\fR, \fInetwork\&.network\&.*\fR +.RS 4 +These credentials should contain valid +\fBnetworkd.conf\fR(5), +\fBsystemd.link\fR(5), +\fBsystemd.netdev\fR(5), +\fBsystemd.network\fR(5) +configuration data\&. From each matching credential a separate file is created\&. Example: a passed credential +network\&.link\&.50\-foobar +will be copied into a configuration file +50\-foobar\&.link\&. +.sp +Note that the resulting files are created world\-readable, it\*(Aqs hence recommended to not include secrets in these credentials, but supply them via separate credentials directly to +systemd\-networkd\&.service\&. +.sp +Added in version 256\&. +.RE +.PP +Note that by default the +systemd\-network\-generator\&.service +unit file is set up to inherit the these credentials from the service manager\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd-networkd.service\fR(8), -\fBdracut\fR(8) +\fBsystemd\fR(1), \fBsystemd-networkd.service\fR(8), \fBdracut\fR(8) diff --git a/upstream/debian-unstable/man8/systemd-networkd-wait-online.service.8 b/upstream/debian-unstable/man8/systemd-networkd-wait-online.service.8 index a1eafa54..b66b5374 100644 --- a/upstream/debian-unstable/man8/systemd-networkd-wait-online.service.8 +++ b/upstream/debian-unstable/man8/systemd-networkd-wait-online.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-NETWORKD\-WAIT\-ONLINE\&.SERVICE" "8" "" "systemd 255" "systemd-networkd-wait-online.service" +.TH "SYSTEMD\-NETWORKD\-WAIT\-ONLINE\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-networkd-wait-online.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -62,7 +62,7 @@ and online\&. .PP The following options are understood: .PP -\fB\-i\fR \fIINTERFACE\fR[:\fIMIN_OPERSTATE\fR[:\fIMAX_OPERSTATE\fR]], \fB\-\-interface=\fR\fIINTERFACE\fR[:\fIMIN_OPERSTATE\fR[:\fIMAX_OPERSTATE\fR]] +\fB\-i\fR \fIINTERFACE\fR[:\fIMIN_OPERSTATE\fR[:\fIMAX_OPERSTATE\fR]], \fB\-\-interface=\fR\fB\fIINTERFACE\fR\fR\fB[:\fIMIN_OPERSTATE\fR[:\fIMAX_OPERSTATE\fR]]\fR .RS 4 Network interface to wait for before deciding if the system is online\&. This is useful when a system has several interfaces which will be configured, but a particular one is necessary to access some network resources\&. When used, all other interfaces are ignored\&. This option may be used more than once to wait for multiple network interfaces\&. When this option is specified multiple times, then \fBsystemd\-networkd\-wait\-online\fR @@ -80,14 +80,14 @@ otherwise\&. Added in version 213\&. .RE .PP -\fB\-\-ignore=\fR\fIINTERFACE\fR +\fB\-\-ignore=\fR\fB\fIINTERFACE\fR\fR .RS 4 Network interfaces to be ignored when deciding if the system is online\&. By default, only the loopback interface is ignored\&. This option may be used more than once to ignore multiple network interfaces\&. .sp Added in version 219\&. .RE .PP -\fB\-o\fR \fIMIN_OPERSTATE\fR[:\fIMAX_OPERSTATE\fR], \fB\-\-operational\-state=\fR\fIMIN_OPERSTATE\fR[:\fIMAX_OPERSTATE\fR] +\fB\-o\fR \fIMIN_OPERSTATE\fR[:\fIMAX_OPERSTATE\fR], \fB\-\-operational\-state=\fR\fB\fIMIN_OPERSTATE\fR\fR\fB[:\fIMAX_OPERSTATE\fR]\fR .RS 4 Takes a minimum operational state and an optional maximum operational state\&. Please see \fBnetworkctl\fR(1) @@ -160,7 +160,7 @@ waits for one of the specified interfaces to be online\&. This option is useful Added in version 242\&. .RE .PP -\fB\-\-timeout=\fR\fISECS\fR +\fB\-\-timeout=\fR\fB\fISECS\fR\fR .RS 4 Fail the service if the network is not online by the time the timeout elapses\&. A timeout of 0 disables the timeout\&. Defaults to 120 seconds\&. .sp @@ -185,7 +185,4 @@ Print a short version string and exit\&. .RE .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd.service\fR(5), -\fBsystemd-networkd.service\fR(8), -\fBnetworkctl\fR(1) +\fBsystemd\fR(1), \fBsystemd.service\fR(5), \fBsystemd-networkd.service\fR(8), \fBnetworkctl\fR(1) diff --git a/upstream/debian-unstable/man8/systemd-networkd.service.8 b/upstream/debian-unstable/man8/systemd-networkd.service.8 index f421a6a1..a3f62609 100644 --- a/upstream/debian-unstable/man8/systemd-networkd.service.8 +++ b/upstream/debian-unstable/man8/systemd-networkd.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-NETWORKD\&.SERVICE" "8" "" "systemd 255" "systemd-networkd.service" +.TH "SYSTEMD\-NETWORKD\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-networkd.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -78,10 +78,4 @@ files, see \fBsystemd.netdev\fR(5)\&. .SH "SEE ALSO" .PP -\fBnetworkctl\fR(1), -\fBsystemd\fR(1), -\fBsystemd.link\fR(5), -\fBsystemd.network\fR(5), -\fBsystemd.netdev\fR(5), -\fBsystemd-networkd-wait-online.service\fR(8), -\fBsystemd-network-generator.service\fR(8) +\fBnetworkctl\fR(1), \fBsystemd\fR(1), \fBsystemd.link\fR(5), \fBsystemd.network\fR(5), \fBsystemd.netdev\fR(5), \fBsystemd-networkd-wait-online.service\fR(8), \fBsystemd-network-generator.service\fR(8) diff --git a/upstream/debian-unstable/man8/systemd-nsresourced.service.8 b/upstream/debian-unstable/man8/systemd-nsresourced.service.8 new file mode 100644 index 00000000..c4c80865 --- /dev/null +++ b/upstream/debian-unstable/man8/systemd-nsresourced.service.8 @@ -0,0 +1,78 @@ +'\" t +.TH "SYSTEMD\-NSRESOURCED\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-nsresourced.service" +.\" ----------------------------------------------------------------- +.\" * Define some portability stuff +.\" ----------------------------------------------------------------- +.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ +.\" http://bugs.debian.org/507673 +.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html +.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ +.ie \n(.g .ds Aq \(aq +.el .ds Aq ' +.\" ----------------------------------------------------------------- +.\" * set default formatting +.\" ----------------------------------------------------------------- +.\" disable hyphenation +.nh +.\" disable justification (adjust text to left margin only) +.ad l +.\" ----------------------------------------------------------------- +.\" * MAIN CONTENT STARTS HERE * +.\" ----------------------------------------------------------------- +.SH "NAME" +systemd-nsresourced.service, systemd-nsresourced \- User Namespace Resource Delegation Service +.SH "SYNOPSIS" +.PP +systemd\-nsresourced\&.service +.PP +/usr/lib/systemd/systemd\-nsresourced +.SH "DESCRIPTION" +.PP +\fBsystemd\-nsresourced\fR +is a system service that permits transient delegation of a a UID/GID range to a user namespace (see +\fBuser_namespaces\fR(7)) allocated by a client, via a Varlink IPC API\&. +.PP +Unprivileged clients may allocate a user namespace, and then request a UID/GID range to be assigned to it via this service\&. The user namespace may then be used to run containers and other sandboxes, and/or apply it to an id\-mapped mount\&. +.PP +Allocations of UIDs/GIDs this way are transient: when a user namespace goes away, its UID/GID range is returned to the pool of available ranges\&. In order to ensure that clients cannot gain persistency in their transient UID/GID range a BPF\-LSM based policy is enforced that ensures that user namespaces set up this way can only write to file systems they allocate themselves or that are explicitly allowlisted via +\fBsystemd\-nsresourced\fR\&. +.PP +\fBsystemd\-nsresourced\fR +automatically ensures that any registered UID ranges show up in the system\*(Aqs NSS database via the +\m[blue]\fBUser/Group Record Lookup API via Varlink\fR\m[]\&\s-2\u[1]\d\s+2\&. +.PP +Currently, only UID/GID ranges consisting of either exactly 1 or exactly 65536 UIDs/GIDs can be registered with this service\&. Moreover, UIDs and GIDs are always allocated together, and symmetrically\&. +.PP +The service provides API calls to allowlist mounts (referenced via their mount file descriptors as per Linux +\fBfsmount()\fR +API), to pass ownership of a cgroup subtree to the user namespace and to delegate a virtual Ethernet device pair to the user namespace\&. When used in combination this is sufficient to implement fully unprivileged container environments, as implemented by +\fBsystemd-nspawn\fR(1), fully unprivileged +\fIRootImage=\fR +(see +\fBsystemd.exec\fR(5)) or fully unprivileged disk image tools such as +\fBsystemd-dissect\fR(1)\&. +.PP +This service provides one +\m[blue]\fBVarlink\fR\m[]\&\s-2\u[2]\d\s+2 +service: +\fBio\&.systemd\&.NamespaceResource\fR +allows registering user namespaces, and assign mounts, cgroups and network interfaces to it\&. +.SH "SEE ALSO" +.PP +\fBsystemd\fR(1), +\fBsystemd-mountfsd.service\fR(8), +\fBsystemd-nspawn\fR(1), +\fBsystemd.exec\fR(5), +\fBsystemd-dissect\fR(1), +\fBuser_namespaces\fR(7) +.SH "NOTES" +.IP " 1." 4 +User/Group Record Lookup API via Varlink +.RS 4 +\%https://systemd.io/USER_GROUP_API +.RE +.IP " 2." 4 +Varlink +.RS 4 +\%https://varlink.org/ +.RE diff --git a/upstream/debian-unstable/man8/systemd-oomd.service.8 b/upstream/debian-unstable/man8/systemd-oomd.service.8 index b29c880d..f39f1704 100644 --- a/upstream/debian-unstable/man8/systemd-oomd.service.8 +++ b/upstream/debian-unstable/man8/systemd-oomd.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-OOMD\&.SERVICE" "8" "" "systemd 255" "systemd-oomd.service" +.TH "SYSTEMD\-OOMD\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-oomd.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -133,11 +133,7 @@ Print a short version string and exit\&. .RE .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd-system.conf\fR(5), -\fBsystemd.resource-control\fR(5), -\fBoomd.conf\fR(5), -\fBoomctl\fR(1) +\fBsystemd\fR(1), \fBsystemd-system.conf\fR(5), \fBsystemd.resource-control\fR(5), \fBoomd.conf\fR(5), \fBoomctl\fR(1) .SH "NOTES" .IP " 1." 4 "In defence of swap: common misconceptions" diff --git a/upstream/debian-unstable/man8/systemd-pcrlock.8 b/upstream/debian-unstable/man8/systemd-pcrlock.8 index b3206f6b..004515d3 100644 --- a/upstream/debian-unstable/man8/systemd-pcrlock.8 +++ b/upstream/debian-unstable/man8/systemd-pcrlock.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-PCRLOCK" "8" "" "systemd 255" "systemd-pcrlock" +.TH "SYSTEMD\-PCRLOCK" "8" "" "systemd 256~rc3" "systemd-pcrlock" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -22,8 +22,8 @@ .SH "NAME" systemd-pcrlock, systemd-pcrlock-file-system.service, systemd-pcrlock-firmware-code.service, systemd-pcrlock-firmware-config.service, systemd-pcrlock-machine-id.service, systemd-pcrlock-make-policy.service, systemd-pcrlock-secureboot-authority.service, systemd-pcrlock-secureboot-policy.service \- Analyze and predict TPM2 PCR states and generate an access policy from the prediction .SH "SYNOPSIS" -.HP \w'\fB/usr/lib/systemd/systemd\-pcrlock\ \fR\fB[OPTIONS...]\fR\ 'u -\fB/usr/lib/systemd/systemd\-pcrlock \fR\fB[OPTIONS...]\fR +.HP \w'\fB/usr/lib/systemd/systemd\-pcrlock\fR\ 'u +\fB/usr/lib/systemd/systemd\-pcrlock\fR [OPTIONS...] .SH "DESCRIPTION" .PP Note: this command is experimental for now\&. While it is likely to become a regular component of systemd, it might still change in behaviour and interface\&. @@ -80,7 +80,7 @@ The current PCR state of the TPM2 chip\&. Boot component definition files (*\&.pcrlock and *\&.pcrlock\&.d/*\&.pcrlock, see -\fBsystemd.pcrlock\fR(5)) that each define expected measurements for one component of the boot process, permitting alternative variants for each\&. (Variants may be used used to bless multiple kernel versions or boot loader versions at the same time\&.) +\fBsystemd.pcrlock\fR(5)) that each define expected measurements for one component of the boot process, permitting alternative variants for each\&. (Variants may be used to bless multiple kernel versions or boot loader versions at the same time\&.) .RE .PP It uses these inputs to generate a combined event log, validating it against the PCR states\&. It then attempts to recognize event log records and matches them against the defined components\&. For each PCR where this can be done comprehensively (i\&.e\&. where all listed records and all defined components have been matched) this may then be used to predict future PCR measurements, taking the alternative variants defined for each component into account\&. This prediction may then be converted into a TPM2 access policy (consisting of TPM2 @@ -120,7 +120,7 @@ Added in version 255\&. \fBcel\fR .RS 4 This reads the combined TPM2 event log and writes it to STDOUT in -\m[blue]\fBTCG Common Event Log Format (CEL\-JSON)\fR\m[]\&\s-2\u[1]\d\s+2 +\m[blue]\fBTCG Canonical Event Log Format (CEL\-JSON)\fR\m[]\&\s-2\u[1]\d\s+2 format\&. .sp Added in version 255\&. @@ -163,6 +163,20 @@ If the new prediction matches the old this command terminates quickly and execut \fB\-\-force\fR is specified, see below\&.) .sp +Starting with v256, a copy of the +/var/lib/systemd/pcrlock\&.json +policy file is encoded in a credential (see +\fBsystemd-creds\fR(1) +for details) and written to the EFI System Partition or XBOOTLDR partition, in the +/loader/credentials/ +subdirectory\&. There it is picked up at boot by +\fBsystemd-stub\fR(7) +and passed to the invoked initrd, where it can be used to unlock the root file system (which typically contains +/var/, which is where the primary copy of the policy is located, which hence cannot be used to unlock the root file system)\&. The credential file is named after the boot entry token of the installation (see +\fBbootctl\fR(1)), which is configurable via the +\fB\-\-entry\-token=\fR +switch, see below\&. +.sp Added in version 255\&. .RE .PP @@ -372,7 +386,7 @@ Generates/removes a \&.pcrlock file based on raw binary data\&. The data is either read from the specified file or from STDIN (if none is specified)\&. This requires that \fB\-\-pcrs=\fR -is specified\&. The generated pcrlock file is written to the file specified via +is specified\&. The generated \&.pcrlock file is written to the file specified via \fB\-\-pcrlock=\fR or to STDOUT (if none is specified)\&. .sp @@ -410,7 +424,7 @@ Added in version 255\&. .PP \fB\-\-nv\-index=\fR .RS 4 -Specifies to NV index to store the policy in\&. Honoured by +Specifies the NV index to store the policy in\&. Honoured by \fBmake\-policy\fR\&. If not specified the command will automatically pick a free NV index\&. .sp Added in version 255\&. @@ -462,8 +476,20 @@ Added in version 255\&. .PP \fB\-\-recovery\-pin=\fR .RS 4 -Takes a boolean\&. Defaults to false\&. Honoured by -\fBmake\-policy\fR\&. If true, will query the user for a PIN to unlock the TPM2 NV index with\&. If no policy was created before this PIN is used to protect the newly allocated NV index\&. If a policy has been created before the PIN is used to unlock write access to the NV index\&. If this option is not used a PIN is automatically generated\&. Regardless if user supplied or automatically generated, it is stored in encrypted form in the policy metadata file\&. The recovery PIN may be used to regain write access to an NV index in case the access policy became out of date\&. +Takes one of +"hide", +"show" +or +"query"\&. Defaults to +"hide"\&. Honoured by +\fBmake\-policy\fR\&. If +"query", will query the user for a PIN to unlock the TPM2 NV index with\&. If no policy was created before, this PIN is used to protect the newly allocated NV index\&. If a policy has been created before, the PIN is used to unlock write access to the NV index\&. If either +"hide" +or +"show" +is used, a PIN is automatically generated, and \(em only in case of +"show" +\(em displayed on screen\&. Regardless if user supplied or automatically generated, it is stored in encrypted form in the policy metadata file\&. The recovery PIN may be used to regain write access to an NV index in case the access policy became out of date\&. .sp Added in version 255\&. .RE @@ -493,7 +519,18 @@ If specified with Added in version 255\&. .RE .PP -\fB\-\-json=\fR\fIMODE\fR +\fB\-\-entry\-token=\fR +.RS 4 +Sets the boot entry token to use for the file name for the pcrlock policy credential in the EFI System Partition or XBOOTLDR partition\&. See the +\fBbootctl\fR(1) +option of the same regarding expected values\&. This switch has an effect on the +\fBmake\-policy\fR +command only\&. +.sp +Added in version 256\&. +.RE +.PP +\fB\-\-json=\fR\fB\fIMODE\fR\fR .RS 4 Shows output formatted as JSON\&. Expects one of "short" @@ -523,15 +560,10 @@ Print a short version string and exit\&. On success, 0 is returned, a non\-zero failure code otherwise\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd.pcrlock\fR(5), -\fBsystemd-cryptenroll\fR(1), -\fBsystemd-cryptsetup@.service\fR(8), -\fBsystemd-repart\fR(8), -\fBsystemd-pcrmachine.service\fR(8) +\fBsystemd\fR(1), \fBsystemd.pcrlock\fR(5), \fBsystemd-cryptenroll\fR(1), \fBsystemd-cryptsetup@.service\fR(8), \fBsystemd-repart\fR(8), \fBsystemd-pcrmachine.service\fR(8), \fBsystemd-creds\fR(1), \fBsystemd-stub\fR(7), \fBbootctl\fR(1) .SH "NOTES" .IP " 1." 4 -TCG Common Event Log Format (CEL-JSON) +TCG Canonical Event Log Format (CEL-JSON) .RS 4 \%https://trustedcomputinggroup.org/resource/canonical-event-log-format/ .RE diff --git a/upstream/debian-unstable/man8/systemd-pcrphase.service.8 b/upstream/debian-unstable/man8/systemd-pcrphase.service.8 index 38f7e40c..5236243d 100644 --- a/upstream/debian-unstable/man8/systemd-pcrphase.service.8 +++ b/upstream/debian-unstable/man8/systemd-pcrphase.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-PCRPHASE\&.SERVICE" "8" "" "systemd 255" "systemd-pcrphase.service" +.TH "SYSTEMD\-PCRPHASE\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-pcrphase.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -204,7 +204,7 @@ are specified defaults to 15, otherwise defaults to 11\&. Added in version 255\&. .RE .PP -\fB\-\-tpm2\-device=\fR\fIPATH\fR +\fB\-\-tpm2\-device=\fR\fB\fIPATH\fR\fR .RS 4 Controls which TPM2 device to use\&. Expects a device node path referring to the TPM2 chip (e\&.g\&. /dev/tpmrm0)\&. Alternatively the special value @@ -254,7 +254,7 @@ Measurements are logged into an event log file maintained in /run/log/systemd/tpm2\-measure\&.log, which contains a \m[blue]\fBJSON\-SEQ\fR\m[]\&\s-2\u[1]\d\s+2 series of objects that follow the general structure of the -\m[blue]\fBTCG Common Event Log Format (CEL\-JSON)\fR\m[]\&\s-2\u[2]\d\s+2 +\m[blue]\fBTCG Canonical Event Log Format (CEL\-JSON)\fR\m[]\&\s-2\u[2]\d\s+2 event objects (but lack the "recnum" field)\&. @@ -269,12 +269,7 @@ Added in version 252\&. .RE .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd-stub\fR(7), -\fBsystemd-measure\fR(1), -\fBsystemd-gpt-auto-generator\fR(8), -\fBsystemd-fstab-generator\fR(8), -\m[blue]\fBTPM2 PCR Measurements Made by systemd\fR\m[]\&\s-2\u[3]\d\s+2 +\fBsystemd\fR(1), \fBsystemd-stub\fR(7), \fBsystemd-measure\fR(1), \fBsystemd-gpt-auto-generator\fR(8), \fBsystemd-fstab-generator\fR(8), \m[blue]\fBTPM2 PCR Measurements Made by systemd\fR\m[]\&\s-2\u[3]\d\s+2 .SH "NOTES" .IP " 1." 4 JSON-SEQ @@ -282,7 +277,7 @@ JSON-SEQ \%https://www.rfc-editor.org/rfc/rfc7464.html .RE .IP " 2." 4 -TCG Common Event Log Format (CEL-JSON) +TCG Canonical Event Log Format (CEL-JSON) .RS 4 \%https://trustedcomputinggroup.org/resource/canonical-event-log-format/ .RE diff --git a/upstream/debian-unstable/man8/systemd-portabled.service.8 b/upstream/debian-unstable/man8/systemd-portabled.service.8 index e3b40f6e..36a58bb2 100644 --- a/upstream/debian-unstable/man8/systemd-portabled.service.8 +++ b/upstream/debian-unstable/man8/systemd-portabled.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-PORTABLED\&.SERVICE" "8" "" "systemd 255" "systemd-portabled.service" +.TH "SYSTEMD\-PORTABLED\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-portabled.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -41,9 +41,7 @@ See the page for details about the concepts this service implements\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBportablectl\fR(1), -\fBorg.freedesktop.portable1\fR(5) +\fBsystemd\fR(1), \fBportablectl\fR(1), \fBorg.freedesktop.portable1\fR(5) .SH "NOTES" .IP " 1." 4 Portable Services diff --git a/upstream/debian-unstable/man8/systemd-poweroff.service.8 b/upstream/debian-unstable/man8/systemd-poweroff.service.8 index b7a3d813..9aecb49d 100644 --- a/upstream/debian-unstable/man8/systemd-poweroff.service.8 +++ b/upstream/debian-unstable/man8/systemd-poweroff.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-POWEROFF\&.SERVICE" "8" "" "systemd 255" "systemd-poweroff.service" +.TH "SYSTEMD\-POWEROFF\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-poweroff.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -68,7 +68,7 @@ and pass one arguments to them: either "reboot", or "kexec", depending on the chosen action\&. All executables in this directory are executed in parallel, and execution of the action is not continued before all executables finished\&. Note that these executables are run \fIafter\fR -all services have been shut down, and after most mounts have been detached (the root file system as well as +all services have been shut down, and after most mounts have been unmounted (the root file system as well as /run/ and various API file systems are still around though)\&. This means any programs dropped into this directory must be prepared to run in such a limited execution environment and not rely on external services or hierarchies such as /var/ @@ -84,10 +84,4 @@ Another form of shutdown is provided by the functionality\&. It reboots only the OS userspace, leaving the kernel, firmware, and hardware as it is\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemctl\fR(1), -\fBsystemd.special\fR(7), -\fBreboot\fR(2), -\fBsystemd-suspend.service\fR(8), -\fBsystemd-soft-reboot.service\fR(8), -\fBbootup\fR(7) +\fBsystemd\fR(1), \fBsystemctl\fR(1), \fBsystemd.special\fR(7), \fBreboot\fR(2), \fBsystemd-suspend.service\fR(8), \fBsystemd-soft-reboot.service\fR(8), \fBbootup\fR(7) diff --git a/upstream/debian-unstable/man8/systemd-pstore.service.8 b/upstream/debian-unstable/man8/systemd-pstore.service.8 index 3eb96dec..ebf9b0ff 100644 --- a/upstream/debian-unstable/man8/systemd-pstore.service.8 +++ b/upstream/debian-unstable/man8/systemd-pstore.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-PSTORE\&.SERVICE" "8" "" "systemd 255" "systemd-pstore.service" +.TH "SYSTEMD\-PSTORE\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-pstore.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff --git a/upstream/debian-unstable/man8/systemd-quotacheck.service.8 b/upstream/debian-unstable/man8/systemd-quotacheck.service.8 index 5a4d5e34..17ddbaff 100644 --- a/upstream/debian-unstable/man8/systemd-quotacheck.service.8 +++ b/upstream/debian-unstable/man8/systemd-quotacheck.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-QUOTACHECK\&.SERVICE" "8" "" "systemd 255" "systemd-quotacheck.service" +.TH "SYSTEMD\-QUOTACHECK\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-quotacheck.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -51,6 +51,4 @@ Added in version 186\&. .RE .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBquotacheck\fR(8), -\fBsystemd-fsck@.service\fR(8) +\fBsystemd\fR(1), \fBquotacheck\fR(8), \fBsystemd-fsck@.service\fR(8) diff --git a/upstream/debian-unstable/man8/systemd-random-seed.service.8 b/upstream/debian-unstable/man8/systemd-random-seed.service.8 index d8cbd444..4c069fc1 100644 --- a/upstream/debian-unstable/man8/systemd-random-seed.service.8 +++ b/upstream/debian-unstable/man8/systemd-random-seed.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-RANDOM\-SEED\&.SERVICE" "8" "" "systemd 255" "systemd-random-seed.service" +.TH "SYSTEMD\-RANDOM\-SEED\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-random-seed.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -67,12 +67,7 @@ Added in version 243\&. .RE .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBrandom\fR(4), -\fBsystemd-boot\fR(7), -\fBsystemd-stub\fR(7), -\fBbootctl\fR(4), -\fBsystemd-boot-random-seed.service\fR(8) +\fBsystemd\fR(1), \fBrandom\fR(4), \fBsystemd-boot\fR(7), \fBsystemd-stub\fR(7), \fBbootctl\fR(4), \fBsystemd-boot-random-seed.service\fR(8) .SH "NOTES" .IP " 1." 4 Safely Building Images diff --git a/upstream/debian-unstable/man8/systemd-rc-local-generator.8 b/upstream/debian-unstable/man8/systemd-rc-local-generator.8 index dc9dfa20..b6c3715a 100644 --- a/upstream/debian-unstable/man8/systemd-rc-local-generator.8 +++ b/upstream/debian-unstable/man8/systemd-rc-local-generator.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-RC\-LOCAL\-GENERATOR" "8" "" "systemd 255" "systemd-rc-local-generator" +.TH "SYSTEMD\-RC\-LOCAL\-GENERATOR" "8" "" "systemd 256~rc3" "systemd-rc-local-generator" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -63,12 +63,14 @@ After=network\-online\&.target .PP Support for /etc/rc\&.local -is provided for compatibility with specific System V systems only\&. However, it is strongly recommended to avoid making use of this script today, and instead provide proper unit files with appropriate dependencies for any scripts to run during the boot process\&. Note that the path to the script is set at compile time and varies between distributions\&. +is provided for compatibility with specific System\ \&V systems only\&. However, it is strongly recommended to avoid using this script today, and instead provide proper unit files with appropriate dependencies for any scripts to run during the boot process\&. Note that the path to the script is set at compile time and varies between distributions\&. .PP systemd\-rc\-local\-generator implements \fBsystemd.generator\fR(7)\&. +.SH "NOTES" +.PP +On systems with SELinux, when creating the file, make sure to set the appropriate context, e\&.g\&. with "\fBsudo restorecon \-v /etc/rc\&.local\fR"\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemctl\fR(1) +\fBsystemd\fR(1), \fBsystemctl\fR(1) diff --git a/upstream/debian-unstable/man8/systemd-remount-fs.service.8 b/upstream/debian-unstable/man8/systemd-remount-fs.service.8 index b9afacff..b58e012f 100644 --- a/upstream/debian-unstable/man8/systemd-remount-fs.service.8 +++ b/upstream/debian-unstable/man8/systemd-remount-fs.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-REMOUNT\-FS\&.SERVICE" "8" "" "systemd 255" "systemd-remount-fs.service" +.TH "SYSTEMD\-REMOUNT\-FS\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-remount-fs.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -58,11 +58,7 @@ is usually pulled in by and other options\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBfstab\fR(5), -\fBmount\fR(8), -\fBsystemd-fstab-generator\fR(8), -\fBsystemd-gpt-auto-generator\fR(8) +\fBsystemd\fR(1), \fBfstab\fR(5), \fBmount\fR(8), \fBsystemd-fstab-generator\fR(8), \fBsystemd-gpt-auto-generator\fR(8) .SH "NOTES" .IP " 1." 4 API File Systems diff --git a/upstream/debian-unstable/man8/systemd-repart.8 b/upstream/debian-unstable/man8/systemd-repart.8 index b873a9f5..58006473 100644 --- a/upstream/debian-unstable/man8/systemd-repart.8 +++ b/upstream/debian-unstable/man8/systemd-repart.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-REPART" "8" "" "systemd 255" "systemd-repart" +.TH "SYSTEMD\-REPART" "8" "" "systemd 256~rc3" "systemd-repart" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -415,6 +415,19 @@ setting in partition files\&. Added in version 252\&. .RE .PP +\fB\-\-private\-key\-source=\fR +.RS 4 +Takes one of +"file", +"engine" +or +"provider"\&. In the latter two cases, it is followed by the name of a provider or engine, separated by colon, that will be passed to OpenSSL\*(Aqs "engine" or "provider" logic\&. Configures the signing mechanism to use when creating verity signature partitions with the +\fIVerity=signature\fR +setting in partition files\&. +.sp +Added in version 256\&. +.RE +.PP \fB\-\-certificate=\fR .RS 4 Takes a file system path\&. Configures the PEM encoded X\&.509 certificate to use when creating verity signature partitions with the @@ -435,7 +448,7 @@ and have the same effect on partitions where TPM2 enrollment is requested\&. Added in version 248\&. .RE .PP -\fB\-\-tpm2\-device\-key=\fR [PATH], \fB\-\-tpm2\-seal\-key\-handle=\fR [HANDLE] +\fB\-\-tpm2\-device\-key=\fR\fB\fIPATH\fR\fR, \fB\-\-tpm2\-seal\-key\-handle=\fR\fB\fIHANDLE\fR\fR .RS 4 Configures a TPM2 SRK key to bind encryption to\&. See \fBsystemd-cryptenroll\fR(1) @@ -444,7 +457,7 @@ for details on this option\&. Added in version 255\&. .RE .PP -\fB\-\-tpm2\-public\-key=\fR [PATH], \fB\-\-tpm2\-public\-key\-pcrs=\fR [PCR...] +\fB\-\-tpm2\-public\-key=\fR\fB\fIPATH\fR\fR, \fB\-\-tpm2\-public\-key\-pcrs=\fR\fB\fIPCR\fR\fI[+PCR\&.\&.\&.]\fR\fR .RS 4 Configures a TPM2 signed PCR policy to bind encryption to\&. See \fBsystemd-cryptenroll\fR(1) @@ -453,7 +466,7 @@ for details on these two options\&. Added in version 252\&. .RE .PP -\fB\-\-tpm2\-pcrlock=\fR [PATH] +\fB\-\-tpm2\-pcrlock=\fR\fB\fIPATH\fR\fR .RS 4 Configures a TPM2 pcrlock policy to bind encryption to\&. See \fBsystemd-cryptenroll\fR(1) @@ -462,7 +475,7 @@ for details on this option\&. Added in version 255\&. .RE .PP -\fB\-\-split=\fR [BOOL] +\fB\-\-split=\fR\fB\fIBOOL\fR\fR .RS 4 Enables generation of split artifacts from partitions configured with \fISplitName=\fR\&. If enabled, for each partition with @@ -485,7 +498,7 @@ is enabled\&. Added in version 252\&. .RE .PP -\fB\-\-include\-partitions=\fR [PARTITION...], \fB\-\-exclude\-partitions=\fR [PARTITION...] +\fB\-\-include\-partitions=\fR\fB\fIPARTITIONS\fR\fR, \fB\-\-exclude\-partitions=\fR\fB\fIPARTITIONS\fR\fR .RS 4 These options specify which partition types \fBsystemd\-repart\fR @@ -501,7 +514,7 @@ in Added in version 253\&. .RE .PP -\fB\-\-defer\-partitions=\fR [PARTITION...] +\fB\-\-defer\-partitions=\fR\fB\fIPARTITIONS\fR\fR .RS 4 This option specifies for which partition types \fBsystemd\-repart\fR @@ -514,7 +527,7 @@ was executed\&. Added in version 253\&. .RE .PP -\fB\-\-sector\-size=\fR [BYTES] +\fB\-\-sector\-size=\fR\fB\fIBYTES\fR\fR .RS 4 This option allows configuring the sector size of the image produced by \fBsystemd\-repart\fR\&. It takes a value that is a power of @@ -527,7 +540,7 @@ and Added in version 253\&. .RE .PP -\fB\-\-architecture=\fR [ARCH] +\fB\-\-architecture=\fR\fB\fIARCH\fR\fR .RS 4 This option allows overriding the architecture used for architecture specific partition types\&. For example, if set to "arm64" @@ -562,7 +575,7 @@ or Added in version 254\&. .RE .PP -\fB\-\-offline=\fR [BOOL] +\fB\-\-offline=\fR\fB\fIBOOL\fR\fR .RS 4 Instructs \fBsystemd\-repart\fR @@ -576,7 +589,7 @@ will build the image online if possible and fall back to building the image offl Added in version 254\&. .RE .PP -\fB\-\-copy\-from=\fR [IMAGE] +\fB\-\-copy\-from=\fR\fB\fIIMAGE\fR\fR .RS 4 Instructs \fBsystemd\-repart\fR @@ -585,7 +598,7 @@ to synthesize partition definitions from the partition table in the given image\ Added in version 255\&. .RE .PP -\fB\-\-copy\-source=\fR\fIPATH\fR, \fB\-s\fR \fIPATH\fR +\fB\-\-copy\-source=\fR\fB\fIPATH\fR\fR, \fB\-s\fR \fIPATH\fR .RS 4 Specifies a source directory all \fICopyFiles=\fR @@ -603,7 +616,7 @@ where the latter takes precedence\&. Added in version 255\&. .RE .PP -\fB\-\-make\-ddi=\fR\fITYPE\fR +\fB\-\-make\-ddi=\fR\fB\fITYPE\fR\fR .RS 4 Takes one of "sysext", @@ -662,6 +675,32 @@ Shortcuts for Added in version 255\&. .RE .PP +\fB\-\-generate\-fstab=\fR\fB\fIPATH\fR\fR +.RS 4 +Specifies a path where to write fstab entries for the mountpoints configured with +\fBMountPoint=\fR +in the root directory specified with +\fB\-\-copy\-source=\fR +or +\fB\-\-root=\fR +or in the host\*(Aqs root directory if neither is specified\&. Disabled by default\&. +.sp +Added in version 256\&. +.RE +.PP +\fB\-\-generate\-crypttab=\fR\fB\fIPATH\fR\fR +.RS 4 +Specifies a path where to write crypttab entries for the encrypted volumes configured with +\fBEncryptedVolume=\fR +in the root directory specified with +\fB\-\-copy\-source=\fR +or +\fB\-\-root=\fR +or in the host\*(Aqs root directory if neither is specified\&. Disabled by default\&. +.sp +Added in version 256\&. +.RE +.PP \fB\-h\fR, \fB\-\-help\fR .RS 4 Print a short help text and exit\&. @@ -682,7 +721,7 @@ Do not pipe output into a pager\&. Do not print the legend, i\&.e\&. column headers and the footer with hints\&. .RE .PP -\fB\-\-json=\fR\fIMODE\fR +\fB\-\-json=\fR\fB\fIMODE\fR\fR .RS 4 Shows output formatted as JSON\&. Expects one of "short" @@ -701,7 +740,7 @@ On success, 0 is returned, a non\-zero failure code otherwise\&. .PP The following creates a configuration extension DDI (confext) for an /etc/motd -update\&. +update: .sp .if n \{\ .RS 4 @@ -724,14 +763,37 @@ systemd\-confext refresh .PP The DDI generated that way may be applied to the system with \fBsystemd-confext\fR(1)\&. +.PP +\fBExample\ \&2.\ \&Generate a system extension image and sign it via PKCS11\fR +.PP +The following creates a system extension DDI (sysext) for an +/usr/foo +update and signs it with a hardware token via PKCS11\&. +.sp +.if n \{\ +.RS 4 +.\} +.nf +mkdir tree tree/usr tree/usr/lib/extension\-release\&.d +echo "Hello World" > tree/usr/foo +cat > tree/usr/lib/extension\-release\&.d/extension\-release\&.my\-foo <<EOF +ID=fedora +VERSION_ID=38 +IMAGE_ID=my\-foo +IMAGE_VERSION=7 +EOF +systemd\-repart \-\-make\-ddi=sysext \-\-private\-key\-source=engine:pkcs11 \-\-private\-key="pkcs11:model=PKCS%2315%20emulated;manufacturer=piv_II;serial=0123456789abcdef;token=Some%20Cert" \-\-certificate=cert\&.crt \-s tree/ /var/lib/extensions/my\-foo\&.sysext\&.raw +systemd\-sysext refresh +.fi +.if n \{\ +.RE +.\} +.PP +The DDI generated that way may be applied to the system with +\fBsystemd-sysext\fR(1)\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBrepart.d\fR(5), -\fBmachine-id\fR(5), -\fBsystemd-cryptenroll\fR(1), -\fBportablectl\fR(1), -\fBsystemd-sysext\fR(8) +\fBsystemd\fR(1), \fBrepart.d\fR(5), \fBmachine-id\fR(5), \fBsystemd-cryptenroll\fR(1), \fBportablectl\fR(1), \fBsystemd-sysext\fR(8) .SH "NOTES" .IP " 1." 4 portable service diff --git a/upstream/debian-unstable/man8/systemd-resolved.service.8 b/upstream/debian-unstable/man8/systemd-resolved.service.8 index 86ed8074..00e8257a 100644 --- a/upstream/debian-unstable/man8/systemd-resolved.service.8 +++ b/upstream/debian-unstable/man8/systemd-resolved.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-RESOLVED\&.SERVICE" "8" "" "systemd 255" "systemd-resolved.service" +.TH "SYSTEMD\-RESOLVED\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-resolved.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -41,7 +41,7 @@ is a system service that provides network name resolution to local applications\ .\} The native, fully\-featured API \fBsystemd\-resolved\fR -exposes on the bus, see +exposes via D\-Bus, see \fBorg.freedesktop.resolve1\fR(5) and \fBorg.freedesktop.LogControl1\fR(5) @@ -56,6 +56,21 @@ for details\&. Usage of this API is generally recommended to clients as it is as .sp -1 .IP \(bu 2.3 .\} +The native API +\fBsystemd\-resolved\fR +exposes via Varlink on the +/run/systemd/resolve/io\&.systemd\&.Resolve +AF_UNIX socket\&. This provides similar functionality as the D\-Bus interface, but is available during the entire runtime, without requiring a running D\-Bus system bus broker service\&. +.RE +.sp +.RS 4 +.ie n \{\ +\h'-04'\(bu\h'+03'\c +.\} +.el \{\ +.sp -1 +.IP \(bu 2.3 +.\} The glibc \fBgetaddrinfo\fR(3) API as defined by @@ -657,6 +672,17 @@ command, however the latter is recommended since it operates in a synchronous wa .sp Added in version 235\&. .RE +.PP +\fBSIGHUP\fR +.RS 4 +Upon reception of the +\fBSIGHUP\fR +process signal +\fBsystemd\-resolved\fR +will flush all caches it maintains, drop all open TCP connections (if any), and reload its configuration files\&. +.sp +Added in version 256\&. +.RE .SH "CREDENTIALS" .PP \fBsystemd\-resolved\fR @@ -737,15 +763,7 @@ Port 5355 on all local addresses, both IPv4 and IP6 (0\&.0\&.0\&.0 and ::0), for .RE .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBresolved.conf\fR(5), -\fBdnssec-trust-anchors.d\fR(5), -\fBnss-resolve\fR(8), -\fBresolvectl\fR(1), -\fBresolv.conf\fR(5), -\fBhosts\fR(5), -\fBsystemd.network\fR(5), -\fBsystemd-networkd.service\fR(8) +\fBsystemd\fR(1), \fBresolved.conf\fR(5), \fBdnssec-trust-anchors.d\fR(5), \fBnss-resolve\fR(8), \fBresolvectl\fR(1), \fBresolv.conf\fR(5), \fBhosts\fR(5), \fBsystemd.network\fR(5), \fBsystemd-networkd.service\fR(8) .SH "NOTES" .IP " 1." 4 RFC3493 diff --git a/upstream/debian-unstable/man8/systemd-rfkill.service.8 b/upstream/debian-unstable/man8/systemd-rfkill.service.8 index 17a091d7..387cd524 100644 --- a/upstream/debian-unstable/man8/systemd-rfkill.service.8 +++ b/upstream/debian-unstable/man8/systemd-rfkill.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-RFKILL\&.SERVICE" "8" "" "systemd 255" "systemd-rfkill.service" +.TH "SYSTEMD\-RFKILL\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-rfkill.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff --git a/upstream/debian-unstable/man8/systemd-run-generator.8 b/upstream/debian-unstable/man8/systemd-run-generator.8 index 759d7647..97551fdc 100644 --- a/upstream/debian-unstable/man8/systemd-run-generator.8 +++ b/upstream/debian-unstable/man8/systemd-run-generator.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-RUN\-GENERATOR" "8" "" "systemd 255" "systemd-run-generator" +.TH "SYSTEMD\-RUN\-GENERATOR" "8" "" "systemd 256~rc3" "systemd-run-generator" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -81,9 +81,4 @@ Use a command like the following to add a user to the user database inside a con end up in the generated unit file together and are neither split apart by the command shell nor by the generator\&.) .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemctl\fR(1), -\fBkernel-command-line\fR(7), -\fBsystemd-nspawn\fR(7), -\fBsystemd.unit\fR(5), -\fBsystemd.service\fR(5) +\fBsystemd\fR(1), \fBsystemctl\fR(1), \fBkernel-command-line\fR(7), \fBsystemd-nspawn\fR(7), \fBsystemd.unit\fR(5), \fBsystemd.service\fR(5) diff --git a/upstream/debian-unstable/man8/systemd-socket-proxyd.8 b/upstream/debian-unstable/man8/systemd-socket-proxyd.8 index ef77126a..6ca6077c 100644 --- a/upstream/debian-unstable/man8/systemd-socket-proxyd.8 +++ b/upstream/debian-unstable/man8/systemd-socket-proxyd.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-SOCKET\-PROXYD" "8" "" "systemd 255" "systemd-socket-proxyd" +.TH "SYSTEMD\-SOCKET\-PROXYD" "8" "" "systemd 256~rc3" "systemd-socket-proxyd" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -39,6 +39,18 @@ This utility\*(Aqs behavior is similar to are support for socket activation with "Accept=no" and an event\-driven design that scales better with the number of connections\&. +.PP +Note that +\fBsystemd\-socket\-proxyd\fR +will not forward socket side channel information, i\&.e\&. will not forward +\fBSCM_RIGHTS\fR, +\fBSCM_CREDENTIALS\fR, +\fBSCM_SECURITY\fR, +\fBSO_PEERCRED\fR, +\fBSO_PEERPIDFD\fR, +\fBSO_PEERSEC\fR, +\fBSO_PEERGROUPS\fR +and similar\&. .SH "OPTIONS" .PP The following options are understood: @@ -229,10 +241,4 @@ $ curl http://localhost:80/ .\} .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd.socket\fR(5), -\fBsystemd.service\fR(5), -\fBsystemctl\fR(1), -\fBsocat\fR(1), -\fBnginx\fR(1), -\fBcurl\fR(1) +\fBsystemd\fR(1), \fBsystemd.socket\fR(5), \fBsystemd.service\fR(5), \fBsystemctl\fR(1), \fBsocat\fR(1), \fBnginx\fR(1), \fBcurl\fR(1) diff --git a/upstream/debian-unstable/man8/systemd-soft-reboot.service.8 b/upstream/debian-unstable/man8/systemd-soft-reboot.service.8 index e7e7c776..7ede2ef7 100644 --- a/upstream/debian-unstable/man8/systemd-soft-reboot.service.8 +++ b/upstream/debian-unstable/man8/systemd-soft-reboot.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-SOFT\-REBOOT\&.SERVICE" "8" "" "systemd 255" "systemd-soft-reboot.service" +.TH "SYSTEMD\-SOFT\-REBOOT\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-soft-reboot.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -216,35 +216,24 @@ via \fISurviveFinalKillSignal=yes\fR, and also be configured to avoid being stopped on isolate via \fIIgnoreOnIsolate=yes\fR\&. They also have to be configured to be stopped on normal shutdown, reboot and maintenance mode\&. Finally, they have to be ordered after \fBbasic\&.target\fR -to ensure correct ordeering on boot\&. Note that in case any new or custom units are used to isolate to, or that implement an equivalent shutdown functionality, they will also have to be configured manually for correct ordering and conflicting\&. For example: +to ensure correct ordering on boot\&. Note that in case any new or custom units are used to isolate to, or that implement an equivalent shutdown functionality, they will also have to be configured manually for correct ordering and conflicting\&. For example: .sp .if n \{\ .RS 4 .\} .nf [Unit] -Description=My surviving service +Description=My Surviving Service SurviveFinalKillSignal=yes IgnoreOnIsolate=yes DefaultDependencies=no After=basic\&.target -Conflicts=reboot\&.target -Before=reboot\&.target -Conflicts=kexec\&.target -Before=kexec\&.target -Conflicts=poweroff\&.target -Before=poweroff\&.target -Conflicts=halt\&.target -Before=halt\&.target -Conflicts=rescue\&.target -Before=rescue\&.target -Conflicts=emergency\&.target -Before=emergency\&.target +Conflicts=reboot\&.target kexec\&.target poweroff\&.target halt\&.target rescue\&.target emergency\&.target +Before=shutdown\&.target rescue\&.target emergency\&.target [Service] Type=oneshot ExecStart=sleep infinity - .fi .if n \{\ .RE @@ -280,7 +269,8 @@ If the unit publishes a service over D\-Bus, the connection needs to be re\-esta .nf /* SPDX\-License\-Identifier: MIT\-0 */ -/* Implements a D\-Bus service that automatically reconnects when the system bus is restarted\&. +/* A D\-Bus service that automatically reconnects when the system bus is + * restarted\&. * * Compile with \*(Aqcc sd_bus_service_reconnect\&.c $(pkg\-config \-\-libs \-\-cflags libsystemd)\*(Aq * @@ -290,18 +280,18 @@ If the unit publishes a service over D\-Bus, the connection needs to be re\-esta <?xml version="1\&.0"?> <!\-\-*\-nxml\-*\-\-> <!DOCTYPE busconfig PUBLIC "\-//freedesktop//DTD D\-BUS Bus Configuration 1\&.0//EN" - "http://www\&.freedesktop\&.org/standards/dbus/1\&.0/busconfig\&.dtd"> + "http://www\&.freedesktop\&.org/standards/dbus/1\&.0/busconfig\&.dtd"> <busconfig> - <policy user="root"> - <allow own="org\&.freedesktop\&.ReconnectExample"/> - <allow send_destination="org\&.freedesktop\&.ReconnectExample"/> - <allow receive_sender="org\&.freedesktop\&.ReconnectExample"/> - </policy> - - <policy context="default"> - <allow send_destination="org\&.freedesktop\&.ReconnectExample"/> - <allow receive_sender="org\&.freedesktop\&.ReconnectExample"/> - </policy> + <policy user="root"> + <allow own="org\&.freedesktop\&.ReconnectExample"/> + <allow send_destination="org\&.freedesktop\&.ReconnectExample"/> + <allow receive_sender="org\&.freedesktop\&.ReconnectExample"/> + </policy> + + <policy context="default"> + <allow send_destination="org\&.freedesktop\&.ReconnectExample"/> + <allow receive_sender="org\&.freedesktop\&.ReconnectExample"/> + </policy> </busconfig> * @@ -311,7 +301,7 @@ If the unit publishes a service over D\-Bus, the connection needs to be re\-esta * /org/freedesktop/ReconnectExample \e * org\&.freedesktop\&.ReconnectExample \e * Example - * s "example" + * s "example" */ #include <errno\&.h> @@ -321,13 +311,10 @@ If the unit publishes a service over D\-Bus, the connection needs to be re\-esta #define _cleanup_(f) __attribute__((cleanup(f))) -#define check(x) ({ \e - int _r = (x); \e - errno = _r < 0 ? \-_r : 0; \e - printf(#x ": %m\en"); \e - if (_r < 0) \e - return EXIT_FAILURE; \e - }) +static int log_error(int r, const char *str) { + fprintf(stderr, "%s failed: %s\en", str, strerror(\-r)); + return r; +} typedef struct object { const char *example; @@ -369,12 +356,24 @@ static const sd_bus_vtable vtable[] = { static int setup(object *o); static int on_disconnect(sd_bus_message *message, void *userdata, sd_bus_error *ret_error) { - check(setup((object *)userdata)); - return 0; + int r; + + r = setup((object *)userdata); + if (r < 0) { + object *o = userdata; + r = sd_event_exit(*o\->event, r); + if (r < 0) + return log_error(r, "sd_event_exit()"); + } + + return 1; } -/* Ensure the event loop exits with a clear error if acquiring the well\-known service name fails */ +/* Ensure the event loop exits with a clear error if acquiring the well\-known + * service name fails */ static int request_name_callback(sd_bus_message *m, void *userdata, sd_bus_error *ret_error) { + int r; + if (!sd_bus_message_is_method_error(m, NULL)) return 1; @@ -383,27 +382,34 @@ static int request_name_callback(sd_bus_message *m, void *userdata, sd_bus_error if (sd_bus_error_has_names(error, SD_BUS_ERROR_TIMEOUT, SD_BUS_ERROR_NO_REPLY)) return 1; /* The bus is not available, try again later */ - printf("Failed to request name: %s\en", error\->message); + fprintf(stderr, "Failed to request name: %s\en", error\->message); object *o = userdata; - check(sd_event_exit(*o\->event, \-sd_bus_error_get_errno(error))); + r = sd_event_exit(*o\->event, \-sd_bus_error_get_errno(error)); + if (r < 0) + return log_error(r, "sd_event_exit()"); return 1; } static int setup(object *o) { - /* If we are reconnecting, then the bus object needs to be closed, detached from - * the event loop and recreated\&. + int r; + + /* If we are reconnecting, then the bus object needs to be closed, detached + * from the event loop and recreated\&. * https://www\&.freedesktop\&.org/software/systemd/man/sd_bus_detach_event\&.html * https://www\&.freedesktop\&.org/software/systemd/man/sd_bus_close_unref\&.html */ if (*o\->bus) { - check(sd_bus_detach_event(*o\->bus)); + r = sd_bus_detach_event(*o\->bus); + if (r < 0) + return log_error(r, "sd_bus_detach_event()"); *o\->bus = sd_bus_close_unref(*o\->bus); } - /* Set up a new bus object for the system bus, configure it to wait for D\-Bus to be available - * instead of failing if it is not, and start it\&. All the following operations are asyncronous - * and will not block waiting for D\-Bus to be available\&. + /* Set up a new bus object for the system bus, configure it to wait for D\-Bus + * to be available instead of failing if it is not, and start it\&. All the + * following operations are asynchronous and will not block waiting for D\-Bus + * to be available\&. * https://www\&.freedesktop\&.org/software/systemd/man/sd_bus_new\&.html * https://www\&.freedesktop\&.org/software/systemd/man/sd_bus_set_address\&.html * https://www\&.freedesktop\&.org/software/systemd/man/sd_bus_set_bus_client\&.html @@ -412,62 +418,82 @@ static int setup(object *o) { * https://www\&.freedesktop\&.org/software/systemd/man/sd_bus_set_connected_signal\&.html * https://www\&.freedesktop\&.org/software/systemd/man/sd_bus_start\&.html */ - check(sd_bus_new(o\->bus)); - check(sd_bus_set_address(*o\->bus, "unix:path=/run/dbus/system_bus_socket")); - check(sd_bus_set_bus_client(*o\->bus, 1)); - check(sd_bus_negotiate_creds(*o\->bus, 1, SD_BUS_CREDS_UID|SD_BUS_CREDS_EUID|SD_BUS_CREDS_EFFECTIVE_CAPS)); - check(sd_bus_set_watch_bind(*o\->bus, 1)); - check(sd_bus_start(*o\->bus)); + r = sd_bus_new(o\->bus); + if (r < 0) + return log_error(r, "sd_bus_new()"); + r = sd_bus_set_address(*o\->bus, "unix:path=/run/dbus/system_bus_socket"); + if (r < 0) + return log_error(r, "sd_bus_set_address()"); + r = sd_bus_set_bus_client(*o\->bus, 1); + if (r < 0) + return log_error(r, "sd_bus_set_bus_client()"); + r = sd_bus_negotiate_creds(*o\->bus, 1, SD_BUS_CREDS_UID|SD_BUS_CREDS_EUID|SD_BUS_CREDS_EFFECTIVE_CAPS); + if (r < 0) + return log_error(r, "sd_bus_negotiate_creds()"); + r = sd_bus_set_watch_bind(*o\->bus, 1); + if (r < 0) + return log_error(r, "sd_bus_set_watch_bind()"); + r = sd_bus_start(*o\->bus); + if (r < 0) + return log_error(r, "sd_bus_start()"); /* Publish an interface on the bus, specifying our well\-known object access * path and public interface name\&. * https://www\&.freedesktop\&.org/software/systemd/man/sd_bus_add_object\&.html * https://dbus\&.freedesktop\&.org/doc/dbus\-tutorial\&.html */ - check(sd_bus_add_object_vtable(*o\->bus, - NULL, - "/org/freedesktop/ReconnectExample", - "org\&.freedesktop\&.ReconnectExample", - vtable, - o)); - /* By default the service is only assigned an ephemeral name\&. Also add a well\-known - * one, so that clients know whom to call\&. This needs to be asynchronous, as - * D\-Bus might not be yet available\&. The callback will check whether the error is - * expected or not, in case it fails\&. + r = sd_bus_add_object_vtable(*o\->bus, + NULL, + "/org/freedesktop/ReconnectExample", + "org\&.freedesktop\&.ReconnectExample", + vtable, + o); + if (r < 0) + return log_error(r, "sd_bus_add_object_vtable()"); + /* By default the service is only assigned an ephemeral name\&. Also add a + * well\-known one, so that clients know whom to call\&. This needs to be + * asynchronous, as D\-Bus might not be yet available\&. The callback will check + * whether the error is expected or not, in case it fails\&. * https://www\&.freedesktop\&.org/software/systemd/man/sd_bus_request_name\&.html */ - check(sd_bus_request_name_async(*o\->bus, - NULL, - "org\&.freedesktop\&.ReconnectExample", - 0, - request_name_callback, - o)); - /* When D\-Bus is disconnected this callback will be invoked, which will - * set up the connection again\&. This needs to be asynchronous, as D\-Bus might not - * yet be available\&. + r = sd_bus_request_name_async(*o\->bus, + NULL, + "org\&.freedesktop\&.ReconnectExample", + 0, + request_name_callback, + o); + if (r < 0) + return log_error(r, "sd_bus_request_name_async()"); + /* When D\-Bus is disconnected this callback will be invoked, which will set up + * the connection again\&. This needs to be asynchronous, as D\-Bus might not yet + * be available\&. * https://www\&.freedesktop\&.org/software/systemd/man/sd_bus_match_signal_async\&.html */ - check(sd_bus_match_signal_async(*o\->bus, - NULL, - "org\&.freedesktop\&.DBus\&.Local", - NULL, - "org\&.freedesktop\&.DBus\&.Local", - "Disconnected", - on_disconnect, - NULL, - o)); - /* Attach the bus object to the event loop so that calls and signals are processed\&. + r = sd_bus_match_signal_async(*o\->bus, + NULL, + "org\&.freedesktop\&.DBus\&.Local", + NULL, + "org\&.freedesktop\&.DBus\&.Local", + "Disconnected", + on_disconnect, + NULL, + o); + if (r < 0) + return log_error(r, "sd_bus_match_signal_async()"); + /* Attach the bus object to the event loop so that calls and signals are + * processed\&. * https://www\&.freedesktop\&.org/software/systemd/man/sd_bus_attach_event\&.html */ - check(sd_bus_attach_event(*o\->bus, *o\->event, 0)); + r = sd_bus_attach_event(*o\->bus, *o\->event, 0); + if (r < 0) + return log_error(r, "sd_bus_attach_event()"); return 0; } int main(int argc, char **argv) { /* The bus should be relinquished before the program terminates\&. The cleanup - * attribute allows us to do it nicely and cleanly whenever we exit the - * block\&. + * attribute allows us to do it nicely and cleanly whenever we exit the block\&. */ _cleanup_(sd_bus_flush_close_unrefp) sd_bus *bus = NULL; _cleanup_(sd_event_unrefp) sd_event *event = NULL; @@ -476,28 +502,42 @@ int main(int argc, char **argv) { \&.bus = &bus, \&.event = &event, }; + int r; /* Create an event loop data structure, with default parameters\&. * https://www\&.freedesktop\&.org/software/systemd/man/sd_event_default\&.html */ - check(sd_event_default(&event)); + r = sd_event_default(&event); + if (r < 0) + return log_error(r, "sd_event_default()"); - /* By default the event loop will terminate when all sources have disappeared, so - * we have to keep it \*(Aqoccupied\*(Aq\&. Register signal handling to do so\&. + /* By default the event loop will terminate when all sources have disappeared, + * so we have to keep it \*(Aqoccupied\*(Aq\&. Register signal handling to do so\&. * https://www\&.freedesktop\&.org/software/systemd/man/sd_event_add_signal\&.html */ - check(sd_event_add_signal(event, NULL, SIGINT|SD_EVENT_SIGNAL_PROCMASK, NULL, NULL)); - check(sd_event_add_signal(event, NULL, SIGTERM|SD_EVENT_SIGNAL_PROCMASK, NULL, NULL)); + r = sd_event_add_signal(event, NULL, SIGINT|SD_EVENT_SIGNAL_PROCMASK, NULL, NULL); + if (r < 0) + return log_error(r, "sd_event_add_signal(SIGINT)"); + + r = sd_event_add_signal(event, NULL, SIGTERM|SD_EVENT_SIGNAL_PROCMASK, NULL, NULL); + if (r < 0) + return log_error(r, "sd_event_add_signal(SIGTERM)"); - check(setup(&o)); + r = setup(&o); + if (r < 0) + return EXIT_FAILURE; /* Enter the main loop, it will exit only on sigint/sigterm\&. * https://www\&.freedesktop\&.org/software/systemd/man/sd_event_loop\&.html */ - check(sd_event_loop(event)); + r = sd_event_loop(event); + if (r < 0) + return log_error(r, "sd_event_loop()"); /* https://www\&.freedesktop\&.org/software/systemd/man/sd_bus_release_name\&.html */ - check(sd_bus_release_name(bus, "org\&.freedesktop\&.ReconnectExample")); + r = sd_bus_release_name(bus, "org\&.freedesktop\&.ReconnectExample"); + if (r < 0) + return log_error(r, "sd_bus_release_name()"); return 0; } @@ -535,12 +575,7 @@ will be performed when the command is invoked\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemctl\fR(1), -\fBsystemd.special\fR(7), -\fBsystemd-poweroff.service\fR(8), -\fBsystemd-suspend.service\fR(8), -\fBbootup\fR(7) +\fBsystemd\fR(1), \fBsystemctl\fR(1), \fBsystemd.special\fR(7), \fBsystemd-poweroff.service\fR(8), \fBsystemd-suspend.service\fR(8), \fBbootup\fR(7) .SH "NOTES" .IP " 1." 4 Portable Services diff --git a/upstream/debian-unstable/man8/systemd-ssh-generator.8 b/upstream/debian-unstable/man8/systemd-ssh-generator.8 new file mode 100644 index 00000000..cb8151c7 --- /dev/null +++ b/upstream/debian-unstable/man8/systemd-ssh-generator.8 @@ -0,0 +1,183 @@ +'\" t +.TH "SYSTEMD\-SSH\-GENERATOR" "8" "" "systemd 256~rc3" "systemd-ssh-generator" +.\" ----------------------------------------------------------------- +.\" * Define some portability stuff +.\" ----------------------------------------------------------------- +.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ +.\" http://bugs.debian.org/507673 +.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html +.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ +.ie \n(.g .ds Aq \(aq +.el .ds Aq ' +.\" ----------------------------------------------------------------- +.\" * set default formatting +.\" ----------------------------------------------------------------- +.\" disable hyphenation +.nh +.\" disable justification (adjust text to left margin only) +.ad l +.\" ----------------------------------------------------------------- +.\" * MAIN CONTENT STARTS HERE * +.\" ----------------------------------------------------------------- +.SH "NAME" +systemd-ssh-generator \- Generator for binding a socket\-activated SSH server to local \fBAF_VSOCK\fR and \fBAF_UNIX\fR sockets +.SH "SYNOPSIS" +.PP +/usr/lib/systemd/system\-generators/systemd\-ssh\-generator +.SH "DESCRIPTION" +.PP +\fBsystemd\-ssh\-generator\fR +binds a socket\-activated SSH server to local +\fBAF_VSOCK\fR +and +\fBAF_UNIX\fR +sockets under certain conditions\&. It only has an effect if the +\fBsshd\fR(8) +binary is installed\&. Specifically, it does the following: +.sp +.RS 4 +.ie n \{\ +\h'-04'\(bu\h'+03'\c +.\} +.el \{\ +.sp -1 +.IP \(bu 2.3 +.\} +If invoked in a VM with +\fBAF_VSOCK\fR +support, a socket\-activated SSH per\-connection service is bound to +\fBAF_VSOCK\fR +port 22\&. +.RE +.sp +.RS 4 +.ie n \{\ +\h'-04'\(bu\h'+03'\c +.\} +.el \{\ +.sp -1 +.IP \(bu 2.3 +.\} +If invoked in a container environment with a writable directory +/run/host/unix\-export/ +pre\-mounted it binds SSH to an +\fBAF_UNIX\fR +socket +/run/host/unix\-export/ssh\&. The assumption is that this directory is bind mounted to the host side as well, and can be used to connect to the container from there\&. See +\m[blue]\fBContainer Interface\fR\m[]\&\s-2\u[1]\d\s+2 +for more information about this interface\&. +.RE +.sp +.RS 4 +.ie n \{\ +\h'-04'\(bu\h'+03'\c +.\} +.el \{\ +.sp -1 +.IP \(bu 2.3 +.\} +A local +\fBAF_UNIX\fR +socket +/run/ssh\-unix\-local/socket +is also bound, unconditionally\&. This may be used for SSH communication from the host to itself, without involving networking, for example to traverse security boundaries safely and with secure authentication\&. +.RE +.sp +.RS 4 +.ie n \{\ +\h'-04'\(bu\h'+03'\c +.\} +.el \{\ +.sp -1 +.IP \(bu 2.3 +.\} +Additional +\fBAF_UNIX\fR +and +\fBAF_VSOCK\fR +sockets are optionally bound, based on the +\fIsystemd\&.ssh_listen=\fR +kernel command line option or the +ssh\&.listen +system credential (see below)\&. +.RE +.PP +See +\fBsystemd-ssh-proxy\fR(1) +for details on how to connect to these sockets via the +\fBssh\fR +client\&. +.PP +The +\fIssh\&.authorized_keys\&.root\fR +credential can be used to allow specific public keys to log in over SSH\&. See +\fBsystemd.systemd-credentials\fR(7) +for more information\&. +.PP +The generator will use a packaged +sshd@\&.service +service template file if one exists, and otherwise generate a suitable service template file\&. +.PP +systemd\-ssh\-generator +implements +\fBsystemd.generator\fR(7)\&. +.SH "KERNEL COMMAND LINE" +.PP +systemd\-ssh\-generator +understands the following +\fBkernel-command-line\fR(7) +parameters: +.PP +\fIsystemd\&.ssh_auto=\fR +.RS 4 +This option takes an optional boolean argument, and defaults to yes\&. If enabled, the automatic binding to the +\fBAF_VSOCK\fR +and +\fBAF_UNIX\fR +sockets listed above is done\&. If disable, this is not done, except for those explicitly requested via +\fIsystemd\&.ssh_listen=\fR +on the kernel command line or via the +\fIssh\&.listen\fR +system credential\&. +.sp +Added in version 256\&. +.RE +.PP +\fIsystemd\&.ssh_listen=\fR +.RS 4 +This option configures an additional socket to bind SSH to\&. It may be used multiple times to bind multiple sockets\&. The syntax should follow the one of +\fIListenStream=\fR, see +\fBsystemd.socket\fR(5) +for details\&. This functionality supports all socket families systemd supports, including +\fBAF_INET\fR +and +\fBAF_INET6\fR\&. +.sp +Added in version 256\&. +.RE +.SH "CREDENTIALS" +.PP +\fBsystemd\-ssh\-generator\fR +supports the system credentials logic\&. The following credentials are used when passed in: +.PP +\fIssh\&.listen\fR +.RS 4 +This credential should be a text file, with each line referencing one additional socket to bind SSH to\&. The syntax should follow the one of +\fIListenStream=\fR, see +\fBsystemd.socket\fR(5) +for details\&. This functionality supports all socket families systemd supports, including +\fBAF_INET\fR +and +\fBAF_INET6\fR\&. +.sp +Added in version 256\&. +.RE +.SH "SEE ALSO" +.PP +\fBsystemd\fR(1), \fBkernel-command-line\fR(7), \fBsystemd.system-credentials\fR(7), \fBvsock\fR(7), \fBunix\fR(7), \fBssh\fR(1), \fBsshd\fR(8) +.SH "NOTES" +.IP " 1." 4 +Container Interface +.RS 4 +\%https://systemd.io/CONTAINER_INTERFACE +.RE diff --git a/upstream/debian-unstable/man8/systemd-storagetm.service.8 b/upstream/debian-unstable/man8/systemd-storagetm.service.8 index 2f67cdb1..852271d5 100644 --- a/upstream/debian-unstable/man8/systemd-storagetm.service.8 +++ b/upstream/debian-unstable/man8/systemd-storagetm.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-STORAGETM\&.SERVICE" "8" "" "systemd 255" "systemd-storagetm.service" +.TH "SYSTEMD\-STORAGETM\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-storagetm.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -32,8 +32,22 @@ systemd\-storagetm\&.service is a service that exposes all local block devices as NVMe\-TCP mass storage devices\&. Its primary use\-case is to be invoked by the storage\-target\-mode\&.target unit that can be booted into\&. +.if n \{\ +.sp +.\} +.RS 4 +.it 1 an-trap +.nr an-no-space-flag 1 +.nr an-break-flag 1 +.br +.ps +1 +\fBWarning\fR +.ps -1 +.br .PP -Warning: the NVMe disks are currently exposed without authentication or encryption, in read/write mode\&. This means network peers may read from and write to the device without any restrictions\&. This functionality should hence only be used in a local setup\&. +The NVMe disks are currently exposed without authentication or encryption, in read/write mode\&. This means network peers may read from and write to the device without any restrictions\&. This functionality should hence only be used in a local setup\&. +.sp .5v +.RE .PP Note that to function properly networking must be configured too\&. The recommended mechanism to boot into a storage target mode is by adding "rd\&.systemd\&.unit=storage\-target\-mode\&.target ip=link\-local" @@ -54,7 +68,7 @@ The following options are understood: \fB\-\-nqn=\fR .RS 4 Takes a string\&. If specified configures the NVMe Qualified Name to use for the exposed NVMe\-TCP mass storage devices\&. The NQN should follow the syntax described in -\m[blue]\fBNVM Express Base Specification 2\&.0c\fR\m[]\&\s-2\u[1]\d\s+2, section 4\&.5 "NVMe Qualified Names"\&. Note that the NQN specified here will be suffixed with a dot and the the block device name before it is exposed on the NVMe target\&. If not specified defaults to +\m[blue]\fBNVM Express Base Specification 2\&.0c\fR\m[]\&\s-2\u[1]\d\s+2, section 4\&.5 "NVMe Qualified Names"\&. Note that the NQN specified here will be suffixed with a dot and the block device name before it is exposed on the NVMe target\&. If not specified defaults to "nqn\&.2023\-10\&.io\&.systemd:storagetm\&.\fIID\fR", where ID is replaced by a 128bit ID derived from \fBmachine-id\fR(5)\&. .sp @@ -79,8 +93,7 @@ Print a short version string and exit\&. .RE .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd.special\fR(7) +\fBsystemd\fR(1), \fBsystemd.special\fR(7) .SH "NOTES" .IP " 1." 4 NVM Express Base Specification 2.0c diff --git a/upstream/debian-unstable/man8/systemd-suspend.service.8 b/upstream/debian-unstable/man8/systemd-suspend.service.8 index 1e7b7069..f431b34b 100644 --- a/upstream/debian-unstable/man8/systemd-suspend.service.8 +++ b/upstream/debian-unstable/man8/systemd-suspend.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-SUSPEND\&.SERVICE" "8" "" "systemd 255" "systemd-suspend.service" +.TH "SYSTEMD\-SUSPEND\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-suspend.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -23,15 +23,21 @@ systemd-suspend.service, systemd-hibernate.service, systemd-hybrid-sleep.service, systemd-suspend-then-hibernate.service, systemd-sleep \- System sleep state logic .SH "SYNOPSIS" .PP +.RS 4 systemd\-suspend\&.service -.PP +.RE +.RS 4 systemd\-hibernate\&.service -.PP +.RE +.RS 4 systemd\-hybrid\-sleep\&.service -.PP +.RE +.RS 4 systemd\-suspend\-then\-hibernate\&.service -.PP +.RE +.RS 4 /usr/lib/systemd/system\-sleep +.RE .SH "DESCRIPTION" .PP systemd\-suspend\&.service @@ -68,7 +74,9 @@ where the value of the variable will be "hibernate", or "suspend\-after\-failed\-hibernate" in cases where hibernation has failed\&. Immediately after leaving system suspend and/or hibernation the same executables are run, but the first argument is now -"post"\&. All executables in this directory are executed in parallel, and execution of the action is not continued until all executables have finished\&. +"post"\&. All executables in this directory are executed in parallel, and execution of the action is not continued until all executables have finished\&. Note that +user\&.slice +will be frozen while the executables are running, so they should not attempt to communicate with any user services expecting a reply\&. .PP Note that scripts or binaries dropped in /usr/lib/systemd/system\-sleep/ @@ -94,6 +102,11 @@ or a sleep\&.conf\&.d file\&. See \fBsystemd-sleep.conf\fR(5)\&. +.PP +Note that by default these services freeze +user\&.slice +while they run\&. This prevents the execution of any process in any of the user sessions while the system is entering into and resuming from sleep\&. Thus, this prevents the hooks in +/usr/lib/systemd/system\-sleep/, or any other process for that matter, from communicating with any user session process during sleep\&. .SH "OPTIONS" .PP \fBsystemd\-sleep\fR @@ -117,11 +130,7 @@ Added in version 203\&. .RE .SH "SEE ALSO" .PP -\fBsystemd-sleep.conf\fR(5), -\fBsystemd\fR(1), -\fBsystemctl\fR(1), -\fBsystemd.special\fR(7), -\fBsystemd-halt.service\fR(8) +\fBsystemd-sleep.conf\fR(5), \fBsystemd\fR(1), \fBsystemctl\fR(1), \fBsystemd.special\fR(7), \fBsystemd-halt.service\fR(8) .SH "NOTES" .IP " 1." 4 Inhibitor interface diff --git a/upstream/debian-unstable/man8/systemd-sysctl.service.8 b/upstream/debian-unstable/man8/systemd-sysctl.service.8 index 35eeee7c..c039400a 100644 --- a/upstream/debian-unstable/man8/systemd-sysctl.service.8 +++ b/upstream/debian-unstable/man8/systemd-sysctl.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-SYSCTL\&.SERVICE" "8" "" "systemd 255" "systemd-sysctl.service" +.TH "SYSTEMD\-SYSCTL\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-sysctl.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -179,6 +179,4 @@ See for various ways to directly apply sysctl settings\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsysctl.d\fR(5), -\fBsysctl\fR(8) +\fBsystemd\fR(1), \fBsysctl.d\fR(5), \fBsysctl\fR(8) diff --git a/upstream/debian-unstable/man8/systemd-sysext.8 b/upstream/debian-unstable/man8/systemd-sysext.8 index 949afe88..f60d4cae 100644 --- a/upstream/debian-unstable/man8/systemd-sysext.8 +++ b/upstream/debian-unstable/man8/systemd-sysext.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-SYSEXT" "8" "" "systemd 255" "systemd-sysext" +.TH "SYSTEMD\-SYSEXT" "8" "" "systemd 256~rc3" "systemd-sysext" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -25,15 +25,11 @@ systemd-sysext, systemd-sysext.service, systemd-confext, systemd-confext.service .HP \w'\fBsystemd\-sysext\fR\ 'u \fBsystemd\-sysext\fR [OPTIONS...] COMMAND .PP -.nf systemd\-sysext\&.service -.fi .HP \w'\fBsystemd\-confext\fR\ 'u \fBsystemd\-confext\fR [OPTIONS...] COMMAND .PP -.nf systemd\-confext\&.service -.fi .SH "DESCRIPTION" .PP \fBsystemd\-sysext\fR @@ -77,11 +73,13 @@ included in a system extension image will \fInot\fR appear in the respective hierarchies after activation\&. .PP -System extension images are strictly read\-only, and the host +System extension images are strictly read\-only by default\&. On mutable host file systems, /usr/ and /opt/ -hierarchies become read\-only too while they are activated\&. +hierarchies become read\-only while extensions are merged, unless mutability is enabled\&. Mutability may be enabled via the +\fB\-\-mutable=\fR +option; see "Mutability" below for more information\&. .PP System extensions are supposed to be purely additive, i\&.e\&. they are supposed to include only files that do not exist in the underlying basic OS image\&. However, the underlying mechanism (overlayfs) also allows overlaying or removing files, but it is recommended not to make use of this\&. .PP @@ -189,7 +187,7 @@ but the used architecture identifiers are the same as for described in \fBsystemd.unit\fR(5)\&. \fIEXTENSION_RELOAD_MANAGER=\fR -can be set to 1 if the extension requires a service manager reload after application of the extension\&. Note that the for the reasons mentioned earlier: +can be set to 1 if the extension requires a service manager reload after application of the extension\&. Note that for the reasons mentioned earlier: \m[blue]\fBPortable Services\fR\m[]\&\s-2\u[2]\d\s+2 remain the recommended way to ship system services\&. System extensions should not ship a /usr/lib/os\-release @@ -221,6 +219,12 @@ and (if not disabled via \fB\-\-noexec=false\fR) "noexec"\&. .PP +Just like sysexts, confexts are strictly read\-only by default\&. Merging confexts on mutable host file systems will result in +/etc/ +becoming read\-only\&. As with sysexts, mutability can be enabled via the +\fB\-\-mutable=\fR +option\&. Refer to "Mutability" below for more information\&. +.PP Confexts are looked for in the directories /run/confexts/, /var/lib/confexts/, @@ -254,7 +258,143 @@ as if it was installed in the OS image itself\&.) This case works regardless if /usr/ is managed as immutable disk image or is a traditional package manager controlled (i\&.e\&. writable) tree\&. .PP -For the confext case, the OSConfig project aims to perform runtime reconfiguration of OS services\&. Sometimes, there is a need to swap certain configuration parameter values or restart only a specific service without deployment of new code or a complete OS deployment\&. In other words, we want to be able to tie the most frequently configured options to runtime updateable flags that can be changed without a system reboot\&. This will help reduce servicing times when there is a need for changing the OS configuration\&. +With systemd\-confext one can perform runtime reconfiguration of OS services\&. Sometimes, there is a need to swap certain configuration parameter values or restart only a specific service without deployment of new code or a complete OS deployment\&. In other words, we want to be able to tie the most frequently configured options to runtime updateable flags that can be changed without a system reboot\&. This will help reduce servicing times when there is a need for changing the OS configuration\&. It also provides a reliable tool for managing configuration because all old configuration files disappear when the systemd\-confext image is removed\&. +.SH "MUTABILITY" +.PP +By default, merging system extensions on mutable host file systems will render +/usr/ +and +/opt/ +hierarchies read\-only\&. Merging configuration extensions will have the same effect on +/etc/\&. Mutable mode allows writes to these locations when extensions are merged\&. +.PP +The following modes are supported: +.sp +.RS 4 +.ie n \{\ +\h'-04' 1.\h'+01'\c +.\} +.el \{\ +.sp -1 +.IP " 1." 4.2 +.\} +\fBdisabled\fR: Force immutable mode even if write routing directories exist below +/var/lib/extensions\&.mutable/\&. This is the default\&. +.RE +.sp +.RS 4 +.ie n \{\ +\h'-04' 2.\h'+01'\c +.\} +.el \{\ +.sp -1 +.IP " 2." 4.2 +.\} +\fBauto\fR: Automatic mode\&. Mutability is disabled by default and only enabled if a corresponding write routing directory exists below +/var/lib/extensions\&.mutable/\&. +.RE +.sp +.RS 4 +.ie n \{\ +\h'-04' 3.\h'+01'\c +.\} +.el \{\ +.sp -1 +.IP " 3." 4.2 +.\} +\fBenabled\fR: Force mutable mode and automatically create write routing directories below +/var/lib/extensions\&.mutable/ +when required\&. +.RE +.sp +.RS 4 +.ie n \{\ +\h'-04' 4.\h'+01'\c +.\} +.el \{\ +.sp -1 +.IP " 4." 4.2 +.\} +\fBimport\fR: Force immutable mode like +\fBdisabled\fR +above, but merge the contents of directories below +/var/lib/extensions\&.mutable/ +into the host file system\&. +.RE +.sp +.RS 4 +.ie n \{\ +\h'-04' 5.\h'+01'\c +.\} +.el \{\ +.sp -1 +.IP " 5." 4.2 +.\} +\fBephemeral\fR: Force mutable mode like +\fBenabled\fR +above, but instead of using write routing directory below +/var/lib/extensions\&.mutable/, +\fBsystemd\-sysext\fR +will use empty ephemeral directories\&. This means that the modifications made in the merged hierarchies will be gone when the hierarchies are unmerged\&. +.RE +.sp +.RS 4 +.ie n \{\ +\h'-04' 6.\h'+01'\c +.\} +.el \{\ +.sp -1 +.IP " 6." 4.2 +.\} +\fBephemeral\-import\fR: Force mutable mode like +\fBephemeral\fR +above, but instead of ignoring the contents of write routing directories under +/var/lib/extensions\&.mutable/, merge them into the host file system, like +\fBimport\fR +does\&. +.RE +.sp +See "Options" below on specifying modes using the +\fB\-\-mutable=\fR +command line option\&. +.PP +With exception of the ephemeral mode, the mutable mode routes writes to subdirectories in +/var/lib/extensions\&.mutable/\&. +.RS 4 +Writes to /usr/ are directed to /var/lib/extensions\&.mutable/usr/ +.RE +.RS 4 +writes to /opt/ are directed to /var/lib/extensions\&.mutable/opt/, and +.RE +.RS 4 +writes to /etc/ land in /var/lib/extensions\&.mutable/etc/\&. +.RE +.PP +If +usr/, +opt/, or +etc/ +in +/var/lib/extensions\&.mutable/ +are symlinks, then writes are directed to the symlinks\*(Aq targets\&. Consequently, to retain mutability of a host file system, create symlinks +.RS 4 +/var/lib/extensions\&.mutable/etc/ → /etc/ +.RE +.RS 4 +/var/lib/extensions\&.mutable/usr/ → /usr/ +.RE +.RS 4 +/var/lib/extensions\&.mutable/opt/ → /opt/ +.RE +to route writes back to the original base directory hierarchy\&. +.PP +Alternatively, a temporary file system may be mounted to +/var/lib/extensions\&.mutable/, or symlinks in +/var/lib/extensions\&.mutable/ +may point to sub\-directories on a temporary file system (e\&.g\&. below +/tmp/) to only allow ephemeral changes\&. Note that this is not the same as ephemeral mode, because the temporary file system will still exist after unmerging\&. +.PP +Added in version 256\&. .SH "COMMANDS" .PP The following commands are understood by both the sysext and confext concepts: @@ -386,7 +526,69 @@ directory a slightly stricter policy is used by default: Added in version 254\&. .RE .PP -\fB\-\-noexec=\fR\fIBOOL\fR +\fB\-\-mutable=\fR\fB\fIBOOL\fR\fR\fB|\fR\fB\fIauto\fR\fR\fB|\fR\fB\fIimport\fR\fR +.RS 4 +Set mutable mode\&. +.PP +\fBno\fR +.RS 4 +force immutable mode even with write routing directories present\&. This is the default\&. +.sp +Added in version 256\&. +.RE +.PP +\fBauto\fR +.RS 4 +enable mutable mode individually for +/usr/, +/opt/, and +/etc/ +if write routing sub\-directories or symlinks are present in +/var/lib/extensions\&.mutable/; disable otherwise\&. See "Mutability" above for more information on write routing\&. +.sp +Added in version 256\&. +.RE +.PP +\fByes\fR +.RS 4 +force mutable mode\&. Write routing directories will be created in +/var/lib/extensions\&.mutable/ +if not present\&. +.sp +Added in version 256\&. +.RE +.PP +\fBimport\fR +.RS 4 +immutable mode, but with contents of write routing directories in +/var/lib/extensions\&.mutable/ +also merged into the host file system\&. +.sp +Added in version 256\&. +.RE +.PP +\fBephemeral\fR +.RS 4 +force mutable mode, but with contents of write routing directories in +/var/lib/extensions\&.mutable/ +being ignored, and modifications of the host file system being discarded after unmerge\&. +.sp +Added in version 256\&. +.RE +.PP +\fBephemeral\-import\fR +.RS 4 +force mutable mode, with contents of write routing directories in +/var/lib/extensions\&.mutable/ +being merged into the host file system, but with the modifications made to the host file system being discarded after unmerge\&. +.sp +Added in version 256\&. +.RE +.sp +Added in version 256\&. +.RE +.PP +\fB\-\-noexec=\fR\fB\fIBOOL\fR\fR .RS 4 When merging configuration extensions into /etc/ @@ -420,7 +622,7 @@ Do not pipe output into a pager\&. Do not print the legend, i\&.e\&. column headers and the footer with hints\&. .RE .PP -\fB\-\-json=\fR\fIMODE\fR +\fB\-\-json=\fR\fB\fIMODE\fR\fR .RS 4 Shows output formatted as JSON\&. Expects one of "short" @@ -435,9 +637,7 @@ Shows output formatted as JSON\&. Expects one of On success, 0 is returned\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd-nspawn\fR(1), -\fBsystemd-stub\fR(7) +\fBsystemd\fR(1), \fBsystemd-nspawn\fR(1), \fBsystemd-stub\fR(7), \fBimportctl\fR(1) .SH "NOTES" .IP " 1." 4 Discoverable Partitions Specification diff --git a/upstream/debian-unstable/man8/systemd-system-update-generator.8 b/upstream/debian-unstable/man8/systemd-system-update-generator.8 index 47e3b738..99cbbdb9 100644 --- a/upstream/debian-unstable/man8/systemd-system-update-generator.8 +++ b/upstream/debian-unstable/man8/systemd-system-update-generator.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-SYSTEM\-UPDATE\-GENERATOR" "8" "" "systemd 255" "systemd-system-update-generator" +.TH "SYSTEMD\-SYSTEM\-UPDATE\-GENERATOR" "8" "" "systemd 256~rc3" "systemd-system-update-generator" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -40,5 +40,4 @@ implements \fBsystemd.generator\fR(7)\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd.special\fR(7) +\fBsystemd\fR(1), \fBsystemd.special\fR(7) diff --git a/upstream/debian-unstable/man8/systemd-sysupdate.8 b/upstream/debian-unstable/man8/systemd-sysupdate.8 index 99d876fa..c8a12e09 100644 --- a/upstream/debian-unstable/man8/systemd-sysupdate.8 +++ b/upstream/debian-unstable/man8/systemd-sysupdate.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-SYSUPDATE" "8" "" "systemd 255" "systemd-sysupdate" +.TH "SYSTEMD\-SYSUPDATE" "8" "" "systemd 256~rc3" "systemd-sysupdate" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -272,7 +272,7 @@ Do not pipe output into a pager\&. Do not print the legend, i\&.e\&. column headers and the footer with hints\&. .RE .PP -\fB\-\-json=\fR\fIMODE\fR +\fB\-\-json=\fR\fB\fIMODE\fR\fR .RS 4 Shows output formatted as JSON\&. Expects one of "short" @@ -287,6 +287,4 @@ Shows output formatted as JSON\&. Expects one of On success, 0 is returned, a non\-zero failure code otherwise\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsysupdate.d\fR(5), -\fBsystemd-repart\fR(8) +\fBsystemd\fR(1), \fBsysupdate.d\fR(5), \fBsystemd-repart\fR(8) diff --git a/upstream/debian-unstable/man8/systemd-sysusers.8 b/upstream/debian-unstable/man8/systemd-sysusers.8 index 5d5726a1..f8858843 100644 --- a/upstream/debian-unstable/man8/systemd-sysusers.8 +++ b/upstream/debian-unstable/man8/systemd-sysusers.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-SYSUSERS" "8" "" "systemd 255" "systemd-sysusers" +.TH "SYSTEMD\-SYSUSERS" "8" "" "systemd 256~rc3" "systemd-sysusers" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -32,15 +32,13 @@ systemd\-sysusers\&.service creates system users and groups, based on files in the format described in \fBsysusers.d\fR(5)\&. .PP -If invoked with no arguments, it applies all directives from all files found in the directories specified by +If invoked with no arguments, directives from the configuration files found in the directories specified by \fBsysusers.d\fR(5)\&. When invoked with positional arguments, if option \fB\-\-replace=\fR\fB\fIPATH\fR\fR is specified, arguments specified on the command line are used instead of the configuration file -\fIPATH\fR\&. Otherwise, just the configuration specified by the command line arguments is executed\&. The string +\fIPATH\fR\&. Otherwise, just the configuration specified by the command line arguments is executed\&. If the string "\-" -may be specified instead of a filename to instruct -\fBsystemd\-sysusers\fR -to read the configuration from standard input\&. If the argument is a relative path, all configuration directories are searched for a matching file and the file found that has the highest priority is executed\&. If the argument is an absolute path, that file is used directly without searching of the configuration directories\&. +is specified instead of a filename, the configuration is read from standard input\&. If the argument is a file name (without any slashes), all configuration directories are searched for a matching file and the file found that has the highest priority is executed\&. If the argument is a path, that file is used directly without searching the configuration directories for any other matching file\&. .SH "OPTIONS" .PP The following options are understood: @@ -152,7 +150,7 @@ Print a short version string and exit\&. supports the service credentials logic as implemented by \fIImportCredential=\fR/\fILoadCredential=\fR/\fISetCredential=\fR (see -\fBsystemd.exec\fR(1) +\fBsystemd.exec\fR(5) for details)\&. The following credentials are used when passed in: .PP \fIpasswd\&.hashed\-password\&.\fR\fI\fIuser\fR\fR @@ -225,11 +223,7 @@ for generating UNIX password hashes from the command line\&. On success, 0 is returned, a non\-zero failure code otherwise\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsysusers.d\fR(5), -\m[blue]\fBUsers, Groups, UIDs and GIDs on systemd systems\fR\m[]\&\s-2\u[2]\d\s+2, -\fBsystemd.exec\fR(1), -\fBmkpasswd\fR(1) +\fBsystemd\fR(1), \fBsysusers.d\fR(5), \m[blue]\fBUsers, Groups, UIDs and GIDs on systemd systems\fR\m[]\&\s-2\u[2]\d\s+2, \fBsystemd.exec\fR(5), \fBmkpasswd\fR(1) .SH "NOTES" .IP " 1." 4 Discoverable Partitions Specification diff --git a/upstream/debian-unstable/man8/systemd-sysv-generator.8 b/upstream/debian-unstable/man8/systemd-sysv-generator.8 index 80b51288..198a8a19 100644 --- a/upstream/debian-unstable/man8/systemd-sysv-generator.8 +++ b/upstream/debian-unstable/man8/systemd-sysv-generator.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-SYSV\-GENERATOR" "8" "" "systemd 255" "systemd-sysv-generator" +.TH "SYSTEMD\-SYSV\-GENERATOR" "8" "" "systemd 256~rc3" "systemd-sysv-generator" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -62,9 +62,7 @@ implements \fBsystemd.generator\fR(7)\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd.service\fR(5), -\fBsystemd.target\fR(5) +\fBsystemd\fR(1), \fBsystemd.service\fR(5), \fBsystemd.target\fR(5) .SH "NOTES" .IP " 1." 4 System V init diff --git a/upstream/debian-unstable/man8/systemd-time-wait-sync.service.8 b/upstream/debian-unstable/man8/systemd-time-wait-sync.service.8 index d6849abe..1f7653e3 100644 --- a/upstream/debian-unstable/man8/systemd-time-wait-sync.service.8 +++ b/upstream/debian-unstable/man8/systemd-time-wait-sync.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-TIME\-WAIT\-SYNC\&.SERVICE" "8" "" "systemd 255" "systemd-time-wait-sync.service" +.TH "SYSTEMD\-TIME\-WAIT\-SYNC\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-time-wait-sync.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -52,6 +52,4 @@ Added in version 239\&. .RE .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd.special\fR(7), -\fBsystemd-timesyncd.service\fR(8), +\fBsystemd\fR(1), \fBsystemd.special\fR(7), \fBsystemd-timesyncd.service\fR(8) diff --git a/upstream/debian-unstable/man8/systemd-timedated.service.8 b/upstream/debian-unstable/man8/systemd-timedated.service.8 index a221cf9e..59bf9310 100644 --- a/upstream/debian-unstable/man8/systemd-timedated.service.8 +++ b/upstream/debian-unstable/man8/systemd-timedated.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-TIMEDATED\&.SERVICE" "8" "" "systemd 255" "systemd-timedated.service" +.TH "SYSTEMD\-TIMEDATED\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-timedated.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -91,7 +91,7 @@ and for information about the D\-Bus API\&. .SH "LIST OF NETWORK TIME SYNCHRONIZATION SERVICES" .PP -\fBsystemd\-timesyncd\fR +\fBsystemd\-timedated\fR will look for files with a "\&.list" extension in @@ -131,7 +131,7 @@ systemd\-timesyncd\&.service If the environment variable \fI$SYSTEMD_TIMEDATED_NTP_SERVICES\fR is set, -\fBsystemd\-timesyncd\fR +\fBsystemd\-timedated\fR will parse the contents of that variable as a colon\-separated list of unit names\&. When set, this variable overrides the file\-based list described above\&. .PP \fBExample\ \&2.\ \&An override that specifies that chronyd should be used if available\fR @@ -147,8 +147,4 @@ SYSTEMD_TIMEDATED_NTP_SERVICES=chronyd\&.service:systemd\-timesyncd\&.service .\} .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBtimedatectl\fR(1), -\fBlocaltime\fR(5), -\fBhwclock\fR(8), -\fBsystemd-timesyncd\fR(8) +\fBsystemd\fR(1), \fBtimedatectl\fR(1), \fBlocaltime\fR(5), \fBhwclock\fR(8), \fBsystemd-timesyncd\fR(8) diff --git a/upstream/debian-unstable/man8/systemd-timesyncd.service.8 b/upstream/debian-unstable/man8/systemd-timesyncd.service.8 index 96ec2c88..fcce657b 100644 --- a/upstream/debian-unstable/man8/systemd-timesyncd.service.8 +++ b/upstream/debian-unstable/man8/systemd-timesyncd.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-TIMESYNCD\&.SERVICE" "8" "" "systemd 255" "systemd-timesyncd.service" +.TH "SYSTEMD\-TIMESYNCD\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-timesyncd.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -100,12 +100,4 @@ Added in version 239\&. .RE .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBtimesyncd.conf\fR(5), -\fBsystemd.network\fR(5), -\fBsystemd-networkd.service\fR(8), -\fBsystemd-time-wait-sync.service\fR(8), -\fBsystemd.special\fR(7), -\fBtimedatectl\fR(1), -\fBlocaltime\fR(5), -\fBhwclock\fR(8) +\fBsystemd\fR(1), \fBtimesyncd.conf\fR(5), \fBsystemd.network\fR(5), \fBsystemd-networkd.service\fR(8), \fBsystemd-time-wait-sync.service\fR(8), \fBsystemd.special\fR(7), \fBtimedatectl\fR(1), \fBlocaltime\fR(5), \fBhwclock\fR(8) diff --git a/upstream/debian-unstable/man8/systemd-tmpfiles.8 b/upstream/debian-unstable/man8/systemd-tmpfiles.8 index cc6228af..c4302e94 100644 --- a/upstream/debian-unstable/man8/systemd-tmpfiles.8 +++ b/upstream/debian-unstable/man8/systemd-tmpfiles.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-TMPFILES" "8" "" "systemd 255" "systemd-tmpfiles" +.TH "SYSTEMD\-TMPFILES" "8" "" "systemd 256~rc3" "systemd-tmpfiles" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -20,44 +20,54 @@ .\" * MAIN CONTENT STARTS HERE * .\" ----------------------------------------------------------------- .SH "NAME" -systemd-tmpfiles, systemd-tmpfiles-setup.service, systemd-tmpfiles-setup-dev-early.service, systemd-tmpfiles-setup-dev.service, systemd-tmpfiles-clean.service, systemd-tmpfiles-clean.timer \- Creates, deletes and cleans up volatile and temporary files and directories +systemd-tmpfiles, systemd-tmpfiles-setup.service, systemd-tmpfiles-setup-dev-early.service, systemd-tmpfiles-setup-dev.service, systemd-tmpfiles-clean.service, systemd-tmpfiles-clean.timer \- Create, delete, and clean up files and directories .SH "SYNOPSIS" .HP \w'\fBsystemd\-tmpfiles\fR\ 'u \fBsystemd\-tmpfiles\fR [OPTIONS...] [\fICONFIGFILE\fR...] .PP System units: -.sp -.nf +.RS 4 systemd\-tmpfiles\-setup\&.service +.RE +.RS 4 systemd\-tmpfiles\-setup\-dev\-early\&.service +.RE +.RS 4 systemd\-tmpfiles\-setup\-dev\&.service +.RE +.RS 4 systemd\-tmpfiles\-clean\&.service +.RE +.RS 4 systemd\-tmpfiles\-clean\&.timer -.fi +.RE .PP User units: -.sp -.nf +.RS 4 systemd\-tmpfiles\-setup\&.service +.RE +.RS 4 systemd\-tmpfiles\-clean\&.service +.RE +.RS 4 systemd\-tmpfiles\-clean\&.timer -.fi +.RE .SH "DESCRIPTION" .PP \fBsystemd\-tmpfiles\fR creates, deletes, and cleans up volatile and temporary files and directories, using the configuration file format and location specified in -\fBtmpfiles.d\fR(5)\&. It must be invoked with one or more options +\fBtmpfiles.d\fR(5)\&. It must be invoked with one or more commands \fB\-\-create\fR, \fB\-\-remove\fR, and \fB\-\-clean\fR, to select the respective subset of operations\&. .PP -By default, directives from all configuration files are applied\&. When invoked with -\fB\-\-replace=\fR\fB\fIPATH\fR\fR, arguments specified on the command line are used instead of the configuration file -\fIPATH\fR\&. Otherwise, if one or more absolute filenames are passed on the command line, only the directives in these files are applied\&. If +If invoked with no arguments, directives from the configuration files found in the directories specified by +\fBtmpfiles.d\fR(5)\&. When invoked with positional arguments, if option +\fB\-\-replace=\fR\fB\fIPATH\fR\fR +is specified, arguments specified on the command line are used instead of the configuration file +\fIPATH\fR\&. Otherwise, just the configuration specified by the command line arguments is executed\&. If the string "\-" -is specified instead of a filename, directives are read from standard input\&. If only the basename of a configuration file is specified, all configuration directories as specified in -\fBtmpfiles.d\fR(5) -are searched for a matching file and the file found that has the highest priority is executed\&. +is specified instead of a filename, the configuration is read from standard input\&. If the argument is a file name (without any slashes), all configuration directories are searched for a matching file and the file found that has the highest priority is executed\&. If the argument is a path, that file is used directly without searching the configuration directories for any other matching file\&. .PP System services (systemd\-tmpfiles\-setup\&.service, systemd\-tmpfiles\-setup\-dev\-early\&.service, @@ -81,13 +91,13 @@ systemd\-tmpfiles\-clean\&.service, which will apply any settings which can be s \fBsystemd\-tmpfiles\fR, it may be useful to invoke it directly from the command line with increased log level (see \fI$SYSTEMD_LOG_LEVEL\fR below)\&. -.SH "OPTIONS" +.SH "COMMANDS AND OPTIONS" .PP -The following options are understood: +The following commands are understood: .PP \fB\-\-create\fR .RS 4 -If this option is passed, all files and directories marked with +If this command is passed, all files and directories marked with \fIf\fR, \fIF\fR, \fIw\fR, @@ -111,12 +121,12 @@ have their ownership, access mode and security labels set\&. .PP \fB\-\-clean\fR .RS 4 -If this option is passed, all files and directories with an age parameter configured will be cleaned up\&. +If this command is passed, all files and directories with an age parameter configured will be cleaned up\&. .RE .PP \fB\-\-remove\fR .RS 4 -If this option is passed, the contents of directories marked with +If this command is passed, the contents of directories marked with \fID\fR or \fIR\fR, and files or directories themselves marked with @@ -127,6 +137,15 @@ are removed unless an exclusive or shared BSD lock is taken on them (see \fBflock\fR(2))\&. .RE .PP +\fB\-\-purge\fR +.RS 4 +If this option is passed, all files and directories created by a +tmpfiles\&.d/ +entry will be deleted\&. +.sp +Added in version 256\&. +.RE +.PP \fB\-\-user\fR .RS 4 Execute "user" configuration, i\&.e\&. @@ -155,6 +174,13 @@ Ignore configuration lines pertaining to unknown users or groups\&. This option Added in version 254\&. .RE .PP +\fB\-\-dry\-run\fR +.RS 4 +Process the configuration and print what operations would be performed, but don\*(Aqt actually change anything in the file system\&. +.sp +Added in version 256\&. +.RE +.PP \fB\-\-prefix=\fR\fB\fIpath\fR\fR .RS 4 Only apply rules with paths that start with the specified prefix\&. This option can be specified multiple times\&. @@ -299,7 +325,7 @@ credential from the service manager\&. .PP \fI$SYSTEMD_LOG_LEVEL\fR .RS 4 -The maximum log level of emitted messages (messages with a higher log level, i\&.e\&. less important ones, will be suppressed)\&. Either one of (in order of decreasing importance) +The maximum log level of emitted messages (messages with a higher log level, i\&.e\&. less important ones, will be suppressed)\&. Takes a comma\-separated list of values\&. A value may be either one of (in order of decreasing importance) \fBemerg\fR, \fBalert\fR, \fBcrit\fR, @@ -309,7 +335,15 @@ The maximum log level of emitted messages (messages with a higher log level, i\& \fBinfo\fR, \fBdebug\fR, or an integer in the range 0\&...7\&. See \fBsyslog\fR(3) -for more information\&. +for more information\&. Each value may optionally be prefixed with one of +\fBconsole\fR, +\fBsyslog\fR, +\fBkmsg\fR +or +\fBjournal\fR +followed by a colon to set the maximum log level for that specific log target (e\&.g\&. +\fBSYSTEMD_LOG_LEVEL=debug,console:info\fR +specifies to log at debug level except when logging to the console which should be at info level)\&. Note that the global maximum log level takes priority over any per target maximum log levels\&. .RE .PP \fI$SYSTEMD_LOG_COLOR\fR @@ -415,6 +449,12 @@ will be ignored by the executable, and needs to be handled by the pager\&. This option instructs the pager to not send termcap initialization and deinitialization strings to the terminal\&. It is set by default to allow command output to remain visible in the terminal even after the pager exits\&. Nevertheless, this prevents some pager functionality from working, in particular paged output cannot be scrolled with the mouse\&. .RE .sp +Note that setting the regular +\fI$LESS\fR +environment variable has no effect for +\fBless\fR +invocations by systemd tools\&. +.sp See \fBless\fR(1) for more discussion\&. @@ -426,6 +466,12 @@ Override the charset passed to \fBless\fR (by default "utf\-8", if the invoking terminal is determined to be UTF\-8 compatible)\&. +.sp +Note that setting the regular +\fI$LESSCHARSET\fR +environment variable has no effect for +\fBless\fR +invocations by systemd tools\&. .RE .PP \fI$SYSTEMD_PAGERSECURE\fR @@ -507,8 +553,7 @@ Note: when creating items, if the target already exists, but is of the wrong typ "+", a message is emitted, but the failure is otherwise ignored\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBtmpfiles.d\fR(5) +\fBsystemd\fR(1), \fBtmpfiles.d\fR(5) .SH "NOTES" .IP " 1." 4 Discoverable Partitions Specification diff --git a/upstream/debian-unstable/man8/systemd-tpm2-generator.8 b/upstream/debian-unstable/man8/systemd-tpm2-generator.8 new file mode 100644 index 00000000..c7b522fe --- /dev/null +++ b/upstream/debian-unstable/man8/systemd-tpm2-generator.8 @@ -0,0 +1,53 @@ +'\" t +.TH "SYSTEMD\-TPM2\-GENERATOR" "8" "" "systemd 256~rc3" "systemd-tpm2-generator" +.\" ----------------------------------------------------------------- +.\" * Define some portability stuff +.\" ----------------------------------------------------------------- +.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ +.\" http://bugs.debian.org/507673 +.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html +.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ +.ie \n(.g .ds Aq \(aq +.el .ds Aq ' +.\" ----------------------------------------------------------------- +.\" * set default formatting +.\" ----------------------------------------------------------------- +.\" disable hyphenation +.nh +.\" disable justification (adjust text to left margin only) +.ad l +.\" ----------------------------------------------------------------- +.\" * MAIN CONTENT STARTS HERE * +.\" ----------------------------------------------------------------- +.SH "NAME" +systemd-tpm2-generator \- Generator for inserting TPM2 synchronization point in the boot process +.SH "SYNOPSIS" +.PP +/usr/lib/systemd/system\-generators/systemd\-tpm2\-generator +.SH "DESCRIPTION" +.PP +systemd\-tpm2\-generator +is a generator that adds a +\fIWants=\fR +dependency from +sysinit\&.target +to +tpm2\&.target +when it detects that the firmware discovered a TPM2 device but the OS kernel so far did not\&. +tpm2\&.target +is supposed to act as synchronization point for all services that require TPM2 device access\&. See +\fBsystemd.special\fR(7) +for details\&. +.PP +The +\fBsystemd\&.tpm2_wait=\fR +kernel command line option may be used to override behaviour of the generator\&. It accepts a boolean value: if true then +tpm2\&.target +will be added as synchronization point even if the firmware has not detected a TPM2 device\&. If false, the target will not be inserted even if firmware reported a device but the OS kernel doesn\*(Aqt expose a device for it yet\&. The latter might be useful in environments where a suitable TPM2 driver for the available hardware is not available\&. +.PP +systemd\-tpm2\-generator +implements +\fBsystemd.generator\fR(7)\&. +.SH "SEE ALSO" +.PP +\fBsystemd\fR(1), \fBsystemd.special\fR(7), \fBkernel-command-line\fR(7) diff --git a/upstream/debian-unstable/man8/systemd-tpm2-setup.service.8 b/upstream/debian-unstable/man8/systemd-tpm2-setup.service.8 index bccb5479..4a302641 100644 --- a/upstream/debian-unstable/man8/systemd-tpm2-setup.service.8 +++ b/upstream/debian-unstable/man8/systemd-tpm2-setup.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-TPM2\-SETUP\&.SERVICE" "8" "" "systemd 255" "systemd-tpm2-setup.service" +.TH "SYSTEMD\-TPM2\-SETUP\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-tpm2-setup.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -36,7 +36,7 @@ are services that generate the Storage Root Key (SRK) if it hasn\*(Aqt been gene The services will store the public key of the SRK key pair in a PEM file in /run/systemd/tpm2\-srk\-public\-key\&.pem and -/var/lib/systemd/tpm2\-srk\-public\-key\&.pem\&. It will also store it in TPM2B_PUBLIC format in +/var/lib/systemd/tpm2\-srk\-public\-key\&.pem\&. They will also store it in TPM2B_PUBLIC format in /run/systemd/tpm2\-srk\-public\-key\&.tpm2_public and /var/lib/systemd/tpm2\-srk\-public\-key\&.tpm2b_public\&. diff --git a/upstream/debian-unstable/man8/systemd-udev-settle.service.8 b/upstream/debian-unstable/man8/systemd-udev-settle.service.8 index d045f09e..e22bd6a0 100644 --- a/upstream/debian-unstable/man8/systemd-udev-settle.service.8 +++ b/upstream/debian-unstable/man8/systemd-udev-settle.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-UDEV\-SETTLE\&.SERVICE" "8" "" "systemd 255" "systemd-udev-settle.service" +.TH "SYSTEMD\-UDEV\-SETTLE\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-udev-settle.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -38,5 +38,4 @@ systemd\-udev\-settle\&.service usually slows boot significantly, because it means waiting for all unrelated events too\&. .SH "SEE ALSO" .PP -\fBudev\fR(7), -\fBudevadm\fR(8) +\fBudev\fR(7), \fBudevadm\fR(8) diff --git a/upstream/debian-unstable/man8/systemd-udevd.service.8 b/upstream/debian-unstable/man8/systemd-udevd.service.8 index 5ca6437b..d0216520 100644 --- a/upstream/debian-unstable/man8/systemd-udevd.service.8 +++ b/upstream/debian-unstable/man8/systemd-udevd.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-UDEVD\&.SERVICE" "8" "" "systemd 255" "systemd-udevd.service" +.TH "SYSTEMD\-UDEVD\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-udevd.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -176,7 +176,7 @@ Network interfaces are renamed to give them predictable names when possible\&. I Added in version 199\&. .RE .PP -\fInet\&.naming\-scheme=\fR +\fInet\&.naming_scheme=\fR .RS 4 Network interfaces are renamed to give them predictable names when possible (unless \fInet\&.ifnames=0\fR @@ -193,7 +193,7 @@ is checking might appear, which affects older name derivation algorithms, too\&. Added in version 240\&. .RE .PP -\fInet\&.ifname\-policy=\fR\fI\fIpolicy1\fR\fR\fI[,\fR\fI\fIpolicy2\fR\fR\fI,\&...][,\fR\fI\fIMAC\fR\fR\fI]\fR +\fInet\&.ifname_policy=\fR\fI\fIpolicy1\fR\fR\fI[,\fR\fI\fIpolicy2\fR\fR\fI,\&...][,\fR\fI\fIMAC\fR\fR\fI]\fR .RS 4 Specifies naming policies applied when renaming network interfaces\&. Takes a list of policies and an optional MAC address separated with comma\&. Each policy value must be one of the policies understood by the \fINamePolicy=\fR @@ -216,8 +216,8 @@ Example: .RS 4 .\} .nf -net\&.ifname\-policy=keep,kernel,path,slot,onboard,01:23:45:67:89:ab -net\&.ifname\-policy=keep,kernel,path,slot,onboard,mac +net\&.ifname_policy=keep,kernel,path,slot,onboard,01:23:45:67:89:ab +net\&.ifname_policy=keep,kernel,path,slot,onboard,mac .fi .if n \{\ .RE @@ -263,6 +263,4 @@ Added in version 250\&. .RE .SH "SEE ALSO" .PP -\fBudev.conf\fR(5), -\fBudev\fR(7), -\fBudevadm\fR(8) +\fBudev.conf\fR(5), \fBudev\fR(7), \fBudevadm\fR(8) diff --git a/upstream/debian-unstable/man8/systemd-update-done.service.8 b/upstream/debian-unstable/man8/systemd-update-done.service.8 index 22332dc8..84becd01 100644 --- a/upstream/debian-unstable/man8/systemd-update-done.service.8 +++ b/upstream/debian-unstable/man8/systemd-update-done.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-UPDATE\-DONE\&.SERVICE" "8" "" "systemd 255" "systemd-update-done.service" +.TH "SYSTEMD\-UPDATE\-DONE\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-update-done.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -68,7 +68,7 @@ are always followed by an update of the modification time of on it\&. .PP Note that if the -\fIsystemd\&.condition\-needs\-update=\fR +\fIsystemd\&.condition_needs_update=\fR kernel command line option is used it overrides the \fIConditionNeedsUpdate=\fR unit condition checks\&. In that case @@ -76,6 +76,4 @@ systemd\-update\-done\&.service will not reset the condition state until a follow\-up reboot where the kernel switch is not specified anymore\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd.unit\fR(5), -\fBtouch\fR(1) +\fBsystemd\fR(1), \fBsystemd.unit\fR(5), \fBtouch\fR(1) diff --git a/upstream/debian-unstable/man8/systemd-update-utmp.service.8 b/upstream/debian-unstable/man8/systemd-update-utmp.service.8 index b7c6e013..32babd63 100644 --- a/upstream/debian-unstable/man8/systemd-update-utmp.service.8 +++ b/upstream/debian-unstable/man8/systemd-update-utmp.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-UPDATE\-UTMP\&.SERVICE" "8" "" "systemd 255" "systemd-update-utmp.service" +.TH "SYSTEMD\-UPDATE\-UTMP\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-update-utmp.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -36,6 +36,4 @@ systemd\-update\-utmp\&.service does the same for system reboots and shutdown requests\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fButmp\fR(5), -\fBauditd\fR(8) +\fBsystemd\fR(1), \fButmp\fR(5), \fBauditd\fR(8) diff --git a/upstream/debian-unstable/man8/systemd-user-sessions.service.8 b/upstream/debian-unstable/man8/systemd-user-sessions.service.8 index c6be118b..eb24a0f7 100644 --- a/upstream/debian-unstable/man8/systemd-user-sessions.service.8 +++ b/upstream/debian-unstable/man8/systemd-user-sessions.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-USER\-SESSIONS\&.SERVICE" "8" "" "systemd 255" "systemd-user-sessions.service" +.TH "SYSTEMD\-USER\-SESSIONS\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-user-sessions.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -35,6 +35,4 @@ is a service that controls user logins through /run/nologin, thus prohibiting further logins\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd-logind.service\fR(8), -\fBpam_nologin\fR(8) +\fBsystemd\fR(1), \fBsystemd-logind.service\fR(8), \fBpam_nologin\fR(8) diff --git a/upstream/debian-unstable/man8/systemd-userdbd.service.8 b/upstream/debian-unstable/man8/systemd-userdbd.service.8 index 62831c5d..af9109e6 100644 --- a/upstream/debian-unstable/man8/systemd-userdbd.service.8 +++ b/upstream/debian-unstable/man8/systemd-userdbd.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-USERDBD\&.SERVICE" "8" "" "systemd 255" "systemd-userdbd.service" +.TH "SYSTEMD\-USERDBD\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-userdbd.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -68,10 +68,7 @@ to JSON user/group records, thus hiding the differences between the services as makes JSON user/group records from the aforementioned drop\-in directories available\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBnss-systemd\fR(8), -\fBuserdbctl\fR(1), -\fBsystemd-homed.service\fR(8) +\fBsystemd\fR(1), \fBnss-systemd\fR(8), \fBuserdbctl\fR(1), \fBsystemd-homed.service\fR(8) .SH "NOTES" .IP " 1." 4 JSON User Records diff --git a/upstream/debian-unstable/man8/systemd-veritysetup-generator.8 b/upstream/debian-unstable/man8/systemd-veritysetup-generator.8 index 7f3c0453..b5df221f 100644 --- a/upstream/debian-unstable/man8/systemd-veritysetup-generator.8 +++ b/upstream/debian-unstable/man8/systemd-veritysetup-generator.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-VERITYSETUP\-GENERATOR" "8" "" "systemd 255" "systemd-veritysetup-generator" +.TH "SYSTEMD\-VERITYSETUP\-GENERATOR" "8" "" "systemd 256~rc3" "systemd-veritysetup-generator" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -113,7 +113,4 @@ Added in version 250\&. .RE .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd-veritysetup@.service\fR(8), -\fBveritysetup\fR(8), -\fBsystemd-fstab-generator\fR(8) +\fBsystemd\fR(1), \fBsystemd-veritysetup@.service\fR(8), \fBveritysetup\fR(8), \fBsystemd-fstab-generator\fR(8) diff --git a/upstream/debian-unstable/man8/systemd-veritysetup@.service.8 b/upstream/debian-unstable/man8/systemd-veritysetup@.service.8 index f12ba36f..47410e5f 100644 --- a/upstream/debian-unstable/man8/systemd-veritysetup@.service.8 +++ b/upstream/debian-unstable/man8/systemd-veritysetup@.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-VERITYSETUP@\&.SERVICE" "8" "" "systemd 255" "systemd-veritysetup@.service" +.TH "SYSTEMD\-VERITYSETUP@\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-veritysetup@.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -78,9 +78,7 @@ Added in version 250\&. .RE .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd-veritysetup-generator\fR(8), -\fBveritysetup\fR(8) +\fBsystemd\fR(1), \fBsystemd-veritysetup-generator\fR(8), \fBveritysetup\fR(8) .SH "NOTES" .IP " 1." 4 Kernel dm-verity diff --git a/upstream/debian-unstable/man8/systemd-volatile-root.service.8 b/upstream/debian-unstable/man8/systemd-volatile-root.service.8 index 4e8c59bc..a13b4ac4 100644 --- a/upstream/debian-unstable/man8/systemd-volatile-root.service.8 +++ b/upstream/debian-unstable/man8/systemd-volatile-root.service.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-VOLATILE\-ROOT\&.SERVICE" "8" "" "systemd 255" "systemd-volatile-root.service" +.TH "SYSTEMD\-VOLATILE\-ROOT\&.SERVICE" "8" "" "systemd 256~rc3" "systemd-volatile-root.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -45,6 +45,4 @@ on the kernel command line\&. This service runs only in the initrd, before the s is used, as in that mode the root directory is non\-volatile\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd-fstab-generator\fR(8), -\fBkernel-command-line\fR(7) +\fBsystemd\fR(1), \fBsystemd-fstab-generator\fR(8), \fBkernel-command-line\fR(7) diff --git a/upstream/debian-unstable/man8/systemd-xdg-autostart-generator.8 b/upstream/debian-unstable/man8/systemd-xdg-autostart-generator.8 index 4d0787cc..ebc2347f 100644 --- a/upstream/debian-unstable/man8/systemd-xdg-autostart-generator.8 +++ b/upstream/debian-unstable/man8/systemd-xdg-autostart-generator.8 @@ -1,5 +1,5 @@ '\" t -.TH "SYSTEMD\-XDG\-AUTOSTART\-GENERATOR" "8" "" "systemd 255" "systemd-xdg-autostart-generator" +.TH "SYSTEMD\-XDG\-AUTOSTART\-GENERATOR" "8" "" "systemd 256~rc3" "systemd-xdg-autostart-generator" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -108,9 +108,7 @@ implements \fBsystemd.generator\fR(7)\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemd.service\fR(5), -\fBsystemd.target\fR(5) +\fBsystemd\fR(1), \fBsystemd.service\fR(5), \fBsystemd.target\fR(5) .SH "NOTES" .IP " 1." 4 XDG autostart diff --git a/upstream/debian-unstable/man8/tc-bfifo.8 b/upstream/debian-unstable/man8/tc-bfifo.8 index 3e290322..bc05ef4d 100644 --- a/upstream/debian-unstable/man8/tc-bfifo.8 +++ b/upstream/debian-unstable/man8/tc-bfifo.8 @@ -37,8 +37,6 @@ If the list is too long, no further packets are allowed on. This is called 'tail limit Maximum queue size. Specified in bytes for bfifo, in packets for pfifo. For pfifo, defaults to the interface txqueuelen, as specified with -.BR ifconfig (8) -or .BR ip (8). The range for this parameter is [0, UINT32_MAX]. diff --git a/upstream/debian-unstable/man8/tc-gact.8 b/upstream/debian-unstable/man8/tc-gact.8 new file mode 100644 index 00000000..81aa30eb --- /dev/null +++ b/upstream/debian-unstable/man8/tc-gact.8 @@ -0,0 +1,85 @@ +.TH "Generic actions in tc" 8 "11 Jan 2023" "iproute2" "Linux" + +.SH NAME +gact - generic action +.SH SYNOPSIS +.in +8 +.ti -8 +.BR tc " ... " "action gact" +.IR CONTROL " [ " RAND " ] [ " INDEX " ]" +.ti -8 +.IR CONTROL " := { " +.BR reclassify " | " drop " | " continue " | " pass " | " pipe " | " +.br +.BI "goto chain " "CHAIN_INDEX" +| +.br +.BI "jump " "JUMP_COUNT" +} + +.ti -8 +.IR RAND " := " +.BI random " RANDTYPE CONTROL VAL" +.ti -8 +.IR RANDTYPE " := { " +.BR netrand " | " determ " }" +.ti -8 +.IR VAL " := number not exceeding 10000" +.ti -8 +.IR JUMP_COUNT " := absolute jump from start of action list" +.ti -8 +.IR INDEX " := index value used" + +.SH DESCRIPTION +The +.B gact +action allows reclassify, dropping, passing, or accepting packets. +At the moment there are only two algorithms. One is deterministic +and the other uses internal kernel netrand. + +.SH OPTIONS +.TP +.BI random " RANDTYPE CONTROL VAL" +The probability of taking the action expressed in terms of 1 out of +.I VAL +packets. + +.TP +.I CONTROL +Indicate how +.B tc +should proceed if the packet matches. +For a description of the possible +.I CONTROL +values, see +.BR tc-actions (8). + +.SH EXAMPLES +Apply a rule on ingress to drop packets from a given source address. +.RS +.EX +# tc filter add dev eth0 parent ffff: protocol ip prio 6 u32 match ip src \ +10.0.0.9/32 flowid 1:16 action drop +.EE +.RE + +Allow 1 out 10 packets from source randomly using the netrand generator +.RS +.EX +# tc filter add dev eth0 parent ffff: protocol ip prio 6 u32 match ip src \ +10.0.0.9/32 flowid 1:16 action drop random netrand ok 10 +.EE +.RE + +Deterministically accept every second packet +.RS +.EX +# tc filter add dev eth0 parent ffff: protocol ip prio 6 u32 match ip src \ +10.0.0.9/32 flowid 1:16 action drop random determ ok 2 +.EE +.RE + +.SH SEE ALSO +.BR tc (8), +.BR tc-actions (8), +.BR tc-u32 (8) diff --git a/upstream/debian-unstable/man8/tc-htb.8 b/upstream/debian-unstable/man8/tc-htb.8 index 7aa62615..59b159fb 100644 --- a/upstream/debian-unstable/man8/tc-htb.8 +++ b/upstream/debian-unstable/man8/tc-htb.8 @@ -36,7 +36,7 @@ bytes .SH DESCRIPTION HTB allows control of the outbound bandwidth on a given link. -It allows simulating simulating several slower links and to send different +It allows simulating several slower links and to send different kinds of traffic on different simulated links. In both cases, you have to specify how to divide the physical link into simulated links and how to decide which simulated link to use for a given packet to be sent. diff --git a/upstream/debian-unstable/man8/tc-matchall.8 b/upstream/debian-unstable/man8/tc-matchall.8 index d0224066..538cf745 100644 --- a/upstream/debian-unstable/man8/tc-matchall.8 +++ b/upstream/debian-unstable/man8/tc-matchall.8 @@ -37,39 +37,39 @@ To create ingress mirroring from port eth1 to port eth2: .RS .EX -tc qdisc add dev eth1 handle ffff: ingress -tc filter add dev eth1 parent ffff: \\ +tc qdisc add dev eth1 handle ffff: clsact +tc filter add dev eth1 ingress \\ matchall skip_sw \\ action mirred egress mirror \\ dev eth2 .EE .RE -The first command creates an ingress qdisc with handle +The first command creates a clsact qdisc with handle .BR ffff: on device .BR eth1 where the second command attaches a matchall filters on it that mirrors the -packets to device eth2. +packets to device eth2 for ingress. To create egress mirroring from port eth1 to port eth2: .RS .EX -tc qdisc add dev eth1 handle 1: root prio -tc filter add dev eth1 parent 1: \\ +tc qdisc add dev eth1 handle ffff: clsact +tc filter add dev eth1 egress \\ matchall skip_sw \\ action mirred egress mirror \\ dev eth2 .EE .RE -The first command creates an egress qdisc with handle -.BR 1: -that replaces the root qdisc on device +The first command creates a clsact qdisc with handle +.BR ffff: +on device .BR eth1 where the second command attaches a matchall filters on it that mirrors the -packets to device eth2. +packets to device eth2 for egress. To sample one of every 100 packets flowing into interface eth0 to psample group 12: diff --git a/upstream/debian-unstable/man8/tc-mirred.8 b/upstream/debian-unstable/man8/tc-mirred.8 index 38833b45..6959e3e6 100644 --- a/upstream/debian-unstable/man8/tc-mirred.8 +++ b/upstream/debian-unstable/man8/tc-mirred.8 @@ -9,13 +9,24 @@ mirred - mirror/redirect action .I DIRECTION ACTION .RB "[ " index .IR INDEX " ] " -.BI dev " DEVICENAME" +.I TARGET .ti -8 .IR DIRECTION " := { " .BR ingress " | " egress " }" .ti -8 +.IR TARGET " := { " DEV " | " BLOCK " }" + +.ti -8 +.IR DEV " := " +.BI dev " DEVICENAME" + +.ti -8 +.IR BLOCK " := " +.BI blockid " BLOCKID" + +.ti -8 .IR ACTION " := { " .BR mirror " | " redirect " }" .SH DESCRIPTION @@ -24,6 +35,12 @@ The action allows packet mirroring (copying) or redirecting (stealing) the packet it receives. Mirroring is what is sometimes referred to as Switch Port Analyzer (SPAN) and is commonly used to analyze and/or debug flows. +When mirroring to a tc block, the packet will be mirrored to all the ports in +the block with exception of the port where the packet ingressed, if that port is +part of the tc block. Redirecting is similar to mirroring except that the +behaviour is to mirror to the first N - 1 ports in the block and redirect to the +last one (note that the port in which the packet arrived is not going to be +mirrored or redirected to). .SH OPTIONS .TP .B ingress @@ -39,7 +56,7 @@ Define whether the packet should be copied .RB ( mirror ) or moved .RB ( redirect ) -to the destination interface. +to the destination interface or block. .TP .BI index " INDEX" Assign a unique ID to this action instead of letting the kernel choose one @@ -49,14 +66,17 @@ is a 32bit unsigned integer greater than zero. .TP .BI dev " DEVICENAME" Specify the network interface to redirect or mirror to. +.TP +.BI blockid " BLOCKID" +Specify the tc block to redirect or mirror to. .SH EXAMPLES Limit ingress bandwidth on eth0 to 1mbit/s, redirect exceeding traffic to lo for debugging purposes: .RS .EX -# tc qdisc add dev eth0 handle ffff: ingress -# tc filter add dev eth0 parent ffff: u32 \\ +# tc qdisc add dev eth0 handle ffff: clsact +# tc filter add dev eth0 ingress u32 \\ match u32 0 0 \\ action police rate 1mbit burst 100k conform-exceed pipe \\ action mirred egress redirect dev lo @@ -70,8 +90,8 @@ with e.g. tcpdump: .EX # ip link add dummy0 type dummy # ip link set dummy0 up -# tc qdisc add dev eth0 handle ffff: ingress -# tc filter add dev eth0 parent ffff: protocol ip \\ +# tc qdisc add dev eth0 handle ffff: clsact +# tc filter add dev eth0 ingress protocol ip \\ u32 match ip protocol 1 0xff \\ action mirred egress mirror dev dummy0 .EE @@ -87,13 +107,21 @@ interface, it is possible to send ingress traffic through an instance of # modprobe ifb # ip link set ifb0 up # tc qdisc add dev ifb0 root sfq -# tc qdisc add dev eth0 handle ffff: ingress -# tc filter add dev eth0 parent ffff: u32 \\ +# tc qdisc add dev eth0 handle ffff: clsact +# tc filter add dev eth0 ingress u32 \\ match u32 0 0 \\ action mirred egress redirect dev ifb0 .EE .RE +.SH LIMITATIONS +The kernel restricts nesting to four levels to avoid the chance +of nesting loops. +.PP +Do not redirect for one IFB device to another. +IFB is a very specialized case of packet redirecting device. +Redirecting from ifbX->ifbY will cause all packets to be dropped. + .SH SEE ALSO .BR tc (8), .BR tc-u32 (8) diff --git a/upstream/debian-unstable/man8/tc-pfifo_fast.8 b/upstream/debian-unstable/man8/tc-pfifo_fast.8 index baf34b1d..0029d67f 100644 --- a/upstream/debian-unstable/man8/tc-pfifo_fast.8 +++ b/upstream/debian-unstable/man8/tc-pfifo_fast.8 @@ -27,8 +27,6 @@ have traffic, higher bands are never dequeued. This can be used to prioritize interactive traffic or penalize 'lowest cost' traffic. Each band can be txqueuelen packets long, as configured with -.BR ifconfig (8) -or .BR ip (8). Additional packets coming in are not enqueued but are instead dropped. @@ -40,8 +38,6 @@ for complete details on how TOS bits are translated into bands. txqueuelen The length of the three bands depends on the interface txqueuelen, as specified with -.BR ifconfig (8) -or .BR ip (8). .SH BUGS diff --git a/upstream/debian-unstable/man8/tc-sfb.8 b/upstream/debian-unstable/man8/tc-sfb.8 index e4584deb..1f2b8c5e 100644 --- a/upstream/debian-unstable/man8/tc-sfb.8 +++ b/upstream/debian-unstable/man8/tc-sfb.8 @@ -67,7 +67,7 @@ the number of non-responsive flows, M. It is (1 - (1 - (1 / 16.0)) ** M) **8, so for example with 10 non-responsive flows approximately 0.2% of responsive flows will be misidentified. -To mitigate this, SFB performs performs periodic re-hashing to avoid +To mitigate this, SFB performs periodic re-hashing to avoid misclassification for prolonged periods of time. The default hashing method will use source and destination ip addresses and port numbers diff --git a/upstream/debian-unstable/man8/tc-simple.8 b/upstream/debian-unstable/man8/tc-simple.8 index f565755e..ae1aec31 100644 --- a/upstream/debian-unstable/man8/tc-simple.8 +++ b/upstream/debian-unstable/man8/tc-simple.8 @@ -55,11 +55,11 @@ grep the logs to see the logged message display stats again and observe increment by 1 .EX - hadi@noma1:$ tc qdisc add dev eth0 ingress - hadi@noma1:$tc filter add dev eth0 parent ffff: protocol ip prio 5 \\ + $ tc qdisc add dev eth0 ingress + $ tc filter add dev eth0 parent ffff: protocol ip prio 5 \\ u32 match ip protocol 1 0xff flowid 1:1 action simple sdata "Incoming ICMP" - hadi@noma1:$ sudo tc -s filter ls dev eth0 parent ffff: + $ sudo tc -s filter ls dev eth0 parent ffff: filter protocol ip pref 5 u32 filter protocol ip pref 5 u32 fh 800: ht divisor 1 filter protocol ip pref 5 u32 fh 800::800 order 2048 key ht 800 bkt 0 flowid 1:1 @@ -71,7 +71,7 @@ display stats again and observe increment by 1 backlog 0b 0p requeues 0 - hadi@noma1$ ping -c 1 www.google.ca + $ ping -c 1 www.google.ca PING www.google.ca (74.125.225.120) 56(84) bytes of data. 64 bytes from ord08s08-in-f24.1e100.net (74.125.225.120): icmp_req=1 ttl=53 time=31.3 ms @@ -79,10 +79,10 @@ display stats again and observe increment by 1 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 31.316/31.316/31.316/0.000 ms - hadi@noma1$ dmesg | grep simple + $ dmesg | grep simple [135354.473951] simple: Incoming ICMP_1 - hadi@noma1$ sudo tc/tc -s filter ls dev eth0 parent ffff: + $ sudo tc/tc -s filter ls dev eth0 parent ffff: filter protocol ip pref 5 u32 filter protocol ip pref 5 u32 fh 800: ht divisor 1 filter protocol ip pref 5 u32 fh 800::800 order 2048 key ht 800 bkt 0 flowid 1:1 diff --git a/upstream/debian-unstable/man8/tc-xt.8 b/upstream/debian-unstable/man8/tc-xt.8 deleted file mode 100644 index f6dc5add..00000000 --- a/upstream/debian-unstable/man8/tc-xt.8 +++ /dev/null @@ -1,42 +0,0 @@ -.TH "iptables action in tc" 8 "3 Mar 2016" "iproute2" "Linux" - -.SH NAME -xt - tc iptables action -.SH SYNOPSIS -.in +8 -.ti -8 -.BR tc " ... " "action xt \-j" -.IR TARGET " [ " TARGET_OPTS " ]" -.SH DESCRIPTION -The -.B xt -action allows one to call arbitrary iptables targets for packets matching the filter -this action is attached to. -.SH OPTIONS -.TP -.BI -j " TARGET \fR[\fI TARGET_OPTS \fR]" -Perform a jump to the given iptables target, optionally passing any target -specific options in -.IR TARGET_OPTS . -.SH EXAMPLES -The following will attach a -.B u32 -filter to the -.B ingress -qdisc matching ICMP replies and using the -.B xt -action to make the kernel yell 'PONG' each time: - -.RS -.EX -tc qdisc add dev eth0 ingress -tc filter add dev eth0 parent ffff: proto ip u32 \\ - match ip protocol 1 0xff \\ - match ip icmp_type 0 0xff \\ - action xt -j LOG --log-prefix PONG -.EE -.RE -.SH SEE ALSO -.BR tc (8), -.BR tc-u32 (8), -.BR iptables-extensions (8) diff --git a/upstream/debian-unstable/man8/tc.8 b/upstream/debian-unstable/man8/tc.8 index e5bef911..dce58af1 100644 --- a/upstream/debian-unstable/man8/tc.8 +++ b/upstream/debian-unstable/man8/tc.8 @@ -127,7 +127,7 @@ tc \- show / manipulate traffic control settings \fB[ \fB-nm \fR| \fB-nam\fR[\fIes\fR] \fB] \fR| \fB[ \fR{ \fB-cf \fR| \fB-c\fR[\fIonf\fR] \fR} \fB[ filename ] \fB] \fR \fB[ -t\fR[imestamp\fR] \fB\] \fR| \fB[ -t\fR[short\fR] \fR| \fB[ --o\fR[neline\fR] \fB]\fR } +-o\fR[neline\fR] \fB] \fR| \fB[ -echo ]\fR } .ti 8 .IR FORMAT " := {" @@ -743,6 +743,10 @@ When\fB\ tc monitor\fR\ runs, print timestamp before the event message in format When\fB\ tc monitor\fR\ runs, prints short timestamp before the event message in format: [<YYYY>-<MM>-<DD>T<hh:mm:ss>.<ms>] +.TP +.BR "\-echo" +Request the kernel to send the applied configuration back. + .SH FORMAT The show command has additional formatting options: @@ -871,6 +875,7 @@ was written by Alexey N. Kuznetsov and added in Linux 2.2. .BR tc-fq_codel (8), .BR tc-fq_pie (8), .BR tc-fw (8), +.BR tc-gact (8), .BR tc-hfsc (7), .BR tc-hfsc (8), .BR tc-htb (8), diff --git a/upstream/debian-unstable/man8/telinit.8 b/upstream/debian-unstable/man8/telinit.8 index 750c2242..98b4a670 100644 --- a/upstream/debian-unstable/man8/telinit.8 +++ b/upstream/debian-unstable/man8/telinit.8 @@ -1,5 +1,5 @@ '\" t -.TH "TELINIT" "8" "" "systemd 255" "telinit" +.TH "TELINIT" "8" "" "systemd 256~rc3" "telinit" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -22,8 +22,8 @@ .SH "NAME" telinit \- Change SysV runlevel .SH "SYNOPSIS" -.HP \w'\fBtelinit\ \fR\fB[OPTIONS...]\fR\fB\ \fR\fB{COMMAND}\fR\ 'u -\fBtelinit \fR\fB[OPTIONS...]\fR\fB \fR\fB{COMMAND}\fR +.HP \w'\fBtelinit\fR\ 'u +\fBtelinit\fR [OPTIONS...] {COMMAND} .SH "DESCRIPTION" .PP \fBtelinit\fR @@ -96,6 +96,4 @@ On success, 0 is returned, a non\-zero failure code otherwise\&. This is a legacy command available for compatibility only\&. It should not be used anymore, as the concept of runlevels is obsolete\&. .SH "SEE ALSO" .PP -\fBsystemd\fR(1), -\fBsystemctl\fR(1), -\fBwall\fR(1) +\fBsystemd\fR(1), \fBsystemctl\fR(1), \fBwall\fR(1) diff --git a/upstream/debian-unstable/man8/tipc-nametable.8 b/upstream/debian-unstable/man8/tipc-nametable.8 index b187d25e..f7c51f19 100644 --- a/upstream/debian-unstable/man8/tipc-nametable.8 +++ b/upstream/debian-unstable/man8/tipc-nametable.8 @@ -49,13 +49,13 @@ provided by a port. .B Lower .br The lower bound of the 32-bit instance field of the port name. -The instance field is often used as as a sub-class indicator. +The instance field is often used as a sub-class indicator. .TP .B Upper .br The upper bound of the 32-bit instance field of the port name. -The instance field is often used as as a sub-class indicator. +The instance field is often used as a sub-class indicator. A difference in .BR "lower " "and " upper means the socket is bound to the port name range [lower,upper] diff --git a/upstream/debian-unstable/man8/tune2fs.8 b/upstream/debian-unstable/man8/tune2fs.8 index 4b9d77af..22295264 100644 --- a/upstream/debian-unstable/man8/tune2fs.8 +++ b/upstream/debian-unstable/man8/tune2fs.8 @@ -2,7 +2,7 @@ .\" Initial revision .\" .\" -.TH TUNE2FS 8 "February 2023" "E2fsprogs version 1.47.0" +.TH TUNE2FS 8 "May 2024" "E2fsprogs version 1.47.1" .SH NAME tune2fs \- adjust tunable file system parameters on ext2/ext3/ext4 file systems .SH SYNOPSIS diff --git a/upstream/debian-unstable/man8/tzselect.8 b/upstream/debian-unstable/man8/tzselect.8 index 4578090f..ee031614 100644 --- a/upstream/debian-unstable/man8/tzselect.8 +++ b/upstream/debian-unstable/man8/tzselect.8 @@ -95,7 +95,7 @@ Output version information and exit. .SH "ENVIRONMENT VARIABLES" .TP \f3AWK\fP -Name of a Posix-compliant +Name of a POSIX-compliant .B awk program (default: .BR awk ). diff --git a/upstream/debian-unstable/man8/udevadm.8 b/upstream/debian-unstable/man8/udevadm.8 index 234da89e..13c69e52 100644 --- a/upstream/debian-unstable/man8/udevadm.8 +++ b/upstream/debian-unstable/man8/udevadm.8 @@ -1,5 +1,5 @@ '\" t -.TH "UDEVADM" "8" "" "systemd 255" "udevadm" +.TH "UDEVADM" "8" "" "systemd 256~rc3" "udevadm" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -64,7 +64,7 @@ commands\&. .RS 4 Print a short help text and exit\&. .RE -.SS "udevadm info [\fIoptions\fR] [\fIdevpath\fR|\fIfile\fR|\fIunit\fR...]" +.SS "udevadm info [\fIoptions\fR] [\fIdevpath\fR|\fIfile\fR|\fIunit\fR]" .PP Query the udev database for device information\&. .PP @@ -260,7 +260,7 @@ When used with Added in version 255\&. .RE .PP -\fB\-\-json=\fR\fIMODE\fR +\fB\-\-json=\fR\fB\fIMODE\fR\fR .RS 4 Shows output formatted as JSON\&. Expects one of "short" @@ -504,8 +504,18 @@ is specified, trigger events for devices that are not initialized by yet, and skip devices that are already initialized\&. .sp Typically, it is essential that applications which intend to use such a match, make sure a suitable udev rule is installed that sets at least one property on devices that shall be matched\&. See also Initialized Devices section below for more details\&. +.if n \{\ .sp -WARNING: +.\} +.RS 4 +.it 1 an-trap +.nr an-no-space-flag 1 +.nr an-break-flag 1 +.br +.ps +1 +\fBWarning\fR +.ps -1 +.br \fB\-\-initialized\-nomatch\fR can potentially save a significant amount of time compared to re\-triggering all devices in the system and e\&.g\&. can be used to optimize boot time\&. However, this is not safe to be used in a boot sequence in general\&. Especially, when udev rules for a device depend on its parent devices (e\&.g\&. "ATTRS" @@ -514,7 +524,8 @@ or keys, see \fBudev\fR(7) for more details), the final state of the device becomes easily unstable with this option\&. -.sp +.sp .5v +.RE Added in version 251\&. .RE .PP @@ -640,7 +651,7 @@ Signal systemd\-udevd to reload the rules files and other databases like the ker Set a global property for all events\&. .RE .PP -\fB\-m\fR, \fB\-\-children\-max=\fR\fIvalue\fR +\fB\-m\fR, \fB\-\-children\-max=\fR\fB\fIvalue\fR\fR .RS 4 Set the maximum number of events, systemd\-udevd will handle at the same time\&. When 0 is specified, then the maximum is determined based on the system resources\&. .RE @@ -652,11 +663,53 @@ Send a ping message to systemd\-udevd and wait for the reply\&. This may be usef Added in version 241\&. .RE .PP -\fB\-t\fR, \fB\-\-timeout=\fR\fIseconds\fR +\fB\-t\fR, \fB\-\-timeout=\fR\fB\fIseconds\fR\fR .RS 4 The maximum number of seconds to wait for a reply from systemd\-udevd\&. .RE .PP +\fB\-\-load\-credentials\fR +.RS 4 +When specified, the following credentials are used when passed in: +.PP +\fIudev\&.conf\&.*\fR +.RS 4 +These credentials should contain valid +\fBudev.conf\fR(5) +configuration data\&. From each matching credential a separate file is created\&. Example: a passed credential +udev\&.conf\&.50\-foobar +will be copied into a configuration file +/run/udev/udev\&.conf\&.d/50\-foobar\&.conf\&. +.sp +Added in version 256\&. +.RE +.PP +\fIudev\&.rules\&.*\fR +.RS 4 +These credentials should contain valid +\fBudev\fR(7) +rules\&. From each matching credential a separate file is created\&. Example: a passed credential +udev\&.rules\&.50\-foobar +will be copied into a configuration file +/run/udev/rules\&.d/50\-foobar\&.rules\&. +.sp +Added in version 256\&. +.RE +.sp +Note, this +\fIdoes not\fR +imply +\fB\-\-reload\fR +option\&. So, if +\fBsystemd\-udevd\fR +is already running, please consider to also specify +\fB\-reload\fR +to make the copied udev rules files used by +\fBsystemd\-udevd\fR\&. +.sp +Added in version 256\&. +.RE +.PP \fB\-h\fR, \fB\-\-help\fR .RS 4 Print a short help text and exit\&. @@ -729,7 +782,7 @@ Added in version 209\&. .RS 4 Print a short help text and exit\&. .RE -.SS "udevadm test\-builtin [\fIoptions\fR] [\fIcommand\fR] [\fIdevpath\fR|\fIfile\fR|\fIunit\fR]" +.SS "udevadm test\-builtin [\fIoptions\fR] \fIcommand\fR [\fIdevpath\fR|\fIfile\fR|\fIunit\fR]" .PP Run a built\-in command \fICOMMAND\fR @@ -763,7 +816,7 @@ Print a short help text and exit\&. .RS 4 Print a short version string and exit\&. .RE -.SS "udevadm verify [\fIoptions\fR] [\fIfile\fR...] \&..." +.SS "udevadm verify [\fIoptions\fR] [\fIfile\fR] \&..." .PP Verify syntactic, semantic, and stylistic correctness of udev rules files\&. .PP @@ -984,8 +1037,7 @@ doesn\*(Aqt probe or announce the new superblock before it is fully written: .\} .SH "SEE ALSO" .PP -\fBudev\fR(7), -\fBsystemd-udevd.service\fR(8) +\fBudev\fR(7), \fBsystemd-udevd.service\fR(8) .SH "NOTES" .IP " 1." 4 Locking Block Device Access diff --git a/upstream/debian-unstable/man8/update-pciids.8 b/upstream/debian-unstable/man8/update-pciids.8 index e05d4503..bb2e612a 100644 --- a/upstream/debian-unstable/man8/update-pciids.8 +++ b/upstream/debian-unstable/man8/update-pciids.8 @@ -1,4 +1,4 @@ -.TH update-pciids 8 "01 May 2023" "pciutils-3.10.0" "The PCI Utilities" +.TH update-pciids 8 "05 April 2024" "pciutils-3.12.0" "The PCI Utilities" .SH NAME update-pciids \- download new version of the PCI ID list diff --git a/upstream/debian-unstable/man8/xfs_db.8 b/upstream/debian-unstable/man8/xfs_db.8 index f53ddd67..a7f6d55e 100644 --- a/upstream/debian-unstable/man8/xfs_db.8 +++ b/upstream/debian-unstable/man8/xfs_db.8 @@ -388,6 +388,29 @@ and options are used to select the attribute or data area of the inode, if neither option is given then both areas are shown. .TP +.BI "bmapinflate [\-d " dirty_bytes "] [-e] [\-n " nr "] +Duplicates the first data fork mapping this many times, as if the mapping had +been repeatedly reflinked. +This is an expert-mode command for exercising high-refcount filesystems only. +Existing data fork mappings will be forgotten and the refcount btree will not +be updated. +This command leaves at least the refcount btree and the inode inconsistent; +.B xfs_repair +must be run afterwards. +.RS 1.0i +.TP 0.4i +.B \-d +Constrain the memory consumption of new dirty btree blocks to this quantity. +Defaults to 60MiB. +.TP 0.4i +.B \-e +Estimate the number of blocks and height of the new data fork mapping +structure and exit without changing anything. +.TP 0.4i +.B \-n +Create this many copies of the first mapping. +.RE +.TP .B btdump [-a] [-i] If the cursor points to a btree node, dump the btree from that block downward. If instead the cursor points to an inode, dump the data fork block mapping btree if there is one. diff --git a/upstream/debian-unstable/man8/zdump.8 b/upstream/debian-unstable/man8/zdump.8 index f77c0c79..c3f0bba6 100644 --- a/upstream/debian-unstable/man8/zdump.8 +++ b/upstream/debian-unstable/man8/zdump.8 @@ -152,10 +152,9 @@ tabbed columns line up.) .nf .sp .if \n(.g .ft CR -.if t .in +.5i -.if n .in +2 +.in +2 .nr w \w'1896-01-13 'u+\n(.i -.ta \w'1896-01-13 'u +\w'12:01:26 'u +\w'-103126 'u +\w'HWT 'u +.ta \w'1896-01-13\0\0'u +\w'12:01:26\0\0'u +\w'-103126\0\0'u +\w'HWT\0\0'u TZ="Pacific/Honolulu" - - -103126 LMT 1896-01-13 12:01:26 -1030 HST diff --git a/upstream/debian-unstable/man8/zic.8 b/upstream/debian-unstable/man8/zic.8 index c467efef..0ad373a2 100644 --- a/upstream/debian-unstable/man8/zic.8 +++ b/upstream/debian-unstable/man8/zic.8 @@ -95,7 +95,7 @@ as local time. .B zic will act as if the input contained a link line of the form .sp -.ti +.5i +.ti +2 .ta \w'Link\0\0'u +\w'\fItimezone\fP\0\0'u Link \fItimezone\fP localtime .sp @@ -118,9 +118,15 @@ TZ strings like "EET\*-2EEST" that lack transition rules. .B zic will act as if the input contained a link line of the form .sp -.ti +.5i +.ti +2 Link \fItimezone\fP posixrules .sp +If +.I timezone +is +.q "\*-" +(the default), any already-existing link is removed. +.sp Unless .I timezone is .q "\*-" , @@ -131,12 +137,6 @@ and it should not be combined with if .IR timezone 's transitions are at standard time or Universal Time (UT) instead of local time. -.sp -If -.I timezone -is -.BR \*- , -any already-existing link is removed. .TP .BR "\*-r " "[\fB@\fP\fIlo\fP][\fB/@\fP\fIhi\fP]" Limit the applicability of output files @@ -171,7 +171,7 @@ boundaries, particularly if causes a TZif file to contain explicit entries for .RI pre- hi transitions rather than concisely representing them -with an extended POSIX TZ string. +with an extended POSIX.1-2017 TZ string. Also see the .B "\*-b slim" option for another way to shrink output size. @@ -181,10 +181,10 @@ Generate redundant trailing explicit transitions for timestamps that occur less than .I hi seconds since the Epoch, even though the transitions could be -more concisely represented via the extended POSIX TZ string. +more concisely represented via the extended POSIX.1-2017 TZ string. This option does not affect the represented timestamps. Although it accommodates nonstandard TZif readers -that ignore the extended POSIX TZ string, +that ignore the extended POSIX.1-2017 TZ string, it increases the size of the altered output files. .TP .BI "\*-t " file @@ -245,10 +245,10 @@ for .PP The output file does not contain all the information about the long-term future of a timezone, because the future cannot be summarized as -an extended POSIX TZ string. For example, as of 2023 this problem +an extended POSIX.1-2017 TZ string. For example, as of 2023 this problem occurs for Morocco's daylight-saving rules, as these rules are based on predictions for when Ramadan will be observed, something that -an extended POSIX TZ string cannot represent. +an extended POSIX.1-2017 TZ string cannot represent. .PP The output contains data that may not be handled properly by client code designed for older @@ -330,19 +330,19 @@ abbreviation must be unambiguous in context. .PP A rule line has the form .nf -.ti +.5i +.ti +2 .ta \w'Rule\0\0'u +\w'NAME\0\0'u +\w'FROM\0\0'u +\w'1973\0\0'u +\w'\*-\0\0'u +\w'Apr\0\0'u +\w'lastSun\0\0'u +\w'2:00w\0\0'u +\w'1:00d\0\0'u .sp Rule NAME FROM TO \*- IN ON AT SAVE LETTER/S .sp For example: -.ti +.5i +.ti +2 .sp Rule US 1967 1973 \*- Apr lastSun 2:00w 1:00d D .sp .fi The fields that make up a rule line are: -.TP "\w'LETTER/S'u" +.TP .B NAME Gives the name of the rule set that contains this line. The name must start with a character that is neither @@ -360,24 +360,15 @@ an unquoted name should not contain characters from the set Gives the first year in which the rule applies. Any signed integer year can be supplied; the proleptic Gregorian calendar is assumed, with year 0 preceding year 1. -The word -.B minimum -(or an abbreviation) means the indefinite past. -The word -.B maximum -(or an abbreviation) means the indefinite future. Rules can describe times that are not representable as time values, with the unrepresentable times ignored; this allows rules to be portable among hosts with differing time value types. .TP .B TO Gives the final year in which the rule applies. -In addition to -.B minimum -and +The word .B maximum -(as above), -the word +(or an abbreviation) means the indefinite future, and the word .B only (or an abbreviation) may be used to repeat the value of the @@ -404,7 +395,7 @@ Month names may be abbreviated. Gives the day on which the rule takes effect. Recognized forms include: .nf -.in +.5i +.in +2 .sp .ta \w'Sun<=25\0\0'u 5 the fifth of the month @@ -413,7 +404,7 @@ lastMon the last Monday in the month Sun>=8 first Sunday on or after the eighth Sun<=25 last Sunday on or before the 25th .fi -.in -.5i +.in .sp A weekday name (e.g., .BR "Sunday" ) @@ -440,7 +431,7 @@ Gives the time of day at which the rule takes effect, relative to 00:00, the start of a calendar day. Recognized forms include: .nf -.in +.5i +.in +2 .sp .ta \w'00:19:32.13\0\0'u 2 time in hours @@ -454,7 +445,7 @@ Recognized forms include: \*-2:30 2.5 hours before 00:00 \*- equivalent to 0 .fi -.in -.5i +.in .sp Although .B zic @@ -532,18 +523,18 @@ the variable part is null. A zone line has the form .sp .nf -.ti +.5i +.ti +2 .ta \w'Zone\0\0'u +\w'Asia/Amman\0\0'u +\w'STDOFF\0\0'u +\w'Jordan\0\0'u +\w'FORMAT\0\0'u Zone NAME STDOFF RULES FORMAT [UNTIL] .sp For example: .sp -.ti +.5i +.ti +2 Zone Asia/Amman 2:00 Jordan EE%sT 2017 Oct 27 01:00 .sp .fi The fields that make up a zone line are: -.TP "\w'STDOFF'u" +.TP .B NAME The name of the timezone. This is the name used in creating the time conversion information file for the @@ -663,15 +654,15 @@ For example: .br .ne 7 .nf -.in +2m +.in +2 .ta \w'# Rule\0\0'u +\w'NAME\0\0'u +\w'FROM\0\0'u +\w'2006\0\0'u +\w'\*-\0\0'u +\w'Oct\0\0'u +\w'lastSun\0\0'u +\w'2:00\0\0'u +\w'SAVE\0\0'u .sp # Rule NAME FROM TO \*- IN ON AT SAVE LETTER/S Rule US 1967 2006 - Oct lastSun 2:00 0 S Rule US 1967 1973 - Apr lastSun 2:00 1:00 D -.ta \w'Zone\0\0America/Menominee\0\0'u +\w'STDOFF\0\0'u +\w'RULES\0\0'u +\w'FORMAT\0\0'u -# Zone\0\0NAME STDOFF RULES FORMAT [UNTIL] -Zone\0\0America/Menominee \*-5:00 \*- EST 1973 Apr 29 2:00 +.ta \w'# Zone\0\0'u +\w'America/Menominee\0\0'u +\w'STDOFF\0\0'u +\w'RULES\0\0'u +\w'FORMAT\0\0'u +# Zone NAME STDOFF RULES FORMAT [UNTIL] +Zone America/Menominee \*-5:00 \*- EST 1973 Apr 29 2:00 \*-6:00 US C%sT .sp .in @@ -687,13 +678,13 @@ interprets this more sensibly as a single transition from 02:00 CST (\*-05) to A link line has the form .sp .nf -.ti +.5i +.ti +2 .ta \w'Link\0\0'u +\w'Europe/Istanbul\0\0'u Link TARGET LINK-NAME .sp For example: .sp -.ti +.5i +.ti +2 Link Europe/Istanbul Asia/Istanbul .sp .fi @@ -717,7 +708,7 @@ For example: .sp .ne 3 .nf -.in +2m +.in +2 .ta \w'Zone\0\0'u +\w'Greenwich\0\0'u Link Greenwich G_M_T Link Etc/GMT Greenwich @@ -737,13 +728,13 @@ The file that describes leap seconds can have leap lines and an expiration line. Leap lines have the following form: .nf -.ti +.5i +.ti +2 .ta \w'Leap\0\0'u +\w'YEAR\0\0'u +\w'MONTH\0\0'u +\w'DAY\0\0'u +\w'HH:MM:SS\0\0'u +\w'CORR\0\0'u .sp Leap YEAR MONTH DAY HH:MM:SS CORR R/S .sp For example: -.ti +.5i +.ti +2 .sp Leap 2016 Dec 31 23:59:60 + S .sp @@ -791,13 +782,13 @@ option is used. .PP The expiration line, if present, has the form: .nf -.ti +.5i +.ti +2 .ta \w'Expires\0\0'u +\w'YEAR\0\0'u +\w'MONTH\0\0'u +\w'DAY\0\0'u .sp Expires YEAR MONTH DAY HH:MM:SS .sp For example: -.ti +.5i +.ti +2 .sp Expires 2020 Dec 28 00:00:00 .sp @@ -816,7 +807,7 @@ Here is an extended example of .B zic input, intended to illustrate many of its features. .nf -.in +2m +.in +2 .ta \w'# Rule\0\0'u +\w'NAME\0\0'u +\w'FROM\0\0'u +\w'1973\0\0'u +\w'\*-\0\0'u +\w'Apr\0\0'u +\w'lastSun\0\0'u +\w'2:00\0\0'u +\w'SAVE\0\0'u .sp # Rule NAME FROM TO \*- IN ON AT SAVE LETTER/S |