1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
|
# German translation of manpages
# This file is distributed under the same license as the manpages-l10n package.
# Copyright © of this file:
msgid ""
msgstr ""
"Project-Id-Version: manpages-l10n 4.23.0\n"
"POT-Creation-Date: 2024-06-15 09:12+0200\n"
"PO-Revision-Date: 2024-06-15 09:53+0200\n"
"Last-Translator: Automatically generated\n"
"Language-Team: German <debian-l10n-german@lists.debian.org>\n"
"Language: de\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
#. type: TH
#: debian-unstable fedora-rawhide
#, no-wrap
msgid "SYSTEMD-NSRESOURCED\\&.SERVICE"
msgstr "SYSTEMD-NSRESOURCED\\&.SERVICE"
#. type: TH
#: debian-unstable fedora-rawhide
#, no-wrap
msgid "systemd 256~rc3"
msgstr "systemd 256~rc3"
#. type: TH
#: debian-unstable fedora-rawhide
#, no-wrap
msgid "systemd-nsresourced.service"
msgstr "systemd-nsresourced.service"
#. -----------------------------------------------------------------
#. * MAIN CONTENT STARTS HERE *
#. -----------------------------------------------------------------
#. type: SH
#: debian-unstable fedora-rawhide
#, no-wrap
msgid "NAME"
msgstr "BEZEICHNUNG"
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid ""
"systemd-nsresourced.service, systemd-nsresourced - User Namespace Resource "
"Delegation Service"
msgstr ""
#. type: SH
#: debian-unstable fedora-rawhide
#, no-wrap
msgid "SYNOPSIS"
msgstr "ÜBERSICHT"
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid "systemd-nsresourced\\&.service"
msgstr "systemd-nsresourced\\&.service"
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid "/usr/lib/systemd/systemd-nsresourced"
msgstr "/usr/lib/systemd/systemd-nsresourced"
#. type: SH
#: debian-unstable fedora-rawhide
#, no-wrap
msgid "DESCRIPTION"
msgstr "BESCHREIBUNG"
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid ""
"B<systemd-nsresourced> is a system service that permits transient delegation "
"of a a UID/GID range to a user namespace (see B<user_namespaces>(7)) "
"allocated by a client, via a Varlink IPC API\\&."
msgstr ""
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid ""
"Unprivileged clients may allocate a user namespace, and then request a UID/"
"GID range to be assigned to it via this service\\&. The user namespace may "
"then be used to run containers and other sandboxes, and/or apply it to an id-"
"mapped mount\\&."
msgstr ""
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid ""
"Allocations of UIDs/GIDs this way are transient: when a user namespace goes "
"away, its UID/GID range is returned to the pool of available ranges\\&. In "
"order to ensure that clients cannot gain persistency in their transient UID/"
"GID range a BPF-LSM based policy is enforced that ensures that user "
"namespaces set up this way can only write to file systems they allocate "
"themselves or that are explicitly allowlisted via B<systemd-nsresourced>\\&."
msgstr ""
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid ""
"B<systemd-nsresourced> automatically ensures that any registered UID ranges "
"show up in the system\\*(Aqs NSS database via the \\m[blue]B<User/Group "
"Record Lookup API via Varlink>\\m[]\\&\\s-2\\u[1]\\d\\s+2\\&."
msgstr ""
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid ""
"Currently, only UID/GID ranges consisting of either exactly 1 or exactly "
"65536 UIDs/GIDs can be registered with this service\\&. Moreover, UIDs and "
"GIDs are always allocated together, and symmetrically\\&."
msgstr ""
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid ""
"The service provides API calls to allowlist mounts (referenced via their "
"mount file descriptors as per Linux B<fsmount()> API), to pass ownership of "
"a cgroup subtree to the user namespace and to delegate a virtual Ethernet "
"device pair to the user namespace\\&. When used in combination this is "
"sufficient to implement fully unprivileged container environments, as "
"implemented by B<systemd-nspawn>(1), fully unprivileged I<RootImage=> (see "
"B<systemd.exec>(5)) or fully unprivileged disk image tools such as B<systemd-"
"dissect>(1)\\&."
msgstr ""
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid ""
"This service provides one \\m[blue]B<Varlink>\\m[]\\&\\s-2\\u[2]\\d\\s+2 "
"service: B<io\\&.systemd\\&.NamespaceResource> allows registering user "
"namespaces, and assign mounts, cgroups and network interfaces to it\\&."
msgstr ""
#. type: SH
#: debian-unstable fedora-rawhide
#, no-wrap
msgid "SEE ALSO"
msgstr "SIEHE AUCH"
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid ""
"B<systemd>(1), B<systemd-mountfsd.service>(8), B<systemd-nspawn>(1), "
"B<systemd.exec>(5), B<systemd-dissect>(1), B<user_namespaces>(7)"
msgstr ""
"B<systemd>(1), B<systemd-mountfsd.service>(8), B<systemd-nspawn>(1), "
"B<systemd.exec>(5), B<systemd-dissect>(1), B<user_namespaces>(7)"
#. type: SH
#: debian-unstable fedora-rawhide
#, no-wrap
msgid "NOTES"
msgstr "ANMERKUNGEN"
#. type: IP
#: debian-unstable fedora-rawhide
#, no-wrap
msgid " 1."
msgstr " 1."
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid "User/Group Record Lookup API via Varlink"
msgstr "Benutzer-/Gruppen-Datensatznachschlage-API über Varlink"
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid "\\%https://systemd.io/USER_GROUP_API"
msgstr "\\%https://systemd.io/USER_GROUP_API"
#. type: IP
#: debian-unstable fedora-rawhide
#, no-wrap
msgid " 2."
msgstr " 2."
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid "Varlink"
msgstr "Varlink"
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid "\\%https://varlink.org/"
msgstr "\\%https://varlink.org/"
|
