lxc-user-nic(1) — Linux manual page

NAME | SYNOPSIS | DESCRIPTION | OPTIONS | SEE ALSO | AUTHOR | COLOPHON

LXC-USER-NIC(1)                                              LXC-USER-NIC(1)

NAME top

       lxc-user-nic - Manage nics in another network namespace

SYNOPSIS top

       lxc-user-niccreate lxcpath name pid type bridge container nicname

       lxc-user-nicdelete lxcpath name path to network namespace type bridge
       container nicname

DESCRIPTION top

       lxc-user-nic is a setuid-root program with which unprivileged users
       may manage network interfaces for use by a lxc container.

       It will consult the configuration file /usr/local/etc/lxc/lxc-usernet
       to determine the number of interfaces which the calling user is
       allowed to create, and which bridge he may attach them to. It tracks
       the number of interfaces each user has created using the file
       /run/lxc/nics. It ensures that the calling user is privileged over
       the network namespace to which the interface will be attached.  lxc-
       user-nic also allows one to delete network devices.  Currently only
       ovs ports can be deleted.

OPTIONS top

       lxcpath
              The path of the container. This is currently not used.

       name   The name of the container. This is currently not used.

       pid    The process id for the task to whose network namespace the
              interface should be attached.

       type   The network interface type to attach. Currently only veth is
              supported. With this type, two interfaces representing each
              tunnel endpoint are created. One endpoint will be attached to
              the specified bridge, while the other will be passed into the
              container.

       bridge The bridge to which to attach the network interface, for
              instance lxcbr0.

       container nicname
              The desired interface name in the container. This will be eth0
              if unspecified.

       path to network namespace
              A path to open to get a file descriptor for the target network
              namespace.  This is only relevant when an veth device is
              deleted.

SEE ALSO top

       lxc(1), lxc-start(1), lxc-usernet(5)

AUTHOR top

       Christian Brauner <christian@brauner.io>

       Serge Hallyn <serge@hallyn.com>

       Daniel Lezcano <daniel.lezcano@free.fr>

COLOPHON top

       This page is part of the lxc (Linux containers) project.  Information
       about the project can be found at ⟨http://linuxcontainers.org/⟩.  If
       you have a bug report for this manual page, send it to
       lxc-devel@lists.linuxcontainers.org.  This page was obtained from the
       project's upstream Git repository ⟨git://github.com/lxc/lxc⟩ on
       2020-08-13.  (At that time, the date of the most recent commit that
       was found in the repository was 2020-08-12.)  If you discover any
       rendering problems in this HTML version of the page, or you believe
       there is a better or more up-to-date source for the page, or you have
       corrections or improvements to the information in this COLOPHON
       (which is not part of the original manual page), send a mail to
       man-pages@man7.org

                                 2020-08-13                  LXC-USER-NIC(1)

Pages that refer to this page: lxc-usernet(5)