.\" Copyright (C) 2000 by Werner Almesberger .\" and Copyright (C) 2019 Michael Kerrisk .\" .\" %%%LICENSE_START(GPL_NOVERSION_ONELINE) .\" May be distributed under GPL .\" %%%LICENSE_END .\" .\" Written 2000-02-23 by Werner Almesberger .\" Modified 2004-06-17 Michael Kerrisk .\" .TH PIVOT_ROOT 2 2019-08-02 "Linux" "Linux Programmer's Manual" .SH NAME pivot_root \- change the root filesystem .SH SYNOPSIS .BI "int pivot_root(const char *" new_root ", const char *" put_old ); .PP .IR Note : There is no glibc wrapper for this system call; see NOTES. .SH DESCRIPTION .BR pivot_root () changes the root filesystem in the mount namespace of the calling process. More precisely, it moves the root filesystem to the directory \fIput_old\fP and makes \fInew_root\fP the new root filesystem. The calling process must have the .B CAP_SYS_ADMIN capability in the user namespace that owns the caller's mount namespace. .PP A typical use of .BR pivot_root () is during system startup, when the system mounts a temporary root filesystem (e.g., an \fBinitrd\fP), then mounts the real root filesystem, and eventually turns the latter into the current root of all relevant processes or threads. A modern use is to set up a root filesystem during the creation of a container. .PP .BR pivot_root () may or may not change the current root and the current working directory of any processes or threads that use the old root directory and which are in the same mount namespace as the caller of .BR pivot_root (). The caller of .BR pivot_root () must ensure that processes with root or current working directory at the old root operate correctly in either case. An easy way to ensure this is to change their root and current working directory to \fInew_root\fP before invoking .BR pivot_root (). .PP The paragraph above is intentionally vague because the implementation of .BR pivot_root () may change in the future. Currently, .BR pivot_root () changes the root directory and the current working directory of each process or thread in the same mount namespace to .I new_root if they point to the old root directory. This is necessary in order to prevent kernel threads from keeping the old root directory busy with their root and current working directory, even if they never access the filesystem in any way. In the future, there may be a mechanism for kernel threads to explicitly relinquish any access to the filesystem, such that this fairly intrusive mechanism can be removed from .BR pivot_root (). .PP Note that this also applies to the calling process: .BR pivot_root () may or may not affect its current working directory. It is therefore recommended to call \fBchdir("/")\fP immediately after .BR pivot_root (). .PP The following restrictions apply to \fInew_root\fP and \fIput_old\fP: .IP \- 3 They must be directories. .IP \- \fInew_root\fP and \fIput_old\fP must not be on the same filesystem as the current root. .IP \- \fIput_old\fP must be underneath \fInew_root\fP, that is, adding a nonzero number of \fI/..\fP to the string pointed to by \fIput_old\fP must yield the same directory as \fInew_root\fP. .IP \- .I new_root must be a mount point. (If it is not otherwise a mount point, it suffices to bind mount .I new_root on top of itself.) .IP \- The propagation type of .I new_root and its parent mount must not be .BR MS_SHARED ; similarly, if .I put_old is an existing mount point, its propagation type must not be .BR MS_SHARED . .PP See also .BR pivot_root (8) for additional usage examples. .PP If the current root is not a mount point (e.g., after an earlier .BR chroot (2) or .BR pivot_root ()), then the mount point of the filesystem containing the current root directory (i.e., not the directory itself) is mounted on \fIput_old\fP. .SH RETURN VALUE On success, zero is returned. On error, \-1 is returned, and \fIerrno\fP is set appropriately. .SH ERRORS .BR pivot_root () may fail with any of the same errors as .BR stat (2). Additionally, it may fail with the following errors: .TP .B EBUSY \fInew_root\fP or \fIput_old\fP are on the current root filesystem, or a filesystem is already mounted on \fIput_old\fP. .TP .B EINVAL .I new_root is not a mount point. .TP .B EINVAL \fIput_old\fP is not underneath \fInew_root\fP. .TP .B EINVAL The current root is on the rootfs (initial ramfs) filesystem. .TP .B EINVAL Either the mount point at .IR new_root , or the parent mount of that mount point, has propagation type .BR MS_SHARED . .TP .B EINVAL .I put_old is a mount point and has the propagation type .BR MS_SHARED . .TP .B ENOTDIR \fInew_root\fP or \fIput_old\fP is not a directory. .TP .B EPERM The calling process does not have the .B CAP_SYS_ADMIN capability. .SH VERSIONS .BR pivot_root () was introduced in Linux 2.3.41. .SH CONFORMING TO .BR pivot_root () is Linux-specific and hence is not portable. .SH NOTES Glibc does not provide a wrapper for this system call; call it using .BR syscall (2). .PP The rootfs (initial ramfs) cannot be .BR pivot_root ()ed. The recommended method of changing the root filesystem in this case is to delete everything in rootfs, overmount rootfs with the new root, attach .IR stdin / stdout / stderr to the new .IR /dev/console , and exec the new .BR init (1). Helper programs for this process exist; see .BR switch_root (8). .SH BUGS .BR pivot_root () should not have to change root and current working directory of other processes in the system. .PP Some of the more obscure uses of .BR pivot_root () may quickly lead to insanity. .SH SEE ALSO .BR chdir (2), .BR chroot (2), .BR mount (2), .BR stat (2), .BR initrd (4), .BR mount_namespaces (7), .BR pivot_root (8), .BR switch_root (8)