]>
Commit | Line | Data |
---|---|---|
30fd4d1e WG |
1 | #compdef systemd-nspawn |
2 | ||
3 | _nspawn-caps(){ | |
4 | local -a _caps | |
5 | _caps=( CAP_CHOWN CAP_DAC_OVERRIDE CAP_DAC_READ_SEARCH | |
6 | CAP_FOWNER CAP_FSETID CAP_IPC_OWNER CAP_KILL CAP_LEASE CAP_LINUX_IMMUTABLE | |
7 | CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SETGID CAP_SETFCAP CAP_SETPCAP | |
8 | CAP_SETUID CAP_SYS_ADMIN CAP_SYS_CHROOT CAP_SYS_NICE CAP_SYS_PTRACE CAP_SYS_TTY_CONFIG | |
9 | CAP_SYS_RESOURCE CAP_SYS_BOOT ) | |
10 | _values -s , 'capabilities' "$_caps[@]" | |
11 | } | |
12 | ||
13 | _arguments \ | |
14 | {-h,--help}'[Show this help]' \ | |
15 | {--directory=,-D}'[Directory to use as file system root for the namespace container. If omitted the current directory will be used.]:directories:_directories' \ | |
16 | {--boot,-b}'[Automatically search for an init binary and invoke it instead of a shell or a user supplied program.]' \ | |
17 | {--user=,-u}'[Run the command under specified user, create home directory and cd into it.]' \ | |
18 | '--uuid=[Set the specified uuid for the container.]' \ | |
19 | {--controllers=,-C}'[Makes the container appear in other hierarchies than the name=systemd:/ one. Takes a comma-separated list of controllers.]' \ | |
20 | '--private-network[Turn off networking in the container. This makes all network interfaces unavailable in the container, with the exception of the loopback device.]' \ | |
21 | '--read-only[Mount the root file system read only for the container.]' \ | |
22 | '--capability=[List one or more additional capabilities to grant the container.]:capabilities:_nspawn-caps' \ | |
23 | "--link-journal=[Control whether the container's journal shall be made visible to the host system.]:options:(no, host, guest, auto)" \ | |
24 | '-j[Equivalent to --link-journal=guest.]' |