For further details, see
.BR mount_namespaces (7)
and the discussion of the
-.BR CLONE_NEWNS
+.B CLONE_NEWNS
flag in
.BR clone (2).
.TP
.B UTS namespace
Setting hostname or domainname will not affect the rest of the system.
For further details, see
-.BR namespaces (7)
+.BR uts_namespaces (7)
and the discussion of the
-.BR CLONE_NEWUTS
+.B CLONE_NEWUTS
flag in
.BR clone (2).
.TP
as well as System V message queues,
semaphore sets and shared memory segments.
For further details, see
-.BR namespaces (7)
+.BR ipc_namespaces (7)
and the discussion of the
-.BR CLONE_NEWIPC
+.B CLONE_NEWIPC
flag in
.BR clone (2).
.TP
.I /sys\:/class\:/net
directory trees, sockets, etc.
For further details, see
-.BR namespaces (7)
+.BR network_namespaces (7)
and the discussion of the
-.BR CLONE_NEWNET
+.B CLONE_NEWNET
flag in
.BR clone (2).
.TP
.B PID namespace
Children will have a set of PID to process mappings separate from the
.B nsenter
-process
+process.
+.B nsenter
+will fork by default if changing the PID namespace, so that the new program
+and its children share the same PID namespace and are visible to each other.
+If \fB\-\-no\-fork\fP is used, the new program will be exec'ed without forking.
For further details, see
.BR pid_namespaces (7)
and
the discussion of the
-.BR CLONE_NEWPID
+.B CLONE_NEWPID
flag in
-.B nsenter
-will fork by default if changing the PID namespace, so that the new program
-and its children share the same PID namespace and are visible to each other.
-If \fB\-\-no\-fork\fP is used, the new program will be exec'ed without forking.
+.BR clone (2).
.TP
.B user namespace
The process will have a distinct set of UIDs, GIDs and capabilities.
For further details, see
.BR user_namespaces (7)
and the discussion of the
-.BR CLONE_NEWUSER
+.B CLONE_NEWUSER
flag in
.BR clone (2).
.TP
For further details, see
.BR cgroup_namespaces (7)
and the discussion of the
-.BR CLONE_NEWCGROUP
+.B CLONE_NEWCGROUP
flag in
.BR clone (2).
.TP
+.B time namespace
+The process can have a distinct view of
+.B CLOCK_MONOTONIC
+and/or
+.B CLOCK_BOOTTIME
+which can be changed using \fI/proc/self/timens_offsets\fP.
+For further details, see
+.BR time_namespaces (7).
+.TP
See \fBclone\fP(2) for the exact semantics of the flags.
.SH OPTIONS
Various of the options below that relate to namespaces take an optional
.I file
argument.
This should be one of the
-.IR /proc/[pid]/ns/*
+.I /proc/[pid]/ns/*
files described in
.BR namespaces (7).
.TP
\fB\-a\fR, \fB\-\-all\fR
Enter all namespaces of the target process by the default
-.IR /proc/[pid]/ns/*
+.I /proc/[pid]/ns/*
namespace paths. The default paths to the target process namespaces may be
-overwritten by namespace specific options (e.g. --all --mount=[path]).
+overwritten by namespace specific options (e.g., --all --mount=[path]).
The user namespace will be ignored if the same as the caller's current user
namespace. It prevents a caller that has dropped capabilities from regaining
/proc/\fIpid\fR/ns/cgroup
the cgroup namespace
.TP
+/proc/\fIpid\fR/ns/time
+the time namespace
+.TP
/proc/\fIpid\fR/root
the root directory
.TP
is specified, enter the cgroup namespace specified by
.IR file .
.TP
+\fB\-T\fR, \fB\-\-time\fR[=\fIfile\fR]
+Enter the time namespace. If no file is specified, enter the time namespace of
+the target process.
+If
+.I file
+is specified, enter the time namespace specified by
+.IR file .
+.TP
\fB\-G\fR, \fB\-\-setgid\fR \fIgid\fR
Set the group ID which will be used in the entered namespace and drop
supplementary groups.
.TP
\fB\-h\fR, \fB\-\-help\fR
Display help text and exit.
-.SH SEE ALSO
-.BR clone (2),
-.BR setns (2),
-.BR namespaces (7)
.SH AUTHORS
.UR biederm@xmission.com
Eric Biederman
.UR kzak@redhat.com
Karel Zak
.UE
+.SH SEE ALSO
+.BR clone (2),
+.BR setns (2),
+.BR namespaces (7)
.SH AVAILABILITY
The nsenter command is part of the util-linux package and is available from
.UR https://\:www.kernel.org\:/pub\:/linux\:/utils\:/util-linux/