From: Guillaume Kehren Date: Tue, 21 Jul 2026 09:14:33 +0000 (+0200) Subject: man: document unlocked as default IMDS network mode X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=ac64b2dfa3ba05604b678fd59af43c76950febb4;p=thirdparty%2Fsystemd.git man: document unlocked as default IMDS network mode The default IMDS network mode was changed to unlocked, but the systemd-imdsd@.service documentation still described locked as the default. Fixes #42687 --- diff --git a/man/systemd-imdsd@.service.xml b/man/systemd-imdsd@.service.xml index 0d08a58120c..d4007b7c87f 100644 --- a/man/systemd-imdsd@.service.xml +++ b/man/systemd-imdsd@.service.xml @@ -69,10 +69,10 @@ Takes one of off, locked, unlocked. Controls whether and how to set up networking for IMDS endpoint access. Unless set to off early boot networking is enabled, ensuring that the - IMDS endpoint can be reached. If set to locked (the default) direct access to + IMDS endpoint can be reached. If set to locked direct access to the IMDS endpoint by regular unprivileged processes is disabled via a "prohibit" route, so that any access must be done through systemd-imdsd@.service or its associated tools. If - set to unlocked this "prohibit" route is not created, and regular unprivileged + set to unlocked (the default) this "prohibit" route is not created, and regular unprivileged processes can directly contact IMDS.