]> git.ipfire.org Git - thirdparty/systemd.git/commitdiff
man: nspawn is used in production these days, admit that
authorLennart Poettering <lennart@poettering.net>
Tue, 5 May 2015 20:41:31 +0000 (13:41 -0700)
committerLennart Poettering <lennart@poettering.net>
Tue, 5 May 2015 22:07:00 +0000 (15:07 -0700)
Previously, the man page suggested to only use nspawn for testing,
building, and debugging things. However, it is nowadays used in
production and used as building block for rocket, hence let's just admit
that it's pretty much production ready.

man/systemd-nspawn.xml

index cae067bcff2887d21f7789bf1b953be9aac1d2c5..cb96661317ca56a162254a1ef3c140a7c09973e9 100644 (file)
     kernel modules may not be loaded from within the container.</para>
 
     <para>Note that even though these security precautions are taken
-    <command>systemd-nspawn</command> is not suitable for secure
+    <command>systemd-nspawn</command> is not suitable for fully secure
     container setups. Many of the security features may be
     circumvented and are hence primarily useful to avoid accidental
-    changes to the host system from the container. The intended use of
-    this program is debugging and testing as well as building of
-    packages, distributions and software involved with boot and
-    systems management.</para>
+    changes to the host system from the container.</para>
 
     <para>In contrast to
     <citerefentry project='man-pages'><refentrytitle>chroot</refentrytitle><manvolnum>1</manvolnum></citerefentry> <command>systemd-nspawn</command>