lxc-user-nic(1) — Linux manual page

NAME | SYNOPSIS | DESCRIPTION | OPTIONS | SEE ALSO | COLOPHON

lxc-user-nic(1)                                           lxc-user-nic(1)

NAME         top

       lxc-user-nic - Manage nics in another network namespace

SYNOPSIS         top

       lxc-user-nic create {lxcpath} {name} {pid} {type} {bridge}
                    {container nicname}
       lxc-user-nic delete {lxcpath} {name} {path to network namespace}
                    {type} {bridge} {container nicname}

DESCRIPTION         top

       lxc-user-nic  is  a  setuid-root  program  with which unprivileged
       users may manage network interfaces for use by a lxc container.

       It will consult the configuration file /etc/lxc/lxc-usernet to de‐
       termine the number of interfaces which the calling user is allowed
       to create, and which bridge they may attach them to. It tracks the
       number  of  interfaces  each  user  has  created  using  the  file
       /run/lxc/nics. It ensures that the calling user is privileged over
       the  network  namespace  to  which the interface will be attached.
       lxc-user-nic also allows one to delete network devices.  Currently
       only ovs ports can be deleted.

OPTIONS         top

       lxcpath
              The path of the container. This is currently not used.

       name   The name of the container. This is currently not used.

       pid    The process id for the task to whose network namespace the
              interface should be attached.

       type   The network interface type to attach. Currently only veth
              is supported. With this type, two interfaces representing
              each tunnel endpoint are created. One endpoint will be at‐
              tached to the specified bridge, while the other will be
              passed into the container.

       bridge The bridge to which to attach the network interface, for
              instance lxcbr0.

       container nicname
              The desired interface name in the container. This will be
              eth0 if unspecified.

       path to network namespace
              A path to open to get a file descriptor for the target net‐
              work namespace.  This is only relevant when an veth device
              is deleted.

SEE ALSO         top

       lxc(1), lxc-start(1), lxc-usernet(5)

COLOPHON         top

       This page is part of the lxc (Linux containers) project.  Informa‐
       tion about the project can be found at 
       ⟨http://linuxcontainers.org/⟩.  If you have a bug report for this
       manual page, send it to lxc-devel@lists.linuxcontainers.org.  This
       page was obtained from the project's upstream Git repository
       ⟨https://github.com/lxc/lxc.git⟩ on 2025-02-02.  (At that time,
       the date of the most recent commit that was found in the
       repository was 2025-01-24.)  If you discover any rendering
       problems in this HTML version of the page, or you believe there is
       a better or more up-to-date source for the page, or you have
       corrections or improvements to the information in this COLOPHON
       (which is not part of the original manual page), send a mail to
       man-pages@man7.org

                                2024-04-03                lxc-user-nic(1)

Pages that refer to this page: lxc-usernet(5)