lxc-user-nic(1) — Linux manual page

lxc-user-nic(1)                                          lxc-user-nic(1)

NAME

       lxc-user-nic - Manage nics in another network namespace

SYNOPSIS

       lxc-user-nic create {lxcpath} {name} {pid} {type} {bridge}
                    {container nicname}
       lxc-user-nic delete {lxcpath} {name} {path to network namespace}
                    {type} {bridge} {container nicname}

DESCRIPTION

       lxc-user-nic  is  a  setuid-root  program with which unprivileged
       users may manage network interfaces for use by a lxc container.

       It will consult the configuration  file  /etc/lxc/lxc-usernet  to
       determine  the number of interfaces which the calling user is al‐
       lowed to create, and which bridge they may  attach  them  to.  It
       tracks  the  number of interfaces each user has created using the
       file /run/lxc/nics. It ensures that the calling  user  is  privi‐
       leged  over  the network namespace to which the interface will be
       attached.  lxc-user-nic also allows one  to  delete  network  de‐
       vices.  Currently only ovs ports can be deleted.

OPTIONS

       lxcpath
              The path of the container. This is currently not used.

       name   The name of the container. This is currently not used.

       pid    The process id for the task to whose network namespace the
              interface should be attached.

       type   The network interface type to attach. Currently only veth
              is supported. With this type, two interfaces representing
              each tunnel endpoint are created. One endpoint will be at‐
              tached to the specified bridge, while the other will be
              passed into the container.

       bridge The bridge to which to attach the network interface, for
              instance lxcbr0.

       container nicname
              The desired interface name in the container. This will be
              eth0 if unspecified.

       path to network namespace
              A path to open to get a file descriptor for the target
              network namespace.  This is only relevant when an veth de‐
              vice is deleted.

SEE ALSO

       lxc(1), lxc-start(1), lxc-usernet(5)

COLOPHON

       This page is part of the lxc (Linux containers) project.  Infor‐
       mation about the project can be found at 
       ⟨http://linuxcontainers.org/⟩.  If you have a bug report for this
       manual page, send it to lxc-devel@lists.linuxcontainers.org.
       This page was obtained from the project's upstream Git repository
       ⟨https://github.com/lxc/lxc.git⟩ on 2024-06-14.  (At that time,
       the date of the most recent commit that was found in the
       repository was 2024-06-05.)  If you discover any rendering
       problems in this HTML version of the page, or you believe there
       is a better or more up-to-date source for the page, or you have
       corrections or improvements to the information in this COLOPHON
       (which is not part of the original manual page), send a mail to
       man-pages@man7.org

                               2024-04-03                lxc-user-nic(1)

Pages that refer to this page: lxc-usernet(5)

---