core: introduce BindJournalSockets=

Closes #32478
This commit is contained in:
Mike Yuan
2024-09-03 21:04:50 +02:00
parent 0333969a40
commit 368a3071e9
11 changed files with 110 additions and 10 deletions
+17
View File
@@ -366,6 +366,23 @@
<xi:include href="version-info.xml" xpointer="v233"/></listitem>
</varlistentry>
<varlistentry>
<term><varname>BindJournalSockets=</varname></term>
<listitem><para>Takes a boolean argument. If true, sockets from <citerefentry>
<refentrytitle>systemd-journald.socket</refentrytitle><manvolnum>8</manvolnum></citerefentry>
will be bind mounted into the mount namespace. This is particularly useful when a different instance
of <filename>/run/</filename> is employed, to make sure processes running in the namespace
can still make use of <citerefentry><refentrytitle>sd-journal</refentrytitle><manvolnum>3</manvolnum></citerefentry>.
</para>
<para>This option is implied when <varname>LogNamespace=</varname> is used,
when <varname>MountAPIVFS=yes</varname>, or when <varname>PrivateDevices=yes</varname> is used
in conjunction with either <varname>RootDirectory=</varname> or <varname>RootImage=</varname>.</para>
<xi:include href="version-info.xml" xpointer="v257"/></listitem>
</varlistentry>
<varlistentry>
<term><varname>ProtectProc=</varname></term>