From ac64b2dfa3ba05604b678fd59af43c76950febb4 Mon Sep 17 00:00:00 2001 From: Guillaume Kehren Date: Tue, 21 Jul 2026 11:14:33 +0200 Subject: [PATCH] man: document unlocked as default IMDS network mode The default IMDS network mode was changed to unlocked, but the systemd-imdsd@.service documentation still described locked as the default. Fixes #42687 --- man/systemd-imdsd@.service.xml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/man/systemd-imdsd@.service.xml b/man/systemd-imdsd@.service.xml index 0d08a58120..d4007b7c87 100644 --- a/man/systemd-imdsd@.service.xml +++ b/man/systemd-imdsd@.service.xml @@ -69,10 +69,10 @@ Takes one of off, locked, unlocked. Controls whether and how to set up networking for IMDS endpoint access. Unless set to off early boot networking is enabled, ensuring that the - IMDS endpoint can be reached. If set to locked (the default) direct access to + IMDS endpoint can be reached. If set to locked direct access to the IMDS endpoint by regular unprivileged processes is disabled via a "prohibit" route, so that any access must be done through systemd-imdsd@.service or its associated tools. If - set to unlocked this "prohibit" route is not created, and regular unprivileged + set to unlocked (the default) this "prohibit" route is not created, and regular unprivileged processes can directly contact IMDS.