lxc-user-nic(1)

NAME
lxc-user-nic - Manage nics in another network namespace

SYNOPSIS
lxc-user-nic
create {lxcpath} {name} {pid} {type} {bridge} {container nicname}
lxc-user-nic
delete {lxcpath} {name} {path to network namespace} {type} {bridge} {container nicname}

DESCRIPTION
lxc-user-nic is a setuid-root program with which unprivileged users may manage network interfaces for use by a lxc container.

It will consult the configuration file \FC/etc/lxc/lxc-usernet\F[] to determine the number of interfaces which the calling user is allowed to create, and which bridge he may attach them to. It tracks the number of interfaces each user has created using the file \FC/run/lxc/nics\F[]. It ensures that the calling user is privileged over the network namespace to which the interface will be attached. lxc-user-nic also allows one to delete network devices. Currently only ovs ports can be deleted.

OPTIONS

lxcpath
    The path of the container. This is currently not used.

name
    The name of the container. This is currently not used.

pid The process id for the task to whose network namespace the interface should be attached.

type
    The network interface type to attach. Currently only veth is supported. With this type, two interfaces representing each tunnel endpoint are created. One endpoint will be attached to the specified bridge, while the other will be passed into the container.

bridge
    The bridge to which to attach the network interface, for instance \FClxcbr0\F[].

container nicname
    The desired interface name in the container. This will be \FCeth0\F[] if unspecified.

path to network namespace
    A path to open to get a file descriptor for the target network namespace. This is only relevant when an veth device is deleted.

SEE ALSO
lxc(1), lxc-start(1), lxc-usernet(5)

AUTHOR
Christian Brauner <\FCchristian@brauner.io\F[]>

Serge Hallyn <\FCserge@hallyn.com\F[]>

Daniel Lezcano <\FCdaniel.lezcano@free.fr\F[]>