Thank you very much for pointing this out! The systemd man pages are
quite a large body of text, and it isn't always obvious where to look
when confronted with a particular problem, so I missed that.
Am 18.09.24 um 06:08 schrieb serenissi:
man systemd.exec:
PrivateMounts=
Takes a bool
man systemd.exec:
PrivateMounts=
Takes a boolean parameter.
When turned on, this executes three operations for each invoked
process: a new CLONE_NEWNS namespace is created, after which all
existing mounts are remounted to MS_SLAVE to disable propagation
from the unit's processes
I am writing a service that does the following:
1. Uses 'NetworkNamespacePath = /var/run/netns/vpnlink'
2. Uses 'TemporaryFileSystem = %E' to create it's own /etc
3. Runs the 'dhclient' command to configure a network interface
The dhclient command is supposed to create (or modifiy)
/etc/resol