diff options
Diffstat (limited to 'passt.1')
| -rw-r--r-- | passt.1 | 10 |
1 files changed, 10 insertions, 0 deletions
@@ -394,6 +394,16 @@ default route, or if there is no default route, for any of the enabled address families. .TP +.BR \-\-chroot-fallback +Enable fallback to chroot() in case pivot_root(), used to switch to an empty +filesystem for stricter isolation, returns an error. Useful for integrations +which use tmpfs or initramfs as root filesystem, where pivot_root() can't be +used, as it results in an invalid argument error (EINVAL). + +By default, the fallback is disabled. If pivot_root() fails, then the entire +sandboxing process fails. + +.TP .BR \-\-map-guest-addr " " \fIaddr Translate \fIaddr\fR in the guest to be equal to the guest's assigned address on the host. That is, packets from the guest to \fIaddr\fR |