On Mon, Jan 20, 2014 at 04:07:46PM +0900, KATOH Yasufumi wrote: > Signed-off-by: KATOH Yasufumi <[email protected]>
Acked-by: Stéphane Graber <[email protected]> > --- > configure.ac | 1 + > doc/ja/Makefile.am | 1 + > doc/ja/lxc-usernsexec.sgml.in | 194 > ++++++++++++++++++++++++++++++++++++++++++ > doc/lxc-usernsexec.sgml.in | 2 +- > 4 files changed, 197 insertions(+), 1 deletion(-) > create mode 100644 doc/ja/lxc-usernsexec.sgml.in > > diff --git a/configure.ac b/configure.ac > index 6c8156b..4179dcf 100644 > --- a/configure.ac > +++ b/configure.ac > @@ -641,6 +641,7 @@ AC_CONFIG_FILES([ > doc/ja/lxc-unfreeze.sgml > doc/ja/lxc-unshare.sgml > doc/ja/lxc-user-nic.sgml > + doc/ja/lxc-usernsexec.sgml > doc/ja/lxc-version.sgml > doc/ja/lxc-wait.sgml > > diff --git a/doc/ja/Makefile.am b/doc/ja/Makefile.am > index 31d6f08..fccc66b 100644 > --- a/doc/ja/Makefile.am > +++ b/doc/ja/Makefile.am > @@ -28,6 +28,7 @@ man_MANS = \ > lxc-unfreeze.1 \ > lxc-unshare.1 \ > lxc-user-nic.1 \ > + lxc-usernsexec.1 \ > lxc-version.1 \ > lxc-wait.1 \ > \ > diff --git a/doc/ja/lxc-usernsexec.sgml.in b/doc/ja/lxc-usernsexec.sgml.in > new file mode 100644 > index 0000000..a3e496b > --- /dev/null > +++ b/doc/ja/lxc-usernsexec.sgml.in > @@ -0,0 +1,194 @@ > +<!-- > + > +lxc: linux Container library > + > +(C) Copyright IBM Corp. 2007, 2008 > + > +Authors: > +Daniel Lezcano <daniel.lezcano at free.fr> > +Serge Hallyn <serge.hallyn at ubuntu.com> > + > +This library is free software; you can redistribute it and/or > +modify it under the terms of the GNU Lesser General Public > +License as published by the Free Software Foundation; either > +version 2.1 of the License, or (at your option) any later version. > + > +This library is distributed in the hope that it will be useful, > +but WITHOUT ANY WARRANTY; without even the implied warranty of > +MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU > +Lesser General Public License for more details. > + > +You should have received a copy of the GNU Lesser General Public > +License along with this library; if not, write to the Free Software > +Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA > + > +Translated into Japanese > +by KATOH Yasufumi <karma at jazz.email.ne.jp> > +--> > + > +<!DOCTYPE refentry PUBLIC @docdtd@ [ > + > +<!ENTITY commonoptions SYSTEM "@builddir@/common_options.sgml"> > +<!ENTITY seealso SYSTEM "@builddir@/see_also.sgml"> > +]> > + > +<refentry> > + > + <docinfo><date>@LXC_GENERATE_DATE@</date></docinfo> > + > + <refmeta> > + <refentrytitle>lxc-usernsexec</refentrytitle> > + <manvolnum>1</manvolnum> > + </refmeta> > + > + <refnamediv> > + <refname>lxc-usernsexec</refname> > + > + <refpurpose> > + <!-- > + Run a task as root in a new user namespace. > + --> > + 新しいユーザ名前空間内で root としてタスクを実行する > + </refpurpose> > + </refnamediv> > + > + <refsynopsisdiv> > + <cmdsynopsis> > + <command>lxc-unshare</command> > + <arg choice="opt">-m <replaceable>uid-map</replaceable></arg> > + <arg choice="req">-- command</arg> > + </cmdsynopsis> > + </refsynopsisdiv> > + > + <refsect1> > + <title><!-- Description -->説明</title> > + > + <para> > + <!-- > + <command>lxc-usernsexec</command> can be used to run a task as root > + in a new user namespace. > + --> > + <command>lxc-usernsexec</command> は，新しいユーザ名前空間内で root > としてタスクを実行するのに使います． > + </para> > + > + </refsect1> > + > + <refsect1> > + > + <title><!-- Options -->オプション</title> > + > + <variablelist> > + > + <varlistentry> > + <term> > + <option>-m <replaceable>uid-map</replaceable></option> > + </term> > + <listitem> > + <para> > + <!-- > + The uid map to use in the user namespace. Each map consists of > + four colon-separate values. First a character 'u', 'g' or 'b' to > + specify whether this map perttains to user ids, group ids, or > + both; next the first userid in the user namespace; next the > + first userid as seen on the host; and finally the number of > + ids to be mapped. > + --> > + ユーザ名前空間内で使うための uid のマッピング．マッピングは，コロンで分けられた 4 つの値から構成されます． > + 最初の文字は 'u', 'g', 'b' のどれかで，マッピングが UID, GID, UID と GID > の両方のうちのどれに関するものなのかを指定します． > + 次はユーザ名前空間内の最初の ID を指定します．その次はホスト上での最初の ID を指定します．最後はマッピングされる ID > の数を指定します． > + </para> > + <para> > + <!-- > + More than one map can be specified. If no map is > + specified, then by default the full uid and gid ranges granted > + by /etc/subuid and /etc/subgid will be mapped to the > + uids and gids starting at 0 in the container. > + --> > + 複数回のマッピングを指定することも可能です．もしマッピングを指定しない場合，デフォルトでは /etc/subuid, > /etc/subgid で許可された全ての範囲の UID, GID が，コンテナ内の 0 から始まる UID, GID にマッピングされます． > + </para> > + <para> > + <!-- > + Note that <replaceable>lxc-usernsexec</replaceable> always tries > + to setuid and setgid to 0 in the namespace. Therefore uid 0 in > + the namespace must be mapped. > + --> > + <replaceable>lxc-usernsexec</replaceable> は，常に名前空間内の 0 に setuid, > setgid しようとしますので，名前空間内の UID 0 は必ずマッピングしなければいけないことに注意してください． > + </para> > + </listitem> > + </varlistentry> > + > + > + </variablelist> > + > + </refsect1> > + > + <refsect1> > + <title><!-- Examples -->例</title> > + <para> > + <!-- > + To spawn a shell with the full allotted subuids mapped into > + the container, use > + <programlisting> > + lxc-usernsexec > + </programlisting> > + To run a different shell than <replaceable>/bin/sh</replaceable>, use > + <programlisting> > + lxc-usernsexec -- /bin/bash > + </programlisting> > + --> > + 割り当てられた subuid の全てをコンテナ内にマッピングしてシェルを起動するには， > + <programlisting> > + lxc-usernsexec > + </programlisting> > + のようにしてください．<replaceable>/bin/sh</replaceable> とは違うシェルを起動する場合， > + <programlisting> > + lxc-usernsexec -- /bin/bash > + </programlisting> > + のようにしてください． > + </para> > + <para> > + <!-- > + If your user id is 1000, root in a container is mapped to 190000, and > + you wish to chown a file you own to root in the container, you can use: > + <programlisting> > + lxc-usernsexec -m b:0:1000:1 -m b:1:190000:1 -- /bin/chown > 1:1 $file > + </programlisting> > + This maps your userid to root in the user namespace, and 190000 to uid > 1. > + Since root in the user namespace is privileged over all userids mapped > + into the namespace, you are allowed to change the file ownership, which > + you could not do on the host using a simple chown. > + --> > + あなたの UID が 1000 で，コンテナ内の root を 190000 > にマッピングする場合で，あなたの所有するファイルをコンテナ内の root に chown したい場合は，以下のように実行します． > + <programlisting> > + lxc-usernsexec -m b:0:1000:1 -m b:1:190000:1 -- /bin/chown 1:1 $file > + </programlisting> > + これはあなたの UID をユーザ名前空間の root に，190000 を uid 1 にマッピングしています． > + ユーザ名前空間内の root は，名前空間内の全ての ID に対して特権があるため，ホスト上で単純に chown > を使えない場合でも，あなたはファイルのオーナーを変更する事が可能です． > + </para> > + </refsect1> > + > + &seealso; > + > + <refsect1> > + <title>Author</title> > + <para>Serge Hallyn <email>[email protected]</email></para> > + </refsect1> > + > +</refentry> > + > +<!-- Keep this comment at the end of the file > +Local variables: > +mode: sgml > +sgml-omittag:t > +sgml-shorttag:t > +sgml-minimize-attributes:nil > +sgml-always-quote-attributes:t > +sgml-indent-step:2 > +sgml-indent-data:t > +sgml-parent-document:nil > +sgml-default-dtd-file:nil > +sgml-exposed-tags:nil > +sgml-local-catalogs:nil > +sgml-local-ecat-files:nil > +End: > +--> > diff --git a/doc/lxc-usernsexec.sgml.in b/doc/lxc-usernsexec.sgml.in > index dec18b9..88a155c 100644 > --- a/doc/lxc-usernsexec.sgml.in > +++ b/doc/lxc-usernsexec.sgml.in > @@ -79,7 +79,7 @@ Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, > MA 02110-1301 USA > <para> > The uid map to use in the user namespace. Each map consists of > four colon-separate values. First a character 'u', 'g' or 'b' to > - specify whether this map perttains to user ids, group ids, or > + specify whether this map pertains to user ids, group ids, or > both; next the first userid in the user namespace; next the > first userid as seen on the host; and finally the number of > ids to be mapped. > -- > 1.8.4.4 > > _______________________________________________ > lxc-devel mailing list > [email protected] > http://lists.linuxcontainers.org/listinfo/lxc-devel -- Stéphane Graber Ubuntu developer http://www.ubuntu.com
signature.asc
Description: Digital signature
_______________________________________________ lxc-devel mailing list [email protected] http://lists.linuxcontainers.org/listinfo/lxc-devel
