'\" -*- coding: us-ascii -*-
.if \n(.g .ds T< \\FC
.if \n(.g .ds T> \\F[\n[.fam]]
.de URL
\\$2 \(la\\$1\(ra\\$3
..
.if \n(.g .mso www.tmac
.TH lxc-user-nic 1 "Sat Apr 29 06:45:43 UTC 2017" "" ""
.SH NAME
lxc-user-nic \- Create and attach a nic to another network namespace. 
.SH SYNOPSIS
'nh
.fi
.ad l
\fBlxc-user-nic\fR \kx
.if (\nx>(\n(.l/2)) .nr x (\n(.l/5)
'in \n(.iu+\nxu
{\fIpid\fR} {\fItype\fR} {\fIbridge\fR} [\fInicname\fR]
'in \n(.iu-\nxu
.ad b
'hy
.SH DESCRIPTION
\fBlxc-user-nic\fR is a setuid-root program with which
unprivileged users may create network interfaces for use by a lxc container.
.PP
It will consult the configuration file \*(T<\fI/etc/lxc/lxc\-usernet\fR\*(T>
to determine the number of interfaces which the calling user is allowed to
create, and which bridge he may attach them to. It tracks the
number of interfaces each user has created using the file
\*(T<\fI/run/lxc/nics\fR\*(T>. It ensures that the calling
user is privileged over the network namespace to which the interface
will be attached.
.SH OPTIONS
.TP 
\fIpid\fR 
The process id for the task to whose network namespace the interface
should be attached.
.TP 
\fItype\fR 
The network interface type to attach. Currently only veth is
supported. With this type, two interfaces representing each
tunnel endpoint are created. One endpoint will be attached
to the specified bridge, while the other will be passed into
the container.
.TP 
\fIbridge\fR 
The bridge to which to attach the network interface, for
instance \*(T<\fIlxcbr0\fR\*(T>.
.TP 
\fInicname\fR 
The desired interface name in the container. This will be
\*(T<\fIeth0\fR\*(T> if unspecified.
.SH "COMMON OPTIONS"
These options are common to most of lxc commands.
.TP 
\*(T<\fB\-?, \-h, \-\-help\fR\*(T>
Print a longer usage message than normal.
.TP 
\*(T<\fB\-\-usage\fR\*(T>
Give the usage message
.TP 
\*(T<\fB\-q, \-\-quiet\fR\*(T>
mute on
.TP 
\*(T<\fB\-P, \-\-lxcpath=\fR\*(T>\fIPATH\fR
Use an alternate container path. The default is /var/lib/lxc.
.TP 
\*(T<\fB\-o, \-\-logfile=\fR\*(T>\fIFILE\fR
Output to an alternate log
\fIFILE\fR. The default is no log.
.TP 
\*(T<\fB\-l, \-\-logpriority=\fR\*(T>\fILEVEL\fR
Set log priority to
\fILEVEL\fR. The default log
priority is \*(T<ERROR\*(T>. Possible values are :
\*(T<FATAL\*(T>, \*(T<CRIT\*(T>,
\*(T<WARN\*(T>, \*(T<ERROR\*(T>,
\*(T<NOTICE\*(T>, \*(T<INFO\*(T>,
\*(T<DEBUG\*(T>.

Note that this option is setting the priority of the events
log in the alternate log file. It do not have effect on the
ERROR events log on stderr.
.TP 
\*(T<\fB\-n, \-\-name=\fR\*(T>\fINAME\fR
Use container identifier \fINAME\fR.
The container identifier format is an alphanumeric string.
.SH "SEE ALSO"
\fBlxc\fR(1),
\fBlxc-start\fR(1),
\fBlxc-usernet\fR(5)
.SH AUTHOR
Daniel Lezcano <\*(T<daniel.lezcano@free.fr\*(T>>