[lxc-devel] [PATCH 2/2] Add Japanese lxc-usernsexec(1) and fix typo English lxc-usernsexec(1)
Stéphane Graber
stgraber at ubuntu.com
Mon Jan 20 15:08:42 UTC 2014
On Mon, Jan 20, 2014 at 04:07:46PM +0900, KATOH Yasufumi wrote:
> Signed-off-by: KATOH Yasufumi <karma at jazz.email.ne.jp>
Acked-by: Stéphane Graber <stgraber at ubuntu.com>
> ---
> configure.ac | 1 +
> doc/ja/Makefile.am | 1 +
> doc/ja/lxc-usernsexec.sgml.in | 194 ++++++++++++++++++++++++++++++++++++++++++
> doc/lxc-usernsexec.sgml.in | 2 +-
> 4 files changed, 197 insertions(+), 1 deletion(-)
> create mode 100644 doc/ja/lxc-usernsexec.sgml.in
>
> diff --git a/configure.ac b/configure.ac
> index 6c8156b..4179dcf 100644
> --- a/configure.ac
> +++ b/configure.ac
> @@ -641,6 +641,7 @@ AC_CONFIG_FILES([
> doc/ja/lxc-unfreeze.sgml
> doc/ja/lxc-unshare.sgml
> doc/ja/lxc-user-nic.sgml
> + doc/ja/lxc-usernsexec.sgml
> doc/ja/lxc-version.sgml
> doc/ja/lxc-wait.sgml
>
> diff --git a/doc/ja/Makefile.am b/doc/ja/Makefile.am
> index 31d6f08..fccc66b 100644
> --- a/doc/ja/Makefile.am
> +++ b/doc/ja/Makefile.am
> @@ -28,6 +28,7 @@ man_MANS = \
> lxc-unfreeze.1 \
> lxc-unshare.1 \
> lxc-user-nic.1 \
> + lxc-usernsexec.1 \
> lxc-version.1 \
> lxc-wait.1 \
> \
> diff --git a/doc/ja/lxc-usernsexec.sgml.in b/doc/ja/lxc-usernsexec.sgml.in
> new file mode 100644
> index 0000000..a3e496b
> --- /dev/null
> +++ b/doc/ja/lxc-usernsexec.sgml.in
> @@ -0,0 +1,194 @@
> +<!--
> +
> +lxc: linux Container library
> +
> +(C) Copyright IBM Corp. 2007, 2008
> +
> +Authors:
> +Daniel Lezcano <daniel.lezcano at free.fr>
> +Serge Hallyn <serge.hallyn at ubuntu.com>
> +
> +This library is free software; you can redistribute it and/or
> +modify it under the terms of the GNU Lesser General Public
> +License as published by the Free Software Foundation; either
> +version 2.1 of the License, or (at your option) any later version.
> +
> +This library is distributed in the hope that it will be useful,
> +but WITHOUT ANY WARRANTY; without even the implied warranty of
> +MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
> +Lesser General Public License for more details.
> +
> +You should have received a copy of the GNU Lesser General Public
> +License along with this library; if not, write to the Free Software
> +Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
> +
> +Translated into Japanese
> +by KATOH Yasufumi <karma at jazz.email.ne.jp>
> +-->
> +
> +<!DOCTYPE refentry PUBLIC @docdtd@ [
> +
> +<!ENTITY commonoptions SYSTEM "@builddir@/common_options.sgml">
> +<!ENTITY seealso SYSTEM "@builddir@/see_also.sgml">
> +]>
> +
> +<refentry>
> +
> + <docinfo><date>@LXC_GENERATE_DATE@</date></docinfo>
> +
> + <refmeta>
> + <refentrytitle>lxc-usernsexec</refentrytitle>
> + <manvolnum>1</manvolnum>
> + </refmeta>
> +
> + <refnamediv>
> + <refname>lxc-usernsexec</refname>
> +
> + <refpurpose>
> + <!--
> + Run a task as root in a new user namespace.
> + -->
> + 新しいユーザ名前空間内で root としてタスクを実行する
> + </refpurpose>
> + </refnamediv>
> +
> + <refsynopsisdiv>
> + <cmdsynopsis>
> + <command>lxc-unshare</command>
> + <arg choice="opt">-m <replaceable>uid-map</replaceable></arg>
> + <arg choice="req">-- command</arg>
> + </cmdsynopsis>
> + </refsynopsisdiv>
> +
> + <refsect1>
> + <title><!-- Description -->説明</title>
> +
> + <para>
> + <!--
> + <command>lxc-usernsexec</command> can be used to run a task as root
> + in a new user namespace.
> + -->
> + <command>lxc-usernsexec</command> は，新しいユーザ名前空間内で root としてタスクを実行するのに使います．
> + </para>
> +
> + </refsect1>
> +
> + <refsect1>
> +
> + <title><!-- Options -->オプション</title>
> +
> + <variablelist>
> +
> + <varlistentry>
> + <term>
> + <option>-m <replaceable>uid-map</replaceable></option>
> + </term>
> + <listitem>
> + <para>
> + <!--
> + The uid map to use in the user namespace. Each map consists of
> + four colon-separate values. First a character 'u', 'g' or 'b' to
> + specify whether this map perttains to user ids, group ids, or
> + both; next the first userid in the user namespace; next the
> + first userid as seen on the host; and finally the number of
> + ids to be mapped.
> + -->
> + ユーザ名前空間内で使うための uid のマッピング．マッピングは，コロンで分けられた 4 つの値から構成されます．
> + 最初の文字は 'u', 'g', 'b' のどれかで，マッピングが UID, GID, UID と GID の両方のうちのどれに関するものなのかを指定します．
> + 次はユーザ名前空間内の最初の ID を指定します．その次はホスト上での最初の ID を指定します．最後はマッピングされる ID の数を指定します．
> + </para>
> + <para>
> + <!--
> + More than one map can be specified. If no map is
> + specified, then by default the full uid and gid ranges granted
> + by /etc/subuid and /etc/subgid will be mapped to the
> + uids and gids starting at 0 in the container.
> + -->
> + 複数回のマッピングを指定することも可能です．もしマッピングを指定しない場合，デフォルトでは /etc/subuid, /etc/subgid で許可された全ての範囲の UID, GID が，コンテナ内の 0 から始まる UID, GID にマッピングされます．
> + </para>
> + <para>
> + <!--
> + Note that <replaceable>lxc-usernsexec</replaceable> always tries
> + to setuid and setgid to 0 in the namespace. Therefore uid 0 in
> + the namespace must be mapped.
> + -->
> + <replaceable>lxc-usernsexec</replaceable> は，常に名前空間内の 0 に setuid, setgid しようとしますので，名前空間内の UID 0 は必ずマッピングしなければいけないことに注意してください．
> + </para>
> + </listitem>
> + </varlistentry>
> +
> +
> + </variablelist>
> +
> + </refsect1>
> +
> + <refsect1>
> + <title><!-- Examples -->例</title>
> + <para>
> + <!--
> + To spawn a shell with the full allotted subuids mapped into
> + the container, use
> + <programlisting>
> + lxc-usernsexec
> + </programlisting>
> + To run a different shell than <replaceable>/bin/sh</replaceable>, use
> + <programlisting>
> + lxc-usernsexec -- /bin/bash
> + </programlisting>
> + -->
> + 割り当てられた subuid の全てをコンテナ内にマッピングしてシェルを起動するには，
> + <programlisting>
> + lxc-usernsexec
> + </programlisting>
> + のようにしてください．<replaceable>/bin/sh</replaceable> とは違うシェルを起動する場合，
> + <programlisting>
> + lxc-usernsexec -- /bin/bash
> + </programlisting>
> + のようにしてください．
> + </para>
> + <para>
> + <!--
> + If your user id is 1000, root in a container is mapped to 190000, and
> + you wish to chown a file you own to root in the container, you can use:
> + <programlisting>
> + lxc-usernsexec -m b:0:1000:1 -m b:1:190000:1 -- /bin/chown 1:1 $file
> + </programlisting>
> + This maps your userid to root in the user namespace, and 190000 to uid 1.
> + Since root in the user namespace is privileged over all userids mapped
> + into the namespace, you are allowed to change the file ownership, which
> + you could not do on the host using a simple chown.
> + -->
> + あなたの UID が 1000 で，コンテナ内の root を 190000 にマッピングする場合で，あなたの所有するファイルをコンテナ内の root に chown したい場合は，以下のように実行します．
> + <programlisting>
> + lxc-usernsexec -m b:0:1000:1 -m b:1:190000:1 -- /bin/chown 1:1 $file
> + </programlisting>
> + これはあなたの UID をユーザ名前空間の root に，190000 を uid 1 にマッピングしています．
> + ユーザ名前空間内の root は，名前空間内の全ての ID に対して特権があるため，ホスト上で単純に chown を使えない場合でも，あなたはファイルのオーナーを変更する事が可能です．
> + </para>
> + </refsect1>
> +
> + &seealso;
> +
> + <refsect1>
> + <title>Author</title>
> + <para>Serge Hallyn <email>serge.hallyn at ubuntu.com</email></para>
> + </refsect1>
> +
> +</refentry>
> +
> +<!-- Keep this comment at the end of the file
> +Local variables:
> +mode: sgml
> +sgml-omittag:t
> +sgml-shorttag:t
> +sgml-minimize-attributes:nil
> +sgml-always-quote-attributes:t
> +sgml-indent-step:2
> +sgml-indent-data:t
> +sgml-parent-document:nil
> +sgml-default-dtd-file:nil
> +sgml-exposed-tags:nil
> +sgml-local-catalogs:nil
> +sgml-local-ecat-files:nil
> +End:
> +-->
> diff --git a/doc/lxc-usernsexec.sgml.in b/doc/lxc-usernsexec.sgml.in
> index dec18b9..88a155c 100644
> --- a/doc/lxc-usernsexec.sgml.in
> +++ b/doc/lxc-usernsexec.sgml.in
> @@ -79,7 +79,7 @@ Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
> <para>
> The uid map to use in the user namespace. Each map consists of
> four colon-separate values. First a character 'u', 'g' or 'b' to
> - specify whether this map perttains to user ids, group ids, or
> + specify whether this map pertains to user ids, group ids, or
> both; next the first userid in the user namespace; next the
> first userid as seen on the host; and finally the number of
> ids to be mapped.
> --
> 1.8.4.4
>
> _______________________________________________
> lxc-devel mailing list
> lxc-devel at lists.linuxcontainers.org
> http://lists.linuxcontainers.org/listinfo/lxc-devel
--
Stéphane Graber
Ubuntu developer
http://www.ubuntu.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <http://lists.linuxcontainers.org/pipermail/lxc-devel/attachments/20140120/c9896633/attachment.pgp>
More information about the lxc-devel
mailing list