Man page - systemd-mountfsd(8)

Packages contains this manual

Package:  systemd-container
apt-get install systemd-container

Manuals in package:
• sysupdate.features(5)
• portablectl(1)
• machinectl(1)
• sysupdate.d(5)
• org.freedesktop.import1(5)
• importctl(1)
• systemd-portabled(8)
• systemd-import-generator(8)
• systemd-portabled.service(8)
• systemd-dissect(1)
• systemd-machined.service(8)
• systemd-importd.service(8)
• systemd.nspawn(5)
• systemd-nspawn(1)
• systemd-sysupdate.service(8)
• systemd-mountfsd.service(8)
• systemd-sysupdate-reboot.service(8)
• systemd-nsresourced(8)
• systemd-mountfsd(8)
• systemd-sysupdate(8)
• mount.ddi(1)
• systemd-sysupdate.timer(8)
• systemd-nsresourced.service(8)
• systemd-sysupdate-reboot.timer(8)
• systemd-machined(8)
• systemd-importd(8)
Documentations in package:
• systemd-container

Available languages:

en de

Manual

SYSTEMD-MOUNTFSD.SERVICE

NAME
SYNOPSIS
DESCRIPTION
SEE ALSO
NOTES

---

NAME

systemd-mountfsd.service, systemd-mountfsd - Disk Image File System Mount Service

SYNOPSIS

systemd-mountfsd.service

/usr/lib/systemd/systemd-mountfsd

DESCRIPTION

systemd-mountfsd is a system service that dissects disk images, and returns mount file descriptors for the file systems contained therein to clients, via a Varlink IPC API.

The disk images provided must contain a raw file system image or must follow the Discoverable Partitions Specification [1] . Before mounting any file systems authenticity of the disk image is established in one or a combination of the following ways:

1. If the disk image is located in a regular file in one of the directories /var/lib/machines/, /var/lib/portables/, /var/lib/extensions/, /var/lib/confexts/ or their counterparts in the /etc/, /run/, /usr/lib/ it is assumed to be trusted.

2. If the disk image contains a Verity enabled disk image, along with a signature partition with a key in the kernel keyring or in /etc/verity.d/ (and related directories) the disk image is considered trusted.

This service provides one Varlink [2] service: io.systemd.MountFileSystem which accepts a file descriptor to a regular file or block device, and returns a number of file descriptors referring to an fsmount() file descriptor the client may then attach to a path of their choice.

The returned mounts are automatically allowlisted in the per-user-namespace allowlist maintained by systemd-nsresourced.service (8).

The file systems are automatically fsck (8)'ed before mounting.

SEE ALSO

systemd (1), systemd-nsresourced.service (8)

NOTES

1.

Discoverable Partitions Specification

https://uapi-group.org/specifications/specs/discoverable_partitions_specification/

2.

Varlink

https://varlink.org/

---