mirror of
https://github.com/systemd/systemd.git
synced 2025-01-03 05:18:09 +03:00
docs: document the new offline discard logic
This commit is contained in:
parent
28a7f10620
commit
c0440512e6
@ -168,6 +168,10 @@ If the UID assigned to a user does not match the owner of the home directory in
|
||||
the file system, the home directory is automatically and recursively `chown()`ed
|
||||
to the correct UID.
|
||||
|
||||
Depending on the `discard` setting of the user record either the backing
|
||||
Depending on the `luksDiscard` setting of the user record either the backing
|
||||
loopback file is `fallocate()`ed during activation, or the mounted file system
|
||||
is `FITRIM`ed after mounting, to ensure the setting is correctly enforced.
|
||||
|
||||
When deactivating a home directory, the file system or block device is trimmed
|
||||
or extended as configured in the `luksOfflineDiscard` setting of the user
|
||||
record.
|
||||
|
@ -455,6 +455,10 @@ storage. If false and `luks` storage is used turns this behavior off. In
|
||||
addition, depending on this setting an `FITRIM` or `fallocate()` operation is
|
||||
executed to make sure the image matches the selected option.
|
||||
|
||||
`luksOfflineDiscard` → A boolean. Similar to `luksDiscard`, it controls whether
|
||||
to trim/allocate the file system/backing file when deactivating the home
|
||||
directory.
|
||||
|
||||
`luksCipher` → A string, indicating the cipher to use for the LUKS storage mechanism.
|
||||
|
||||
`luksCipherMode` → A string, selecting the cipher mode to use for the LUKS storage mechanism.
|
||||
@ -648,11 +652,12 @@ that may be used in this section are identical to the equally named ones in the
|
||||
`mountNoDevices`, `mountNoSuid`, `mountNoExecute`, `cifsDomain`,
|
||||
`cifsUserName`, `cifsService`, `imagePath`, `uid`, `gid`, `memberOf`,
|
||||
`fileSystemType`, `partitionUuid`, `luksUuid`, `fileSystemUuid`, `luksDiscard`,
|
||||
`luksCipher`, `luksCipherMode`, `luksVolumeKeySize`, `luksPbkdfHashAlgorithm`,
|
||||
`luksPbkdfType`, `luksPbkdfTimeCostUSec`, `luksPbkdfMemoryCost`,
|
||||
`luksPbkdfParallelThreads`, `rateLimitIntervalUSec`, `rateLimitBurst`,
|
||||
`enforcePasswordPolicy`, `autoLogin`, `stopDelayUSec`, `killProcesses`,
|
||||
`passwordChangeMinUSec`, `passwordChangeMaxUSec`, `passwordChangeWarnUSec`,
|
||||
`luksOfflineDiscard`, `luksOfflineDiscard`, `luksCipher`, `luksCipherMode`,
|
||||
`luksVolumeKeySize`, `luksPbkdfHashAlgorithm`, `luksPbkdfType`,
|
||||
`luksPbkdfTimeCostUSec`, `luksPbkdfMemoryCost`, `luksPbkdfParallelThreads`,
|
||||
`rateLimitIntervalUSec`, `rateLimitBurst`, `enforcePasswordPolicy`,
|
||||
`autoLogin`, `stopDelayUSec`, `killProcesses`, `passwordChangeMinUSec`,
|
||||
`passwordChangeMaxUSec`, `passwordChangeWarnUSec`,
|
||||
`passwordChangeInactiveUSec`, `passwordChangeNow`, `pkcs11TokenUri`.
|
||||
|
||||
## Fields in the `binding` section
|
||||
|
@ -544,6 +544,16 @@
|
||||
loopback file) the discard logic defaults to on.</para></listitem>
|
||||
</varlistentry>
|
||||
|
||||
<varlistentry>
|
||||
<term><option>--luks-offline-discard=</option><replaceable>BOOL</replaceable></term>
|
||||
|
||||
<listitem><para>Similar to <option>--luks-discard=</option>, controls the trimming of the file
|
||||
system. However, while <option>--luks-discard=</option> controls what happens when the home directory
|
||||
is active, <option>--luks-offline-discard=</option> controls what happens when it becomes inactive,
|
||||
i.e. whether to trim/allocate the storage when deactivating the home directory. This option defaults
|
||||
to on, to ensure disk space is minimized while a user is not logged in.</para></listitem>
|
||||
</varlistentry>
|
||||
|
||||
<varlistentry>
|
||||
<term><option>--luks-cipher=</option><replaceable>CIPHER</replaceable></term>
|
||||
<term><option>--luks-cipher-mode=</option><replaceable>MODE</replaceable></term>
|
||||
|
Loading…
Reference in New Issue
Block a user