Author: Linux Manual

dockerd – Enable daemon mode Synopsis dockerd [–add-runtime[=[]]] [–allow-nondistributable-artifacts[=[]]] [–api-cors-header=[=API-CORS-HEADER]] [–authorization-plugin[=[]]] [-b|–bridge[=BRIDGE]] [–bip[=BIP]] [–cgroup-parent[=[]]] [–cluster-store[=[]]] [–cluster-advertise[=[]]] [–cluster-store-opt[=map[]]] [–config-file[=/etc/docker/daemon.json]] [–containerd[=SOCKET-PATH]] [–data-root[=/var/lib/docker]] [-D|–debug] [–default-cgroupns-mode[=host]] [–default-gateway[=DEFAULT-GATEWAY]] [–default-gateway-v6[=DEFAULT-GATEWAY-V6]] [–default-address-pool[=DEFAULT-ADDRESS-POOL]] [–default-runtime[=runc]] [–default-ipc-mode=MODE] [–default-shm-size[=64MiB]] [–default-ulimit[=[]]] [–dns[=[]]] [–dns-opt[=[]]] [–dns-search[=[]]] [–exec-opt[=[]]] [–exec-root[=/var/run/docker]] [–experimental[=false]] [–fixed-cidr[=FIXED-CIDR]] [–fixed-cidr-v6[=FIXED-CIDR-V6]] [-G|–group[=docker]] [-H|–host[=[]]] [–help] [–icc[=true]] [–init[=false]] [–init-path[=""]] [–insecure-registry[=[]]] [–ip[=0.0.0.0]] [–ip-forward[=true]] [–ip-masq[=true]] [–iptables[=true]] [–ipv6] [–isolation[=default]] [-l|–log-level[=info]] [–label[=[]]] [–live-restore[=false]] [–log-driver[=json-file]] [–log-opt[=map[]]]…

dockerd – Enable daemon mode Synopsis dockerd [–add-runtime[=[]]] [–add-registry[=[]]] [–api-cors-header=[=API-CORS-HEADER]] [–authorization-plugin[=[]]] [-b|–bridge[=BRIDGE]] [–bip[=BIP]] [–block-registry[=[]]] [–cgroup-parent[=[]]] [–cluster-store[=[]]] [–cluster-advertise[=[]]] [–cluster-store-opt[=map[]]] [–config-file[=/etc/docker/daemon.json]] [–containerd[=SOCKET-PATH]] [-D|–debug] [–default-gateway[=DEFAULT-GATEWAY]] [–default-gateway-v6[=DEFAULT-GATEWAY-V6]] [–default-ulimit[=[]]] [–disable-legacy-registry] [–dns[=[]]] [–dns-opt[=[]]] [–dns-search[=[]]] [–enable-secrets[=true]] [–exec-opt[=[]]] [–exec-root[=/var/run/docker]] [–fixed-cidr[=FIXED-CIDR]] [–fixed-cidr-v6[=FIXED-CIDR-V6]] [-G|–group[=docker]] [-g|–graph[=/var/lib/docker]] [-H|–host[=[]]] [–help] [–icc[=true]] [–insecure-registry[=[]]] [–ip[=0.0.0.0]] [–ip-forward[=true]] [–ip-masq[=true]] [–iptables[=true]] [–ipv6] [–isolation[=default]] [-l|–log-level[=info]] [–label[=[]]] [–live-restore[=false]] [–log-driver[=json-file]] [–log-opt[=map[]]] [–mtu[=0]] [–max-concurrent-downloads[=3]] [–max-concurrent-uploads[=5]] [-p|–pidfile[=/var/run/docker.pid]] [–raw-logs]…

docker_selinux – Security Enhanced Linux Policy for the docker processes Description Security-Enhanced Linux secures the docker processes via flexible mandatory access control. The docker processes execute with the docker_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…

docker_auth_selinux – Security Enhanced Linux Policy for the docker_auth processes Description Security-Enhanced Linux secures the docker_auth processes via flexible mandatory access control. The docker_auth processes execute with the docker_auth_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…

docker-novolume-plugin – Blocks self provisioned volumes Synopsis docker-novolume-plugin [–cert-path=[=""]] [–host=[=unix:///var/run/docker.sock]] [–tls-verify=[=false]] Description When a volume in provisioned via the VOLUME instruction in a Dockerfile or via docker run -v volumename, host’s storage space is used. This could lead to an unexpected out of space issue which could bring down everything. There are situations where this…

docker-lvm-plugin – Docker Volume Driver for lvm volumes Synopsis docker-lvm-plugin [-debug] [-version] Description This plugin can be used to create lvm volumes of specified size, which can then be bind mounted into the container using docker run command. Usage Start the docker daemon before starting the docker-lvm-plugin daemon. You can start docker daemon using command:…

docheckgroups – Process checkgroups and output a list of changes Synopsis docheckgroups [-u] [include-pattern [exclude-pattern]] Description docheckgroups is usually run by controlchan in order to process checkgroups control messages. It reads a list of newsgroups along with their descriptions on its standard input. That list should be formatted like the newsgroups(5) file: each line contains…

do-release-upgrade – upgrade operating system to latest release Synopsis do-release-upgrade [options] Description Upgrade the operating system to the latest release from the command-line. This is the preferred command if the machine has no graphic environment or if the machine is to be upgraded over a remote connection. Options -h, –help show help message and exit…

dnstop – displays various tables of DNS traffic on your network Synopsis [-46apsQR ] [-b expression ] [-i address ] [-f filter ] [-r interval ] [device ] [savefile ] Description is a small tool to listen on device or to parse the file savefile and collect and print statistics on the local network’s DNS…

dnsspoof – forge replies to DNS address / pointer queries Synopsis dnsspoof [-i interface] [-f hostsfile] [expression] Description dnsspoof forges replies to arbitrary DNS address / pointer queries on the LAN. This is useful in bypassing hostname-based access controls, or in implementing a variety of man-in-the-middle attacks. Options -i interface Specify the interface to use….

dnssec_trigger_selinux – Security Enhanced Linux Policy for the dnssec_trigger processes Description Security-Enhanced Linux secures the dnssec_trigger processes via flexible mandatory access control. The dnssec_trigger processes execute with the dnssec_trigger_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…

dnssec_selinux – Security Enhanced Linux Policy for the dnssec processes Description Security-Enhanced Linux secures the dnssec processes via flexible mandatory access control. Nsswitch Domain File Contexts SELinux requires files to have an extended attribute to define the file type. You can see the context of a file using the -Z option to lsP Policy governs…

dnssec-verify – DNSSEC zone verification tool Synopsis dnssec-verify [-c class] [-E engine] [-I input-format] [-o origin] [-v level] [-x] [-z] {zonefile} Description dnssec-verify verifies that a zone is fully signed for each algorithm found in the DNSKEY RRset for the zone, and that the NSEC / NSEC3 chains are complete. Options -c class Specifies the DNS class of the zone….

dnssec-trigger, dnssec-triggerd, dnssec-trigger-panel, dnssec-trigger-control, dnssec-trigger-control-setup, dnssec-trigger.conf – check DNS servers for DNSSEC support and adjust to compensate. Synopsis dnssec-triggerd [-d] [-v] [-u] [-c file] dnssec-trigger-control [-c file] [-s ip[@port] ] command [arguments] dnssec-trigger-panel [-d] [-c file] Description The dnssec-trigger programs steer unbound(8) towards DNSSEC capable DNS servers. A DHCP hook installed on the system calls…

dnssec-signzone – DNSSEC zone signing tool Synopsis dnssec-signzone [-a] [-c class] [-d directory] [-D] [-E engine] [-e end-time] [-f output-file] [-g] [-h] [-K directory] [-k key] [-L serial] [-l domain] [-i interval] [-I input-format] [-j jitter] [-N soa-serial-format] [-o origin] [-O output-format] [-P] [-p] [-R] [-r randomdev] [-S] [-s start-time] [-T ttl] [-t] [-u] [-v level] [-X extended end-time] [-x] [-z] [-3 salt] [-H iterations] [-A] {zonefile} [key…] Description dnssec-signzone signs a zone. It generates NSEC and…

dnssec-settime – Set the key timing metadata for a DNSSEC key Synopsis dnssec-settime [-f] [-K directory] [-L ttl] [-P date/offset] [-A date/offset] [-R date/offset] [-I date/offset] [-D date/offset] [-h] [-v level] [-E engine] {keyfile} Description dnssec-settime reads a DNSSEC private key file and sets the key timing metadata as specified by the -P, -A, -R, -I, and -D options. The metadata can then be…

dnssec-revoke – Set the REVOKED bit on a DNSSEC key Synopsis dnssec-revoke [-hr] [-v level] [-K directory] [-E engine] [-f] [-R] {keyfile} Description dnssec-revoke reads a DNSSEC key file, sets the REVOKED bit on the key as defined in RFC 5011, and creates a new pair of key files containing the now-revoked key. Options -h Emit usage message…

dnssec-keygen – DNSSEC key generation tool Synopsis dnssec-keygen [-a algorithm] [-b keysize] [-n nametype] [-3] [-A date/offset] [-C] [-c class] [-D date/offset] [-E engine] [-f flag] [-G] [-g generator] [-h] [-I date/offset] [-i interval] [-K directory] [-L ttl] [-k] [-P date/offset] [-p protocol] [-q] [-R date/offset] [-r randomdev] [-S key] [-s strength] [-t type] [-v level] [-z] {name} Description dnssec-keygen generates keys for DNSSEC (Secure DNS), as defined in RFC 2535 and RFC 4034. It can…

dnssec-keyfromlabel – DNSSEC key generation tool Synopsis dnssec-keyfromlabel {-l label} [-3] [-a algorithm] [-A date/offset] [-c class] [-D date/offset] [-E engine] [-f flag] [-G] [-I date/offset] [-k] [-K directory] [-L ttl] [-n nametype] [-P date/offset] [-p protocol] [-R date/offset] [-t type] [-v level] [-y] {name} Description dnssec-keyfromlabel gets keys with the given label from a crypto hardware and builds key files for DNSSEC (Secure DNS), as defined in RFC 2535 and…

dnssec-importkey – Import DNSKEY records from external systems so they can be managed. Synopsis dnssec-importkey [-K directory] [-L ttl] [-P date/offset] [-D date/offset] [-h] [-v level] [-V] {keyfile} dnssec-importkey {-f filename} [-K directory] [-L ttl] [-P date/offset] [-D date/offset] [-h] [-v level] [-V] [dnsname] Description dnssec-importkey reads a public DNSKEY record and generates a pair of .key/.private files. The DNSKEY record may be read from an…