systemd.directives(7)

NAME#

systemd.directives - Index of configuration directives

UNIT DIRECTIVES#

Directives for configuring units, used in unit files.

Accept=

AccuracySec=

After=

Alias=

AllowIsolate=

AllowedCPUs=

AllowedMemoryNodes=

Also=

AmbientCapabilities=

AppArmorProfile=

AssertACPower=

AssertArchitecture=

AssertCPUFeature=

AssertCPUPressure=

AssertCPUs=

AssertCapability=

AssertControlGroupController=

AssertCredential=

AssertDirectoryNotEmpty=

AssertEnvironment=

AssertFileIsExecutable=

AssertFileNotEmpty=

AssertFirstBoot=

AssertGroup=

AssertHost=

AssertIOPressure=

AssertKernelCommandLine=

AssertKernelVersion=

AssertMemory=

AssertMemoryPressure=

AssertNeedsUpdate=

AssertOSRelease=

AssertPathExists=

AssertPathExistsGlob=

AssertPathIsDirectory=

AssertPathIsEncrypted=

AssertPathIsMountPoint=

AssertPathIsReadWrite=

AssertPathIsSymbolicLink=

AssertSecurity=

AssertUser=

AssertVirtualization=

BPFProgram=

Backlog=

Before=

BindIPv6Only=

BindLogSockets=

BindPaths=

BindReadOnlyPaths=

BindToDevice=

BindsTo=

Broadcast=

BusName=

CPUAccounting=

CPUAffinity=

CPUQuota=

CPUQuotaPeriodSec=

CPUSchedulingPolicy=

CPUSchedulingPriority=

CPUSchedulingResetOnFork=

CPUWeight=

CacheDirectory=

CacheDirectoryMode=

CapabilityBoundingSet=

CollectMode=

ConditionACPower=

ConditionArchitecture=

ConditionCPUFeature=

ConditionCPUPressure=

ConditionCPUs=

ConditionCapability=

ConditionControlGroupController=

ConditionCredential=

ConditionDirectoryNotEmpty=

ConditionEnvironment=

ConditionFileIsExecutable=

ConditionFileNotEmpty=

ConditionFirmware=

ConditionFirstBoot=

ConditionGroup=

ConditionHost=

ConditionIOPressure=

ConditionKernelCommandLine=

ConditionKernelVersion=

ConditionMemory=

ConditionMemoryPressure=

ConditionNeedsUpdate=

ConditionOSRelease=

ConditionPathExists=

ConditionPathExistsGlob=

ConditionPathIsDirectory=

ConditionPathIsEncrypted=

ConditionPathIsMountPoint=

ConditionPathIsReadWrite=

ConditionPathIsSymbolicLink=

ConditionSecurity=

ConditionUser=

ConditionVirtualization=

ConfigurationDirectory=

ConfigurationDirectoryMode=

Conflicts=

CoredumpFilter=

CoredumpReceive=

DefaultDependencies=

DefaultInstance=

DefaultStartupMemoryLow=

DeferAcceptSec=

DeferReactivation=

Delegate=

DelegateSubgroup=

Description=

DeviceAllow=

DevicePolicy=

DirectoryMode=

DirectoryNotEmpty=

DisableControllers=

Documentation=

DynamicUser=

Environment=

EnvironmentFile=

ExecCondition=

ExecPaths=

ExecReload=

ExecSearchPath=

ExecStart=

ExecStartPost=

ExecStartPre=

ExecStop=

ExecStopPost=

ExecStopPre=

ExitType=

ExtensionDirectories=

ExtensionImagePolicy=

ExtensionImages=

ExtraOptions=

FailureAction=

FailureActionExitStatus=

FileDescriptorName=

FileDescriptorStoreMax=

FileDescriptorStorePreserve=

FinalKillSignal=

FixedRandomDelay=

FlushPending=

ForceUnmount=

FreeBind=

Group=

GuessMainPID=

IOAccounting=

IODeviceLatencyTargetSec=

IODeviceWeight=

IOReadBandwidthMax=

IOReadIOPSMax=

IOSchedulingClass=

IOSchedulingPriority=

IOWeight=

IOWriteBandwidthMax=

IOWriteIOPSMax=

IPAccounting=

IPAddressAllow=

IPAddressDeny=

IPCNamespacePath=

IPEgressFilterPath=

IPIngressFilterPath=

IPTOS=

IPTTL=

IgnoreOnIsolate=

IgnoreSIGPIPE=

ImportCredential=

InaccessiblePaths=

JobRunningTimeoutSec=

JobTimeoutAction=

JobTimeoutRebootArgument=

JobTimeoutSec=

JoinsNamespaceOf=

KeepAlive=

KeepAliveIntervalSec=

KeepAliveProbes=

KeepAliveTimeSec=

KeyringMode=

KillMode=

KillSignal=

LazyUnmount=

LimitAS=

LimitCORE=

LimitCPU=

LimitDATA=

LimitFSIZE=

LimitLOCKS=

LimitMEMLOCK=

LimitMSGQUEUE=

LimitNICE=

LimitNOFILE=

LimitNPROC=

LimitRSS=

LimitRTPRIO=

LimitRTTIME=

LimitSIGPENDING=

LimitSTACK=

ListenDatagram=

ListenFIFO=

ListenMessageQueue=

ListenNetlink=

ListenSequentialPacket=

ListenSpecial=

ListenStream=

ListenUSBFunction=

LoadCredential=

LoadCredentialEncrypted=

LockPersonality=

LogExtraFields=

LogFilterPatterns=

LogLevelMax=

LogNamespace=

LogRateLimitBurst=

LogRateLimitIntervalSec=

LogsDirectory=

LogsDirectoryMode=

MakeDirectory=

ManagedOOMMemoryPressure=

ManagedOOMMemoryPressureDurationSec=

ManagedOOMMemoryPressureLimit=

ManagedOOMPreference=

ManagedOOMSwap=

Mark=

MaxConnections=

MaxConnectionsPerSource=

MemoryAccounting=

MemoryDenyWriteExecute=

MemoryHigh=

MemoryKSM=

MemoryLow=

MemoryMax=

MemoryMin=

MemoryPressureThresholdSec=

MemoryPressureWatch=

MemorySwapMax=

MemoryZSwapMax=

MemoryZSwapWriteback=

MessageQueueMaxMessages=

MessageQueueMessageSize=

MountAPIVFS=

MountFlags=

MountImagePolicy=

MountImages=

NFTSet=

NUMAMask=

NUMAPolicy=

NetworkNamespacePath=

Nice=

NoDelay=

NoExecPaths=

NoNewPrivileges=

NonBlocking=

NotifyAccess=

OOMPolicy=

OOMScoreAdjust=

OnActiveSec=

OnBootSec=

OnCalendar=

OnClockChange=

OnFailure=

OnFailureJobMode=

OnStartupSec=

OnSuccess=

OnSuccessJobMode=

OnTimezoneChange=

OnUnitActiveSec=

OnUnitInactiveSec=

OpenFile=

Options=

PAMName=

PIDFile=

PartOf=

PassCredentials=

PassEnvironment=

PassFileDescriptorsToExec=

PassPacketInfo=

PassSecurity=

PathChanged=

PathExists=

PathExistsGlob=

PathModified=

Persistent=

Personality=

PipeSize=

PollLimitBurst=

PollLimitIntervalSec=

Priority=

PrivateDevices=

PrivateIPC=

PrivateMounts=

PrivateNetwork=

PrivatePIDs=

PrivateTmp=

PrivateUsers=

ProcSubset=

PropagatesReloadTo=

PropagatesStopTo=

ProtectClock=

ProtectControlGroups=

ProtectHome=

ProtectHostname=

ProtectKernelLogs=

ProtectKernelModules=

ProtectKernelTunables=

ProtectProc=

ProtectSystem=

RandomizedDelaySec=

ReadOnlyPaths=

ReadWriteOnly=

ReadWritePaths=

RebootArgument=

ReceiveBuffer=

RefuseManualStart=

RefuseManualStop=

ReloadPropagatedFrom=

ReloadSignal=

RemainAfterElapse=

RemainAfterExit=

RemoveIPC=

RemoveOnStop=

RequiredBy=

Requires=

RequiresMountsFor=

Requisite=

Restart=

RestartForceExitStatus=

RestartKillSignal=

RestartMaxDelaySec=

RestartMode=

RestartPreventExitStatus=

RestartSec=

RestartSteps=

RestrictAddressFamilies=

RestrictFileSystems=

RestrictNamespaces=

RestrictNetworkInterfaces=

RestrictRealtime=

RestrictSUIDSGID=

ReusePort=

RootDirectory=

RootDirectoryStartOnly=

RootEphemeral=

RootHash=

RootHashSignature=

RootImage=

RootImageOptions=

RootImagePolicy=

RootVerity=

RuntimeDirectory=

RuntimeDirectoryMode=

RuntimeDirectoryPreserve=

RuntimeMaxSec=

RuntimeRandomizedExtraSec=

SELinuxContext=

SELinuxContextFromNet=

SecureBits=

SendBuffer=

SendSIGHUP=

SendSIGKILL=

Service=

SetCredential=

SetCredentialEncrypted=

SetLoginEnvironment=

Slice=

SloppyOptions=

SmackLabel=

SmackLabelIPIn=

SmackLabelIPOut=

SmackProcessLabel=

SocketBindAllow=

SocketBindDeny=

SocketGroup=

SocketMode=

SocketProtocol=

SocketUser=

Sockets=

SourcePath=

StandardError=

StandardInput=

StandardInputData=

StandardInputText=

StandardOutput=

StartLimitAction=

StartLimitBurst=

StartLimitIntervalSec=

StartupAllowedCPUs=

StartupAllowedMemoryNodes=

StartupCPUWeight=

StartupIOWeight=

StartupMemoryHigh=

StartupMemoryLow=

StartupMemoryMax=

StartupMemorySwapMax=

StartupMemoryZSwapMax=

StateDirectory=

StateDirectoryMode=

StopPropagatedFrom=

StopWhenUnneeded=

SuccessAction=

SuccessActionExitStatus=

SuccessExitStatus=

SupplementaryGroups=

SurviveFinalKillSignal=

Symlinks=

SyslogFacility=

SyslogIdentifier=

SyslogLevel=

SyslogLevelPrefix=

SystemCallArchitectures=

SystemCallErrorNumber=

SystemCallFilter=

SystemCallLog=

TCPCongestion=

TTYColumns=

TTYPath=

TTYReset=

TTYRows=

TTYVHangup=

TTYVTDisallocate=

TasksAccounting=

TasksMax=

TemporaryFileSystem=

TimeoutAbortSec=

TimeoutCleanSec=

TimeoutIdleSec=

TimeoutSec=

TimeoutStartFailureMode=

TimeoutStartSec=

TimeoutStopFailureMode=

TimeoutStopSec=

TimerSlackNSec=

Timestamping=

Transparent=

TriggerLimitBurst=

TriggerLimitIntervalSec=

Type=

UMask=

USBFunctionDescriptors=

USBFunctionStrings=

Unit=

UnsetEnvironment=

UpheldBy=

Upholds=

User=

UtmpIdentifier=

UtmpMode=

WakeSystem=

WantedBy=

Wants=

WantsMountsFor=

WatchdogSec=

WatchdogSignal=

What=

Where=

WorkingDirectory=

Writable=

OPTIONS ON THE KERNEL COMMAND LINE#

Kernel boot options for configuring the behaviour of the systemd process.

-b

1

2

3

4

5

S

bond=

bootdev=

bridge=

debug

domain=

emergency

fsck.mode=

fsck.repair=

fstab=

ifname=

ip=

locale.LANG=

locale.LANGUAGE=

locale.LC_ADDRESS=

locale.LC_COLLATE=

locale.LC_CTYPE=

locale.LC_IDENTIFICATION=

locale.LC_MEASUREMENT=

locale.LC_MESSAGES=

locale.LC_MONETARY=

locale.LC_NAME=

locale.LC_NUMERIC=

locale.LC_PAPER=

locale.LC_TELEPHONE=

locale.LC_TIME=

luks.crypttab=

luks.data=

luks.key=

luks.name=

luks.options=

luks.uuid=

luks=

modules_load=

mount.usr=

mount.usrflags=

mount.usrfstype=

nameserver=

net.ifname_policy=

net.ifnames=

net.naming_scheme=

noresume

plymouth.enable=

quiet

quotacheck.mode=

rd.emergency

rd.fstab=

rd.luks.crypttab=

rd.luks.data=

rd.luks.key=

rd.luks.name=

rd.luks.options=

rd.luks.uuid=

rd.luks=

rd.modules_load=

rd.peerdns=

rd.rescue

rd.route=

rd.systemd.gpt_auto

rd.systemd.gpt_auto=

rd.systemd.mount-extra=

rd.systemd.swap-extra=

rd.systemd.unit=

rd.systemd.verity=

rd.udev.blockdev_read_only

rd.udev.children_max=

rd.udev.event_timeout=

rd.udev.exec_delay=

rd.udev.log_level=

rd.udev.timeout_signal=

rd.veritytab=

rescue

resume=

resume_offset=

resumeflags=

ro

root=

rootflags=

rootfstype=

roothash=

rw

s

single

systemd.allow_userspace_verity=

systemd.battery_check=

systemd.clock_usec=

systemd.condition_first_boot=

systemd.condition_needs_update=

systemd.confirm_spawn

systemd.cpu_affinity=

systemd.crash_action=

systemd.crash_chvt

systemd.crash_shell

systemd.debug_shell

systemd.default_debug_tty=

systemd.default_device_timeout_sec=

systemd.default_standard_error=

systemd.default_standard_output=

systemd.default_timeout_start_sec=

systemd.dump_core

systemd.early_core_pattern=

systemd.firstboot=

systemd.getty_auto=

systemd.gpt_auto

systemd.gpt_auto=

systemd.hostname=

systemd.image_policy=

systemd.import_credentials=

systemd.journald.forward_to_console=

systemd.journald.forward_to_kmsg=

systemd.journald.forward_to_syslog=

systemd.journald.forward_to_wall=

systemd.journald.max_level_console=

systemd.journald.max_level_kmsg=

systemd.journald.max_level_socket=

systemd.journald.max_level_store=

systemd.journald.max_level_syslog=

systemd.journald.max_level_wall=

systemd.log_color

systemd.log_level=

systemd.log_location

systemd.log_location=

systemd.log_ratelimit_kmsg

systemd.log_target=

systemd.log_tid

systemd.log_time

systemd.machine_id=

systemd.mask=

systemd.mount-extra=

systemd.pull.failure_action=

systemd.pull.success_action=

systemd.pull=

systemd.random_seed=

systemd.reload_limit_burst=

systemd.reload_limit_interval_sec=

systemd.restore_state=

systemd.run=

systemd.run_failure_action=

systemd.run_success_action=

systemd.service_watchdogs

systemd.service_watchdogs=

systemd.set_credential=

systemd.set_credential_binary=

systemd.setenv=

systemd.show_status

systemd.ssh_auto=

systemd.ssh_listen=

systemd.status_unit_format=

systemd.swap-extra=

systemd.swap=

systemd.tpm2_wait=

systemd.tty.columns.tty=

systemd.tty.rows.tty=

systemd.tty.term.tty=

systemd.unit=

systemd.verity=

systemd.verity_root_data=

systemd.verity_root_hash=

systemd.verity_root_options=

systemd.verity_usr_data=

systemd.verity_usr_hash=

systemd.verity_usr_options=

systemd.volatile=

systemd.wants=

systemd.watchdog_device=

systemd.watchdog_pre_sec=

systemd.watchdog_pretimeout_governor=

systemd.watchdog_sec=

udev.blockdev_read_only

udev.children_max=

udev.event_timeout=

udev.exec_delay=

udev.log_level=

udev.timeout_signal=

usrhash=

vconsole.font=

vconsole.font_map=

vconsole.font_unimap=

vconsole.keymap=

vconsole.keymap_toggle=

veritytab=

vlan=

SMBIOS TYPE 11 VARIABLES#

Data passed from VMM to system via SMBIOS Type 11.

io.systemd.boot.kernel-cmdline-extra=

io.systemd.credential.binary:

io.systemd.credential:

io.systemd.stub.kernel-cmdline-extra=

ENVIRONMENT VARIABLES#

Environment variables understood by the systemd manager and other programs and environment variable-compatible settings.

$CACHE_DIRECTORY

$CONFIGURATION_DIRECTORY

$CREDENTIALS_DIRECTORY

$DEBUG_INVOCATION

$EMAIL

$ENCRYPTED_CREDENTIALS_DIRECTORY

$EXIT_CODE

$EXIT_STATUS

$FDSTORE

$HOME

$INVOCATION_ID

$JOURNAL_STREAM

$LANG

$LISTEN_FDNAMES

$LISTEN_FDS

$LISTEN_PID

$LOGNAME

$LOGS_DIRECTORY

$LOG_NAMESPACE

$MAINPID

$MANAGERPID

$MEMORY_PRESSURE_WATCH

$MEMORY_PRESSURE_WRITE

$MONITOR_EXIT_CODE

$MONITOR_EXIT_STATUS

$MONITOR_INVOCATION_ID

$MONITOR_SERVICE_RESULT

$MONITOR_UNIT

$NOTIFY_SOCKET

$PAGER

$PATH

$PIDFILE

$PREVLEVEL

$REMOTE_ADDR

$REMOTE_PORT

$RUNLEVEL

$RUNTIME_DIRECTORY

$SERVICE_RESULT

$SHELL

$SHELL_PROMPT_PREFIX

$SHELL_PROMPT_SUFFIX

$SHELL_WELCOME

$STATE_DIRECTORY

$SYSTEMD_ARCHITECTURE

$SYSTEMD_COLORS

$SYSTEMD_CONFIDENTIAL_VIRTUALIZATION

$SYSTEMD_DEBUGGER

$SYSTEMD_EDITOR

$SYSTEMD_ENVIRONMENT_GENERATOR_PATH

$SYSTEMD_EXEC_PID

$SYSTEMD_FIRST_BOOT

$SYSTEMD_GENERATOR_PATH

$SYSTEMD_GETTY_AUTO

$SYSTEMD_HOME=

$SYSTEMD_HOME_SUSPEND=

$SYSTEMD_IN_INITRD

$SYSTEMD_LESS

$SYSTEMD_LESSCHARSET

$SYSTEMD_LOG_COLOR

$SYSTEMD_LOG_LEVEL

$SYSTEMD_LOG_LOCATION

$SYSTEMD_LOG_RATELIMIT_KMSG

$SYSTEMD_LOG_TARGET

$SYSTEMD_LOG_TID

$SYSTEMD_LOG_TIME

$SYSTEMD_NSS_RESOLVE_CACHE

$SYSTEMD_NSS_RESOLVE_NETWORK

$SYSTEMD_NSS_RESOLVE_SYNTHESIZE

$SYSTEMD_NSS_RESOLVE_TRUST_ANCHOR

$SYSTEMD_NSS_RESOLVE_VALIDATE

$SYSTEMD_NSS_RESOLVE_ZONE

$SYSTEMD_PAGER

$SYSTEMD_PAGERSECURE

$SYSTEMD_RANDOM_SEED_CREDIT

$SYSTEMD_SCOPE

$SYSTEMD_SOFT_REBOOTS_COUNT

$SYSTEMD_UNIT_PATH

$SYSTEMD_URLIFY

$SYSTEMD_VIRTUALIZATION

$TERM

$TRIGGER_PATH

$TRIGGER_TIMER_MONOTONIC_USEC

$TRIGGER_TIMER_REALTIME_USEC

$TRIGGER_UNIT

$TZ

$USER

$WATCHDOG_PID

$WATCHDOG_USEC

$XDG_CONFIG_DIRS

$XDG_CONFIG_HOME

$XDG_DATA_DIRS

$XDG_DATA_HOME

$XDG_RUNTIME_DIR

$XDG_SEAT

$XDG_SESSION_CLASS

$XDG_SESSION_DESKTOP

$XDG_SESSION_ID

$XDG_SESSION_TYPE

$XDG_VTNR

ANSI_COLOR=

ARCHITECTURE=

BUG_REPORT_URL=

BUILD_ID=

CHASSIS=

CONFEXT_LEVEL=

CONFEXT_SCOPE=

CPE_NAME=

DEFAULT_HOSTNAME=

DEPLOYMENT=

DOCUMENTATION_URL=

EXPERIMENT=

EXPERIMENT_URL=

HARDWARE_MODEL=

HARDWARE_VENDOR=

HOME_URL=

ICON_NAME=

ID=

ID_LIKE=

IMAGE_ID=

IMAGE_VERSION=

LOCATION=

LOGO=

NAME=

PORTABLE_PREFIXES=

PRETTY_HOSTNAME=

PRETTY_NAME=

PRIVACY_POLICY_URL=

RELEASE_TYPE=

SUPPORT_END=

SUPPORT_URL=

SYSEXT_LEVEL=

SYSEXT_SCOPE=

VARIANT=

VARIANT_ID=

VENDOR_NAME=

VENDOR_URL=

VERSION=

VERSION_CODENAME=

VERSION_ID=

SYSTEM CREDENTIALS#

System credentials understood by the system and service manager and various other components:

cryptenroll.fido2-pin

cryptenroll.new-passphrase

cryptenroll.new-tpm2-pin

cryptenroll.passphrase

cryptenroll.pkcs11-pin

cryptenroll.tpm2-pin

cryptsetup.fido2-pin

cryptsetup.luks2-pin

cryptsetup.passphrase

cryptsetup.pkcs11-pin

cryptsetup.tpm2-pin

firstboot.keymap

firstboot.locale

firstboot.locale-messages

firstboot.timezone

fstab.extra

getty.ttys.container

getty.ttys.serial

home.create.*

import.pull

journal.forward_to_socket

journal.storage

login.issue

login.motd

network.conf.*

network.dns

network.hosts

network.link.*

network.netdev.*

network.network.*

network.search_domains

network.wireguard.*

passwd.hashed-password.user

passwd.hashed-password.root

passwd.plaintext-password.user

passwd.plaintext-password.root

passwd.shell.user

passwd.shell.root

shell.prompt.prefix

shell.prompt.suffix

shell.welcome

ssh.authorized_keys.root

ssh.listen

sysctl.extra

system.hostname

system.machine_id

systemd.extra-unit.*

systemd.unit-dropin.*

sysusers.extra

tmpfiles.extra

udev.conf.*

udev.rules.*

vconsole.font

vconsole.font_map

vconsole.font_unimap

vconsole.keymap

vconsole.keymap_toggle

vmm.notify_socket

EFI VARIABLES#

EFI variables understood by systemd-boot(7) and other programs.

LoaderBootCountPath

LoaderConfigConsoleMode

LoaderConfigTimeout

LoaderConfigTimeoutOneShot

LoaderDevicePartUUID

LoaderEntries

LoaderEntryDefault

LoaderEntryLastBooted

LoaderEntryOneShot

LoaderEntrySelected

LoaderFeatures

LoaderFirmwareInfo

LoaderFirmwareType

LoaderImageIdentifier

LoaderInfo

LoaderSystemToken

LoaderTimeExecUSec

LoaderTimeInitUSec

LoaderTimeMenuUsec

StubDevicePartUUID

StubImageIdentifier

StubInfo

StubPcrInitRDConfExts

StubPcrInitRDSysExts

StubPcrKernelImage

StubPcrKernelParameters

StubProfile

HOME AREA/USER ACCOUNT DIRECTIVES#

Directives for configuring home areas and user accounts via systemd-homed.service(8).

DefaultFileSystemType=

DefaultStorage=

UDEV DIRECTIVES#

Directives for configuring systemd units through the udev database.

$$

$attr{file}

$devnode

$devpath

$driver

$env{key}

$id

$kernel

$links

$major

$minor

$name

$number

$parent

$result

$root

$sys

"%%"

%E{key}

"%M"

"%N"

"%P"

"%S"

"%b"

%c

%k

"%m"

"%n"

"%p"

%r

%s{file}

ACTION

ATTRS{filename}

ATTR{filename}

CONST{key}

DEVPATH

DRIVER

DRIVERS

ENV{key}

GOTO

GROUP

ID_AUTOSEAT

ID_FOR_SEAT

ID_MODEL=

ID_MODEL_FROM_DATABASE=

ID_SEAT

IMPORT{type}

KERNEL

KERNELS

LABEL

MODE

NAME

OPTIONS

OWNER

PROGRAM

RESULT

RUN{type}

SECLABEL{module}

SUBSYSTEM

SUBSYSTEMS

SYMLINK

SYSCTL{kernel parameter}

SYSTEMD_ALIAS=

SYSTEMD_MOUNT_OPTIONS=

SYSTEMD_MOUNT_WHERE=

SYSTEMD_READY=

SYSTEMD_USER_WANTS=

SYSTEMD_WANTS=

TAG

TAGS

TEST{octal mode mask}

db_persist

link_priority=

log_level=

nowatch

static_node=

string_escape=

watch

NETWORK DIRECTIVES#

Directives for configuring network links through the net-setup-link udev builtin and networks through systemd-networkd.

ARP=

ARPAllTargets=

ARPIPTargets=

ARPIntervalSec=

ARPMissedMax=

ARPValidate=

AckFilter=

Activate=

ActivationPolicy=

ActiveSlave=

AdActorSystem=

AdActorSystemPriority=

AdSelect=

AdUserPortKey=

AddPrefixRoute=

Address=

AddressAutoconfiguration=

Advertise=

AgeingTimeSec=

Aggregation=

Alias=

AllMulticast=

AllSlavesActive=

AllowList=

AllowLocalRemote=

AllowPortToBeRoot=

AllowedIPs=

AlternativeName=

AlternativeNamesPolicy=

Announce=

Anonymize=

Architecture=

Assign=

AssignToLoopback=

AssociatedWith=

AutoJoin=

AutoNegotiation=

AutoNegotiationFlowControl=

AutoRateIngress=

BSSID=

Bands=

Bandwidth=

BatmanAdvanced=

BindCarrier=

BindToInterface=

BitRate=

BitsPerSecond=

Blackhole=

Bond=

BootFilename=

BootServerAddress=

BootServerName=

Bridge=

BridgeLoopAvoidance=

Broadcast=

BroadcastMulticastQueueLength=

BroadcastQueueThreshold=

Buckets=

BufferBytes=

BurstBytes=

BusErrorReporting=

CEThresholdSec=

Cache=

CacheFromLocalhost=

CeilBufferBytes=

CeilRate=

ClassId=

ClassicDataLengthCode=

ClientIdentifier=

CoalescePacketRateHigh=

CoalescePacketRateLow=

CoalescePacketRateSampleIntervalSec=

CombinedChannels=

CompensationMode=

ConfigureWithoutCarrier=

ConnectionRetrySec=

CopyDSCP=

Cost=

Credential=

DHCP=

DHCPPrefixDelegation=

DHCPServer=

DHCPv6Client=

DNS=

DNSDefaultRoute=

DNSLifetimeSec=

DNSOverTLS=

DNSSEC=

DNSSECNegativeTrustAnchors=

DNSStubListener=

DNSStubListenerExtra=

DUIDRawData=

DUIDType=

DataBitRate=

DataPhaseBufferSegment1=

DataPhaseBufferSegment2=

DataPropagationSegment=

DataSamplePoint=

DataSyncJumpWidth=

DataTimeQuantaNSec=

DefaultClass=

DefaultLeaseTimeSec=

DefaultPVID=

DefaultRouteOnDevice=

DefaultVirtualQueue=

DelayJitterSec=

DelaySec=

DenyList=

Description=

Destination=

DestinationPort=

DiscoverPathMTU=

DistributedArpTable=

Domains=

DownDelaySec=

Driver=

Duplex=

DuplicateAddressDetection=

DuplicateRate=

DynamicTransmitLoadBalancing=

ECN=

ERSPANDirection=

ERSPANHardwareId=

ERSPANIndex=

ERSPANVersion=

EgressQOSMaps=

EgressUntagged=

EmitDNS=

EmitDomains=

EmitLLDP=

EmitLPR=

EmitNTP=

EmitPOP3=

EmitRouter=

EmitSIP=

EmitSMTP=

EmitTimezone=

Encapsulation=

EncapsulationLimit=

EncapsulationType=

Encrypt=

Endpoint=

EtherType=

External=

FDBAgeingSec=

FDBMaxLearned=

FDMode=

FDNonISO=

FOUDestinationPort=

FOUSourcePort=

FailOverMACPolicy=

FallbackDNS=

FallbackLeaseLifetimeSec=

FallbackNTP=

Family=

FastLeave=

FastOpenNoCookie=

FirewallMark=

Firmware=

Flags=

FlowIsolationMode=

FlowLabel=

FlowLimit=

Flows=

FooOverUDP=

ForwardDelaySec=

Fragmentation=

From=

GVRP=

Gateway=

GatewayBandwidthDown=

GatewayBandwidthUp=

GatewayMode=

GatewayOnLink=

GenericProtocolExtension=

GenericRIO=

GenericReceiveOffload=

GenericReceiveOffloadHardware=

GenericSegmentOffloadMaxBytes=

GenericSegmentOffloadMaxSegments=

GenericSegmentationOffload=

GoTo=

GratuitousARP=

Group=

GroupForwardMask=

GroupPolicyExtension=

HairPin=

Handle=

HelloTimeSec=

HomeAddress=

HomeAgent=

HomeAgentLifetimeSec=

HomeAgentPreference=

HopLimit=

HopPenalty=

Host=

Hostname=

IAID=

IPDoNotFragment=

IPMasquerade=

IPProtocol=

IPServiceType=

IPVLAN=

IPVTAP=

IPoIB=

IPv4AcceptLocal=

IPv4Forwarding=

IPv4LLRoute=

IPv4LLStartAddress=

IPv4ProxyARP=

IPv4ProxyARPPrivateVLAN=

IPv4ReversePathFilter=

IPv4RouteLocalnet=

IPv6AcceptRA=

IPv6DuplicateAddressDetection=

IPv6FlowLabel=

IPv6Forwarding=

IPv6HopLimit=

IPv6LinkLocalAddressGenerationMode=

IPv6MTUBytes=

IPv6OnlyMode=

IPv6OnlyPreferredSec=

IPv6Preference=

IPv6PrivacyExtensions=

IPv6ProxyNDP=

IPv6ProxyNDPAddress=

IPv6RapidDeploymentPrefix=

IPv6RetransmissionTimeSec=

IPv6SendRA=

IPv6StableSecretAddress=

ISATAP=

Id=

IgnoreCarrierLoss=

IgnoreDontFragment=

IgnoreUserspaceMulticastGroup=

ImportProperty=

IncomingInterface=

Independent=

IngressQOSMaps=

InheritInnerProtocol=

InitialAdvertisedReceiveWindow=

InitialCongestionWindow=

InitialQuantumBytes=

InputKey=

InterfaceId=

IntervalSec=

InvertRule=

Isolated=

KeepCarrier=

KeepConfiguration=

KeepMaster=

KernelCommandLine=

KernelVersion=

Key=

KeyFile=

KeyId=

Kind=

L2MissNotification=

L3MasterDevice=

L3MissNotification=

LACPTransmitRate=

LLDP=

LLMNR=

LPR=

Label=

LargeReceiveOffload=

LatencySec=

Layer2SpecificHeader=

LearnPacketIntervalSec=

Learning=

LifetimeSec=

LimitBytes=

LinkLayerAddress=

LinkLocalAddressing=

LinkState=

ListenOnly=

ListenPort=

Local=

Loopback=

LooseBinding=

LossRate=

MACAddress=

MACAddressPolicy=

MACSpoofCheck=

MACVLAN=

MACVTAP=

MACsec=

MDI=

MIIMonitorSec=

MPUBytes=

MTUBytes=

MUDURL=

MVRP=

MacLearning=

ManageForeignNextHops=

ManageForeignRoutes=

ManageForeignRoutingPolicyRules=

ManageTemporaryAddress=

Managed=

MaxAgeSec=

MaxAttempts=

MaxLeaseTimeSec=

MaxPacketBytes=

MaximumFDBEntries=

MaximumRate=

MemoryLimitBytes=

Metric=

MinLinks=

MinSourcePort=

Mode=

MultiPathRoute=

MultiQueue=

Multicast=

MulticastDNS=

MulticastFlood=

MulticastGroupAddress=

MulticastIGMPVersion=

MulticastQuerier=

MulticastRouter=

MulticastSnooping=

MulticastToUnicast=

NAT=

NFTSet=

NTP=

NTupleFilter=

Name=

NamePolicy=

NeighborSuppression=

NetLabel=

NextHop=

OnLink=

OneShot=

OriginalName=

OriginatorIntervalSec=

OrphanMask=

OtherChannels=

OtherInformation=

OutgoingInterface=

OutputKey=

OverheadBytes=

POP3=

PVID=

Pacing=

PacketInfo=

PacketLimit=

PacketNumber=

PacketsPerSlave=

Parent=

PartitionKey=

Path=

PeakRate=

Peer=

PeerNotifyDelaySec=

PeerPort=

PeerSessionId=

PeerTunnelId=

PermanentMACAddress=

PersistLeases=

PersistentKeepalive=

PerturbPeriodSec=

PhaseBufferSegment1=

PhaseBufferSegment2=

PhysicalDevice=

PollIntervalMaxSec=

PollIntervalMinSec=

PoolOffset=

PoolSize=

Port=

PortRange=

PreferredLifetime=

PreferredLifetimeSec=

PreferredSource=

Prefix=

PrefixAllowList=

PrefixDelegationHint=

PrefixDenyList=

PresharedKey=

PresharedKeyFile=

PresumeAck=

PrimaryReselectPolicy=

PrimarySlave=

Priority=

PriorityMap=

PriorityQueueingPreset=

PrivateKey=

PrivateKeyFile=

Promiscuous=

PropagationSegment=

Property=

Protocol=

ProxyARP=

ProxyARPWiFi=

PublicKey=

PublicKeyFile=

QualityOfService=

QuantumBytes=

QueryReceiveSideScaling=

QuickAck=

RTTSec=

RapidCommit=

Rate=

RateToQuantum=

ReachableTimeSec=

ReadEtcHosts=

ReceiveChecksumOffload=

ReceivePacketSteeringCPUMask=

ReceiveQueues=

ReceiveVLANCTAGFilter=

ReceiveVLANCTAGHardwareAcceleration=

ReduceARPProxy=

RelayAgentCircuitId=

RelayAgentRemoteId=

RelayTarget=

Remote=

RemoteChecksumRx=

RemoteChecksumTx=

ReorderHeader=

RequestAddress=

RequestBroadcast=

RequestOptions=

RequiredFamilyForOnline=

RequiredForOnline=

ResendIGMP=

ResolveUnicastSingleLabel=

RestartSec=

RetransmitSec=

RootDistanceMaxSec=

Route=

RouteAllowList=

RouteDenyList=

RouteMTUBytes=

RouteMetric=

RouteShortCircuit=

RouteTable=

Router=

RouterAllowList=

RouterDenyList=

RouterLifetimeSec=

RouterPreference=

RoutesToDNS=

RoutesToNTP=

RoutingAlgorithm=

RxBufferSize=

RxChannels=

RxCoalesceHighSec=

RxCoalesceIrqSec=

RxCoalesceLowSec=

RxCoalesceSec=

RxFlowControl=

RxJumboBufferSize=

RxMaxCoalescedFrames=

RxMaxCoalescedHighFrames=

RxMaxCoalescedIrqFrames=

RxMaxCoalescedLowFrames=

RxMiniBufferSize=

SIP=

SMTP=

SR-IOVVirtualFunctions=

SSID=

STP=

SamplePoint=

SaveIntervalSec=

Scope=

SendDecline=

SendHostname=

SendOption=

SendRelease=

SendVendorOption=

SerializeTunneledPackets=

ServerAddress=

ServerPort=

SessionId=

SocketPriority=

Source=

SourceMACAddress=

SourcePort=

SpeedMeter=

SpeedMeterIntervalSec=

SplitGSO=

StatisticsBlockCoalesceSec=

StrictBands=

SubType=

SubnetId=

SuppressInterfaceGroup=

SuppressPrefixLength=

SyncJumpWidth=

TCP6SegmentationOffload=

TCPAdvertisedMaximumSegmentSize=

TCPCongestionControlAlgorithm=

TCPRetransmissionTimeoutSec=

TCPSegmentationOffload=

TOS=

TTL=

Table=

TargetSec=

Termination=

TimeQuantaNSec=

Timezone=

To=

Token=

TransmitChecksumOffload=

TransmitHashPolicy=

TransmitQueueLength=

TransmitQueues=

TransmitVLANCTAGHardwareAcceleration=

TransmitVLANSTAGHardwareAcceleration=

TripleSampling=

Trust=

Tunnel=

TunnelId=

TxBufferSize=

TxChannels=

TxCoalesceHighSec=

TxCoalesceIrqSec=

TxCoalesceLowSec=

TxCoalesceSec=

TxFlowControl=

TxMaxCoalescedFrames=

TxMaxCoalescedHighFrames=

TxMaxCoalescedIrqFrames=

TxMaxCoalescedLowFrames=

TxtData=

TxtText=

Type=

TypeOfService=

UDP6ZeroChecksumRx=

UDP6ZeroChecksumTx=

UDPChecksum=

UDPDestinationPort=

UDPSourcePort=

UnassignedSubnetPolicy=

UnicastFlood=

Unmanaged=

UnsetProperty=

UpDelaySec=

UplinkInterface=

Use6RD=

UseAdaptiveRxCoalesce=

UseAdaptiveTxCoalesce=

UseAddress=

UseAutonomousPrefix=

UseBPDU=

UseCaptivePortal=

UseDNR=

UseDNS=

UseDelegatedPrefix=

UseDomains=

UseForEncoding=

UseGateway=

UseHopLimit=

UseHostname=

UseMTU=

UseNTP=

UseOnLinkPrefix=

UsePREF64=

UseRawPacketSize=

UseReachableTime=

UseRedirect=

UseRetransmissionTime=

UseRoutePrefix=

UseRoutes=

UseSIP=

UseTimezone=

User=

UserClass=

VLAN=

VLANFiltering=

VLANId=

VLANProtocol=

VNI=

VNetHeader=

VRF=

VXLAN=

ValidLifetimeSec=

VendorClass=

VendorClassIdentifier=

VirtualFunction=

VirtualQueues=

Virtualization=

WDS=

WLANInterfaceType=

WakeOnLan=

WakeOnLanPassword=

Wash=

Weight=

WithoutRA=

Xfrm=

JOURNAL FIELDS#

Fields in the journal events with a well known meaning.

CODE_FILE=

CODE_FUNC=

CODE_LINE=

COREDUMP=

COREDUMP_BY_PIDFD=

COREDUMP_CGROUP=

COREDUMP_CMDLINE=

COREDUMP_COMM=

COREDUMP_CONTAINER_CMDLINE=

COREDUMP_CWD=

COREDUMP_DUMPABLE=

COREDUMP_ENVIRON=

COREDUMP_EXE=

COREDUMP_FILENAME=

COREDUMP_GID=

COREDUMP_HOSTNAME=

COREDUMP_OPEN_FDS=

COREDUMP_OWNER_UID=

COREDUMP_PACKAGE_JSON=

COREDUMP_PACKAGE_NAME=

COREDUMP_PACKAGE_VERSION=

COREDUMP_PID=

COREDUMP_PROC_AUXV=

COREDUMP_PROC_CGROUP=

COREDUMP_PROC_LIMITS=

COREDUMP_PROC_MAPS=

COREDUMP_PROC_MOUNTINFO=

COREDUMP_PROC_STATUS=

COREDUMP_RLIMIT=

COREDUMP_ROOT=

COREDUMP_SESSION=

COREDUMP_SIGNAL=

COREDUMP_SIGNAL_NAME=

COREDUMP_SLICE=

COREDUMP_TIMESTAMP=

COREDUMP_TRUNCATED=

COREDUMP_UID=

COREDUMP_UNIT=

COREDUMP_USER_UNIT=

DOCUMENTATION=

ERRNO=

INVOCATION_ID=

MESSAGE=

MESSAGE_ID=

OBJECT_AUDIT_LOGINUID=

OBJECT_AUDIT_SESSION=

OBJECT_CMDLINE=

OBJECT_COMM=

OBJECT_EXE=

OBJECT_GID=

OBJECT_PID=

OBJECT_SYSTEMD_CGROUP=

OBJECT_SYSTEMD_INVOCATION_ID=

OBJECT_SYSTEMD_OWNER_UID=

OBJECT_SYSTEMD_SESSION=

OBJECT_SYSTEMD_UNIT=

OBJECT_SYSTEMD_USER_UNIT=

OBJECT_UID=

PRIORITY=

SYSLOG_FACILITY=

SYSLOG_IDENTIFIER=

SYSLOG_PID=

SYSLOG_RAW=

SYSLOG_TIMESTAMP=

TID=

UNIT=

USER_INVOCATION_ID=

USER_UNIT=

_AUDIT_LOGINUID=

_AUDIT_SESSION=

_BOOT_ID=

_CAP_EFFECTIVE=

_CMDLINE=

_COMM=

_EXE=

_GID=

_HOSTNAME=

_KERNEL_DEVICE=

_KERNEL_SUBSYSTEM=

_LINE_BREAK=

_MACHINE_ID=

_NAMESPACE=

_PID=

_RUNTIME_SCOPE=

_SELINUX_CONTEXT=

_SOURCE_BOOTTIME_TIMESTAMP=

_SOURCE_REALTIME_TIMESTAMP=

_STREAM_ID=

_SYSTEMD_CGROUP=

_SYSTEMD_INVOCATION_ID=

_SYSTEMD_OWNER_UID=

_SYSTEMD_SESSION=

_SYSTEMD_SLICE=

_SYSTEMD_UNIT=

_SYSTEMD_USER_SLICE=

_SYSTEMD_USER_UNIT=

_TRANSPORT=

_UDEV_DEVLINK=

_UDEV_DEVNODE=

_UDEV_SYSNAME=

_UID=

__CURSOR=

__MONOTONIC_TIMESTAMP=

__REALTIME_TIMESTAMP=

__SEQNUM=

__SEQNUM_ID=

PAM CONFIGURATION DIRECTIVES#

Directives for configuring PAM behaviour.

class=

debug

default-capability-ambient-set=

default-capability-bounding-set=

desktop=

keyname=

suspend=

systemd.cpu_weight=

systemd.io_weight=

systemd.memory_max=

systemd.runtime_max_sec=

systemd.tasks_max=

type=

/ETC/CRYPTTAB, /ETC/VERITYTAB AND /ETC/FSTAB OPTIONS#

Options which influence mounted filesystems and encrypted volumes.

_netdev

auto

bitlk

check-at-most-once

cipher=

data-block-size=

data-blocks=

discard

fec-device=

fec-offset=

fec-roots=

fido2-cid=

fido2-device=

fido2-pin=

fido2-rp=

fido2-up=

fido2-uv=

format=

hash-block-size=

hash-offset=

hash=

header=

headless=

ignore-corruption

ignore-zero-blocks

key-slot=

keyfile-erase

keyfile-offset=

keyfile-size=

keyfile-timeout=

link-volume-key=

luks

no-read-workqueue

no-write-workqueue

noauto

nofail

offset=

panic-on-corruption

password-cache=

password-echo=

pkcs11-uri=

plain

read-only

readonly

restart-on-corruption

root-hash-signature=

salt=

same-cpu-crypt

sector-size=

size=

skip=

submit-from-crypt-cpus

superblock=

swap

tcrypt

tcrypt-hidden

tcrypt-keyfile=

tcrypt-system

tcrypt-veracrypt

timeout=

tmp=

token-timeout=

tpm2-device=

tpm2-measure-bank=

tpm2-measure-pcr=

tpm2-pcrlock=

tpm2-pcrs=

tpm2-pin=

tpm2-signature=

tries=

try-empty-password=

uuid=

veracrypt-pim=

verify

x-initrd.attach

x-initrd.mount

x-systemd.after=

x-systemd.automount

x-systemd.before=

x-systemd.device-bound=

x-systemd.device-timeout=

x-systemd.growfs

x-systemd.idle-timeout=

x-systemd.makefs

x-systemd.mount-timeout=

x-systemd.pcrfs

x-systemd.required-by=

x-systemd.requires-mounts-for=

x-systemd.requires=

x-systemd.rw-only

x-systemd.wanted-by=

x-systemd.wants-mounts-for=

x-systemd.wants=

SYSTEMD.NSPAWN(5) DIRECTIVES#

Directives for configuring systemd-nspawn containers.

AmbientCapability=

Bind=

BindReadOnly=

BindUser=

Boot=

Bridge=

CPUAffinity=

Capability=

DropCapability=

Environment=

Ephemeral=

Hostname=

IPVLAN=

Inaccessible=

Interface=

KillSignal=

LimitAS=

LimitCORE=

LimitCPU=

LimitDATA=

LimitFSIZE=

LimitLOCKS=

LimitMEMLOCK=

LimitMSGQUEUE=

LimitNICE=

LimitNOFILE=

LimitNPROC=

LimitRSS=

LimitRTPRIO=

LimitRTTIME=

LimitSIGPENDING=

LimitSTACK=

LinkJournal=

MACVLAN=

MachineID=

NoNewPrivileges=

NotifyReady=

OOMScoreAdjust=

Overlay=

OverlayReadOnly=

Parameters=

Personality=

PivotRoot=

Port=

Private=

PrivateUsers=

PrivateUsersOwnership=

ProcessTwo=

ReadOnly=

ResolvConf=

SuppressSync=

SystemCallFilter=

TemporaryFileSystem=

Timezone=

User=

VirtualEthernet=

VirtualEthernetExtra=

Volatile=

WorkingDirectory=

Zone=

PROGRAM CONFIGURATION OPTIONS#

Directives for configuring the behaviour of the systemd process and other tools through configuration files.

AllowHibernation=

AllowHybridSleep=

AllowSuspend=

AllowSuspendThenHibernate=

Audit=

CPUAffinity=

CapabilityBoundingSet=

Compress=

CrashAction=

CrashChangeVT=

CrashShell=

CtrlAltDelBurstAction=

DefaultCPUAccounting=

DefaultDeviceTimeoutSec=

DefaultEnvironment=

DefaultIOAccounting=

DefaultIPAccounting=

DefaultLimitAS=

DefaultLimitCORE=

DefaultLimitCPU=

DefaultLimitDATA=

DefaultLimitFSIZE=

DefaultLimitLOCKS=

DefaultLimitMEMLOCK=

DefaultLimitMSGQUEUE=

DefaultLimitNICE=

DefaultLimitNOFILE=

DefaultLimitNPROC=

DefaultLimitRSS=

DefaultLimitRTPRIO=

DefaultLimitRTTIME=

DefaultLimitSIGPENDING=

DefaultLimitSTACK=

DefaultMemoryAccounting=

DefaultMemoryPressureDurationSec=

DefaultMemoryPressureLimit=

DefaultMemoryPressureThresholdSec=

DefaultMemoryPressureWatch=

DefaultOOMPolicy=

DefaultOOMScoreAdjust=

DefaultRestartSec=

DefaultSmackProcessLabel=

DefaultStandardError=

DefaultStandardOutput=

DefaultStartLimitBurst=

DefaultStartLimitIntervalSec=

DefaultTasksAccounting=

DefaultTasksMax=

DefaultTimeoutAbortSec=

DefaultTimeoutStartSec=

DefaultTimeoutStopSec=

DefaultTimerAccuracySec=

DesignatedMaintenanceTime=

DumpCore=

EnterNamespace=

ExternalSizeMax=

ForwardToConsole=

ForwardToKMsg=

ForwardToSocket=

ForwardToSyslog=

ForwardToWall=

HandleHibernateKey=

HandleHibernateKeyLongPress=

HandleLidSwitch=

HandleLidSwitchDocked=

HandleLidSwitchExternalPower=

HandlePowerKey=

HandlePowerKeyLongPress=

HandleRebootKey=

HandleRebootKeyLongPress=

HandleSecureAttentionKey=

HandleSuspendKey=

HandleSuspendKeyLongPress=

HibernateDelaySec=

HibernateKeyIgnoreInhibited=

HibernateMode=

HibernateOnACPower=

HoldoffTimeoutSec=

IdleAction=

IdleActionSec=

InhibitDelayMaxSec=

InhibitorsMax=

JournalSizeMax=

KExecWatchdogSec=

KeepFree=

KillExcludeUsers=

KillOnlyUsers=

KillUserProcesses=

LidSwitchIgnoreInhibited=

LineMax=

LogColor=

LogLevel=

LogLocation=

LogTarget=

LogTime=

ManagerEnvironment=

MaxFileSec=

MaxFileSize=

MaxFiles=

MaxLevelConsole=

MaxLevelKMsg=

MaxLevelSocket=

MaxLevelStore=

MaxLevelSyslog=

MaxLevelWall=

MaxRetentionSec=

MaxUse=

MemorySleepMode=

NAutoVTs=

NUMAMask=

NUMAPolicy=

NetworkTimeoutSec=

NoNewPrivileges=

PowerKeyIgnoreInhibited=

ProcessSizeMax=

ProtectSystem=

RateLimitBurst=

RateLimitIntervalSec=

ReadKMsg=

RebootKeyIgnoreInhibited=

RebootWatchdogSec=

ReloadLimitBurst=

ReloadLimitIntervalSec=

RemoveIPC=

ReserveVT=

RuntimeDirectoryInodesMax=

RuntimeDirectorySize=

RuntimeKeepFree=

RuntimeMaxFileSize=

RuntimeMaxFiles=

RuntimeMaxUse=

RuntimeWatchdogPreGovernor=

RuntimeWatchdogPreSec=

RuntimeWatchdogSec=

Seal=

ServerCertificateFile=

ServerKeyFile=

SessionsMax=

ShowStatus=

SleepOperation=

SplitMode=

StatusUnitFormat=

StopIdleSessionSec=

Storage=

SuspendEstimationSec=

SuspendKeyIgnoreInhibited=

SuspendState=

SwapUsedLimit=

SyncIntervalSec=

SystemCallArchitectures=

SystemKeepFree=

SystemMaxFileSize=

SystemMaxFiles=

SystemMaxUse=

TTYPath=

TargetSolution=

TimerSlackNSec=

TrustedCertificateFile=

URL=

Unlink=

UserStopDelaySec=

WatchdogDevice=

children_max=

event_timeout=

exec_delay=

resolve_names=

timeout_signal=

udev_log=

COMMAND LINE OPTIONS#

Command-line options accepted by programs in the systemd suite.

--accept

--accept-cached

--access-mode

--acquired

--action

--activatable

--address

--adjust-system-clock

--after

--after-cursor

--all

--all-architectures

--allow-interactive-authorization

--allow-null

--ambient-capability

--any

--app-specific

--append

--architecture

--are-updates-enabled

--as-pid2

--attach

--attr-match[=FILE[=VALUE]]

--attr-nomatch[=FILE[=VALUE]]

--attribute-walk

--augment-creds

--auto-login

--auto-resize-mode

--auto-start

--automount

--automount-property

--avatar

--background

--backing

--bank

--base-time

--basename

--batch

--before

--bind

--bind-device

--bind-ro

--bind-user

--blob

--boot[=[ID][±offset]|all]

--boot-loader-entry

--boot-loader-menu

--boot-path

--booted

--boundaries

--bus-path

--cache

--can-factory-reset

--capability

--capability-ambient-set

--capability-bounding-set

--capsule

--case-sensitive[=BOOLEAN]

--cat

--cat-config

--catalog

--cert

--certificate

--certificate-provider

--certificate-source

--cgroup-id

--chain

--chdir

--check-inhibitors

--children-max

--chroot

--cifs-domain

--cifs-extra-mount-options

--cifs-service

--cifs-user-name

--class

--clean

--cleanup-db

--cmdline

--cname

--collect

--commit

--component

--components

--compress

--config

--confirm-spawn

--connections-max

--console

--container

--continuous

--copy

--copy-from

--copy-keymap

--copy-locale

--copy-root-password

--copy-root-shell

--copy-source

--copy-timezone

--copy-to

--cpu

--cpu-affinity

--cpu-weight

--crash-action

--crash-shell

--crash-vt

--create

--credential

--current

--cursor

--cursor-file

--cvm

--daemon

--datagram

--debug

--debugger

--debugger-arguments

--default-standard-error

--default-standard-output

--defer-partitions

--definitions

--delay

--delete-root-password

--depth

--description

--destination

--detach

--detailed

--device

--device-id-of-file

--devicetree

--devicetree-auto

--diff

--directory

--disable-updates

--discard

--discover

--disk-size

--disk-usage

--disposition

--dmesg

--drop-caches

--drop-capability

--drop-in

--dry-run

--dtb

--dtbauto

--dump-bus-properties

--dump-catalog

--dump-configuration-items

--dump-core

--echo

--efi-boot-option-description

--email-address

--emoji

--empty

--enable

--enable-updates

--enforce-password-policy

--entry-token

--ephemeral

--esp-path

--event-timeout

--exclude-identifier

--exclude-partitions

--exclude-prefix

--exec

--exec-delay

--exit

--exit-idle-time

--exit-if-exists

--expand-environment

--expect-reply

--export

--export-db

--export-format

--export-prefix

--extension

--facility

--factory-reset

--fail

--failed

--fd

--fdname

--fido2-credential-algorithm

--fido2-device

--fido2-parameters-in-header

--fido2-salt-file

--fido2-with-client-pin

--fido2-with-user-presence

--fido2-with-user-verification

--field

--fields

--file

--file-system

--firmware-setup

--flush

--follow

--force

--format

--from-pattern

--fs-type

--fsck

--full

--fuzz

--fuzzy

--generate-crypttab

--generate-fstab

--generators

--getter

--gid

--global

--gnutls-log

--graceful

--grep

--group

--growfs

--halt

--header

--help

--home-dir

--host

--hostname

--hwids

--icon

--icon-name

--id

--identifier

--identity

--ignore

--ignore-failure

--image

--image-path

--image-policy

--in-memory

--inaccessible

--include-partitions

--inetd

--initialized

--initialized-match

--initialized-nomatch

--initrd

--inline

--install-source

--instance

--instances-max

--interface

--interval

--invocation

--io-weight

--ipv4

--ipv6

--iterations

--job-mode

--join-profile

--json

--keep-download

--keep-unit

--kernel

--kernel-command-line

--key

--key-file

--keymap

--keyname

--kill-processes

--kill-signal

--kill-value

--kill-whom

--language

--legend

--level-prefix

--limit-messages

--lines

--link-journal

--linux

--list

--list-boots

--list-catalog

--list-cvm

--list-devices

--list-invocations

--listen

--listen-http

--listen-https

--listen-raw

--load-credential

--load-credentials

--locale

--locale-messages

--location

--locked

--log-color

--log-level

--log-location

--log-target

--log-time

--login-background

--loop-ref

--low

--luks-cipher

--luks-cipher-mode

--luks-discard

--luks-extra-mount-options

--luks-offline-discard

--luks-pbkdf-force-iterations

--luks-pbkdf-hash-algorithm

--luks-pbkdf-memory-cost

--luks-pbkdf-parallel-threads

--luks-pbkdf-time-cost

--luks-pbkdf-type

--luks-sector-size

--luks-volume-key-size

--machine

--machine-id

--make-archive

--make-ddi

--make-entry-directory

--man

--mangle

--marked

--match

--max-addresses

--measure

--member-of

--memory-high

--memory-max

--merge

--message

--microcode

--mkdir

--mode

--monitor

--more

--mount

--mtree

--mtree-hash

--multiple

--multiplexer

--mutable

--name

--name-match[=NAME]

--namespace

--network

--network-bridge

--network-interface

--network-ipvlan

--network-macvlan

--network-namespace-path

--network-veth

--network-veth-extra

--network-zone

--newline

--nice

--no-ask-password

--no-block

--no-convert

--no-full

--no-hostname

--no-legend

--no-measure

--no-new-privileges

--no-output

--no-pager

--no-reload

--no-sign-kernel

--no-style

--no-summary

--no-sync

--no-tail

--no-tty

--no-variables

--no-wall

--no-warn

--no-wtmp

--nodev

--noexec

--nosuid

--not-after

--not-before

--notify-ready

--now

--nqn

--nv-index

--oci-bundle

--offline

--on-active

--on-boot

--on-calendar

--on-clock-change

--on-startup

--on-timezone-change

--on-unit-active

--on-unit-inactive

--oneway

--oom-score-adjust

--operational-state

--options

--order

--os-release

--osrel

--output

--output-fields

--overlay

--overlay-ro

--owner

--pager-end

--parent-match[=NAME]

--password

--password-change-inactive

--password-change-max

--password-change-min

--password-change-now

--password-change-warn

--password-hint

--path

--path-property

--pcr

--pcr-banks

--pcr-private-key

--pcr-public-key

--pcrlock

--pcrpkey

--personality

--phase

--phases

--pid

--ping

--pipe

--pivot-root

--pkcs11-token-uri

--plain

--plymouth

--policy

--port

--poweroff

--prefix

--preset-mode

--pretty

--print

--print-boot-path

--print-esp-path

--print-loader-path

--print-root-device

--print-stub-path

--prioritized-subsystem

--priority

--private-key

--private-key-source

--private-network

--private-users

--private-users-ownership

--profile

--prompt

--prompt-hostname

--prompt-keymap

--prompt-locale

--prompt-root-password

--prompt-root-shell

--prompt-timezone

--property

--property-match[=KEY=VALUE]

--protocol

--pty

--public-key

--purge

--query

--quiet

--random-seed

--rate-limit-burst

--rate-limit-interval

--raw

--raw-description

--read-only

--ready

--real-name

--realm

--rebalance-weight

--reboot

--reboot-argument

--recovery-key

--recovery-pin

--recursive

--recursive-errors

--register

--relax-single-label

--relinquish-var

--reload

--reloading

--remain-after-exit

--remove

--removed

--replace

--require

--reset

--resolv-conf

--resolve

--resolve-names

--reverse

--rlimit

--rmdir

--root

--root-hash

--root-hash-sig

--root-password

--root-password-file

--root-password-hashed

--root-shell

--rotate

--runner

--runtime

--same-dir

--save-state

--sbat

--scale-svg

--scope

--seal

--search

--section

--sector-size

--secure-boot-auto-enroll

--secureboot-certificate

--secureboot-certificate-dir

--secureboot-certificate-name

--secureboot-certificate-validity

--secureboot-private-key

--security-policy

--seed

--selinux-apifs-context

--selinux-context

--send-sighup

--seqpacket

--service

--service-address

--service-txt

--service-type

--service-watchdogs

--session-launcher

--session-type

--set-credential

--setenv

--settings

--settle

--setup-keys

--setup-machine-id

--shell

--shell-prompt-prefix

--show

--show-cursor

--show-machine

--show-status

--show-transaction

--show-types

--sign-kernel

--signal

--signing-engine

--signing-provider

--signtool

--since

--size

--skel

--slice

--slice-inherit

--smart-relinquish-var

--socket-property

--splash

--split

--split-mode

--ssh-authorized-keys

--stale-data

--start-exec-queue

--state

--static

--stats

--status

--stderr-priority

--stdin

--stop-delay

--stop-exec-queue

--stopping

--storage

--strict

--subsystem-match[=SUBSYSTEM]

--subsystem-nomatch[=SUBSYSTEM]

--suffix

--summary

--suppress-sync

--sync

--synthesize

--sysname-match[=NAME]

--system

--system-call-filter

--table

--tag-match[=TAG]

--tasks-max

--template

--test

--threshold

--timeout

--timeout-idle-sec

--timeout-signal

--timer-property

--timestamp

--timezone

--tldr

--tmpfs

--to-pattern

--tools

--tpm2-device

--tpm2-device-key

--tpm2-pcrlock