X-Git-Url: https://iankelling.org/git/?p=newns;a=blobdiff_plain;f=newns;h=b45c994987c208e9aa570552e2b8c85987c8c3fe;hp=d6a1b08eb6bc7805cb5d3fadcc7f50b591b29ef2;hb=9dfee15b74eeb623e0b907f35c1bdedb62dc88e8;hpb=11818aeee42717a9ce5ca1b4ac7bde4a646f1306

diff --git a/newns b/newns
index d6a1b08..b45c994 100755
--- a/newns
+++ b/newns
@@ -43,9 +43,12 @@ Setup new or systemd created network namespace with nat and mount namespace
 -c, --create    Create network namespace. For running outside systemd private net.
 -h, --help      Show this help and exit.
 
-From within systemd network namespace, nat it to the outside. If given
--c, or if in the default network namespace, create a named network
-namepace natted to the current netns.
+From within a systemd network namespace, nat it to the outside. This
+would be called from ExecStartPre, and or subsequent units called with
+JoinsNamespaceOf= and PrivateNetwork=true.
+
+If given -c, or if in the default network namespace, create a named
+network namepace natted to the current netns.
 
 Uses /24 network, finding the first locally unused one starting at
 10.173.0.
@@ -68,7 +71,15 @@ https://iankelling.org/git/?p=errhandle, set ERRHANDLE_PATH, or put it
 in a directory adjacent to the absolute, resolved directory this file is
 in.
 
-Background: "ip netns new ..." also does a mount namespace, then bind
+Background:
+
+This script does not make the namespace be named like ip does, because
+the naming is not necessary, although it could have been done with some
+more work. For debugging and joining the namespace with a bash shell, I
+use nsenter -n -m -t $(pgrep PROCESS_IN_NAMESPACE).  Note: if I knew how
+to easily ask systemd what pid a unit has, i would do that.
+
+"ip netns new ..." also does a mount namespace, then bind
 mounts each file/dir in /etc/netns/NS_NAME to /etc/NS_NAME. Note,
 for openvpn having it's own resolv.conf by using it's user script which
 calls resolvconf, this doesn't help much. What we actually want to do is