summaryrefslogtreecommitdiff
path: root/tmpfiles.d/systemd-nspawn.conf
diff options
context:
space:
mode:
authorLennart Poettering <lennart@poettering.net>2015-06-15 19:24:43 +0200
committerLennart Poettering <lennart@poettering.net>2015-06-15 19:28:55 +0200
commit770b5ce4fc31a336a41e81381c229da725ef0cfa (patch)
tree7ccdca8270ec46ee43d0f109da5c5439426a85d2 /tmpfiles.d/systemd-nspawn.conf
parent1b26f09eb0ab6925ca15835107e75c47931cdef2 (diff)
tmpfiles: automatically remove old machine snapshots at boot
Remove old temporary snapshots, but only at boot. Ideally we'd have "self-destroying" btrfs snapshots that go away if the last last reference to it does. To mimic a scheme like this at least remove the old snapshots on fresh boots, where we know they cannot be referenced anymore. Note that we actually remove all temporary files in /var/lib/machines/ at boot, which should be safe since the directory has defined semantics. In the root directory (where systemd-nspawn --ephemeral places snapshots) we are more strict, to avoid removing unrelated temporary files. This also splits out nspawn/container related tmpfiles bits into a new tmpfiles snippet to systemd-nspawn.conf
Diffstat (limited to 'tmpfiles.d/systemd-nspawn.conf')
-rw-r--r--tmpfiles.d/systemd-nspawn.conf23
1 files changed, 23 insertions, 0 deletions
diff --git a/tmpfiles.d/systemd-nspawn.conf b/tmpfiles.d/systemd-nspawn.conf
new file mode 100644
index 0000000000..5a3124a0fc
--- /dev/null
+++ b/tmpfiles.d/systemd-nspawn.conf
@@ -0,0 +1,23 @@
+# This file is part of systemd.
+#
+# systemd is free software; you can redistribute it and/or modify it
+# under the terms of the GNU Lesser General Public License as published by
+# the Free Software Foundation; either version 2.1 of the License, or
+# (at your option) any later version.
+
+# See tmpfiles.d(5) for details
+
+v /var/lib/machines 0700 - - -
+
+# Remove old temporary snapshots, but only at boot. Ideally we'd have
+# "self-destroying" btrfs snapshots that go away if the last last
+# reference to it does. To mimic a scheme like this at least remove
+# the old snapshots on fresh boots, where we know they cannot be
+# referenced anymore. Note that we actually remove all temporary files
+# in /var/lib/machines/ at boot, which should be safe since the
+# directory has defined semantics. In the root directory (where
+# systemd-nspawn --ephemeral places snapshots) we are more strict, to
+# avoid removing unrelated temporary files.
+
+R! /var/lib/machines/.#*
+R! /.#machine.*