NAME¶

systemd.directives - Index of configuration directives

UNIT DIRECTIVES¶

Directives for configuring units, used in unit files.

Accept=

AccuracySec=

After=

Alias=

AllowIsolate=

AllowedCPUs=

AllowedMemoryNodes=

Also=

AmbientCapabilities=

AppArmorProfile=

AssertACPower=

AssertArchitecture=

AssertCPUFeature=

AssertCPUPressure=

AssertCPUs=

AssertCapability=

AssertControlGroupController=

AssertCredential=

AssertDirectoryNotEmpty=

AssertEnvironment=

AssertFileIsExecutable=

AssertFileNotEmpty=

AssertFirstBoot=

AssertGroup=

AssertHost=

AssertIOPressure=

AssertKernelCommandLine=

AssertKernelVersion=

AssertMemory=

AssertMemoryPressure=

AssertNeedsUpdate=

AssertOSRelease=

AssertPathExists=

AssertPathExistsGlob=

AssertPathIsDirectory=

AssertPathIsEncrypted=

AssertPathIsMountPoint=

AssertPathIsReadWrite=

AssertPathIsSymbolicLink=

AssertSecurity=

AssertUser=

AssertVirtualization=

BPFProgram=

Backlog=

Before=

BindIPv6Only=

BindPaths=

BindReadOnlyPaths=

BindToDevice=

BindsTo=

Broadcast=

BusName=

CPUAccounting=

CPUAffinity=

CPUQuota=

CPUQuotaPeriodSec=

CPUSchedulingPolicy=

CPUSchedulingPriority=

CPUSchedulingResetOnFork=

CPUWeight=

CacheDirectory=

CacheDirectoryMode=

CapabilityBoundingSet=

CollectMode=

ConditionACPower=

ConditionArchitecture=

ConditionCPUFeature=

ConditionCPUPressure=

ConditionCPUs=

ConditionCapability=

ConditionControlGroupController=

ConditionCredential=

ConditionDirectoryNotEmpty=

ConditionEnvironment=

ConditionFileIsExecutable=

ConditionFileNotEmpty=

ConditionFirmware=

ConditionFirstBoot=

ConditionGroup=

ConditionHost=

ConditionIOPressure=

ConditionKernelCommandLine=

ConditionKernelVersion=

ConditionMemory=

ConditionMemoryPressure=

ConditionNeedsUpdate=

ConditionOSRelease=

ConditionPathExists=

ConditionPathExistsGlob=

ConditionPathIsDirectory=

ConditionPathIsEncrypted=

ConditionPathIsMountPoint=

ConditionPathIsReadWrite=

ConditionPathIsSymbolicLink=

ConditionSecurity=

ConditionUser=

ConditionVirtualization=

ConfigurationDirectory=

ConfigurationDirectoryMode=

Conflicts=

CoredumpFilter=

DefaultDependencies=

DefaultInstance=

DefaultStartupMemoryLow=

DeferAcceptSec=

Delegate=

DelegateSubgroup=

Description=

DeviceAllow=

DevicePolicy=

DirectoryMode=

DirectoryNotEmpty=

DisableControllers=

Documentation=

DynamicUser=

Environment=

EnvironmentFile=

ExecCondition=

ExecPaths=

ExecReload=

ExecSearchPath=

ExecStart=

ExecStartPost=

ExecStartPre=

ExecStop=

ExecStopPost=

ExecStopPre=

ExitType=

ExtensionDirectories=

ExtensionImagePolicy=

ExtensionImages=

ExtraOptions=

FailureAction=

FailureActionExitStatus=

FileDescriptorName=

FileDescriptorStoreMax=

FileDescriptorStorePreserve=

FinalKillSignal=

FixedRandomDelay=

FlushPending=

ForceUnmount=

FreeBind=

Group=

GuessMainPID=

IOAccounting=

IODeviceLatencyTargetSec=

IODeviceWeight=

IOReadBandwidthMax=

IOReadIOPSMax=

IOSchedulingClass=

IOSchedulingPriority=

IOWeight=

IOWriteBandwidthMax=

IOWriteIOPSMax=

IPAccounting=

IPAddressAllow=

IPAddressDeny=

IPCNamespacePath=

IPEgressFilterPath=

IPIngressFilterPath=

IPTOS=

IPTTL=

IgnoreOnIsolate=

IgnoreSIGPIPE=

ImportCredential=

InaccessiblePaths=

JobRunningTimeoutSec=

JobTimeoutAction=

JobTimeoutRebootArgument=

JobTimeoutSec=

JoinsNamespaceOf=

KeepAlive=

KeepAliveIntervalSec=

KeepAliveProbes=

KeepAliveTimeSec=

KeyringMode=

KillMode=

KillSignal=

LazyUnmount=

LimitAS=

LimitCORE=

LimitCPU=

LimitDATA=

LimitFSIZE=

LimitLOCKS=

LimitMEMLOCK=

LimitMSGQUEUE=

LimitNICE=

LimitNOFILE=

LimitNPROC=

LimitRSS=

LimitRTPRIO=

LimitRTTIME=

LimitSIGPENDING=

LimitSTACK=

ListenDatagram=

ListenFIFO=

ListenMessageQueue=

ListenNetlink=

ListenSequentialPacket=

ListenSpecial=

ListenStream=

ListenUSBFunction=

LoadCredential=

LoadCredentialEncrypted=

LockPersonality=

LogExtraFields=

LogFilterPatterns=

LogLevelMax=

LogNamespace=

LogRateLimitBurst=

LogRateLimitIntervalSec=

LogsDirectory=

LogsDirectoryMode=

MakeDirectory=

ManagedOOMMemoryPressure=

ManagedOOMMemoryPressureLimit=

ManagedOOMPreference=

ManagedOOMSwap=

Mark=

MaxConnections=

MaxConnectionsPerSource=

MemoryAccounting=

MemoryDenyWriteExecute=

MemoryHigh=

MemoryKSM=

MemoryLow=

MemoryMax=

MemoryMin=

MemoryPressureThresholdSec=

MemoryPressureWatch=

MemorySwapMax=

MemoryZSwapMax=

MessageQueueMaxMessages=

MessageQueueMessageSize=

MountAPIVFS=

MountFlags=

MountImagePolicy=

MountImages=

NUMAMask=

NUMAPolicy=

NetworkNamespacePath=

Nice=

NoDelay=

NoExecPaths=

NoNewPrivileges=

NonBlocking=

NotifyAccess=

OOMPolicy=

OOMScoreAdjust=

OnActiveSec=

OnBootSec=

OnCalendar=

OnClockChange=

OnFailure=

OnFailureJobMode=

OnStartupSec=

OnSuccess=

OnSuccessJobMode=

OnTimezoneChange=

OnUnitActiveSec=

OnUnitInactiveSec=

OpenFile=

Options=

PAMName=

PIDFile=

PartOf=

PassCredentials=

PassEnvironment=

PassPacketInfo=

PassSecurity=

PathChanged=

PathExists=

PathExistsGlob=

PathModified=

Persistent=

Personality=

PipeSize=

Priority=

PrivateDevices=

PrivateIPC=

PrivateMounts=

PrivateNetwork=

PrivateTmp=

PrivateUsers=

ProcSubset=

PropagatesReloadTo=

PropagatesStopTo=

ProtectClock=

ProtectControlGroups=

ProtectHome=

ProtectHostname=

ProtectKernelLogs=

ProtectKernelModules=

ProtectKernelTunables=

ProtectProc=

ProtectSystem=

RandomizedDelaySec=

ReadOnlyPaths=

ReadWriteOnly=

ReadWritePaths=

RebootArgument=

ReceiveBuffer=

RefuseManualStart=

RefuseManualStop=

ReloadPropagatedFrom=

ReloadSignal=

RemainAfterElapse=

RemainAfterExit=

RemoveIPC=

RemoveOnStop=

RequiredBy=

Requires=

RequiresMountsFor=

Requisite=

Restart=

RestartForceExitStatus=

RestartKillSignal=

RestartMaxDelaySec=

RestartMode=

RestartPreventExitStatus=

RestartSec=

RestartSteps=

RestrictAddressFamilies=

RestrictFileSystems=

RestrictNamespaces=

RestrictNetworkInterfaces=

RestrictRealtime=

RestrictSUIDSGID=

ReusePort=

RootDirectory=

RootDirectoryStartOnly=

RootEphemeral=

RootHash=

RootHashSignature=

RootImage=

RootImageOptions=

RootImagePolicy=

RootVerity=

RuntimeDirectory=

RuntimeDirectoryMode=

RuntimeDirectoryPreserve=

RuntimeMaxSec=

RuntimeRandomizedExtraSec=

SELinuxContext=

SELinuxContextFromNet=

SecureBits=

SendBuffer=

SendSIGHUP=

SendSIGKILL=

Service=

SetCredential=

SetCredentialEncrypted=

Slice=

SloppyOptions=

SmackLabel=

SmackLabelIPIn=

SmackLabelIPOut=

SmackProcessLabel=

SocketBindAllow=

SocketBindDeny=

SocketGroup=

SocketMode=

SocketProtocol=

SocketUser=

Sockets=

SourcePath=

StandardError=

StandardInput=

StandardInputData=

StandardInputText=

StandardOutput=

StartLimitAction=

StartLimitBurst=

StartLimitIntervalSec=

StartupAllowedCPUs=

StartupAllowedMemoryNodes=

StartupCPUWeight=

StartupIOWeight=

StartupMemoryHigh=

StartupMemoryLow=

StartupMemoryMax=

StartupMemorySwapMax=

StartupMemoryZSwapMax=

StateDirectory=

StateDirectoryMode=

StopPropagatedFrom=

StopWhenUnneeded=

SuccessAction=

SuccessActionExitStatus=

SuccessExitStatus=

SupplementaryGroups=

Symlinks=

SyslogFacility=

SyslogIdentifier=

SyslogLevel=

SyslogLevelPrefix=

SystemCallArchitectures=

SystemCallErrorNumber=

SystemCallFilter=

SystemCallLog=

TCPCongestion=

TTYColumns=

TTYPath=

TTYReset=

TTYRows=

TTYVHangup=

TTYVTDisallocate=

TasksAccounting=

TasksMax=

TemporaryFileSystem=

TimeoutAbortSec=

TimeoutCleanSec=

TimeoutIdleSec=

TimeoutSec=

TimeoutStartFailureMode=

TimeoutStartSec=

TimeoutStopFailureMode=

TimeoutStopSec=

TimerSlackNSec=

Timestamping=

Transparent=

TriggerLimitBurst=

TriggerLimitIntervalSec=

Type=

UMask=

USBFunctionDescriptors=

USBFunctionStrings=

Unit=

UnsetEnvironment=

UpheldBy=

Upholds=

User=

UtmpIdentifier=

UtmpMode=

WakeSystem=

WantedBy=

Wants=

WatchdogSec=

WatchdogSignal=

What=

Where=

WorkingDirectory=

Writable=

OPTIONS ON THE KERNEL COMMAND LINE¶

Kernel boot options for configuring the behaviour of the systemd process.

-b

1

2

3

4

5

S

bond=

bootdev=

bridge=

debug

domain=

emergency

fsck.mode=

fsck.repair=

fstab=

ifname=

ip=

locale.LANG=

locale.LANGUAGE=

locale.LC_ADDRESS=

locale.LC_COLLATE=

locale.LC_CTYPE=

locale.LC_IDENTIFICATION=

locale.LC_MEASUREMENT=

locale.LC_MESSAGES=

locale.LC_MONETARY=

locale.LC_NAME=

locale.LC_NUMERIC=

locale.LC_PAPER=

locale.LC_TELEPHONE=

locale.LC_TIME=

luks.crypttab=

luks.data=

luks.key=

luks.name=

luks.options=

luks.uuid=

luks=

modules_load=

mount.usr=

mount.usrflags=

mount.usrfstype=

nameserver=

net.ifname-policy=

net.ifname_policy=

net.ifnames=

net.naming-scheme=

noresume

plymouth.enable=

quiet

quotacheck.mode=

rd.emergency

rd.fstab=

rd.luks.crypttab=

rd.luks.data=

rd.luks.key=

rd.luks.name=

rd.luks.options=

rd.luks.uuid=

rd.luks=

rd.modules_load=

rd.peerdns=

rd.rescue

rd.route=

rd.systemd.gpt_auto

rd.systemd.gpt_auto=

rd.systemd.image_policy=

rd.systemd.mount-extra=

rd.systemd.swap-extra=

rd.systemd.unit=

rd.systemd.verity=

rd.udev.blockdev_read_only

rd.udev.children_max=

rd.udev.event_timeout=

rd.udev.exec_delay=

rd.udev.log_level=

rd.udev.timeout_signal=

rd.veritytab=

rescue

resume=

resume_offset=

resumeflags=

ro

root=

rootflags=

rootfstype=

roothash=

rw

s

single

systemd.battery-check=

systemd.battery_check=

systemd.clock-usec=

systemd.condition-first-boot=

systemd.condition-needs-update=

systemd.confirm_spawn

systemd.cpu_affinity=

systemd.crash_chvt

systemd.crash_reboot

systemd.crash_shell

systemd.debug_shell

systemd.default_device_timeout_sec=

systemd.default_standard_error=

systemd.default_standard_output=

systemd.default_timeout_start_sec=

systemd.dump_core

systemd.early_core_pattern=

systemd.firstboot=

systemd.getty_auto=

systemd.gpt_auto

systemd.gpt_auto=

systemd.hostname=

systemd.image_policy=

systemd.import_credentials=

systemd.journald.forward_to_console=

systemd.journald.forward_to_kmsg=

systemd.journald.forward_to_syslog=

systemd.journald.forward_to_wall=

systemd.journald.max_level_console=

systemd.journald.max_level_kmsg=

systemd.journald.max_level_socket=

systemd.journald.max_level_store=

systemd.journald.max_level_syslog=

systemd.journald.max_level_wall=

systemd.log_color

systemd.log_level=

systemd.log_location

systemd.log_location=

systemd.log_ratelimit_kmsg

systemd.log_target=

systemd.log_tid

systemd.log_time

systemd.machine_id=

systemd.mask=

systemd.mount-extra=

systemd.random-seed=

systemd.reload_limit_burst=

systemd.reload_limit_interval_sec=

systemd.restore_state=

systemd.run=

systemd.run_failure_action=

systemd.run_success_action=

systemd.service_watchdogs

systemd.service_watchdogs=

systemd.set_credential=

systemd.set_credential_binary=

systemd.setenv=

systemd.show_status

systemd.status_unit_format=

systemd.swap-extra=

systemd.swap=

systemd.tty.columns.tty=

systemd.tty.rows.tty=

systemd.tty.term.tty=

systemd.unit=

systemd.verity.root_options=

systemd.verity=

systemd.verity_root_data=

systemd.verity_root_hash=

systemd.verity_root_options=

systemd.verity_usr_data=

systemd.verity_usr_hash=

systemd.verity_usr_options=

systemd.volatile=

systemd.wants=

systemd.watchdog_device=

systemd.watchdog_pre_sec=

systemd.watchdog_pretimeout_governor=

systemd.watchdog_sec=

udev.blockdev_read_only

udev.children_max=

udev.event_timeout=

udev.exec_delay=

udev.log_level=

udev.timeout_signal=

usrhash=

vconsole.font=

vconsole.font_map=

vconsole.font_unimap=

vconsole.keymap=

vconsole.keymap_toggle=

veritytab=

vlan=

SMBIOS TYPE 11 VARIABLES¶

Data passed from VMM to system via SMBIOS Type 11.

io.systemd.credential.binary:

io.systemd.credential:

io.systemd.stub.kernel-cmdline-extra=

ENVIRONMENT VARIABLES¶

Environment variables understood by the systemd manager and other programs and environment variable-compatible settings.

$CACHE_DIRECTORY

$CONFIGURATION_DIRECTORY

$CREDENTIALS_DIRECTORY

$EMAIL

$ENCRYPTED_CREDENTIALS_DIRECTORY

$EXIT_CODE

$EXIT_STATUS

$FDSTORE

$HOME

$INVOCATION_ID

$JOURNAL_STREAM

$LANG

$LISTEN_FDNAMES

$LISTEN_FDS

$LISTEN_PID

$LOGNAME

$LOGS_DIRECTORY

$LOG_NAMESPACE

$MAINPID

$MANAGERPID

$MEMORY_PRESSURE_WATCH

$MEMORY_PRESSURE_WRITE

$MONITOR_EXIT_CODE

$MONITOR_EXIT_STATUS

$MONITOR_INVOCATION_ID

$MONITOR_SERVICE_RESULT

$MONITOR_UNIT

$NOTIFY_SOCKET

$PATH

$PIDFILE

$PREVLEVEL

$REMOTE_ADDR

$REMOTE_PORT

$RUNLEVEL

$RUNTIME_DIRECTORY

$SERVICE_RESULT

$SHELL

$STATE_DIRECTORY

$SYSTEMD_ARCHITECTURE

$SYSTEMD_COLORS

$SYSTEMD_CONFIDENTIAL_VIRTUALIZATION

$SYSTEMD_DEBUGGER

$SYSTEMD_EDITOR

$SYSTEMD_ENVIRONMENT_GENERATOR_PATH

$SYSTEMD_EXEC_PID

$SYSTEMD_FIRST_BOOT

$SYSTEMD_GENERATOR_PATH

$SYSTEMD_GETTY_AUTO

$SYSTEMD_HOME=

$SYSTEMD_HOME_SUSPEND=

$SYSTEMD_IN_INITRD

$SYSTEMD_LESS

$SYSTEMD_LESSCHARSET

$SYSTEMD_LOG_COLOR

$SYSTEMD_LOG_LEVEL

$SYSTEMD_LOG_LOCATION

$SYSTEMD_LOG_RATELIMIT_KMSG

$SYSTEMD_LOG_TARGET

$SYSTEMD_LOG_TID

$SYSTEMD_LOG_TIME

$SYSTEMD_NSS_RESOLVE_CACHE

$SYSTEMD_NSS_RESOLVE_NETWORK

$SYSTEMD_NSS_RESOLVE_SYNTHESIZE

$SYSTEMD_NSS_RESOLVE_TRUST_ANCHOR

$SYSTEMD_NSS_RESOLVE_VALIDATE

$SYSTEMD_NSS_RESOLVE_ZONE

$SYSTEMD_PAGER

$SYSTEMD_PAGERSECURE

$SYSTEMD_RANDOM_SEED_CREDIT

$SYSTEMD_SCOPE

$SYSTEMD_UNIT_PATH

$SYSTEMD_URLIFY

$SYSTEMD_VIRTUALIZATION

$TERM

$TRIGGER_PATH

$TRIGGER_TIMER_MONOTONIC_USEC

$TRIGGER_TIMER_REALTIME_USEC

$TRIGGER_UNIT

$TZ

$USER

$WATCHDOG_PID

$WATCHDOG_USEC

$XDG_CONFIG_DIRS

$XDG_CONFIG_HOME

$XDG_DATA_DIRS

$XDG_DATA_HOME

$XDG_RUNTIME_DIR

$XDG_SEAT

$XDG_SESSION_CLASS

$XDG_SESSION_DESKTOP

$XDG_SESSION_ID

$XDG_SESSION_TYPE

$XDG_VTNR

ANSI_COLOR=

ARCHITECTURE=

BUG_REPORT_URL=

BUILD_ID=

CHASSIS=

CONFEXT_LEVEL=

CONFEXT_SCOPE=

CPE_NAME=

DEFAULT_HOSTNAME=

DEPLOYMENT=

DOCUMENTATION_URL=

HARDWARE_MODEL=

HARDWARE_VENDOR=

HOME_URL=

ICON_NAME=

ID=

ID_LIKE=

IMAGE_ID=

IMAGE_VERSION=

LOCATION=

LOGO=

NAME=

PORTABLE_PREFIXES=

PRETTY_HOSTNAME=

PRETTY_NAME=

PRIVACY_POLICY_URL=

SUPPORT_END=

SUPPORT_URL=

SYSEXT_LEVEL=

SYSEXT_SCOPE=

VARIANT=

VARIANT_ID=

VENDOR_NAME=

VENDOR_URL=

VERSION=

VERSION_CODENAME=

VERSION_ID=

SYSTEM CREDENTIALS¶

System credentials understood by the system and service manager and various other components:

firstboot.keymap

firstboot.locale

firstboot.locale-messages

firstboot.timezone

fstab.extra

getty.ttys.container

getty.ttys.serial

login.issue

login.motd

network.dns

network.hosts

network.search_domains

passwd.hashed-password.user

passwd.hashed-password.root

passwd.plaintext-password.user

passwd.plaintext-password.root

passwd.shell.user

passwd.shell.root

ssh.authorized_keys.root

sysctl.extra

system.machine_id

sysusers.extra

tmpfiles.extra

vconsole.font

vconsole.font_map

vconsole.font_unimap

vconsole.keymap

vconsole.keymap_toggle

vmm.notify_socket

EFI VARIABLES¶

EFI variables understood by systemd-boot(7) and other programs.

LoaderBootCountPath

LoaderConfigTimeout

LoaderConfigTimeoutOneShot

LoaderDevicePartUUID

LoaderEntries

LoaderEntryDefault

LoaderEntryOneShot

LoaderEntrySelected

LoaderFeatures

LoaderFirmwareInfo

LoaderFirmwareType

LoaderImageIdentifier

LoaderInfo

LoaderSystemToken

LoaderTimeExecUSec

LoaderTimeInitUSec

LoaderTimeMenuUsec

StubInfo

StubPcrInitRDSysExts

StubPcrKernelImage

StubPcrKernelParameters

HOME AREA/USER ACCOUNT DIRECTIVES¶

Directives for configuring home areas and user accounts via systemd-homed.service(8).

DefaultFileSystemType=

DefaultStorage=

UDEV DIRECTIVES¶

Directives for configuring systemd units through the udev database.

$$

$attr{file}

$devnode

$devpath

$driver

$env{key}

$id

$kernel

$links

$major

$minor

$name

$number

$parent

$result

$root

$sys

"%%"

%E{key}

"%M"

"%N"

"%P"

"%S"

"%b"

%c

%k

"%m"

"%n"

"%p"

%r

%s{file}

ACTION

ATTRS{filename}

ATTR{filename}

CONST{key}

DEVPATH

DRIVER

DRIVERS

ENV{key}

GOTO

GROUP

ID_AUTOSEAT

ID_FOR_SEAT

ID_MODEL=

ID_MODEL_FROM_DATABASE=

ID_SEAT

IMPORT{type}

KERNEL

KERNELS

LABEL

MODE

NAME

OPTIONS

OWNER

PROGRAM

RESULT

RUN{type}

SECLABEL{module}

SUBSYSTEM

SUBSYSTEMS

SYMLINK

SYSCTL{kernel parameter}

SYSTEMD_ALIAS=

SYSTEMD_MOUNT_OPTIONS=

SYSTEMD_MOUNT_WHERE=

SYSTEMD_READY=

SYSTEMD_USER_WANTS=

SYSTEMD_WANTS=

TAG

TAGS

TEST{octal mode mask}

db_persist

link_priority=

log_level=

nowatch

static_node=

string_escape=

watch

NETWORK DIRECTIVES¶

Directives for configuring network links through the net-setup-link udev builtin and networks through systemd-networkd.

ARP=

ARPAllTargets=

ARPIPTargets=

ARPIntervalSec=

ARPValidate=

AckFilter=

Activate=

ActivationPolicy=

ActiveSlave=

AdActorSystem=

AdActorSystemPriority=

AdSelect=

AdUserPortKey=

AddPrefixRoute=

Address=

AddressAutoconfiguration=

Advertise=

AgeingTimeSec=

Aggregation=

Alias=

AllMulticast=

AllSlavesActive=

AllowList=

AllowLocalRemote=

AllowPortToBeRoot=

AllowedIPs=

AlternativeName=

AlternativeNamesPolicy=

Announce=

Anonymize=

Architecture=

Assign=

AssignToLoopback=

AssociatedWith=

AutoJoin=

AutoNegotiation=

AutoNegotiationFlowControl=

AutoRateIngress=

BSSID=

Bands=

Bandwidth=

BatmanAdvanced=

BindCarrier=

BindToInterface=

BitRate=

BitsPerSecond=

Blackhole=

Bond=

BootFilename=

BootServerAddress=

BootServerName=

Bridge=

BridgeLoopAvoidance=

Broadcast=

BroadcastMulticastQueueLength=

Buckets=

BufferBytes=

BurstBytes=

BusErrorReporting=

CEThresholdSec=

Cache=

CacheFromLocalhost=

CeilBufferBytes=

CeilRate=

ClassId=

ClassicDataLengthCode=

ClientIdentifier=

CoalescePacketRateHigh=

CoalescePacketRateLow=

CoalescePacketRateSampleIntervalSec=

CombinedChannels=

CompensationMode=

ConfigureWithoutCarrier=

ConnectionRetrySec=

CopyDSCP=

Cost=

Credential=

DHCP=

DHCPPrefixDelegation=

DHCPServer=

DHCPv6Client=

DNS=

DNSDefaultRoute=

DNSLifetimeSec=

DNSOverTLS=

DNSSEC=

DNSSECNegativeTrustAnchors=

DNSStubListener=

DNSStubListenerExtra=

DUIDRawData=

DUIDType=

DataBitRate=

DataPhaseBufferSegment1=

DataPhaseBufferSegment2=

DataPropagationSegment=

DataSamplePoint=

DataSyncJumpWidth=

DataTimeQuantaNSec=

DefaultClass=

DefaultLeaseTimeSec=

DefaultPVID=

DefaultRouteOnDevice=

DefaultVirtualQueue=

DelayJitterSec=

DelaySec=

DenyList=

Description=

Destination=

DestinationPort=

DiscoverPathMTU=

DistributedArpTable=

Domains=

DownDelaySec=

Driver=

Duplex=

DuplicateAddressDetection=

DuplicateRate=

DynamicTransmitLoadBalancing=

ECN=

ERSPANDirection=

ERSPANHardwareId=

ERSPANIndex=

ERSPANVersion=

EgressQOSMaps=

EgressUntagged=

EmitDNS=

EmitDomains=

EmitLLDP=

EmitLPR=

EmitNTP=

EmitPOP3=

EmitRouter=

EmitSIP=

EmitSMTP=

EmitTimezone=

Encapsulation=

EncapsulationLimit=

EncapsulationType=

Encrypt=

Endpoint=

EtherType=

External=

FDBAgeingSec=

FDMode=

FDNonISO=

FOUDestinationPort=

FOUSourcePort=

FailOverMACPolicy=

FallbackDNS=

FallbackLeaseLifetimeSec=

FallbackNTP=

Family=

FastLeave=

FastOpenNoCookie=

FirewallMark=

Firmware=

Flags=

FlowIsolationMode=

FlowLabel=

FlowLimit=

Flows=

FooOverUDP=

ForwardDelaySec=

Fragmentation=

From=

GVRP=

Gateway=

GatewayBandwidthDown=

GatewayBandwidthUp=

GatewayMode=

GatewayOnLink=

GenericProtocolExtension=

GenericRIO=

GenericReceiveOffload=

GenericReceiveOffloadHardware=

GenericSegmentOffloadMaxBytes=

GenericSegmentOffloadMaxSegments=

GenericSegmentationOffload=

GratuitousARP=

Group=

GroupForwardMask=

GroupPolicyExtension=

HairPin=

Handle=

HelloTimeSec=

HomeAddress=

HopPenalty=

Host=

Hostname=

IAID=

IPDoNotFragment=

IPForward=

IPMasquerade=

IPProtocol=

IPServiceType=

IPVLAN=

IPVTAP=

IPoIB=

IPv4AcceptLocal=

IPv4LLRoute=

IPv4LLStartAddress=

IPv4ProxyARP=

IPv4RouteLocalnet=

IPv6AcceptRA=

IPv6DuplicateAddressDetection=

IPv6FlowLabel=

IPv6HopLimit=

IPv6LinkLocalAddressGenerationMode=

IPv6MTUBytes=

IPv6Preference=

IPv6PrivacyExtensions=

IPv6ProxyNDP=

IPv6ProxyNDPAddress=

IPv6RapidDeploymentPrefix=

IPv6SendRA=

IPv6StableSecretAddress=

ISATAP=

Id=

IgnoreCarrierLoss=

IgnoreDontFragment=

IgnoreUserspaceMulticastGroup=

IncomingInterface=

Independent=

IngressQOSMaps=

InheritInnerProtocol=

InitialAdvertisedReceiveWindow=

InitialCongestionWindow=

InitialQuantumBytes=

InputKey=

InterfaceId=

IntervalSec=

InvertRule=

Isolated=

KeepCarrier=

KeepConfiguration=

KeepMaster=

KernelCommandLine=

KernelVersion=

Key=

KeyFile=

KeyId=

Kind=

L2MissNotification=

L3MissNotification=

LACPTransmitRate=

LLDP=

LLMNR=

LPR=

Label=

LargeReceiveOffload=

LatencySec=

Layer2SpecificHeader=

LearnPacketIntervalSec=

Learning=

LifetimeSec=

LimitBytes=

LinkLayerAddress=

LinkLocalAddressing=

LinkState=

ListenOnly=

ListenPort=

Local=

Loopback=

LooseBinding=

LossRate=

MACAddress=

MACAddressPolicy=

MACSpoofCheck=

MACVLAN=

MACVTAP=

MACsec=

MDI=

MIIMonitorSec=

MPUBytes=

MTUBytes=

MUDURL=

MVRP=

MacLearning=

ManageForeignRoutes=

ManageForeignRoutingPolicyRules=

ManageTemporaryAddress=

Managed=

MaxAgeSec=

MaxAttempts=

MaxLeaseTimeSec=

MaxPacketBytes=

MaximumFDBEntries=

MaximumRate=

MemoryLimitBytes=

Metric=

MinLinks=

Mode=

MultiPathRoute=

MultiQueue=

Multicast=

MulticastDNS=

MulticastFlood=

MulticastGroupAddress=

MulticastIGMPVersion=

MulticastQuerier=

MulticastRouter=

MulticastSnooping=

MulticastToUnicast=

NAT=

NTP=

NTupleFilter=

Name=

NamePolicy=

NeighborSuppression=

NetLabel=

NextHop=

OnLink=

OneShot=

OriginalName=

OriginatorIntervalSec=

OrphanMask=

OtherChannels=

OtherInformation=

OutgoingInterface=

OutputKey=

OverheadBytes=

POP3=

PVID=

Pacing=

PacketInfo=

PacketLimit=

PacketNumber=

PacketsPerSlave=

Parent=

PartitionKey=

Path=

PeakRate=

Peer=

PeerPort=

PeerSessionId=

PeerTunnelId=

PermanentMACAddress=

PersistentKeepalive=

PerturbPeriodSec=

PhaseBufferSegment1=

PhaseBufferSegment2=

PhysicalDevice=

PollIntervalMaxSec=

PollIntervalMinSec=

PoolOffset=

PoolSize=

Port=

PortRange=

PreferredLifetime=

PreferredLifetimeSec=

PreferredSource=

Prefix=

PrefixAllowList=

PrefixDelegationHint=

PrefixDenyList=

PresharedKey=

PresharedKeyFile=

PresumeAck=

PrimaryReselectPolicy=

PrimarySlave=

Priority=

PriorityMap=

PriorityQueueingPreset=

PrivateKey=

PrivateKeyFile=

Promiscuous=

PropagationSegment=

Property=

Protocol=

ProxyARP=

ProxyARPWiFi=

PublicKey=

QualityOfService=

QuantumBytes=

QueryReceiveSideScaling=

QuickAck=

RTTSec=

RapidCommit=

Rate=

RateToQuantum=

ReadEtcHosts=

ReceiveChecksumOffload=

ReceiveQueues=

ReceiveVLANCTAGFilter=

ReceiveVLANCTAGHardwareAcceleration=

ReduceARPProxy=

RelayAgentCircuitId=

RelayAgentRemoteId=

RelayTarget=

Remote=

RemoteChecksumRx=

RemoteChecksumTx=

ReorderHeader=

RequestBroadcast=

RequestOptions=

RequiredFamilyForOnline=

RequiredForOnline=

ResendIGMP=

ResolveUnicastSingleLabel=

RestartSec=

RootDistanceMaxSec=

Route=

RouteAllowList=

RouteDenyList=

RouteMTUBytes=

RouteMetric=

RouteShortCircuit=

RouteTable=

Router=

RouterAllowList=

RouterDenyList=

RouterLifetimeSec=

RouterPreference=

RoutesToDNS=

RoutesToNTP=

RoutingAlgorithm=

RxBufferSize=

RxChannels=

RxCoalesceHighSec=

RxCoalesceIrqSec=

RxCoalesceLowSec=

RxCoalesceSec=

RxFlowControl=

RxJumboBufferSize=

RxMaxCoalescedFrames=

RxMaxCoalescedHighFrames=

RxMaxCoalescedIrqFrames=

RxMaxCoalescedLowFrames=

RxMiniBufferSize=

SIP=

SMTP=

SR-IOVVirtualFunctions=

SSID=

STP=

SamplePoint=

SaveIntervalSec=

Scope=

SendDecline=

SendHostname=

SendOption=

SendRelease=

SendVendorOption=

SerializeTunneledPackets=

ServerAddress=

SessionId=

SocketPriority=

Source=

SourceMACAddress=

SourcePort=

SpeedMeter=

SpeedMeterIntervalSec=

SplitGSO=

StatisticsBlockCoalesceSec=

StrictBands=

SubnetId=

SuppressInterfaceGroup=

SuppressPrefixLength=

SyncJumpWidth=

TCP6SegmentationOffload=

TCPAdvertisedMaximumSegmentSize=

TCPCongestionControlAlgorithm=

TCPSegmentationOffload=

TOS=

TTL=

TTLPropagate=

Table=

TargetSec=

Termination=

TimeQuantaNSec=

Timezone=

To=

Token=

TransmitChecksumOffload=

TransmitHashPolicy=

TransmitQueueLength=

TransmitQueues=

TransmitVLANCTAGHardwareAcceleration=

TransmitVLANSTAGHardwareAcceleration=

TripleSampling=

Trust=

Tunnel=

TunnelId=

TxBufferSize=

TxChannels=

TxCoalesceHighSec=

TxCoalesceIrqSec=

TxCoalesceLowSec=

TxCoalesceSec=

TxFlowControl=

TxMaxCoalescedFrames=

TxMaxCoalescedHighFrames=

TxMaxCoalescedIrqFrames=

TxMaxCoalescedLowFrames=

TxtData=

TxtText=

Type=

TypeOfService=

UDP6ZeroChecksumRx=

UDP6ZeroChecksumTx=

UDPChecksum=

UDPDestinationPort=

UDPSourcePort=

UnicastFlood=

Unmanaged=

UpDelaySec=

UplinkInterface=

Use6RD=

UseAdaptiveRxCoalesce=

UseAdaptiveTxCoalesce=

UseAddress=

UseAutonomousPrefix=

UseBPDU=

UseCaptivePortal=

UseDNS=

UseDelegatedPrefix=

UseDomains=

UseForEncoding=

UseGateway=

UseHostname=

UseMTU=

UseNTP=

UseOnLinkPrefix=

UseRawPacketSize=

UseRoutePrefix=

UseRoutes=

UseSIP=

UseTimezone=

User=

UserClass=

VLAN=

VLANFiltering=

VLANId=

VLANProtocol=

VNI=

VNetHeader=

VRF=

VXLAN=

ValidLifetimeSec=

VendorClass=

VendorClassIdentifier=

VirtualFunction=

VirtualQueues=

Virtualization=

WDS=

WLANInterfaceType=

WakeOnLan=

WakeOnLanPassword=

Wash=

Weight=

WithoutRA=

Xfrm=

JOURNAL FIELDS¶

Fields in the journal events with a well known meaning.

CODE_FILE=

CODE_FUNC=

CODE_LINE=

COREDUMP=

COREDUMP_CGROUP=

COREDUMP_CMDLINE=

COREDUMP_COMM=

COREDUMP_CONTAINER_CMDLINE=

COREDUMP_CWD=

COREDUMP_ENVIRON=

COREDUMP_EXE=

COREDUMP_FILENAME=

COREDUMP_GID=

COREDUMP_HOSTNAME=

COREDUMP_OPEN_FDS=

COREDUMP_OWNER_UID=

COREDUMP_PACKAGE_JSON=

COREDUMP_PACKAGE_NAME=

COREDUMP_PACKAGE_VERSION=

COREDUMP_PID=

COREDUMP_PROC_AUXV=

COREDUMP_PROC_CGROUP=

COREDUMP_PROC_LIMITS=

COREDUMP_PROC_MAPS=

COREDUMP_PROC_MOUNTINFO=

COREDUMP_PROC_STATUS=

COREDUMP_RLIMIT=

COREDUMP_ROOT=

COREDUMP_SESSION=

COREDUMP_SIGNAL=

COREDUMP_SIGNAL_NAME=

COREDUMP_SLICE=

COREDUMP_TIMESTAMP=

COREDUMP_TRUNCATED=

COREDUMP_UID=

COREDUMP_UNIT=

COREDUMP_USER_UNIT=

DOCUMENTATION=

ERRNO=

INVOCATION_ID=

MESSAGE=

MESSAGE_ID=

OBJECT_AUDIT_LOGINUID=

OBJECT_AUDIT_SESSION=

OBJECT_CMDLINE=

OBJECT_COMM=

OBJECT_EXE=

OBJECT_GID=

OBJECT_PID=

OBJECT_SYSTEMD_CGROUP=

OBJECT_SYSTEMD_INVOCATION_ID=

OBJECT_SYSTEMD_OWNER_UID=

OBJECT_SYSTEMD_SESSION=

OBJECT_SYSTEMD_UNIT=

OBJECT_SYSTEMD_USER_UNIT=

OBJECT_UID=

PRIORITY=

SYSLOG_FACILITY=

SYSLOG_IDENTIFIER=

SYSLOG_PID=

SYSLOG_RAW=

SYSLOG_TIMESTAMP=

TID=

UNIT=

USER_INVOCATION_ID=

USER_UNIT=

_AUDIT_LOGINUID=

_AUDIT_SESSION=

_BOOT_ID=

_CAP_EFFECTIVE=

_CMDLINE=

_COMM=

_EXE=

_GID=

_HOSTNAME=

_KERNEL_DEVICE=

_KERNEL_SUBSYSTEM=

_LINE_BREAK=

_MACHINE_ID=

_NAMESPACE=

_PID=

_RUNTIME_SCOPE=

_SELINUX_CONTEXT=

_SOURCE_REALTIME_TIMESTAMP=

_STREAM_ID=

_SYSTEMD_CGROUP=

_SYSTEMD_INVOCATION_ID=

_SYSTEMD_OWNER_UID=

_SYSTEMD_SESSION=

_SYSTEMD_SLICE=

_SYSTEMD_UNIT=

_SYSTEMD_USER_SLICE=

_SYSTEMD_USER_UNIT=

_TRANSPORT=

_UDEV_DEVLINK=

_UDEV_DEVNODE=

_UDEV_SYSNAME=

_UID=

__CURSOR=

__MONOTONIC_TIMESTAMP=

__REALTIME_TIMESTAMP=

__SEQNUM=

__SEQNUM_ID=

PAM CONFIGURATION DIRECTIVES¶

Directives for configuring PAM behaviour.

class=

debug

default-capability-ambient-set=

default-capability-bounding-set=

desktop=

suspend=

systemd.cpu_weight=

systemd.io_weight=

systemd.memory_max=

systemd.runtime_max_sec=

systemd.tasks_max=

type=

/ETC/CRYPTTAB, /ETC/VERITYTAB AND /ETC/FSTAB OPTIONS¶

Options which influence mounted filesystems and encrypted volumes.

_netdev

auto

bitlk

check-at-most-once

cipher=

data-block-size=

data-blocks=

discard

fec-device=

fec-offset=

fec-roots=

fido2-cid=

fido2-device=

fido2-rp=

format=

hash-block-size=

hash-offset=

hash=

header=

headless=

ignore-corruption

ignore-zero-blocks

key-slot=

keyfile-erase

keyfile-offset=

keyfile-size=

keyfile-timeout=

luks

no-read-workqueue

no-write-workqueue

noauto

nofail

offset=

panic-on-corruption

password-echo=

pkcs11-uri=

plain

read-only

readonly

restart-on-corruption

root-hash-signature=

salt=

same-cpu-crypt

sector-size=

size=

skip=

submit-from-crypt-cpus

superblock=

swap

tcrypt

tcrypt-hidden

tcrypt-keyfile=

tcrypt-system

tcrypt-veracrypt

timeout=

tmp=

token-timeout=

tpm2-device=

tpm2-measure-bank=

tpm2-measure-pcr=

tpm2-pcrs=

tpm2-pin=

tpm2-signature=

tries=

try-empty-password=

uuid=

veracrypt-pim=

verify

x-initrd.attach

x-initrd.mount

x-systemd.after=

x-systemd.automount

x-systemd.before=

x-systemd.device-bound

x-systemd.device-timeout=

x-systemd.growfs

x-systemd.idle-timeout=

x-systemd.makefs

x-systemd.mount-timeout=

x-systemd.pcrfs

x-systemd.required-by=

x-systemd.requires-mounts-for=

x-systemd.requires=

x-systemd.rw-only

x-systemd.wanted-by=

SYSTEMD.NSPAWN(5) DIRECTIVES¶

Directives for configuring systemd-nspawn containers.

AmbientCapability=

Bind=

BindReadOnly=

BindUser=

Boot=

Bridge=

CPUAffinity=

Capability=

DropCapability=

Environment=

Ephemeral=

Hostname=

IPVLAN=

Inaccessible=

Interface=

KillSignal=

LimitAS=

LimitCORE=

LimitCPU=

LimitDATA=

LimitFSIZE=

LimitLOCKS=

LimitMEMLOCK=

LimitMSGQUEUE=

LimitNICE=

LimitNOFILE=

LimitNPROC=

LimitRSS=

LimitRTPRIO=

LimitRTTIME=

LimitSIGPENDING=

LimitSTACK=

LinkJournal=

MACVLAN=

MachineID=

NoNewPrivileges=

NotifyReady=

OOMScoreAdjust=

Overlay=

OverlayReadOnly=

Parameters=

Personality=

PivotRoot=

Port=

Private=

PrivateUsers=

PrivateUsersOwnership=

ProcessTwo=

ReadOnly=

ResolvConf=

SuppressSync=

SystemCallFilter=

TemporaryFileSystem=

Timezone=

User=

VirtualEthernet=

VirtualEthernetExtra=

Volatile=

WorkingDirectory=

Zone=

PROGRAM CONFIGURATION OPTIONS¶

Directives for configuring the behaviour of the systemd process and other tools through configuration files.

AllowHibernation=

AllowHybridSleep=

AllowSuspend=

AllowSuspendThenHibernate=

Audit=

CPUAffinity=

CapabilityBoundingSet=

Compress=

CrashChangeVT=

CrashReboot=

CrashShell=

CtrlAltDelBurstAction=

DefaultCPUAccounting=

DefaultDeviceTimeoutSec=

DefaultEnvironment=

DefaultIOAccounting=

DefaultIPAccounting=

DefaultLimitAS=

DefaultLimitCORE=

DefaultLimitCPU=

DefaultLimitDATA=

DefaultLimitFSIZE=

DefaultLimitLOCKS=

DefaultLimitMEMLOCK=

DefaultLimitMSGQUEUE=

DefaultLimitNICE=

DefaultLimitNOFILE=

DefaultLimitNPROC=

DefaultLimitRSS=

DefaultLimitRTPRIO=

DefaultLimitRTTIME=

DefaultLimitSIGPENDING=

DefaultLimitSTACK=

DefaultMemoryAccounting=

DefaultMemoryPressureDurationSec=

DefaultMemoryPressureLimit=

DefaultMemoryPressureThresholdSec=

DefaultMemoryPressureWatch=

DefaultOOMPolicy=

DefaultOOMScoreAdjust=

DefaultRestartSec=

DefaultSmackProcessLabel=

DefaultStandardError=

DefaultStandardOutput=

DefaultStartLimitBurst=

DefaultStartLimitIntervalSec=

DefaultTasksAccounting=

DefaultTasksMax=

DefaultTimeoutAbortSec=

DefaultTimeoutStartSec=

DefaultTimeoutStopSec=

DefaultTimerAccuracySec=

DumpCore=

ExternalSizeMax=

ForwardToConsole=

ForwardToKMsg=

ForwardToSyslog=

ForwardToWall=

HandleHibernateKey=

HandleHibernateKeyLongPress=

HandleLidSwitch=

HandleLidSwitchDocked=

HandleLidSwitchExternalPower=

HandlePowerKey=

HandlePowerKeyLongPress=

HandleRebootKey=

HandleRebootKeyLongPress=

HandleSuspendKey=

HandleSuspendKeyLongPress=

HibernateDelaySec=

HibernateKeyIgnoreInhibited=

HibernateMode=

HibernateState=

HoldoffTimeoutSec=

HybridSleepMode=

HybridSleepState=

IdleAction=

IdleActionSec=

InhibitDelayMaxSec=

InhibitorsMax=

JournalSizeMax=

KExecWatchdogSec=

KeepFree=

KillExcludeUsers=

KillOnlyUsers=

KillUserProcesses=

LidSwitchIgnoreInhibited=

LineMax=

LogColor=

LogLevel=

LogLocation=

LogTarget=

LogTime=

ManagerEnvironment=

MaxFileSec=

MaxFileSize=

MaxFiles=

MaxLevelConsole=

MaxLevelKMsg=

MaxLevelStore=

MaxLevelSyslog=

MaxLevelWall=

MaxRetentionSec=

MaxUse=

NAutoVTs=

NUMAMask=

NUMAPolicy=

NetworkTimeoutSec=

NoNewPrivileges=

PowerKeyIgnoreInhibited=

ProcessSizeMax=

RateLimitBurst=

RateLimitIntervalSec=

ReadKMsg=

RebootKeyIgnoreInhibited=

RebootWatchdogSec=

ReloadLimitBurst=

ReloadLimitIntervalSec=

RemoveIPC=

ReserveVT=

RuntimeDirectoryInodesMax=

RuntimeDirectorySize=

RuntimeKeepFree=

RuntimeMaxFileSize=

RuntimeMaxFiles=

RuntimeMaxUse=

RuntimeWatchdogPreGovernor=

RuntimeWatchdogPreSec=

RuntimeWatchdogSec=

Seal=

ServerCertificateFile=

ServerKeyFile=

SessionsMax=

ShowStatus=

SplitMode=

StatusUnitFormat=

StopIdleSessionSec=

Storage=

SuspendEstimationSec=

SuspendKeyIgnoreInhibited=

SuspendMode=

SuspendState=

SwapUsedLimit=

SyncIntervalSec=

SystemCallArchitectures=

SystemKeepFree=

SystemMaxFileSize=

SystemMaxFiles=

SystemMaxUse=