diff options
| author | Michael Biebl <biebl@debian.org> | 2019-03-26 23:25:23 +0100 |
|---|---|---|
| committer | Michael Biebl <biebl@debian.org> | 2019-03-26 23:25:23 +0100 |
| commit | 9a6dcbf895f9da01768e64b73cec88c16157d91e (patch) | |
| tree | a359958930d731e9f1b59344642e10754419fe84 /man/NetworkManager.conf.5 | |
| parent | 964ae8cc391520440cf5aa13e2b9cc34850ea6c2 (diff) | |
New upstream version 1.16.0 upstream/1.16.0
Diffstat (limited to 'man/NetworkManager.conf.5')
| -rw-r--r-- | man/NetworkManager.conf.5 | 90 |
1 files changed, 80 insertions, 10 deletions
diff --git a/man/NetworkManager.conf.5 b/man/NetworkManager.conf.5 index 13efa991..63e8dea2 100644 --- a/man/NetworkManager.conf.5 +++ b/man/NetworkManager.conf.5 @@ -2,12 +2,12 @@ .\" Title: NetworkManager.conf .\" Author: .\" Generator: DocBook XSL Stylesheets vsnapshot <http://docbook.sf.net/> -.\" Date: 02/23/2019 +.\" Date: 03/15/2019 .\" Manual: Configuration -.\" Source: NetworkManager 1.14.6 +.\" Source: NetworkManager 1.16.0 .\" Language: English .\" -.TH "NETWORKMANAGER\&.CONF" "5" "" "NetworkManager 1\&.14\&.6" "Configuration" +.TH "NETWORKMANAGER\&.CONF" "5" "" "NetworkManager 1\&.16\&.0" "Configuration" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -121,6 +121,16 @@ plugin is always appended to the end of this list (if it doesn\*(Aqt already app \fImonitor\-connection\-files\fR .RS 4 Whether the configured settings plugin(s) should set up file monitors and immediately pick up changes made to connection files while NetworkManager is running\&. This is disabled by default; NetworkManager will only read the connection files at startup, and when explicitly requested via the ReloadConnections D\-Bus call\&. If this key is set to \*(Aqtrue\*(Aq, then NetworkManager will reload connection files any time they changed\&. Automatic reloading is not advised because there are race conditions involved and it depends on the way how the editor updates the file\&. In some situations, NetworkManager might first delete and add the connection anew, instead of updating the existing one\&. Also, NetworkManager might pick up incomplete settings while the user is still editing the files\&. +.sp +Note that neither this setting nor restarting the NetworkManager daemon is the advised way to reload connection profiles from disk\&. Instead, after modifying the files reload them with +\fBnmcli connection reload\fR +or +\fBnmcli connection load "$FILENAME"\fR\&. Even better, instead of modifying files directly, use NetworkManager tools like +\fBnmcli\fR, +\fBnmtui\fR +or the GUI\&. +.sp +This setting is deprecated and will have no effect in the future\&. .RE .PP \fIauth\-polkit\fR @@ -158,7 +168,7 @@ Specify devices for which NetworkManager shouldn\*(Aqt create default wired conn to apply to all devices\&. .sp When the default wired connection is deleted or saved to a new persistent connection by a plugin, the device is added to a list in the file -/run/NetworkManager/no\-auto\-default\&.state +/var/lib/NetworkManager/no\-auto\-default\&.state to prevent creating the default connection for that device again\&. .sp See @@ -203,7 +213,7 @@ for the syntax how to specify a device\&. \fIconfigure\-and\-quit\fR .RS 4 When set to \*(Aqtrue\*(Aq, NetworkManager quits after performing initial network configuration but spawns small helpers to preserve DHCP leases and IPv6 addresses\&. This is useful in environments where network setup is more or less static or it is desirable to save process time but still handle some dynamic configurations\&. When this option is -true, network configuration for WiFi, WWAN, Bluetooth, ADSL, and PPPoE interfaces cannot be preserved due to their use of external services, and these devices will be deconfigured when NetworkManager quits even though other interface\*(Aqs configuration may be preserved\&. Also, to preserve DHCP addresses the \*(Aqdhcp\*(Aq option must be set to \*(Aqinternal\*(Aq\&. The default value of the \*(Aqconfigure\-and\-quit\*(Aq option is \*(Aqfalse\*(Aq, meaning that NetworkManager will continue running after initial network configuration and continue responding to system and hardware events, D\-Bus requests, and user commands\&. +true, network configuration for Wi\-Fi, WWAN, Bluetooth, ADSL, and PPPoE interfaces cannot be preserved due to their use of external services, and these devices will be deconfigured when NetworkManager quits even though other interface\*(Aqs configuration may be preserved\&. Also, to preserve DHCP addresses the \*(Aqdhcp\*(Aq option must be set to \*(Aqinternal\*(Aq\&. The default value of the \*(Aqconfigure\-and\-quit\*(Aq option is \*(Aqfalse\*(Aq, meaning that NetworkManager will continue running after initial network configuration and continue responding to system and hardware events, D\-Bus requests, and user commands\&. .RE .PP \fIhostname\-mode\fR @@ -219,7 +229,9 @@ none: NetworkManager will not manage the transient hostname and will never set i .PP \fIdns\fR .RS 4 -Set the DNS (resolv\&.conf) processing mode\&. If the key is unspecified, +Set the DNS processing mode\&. +.sp +If the key is unspecified, default is used, unless /etc/resolv\&.conf @@ -240,14 +252,29 @@ dnsmasq: NetworkManager will run dnsmasq as a local caching nameserver, using a resolv\&.conf to point to the local nameserver\&. It is possible to pass custom options to the dnsmasq instance by adding them to files in the "/etc/NetworkManager/dnsmasq\&.d/" directory\&. Note that when multiple upstream servers are available, dnsmasq will initially contact them in parallel and then use the fastest to respond, probing again other servers after some time\&. This behavior can be modified passing the \*(Aqall\-servers\*(Aq or \*(Aqstrict\-order\*(Aq options to dnsmasq (see the manual page for more details)\&. .sp +systemd\-resolved: NetworkManager will push the DNS configuration to systemd\-resolved +.sp unbound: NetworkManager will talk to unbound and dnssec\-triggerd, providing a "split DNS" configuration with DNSSEC support\&. /etc/resolv\&.conf will be managed by dnssec\-trigger daemon\&. .sp -systemd\-resolved: NetworkManager will push the DNS configuration to systemd\-resolved -.sp none: NetworkManager will not modify resolv\&.conf\&. This implies rc\-manager\ \&unmanaged +.sp +Note that the plugins +dnsmasq, +systemd\-resolved +and +unbound +are caching local nameservers\&. Hence, when NetworkManager writes +/var/run/NetworkManager/resolv\&.conf +and +/etc/resolv\&.conf +(according to +rc\-manager +setting below), the name server there will be localhost only\&. NetworkManager also writes a file +/var/run/NetworkManager/no\-stub\-resolv\&.conf +that contains the original name servers pushed to the DNS plugin\&. .RE .PP \fIrc\-manager\fR @@ -281,6 +308,26 @@ none: deprecated alias for symlink\&. .RE .PP +\fIsystemd\-resolved\fR +.RS 4 +Send the connection DNS configuration to +systemd\-resolved\&. Defaults to "true"\&. +.sp +Note that this setting is complementary to the +\fIdns\fR +setting\&. You can keep this enabled while using +\fIdns\fR +set to another DNS plugin alongside +systemd\-resolved, or +\fIdns\fR +set to +systemd\-resolved +to configure the system resolver to use +systemd\-resolved\&. +.sp +If systemd\-resolved is enabled, the connectivity check resolves the hostname per\-device\&. +.RE +.PP \fIdebug\fR .RS 4 Comma separated list of options to aid debugging\&. This value will be combined with the environment variable @@ -583,6 +630,8 @@ ipv6\&.ip6\-privacy=0 Not all properties can be overwritten, only the following properties are supported to have their default values configured (see \fBnm-settings\fR(5) for details)\&. A default value is only consulted if the corresponding per\-connection value explicitly allows for that\&. + + .PP \fI802\-1x\&.auth\-timeout\fR .RS 4 @@ -662,6 +711,11 @@ If configured explicitly to 0, the MTU is not reconfigured during device activat If left unspecified, the default value for the interface type is used\&. .RE .PP +\fIipv4\&.dns\-priority\fR +.RS 4 +If unspecified or zero, use 50 for VPN profiles and 100 for other profiles\&. +.RE +.PP \fIipv4\&.route\-metric\fR .RS 4 .RE @@ -681,6 +735,11 @@ If left unspecified, it defaults to "lease"\&. If left unspecified, the default value for the interface type is used\&. .RE .PP +\fIipv6\&.dns\-priority\fR +.RS 4 +If unspecified or zero, use 50 for VPN profiles and 100 for other profiles\&. +.RE +.PP \fIipv6\&.ip6\-privacy\fR .RS 4 If @@ -745,6 +804,11 @@ If left unspecified, the default value "optional" will be used\&. \fIwifi\&.wake\-on\-wlan\fR .RS 4 .RE +.PP +\fIwireguard\&.mtu\fR +.RS 4 +.RE + .SS "Sections" .PP You can configure multiple @@ -902,6 +966,12 @@ for details\&. .PP This section controls NetworkManager\*(Aqs optional connectivity checking functionality\&. This allows NetworkManager to detect whether or not the system can actually access the internet or whether it is behind a captive portal\&. .PP +Connectivity checking serves two purposes\&. For one, it exposes a connectivity state on D\-Bus, which other applications may use\&. For example, Gnome\*(Aqs portal helper uses this as signal to show a captive portal login page\&. The other use is that default\-route of devices without global connectivity get a penalty of +20000 to the route\-metric\&. This has the purpose to give a better default\-route to devices that have global connectivity\&. For example, when being connected to WWAN and to a Wi\-Fi network which is behind a captive portal, WWAN still gets preferred until login\&. +.PP +Note that your distribution might set +/proc/sys/net/ipv4/conf/*/rp_filter +to strict filtering\&. That works badly with per\-device connectivity checking, which uses SO_BINDDEVICE to send requests on all devices\&. A strict rp_filter setting will reject any response and the connectivity check on all but the best route will fail\&. +.PP .PP \fIuri\fR .RS 4 @@ -917,7 +987,7 @@ Specified in seconds; controls how often connectivity is checked when a network .PP \fIresponse\fR .RS 4 -If set controls what body content NetworkManager checks for when requesting the URI for connectivity checking\&. If missing, defaults to "NetworkManager is online" +If set, controls what body content NetworkManager checks for when requesting the URI for connectivity checking\&. Note that this only compares that the HTTP response starts with the specifid text, it does not compare the exact string\&. This behavior might change in the future, so avoid relying on it\&. If missing, the response defaults to "NetworkManager is online"\&. If set to empty, the HTTP server is expected to answer with status code 204 or send no data\&. .RE .SH "GLOBAL\-DNS SECTION" .PP @@ -931,7 +1001,7 @@ A list of search domains to be used during hostname lookup\&. .PP \fIoptions\fR .RS 4 -A list of of options to be passed to the hostname resolver\&. +A list of options to be passed to the hostname resolver\&. .RE .SH "GLOBAL\-DNS\-DOMAIN SECTIONS" .PP |