X-Git-Url: https://www.tinc-vpn.org/git/browse?a=blobdiff_plain;f=doc%2Ftinc.texi;h=987c36ea83cc5bd10cd5819d72a916e6d9fc8ca0;hb=7c359313aca273319f94fe18121831ab4b62a4b4;hp=bf6d78b448867f40a94e88e0312273034e366b37;hpb=7c223917cb3d478fc3f5b23ee5602925f083e4d4;p=tinc diff --git a/doc/tinc.texi b/doc/tinc.texi index bf6d78b4..987c36ea 100644 --- a/doc/tinc.texi +++ b/doc/tinc.texi @@ -15,7 +15,7 @@ This is the info manual for @value{PACKAGE} version @value{VERSION}, a Virtual Private Network daemon. -Copyright @copyright{} 1998-2016 Ivo Timmermans, +Copyright @copyright{} 1998-2017 Ivo Timmermans, Guus Sliepen and Wessel Dankers . @@ -43,7 +43,7 @@ permission notice identical to this one. @vskip 0pt plus 1filll This is the info manual for @value{PACKAGE} version @value{VERSION}, a Virtual Private Network daemon. -Copyright @copyright{} 1998-2016 Ivo Timmermans, +Copyright @copyright{} 1998-2017 Ivo Timmermans, Guus Sliepen and Wessel Dankers . @@ -778,7 +778,7 @@ It is not always possible to do this however, and firewalls might also prevent d In that case, VPN packets between A and C will be forwarded by B. In effect, all nodes in the VPN will be able to talk to each other, as long as -their is a path of meta-connections between them, and whenever possible, two +there is a path of meta-connections between them, and whenever possible, two nodes will communicate with each other directly. @@ -2012,10 +2012,14 @@ located (@file{@value{sysconfdir}/tinc/@var{netname}/} as determined by The chroot is performed after all the initialization is done, after writing pid files and opening network sockets. -Note that this option alone does not do any good without -U/--user, below. +This option is best used in combination with the -U/--user option described below. -Note also that tinc can't run scripts anymore (such as tinc-down or host-up), -unless it's setup to be runnable inside chroot environment. +You will need to ensure the chroot environment contains all the files necessary +for tinc to run correctly. +Most importantly, for tinc to be able to resolve hostnames inside the chroot environment, +you must copy @file{/etc/resolv.conf} into the chroot directory. +If you want to be able to run scripts other than @file{tinc-up} in the chroot, +you must ensure the appropriate shell is also installed in the chroot, along with all its dependencies. This option is not supported on all platforms. @item -U, --user=@var{user}