'\" t
.TH "SYSEXT\&.CONF" "5" "" "systemd 259" "sysext.conf"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.\" http://bugs.debian.org/507673
.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.ie \n(.g .ds Aq \(aq
.el       .ds Aq '
.\" -----------------------------------------------------------------
.\" * set default formatting
.\" -----------------------------------------------------------------
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
.ad l
.\" -----------------------------------------------------------------
.\" * MAIN CONTENT STARTS HERE *
.\" -----------------------------------------------------------------
.SH "NAME"
sysext.conf, confext.conf, sysext.conf.d, confext.conf.d \- Configuration files for systemd\-sysext
.SH "SYNOPSIS"
.PP
/etc/systemd/sysext\&.conf
.PP
/etc/systemd/sysext\&.conf\&.d/*\&.conf
.PP
/run/systemd/sysext\&.conf
.PP
/run/systemd/sysext\&.conf\&.d/*\&.conf
.PP
/usr/lib/systemd/sysext\&.conf
.PP
/usr/lib/systemd/sysext\&.conf\&.d/*\&.conf
.PP
/etc/systemd/confext\&.conf
.PP
/etc/systemd/confext\&.conf\&.d/*\&.conf
.PP
/run/systemd/confext\&.conf
.PP
/run/systemd/confext\&.conf\&.d/*\&.conf
.PP
/usr/lib/systemd/confext\&.conf
.PP
/usr/lib/systemd/confext\&.conf\&.d/*\&.conf
.SH "DESCRIPTION"
.PP
These configuration files control the behavior of
\fBsystemd-sysext\fR(8)
and
\fBsystemd-confext\fR(8)\&. They are especially useful when needing to customize the behavior of the respective extension service units\&.
.SH "CONFIGURATION DIRECTORIES AND PRECEDENCE"
.PP
The default configuration is set during compilation, so configuration is only needed when it is necessary to deviate from those defaults\&. The main configuration file is loaded from one of the listed directories in order of priority, only the first file found is used:
/etc/systemd/,
/run/systemd/,
/usr/local/lib/systemd/
\&\s-2\u[1]\d\s+2,
/usr/lib/systemd/\&. The vendor version of the file contains commented out entries showing the defaults as a guide to the administrator\&. Local overrides can also be created by creating drop\-ins, as described below\&. The main configuration file can also be edited for this purpose (or a copy in
/etc/
if it is shipped under
/usr/), however using drop\-ins for local configuration is recommended over modifications to the main configuration file\&.
.PP
In addition to the main configuration file, drop\-in configuration snippets are read from
/usr/lib/systemd/*\&.conf\&.d/,
/usr/local/lib/systemd/*\&.conf\&.d/, and
/etc/systemd/*\&.conf\&.d/\&. Those drop\-ins have higher precedence and override the main configuration file\&. Files in the
*\&.conf\&.d/
configuration subdirectories are sorted by their filename in lexicographic order, regardless of in which of the subdirectories they reside\&. When multiple files specify the same option, for options which accept just a single value, the entry in the file sorted last takes precedence, and for options which accept a list of values, entries are collected as they occur in the sorted files\&.
.PP
When packages need to customize the configuration, they can install drop\-ins under
/usr/\&. Files in
/etc/
are reserved for the local administrator, who may use this logic to override the configuration files installed by vendor packages\&. Drop\-ins have to be used to override package drop\-ins, since the main configuration file has lower precedence\&. It is recommended to prefix all filenames in those subdirectories with a two\-digit number and a dash, to simplify the ordering\&. This also defines a concept of drop\-in priorities to allow OS vendors to ship drop\-ins within a specific range lower than the range used by users\&. This should lower the risk of package drop\-ins overriding accidentally drop\-ins defined by users\&. It is recommended to use the range 10\-40 for drop\-ins in
/usr/
and the range 60\-90 for drop\-ins in
/etc/
and
/run/, to make sure that local and transient drop\-ins take priority over drop\-ins shipped by the OS vendor\&.
.PP
To disable a configuration file supplied by the vendor, the recommended way is to place a symlink to
/dev/null
in the configuration directory in
/etc/, with the same filename as the vendor configuration file\&.
.SH "OPTIONS"
.PP
The following options are understood in both the
"[SysExt]"
and
"[ConfExt]"
sections:
.SS "Section Options"
.PP
\fIMutable=\fR
.RS 4
Set the mutable mode for system extensions\&. Takes one of
"no",
"yes",
"auto",
"import",
"ephemeral", or
"ephemeral\-import"\&. For details about the modes, see the
\fB\-\-mutable=\fR
option in
\fBsystemd-sysext\fR(8)\&. Defaults to
"no"\&.
.sp
Added in version 259\&.
.RE
.PP
\fIImagePolicy=\fR
.RS 4
Set the image policy\&. Takes an image policy string as argument, as per
\fBsystemd.image-policy\fR(7)\&. For details, see the
\fB\-\-image\-policy=\fR
option in
\fBsystemd-sysext\fR(8)\&.
.sp
Added in version 259\&.
.RE
.SH "SEE ALSO"
.PP
\fBsystemd\fR(1), \fBsystemd-sysext\fR(8), \fBsystemd.syntax\fR(7)
.SH "NOTES"
.IP " 1." 4
💣💥🧨💥💥💣 Please note that those configuration files must be available at all times. If
/usr/local/
is a separate partition, it may not be available during early boot, and must not be used for configuration.