Usage: /usr/bin/pasta.avx2 [OPTION]... [COMMAND] [ARGS]... /usr/bin/pasta.avx2 [OPTION]... PID /usr/bin/pasta.avx2 [OPTION]... --netns [PATH|NAME] Without PID or --netns, run the given command or a default shell in a new network and user namespace, and connect it via pasta. -d, --debug Be verbose --trace Be extra verbose, implies --debug --stats DELAY Display events statistics minimum DELAY seconds between updates -q, --quiet Don't print informational messages -f, --foreground Don't run in background default: run in background -l, --log-file PATH Log (only) to given file --log-size BYTES Maximum size of log file default: 1 MiB --runas UID|UID:GID Run as given UID, GID, which can be numeric, or login and group names default: drop to user "nobody" -c, --conf-path PATH Configuration socket path -h, --help Display this help message and exit --version Show version and exit -I, --ns-ifname NAME namespace interface name default: same interface name as external one -F, --fd FD Use FD as pre-opened connected socket -p, --pcap FILE Log tap-facing traffic to pcap file -P, --pid FILE Write own PID to the given file -m, --mtu MTU Assign MTU via DHCP/NDP a zero value disables assignment default: 65520: maximum 802.3 MTU minus 802.3 header length, rounded to 32 bits (IPv4 words) -a, --address ADDR Assign IPv4 or IPv6 address ADDR[/PREFIXLEN] can be specified zero to two times (for IPv4 and IPv6) default: use addresses from interface with default route -n, --netmask MASK Assign IPv4 MASK, dot-decimal or bits default: netmask from matching address on the host -M, --mac-addr ADDR Use source MAC address ADDR default: 9a:55:9a:55:9a:55 (locally administered) -g, --gateway ADDR Pass IPv4 or IPv6 address as gateway default: gateway from interface with default route -i, --interface NAME Interface for addresses and routes default: from --outbound-if4 and --outbound-if6, if any otherwise interface with first default route -o, --outbound ADDR Bind to address as outbound source can be specified zero to two times (for IPv4 and IPv6) default: use source address from routing tables --outbound-if4 NAME Bind to outbound interface for IPv4 default: use interface from default route --outbound-if6 NAME Bind to outbound interface for IPv6 default: use interface from default route -D, --dns ADDR Use IPv4 or IPv6 address as DNS can be specified multiple times a single, empty option disables DNS information default: don't use any addresses -S, --search LIST Space-separated list, search domains a single, empty option disables the DNS search list -H, --hostname NAME Hostname to configure client with --fqdn NAME FQDN to configure client with default: don't use any search list --dhcp-dns Pass DNS list via DHCP/DHCPv6/NDP --dhcp-search Pass list via DHCP/DHCPv6/NDP --map-host-loopback ADDR Translate ADDR to refer to host can be specified zero to two times (for IPv4 and IPv6) default: gateway address --map-guest-addr ADDR Translate ADDR to guest's address can be specified zero to two times (for IPv4 and IPv6) default: none --dns-forward ADDR Forward DNS queries sent to ADDR can be specified zero to two times (for IPv4 and IPv6) default: don't forward DNS queries --dns-host ADDR Host nameserver to direct queries to can be specified zero to two times (for IPv4 and IPv6) default: first nameserver from host's /etc/resolv.conf --no-tcp Disable TCP protocol handler --no-udp Disable UDP protocol handler --no-icmp Disable ICMP/ICMPv6 protocol handler --no-dhcp Disable DHCP server --no-ndp Disable NDP responses --no-dhcpv6 Disable DHCPv6 server --no-ra Disable router advertisements --freebind Bind to any address for forwarding --no-map-gw Don't map gateway address to host --chroot-fallback Use chroot() if pivot_root() fails -4, --ipv4-only Enable IPv4 operation only -6, --ipv6-only Enable IPv6 operation only -t, --tcp-ports SPEC TCP port forwarding to namespace can be specified multiple times SPEC can be: 'none': don't forward any ports [ADDR[%IFACE]/]PORTS: forward specific ports PORTS is a comma-separated list of ports or port ranges. 'all' indicates all unbound non-ephemeral ports. Ranges can be reduced by excluding ports or ranges prefixed by '~'. The 'auto' keyword may be given to only forward ports which are bound in the target namespace Examples: -t all Forward all ports -t ::1/all Forward all ports from local address ::1 -t 22 Forward local port 22 to 22 on namespace -t 22:23 Forward local port 22 to 23 on namespace -t 22,25 Forward ports 22, 25 to ports 22, 25 -t 22-80 Forward ports 22 to 80 -t 22-80:32-90 Forward ports 22 to 80 to corresponding port numbers plus 10 -t 192.0.2.1/5 Bind port 5 of 192.0.2.1 to namespace -t 5-25,~10-20 Forward ports 5 to 9, and 21 to 25 -t ~25 Forward all ports except for 25 -t auto Forward all ports bound in namespace -t ::1/auto Forward ports from ::1 if they are bound in the namespace -t 80-82,auto Forward ports 80-82 if they are bound in the namespace default: auto -u, --udp-ports SPEC UDP port forwarding to namespace SPEC is as described for TCP above default: auto -T, --tcp-ns SPEC TCP port forwarding to init namespace SPEC is as described above default: auto -U, --udp-ns SPEC UDP port forwarding to init namespace SPEC is as described above default: auto --host-lo-to-ns-lo Translate host-loopback forwards to namespace loopback --userns NSPATH Target user namespace to join --netns PATH|NAME Target network namespace to join --netns-only Don't join existing user namespace implied if PATH or NAME are given without --userns --no-netns-quit Don't quit if filesystem-bound target network namespace is deleted --no-pidns Don't spawn command in a new PID namespace --config-net Configure tap interface in namespace --no-copy-routes DEPRECATED: Don't copy all routes to namespace --no-copy-addrs DEPRECATED: Don't copy all addresses to namespace --ns-mac-addr ADDR Set MAC address on tap interface --no-splice Disable inbound socket splicing --splice-only Only enable loopback forwarding