OS Manuals

/usr/bin/systemd-dissect

systemd container tools

From systemd-container 262.2-r1 (os), captured 2026-11-05 by running systemd-dissect --help (exit 0). permalink

> systemd-dissect [OPTION…] IMAGE
> systemd-dissect [OPTION…] --mount IMAGE PATH
> systemd-dissect [OPTION…] --umount PATH
> systemd-dissect [OPTION…] --attach IMAGE
> systemd-dissect [OPTION…] --detach PATH
> systemd-dissect [OPTION…] --list IMAGE
> systemd-dissect [OPTION…] --mtree IMAGE
> systemd-dissect [OPTION…] --with IMAGE [COMMAND…]
> systemd-dissect [OPTION…] --copy-from IMAGE PATH [TARGET]
> systemd-dissect [OPTION…] --copy-to IMAGE [SOURCE] PATH
> systemd-dissect [OPTION…] --make-archive IMAGE [TARGET]
> systemd-dissect [OPTION…] --discover
> systemd-dissect [OPTION…] --validate IMAGE
> systemd-dissect [OPTION…] --shift IMAGE UIDBASE

Dissect a Discoverable Disk Image (DDI).

Options:
     --no-pager            Do not start a pager
     --no-legend           Do not show headers and footers
     --mkdir               Make mount directory before mounting, if missing
     --rmdir               Remove mount directory after unmounting
  -r --read-only           Mount read-only
     --discard=MODE        Choose discard mode (disabled, loop, all, crypto)
     --in-memory           Copy image into memory
     --root-hash=HASH      Specify root hash for verity
     --usr-hash=HASH       Same, but for the usr partition
     --root-hash-sig=SIG   Specify signature of root hash for verity as DER-encoded PKCS7, either as
                           a path to a file or as an ASCII base64-encoded string prefixed by
                           'base64:'
     --usr-hash-sig=SIG    Same, but for the usr partition
     --verity-data=PATH    Specify data file with hash tree for verity if it is not embedded in
                           IMAGE
     --fsck=BOOL           Run fsck before mounting
     --growfs=BOOL         Grow file system to partition size, if marked
     --json=FORMAT         Generate JSON output (pretty, short, or off)
     --loop-ref=NAME       Set reference string for loopback device
     --loop-ref-auto       Derive reference string from image file name
     --image-policy=POLICY Specify image dissection policy
     --mtree-hash=BOOL     Whether to include SHA256 hash in the mtree output
     --system              Discover system images
     --user                Discover user images
     --all                 Show hidden images too
  -q --quiet               Suppress output of chosen loopback block device
     --image-filter=FILTER Specify image dissection filter
     --copy-ownership=BOOL Whether to copy ownership when copying files

Commands:
  -h --help                Show this help
     --version             Show package version
  -m --mount               Mount the image to the specified directory
  -M                       Shortcut for --mount --mkdir
  -u --umount              Unmount the image from the specified directory
  -U                       Shortcut for --umount --rmdir
     --attach              Attach the disk image to a loopback block device
     --detach              Detach a loopback block device again
  -l --list                List all the files and directories of the specified OS image
     --mtree               Show BSD mtree manifest of OS image
     --with                Mount, run command, unmount
  -x --copy-from           Copy files from image to host
  -a --copy-to             Copy files from host to image
     --make-archive        Convert the DDI to an archive file
     --discover            Discover DDIs in well known directories
     --validate            Validate image and image policy
     --shift               Shift UID range to selected base

See the systemd-dissect(1) man page for details.
Options (39)
OptionDescriptionSource
--no-pagerDo not start a pagerhelp
--no-legendDo not show headers and footershelp
--mkdirMake mount directory before mounting, if missinghelp
--rmdirRemove mount directory after unmountinghelp
-r --read-onlyMount read-onlyhelp
--discard MODEChoose discard mode (disabled, loop, all, crypto)help
--in-memoryCopy image into memoryhelp
--root-hash HASHSpecify root hash for verityhelp
--usr-hash HASHSame, but for the usr partitionhelp
--root-hash-sig SIGSpecify signature of root hash for verity as DER-encoded PKCS7, either as a path to a file or as an ASCII base64-encoded string prefixed by 'base64:'help
--usr-hash-sig SIGSame, but for the usr partitionhelp
--verity-data PATHSpecify data file with hash tree for verity if it is not embedded in IMAGEhelp
--fsck BOOLRun fsck before mountinghelp
--growfs BOOLGrow file system to partition size, if markedhelp
--json FORMATGenerate JSON output (pretty, short, or off)help
--loop-ref NAMESet reference string for loopback devicehelp
--loop-ref-autoDerive reference string from image file namehelp
--mtree-hash BOOLWhether to include SHA256 hash in the mtree outputhelp
--systemDiscover system imageshelp
--userDiscover user imageshelp
--allShow hidden images toohelp
-q --quietSuppress output of chosen loopback block devicehelp
-h --helpShow this helphelp
--versionShow package versionhelp
-m --mountMount the image to the specified directoryhelp
-MShortcut for --mount --mkdirhelp
-u --umountUnmount the image from the specified directoryhelp
-UShortcut for --umount --rmdirhelp
--attachAttach the disk image to a loopback block devicehelp
--detachDetach a loopback block device againhelp
-l --listList all the files and directories of the specified OS imagehelp
--mtreeShow BSD mtree manifest of OS imagehelp
--withMount, run command, unmounthelp
-x --copy-fromCopy files from image to hosthelp
-a --copy-toCopy files from host to imagehelp
--make-archiveConvert the DDI to an archive filehelp
--discoverDiscover DDIs in well known directorieshelp
--validateValidate image and image policyhelp
--shiftShift UID range to selected basehelp

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.