diff --git a/STACK.md b/STACK.md index 0652d10..7c80671 100644 --- a/STACK.md +++ b/STACK.md @@ -287,7 +287,7 @@ HelloTimeSec=2 MaxAgeSec=20 ``` -#### 📄 /usr/lib/systemd/system/10-tenant-bridge.network: +#### 📄 /usr/lib/systemd/network/10-tenant-bridge.network: ```ini [Match] Name=br-tenant-%i @@ -309,7 +309,7 @@ EmitRouter=yes ### 2️⃣ WireGuard VPN Template -#### 📄 /usr/lib/systemd/system/20-wg-tenant.netdev: +#### 📄 /usr/lib/systemd/network/20-wg-tenant.netdev: ```ini [NetDev] Name=wg-tenant-%i @@ -326,7 +326,7 @@ Endpoint=${PEER_ENDPOINT}:51820 PersistentKeepalive=25 ``` -#### 📄 /usr/lib/systemd/system/20-wg-tenant.network: +#### 📄 /usr/lib/systemd/network/20-wg-tenant.network: ```ini [Match] Name=wg-tenant-%i @@ -341,7 +341,7 @@ Scope=link ### 3️⃣ VXLAN Overlay Template -#### 📄 /usr/lib/systemd/system/30-vxlan-tenant.netdev: +#### 📄 /usr/lib/systemd/network/30-vxlan-tenant.netdev: ```ini [NetDev] Name=vxlan-tenant-%i @@ -354,7 +354,7 @@ DestinationPort=4789 MacLearning=yes ``` -#### 📄 /usr/lib/systemd/system/30-vxlan-tenant.network: +#### 📄 /usr/lib/systemd/network/30-vxlan-tenant.network: ```ini [Match] Name=vxlan-tenant-%i @@ -369,7 +369,7 @@ EgressUntagged=1 ### 4️⃣ VLAN Segmentation Template -#### 📄 /usr/lib/systemd/system/40-vlan-tenant.netdev: +#### 📄 /usr/lib/systemd/network/40-vlan-tenant.netdev: ```ini [NetDev] Name=vlan-tenant-%i @@ -379,7 +379,7 @@ Kind=vlan Id=%i ``` -#### 📄 /usr/lib/systemd/system/40-vlan-tenant.network: +#### 📄 /usr/lib/systemd/network/40-vlan-tenant.network: ```ini [Match] Name=vlan-tenant-%i @@ -597,17 +597,17 @@ tenant@tenant123.service Each template ensures compliance with the Linux File System Hierarchy specification: -1. **Root Filesystem Requirements: +1. **Root Filesystem Requirements**: - `/etc/os-release` or `/usr/lib/os-release` present - Proper symlink from `/usr/lib/os-release` to `/etc/os-release` - No files in `/` root directory itself -2. **Extension Image Requirements: +2. **Extension Image Requirements:** - sysext: Only `/usr/` and `/opt/` directories - confext: Only `/etc/` directory - Proper `extension-release` files in correct locations -3. **Verification Structure: +3. **Verification Structure**: - VOA hierarchy at `/etc/voa/` and `/usr/share/voa/` - Proper certificate fingerprint naming - ASCII-armored OpenPGP files @@ -641,7 +641,7 @@ validate_rootfs() { ## 🎯 Conclusion -This template system provides: +This template system provides the following capabilities: 1. **Standardization**: All tenants use consistent, validated templates 2. **Compliance**: Full adherence to Linux Userspace API specifications