The following options are understood:
-q, --quiet
Suppresses additional informational output while running.
-p PROFILE, --profile=PROFILE
When attaching an image, select the profile to use. By
default the "default" profile is used. For details about
profiles, see below.
--copy=
When attaching an image, select whether to prefer copying or
symlinking of files installed into the host system. Takes one
of "copy" (to prefer copying of files), "symlink" (to prefer
creation of symbolic links) or "auto" for an intermediary
mode where security profile drop-ins are symlinked while unit
files are copied. Note that this option expresses a
preference only, in cases where symbolic links cannot be
created — for example when the image operated on is a raw
disk image, and hence not directly referentiable from the
host file system — copying of files is used unconditionally.
--runtime
When specified the unit and drop-in files are placed in
/run/systemd/system.attached/ instead of
/etc/systemd/system.attached/. Images attached with this
option set hence remain attached only until the next reboot,
while they are normally attached persistently.
--no-reload
Don't reload the service manager after attaching or detaching
a portable service image. Normally the service manager is
reloaded to ensure it is aware of added or removed unit
files.
--cat
When inspecting portable service images, show the
(unprocessed) contents of the metadata files pulled from the
image, instead of brief summaries. Specifically, this will
show the os-release(5) and unit file contents of the image.
--enable
Immediately enable/disable the portable service after
attaching/detaching.
--now
Immediately start/stop/restart the portable service after
attaching/before detaching/after upgrading.
--no-block
Don't block waiting for attach --now to complete.
--extension=PATH
Add an additional image PATH as an overlay on top of IMAGE
when attaching/detaching. This argument can be specified
multiple times, in which case the order in which images are
laid down follows the rules specified in systemd.exec(5) for
the ExtensionImages= directive. The image(s) must contain an
extension-release file with metadata that matches what is
defined in the os-release of IMAGE. See: os-release(5).
Note that the same extensions have to be specified, in the
same order, when attaching and detaching.
-H, --host=
Execute the operation remotely. Specify a hostname, or a
username and hostname separated by "@", to connect to. The
hostname may optionally be suffixed by a port ssh is
listening on, separated by ":", and then a container name,
separated by "/", which connects directly to a specific
container on the specified host. This will use SSH to talk to
the remote machine manager instance. Container names may be
enumerated with machinectl -H HOST. Put IPv6 addresses in
brackets.
-M, --machine=
Execute operation on a local container. Specify a container
name to connect to, optionally prefixed by a user name to
connect as and a separating "@" character. If the special
string ".host" is used in place of the container name, a
connection to the local system is made (which is useful to
connect to a specific user's user bus: "--user
--machine=lennart@.host"). If the "@" syntax is not used, the
connection is made as root user. If the "@" syntax is used
either the left hand side or the right hand side may be
omitted (but not both) in which case the local user name and
".host" are implied.
--no-pager
Do not pipe output into a pager.
--no-legend
Do not print the legend, i.e. column headers and the footer
with hints.
--no-ask-password
Do not query the user for authentication for privileged
operations.
-h, --help
Print a short help text and exit.
--version
Print a short version string and exit.
