diff options
Diffstat (limited to 'po/de/man1/ukify.1.po')
| -rw-r--r-- | po/de/man1/ukify.1.po | 341 |
1 files changed, 293 insertions, 48 deletions
diff --git a/po/de/man1/ukify.1.po b/po/de/man1/ukify.1.po index ab7db6f9..914c20ee 100644 --- a/po/de/man1/ukify.1.po +++ b/po/de/man1/ukify.1.po @@ -4,9 +4,9 @@ # Helge Kreutzmann <debian@helgefjell.de>, 2023,2024. msgid "" msgstr "" -"Project-Id-Version: manpages-l10n 4.21.0\n" -"POT-Creation-Date: 2024-03-01 17:12+0100\n" -"PO-Revision-Date: 2024-01-27 06:18+0100\n" +"Project-Id-Version: manpages-l10n 4.22.0\n" +"POT-Creation-Date: 2024-06-01 06:32+0200\n" +"PO-Revision-Date: 2024-06-01 10:32+0200\n" "Last-Translator: Helge Kreutzmann <debian@helgefjell.de>\n" "Language-Team: German <debian-l10n-german@lists.debian.org>\n" "Language: de\n" @@ -23,7 +23,7 @@ msgid "UKIFY" msgstr "UKIFY" #. type: TH -#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: archlinux fedora-40 mageia-cauldron opensuse-tumbleweed #, no-wrap msgid "systemd 255" msgstr "systemd 255" @@ -64,6 +64,7 @@ msgstr "ÜBERSICHT" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "B<ukify> [OPTIONS...] build" msgstr "B<ukify> [OPTIONEN…] build" @@ -75,6 +76,7 @@ msgstr "B<ukify> [OPTIONEN…] genkey" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "B<ukify> [OPTIONS...] inspect FILE..." msgstr "B<ukify> [OPTIONEN…] inspect DATEI…" @@ -138,8 +140,7 @@ msgstr "" "angegeben werden\\&." #. type: Plain text -#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide -#: mageia-cauldron opensuse-tumbleweed +#: archlinux debian-bookworm fedora-40 mageia-cauldron opensuse-tumbleweed msgid "" "Additional sections will be inserted into the UKI, either automatically or " "only if a specific option is provided\\&. See the discussions of I<Cmdline=>/" @@ -184,8 +185,7 @@ msgstr "" "B<systemd-measure>(1)\\&." #. type: Plain text -#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide -#: mageia-cauldron opensuse-tumbleweed +#: archlinux debian-bookworm fedora-40 mageia-cauldron opensuse-tumbleweed msgid "" "The calculation of PCR values is done for specific boot phase paths\\&. " "Those can be specified with the I<Phases=>/B<--phases=> option\\&. If not " @@ -233,6 +233,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "If the stub and/or the kernel contain \"\\&.sbat\" sections they will be " "merged in the UKI so that revocation updates affecting either are considered " @@ -281,12 +282,14 @@ msgstr "Die Ausgabedatei darf nicht existieren\\&." #. type: SS #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed #, no-wrap msgid "inspect" msgstr "inspect" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "Display information about the sections in a given binary or binaries\\&. If " "B<--all> is given, all sections are shown\\&. Otherwise, if B<--section=> " @@ -306,6 +309,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Also see the description of B<-j>/B<--json=> and B<--section=>\\&." msgstr "Siehe auch die Beschreibung von B<-j>/B<--json=> und B<--section=>\\&." @@ -342,7 +346,7 @@ msgstr "" "eine Einstellung anders verhält, ist dies nachfolgend beschrieben\\&." #. type: Plain text -#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: archlinux fedora-40 mageia-cauldron opensuse-tumbleweed msgid "" "If no config file is provided via the option B<--config=>I<PATH>, B<ukify> " "will try to look for a default configuration file in the following paths in " @@ -382,6 +386,7 @@ msgstr "Die folgenden Optionen und Einstellungen werden verstanden:" #. type: SS #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed #, no-wrap msgid "Command line-only options" msgstr "Reine Befehlszeilenoptionen" @@ -394,6 +399,7 @@ msgstr "B<--config=>I<PFAD>" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "Load configuration from the given config file\\&. In general, settings " "specified in the config file have lower precedence than the settings " @@ -410,6 +416,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 254\\&." msgstr "Hinzugefügt in Version 254\\&." @@ -431,11 +438,12 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 253\\&." msgstr "Hinzugefügt in Version 253\\&." #. type: Plain text -#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: archlinux fedora-40 mageia-cauldron opensuse-tumbleweed msgid "" "B<--section=>I<NAME>B<:>I<TEXT>B<|>I<@PATH>, B<--section=>I<NAME>B<:>B<text|" "binary>B<[@>I<PATH>]" @@ -445,6 +453,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "For all verbs except B<inspect>, the first syntax is used\\&. Specify an " "arbitrary additional section \"I<NAME>\"\\&. The argument may be a literal " @@ -462,6 +471,7 @@ msgstr "" # FIXME last words: to the file named I<PATH> or to a file in the I<PATH>? #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "For the B<inspect> verb, the second syntax is used\\&. The section I<NAME> " "will be inspected (if found)\\&. If the second argument is \"text\", the " @@ -476,6 +486,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "Note that the name is used as-is, and if the section name should start with " "a dot, it must be included in I<NAME>\\&." @@ -530,6 +541,7 @@ msgstr "B<--summary>" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "Print a summary of loaded config and exit\\&. This is useful to check how " "the options from the configuration file and the command line are combined\\&." @@ -540,26 +552,31 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "B<--all>" msgstr "B<--all>" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Print all sections (with B<inspect> verb)\\&." msgstr "Gibt (mit dem Unterbefehl B<inspect>) alle Abschnitte aus\\&." #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 255\\&." msgstr "Hinzugefügt in Version 255\\&." #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "B<--json>" msgstr "B<--json>" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Generate JSON output (with B<inspect> verb)\\&." msgstr "Erstellt (mit dem Unterbefehl B<inspect>) JSON-Ausgabe\\&." @@ -939,27 +956,31 @@ msgstr "" msgid "I<SBAT=>I<TEXT>I<|>I<@PATH>, B<--sbat=>I<TEXT>B<|>I<@PATH>" msgstr "I<SBAT=>I<TEXT>I<|>I<@PFAD>, B<--sbat=>I<TEXT>B<|>I<@PFAD>" +# FIXME Why is this a hard coded link to a man page? Should be B<systemd-stub>(1) instead +# FIXME Check for link to German version of man page? #. type: Plain text -#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: archlinux debian-unstable fedora-rawhide mageia-cauldron opensuse-tumbleweed msgid "" "SBAT metadata associated with the UKI or addon\\&. SBAT policies are useful " "to revoke whole groups of UKIs or addons with a single, static policy update " "that does not take space in DBX/MOKX\\&. If not specified manually, a " -"default metadata entry consisting of \"uki,1,UKI,uki,1,https://www\\&." -"freedesktop\\&.org/software/systemd/man/systemd-stub\\&.html\" will be used, " -"to ensure it is always possible to revoke UKIs and addons\\&. For more " -"information on SBAT see \\m[blue]B<Shim " -"documentation>\\m[]\\&\\s-2\\u[2]\\d\\s+2\\&." +"default metadata entry consisting of \"uki,1,UKI,uki,1,https://uapi-group\\&." +"org/specifications/specs/unified_kernel_image/\" for UKIs and \"uki-addon,1," +"UKI Addon,addon,1,https://www\\&.freedesktop\\&.org/software/systemd/man/" +"latest/systemd-stub\\&.html\" for addons will be used, to ensure it is " +"always possible to revoke them\\&. For more information on SBAT see " +"\\m[blue]B<Shim documentation>\\m[]\\&\\s-2\\u[2]\\d\\s+2\\&." msgstr "" "Dem UKI oder der Ergänzung zugeordnete SBAT-Metadaten\\&. SBAT-Richtlinien " "sind zum Widerruf von Gruppen von UKIs oder Ergänzungen mit einer einzelnen, " "statischen Richtlinienaktualisierung nützlich, die keinen Platz in DBX/MOKX " "belegt\\&. Falls nicht händisch angegeben, wird ein Standardmetadateneintrag " -"bestehend aus »uki,1,UKI,uki,1,https://www\\&.freedesktop\\&.org/software/" -"systemd/man/systemd-stub\\&.html« verwandt, um sicherzustellen, dass es " -"immer möglich ist, UKIs und Ergänzungen zu widerrufen\\&. Für weitere " -"Informationen über SBAT siehe die \\m[blue]B<Shim-" -"Dokumentation>\\m[]\\&\\s-2\\u[2]\\d\\s+2\\&." +"bestehend aus »uki,1,UKI,uki,1,https://uapi-group\\&.org/specifications/" +"specs/unified_kernel_image/\" für UKIs und \"uki-addon,1,UKI Addon,addon,1," +"https://www\\&.freedesktop\\&.org/software/systemd/man/latest/systemd-" +"stub\\&.html\" für Ergänzungen verwandt, um sicherzustellen, dass es immer " +"möglich ist, sie zu widerrufen\\&. Für weitere Informationen über SBAT siehe " +"die \\m[blue]B<Shim-Dokumentation>\\m[]\\&\\s-2\\u[2]\\d\\s+2\\&." #. type: SS #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide @@ -970,6 +991,7 @@ msgstr "[PCRSignature:I<NAME>R<] Abschnitt>" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "In the config file, those options are grouped by section\\&. On the command " "line, they must be specified in the same order\\&. The sections specified in " @@ -988,6 +1010,7 @@ msgstr "I<PCRPrivateKey=>I<PFAD>, B<--pcr-private-key=>I<PFAD>" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "A private key to use for signing PCR policies\\&. On the command line, this " "option may be specified more than once, in which case multiple signatures " @@ -1013,6 +1036,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "On the command line, this option may be specified more than once, similarly " "to the B<--pcr-private-key=> option\\&. If not present, the public keys will " @@ -1049,6 +1073,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "On the command line, when this argument is present, it must appear the same " "number of times as the B<--pcr-private-key=> option\\&." @@ -1097,7 +1122,7 @@ msgid "B<Example\\ \\&2.\\ \\&All the bells and whistles>" msgstr "B<Beispiel\\ \\&2.\\ \\&Mit allem Schnickschnack>" #. type: Plain text -#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: archlinux debian-unstable fedora-rawhide mageia-cauldron opensuse-tumbleweed #, no-wrap msgid "" "$ ukify build \\e\n" @@ -1105,7 +1130,7 @@ msgid "" " --initrd=early_cpio \\e\n" " --initrd=/some/path/initramfs-6\\&.0\\&.9-300\\&.fc37\\&.x86_64\\&.img \\e\n" " --sbat=\\*(Aqsbat,1,SBAT Version,sbat,1,https://github\\&.com/rhboot/shim/blob/main/SBAT\\&.md\n" -" uki\\&.author\\&.myimage,1,UKI for System,uki\\&.author\\&.myimage,1,https://www\\&.freedesktop\\&.org/software/systemd/man/systemd-stub\\&.html\\*(Aq \\e\n" +" uki\\&.author\\&.myimage,1,UKI for System,uki\\&.author\\&.myimage,1,https://uapi-group\\&.org/specifications/specs/unified_kernel_image/\\*(Aq \\e\n" " --pcr-private-key=pcr-private-initrd-key\\&.pem \\e\n" " --pcr-public-key=pcr-public-initrd-key\\&.pem \\e\n" " --phases=\\*(Aqenter-initrd\\*(Aq \\e\n" @@ -1124,7 +1149,7 @@ msgstr "" " --initrd=early_cpio \\e\n" " --initrd=/ein/Pfad/initramfs-6\\&.0\\&.9-300\\&.fc37\\&.x86_64\\&.img \\e\n" " --sbat=\\*(Aqsbat,1,SBAT Version,sbat,1,https://github\\&.com/rhboot/shim/blob/main/SBAT\\&.md\n" -" uki\\&.author\\&.myimage,1,UKI for System,uki\\&.author\\&.myimage,1,https://www\\&.freedesktop\\&.org/software/systemd/man/systemd-stub\\&.html\\*(Aq \\e\n" +" uki\\&.author\\&.myimage,1,UKI for System,uki\\&.author\\&.myimage,1,https://uapi-group\\&.org/specifications/specs/unified_kernel_image/\\*(Aq \\e\n" " --pcr-private-key=pcr-private-initrd-key\\&.pem \\e\n" " --pcr-public-key=pcr-public-initrd-key\\&.pem \\e\n" " --phases=\\*(Aqenter-initrd\\*(Aq \\e\n" @@ -1245,6 +1270,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed #, no-wrap msgid "" "$ ukify -c ukify\\&.conf build \\e\n" @@ -1257,6 +1283,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "One \"initrd\" (early_cpio) is specified in the config file, and the other " "initrd (initramfs-6\\&.0\\&.9-300\\&.fc37\\&.x86_64\\&.img) is specified on " @@ -1278,8 +1305,7 @@ msgid "B<Example\\ \\&4.\\ \\&Kernel command line auxiliary PE>" msgstr "B<Beispiel\\ \\&4.\\ \\&Kernelbefehlszeile, zusätzlicher PE>" #. type: Plain text -#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide -#: mageia-cauldron opensuse-tumbleweed +#: archlinux debian-unstable fedora-rawhide mageia-cauldron opensuse-tumbleweed #, no-wrap msgid "" "ukify build \\e\n" @@ -1287,7 +1313,7 @@ msgid "" " --secureboot-certificate=sb\\&.cert \\e\n" " --cmdline=\\*(Aqdebug\\*(Aq \\e\n" " --sbat=\\*(Aqsbat,1,SBAT Version,sbat,1,https://github\\&.com/rhboot/shim/blob/main/SBAT\\&.md\n" -" uki\\&.addon\\&.author,1,UKI Addon for System,uki\\&.addon\\&.author,1,https://www\\&.freedesktop\\&.org/software/systemd/man/systemd-stub\\&.html\\*(Aq\n" +" uki-addon\\&.author,1,UKI Addon for System,uki-addon\\&.author,1,https://www\\&.freedesktop\\&.org/software/systemd/man/systemd-stub\\&.html\\*(Aq\n" " --output=debug\\&.cmdline\n" msgstr "" "ukify build \\e\n" @@ -1295,7 +1321,7 @@ msgstr "" " --secureboot-certificate=sb\\&.cert \\e\n" " --cmdline=\\*(Aqdebug\\*(Aq \\e\n" " --sbat=\\*(Aqsbat,1,SBAT Version,sbat,1,https://github\\&.com/rhboot/shim/blob/main/SBAT\\&.md\n" -" uki\\&.addon\\&.author,1,UKI Addon for System,uki\\&.addon\\&.author,1,https://www\\&.freedesktop\\&.org/software/systemd/man/systemd-stub\\&.html\\*(Aq\n" +" uki-addon\\&.author,1,UKI Addon for System,uki-addon\\&.author,1,https://www\\&.freedesktop\\&.org/software/systemd/man/systemd-stub\\&.html\\*(Aq\n" " --output=debug\\&.cmdline\n" #. type: Plain text @@ -1386,6 +1412,7 @@ msgstr "Als nächstes können die Zertifikate und Schlüssel erstellt werden:" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed #, no-wrap msgid "" "# ukify genkey --config=/etc/kernel/uki\\&.conf\n" @@ -1416,6 +1443,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "Subsequent invocations using the config file (B<ukify build --config=/etc/" "kernel/uki\\&.conf>) will use this certificate and key files\\&. Note that " @@ -1485,6 +1513,7 @@ msgstr " 2." #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Shim documentation" msgstr "Shim-Dokumentation" @@ -1495,18 +1524,18 @@ msgid "\\%https://github.com/rhboot/shim/blob/main/SBAT.md" msgstr "\\%https://github.com/rhboot/shim/blob/main/SBAT.md" #. type: TH -#: debian-bookworm opensuse-tumbleweed +#: debian-bookworm #, no-wrap msgid "systemd 254" msgstr "systemd 254" #. type: Plain text -#: debian-bookworm opensuse-tumbleweed +#: debian-bookworm msgid "B</usr/lib/systemd/ukify> [OPTIONS...] build" msgstr "B</usr/lib/systemd/ukify> [OPTIONEN…] build" #. type: Plain text -#: debian-bookworm opensuse-tumbleweed +#: debian-bookworm msgid "" "Note: this command is experimental for now\\&. While it is intended to " "become a regular component of systemd, it might still change in behaviour " @@ -1518,7 +1547,7 @@ msgstr "" # FIXME Missing final fullstop #. type: Plain text -#: debian-bookworm opensuse-tumbleweed +#: debian-bookworm msgid "" "If the stub and/or the kernel contain \"\\&.sbat\" sections they will be " "merged in the UKI so that revocation updates affecting either are considered " @@ -1532,13 +1561,13 @@ msgstr "" "Dokumentation\\&.>\\m[]\\&\\s-2\\u[2]\\d\\s+2\\&." #. type: SS -#: debian-bookworm opensuse-tumbleweed +#: debian-bookworm #, no-wrap msgid "Commandline-only options" msgstr "Reine Befehlszeilenoptionen" #. type: Plain text -#: debian-bookworm opensuse-tumbleweed +#: debian-bookworm msgid "" "Load configuration from the given config file\\&. In general, settings " "specified in the config file have lower precedence than the settings " @@ -1554,12 +1583,12 @@ msgstr "" "entsprechenden Optionen explizit erwähnt\\&." #. type: Plain text -#: debian-bookworm opensuse-tumbleweed +#: debian-bookworm msgid "B<--section=>I<NAME>B<:>I<TEXT>B<|>I<@PATH>" msgstr "B<--section=>I<NAME>B<:>I<TEXT>B<|>I<@PFAD>" #. type: Plain text -#: debian-bookworm opensuse-tumbleweed +#: debian-bookworm msgid "" "Specify an arbitrary additional section \"I<NAME>\"\\&. Note that the name " "is used as-is, and if the section name should start with a dot, it must be " @@ -1578,7 +1607,7 @@ msgstr "" # FIXME form the → from the #. type: Plain text -#: debian-bookworm opensuse-tumbleweed +#: debian-bookworm msgid "" "Print a summary of loaded config and exit\\&. This is useful to check how " "the options form the configuration file and the commandline are combined\\&." @@ -1588,7 +1617,7 @@ msgstr "" "Konfigurationsdatei und der Befehlszeile kombiniert werden\\&." #. type: Plain text -#: debian-bookworm opensuse-tumbleweed +#: debian-bookworm msgid "" "SBAT metadata associated with the UKI or addon\\&. SBAT policies are useful " "to revoke whole groups of UKIs or addons with a single, static policy update " @@ -1610,7 +1639,7 @@ msgstr "" "Dokumentation>\\m[]\\&\\s-2\\u[2]\\d\\s+2\\&." #. type: Plain text -#: debian-bookworm opensuse-tumbleweed +#: debian-bookworm msgid "" "In the config file, those options are grouped by section\\&. On the " "commandline, they must be specified in the same order\\&. The sections " @@ -1622,7 +1651,7 @@ msgstr "" "kombiniert\\&." #. type: Plain text -#: debian-bookworm opensuse-tumbleweed +#: debian-bookworm msgid "" "A private key to use for signing PCR policies\\&. On the commandline, this " "option may be specified more than once, in which case multiple signatures " @@ -1634,7 +1663,7 @@ msgstr "" # FIXME the this → this #. type: Plain text -#: debian-bookworm opensuse-tumbleweed +#: debian-bookworm msgid "" "On the commandline, this option may be specified more than once, similarly " "to the B<--pcr-private-key=> option\\&. If not present, the public keys will " @@ -1649,7 +1678,7 @@ msgstr "" "Option B<--pcr-private-key=> angegeben werden\\&." #. type: Plain text -#: debian-bookworm opensuse-tumbleweed +#: debian-bookworm msgid "" "On the commandline, when this argument is present, it must appear the same " "number of times as the B<--pcr-private-key=> option\\&." @@ -1658,7 +1687,7 @@ msgstr "" "wie die Option B<--pcr-private-key=> vorkommen\\&." #. type: Plain text -#: debian-bookworm opensuse-tumbleweed +#: debian-bookworm #, no-wrap msgid "" "$ /usr/lib/systemd/ukify build \\e\n" @@ -1700,7 +1729,7 @@ msgstr "" " --cmdline=\\*(Aqquiet rw rhgb\\*(Aq\n" #. type: Plain text -#: debian-bookworm opensuse-tumbleweed +#: debian-bookworm #, no-wrap msgid "" "$ /usr/lib/systemd/ukify -c ukify\\&.conf build \\e\n" @@ -1712,7 +1741,7 @@ msgstr "" " --initrd=/ein/Pfad/initramfs-6\\&.0\\&.9-300\\&.fc37\\&.x86_64\\&.img\n" #. type: Plain text -#: debian-bookworm opensuse-tumbleweed +#: debian-bookworm msgid "" "One \"initrd\" (early_cpio) is specified in the config file, and the other " "initrd (initramfs-6\\&.0\\&.9-300\\&.fc37\\&.x86_64\\&.img) is specified on " @@ -1728,7 +1757,27 @@ msgstr "" "Initrd\\&." #. type: Plain text -#: debian-bookworm opensuse-tumbleweed +#: debian-bookworm fedora-40 +#, no-wrap +msgid "" +"ukify build \\e\n" +" --secureboot-private-key=sb\\&.key \\e\n" +" --secureboot-certificate=sb\\&.cert \\e\n" +" --cmdline=\\*(Aqdebug\\*(Aq \\e\n" +" --sbat=\\*(Aqsbat,1,SBAT Version,sbat,1,https://github\\&.com/rhboot/shim/blob/main/SBAT\\&.md\n" +" uki\\&.addon\\&.author,1,UKI Addon for System,uki\\&.addon\\&.author,1,https://www\\&.freedesktop\\&.org/software/systemd/man/systemd-stub\\&.html\\*(Aq\n" +" --output=debug\\&.cmdline\n" +msgstr "" +"ukify build \\e\n" +" --secureboot-private-key=sb\\&.key \\e\n" +" --secureboot-certificate=sb\\&.cert \\e\n" +" --cmdline=\\*(Aqdebug\\*(Aq \\e\n" +" --sbat=\\*(Aqsbat,1,SBAT Version,sbat,1,https://github\\&.com/rhboot/shim/blob/main/SBAT\\&.md\n" +" uki\\&.addon\\&.author,1,UKI Addon for System,uki\\&.addon\\&.author,1,https://www\\&.freedesktop\\&.org/software/systemd/man/systemd-stub\\&.html\\*(Aq\n" +" --output=debug\\&.cmdline\n" + +#. type: Plain text +#: debian-bookworm #, no-wrap msgid "" "# /usr/lib/systemd/ukify genkey --config=/etc/kernel/uki\\&.conf\n" @@ -1750,7 +1799,7 @@ msgstr "" # FIXME of using → using # FIXME The wording of the paragraph should be reviewed (strange english?) // Hmm, this seems OK to me. Do you have some suggestion? #. type: Plain text -#: debian-bookworm opensuse-tumbleweed +#: debian-bookworm msgid "" "Subsequent invocations of using the config file (B</usr/lib/systemd/ukify " "build --config=/etc/kernel/uki\\&.conf>) will use this certificate and key " @@ -1769,6 +1818,202 @@ msgstr "" "erfolgen\\&." #. type: Plain text -#: debian-bookworm opensuse-tumbleweed +#: debian-bookworm msgid "Shim's documentation." msgstr "Shim-Dokumentation" + +#. type: TH +#: debian-unstable fedora-rawhide +#, no-wrap +msgid "systemd 256~rc3" +msgstr "systemd 256~rc3" + +#. type: Plain text +#: debian-unstable fedora-rawhide +msgid "" +"Additional sections will be inserted into the UKI, either automatically or " +"only if a specific option is provided\\&. See the discussions of " +"I<Microcode=>/B<--microcode=>, I<Cmdline=>/B<--cmdline=>, I<OSRelease=>/B<--" +"os-release=>, I<DeviceTree=>/B<--devicetree=>, I<Splash=>/B<--splash=>, " +"I<PCRPKey=>/B<--pcrpkey=>, I<Uname=>/B<--uname=>, I<SBAT=>/B<--sbat=>, and " +"B<--section=> below\\&." +msgstr "" +"Es werden zusätzliche Abschnitte in den UKI eingefügt, entweder automatisch " +"oder nur falls eine bestimmte Option bereitgestellt wird\\&. Siehe die " +"nachfolgende Besprechung von I<Microcode=>/B<--microcode=>, I<Cmdline=>/B<--" +"cmdline=>, I<OSRelease=>/B<--os-release=>, I<DeviceTree=>/B<--devicetree=>, " +"I<Splash=>/B<--splash=>, I<PCRPKey=>/B<--pcrpkey=>, I<Uname=>/B<--uname=>, " +"I<SBAT=>/B<--sbat=> und B<--section=>\\&." + +#. type: Plain text +#: debian-unstable fedora-rawhide +#, fuzzy +#| msgid "" +#| "The calculation of PCR values is done for specific boot phase paths\\&. " +#| "Those can be specified with the I<Phases=>/B<--phases=> option\\&. If not " +#| "specified, the default provided by B<systemd-measure> is used\\&. It is " +#| "also possible to specify the I<PCRPrivateKey=>/B<--pcr-private-key=>, " +#| "I<PCRPublicKey=>/B<--pcr-public-key=>, and I<Phases=>/B<--phases=> " +#| "arguments more than once\\&. Signatures will then be performed with each " +#| "of the specified keys\\&. On the command line, when both B<--phases=> and " +#| "B<--pcr-private-key=> are used, they must be specified the same number of " +#| "times, and then the n-th boot phase path set will be signed by the n-th " +#| "key\\&. This can be used to build different trust policies for different " +#| "phases of the boot\\&. In the config file, I<PCRPrivateKey=>, " +#| "I<PCRPublicKey=>, and I<Phases=> are grouped into separate sections, " +#| "describing separate boot phases\\&." +msgid "" +"The calculation of PCR values is done for specific boot phase paths\\&. " +"Those can be specified with the I<Phases=>/B<--phases=> option\\&. If not " +"specified, the default provided by B<systemd-measure> is used\\&. It is also " +"possible to specify the I<PCRPrivateKey=>/B<--pcr-private-key=>, " +"I<PCRPublicKey=>/B<--pcr-public-key=>, and I<Phases=>/B<--phases=> arguments " +"more than once\\&. Signatures will then be performed with each of the " +"specified keys\\&. On the command line, when both B<--phases=> and B<--pcr-" +"private-key=> are used, they must be specified the same number of times, and " +"then the n-th boot phase path set will be signed by the n-th key\\&. This " +"can be used to build different trust policies for different phases of the " +"boot\\&. In the config file, I<PCRPrivateKey=>, I<PCRPublicKey=>, and " +"I<Phases=> are grouped into separate sections, describing separate boot " +"phases\\&. If I<SigningEngine=>/B<--signing-engine=> is specified, then the " +"private keys arguments will be passed verbatim to OpenSSL as URIs, and the " +"public key arguments will be loaded as X\\&.509 certificates, so that " +"signing can be performed with an OpenSSL engine\\&." +msgstr "" +"Die Berechnung von PCR-Werten erfolgt für bestimmte " +"Systemstartphasenpfade\\&. Diese können mit der Option I<Phases=>/B<--" +"phases=> angegeben werden\\&. Falls nicht angegeben, wird die von B<systemd-" +"measure>(1) bereitgestellte Vorgabe verwandt\\&. Es ist auch möglich, die " +"Argumente I<PCRPrivateKey=>/B<--pcr-private-key=>, I<PCRPublicKey=>/B<--pcr-" +"public-key=> und I<Phases=>/B<--phases=> mehr als einmal anzugeben\\&. Die " +"Signaturen erfolgen dann mit jedem der angegebenen Schlüssel\\&. Wird auf " +"der Befehlszeile sowohl B<--phases=> als auch B<--pcr-private-key=> " +"verwandt, müssen sie beide gleich häufig angegeben werden und der n-te " +"Systemstartphasenpfad wird mit dem n-ten Schlüssel signiert\\&. Dies kann " +"zur Erstellung verschiedener Vertrauensrichtlinien für die verschiedenen " +"Phasen des Systemstarts verwandt werden\\&. In der Konfigurationsdatei " +"werden I<PCRPrivateKey=>, I<PCRPublicKey=> und I<Phases=> in verschiedene " +"Abschnitte gruppiert, die getrennte Systemstartphasen beschreiben\\&." + +#. type: Plain text +#: debian-unstable fedora-rawhide +msgid "" +"Other tools that may be useful for inspect UKIs: B<llvm-objdump>(1) B<-p> " +"and B<pe-inspect>\\&." +msgstr "" + +#. type: Plain text +#: debian-unstable fedora-rawhide +msgid "" +"If no config file is provided via the option B<--config=>I<PATH>, B<ukify> " +"will try to look for a default configuration file in the following paths in " +"this order: /etc/systemd/ukify\\&.conf, /run/systemd/ukify\\&.conf, /usr/" +"local/lib/systemd/ukify\\&.conf, and /usr/lib/systemd/ukify\\&.conf, and " +"then load the first one found\\&. B<ukify> will proceed normally if no " +"configuration file is specified and no default one is found\\&." +msgstr "" +"Falls keine Konfigurationsoption mit der Option B<--config=>I<PFAD> " +"bereitgestellt wird, wird B<ukify> versuchen, nach einer " +"Standardkonfigurationsdatei in den folgenden Pfaden in dieser Reihenfolge zu " +"suchen: /etc/systemd/ukify\\&.conf, /run/systemd/ukify\\&.conf, /usr/local/" +"lib/systemd/ukify\\&.conf und /usr/lib/systemd/ukify\\&.conf und dann die " +"erste gefundene laden\\&. B<ukify> wird normal fortfahren, falls keine " +"Konfigurationsdatei angegeben und keine in der Vorgabe gefunden wurde\\&." + +#. type: Plain text +#: debian-unstable fedora-rawhide +msgid "" +"B<--section=>I<NAME>B<:>I<TEXT>B<|>I<@PATH>, B<--section=>I<NAME>B<:text|" +"binary>B<[@>I<PATH>]" +msgstr "" +"B<--section=>I<NAME>B<:>I<TEXT>B<|>I<@PFAD>, B<--section=>I<NAME>B<:text|" +"binary>B<[@>I<PFAD>]" + +#. type: Plain text +#: debian-unstable fedora-rawhide +msgid "I<Microcode=>I<UCODE>, B<--microcode=>I<UCODE>" +msgstr "" + +#. type: Plain text +#: debian-unstable fedora-rawhide +#, fuzzy +#| msgid "" +#| "A picture to display during boot (the \"\\&.splash\" section)\\&. The " +#| "argument is a path to a BMP file\\&. If not specified, the section will " +#| "not be present\\&." +msgid "" +"Path to initrd containing microcode updates\\&. If not specified, the " +"section will not be present\\&." +msgstr "" +"Ein Bild, das während des Systemstarts angezeigt werden soll (der Abschnitt " +"»\\&.splash«)\\&. Das Argument ist ein Pfad zu einer BMP-Datei\\&. Falls " +"dies nicht angegeben ist, wird der Abschnitt nicht vorhanden sein\\&." + +#. type: Plain text +#: debian-unstable fedora-rawhide +msgid "Added in version 256\\&." +msgstr "Hinzugefügt in Version 256\\&." + +#. type: Plain text +#: fedora-40 +msgid "" +"SBAT metadata associated with the UKI or addon\\&. SBAT policies are useful " +"to revoke whole groups of UKIs or addons with a single, static policy update " +"that does not take space in DBX/MOKX\\&. If not specified manually, a " +"default metadata entry consisting of \"uki,1,UKI,uki,1,https://www\\&." +"freedesktop\\&.org/software/systemd/man/systemd-stub\\&.html\" will be used, " +"to ensure it is always possible to revoke UKIs and addons\\&. For more " +"information on SBAT see \\m[blue]B<Shim " +"documentation>\\m[]\\&\\s-2\\u[2]\\d\\s+2\\&." +msgstr "" +"Dem UKI oder der Ergänzung zugeordnete SBAT-Metadaten\\&. SBAT-Richtlinien " +"sind zum Widerruf von Gruppen von UKIs oder Ergänzungen mit einer einzelnen, " +"statischen Richtlinienaktualisierung nützlich, die keinen Platz in DBX/MOKX " +"belegt\\&. Falls nicht händisch angegeben, wird ein Standardmetadateneintrag " +"bestehend aus »uki,1,UKI,uki,1,https://www\\&.freedesktop\\&.org/software/" +"systemd/man/systemd-stub\\&.html« verwandt, um sicherzustellen, dass es " +"immer möglich ist, UKIs und Ergänzungen zu widerrufen\\&. Für weitere " +"Informationen über SBAT siehe die \\m[blue]B<Shim-" +"Dokumentation>\\m[]\\&\\s-2\\u[2]\\d\\s+2\\&." + +#. type: Plain text +#: fedora-40 +#, no-wrap +msgid "" +"$ ukify build \\e\n" +" --linux=/lib/modules/6\\&.0\\&.9-300\\&.fc37\\&.x86_64/vmlinuz \\e\n" +" --initrd=early_cpio \\e\n" +" --initrd=/some/path/initramfs-6\\&.0\\&.9-300\\&.fc37\\&.x86_64\\&.img \\e\n" +" --sbat=\\*(Aqsbat,1,SBAT Version,sbat,1,https://github\\&.com/rhboot/shim/blob/main/SBAT\\&.md\n" +" uki\\&.author\\&.myimage,1,UKI for System,uki\\&.author\\&.myimage,1,https://www\\&.freedesktop\\&.org/software/systemd/man/systemd-stub\\&.html\\*(Aq \\e\n" +" --pcr-private-key=pcr-private-initrd-key\\&.pem \\e\n" +" --pcr-public-key=pcr-public-initrd-key\\&.pem \\e\n" +" --phases=\\*(Aqenter-initrd\\*(Aq \\e\n" +" --pcr-private-key=pcr-private-system-key\\&.pem \\e\n" +" --pcr-public-key=pcr-public-system-key\\&.pem \\e\n" +" --phases=\\*(Aqenter-initrd:leave-initrd enter-initrd:leave-initrd:sysinit \\e\n" +" enter-initrd:leave-initrd:sysinit:ready\\*(Aq \\e\n" +" --pcr-banks=sha384,sha512 \\e\n" +" --secureboot-private-key=sb\\&.key \\e\n" +" --secureboot-certificate=sb\\&.cert \\e\n" +" --sign-kernel \\e\n" +" --cmdline=\\*(Aqquiet rw rhgb\\*(Aq\n" +msgstr "" +"$ ukify build \\e\n" +" --linux=/lib/modules/6\\&.0\\&.9-300\\&.fc37\\&.x86_64/vmlinuz \\e\n" +" --initrd=early_cpio \\e\n" +" --initrd=/ein/Pfad/initramfs-6\\&.0\\&.9-300\\&.fc37\\&.x86_64\\&.img \\e\n" +" --sbat=\\*(Aqsbat,1,SBAT Version,sbat,1,https://github\\&.com/rhboot/shim/blob/main/SBAT\\&.md\n" +" uki\\&.author\\&.myimage,1,UKI for System,uki\\&.author\\&.myimage,1,https://www\\&.freedesktop\\&.org/software/systemd/man/systemd-stub\\&.html\\*(Aq \\e\n" +" --pcr-private-key=pcr-private-initrd-key\\&.pem \\e\n" +" --pcr-public-key=pcr-public-initrd-key\\&.pem \\e\n" +" --phases=\\*(Aqenter-initrd\\*(Aq \\e\n" +" --pcr-private-key=pcr-private-system-key\\&.pem \\e\n" +" --pcr-public-key=pcr-public-system-key\\&.pem \\e\n" +" --phases=\\*(Aqenter-initrd:leave-initrd enter-initrd:leave-initrd:sysinit \\e\n" +" enter-initrd:leave-initrd:sysinit:ready\\*(Aq \\e\n" +" --pcr-banks=sha384,sha512 \\e\n" +" --secureboot-private-key=sb\\&.key \\e\n" +" --secureboot-certificate=sb\\&.cert \\e\n" +" --sign-kernel \\e\n" +" --cmdline=\\*(Aqquiet rw rhgb\\*(Aq\n" |