diff options
Diffstat (limited to '')
-rw-r--r-- | templates/man1/systemd-creds.1.pot | 139 |
1 files changed, 124 insertions, 15 deletions
diff --git a/templates/man1/systemd-creds.1.pot b/templates/man1/systemd-creds.1.pot index f98f5052..745b7561 100644 --- a/templates/man1/systemd-creds.1.pot +++ b/templates/man1/systemd-creds.1.pot @@ -7,7 +7,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" -"POT-Creation-Date: 2024-03-01 17:10+0100\n" +"POT-Creation-Date: 2024-06-01 06:26+0200\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n" "Language-Team: LANGUAGE <LL@li.org>\n" @@ -24,7 +24,7 @@ msgid "SYSTEMD-CREDS" msgstr "" #. type: TH -#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: archlinux fedora-40 mageia-cauldron opensuse-tumbleweed #, no-wrap msgid "systemd 255" msgstr "" @@ -85,7 +85,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron -#: opensuse-tumbleweed +#: opensuse-leap-15-6 opensuse-tumbleweed msgid "" "Credentials are configured in unit files via the I<ImportCredential=>, " "I<LoadCredential=>, I<SetCredential=>, I<LoadCredentialEncrypted=>, and " @@ -142,6 +142,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 250\\&." msgstr "" @@ -370,6 +371,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 251\\&." msgstr "" @@ -568,8 +570,8 @@ msgid "B<--with-key=>, B<-H>, B<-T>" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide -#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed +#: archlinux debian-bookworm fedora-40 mageia-cauldron opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "When specified with the B<encrypt> command controls the encryption/signature " "key to use\\&. Takes one of \"host\", \"tpm2\", \"host+tpm2\", \"tpm2-" @@ -639,8 +641,8 @@ msgid "" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide -#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed +#: archlinux debian-bookworm fedora-40 mageia-cauldron opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "B<--tpm2-pcrs=> [PCR...]" msgstr "" @@ -657,8 +659,8 @@ msgid "" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide -#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed +#: archlinux debian-bookworm fedora-40 mageia-cauldron opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "B<--tpm2-public-key=> [PATH], B<--tpm2-public-key-pcrs=> [PCR...]" msgstr "" @@ -692,12 +694,13 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 252\\&." msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide -#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed +#: archlinux debian-bookworm fedora-40 mageia-cauldron opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "B<--tpm2-signature=> [PATH]" msgstr "" @@ -893,7 +896,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron -#: opensuse-tumbleweed +#: opensuse-leap-15-6 opensuse-tumbleweed #, no-wrap msgid "" "# mkdir -p /etc/systemd/system/xyz\\&.service\\&.d\n" @@ -942,13 +945,13 @@ msgid "\\%https://systemd.io/CREDENTIALS" msgstr "" #. type: TH -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 #, no-wrap msgid "systemd 254" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 +#: debian-bookworm msgid "" "Credentials are configured in unit files via the I<ImportCredentialE<gt>>, " "I<LoadCredential=>, I<SetCredential=>, I<LoadCredentialEncrypted=> and " @@ -956,7 +959,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 +#: debian-bookworm #, no-wrap msgid "" "# mkdir -p /etc/systemd/system/xyz\\&.service\\&.d\n" @@ -964,3 +967,109 @@ msgid "" "# systemctl daemon-reload\n" "# systemctl restart xyz\\&.service\n" msgstr "" + +#. type: TH +#: debian-unstable fedora-rawhide +#, no-wrap +msgid "systemd 256~rc3" +msgstr "" + +#. type: Plain text +#: debian-unstable fedora-rawhide +msgid "B<--user>" +msgstr "" + +#. type: Plain text +#: debian-unstable fedora-rawhide +msgid "" +"When specified with the B<encrypt> and B<decrypt> commands encrypts a user-" +"scoped (rather than a system-scoped) credential\\&. Use B<--uid=> to select " +"which user the credential is from\\&. Such credentials may only be decrypted " +"from the specified user\\*(Aqs context, except if privileges can be " +"acquired\\&. Generally, when an encrypted credential shall be used in the " +"per-user service manager it should be encrypted with this option set, when " +"it shall be used in the system service manager it should be encrypted " +"without\\&." +msgstr "" + +#. type: Plain text +#: debian-unstable fedora-rawhide +msgid "" +"Internally, this ensures that the selected user\\*(Aqs numeric UID and " +"username, as well as the system\\*(Aqs B<machine-id>(5) are incorporated " +"into the encryption key\\&." +msgstr "" + +#. type: Plain text +#: debian-unstable fedora-rawhide +msgid "Added in version 256\\&." +msgstr "" + +#. type: Plain text +#: debian-unstable fedora-rawhide +msgid "B<--uid=>" +msgstr "" + +#. type: Plain text +#: debian-unstable fedora-rawhide +msgid "" +"Specifies the user to encrypt the credential for\\&. Takes a user name or " +"numeric UID\\&. If set, implies B<--user>\\&. If set to the special string " +"\"self\" sets the user to the user of the calling process\\&. If B<--user> " +"is used without B<--uid=> then B<--uid=self> is implied, i\\&.e\\&. the " +"credential is encrypted for the calling user\\&." +msgstr "" + +#. type: Plain text +#: debian-unstable fedora-rawhide +msgid "" +"When specified with the B<encrypt> command controls the encryption/signature " +"key to use\\&. Takes one of \"host\", \"tpm2\", \"host+tpm2\", \"null\", " +"\"auto\", \"auto-initrd\"\\&. See above for details on the three key " +"types\\&. If set to \"auto\" (which is the default) the TPM2 key is used if " +"a TPM2 device is found and not running in a container\\&. The host key is " +"used if /var/lib/systemd/ is on persistent media\\&. This means on typical " +"systems the encryption is by default bound to both the TPM2 chip and the OS " +"installation, and both need to be available to decrypt the credential " +"again\\&. If \"auto\" is selected but neither TPM2 is available (or running " +"in container) nor /var/lib/systemd/ is on persistent media, encryption will " +"fail\\&. If set to \"null\" a fixed zero length key is used (thus, in this " +"mode no confidentiality nor authenticity are provided!)\\&. This logic is " +"useful to cover for systems that lack a TPM2 chip but where credentials " +"shall be generated\\&. Note that decryption of such credentials is refused " +"on systems that have a TPM2 chip and where UEFI SecureBoot is enabled (this " +"is done so that such a locked down system cannot be tricked into loading a " +"credential generated this way that lacks authentication information)\\&. If " +"set to \"auto-initrd\" a TPM2 key is used if a TPM2 is found\\&. If not a " +"fixed zero length key is used, equivalent to \"null\" mode\\&. This option " +"is particularly useful to generate credentials files that are encrypted/" +"authenticated against TPM2 where available but still work on systems lacking " +"support for this\\&." +msgstr "" + +#. type: Plain text +#: debian-unstable fedora-rawhide +msgid "B<--tpm2-pcrs=>I<PCR>I<[+PCR\\&.\\&.\\&.]>" +msgstr "" + +#. type: Plain text +#: debian-unstable fedora-rawhide +msgid "" +"B<--tpm2-public-key=>I<PATH>, B<--tpm2-public-key-pcrs=>I<PCR>I<[+PCR\\&.\\&." +"\\&.]>" +msgstr "" + +#. type: Plain text +#: debian-unstable fedora-rawhide +msgid "B<--tpm2-signature=>I<PATH>" +msgstr "" + +#. type: Plain text +#: debian-unstable fedora-rawhide +msgid "B<--allow-null>" +msgstr "" + +#. type: Plain text +#: debian-unstable fedora-rawhide +msgid "Allow decrypting credentials that use an empty key\\&." +msgstr "" |