summaryrefslogtreecommitdiffstats
path: root/templates/man1/systemd-creds.1.pot
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--templates/man1/systemd-creds.1.pot139
1 files changed, 124 insertions, 15 deletions
diff --git a/templates/man1/systemd-creds.1.pot b/templates/man1/systemd-creds.1.pot
index f98f5052..745b7561 100644
--- a/templates/man1/systemd-creds.1.pot
+++ b/templates/man1/systemd-creds.1.pot
@@ -7,7 +7,7 @@
msgid ""
msgstr ""
"Project-Id-Version: PACKAGE VERSION\n"
-"POT-Creation-Date: 2024-03-01 17:10+0100\n"
+"POT-Creation-Date: 2024-06-01 06:26+0200\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
@@ -24,7 +24,7 @@ msgid "SYSTEMD-CREDS"
msgstr ""
#. type: TH
-#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: archlinux fedora-40 mageia-cauldron opensuse-tumbleweed
#, no-wrap
msgid "systemd 255"
msgstr ""
@@ -85,7 +85,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
-#: opensuse-tumbleweed
+#: opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"Credentials are configured in unit files via the I<ImportCredential=>, "
"I<LoadCredential=>, I<SetCredential=>, I<LoadCredentialEncrypted=>, and "
@@ -142,6 +142,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 250\\&."
msgstr ""
@@ -370,6 +371,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 251\\&."
msgstr ""
@@ -568,8 +570,8 @@ msgid "B<--with-key=>, B<-H>, B<-T>"
msgstr ""
#. type: Plain text
-#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
-#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
+#: archlinux debian-bookworm fedora-40 mageia-cauldron opensuse-leap-15-6
+#: opensuse-tumbleweed
msgid ""
"When specified with the B<encrypt> command controls the encryption/signature "
"key to use\\&. Takes one of \"host\", \"tpm2\", \"host+tpm2\", \"tpm2-"
@@ -639,8 +641,8 @@ msgid ""
msgstr ""
#. type: Plain text
-#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
-#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
+#: archlinux debian-bookworm fedora-40 mageia-cauldron opensuse-leap-15-6
+#: opensuse-tumbleweed
msgid "B<--tpm2-pcrs=> [PCR...]"
msgstr ""
@@ -657,8 +659,8 @@ msgid ""
msgstr ""
#. type: Plain text
-#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
-#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
+#: archlinux debian-bookworm fedora-40 mageia-cauldron opensuse-leap-15-6
+#: opensuse-tumbleweed
msgid "B<--tpm2-public-key=> [PATH], B<--tpm2-public-key-pcrs=> [PCR...]"
msgstr ""
@@ -692,12 +694,13 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 252\\&."
msgstr ""
#. type: Plain text
-#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
-#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
+#: archlinux debian-bookworm fedora-40 mageia-cauldron opensuse-leap-15-6
+#: opensuse-tumbleweed
msgid "B<--tpm2-signature=> [PATH]"
msgstr ""
@@ -893,7 +896,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
-#: opensuse-tumbleweed
+#: opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid ""
"# mkdir -p /etc/systemd/system/xyz\\&.service\\&.d\n"
@@ -942,13 +945,13 @@ msgid "\\%https://systemd.io/CREDENTIALS"
msgstr ""
#. type: TH
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
#, no-wrap
msgid "systemd 254"
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6
+#: debian-bookworm
msgid ""
"Credentials are configured in unit files via the I<ImportCredentialE<gt>>, "
"I<LoadCredential=>, I<SetCredential=>, I<LoadCredentialEncrypted=> and "
@@ -956,7 +959,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6
+#: debian-bookworm
#, no-wrap
msgid ""
"# mkdir -p /etc/systemd/system/xyz\\&.service\\&.d\n"
@@ -964,3 +967,109 @@ msgid ""
"# systemctl daemon-reload\n"
"# systemctl restart xyz\\&.service\n"
msgstr ""
+
+#. type: TH
+#: debian-unstable fedora-rawhide
+#, no-wrap
+msgid "systemd 256~rc3"
+msgstr ""
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid "B<--user>"
+msgstr ""
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid ""
+"When specified with the B<encrypt> and B<decrypt> commands encrypts a user-"
+"scoped (rather than a system-scoped) credential\\&. Use B<--uid=> to select "
+"which user the credential is from\\&. Such credentials may only be decrypted "
+"from the specified user\\*(Aqs context, except if privileges can be "
+"acquired\\&. Generally, when an encrypted credential shall be used in the "
+"per-user service manager it should be encrypted with this option set, when "
+"it shall be used in the system service manager it should be encrypted "
+"without\\&."
+msgstr ""
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid ""
+"Internally, this ensures that the selected user\\*(Aqs numeric UID and "
+"username, as well as the system\\*(Aqs B<machine-id>(5) are incorporated "
+"into the encryption key\\&."
+msgstr ""
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid "Added in version 256\\&."
+msgstr ""
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid "B<--uid=>"
+msgstr ""
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid ""
+"Specifies the user to encrypt the credential for\\&. Takes a user name or "
+"numeric UID\\&. If set, implies B<--user>\\&. If set to the special string "
+"\"self\" sets the user to the user of the calling process\\&. If B<--user> "
+"is used without B<--uid=> then B<--uid=self> is implied, i\\&.e\\&. the "
+"credential is encrypted for the calling user\\&."
+msgstr ""
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid ""
+"When specified with the B<encrypt> command controls the encryption/signature "
+"key to use\\&. Takes one of \"host\", \"tpm2\", \"host+tpm2\", \"null\", "
+"\"auto\", \"auto-initrd\"\\&. See above for details on the three key "
+"types\\&. If set to \"auto\" (which is the default) the TPM2 key is used if "
+"a TPM2 device is found and not running in a container\\&. The host key is "
+"used if /var/lib/systemd/ is on persistent media\\&. This means on typical "
+"systems the encryption is by default bound to both the TPM2 chip and the OS "
+"installation, and both need to be available to decrypt the credential "
+"again\\&. If \"auto\" is selected but neither TPM2 is available (or running "
+"in container) nor /var/lib/systemd/ is on persistent media, encryption will "
+"fail\\&. If set to \"null\" a fixed zero length key is used (thus, in this "
+"mode no confidentiality nor authenticity are provided!)\\&. This logic is "
+"useful to cover for systems that lack a TPM2 chip but where credentials "
+"shall be generated\\&. Note that decryption of such credentials is refused "
+"on systems that have a TPM2 chip and where UEFI SecureBoot is enabled (this "
+"is done so that such a locked down system cannot be tricked into loading a "
+"credential generated this way that lacks authentication information)\\&. If "
+"set to \"auto-initrd\" a TPM2 key is used if a TPM2 is found\\&. If not a "
+"fixed zero length key is used, equivalent to \"null\" mode\\&. This option "
+"is particularly useful to generate credentials files that are encrypted/"
+"authenticated against TPM2 where available but still work on systems lacking "
+"support for this\\&."
+msgstr ""
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid "B<--tpm2-pcrs=>I<PCR>I<[+PCR\\&.\\&.\\&.]>"
+msgstr ""
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid ""
+"B<--tpm2-public-key=>I<PATH>, B<--tpm2-public-key-pcrs=>I<PCR>I<[+PCR\\&.\\&."
+"\\&.]>"
+msgstr ""
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid "B<--tpm2-signature=>I<PATH>"
+msgstr ""
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid "B<--allow-null>"
+msgstr ""
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid "Allow decrypting credentials that use an empty key\\&."
+msgstr ""