1 files changed, 162 insertions, 0 deletions
diff --git a/templates/man8/systemd-boot-system-token.service.8.pot b/templates/man8/systemd-boot-system-token.service.8.pot
new file mode 100644
index 00000000..116b2ff8
--- /dev/null
+++ b/templates/man8/systemd-boot-system-token.service.8.pot
@@ -0,0 +1,162 @@
+# SOME DESCRIPTIVE TITLE
+# Copyright (C) YEAR Free Software Foundation, Inc.
+# This file is distributed under the same license as the PACKAGE package.
+# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
+#
+#, fuzzy
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"POT-Creation-Date: 2023-06-27 19:54+0200\n"
+"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
+"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. type: TH
+#: debian-bookworm
+#, no-wrap
+msgid "SYSTEMD-BOOT-SYSTEM-TOKEN\\&.SERVICE"
+msgstr ""
+
+#. type: TH
+#: debian-bookworm
+#, no-wrap
+msgid "systemd 252"
+msgstr ""
+
+#. type: TH
+#: debian-bookworm
+#, no-wrap
+msgid "systemd-boot-system-token.service"
+msgstr ""
+
+#.  -----------------------------------------------------------------
+#.  * MAIN CONTENT STARTS HERE *
+#.  -----------------------------------------------------------------
+#. type: SH
+#: debian-bookworm
+#, no-wrap
+msgid "NAME"
+msgstr ""
+
+#. type: Plain text
+#: debian-bookworm
+msgid ""
+"systemd-boot-system-token.service - Generate an initial boot loader system "
+"token and random seed"
+msgstr ""
+
+#. type: SH
+#: debian-bookworm
+#, no-wrap
+msgid "SYNOPSIS"
+msgstr ""
+
+#. type: Plain text
+#: debian-bookworm
+msgid "systemd-boot-system-token\\&.service"
+msgstr ""
+
+#. type: SH
+#: debian-bookworm
+#, no-wrap
+msgid "DESCRIPTION"
+msgstr ""
+
+#. type: Plain text
+#: debian-bookworm
+msgid ""
+"systemd-boot-system-token\\&.service is a system service that automatically "
+"generates a \\*(Aqsystem token\\*(Aq to store in an EFI variable in the "
+"system\\*(Aqs NVRAM and a random seed to store on the EFI System Partition "
+"ESP on disk\\&. The boot loader may then combine these two randomized data "
+"fields by cryptographic hashing, and pass it to the OS it boots as "
+"initialization seed for its entropy pool\\&. The random seed stored in the "
+"ESP is refreshed on each reboot ensuring that multiple subsequent boots will "
+"boot with different seeds\\&. The \\*(Aqsystem token\\*(Aq is generated "
+"randomly once, and then persistently stored in the system\\*(Aqs EFI "
+"variable storage\\&."
+msgstr ""
+
+#. type: Plain text
+#: debian-bookworm
+msgid ""
+"The systemd-boot-system-token\\&.service unit invokes the B<bootctl random-"
+"seed> command, which updates the random seed in the ESP, and initializes the "
+"\\*(Aqsystem token\\*(Aq if it\\*(Aqs not initialized yet\\&. The service is "
+"conditionalized so that it is run only when all of the below apply:"
+msgstr ""
+
+#. type: Plain text
+#: debian-bookworm
+msgid ""
+"A boot loader is used that implements the \\m[blue]B<Boot Loader "
+"Interface>\\m[]\\&\\s-2\\u[1]\\d\\s+2 (which defines the \\*(Aqsystem "
+"token\\*(Aq concept)\\&."
+msgstr ""
+
+#. type: Plain text
+#: debian-bookworm
+msgid ""
+"Either a \\*(Aqsystem token\\*(Aq was not set yet, or the boot loader has "
+"not passed the OS a random seed yet (and thus most likely has been missing "
+"the random seed file in the ESP)\\&."
+msgstr ""
+
+#. type: Plain text
+#: debian-bookworm
+msgid ""
+"The system is not running in a VM environment\\&. This case is explicitly "
+"excluded since on VM environments the ESP backing storage and EFI variable "
+"storage is typically not physically separated and hence booting the same OS "
+"image in multiple instances would replicate both, thus reusing the same "
+"random seed and \\*(Aqsystem token\\*(Aq among all instances, which defeats "
+"its purpose\\&. Note that it\\*(Aqs still possible to use boot loader random "
+"seed provisioning in this mode, but the automatic logic implemented by this "
+"service has no effect then, and the user instead has to manually invoke the "
+"B<bootctl random-seed> acknowledging these restrictions\\&."
+msgstr ""
+
+#. type: Plain text
+#: debian-bookworm
+msgid ""
+"For further details see B<bootctl>(1), regarding the command this service "
+"invokes\\&."
+msgstr ""
+
+#. type: SH
+#: debian-bookworm
+#, no-wrap
+msgid "SEE ALSO"
+msgstr ""
+
+#. type: Plain text
+#: debian-bookworm
+msgid "B<systemd>(1), B<bootctl>(1), B<systemd-boot>(7)"
+msgstr ""
+
+#. type: SH
+#: debian-bookworm
+#, no-wrap
+msgid "NOTES"
+msgstr ""
+
+#. type: IP
+#: debian-bookworm
+#, no-wrap
+msgid " 1."
+msgstr ""
+
+#. type: Plain text
+#: debian-bookworm
+msgid "Boot Loader Interface"
+msgstr ""
+
+#. type: Plain text
+#: debian-bookworm
+msgid "\\%https://systemd.io/BOOT_LOADER_INTERFACE"
+msgstr ""