# SOME DESCRIPTIVE TITLE # Copyright (C) YEAR Free Software Foundation, Inc. # This file is distributed under the same license as the PACKAGE package. # FIRST AUTHOR , YEAR. # #, fuzzy msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "POT-Creation-Date: 2024-06-01 06:34+0200\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" "Language: \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" #. type: TH #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron #, no-wrap msgid "VERITYTAB" msgstr "" #. type: TH #: archlinux fedora-40 mageia-cauldron #, no-wrap msgid "systemd 255" msgstr "" #. type: TH #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron #, no-wrap msgid "veritytab" msgstr "" #. ----------------------------------------------------------------- #. * MAIN CONTENT STARTS HERE * #. ----------------------------------------------------------------- #. type: SH #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron #, no-wrap msgid "NAME" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "veritytab - Configuration for verity block devices" msgstr "" #. type: SH #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron #, no-wrap msgid "SYNOPSIS" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "/etc/veritytab" msgstr "" #. type: SH #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron #, no-wrap msgid "DESCRIPTION" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "" "The /etc/veritytab file describes verity protected block devices that are " "set up during system boot\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "" "Empty lines and lines starting with the \"#\" character are ignored\\&. Each " "of the remaining lines describes one verity protected block device\\&. " "Fields are delimited by white space\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "Each line is in the form" msgstr "" #. type: Plain text #: archlinux debian-bookworm fedora-40 mageia-cauldron #, no-wrap msgid "I I I I I\n" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "The first four fields are mandatory, the remaining one is optional\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "" "The first field contains the name of the resulting verity volume; its block " "device is set up below /dev/mapper/\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm fedora-40 mageia-cauldron msgid "" "The second field contains a path to the underlying block data device, or a " "specification of a block device via \"UUID=\" followed by the UUID\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm fedora-40 mageia-cauldron msgid "" "The third field contains a path to the underlying block hash device, or a " "specification of a block device via \"UUID=\" followed by the UUID\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm fedora-40 mageia-cauldron msgid "The fourth field is the \"roothash\" in hexadecimal\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "" "The fifth field, if present, is a comma-delimited list of options\\&. The " "following options are recognized:" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "BI" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "Use dm-verity with or without permanent on-disk superblock\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron msgid "Added in version 254\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "BI" msgstr "" #. type: Plain text #: archlinux debian-bookworm fedora-40 mageia-cauldron msgid "" "Specifies the hash version type\\&. Format type 0 is original Chrome OS " "version\\&. Format type 1 is modern version\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "BI" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "" "Used block size for the data device\\&. (Note kernel supports only page-size " "as maximum here; Multiples of 512 bytes\\&.)" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "BI" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "" "Used block size for the hash device\\&. (Note kernel supports only page-size " "as maximum here; Multiples of 512 bytes\\&.)" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "BI" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "" "Number of blocks of data device used in verification\\&. If not specified, " "the whole device is used\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "BI" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "" "Offset of hash area/superblock on \"hash-device\"\\&. (Multiples of 512 " "bytes\\&.)" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "BI" msgstr "" #. type: Plain text #: archlinux debian-bookworm fedora-40 mageia-cauldron msgid "" "Salt used for format or verification\\&. Format is a hexadecimal string; 256 " "bytes long maximum; \"-\"is the special value for empty\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "BI" msgstr "" #. type: Plain text #: archlinux debian-bookworm fedora-40 mageia-cauldron msgid "" "Use the provided UUID for format command instead of generating new one\\&. " "The UUID must be provided in standard UUID format, e\\&.g\\&. " "12345678-1234-1234-1234-123456789abc\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "B, B, B" msgstr "" #. type: Plain text #: archlinux debian-bookworm fedora-40 mageia-cauldron msgid "" "Defines what to do if a data verity problem is detected (data " "corruption)\\&. Without these options kernel fails the IO operation with I/O " "error\\&. With \"--ignore-corruption\" option the corruption is only " "logged\\&. With \"--restart-on-corruption\" or \"--panic-on-corruption\" the " "kernel is restarted (panicked) immediately\\&. (You have to provide way how " "to avoid restart loops\\&.)" msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron msgid "Added in version 248\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "B" msgstr "" #. type: Plain text #: archlinux debian-bookworm fedora-40 mageia-cauldron msgid "" "Instruct kernel to not verify blocks that are expected to contain zeroes and " "always directly return zeroes instead\\&. WARNING: Use this option only in " "very specific cases\\&. This option is available since Linux kernel version " "4\\&.5\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "B" msgstr "" #. type: Plain text #: archlinux debian-bookworm fedora-40 mageia-cauldron msgid "" "Instruct kernel to verify blocks only the first time they are read from the " "data device, rather than every time\\&. WARNING: It provides a reduced level " "of security because only offline tampering of the data device\\*(Aqs content " "will be detected, not online tampering\\&. This option is available since " "Linux kernel version 4\\&.17\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "BI" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "" "Hash algorithm for dm-verity\\&. This should be the name of the algorithm, " "like \"sha1\"\\&. For default see B\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "BI" msgstr "" #. type: Plain text #: archlinux debian-bookworm fedora-40 mageia-cauldron msgid "" "Use forward error correction (FEC) to recover from corruption if hash " "verification fails\\&. Use encoding data from the specified device\\&. The " "fec device argument can be block device or file image\\&. For format, if fec " "device path doesn\\*(Aqt exist, it will be created as file\\&. Note: block " "sizes for data and hash devices must match\\&. Also, if the verity " "data_device is encrypted the fec_device should be too\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "BI" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "" "This is the offset, in bytes, from the start of the FEC device to the " "beginning of the encoding data\\&. (Aligned on 512 bytes\\&.)" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "BI" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "" "Number of generator roots\\&. This equals to the number of parity bytes in " "the encoding data\\&. In RS(M, N) encoding, the number of roots is M-N\\&. M " "is 255 and M-N is between 2 and 24 (including)\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "BIB<|base64:>I" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "" "A base64 string encoding the root hash signature prefixed by \"base64:\" or " "a path to roothash signature file used to verify the root hash (in " "kernel)\\&. This feature requires Linux kernel version 5\\&.4 or more " "recent\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "B<_netdev>" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "" "Marks this veritysetup device as requiring network\\&. It will be started " "after the network is available, similarly to B(5) units " "marked with B<_netdev>\\&. The service unit to set up this device will be " "ordered between remote-fs-pre\\&.target and remote-veritysetup\\&.target, " "instead of veritysetup-pre\\&.target and veritysetup\\&.target\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "" "Hint: if this device is used for a mount point that is specified in " "B(5), the B<_netdev> option should also be used for the mount " "point\\&. Otherwise, a dependency loop might be created where the mount " "point will be pulled in by local-fs\\&.target, while the service to " "configure the network is usually only started I the local file system " "has been mounted\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "B" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "" "This device will not be added to veritysetup\\&.target\\&. This means that " "it will not be automatically enabled on boot, unless something else pulls it " "in\\&. In particular, if the device is used for a mount point, it\\*(Aqll be " "enabled automatically during boot, unless the mount point itself is also " "disabled with B\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "B" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "" "This device will not be a hard dependency of veritysetup\\&.target\\&. " "It\\*(Aqll still be pulled in and started, but the system will not wait for " "the device to show up and be enabled, and boot will not fail if this is " "unsuccessful\\&. Note that other units that depend on the enabled device may " "still fail\\&. In particular, if the device is used for a mount point, the " "mount point itself also needs to have the B option, or the boot will " "fail if the device is not enabled successfully\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "B" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "" "Setup this verity protected block device in the initrd, similarly to " "B(5) units marked with B\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "" "Although it\\*(Aqs not necessary to mark the mount entry for the root file " "system with B, B is still recommended " "with the verity protected block device containing the root file system as " "otherwise systemd will attempt to detach the device during the regular " "system shutdown while it\\*(Aqs still in use\\&. With this option the device " "will still be detached but later after the root file system is unmounted\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "" "All other verity protected block devices that contain file systems mounted " "in the initrd should use this option\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "" "At early boot and when the system manager configuration is reloaded, this " "file is translated into native systemd units by B(8)\\&." msgstr "" #. type: SH #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron #, no-wrap msgid "EXAMPLES" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "B" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron msgid "" "Set up two verity protected block devices\\&. One using device blocks, " "another using files\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron #, no-wrap msgid "" "usr PARTUUID=783e45ae-7aa3-484a-beef-a80ff9c19cbb PARTUUID=21dc1dfe-4c33-8b48-98a9-918a22eb3e37 36e3f740ad502e2c25e2a23d9c7c17bf0fdad2300b7580842d4b7ec1fb0fa263 auto\n" "data /etc/data /etc/hash a5ee4b42f70ae1f46a08a7c92c2e0a20672ad2f514792730f5d49d7606ab8fdf auto\n" msgstr "" #. type: SH #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron #, no-wrap msgid "SEE ALSO" msgstr "" #. type: Plain text #: archlinux debian-bookworm fedora-40 mageia-cauldron msgid "" "B(1), B(8), B(8), B(5), B(8)," msgstr "" #. type: TH #: debian-bookworm #, no-wrap msgid "systemd 254" msgstr "" #. type: TH #: debian-unstable fedora-rawhide #, no-wrap msgid "systemd 256~rc3" msgstr "" #. type: Plain text #: debian-unstable fedora-rawhide #, no-wrap msgid "I I I I [I]\n" msgstr "" #. type: Plain text #: debian-unstable fedora-rawhide msgid "" "The second field contains a path to the underlying block data device, or a " "specification of a block device via I followed by the I\\&." msgstr "" #. type: Plain text #: debian-unstable fedora-rawhide msgid "" "The third field contains a path to the underlying block hash device, or a " "specification of a block device via I followed by the I\\&." msgstr "" #. type: Plain text #: debian-unstable fedora-rawhide msgid "The fourth field is the I in hexadecimal\\&." msgstr "" #. type: Plain text #: debian-unstable fedora-rawhide msgid "" "Specifies the hash version type\\&. Format type \"0\" is original Chrome OS " "version\\&. Format type \"1\" is modern version\\&." msgstr "" #. type: Plain text #: debian-unstable fedora-rawhide msgid "" "Salt used for format or verification\\&. Format is a hexadecimal string; 256 " "bytes long maximum; \"-\" is the special value for empty\\&." msgstr "" #. type: Plain text #: debian-unstable fedora-rawhide msgid "" "Use the provided I instead of generating new one\\&. The I must " "be provided in standard UUID format, e\\&.g\\&. " "\"12345678-1234-1234-1234-123456789abc\"\\&." msgstr "" #. type: Plain text #: debian-unstable fedora-rawhide msgid "" "Defines what to do if a data verity problem is detected (data " "corruption)\\&. Without these options kernel fails the IO operation with I/O " "error\\&. With B<--ignore-corruption> option the corruption is only " "logged\\&. With B<--restart-on-corruption> or B<--panic-on-corruption> the " "kernel is restarted (panicked) immediately\\&. (You have to provide way how " "to avoid restart loops\\&.)" msgstr "" #. type: Plain text #: debian-unstable fedora-rawhide msgid "" "Instruct kernel to not verify blocks that are expected to contain zeroes and " "always directly return zeroes instead\\&." msgstr "" #. type: Plain text #: debian-unstable fedora-rawhide msgid "B" msgstr "" #. type: Plain text #: debian-unstable fedora-rawhide msgid "" "Use this option only in very specific cases\\&. This option is available " "since Linux kernel version 4\\&.5\\&." msgstr "" #. type: Plain text #: debian-unstable fedora-rawhide msgid "" "Instruct kernel to verify blocks only the first time they are read from the " "data device, rather than every time\\&." msgstr "" #. type: Plain text #: debian-unstable fedora-rawhide msgid "" "It provides a reduced level of security because only offline tampering of " "the data device\\*(Aqs content will be detected, not online tampering\\&. " "This option is available since Linux kernel version 4\\&.17\\&." msgstr "" #. type: Plain text #: debian-unstable fedora-rawhide msgid "" "Use forward error correction (FEC) to recover from corruption if hash " "verification fails\\&. Use encoding data from the specified device\\&. The " "fec device argument can be block device or file image\\&. If fec device path " "doesn\\*(Aqt exist, it will be created as file\\&. Note: block sizes for " "data and hash devices must match\\&. Also, if the verity data_device is " "encrypted the fec_device should be too\\&." msgstr "" #. type: Plain text #: debian-unstable fedora-rawhide msgid "" "B(1), B(8), B(8), B(5), B(8)" msgstr ""