1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
|
# SOME DESCRIPTIVE TITLE
# Copyright (C) YEAR Free Software Foundation, Inc.
# This file is distributed under the same license as the PACKAGE package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: PACKAGE VERSION\n"
"POT-Creation-Date: 2024-06-15 09:12+0200\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"Language: \n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
#. type: TH
#: debian-unstable fedora-rawhide
#, no-wrap
msgid "SYSTEMD-SSH-GENERATOR"
msgstr ""
#. type: TH
#: debian-unstable fedora-rawhide
#, no-wrap
msgid "systemd 256~rc3"
msgstr ""
#. type: TH
#: debian-unstable fedora-rawhide
#, no-wrap
msgid "systemd-ssh-generator"
msgstr ""
#. -----------------------------------------------------------------
#. * MAIN CONTENT STARTS HERE *
#. -----------------------------------------------------------------
#. type: SH
#: debian-unstable fedora-rawhide
#, no-wrap
msgid "NAME"
msgstr ""
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid ""
"systemd-ssh-generator - Generator for binding a socket-activated SSH server "
"to local B<AF_VSOCK> and B<AF_UNIX> sockets"
msgstr ""
#. type: SH
#: debian-unstable fedora-rawhide
#, no-wrap
msgid "SYNOPSIS"
msgstr ""
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid "/usr/lib/systemd/system-generators/systemd-ssh-generator"
msgstr ""
#. type: SH
#: debian-unstable fedora-rawhide
#, no-wrap
msgid "DESCRIPTION"
msgstr ""
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid ""
"B<systemd-ssh-generator> binds a socket-activated SSH server to local "
"B<AF_VSOCK> and B<AF_UNIX> sockets under certain conditions\\&. It only has "
"an effect if the B<sshd>(8) binary is installed\\&. Specifically, it does "
"the following:"
msgstr ""
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid ""
"If invoked in a VM with B<AF_VSOCK> support, a socket-activated SSH per-"
"connection service is bound to B<AF_VSOCK> port 22\\&."
msgstr ""
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid ""
"If invoked in a container environment with a writable directory /run/host/"
"unix-export/ pre-mounted it binds SSH to an B<AF_UNIX> socket /run/host/unix-"
"export/ssh\\&. The assumption is that this directory is bind mounted to the "
"host side as well, and can be used to connect to the container from "
"there\\&. See \\m[blue]B<Container Interface>\\m[]\\&\\s-2\\u[1]\\d\\s+2 for "
"more information about this interface\\&."
msgstr ""
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid ""
"A local B<AF_UNIX> socket /run/ssh-unix-local/socket is also bound, "
"unconditionally\\&. This may be used for SSH communication from the host to "
"itself, without involving networking, for example to traverse security "
"boundaries safely and with secure authentication\\&."
msgstr ""
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid ""
"Additional B<AF_UNIX> and B<AF_VSOCK> sockets are optionally bound, based on "
"the I<systemd\\&.ssh_listen=> kernel command line option or the ssh\\&."
"listen system credential (see below)\\&."
msgstr ""
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid ""
"See B<systemd-ssh-proxy>(1) for details on how to connect to these sockets "
"via the B<ssh> client\\&."
msgstr ""
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid ""
"The I<ssh\\&.authorized_keys\\&.root> credential can be used to allow "
"specific public keys to log in over SSH\\&. See B<systemd.systemd-"
"credentials>(7) for more information\\&."
msgstr ""
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid ""
"The generator will use a packaged sshd@\\&.service service template file if "
"one exists, and otherwise generate a suitable service template file\\&."
msgstr ""
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid "systemd-ssh-generator implements B<systemd.generator>(7)\\&."
msgstr ""
#. type: SH
#: debian-unstable fedora-rawhide
#, no-wrap
msgid "KERNEL COMMAND LINE"
msgstr ""
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid ""
"systemd-ssh-generator understands the following B<kernel-command-line>(7) "
"parameters:"
msgstr ""
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid "I<systemd\\&.ssh_auto=>"
msgstr ""
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid ""
"This option takes an optional boolean argument, and defaults to yes\\&. If "
"enabled, the automatic binding to the B<AF_VSOCK> and B<AF_UNIX> sockets "
"listed above is done\\&. If disable, this is not done, except for those "
"explicitly requested via I<systemd\\&.ssh_listen=> on the kernel command "
"line or via the I<ssh\\&.listen> system credential\\&."
msgstr ""
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid "Added in version 256\\&."
msgstr ""
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid "I<systemd\\&.ssh_listen=>"
msgstr ""
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid ""
"This option configures an additional socket to bind SSH to\\&. It may be "
"used multiple times to bind multiple sockets\\&. The syntax should follow "
"the one of I<ListenStream=>, see B<systemd.socket>(5) for details\\&. This "
"functionality supports all socket families systemd supports, including "
"B<AF_INET> and B<AF_INET6>\\&."
msgstr ""
#. type: SH
#: debian-unstable fedora-rawhide
#, no-wrap
msgid "CREDENTIALS"
msgstr ""
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid ""
"B<systemd-ssh-generator> supports the system credentials logic\\&. The "
"following credentials are used when passed in:"
msgstr ""
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid "I<ssh\\&.listen>"
msgstr ""
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid ""
"This credential should be a text file, with each line referencing one "
"additional socket to bind SSH to\\&. The syntax should follow the one of "
"I<ListenStream=>, see B<systemd.socket>(5) for details\\&. This "
"functionality supports all socket families systemd supports, including "
"B<AF_INET> and B<AF_INET6>\\&."
msgstr ""
#. type: SH
#: debian-unstable fedora-rawhide
#, no-wrap
msgid "SEE ALSO"
msgstr ""
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid ""
"B<systemd>(1), B<kernel-command-line>(7), B<systemd.system-credentials>(7), "
"B<vsock>(7), B<unix>(7), B<ssh>(1), B<sshd>(8)"
msgstr ""
#. type: SH
#: debian-unstable fedora-rawhide
#, no-wrap
msgid "NOTES"
msgstr ""
#. type: IP
#: debian-unstable fedora-rawhide
#, no-wrap
msgid " 1."
msgstr ""
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid "Container Interface"
msgstr ""
#. type: Plain text
#: debian-unstable fedora-rawhide
msgid "\\%https://systemd.io/CONTAINER_INTERFACE"
msgstr ""
|
