systemd/units/systemd-pcrlock@.service.in

#  SPDX-License-Identifier: LGPL-2.1-or-later
#
#  This file is part of systemd.
#
#  systemd is free software; you can redistribute it and/or modify it
#  under the terms of the GNU Lesser General Public License as published by
#  the Free Software Foundation; either version 2.1 of the License, or
#  (at your option) any later version.

[Unit]
Description=Make TPM PCR Policy
Documentation=man:systemd-pcrlock(8)
DefaultDependencies=no
Conflicts=shutdown.target
After=systemd-tpm2-setup.service
Before=sysinit.target shutdown.target
After=systemd-remount-fs.service var.mount

[Service]
Environment=LISTEN_FDNAMES=varlink
ExecStart={{LIBEXECDIR}}/systemd-pcrlock --location=770
pcrlock: add basic Varlink interface This can be used to make or delete a PCR policy via Varlink. It can also be used to query the current event log in CEL format. 2024-02-02 14:17:09 +00:00			`# SPDX-License-Identifier: LGPL-2.1-or-later`
			`#`
			`# This file is part of systemd.`
			`#`
			`# systemd is free software; you can redistribute it and/or modify it`
			`# under the terms of the GNU Lesser General Public License as published by`
			`# the Free Software Foundation; either version 2.1 of the License, or`
			`# (at your option) any later version.`

			`[Unit]`
units: drop "(Varlink)" We generally don't specify the protocol implementation in unit descriptions. For journald, we have: $ git grep Description 'units/journald' units/systemd-journald-audit.socket:Description=Journal Audit Socket units/systemd-journald-dev-log.socket:Description=Journal Socket (/dev/log) units/systemd-journald-varlink@.socket:Description=Journal Varlink Socket for Namespace %i units/systemd-journald.service.in:Description=Journal Service units/systemd-journald.socket:Description=Journal Sockets units/systemd-journald@.service.in:Description=Journal Service for Namespace %i units/systemd-journald@.socket:Description=Journal Sockets for Namespace %i so we need to keep "Varlink" in the name. But also use "Sockets" (plural) for the "main" socket unit, since it opens multiple sockets. 2024-03-14 09:16:25 +00:00			`Description=Make TPM PCR Policy`
pcrlock: add basic Varlink interface This can be used to make or delete a PCR policy via Varlink. It can also be used to query the current event log in CEL format. 2024-02-02 14:17:09 +00:00			`Documentation=man:systemd-pcrlock(8)`
			`DefaultDependencies=no`
			`Conflicts=shutdown.target`
			`After=systemd-tpm2-setup.service`
			`Before=sysinit.target shutdown.target`
			`After=systemd-remount-fs.service var.mount`

			`[Service]`
			`Environment=LISTEN_FDNAMES=varlink`
			`ExecStart={{LIBEXECDIR}}/systemd-pcrlock --location=770`