system/systemd
system/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd synced 2024-09-30 05:15:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

man: document other keyname options for pam_systemd_loadkey

Browse source
This commit is contained in:
Jonathan Conder 2024-04-18 08:01:27 +12:00
parent 0bf317b620
commit 08ef6998e3
1 changed files with 40 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

42
man/pam_systemd_loadkey.xml
View file

@ -49,9 +49,47 @@
<term><varname>keyname=</varname></term>
<listitem><para>Takes a string argument which sets the keyname to read.
The default is <literal>cryptsetup</literal>, which is used by
The default is <literal>cryptsetup</literal>.
During boot,
<citerefentry><refentrytitle>systemd-cryptsetup@.service</refentrytitle><manvolnum>8</manvolnum></citerefentry>
to store LUKS passphrase during boot.</para>
stores a passphrase or PIN in the keyring.
The LUKS2 volume key can also be used, via the <option>link-volume-key</option> option in
<citerefentry><refentrytitle>crypttab</refentrytitle><manvolnum>5</manvolnum></citerefentry>.</para>
<table>
<title>
Possible values for <varname>keyname</varname>.
</title>
<tgroup cols='2'>
<colspec colname='value' />
<colspec colname='description' />
<thead>
<row>
<entry>Value</entry>
<entry>Description</entry>
</row>
</thead>
<tbody>
<row>
<entry>cryptsetup</entry>
<entry>Passphrase or recovery key</entry>
</row>
<row>
<entry>fido2-pin</entry>
<entry>Security token PIN</entry>
</row>
<row>
<entry>luks2-pin</entry>
<entry>LUKS2 token PIN</entry>
</row>
<row>
<entry>tpm2-pin</entry>
<entry>TPM2 PIN</entry>
</row>
</tbody>
</tgroup>
</table>
<xi:include href="version-info.xml" xpointer="v255"/></listitem>
</varlistentry>