summaryrefslogtreecommitdiffstats
path: root/man/systemd.xml
diff options
context:
space:
mode:
authorLennart Poettering <lennart@poettering.net>2022-04-22 15:41:53 +0200
committerLennart Poettering <lennart@poettering.net>2022-04-28 18:12:00 +0200
commit72267a55a1adc3798257dc7ff0ce4a6e7594e146 (patch)
treeeae764cb7367638515b6f1a354f9a2bc135c34d4 /man/systemd.xml
parentcreds-tool: properly search for both encrypted + unencrypted creds (diff)
downloadsystemd-72267a55a1adc3798257dc7ff0ce4a6e7594e146.tar.xz
systemd-72267a55a1adc3798257dc7ff0ce4a6e7594e146.zip
man: document the new credentials features
Diffstat (limited to 'man/systemd.xml')
-rw-r--r--man/systemd.xml20
1 files changed, 20 insertions, 0 deletions
diff --git a/man/systemd.xml b/man/systemd.xml
index 468edfb2d3..7c2ab8f464 100644
--- a/man/systemd.xml
+++ b/man/systemd.xml
@@ -945,6 +945,26 @@
</varlistentry>
<varlistentry>
+ <term><varname>systemd.set_credential=</varname></term>
+
+ <listitem><para>Sets a system credential, which can then be propagated to system services using the
+ <varname>LoadCredential=</varname> setting, see
+ <citerefentry><refentrytitle>systemd.exec</refentrytitle><manvolnum>5</manvolnum></citerefentry> for
+ details. Takes a pair of credential name and value, separated by a colon. Note that the kernel
+ command line is typically accessible by unprivileged programs in
+ <filename>/proc/cmdline</filename>. Thus, this mechanism is not suitable for transferring sensitive
+ data. Use it only for data that is not sensitive (e.g. public keys/certificates, rather than private
+ keys), or in testing/debugging environments.</para></listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><varname>systemd.import_credentials=</varname></term>
+
+ <listitem><para>Takes a boolean argument. If false disables importing credentials from the kernel
+ command line, qemu_fw_cfg subsystem or the kernel command line.</para></listitem>
+ </varlistentry>
+
+ <varlistentry>
<term><varname>quiet</varname></term>
<listitem><para>Turn off status output at boot, much like