From aefdc1124f19e8799a84e8a047e768223493bea1 Mon Sep 17 00:00:00 2001 From: Abderrahim Kitouni Date: Mon, 18 Sep 2023 16:03:38 +0100 Subject: man: update version information As I noticed a lot of missing information when trying to implement checking for missing info. I reimplemented the version information script to be more robust, and here is the result. Follow up to ec07c3c80b2b1bfa6788500202006ff85f5ae4f4 --- man/ukify.xml | 70 ++++++++++++++++++++++++++++++++++++++++++++--------------- 1 file changed, 52 insertions(+), 18 deletions(-) (limited to 'man/ukify.xml') diff --git a/man/ukify.xml b/man/ukify.xml index 3ee1306c6c..0d8a227796 100644 --- a/man/ukify.xml +++ b/man/ukify.xml @@ -190,7 +190,9 @@ Enable or disable a call to systemd-measure1 - to print pre-calculated PCR values. Defaults to false. + to print pre-calculated PCR values. Defaults to false. + + @@ -212,7 +214,7 @@ Note that the name is used as-is, and if the section name should start with a dot, it must be included in NAME. - + @@ -221,7 +223,9 @@ Specify one or more directories with helper tools. ukify will look for helper tools in those directories first, and if not found, try to load them from - $PATH in the usual fashion. + $PATH in the usual fashion. + + @@ -230,7 +234,9 @@ The output filename. If not specified, the name of the LINUX argument, with the suffix .unsigned.efi or .signed.efi will be used, depending on whether signing for SecureBoot was - performed. + performed. + + @@ -293,7 +299,9 @@ The kernel command line (the .cmdline section). The argument may be a literal string, or @ followed by a path name. If not specified, no command - line will be embedded. + line will be embedded. + + @@ -303,7 +311,9 @@ The os-release description (the .osrel section). The argument may be a literal string, or @ followed by a path name. If not specified, the os-release5 file - will be picked up from the host system. + will be picked up from the host system. + + @@ -312,7 +322,9 @@ The devicetree description (the .dtb section). The argument is a path to a compiled binary DeviceTree file. If not specified, the section will not be present. - + + + @@ -321,7 +333,9 @@ A picture to display during boot (the .splash section). The argument is a path to a BMP file. If not specified, the section will not be present. - + + + @@ -331,7 +345,9 @@ A path to a public key to embed in the .pcrpkey section. If not specified, and there's exactly one PCRPublicKey=/ argument, that key will be used. - Otherwise, the section will not be present. + Otherwise, the section will not be present. + + @@ -342,7 +358,9 @@ .uname section). If not specified, an attempt will be made to extract the version string from the kernel image. It is recommended to pass this explicitly if known, because the extraction is based on heuristics and not very reliable. If not specified and extraction fails, - the section will not be present. + the section will not be present. + + @@ -352,7 +370,9 @@ A comma or space-separated list of PCR banks to sign a policy for. If not present, all known banks will be used (sha1, sha256, sha384, sha512), which will fail if not supported by the - system. + system. + + @@ -373,7 +393,9 @@ A path to a private key to use for signing of the resulting binary. If the SigningEngine=/ option is used, this may also be an engine-specific designation. This option is required by - SecureBootSigningTool=sbsign/. + SecureBootSigningTool=sbsign/. + + @@ -383,7 +405,9 @@ A path to a certificate to use for signing of the resulting binary. If the SigningEngine=/ option is used, this may also be an engine-specific designation. This option is required by - SecureBootSigningTool=sbsign/. + SecureBootSigningTool=sbsign/. + + @@ -424,7 +448,9 @@ An "engine" for signing of the resulting binary. This option is currently passed verbatim to the option of sbsign1. - + + + @@ -438,7 +464,9 @@ SecureBootPrivateKey=/ option and the binary has not already been signed. If SignKernel=/ is true, and the binary has already - been signed, the signature will be appended anyway. + been signed, the signature will be appended anyway. + + @@ -471,7 +499,9 @@ A private key to use for signing PCR policies. On the commandline, this option may - be specified more than once, in which case multiple signatures will be made. + be specified more than once, in which case multiple signatures will be made. + + @@ -483,7 +513,9 @@ On the commandline, this option may be specified more than once, similarly to the option. If not present, the public keys will be extracted from the private keys. On the commandline, if present, the this option must be specified the same number - of times as the option. + of times as the option. + + @@ -497,7 +529,9 @@ will be used. On the commandline, when this argument is present, it must appear the same number of times as - the option. + the option. + + -- cgit v1.2.3