summaryrefslogtreecommitdiff
path: root/man/crypttab.xml
diff options
context:
space:
mode:
authorLennart Poettering <lennart@poettering.net>2021-10-08 22:24:50 +0200
committerLennart Poettering <lennart@poettering.net>2021-10-11 11:12:29 +0200
commit2c7ec8203ef38a21217c5777dcbebc622a2429ee (patch)
tree7d128b5579d93d48d2643d310f6a23c739284cbf /man/crypttab.xml
parenta2236110c335ff78df87f6b2e4316e75e6133592 (diff)
downloadsystemd-2c7ec8203ef38a21217c5777dcbebc622a2429ee.tar.gz
man: document new token-timeout= setting
Diffstat (limited to 'man/crypttab.xml')
-rw-r--r--man/crypttab.xml22
1 files changed, 15 insertions, 7 deletions
diff --git a/man/crypttab.xml b/man/crypttab.xml
index e8c538cc85..ac5c6ef666 100644
--- a/man/crypttab.xml
+++ b/man/crypttab.xml
@@ -678,6 +678,18 @@
</varlistentry>
<varlistentry>
+ <term><option>token-timeout=</option></term>
+
+ <listitem><para>Specifies how long to wait at most for configured security devices (i.e. FIDO2,
+ PKCS#11, TPM2) to show up. Takes a time value in seconds (but other time units may be specified too,
+ see <citerefentry><refentrytitle>systemd.time</refentrytitle><manvolnum>7</manvolnum></citerefentry>
+ for supported formats). Defaults to 30s. Once the specified timeout elapsed authentication via
+ password is attempted. Note that this timeout applies to waiting for the security device to show up —
+ it does not apply to the PIN prompt for the device (should one be needed) or similar. Pass 0 to turn
+ off the time-out and wait forever.</para></listitem>
+ </varlistentry>
+
+ <varlistentry>
<term><option>try-empty-password=</option></term>
<listitem><para>Takes a boolean argument. If enabled, right before asking the user for a password it
@@ -689,13 +701,9 @@
<varlistentry>
<term><option>x-systemd.device-timeout=</option></term>
- <listitem><para>Specifies how long systemd should wait for a device to show up
- before giving up on the entry. The argument is a time in seconds or explicitly
- specified units of
- <literal>s</literal>,
- <literal>min</literal>,
- <literal>h</literal>,
- <literal>ms</literal>.
+ <listitem><para>Specifies how long systemd should wait for a block device to show up before
+ giving up on the entry. The argument is a time in seconds or explicitly specified units of
+ <literal>s</literal>, <literal>min</literal>, <literal>h</literal>, <literal>ms</literal>.
</para></listitem>
</varlistentry>