diff options
| author | Lennart Poettering <lennart@poettering.net> | 2022-04-22 15:41:53 +0200 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2022-04-28 18:12:00 +0200 |
| commit | 72267a55a1adc3798257dc7ff0ce4a6e7594e146 (patch) | |
| tree | eae764cb7367638515b6f1a354f9a2bc135c34d4 /man/systemd.xml | |
| parent | 05eb896f3f125f843fe38ab8b8a480d07f8e0e88 (diff) | |
| download | systemd-72267a55a1adc3798257dc7ff0ce4a6e7594e146.tar.gz | |
man: document the new credentials features
Diffstat (limited to 'man/systemd.xml')
| -rw-r--r-- | man/systemd.xml | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/man/systemd.xml b/man/systemd.xml index 468edfb2d3..7c2ab8f464 100644 --- a/man/systemd.xml +++ b/man/systemd.xml @@ -945,6 +945,26 @@ </varlistentry> <varlistentry> + <term><varname>systemd.set_credential=</varname></term> + + <listitem><para>Sets a system credential, which can then be propagated to system services using the + <varname>LoadCredential=</varname> setting, see + <citerefentry><refentrytitle>systemd.exec</refentrytitle><manvolnum>5</manvolnum></citerefentry> for + details. Takes a pair of credential name and value, separated by a colon. Note that the kernel + command line is typically accessible by unprivileged programs in + <filename>/proc/cmdline</filename>. Thus, this mechanism is not suitable for transferring sensitive + data. Use it only for data that is not sensitive (e.g. public keys/certificates, rather than private + keys), or in testing/debugging environments.</para></listitem> + </varlistentry> + + <varlistentry> + <term><varname>systemd.import_credentials=</varname></term> + + <listitem><para>Takes a boolean argument. If false disables importing credentials from the kernel + command line, qemu_fw_cfg subsystem or the kernel command line.</para></listitem> + </varlistentry> + + <varlistentry> <term><varname>quiet</varname></term> <listitem><para>Turn off status output at boot, much like |