mirror of
https://github.com/systemd/systemd.git
synced 2026-08-09 09:32:04 +00:00
67 lines
2.9 KiB
XML
67 lines
2.9 KiB
XML
<?xml version="1.0"?> <!--*-nxml-*-->
|
|
<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
|
|
"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd">
|
|
<!-- SPDX-License-Identifier: LGPL-2.1-or-later -->
|
|
|
|
<refentry id="systemd-report-sign-plain_.service" conditional='HAVE_OPENSSL'
|
|
xmlns:xi="http://www.w3.org/2001/XInclude">
|
|
|
|
<refentryinfo>
|
|
<title>systemd-report-sign-plain@.service</title>
|
|
<productname>systemd</productname>
|
|
</refentryinfo>
|
|
|
|
<refmeta>
|
|
<refentrytitle>systemd-report-sign-plain@.service</refentrytitle>
|
|
<manvolnum>8</manvolnum>
|
|
</refmeta>
|
|
|
|
<refnamediv>
|
|
<refname>systemd-report-sign-plain@.service</refname>
|
|
<refname>systemd-report-sign-plain.socket</refname>
|
|
<refname>systemd-report-sign-plain</refname>
|
|
<refpurpose>Sign system reports with a local software key</refpurpose>
|
|
</refnamediv>
|
|
|
|
<refsynopsisdiv>
|
|
<para><filename>systemd-report-sign-plain@.service</filename></para>
|
|
<para><filename>systemd-report-sign-plain.socket</filename></para>
|
|
<para><filename>/usr/lib/systemd/systemd-report-sign-plain</filename></para>
|
|
</refsynopsisdiv>
|
|
|
|
<refsect1>
|
|
<title>Description</title>
|
|
|
|
<para><command>systemd-report-sign-plain@.service</command> is a system service that signs system reports
|
|
generated by
|
|
<citerefentry><refentrytitle>systemd-report</refentrytitle><manvolnum>1</manvolnum></citerefentry>. It is
|
|
a signing backend for the <option>--sign=</option> logic of that tool: it implements the
|
|
<function>io.systemd.Report.Signer.Sign()</function> Varlink method and is reached via a socket linked into
|
|
the <filename>/run/systemd/report.sign/</filename> directory, named <filename>plain</filename>.</para>
|
|
|
|
<para>The service is socket-activated (one instance per connection) via
|
|
<filename>systemd-report-sign-plain.socket</filename>, and signs the digest passed to it with a local
|
|
software key. Signatures are made with the Ed25519 (EdDSA) algorithm.</para>
|
|
|
|
<para>On first use a key pair is generated automatically and stored below
|
|
<filename>/var/lib/systemd/report.sign.plain/</filename>: the private key in
|
|
<filename>local.private</filename> (PKCS#8 PEM, readable only by the root user) and the public key in
|
|
<filename>local.public</filename> (PEM, world readable).</para>
|
|
|
|
<para>The public key is also exported as a system report metric.</para>
|
|
</refsect1>
|
|
|
|
<!-- Note: we do not document the command line switches here. The systemd-report-sign-plain binary itself
|
|
should not be invoked by users, but only as a service. Use systemd-report(1) to generate signed
|
|
reports. -->
|
|
|
|
<refsect1>
|
|
<title>See Also</title>
|
|
<para><simplelist type="inline">
|
|
<member><citerefentry><refentrytitle>systemd</refentrytitle><manvolnum>1</manvolnum></citerefentry></member>
|
|
<member><citerefentry><refentrytitle>systemd-report</refentrytitle><manvolnum>1</manvolnum></citerefentry></member>
|
|
</simplelist></para>
|
|
</refsect1>
|
|
|
|
</refentry>
|