Proof manuals

This commit is contained in:
наб 2021-11-10 18:34:47 +01:00
parent c1ab9a5a1a
commit d8d29927c7
No known key found for this signature in database
GPG Key ID: BCFD0B018D2658F1
5 changed files with 14 additions and 16 deletions

View File

@ -49,18 +49,15 @@ program or
and and
.Nm zfs Cm inherit .Nm zfs Cm inherit
\(em if the key becomes unloaded, they will require restoration from back-up. \(em if the key becomes unloaded, they will require restoration from back-up.
However, they should never occur, unless something went terribly wrong with the dataset properties. However, this should never occur, unless something went horribly wrong with the dataset properties.
.Pp .Pp
If no datasets are specified, lists all matching encryption roots. If no datasets are specified, all matching encryption roots are listed \(em by default, those managed by
The default filter is to list all roots managed by
.Nm tzpfms . .Nm tzpfms .
.Fl ab
can be used to either list all roots or only ones backed by a particular end, respectively.
. .
.Sh OPTIONS .Sh OPTIONS
.Bl -tag -compact -width "-b back-end" .Bl -tag -compact -width "-b back-end"
.It Fl H .It Fl H
Scripting mode \(em do not print headers and separate fields by a single tab instead of columnating with spaces. Scripting mode \(em remove headers and separate fields by a single tab instead of columnating them with spaces.
.Pp .Pp
.It Fl r .It Fl r
Recurse into all descendants of specified datasets. Recurse into all descendants of specified datasets.
@ -75,9 +72,8 @@ Default:
List all encryption roots, even ones not managed by List all encryption roots, even ones not managed by
.Nm tzpfms . .Nm tzpfms .
.It Fl b Ar back-end .It Fl b Ar back-end
List only encryption roots with List only encryption roots with the specified
.Ar tzpfms .Nm tzpfms
back-end
.Ar back-end . .Ar back-end .
.Pp .Pp
.It Fl l .It Fl l

View File

@ -37,11 +37,11 @@ and the
back-end was used, the metadata will be silently cleared. back-end was used, the metadata will be silently cleared.
Otherwise, or in case of an error, data required for manual intervention will be printed to the standard error stream. Otherwise, or in case of an error, data required for manual intervention will be printed to the standard error stream.
.Pp .Pp
Next, a new wrapping key is be generated on the TPM, optionally backed up Next, a new wrapping key is generated on the TPM, optionally backed up
.Pq see Sx OPTIONS , .Pq see Sx OPTIONS ,
and sealed on the TPM; and sealed on the TPM;
the user is prompted for an optional passphrase to protect the key with, the user is prompted for an optional passphrase to protect the key with,
and for the SRK passphrase, set when taking ownership, if it is not "well-known" (all zeroes). and for the SRK passphrase, set when taking ownership, if not "well-known" (all zeroes).
.Pp .Pp
The following properties are set on The following properties are set on
.Ar dataset : .Ar dataset :

View File

@ -6,7 +6,7 @@
. .
.Sh NAME .Sh NAME
.Nm zfs-tpm1x-load-key .Nm zfs-tpm1x-load-key
.Nd load tzpfms TPM1.X-encrypted ZFS dataset key .Nd load TPM1.X-encrypted ZFS dataset key
.Sh SYNOPSIS .Sh SYNOPSIS
.Nm .Nm
.Op Fl n .Op Fl n
@ -22,8 +22,8 @@ backend
will unseal the key and load it into will unseal the key and load it into
.Ar dataset . .Ar dataset .
.Pp .Pp
The user is prompted for, first, the SRK passphrase, set when taking ownership, if it's not "well-known" (all zeroes), The user is first prompted for the SRK passphrase, set when taking ownership, if not "well-known" (all zeroes);
then the additional passphrase set when creating the key, if it was provided. then for the additional passphrase, set when creating the key, if one was set.
.Pp .Pp
See See
.Xr zfs-tpm1x-change-key 8 .Xr zfs-tpm1x-change-key 8

View File

@ -37,7 +37,7 @@ and the
back-end was used, the previous key will be freed from the TPM. back-end was used, the previous key will be freed from the TPM.
Otherwise, or in case of an error, data required for manual intervention will be printed to the standard error stream. Otherwise, or in case of an error, data required for manual intervention will be printed to the standard error stream.
.Pp .Pp
Next, a new wrapping key is be generated on the TPM, optionally backed up Next, a new wrapping key is generated on the TPM, optionally backed up
.Pq see Sx OPTIONS , .Pq see Sx OPTIONS ,
and sealed to a persistent object on the TPM under the owner hierarchy; and sealed to a persistent object on the TPM under the owner hierarchy;
if there is a passphrase set on the owner hierarchy, the user is prompted for it; if there is a passphrase set on the owner hierarchy, the user is prompted for it;

View File

@ -6,7 +6,7 @@
. .
.Sh NAME .Sh NAME
.Nm zfs-tpm2-load-key .Nm zfs-tpm2-load-key
.Nd load tzpfms TPM2-encrypted ZFS dataset key .Nd load TPM2-encrypted ZFS dataset key
.Sh SYNOPSIS .Sh SYNOPSIS
.Nm .Nm
.Op Fl n .Op Fl n
@ -22,6 +22,8 @@ backend
unseals the key and loads it into unseals the key and loads it into
.Ar dataset . .Ar dataset .
.Pp .Pp
The user is prompted for the additional passphrase, set when creating the key, if one was set.
.Pp
See See
.Xr zfs-tpm2-change-key 8 .Xr zfs-tpm2-change-key 8
for a detailed description. for a detailed description.