mirror of
https://git.sr.ht/~nabijaczleweli/tzpfms
synced 2025-06-02 22:20:59 +03:00
Proof manuals
This commit is contained in:
parent
c1ab9a5a1a
commit
d8d29927c7
@ -49,18 +49,15 @@ program or
|
|||||||
and
|
and
|
||||||
.Nm zfs Cm inherit
|
.Nm zfs Cm inherit
|
||||||
\(em if the key becomes unloaded, they will require restoration from back-up.
|
\(em if the key becomes unloaded, they will require restoration from back-up.
|
||||||
However, they should never occur, unless something went terribly wrong with the dataset properties.
|
However, this should never occur, unless something went horribly wrong with the dataset properties.
|
||||||
.Pp
|
.Pp
|
||||||
If no datasets are specified, lists all matching encryption roots.
|
If no datasets are specified, all matching encryption roots are listed \(em by default, those managed by
|
||||||
The default filter is to list all roots managed by
|
|
||||||
.Nm tzpfms .
|
.Nm tzpfms .
|
||||||
.Fl ab
|
|
||||||
can be used to either list all roots or only ones backed by a particular end, respectively.
|
|
||||||
.
|
.
|
||||||
.Sh OPTIONS
|
.Sh OPTIONS
|
||||||
.Bl -tag -compact -width "-b back-end"
|
.Bl -tag -compact -width "-b back-end"
|
||||||
.It Fl H
|
.It Fl H
|
||||||
Scripting mode \(em do not print headers and separate fields by a single tab instead of columnating with spaces.
|
Scripting mode \(em remove headers and separate fields by a single tab instead of columnating them with spaces.
|
||||||
.Pp
|
.Pp
|
||||||
.It Fl r
|
.It Fl r
|
||||||
Recurse into all descendants of specified datasets.
|
Recurse into all descendants of specified datasets.
|
||||||
@ -75,9 +72,8 @@ Default:
|
|||||||
List all encryption roots, even ones not managed by
|
List all encryption roots, even ones not managed by
|
||||||
.Nm tzpfms .
|
.Nm tzpfms .
|
||||||
.It Fl b Ar back-end
|
.It Fl b Ar back-end
|
||||||
List only encryption roots with
|
List only encryption roots with the specified
|
||||||
.Ar tzpfms
|
.Nm tzpfms
|
||||||
back-end
|
|
||||||
.Ar back-end .
|
.Ar back-end .
|
||||||
.Pp
|
.Pp
|
||||||
.It Fl l
|
.It Fl l
|
||||||
|
@ -37,11 +37,11 @@ and the
|
|||||||
back-end was used, the metadata will be silently cleared.
|
back-end was used, the metadata will be silently cleared.
|
||||||
Otherwise, or in case of an error, data required for manual intervention will be printed to the standard error stream.
|
Otherwise, or in case of an error, data required for manual intervention will be printed to the standard error stream.
|
||||||
.Pp
|
.Pp
|
||||||
Next, a new wrapping key is be generated on the TPM, optionally backed up
|
Next, a new wrapping key is generated on the TPM, optionally backed up
|
||||||
.Pq see Sx OPTIONS ,
|
.Pq see Sx OPTIONS ,
|
||||||
and sealed on the TPM;
|
and sealed on the TPM;
|
||||||
the user is prompted for an optional passphrase to protect the key with,
|
the user is prompted for an optional passphrase to protect the key with,
|
||||||
and for the SRK passphrase, set when taking ownership, if it is not "well-known" (all zeroes).
|
and for the SRK passphrase, set when taking ownership, if not "well-known" (all zeroes).
|
||||||
.Pp
|
.Pp
|
||||||
The following properties are set on
|
The following properties are set on
|
||||||
.Ar dataset :
|
.Ar dataset :
|
||||||
|
@ -6,7 +6,7 @@
|
|||||||
.
|
.
|
||||||
.Sh NAME
|
.Sh NAME
|
||||||
.Nm zfs-tpm1x-load-key
|
.Nm zfs-tpm1x-load-key
|
||||||
.Nd load tzpfms TPM1.X-encrypted ZFS dataset key
|
.Nd load TPM1.X-encrypted ZFS dataset key
|
||||||
.Sh SYNOPSIS
|
.Sh SYNOPSIS
|
||||||
.Nm
|
.Nm
|
||||||
.Op Fl n
|
.Op Fl n
|
||||||
@ -22,8 +22,8 @@ backend
|
|||||||
will unseal the key and load it into
|
will unseal the key and load it into
|
||||||
.Ar dataset .
|
.Ar dataset .
|
||||||
.Pp
|
.Pp
|
||||||
The user is prompted for, first, the SRK passphrase, set when taking ownership, if it's not "well-known" (all zeroes),
|
The user is first prompted for the SRK passphrase, set when taking ownership, if not "well-known" (all zeroes);
|
||||||
then the additional passphrase set when creating the key, if it was provided.
|
then for the additional passphrase, set when creating the key, if one was set.
|
||||||
.Pp
|
.Pp
|
||||||
See
|
See
|
||||||
.Xr zfs-tpm1x-change-key 8
|
.Xr zfs-tpm1x-change-key 8
|
||||||
|
@ -37,7 +37,7 @@ and the
|
|||||||
back-end was used, the previous key will be freed from the TPM.
|
back-end was used, the previous key will be freed from the TPM.
|
||||||
Otherwise, or in case of an error, data required for manual intervention will be printed to the standard error stream.
|
Otherwise, or in case of an error, data required for manual intervention will be printed to the standard error stream.
|
||||||
.Pp
|
.Pp
|
||||||
Next, a new wrapping key is be generated on the TPM, optionally backed up
|
Next, a new wrapping key is generated on the TPM, optionally backed up
|
||||||
.Pq see Sx OPTIONS ,
|
.Pq see Sx OPTIONS ,
|
||||||
and sealed to a persistent object on the TPM under the owner hierarchy;
|
and sealed to a persistent object on the TPM under the owner hierarchy;
|
||||||
if there is a passphrase set on the owner hierarchy, the user is prompted for it;
|
if there is a passphrase set on the owner hierarchy, the user is prompted for it;
|
||||||
|
@ -6,7 +6,7 @@
|
|||||||
.
|
.
|
||||||
.Sh NAME
|
.Sh NAME
|
||||||
.Nm zfs-tpm2-load-key
|
.Nm zfs-tpm2-load-key
|
||||||
.Nd load tzpfms TPM2-encrypted ZFS dataset key
|
.Nd load TPM2-encrypted ZFS dataset key
|
||||||
.Sh SYNOPSIS
|
.Sh SYNOPSIS
|
||||||
.Nm
|
.Nm
|
||||||
.Op Fl n
|
.Op Fl n
|
||||||
@ -22,6 +22,8 @@ backend
|
|||||||
unseals the key and loads it into
|
unseals the key and loads it into
|
||||||
.Ar dataset .
|
.Ar dataset .
|
||||||
.Pp
|
.Pp
|
||||||
|
The user is prompted for the additional passphrase, set when creating the key, if one was set.
|
||||||
|
.Pp
|
||||||
See
|
See
|
||||||
.Xr zfs-tpm2-change-key 8
|
.Xr zfs-tpm2-change-key 8
|
||||||
for a detailed description.
|
for a detailed description.
|
||||||
|
Loading…
x
Reference in New Issue
Block a user