|
 |
c2dfb7 |
From fdb86185b56619c59602c6546fd0710eec4a6e85 Mon Sep 17 00:00:00 2001
|
|
|
c2dfb7 |
From: shinygold <10763595+shinygold@users.noreply.github.com>
|
|
|
c2dfb7 |
Date: Tue, 16 Jul 2019 13:05:34 +0200
|
|
|
c2dfb7 |
Subject: [PATCH] cryptsetup: add documentation for keyfile-timeout
|
|
|
c2dfb7 |
|
|
|
c2dfb7 |
(cherry picked from commit 4e1334512debb27f4a0c4a6da237a4b8d59fea08)
|
|
|
c2dfb7 |
|
|
|
c2dfb7 |
Related: #1763155
|
|
|
c2dfb7 |
---
|
|
|
c2dfb7 |
man/crypttab.xml | 14 +++++++++++++-
|
|
|
c2dfb7 |
1 file changed, 13 insertions(+), 1 deletion(-)
|
|
|
c2dfb7 |
|
|
|
c2dfb7 |
diff --git a/man/crypttab.xml b/man/crypttab.xml
|
|
|
c2dfb7 |
index 3574ce00da..6074315980 100644
|
|
|
c2dfb7 |
--- a/man/crypttab.xml
|
|
|
c2dfb7 |
+++ b/man/crypttab.xml
|
|
|
c2dfb7 |
@@ -150,6 +150,17 @@
|
|
|
c2dfb7 |
sequential order.</para></listitem>
|
|
|
c2dfb7 |
</varlistentry>
|
|
|
c2dfb7 |
|
|
|
c2dfb7 |
+ <varlistentry>
|
|
|
c2dfb7 |
+ <term><option>keyfile-timeout=</option></term>
|
|
|
c2dfb7 |
+
|
|
|
c2dfb7 |
+ <listitem><para> Specifies the timeout for the device on
|
|
|
c2dfb7 |
+ which the key file resides and falls back to a password if
|
|
|
c2dfb7 |
+ it could not be mounted. See
|
|
|
c2dfb7 |
+ <citerefentry><refentrytitle>systemd-cryptsetup-generator</refentrytitle><manvolnum>8</manvolnum></citerefentry>
|
|
|
c2dfb7 |
+ for key files on external devices.
|
|
|
c2dfb7 |
+ </para></listitem>
|
|
|
c2dfb7 |
+ </varlistentry>
|
|
|
c2dfb7 |
+
|
|
|
c2dfb7 |
<varlistentry>
|
|
|
c2dfb7 |
<term><option>luks</option></term>
|
|
|
c2dfb7 |
|
|
|
c2dfb7 |
@@ -417,7 +428,8 @@
|
|
|
c2dfb7 |
<programlisting>luks UUID=2505567a-9e27-4efe-a4d5-15ad146c258b
|
|
|
c2dfb7 |
swap /dev/sda7 /dev/urandom swap
|
|
|
c2dfb7 |
truecrypt /dev/sda2 /etc/container_password tcrypt
|
|
|
c2dfb7 |
-hidden /mnt/tc_hidden /dev/null tcrypt-hidden,tcrypt-keyfile=/etc/keyfile</programlisting>
|
|
|
c2dfb7 |
+hidden /mnt/tc_hidden /dev/null tcrypt-hidden,tcrypt-keyfile=/etc/keyfile
|
|
|
c2dfb7 |
+external /dev/sda3 keyfile:LABEL=keydev keyfile-timeout=10s</programlisting>
|
|
|
c2dfb7 |
</example>
|
|
|
c2dfb7 |
</refsect1>
|
|
|
c2dfb7 |
|