5d2ee9
From fdb86185b56619c59602c6546fd0710eec4a6e85 Mon Sep 17 00:00:00 2001
5d2ee9
From: shinygold <10763595+shinygold@users.noreply.github.com>
5d2ee9
Date: Tue, 16 Jul 2019 13:05:34 +0200
5d2ee9
Subject: [PATCH] cryptsetup: add documentation for keyfile-timeout
5d2ee9
5d2ee9
(cherry picked from commit 4e1334512debb27f4a0c4a6da237a4b8d59fea08)
5d2ee9
5d2ee9
Related: #1763155
5d2ee9
---
5d2ee9
 man/crypttab.xml | 14 +++++++++++++-
5d2ee9
 1 file changed, 13 insertions(+), 1 deletion(-)
5d2ee9
5d2ee9
diff --git a/man/crypttab.xml b/man/crypttab.xml
5d2ee9
index 3574ce00da..6074315980 100644
5d2ee9
--- a/man/crypttab.xml
5d2ee9
+++ b/man/crypttab.xml
5d2ee9
@@ -150,6 +150,17 @@
5d2ee9
         sequential order.</para></listitem>
5d2ee9
       </varlistentry>
5d2ee9
 
5d2ee9
+      <varlistentry>
5d2ee9
+        <term><option>keyfile-timeout=</option></term>
5d2ee9
+
5d2ee9
+        <listitem><para> Specifies the timeout for the device on
5d2ee9
+        which the key file resides and falls back to a password if
5d2ee9
+        it could not be mounted. See
5d2ee9
+        <citerefentry><refentrytitle>systemd-cryptsetup-generator</refentrytitle><manvolnum>8</manvolnum></citerefentry>
5d2ee9
+        for key files on external devices.
5d2ee9
+        </para></listitem>
5d2ee9
+      </varlistentry>
5d2ee9
+
5d2ee9
       <varlistentry>
5d2ee9
         <term><option>luks</option></term>
5d2ee9
 
5d2ee9
@@ -417,7 +428,8 @@
5d2ee9
       <programlisting>luks       UUID=2505567a-9e27-4efe-a4d5-15ad146c258b
5d2ee9
 swap       /dev/sda7       /dev/urandom       swap
5d2ee9
 truecrypt  /dev/sda2       /etc/container_password  tcrypt
5d2ee9
-hidden     /mnt/tc_hidden  /dev/null    tcrypt-hidden,tcrypt-keyfile=/etc/keyfile</programlisting>
5d2ee9
+hidden     /mnt/tc_hidden  /dev/null    tcrypt-hidden,tcrypt-keyfile=/etc/keyfile
5d2ee9
+external   /dev/sda3       keyfile:LABEL=keydev keyfile-timeout=10s</programlisting>
5d2ee9
     </example>
5d2ee9
   </refsect1>
5d2ee9