diff options
| author | Lennart Poettering <lennart@poettering.net> | 2023-10-30 22:26:09 +0100 |
|---|---|---|
| committer | Luca Boccassi <luca.boccassi@gmail.com> | 2023-11-02 19:18:00 +0100 |
| commit | 0631eac96d1ef455dae710dc5e4f1c1fecbb3c38 (patch) | |
| tree | 5ebdc17aa7d338ae36f1ce5a0b023eaf2ec64b4a /docs/ENVIRONMENT.md | |
| parent | meson: make sure we never actually link to libxenctrl (diff) | |
| download | systemd-0631eac96d1ef455dae710dc5e4f1c1fecbb3c38.tar.xz systemd-0631eac96d1ef455dae710dc5e4f1c1fecbb3c38.zip | |
crytsetup: allow overriding the token .so library path via an env var
I tried to get something similar upstream:
https://gitlab.com/cryptsetup/cryptsetup/-/issues/846
But no luck, it was suggested I use ELF interposition instead. Hence,
let's do so (but not via ugly LD_PRELOAD, but simply by overriding the
relevant symbol natively in our own code).
This makes debugging tokens a ton easier.
Diffstat (limited to 'docs/ENVIRONMENT.md')
| -rw-r--r-- | docs/ENVIRONMENT.md | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/docs/ENVIRONMENT.md b/docs/ENVIRONMENT.md index 5747c103e2..3a42774212 100644 --- a/docs/ENVIRONMENT.md +++ b/docs/ENVIRONMENT.md @@ -465,6 +465,11 @@ disk images with `--image=` or similar: activating via FIDO2, PKCS#11, TPM2, i.e. mechanisms natively supported by `systemd-cryptsetup`. Defaults to enabled. +* `$SYSTEMD_CRYPTSETUP_TOKEN_PATH` – takes a path to a directory in the file + system. If specified overrides where libcryptsetup will look for token + modules (.so). This is useful for debugging token modules: set this + environment variable to the build directory and you are set. + Various tools that read passwords from the TTY, such as `systemd-cryptenroll` and `homectl`: |