diff options
| author | cvlc12 <cvlc12@outlook.fr> | 2024-12-28 19:19:08 +0100 |
|---|---|---|
| committer | Yu Watanabe <watanabe.yu+github@gmail.com> | 2024-12-30 01:14:29 +0100 |
| commit | 2cc58b6c8ad1826f22b120c4148d123018a7b92c (patch) | |
| tree | e42afa451743565fb13cb168e1a9a4f9f67b9058 /man | |
| parent | man: adjust description of PrivateUsers= so it is in line with reality (diff) | |
| download | systemd-2cc58b6c8ad1826f22b120c4148d123018a7b92c.tar.xz systemd-2cc58b6c8ad1826f22b120c4148d123018a7b92c.zip | |
man: change "secureboot-private-key.pem" filename for consistency
Diffstat (limited to 'man')
| -rw-r--r-- | man/uki.conf.example | 4 | ||||
| -rw-r--r-- | man/ukify.xml | 18 |
2 files changed, 11 insertions, 11 deletions
diff --git a/man/uki.conf.example b/man/uki.conf.example index 9fcae71e85..f78c15fe78 100644 --- a/man/uki.conf.example +++ b/man/uki.conf.example @@ -1,6 +1,6 @@ [UKI] -SecureBootPrivateKey=/etc/kernel/secure-boot-key.pem -SecureBootCertificate=/etc/kernel/secure-boot-certificate.pem +SecureBootPrivateKey=/etc/kernel/secureboot-private-key.pem +SecureBootCertificate=/etc/kernel/secureboot-certificate.pem [PCRSignature:initrd] Phases=enter-initrd diff --git a/man/ukify.xml b/man/ukify.xml index c3b8d920d1..13c14a45c8 100644 --- a/man/ukify.xml +++ b/man/ukify.xml @@ -671,8 +671,8 @@ --phases='enter-initrd:leave-initrd enter-initrd:leave-initrd:sysinit \ enter-initrd:leave-initrd:sysinit:ready' \ --pcr-banks=sha384,sha512 \ - --secureboot-private-key=sb.key \ - --secureboot-certificate=sb.cert \ + --secureboot-private-key=secureboot-private-key.pem \ + --secureboot-certificate=secureboot-certificate.pem \ --sign-kernel \ --cmdline='quiet rw rhgb' </programlisting> @@ -685,7 +685,7 @@ <filename index='false'>tpm2-pcr-private-key-initrd.pem</filename>, and for the main system (phases <constant>leave-initrd</constant>, <constant>sysinit</constant>, <constant>ready</constant>) with the key <filename index='false'>tpm2-pcr-private-key-system.pem</filename>. The Linux binary and the resulting - combined image will be signed with the SecureBoot key <filename index='false'>sb.key</filename>.</para> + combined image will be signed with the SecureBoot key <filename index='false'>secureboot-private-key.pem</filename>.</para> </example> <example> @@ -699,8 +699,8 @@ Initrd=early_cpio Cmdline=quiet rw rhgb -SecureBootPrivateKey=secure-boot-key.pem -SecureBootCertificate=secure-boot-certificate.pem +SecureBootPrivateKey=secureboot-private-key.pem +SecureBootCertificate=secureboot-certificate.pem SignKernel=yes PCRBanks=sha384,sha512 @@ -731,8 +731,8 @@ $ ukify -c ukify.conf build \ <title>Kernel command line PE addon</title> <programlisting>ukify build \ - --secureboot-private-key=secure-boot-key.pem \ - --secureboot-certificate=secure-boot-certificate.pem \ + --secureboot-private-key=secureboot-private-key.pem \ + --secureboot-certificate=secureboot-certificate.pem \ --cmdline='debug' \ --sbat='sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md uki-addon.author,1,UKI Addon for System,uki-addon.author,1,https://www.freedesktop.org/software/systemd/man/systemd-stub.html' @@ -753,8 +753,8 @@ $ ukify -c ukify.conf build \ <para>Next, we can generate the certificate and keys:</para> <programlisting># ukify genkey --config=/etc/kernel/uki.conf -Writing SecureBoot private key to /etc/kernel/secure-boot-key.pem -Writing SecureBoot certificate to /etc/kernel/secure-boot-certificate.pem +Writing SecureBoot private key to /etc/kernel/secureboot-private-key.pem +Writing SecureBoot certificate to /etc/kernel/secureboot-certificate.pem Writing private key for PCR signing to /etc/systemd/tpm2-pcr-private-key-initrd.pem Writing public key for PCR signing to /etc/systemd/tpm2-pcr-public-key-initrd.pem Writing private key for PCR signing to /etc/systemd/tpm2-pcr-private-key-system.pem |