/mandos/trunk

<!ENTITY TIMESTAMP "2023-04-30">

<!ENTITY % common SYSTEM "common.ent">

%common;

    <productnumber>&version;</productnumber>

          <email>belorn@recompile.se</email>

          <email>teddy@recompile.se</email>

      <year>2009</year>

      <year>2010</year>

      <year>2011</year>

      <year>2012</year>

      <year>2013</year>

      <year>2014</year>

      <year>2015</year>

      <year>2016</year>

      <year>2017</year>

      <year>2018</year>

      <year>2019</year>

  

      Run Mandos plugins, pass data from first to succeed.

  

        >ENV</replaceable><literal>=</literal><replaceable

        <replaceable>ENV</replaceable><literal>=</literal><replaceable

      <arg><option>--plugin-helper-dir=<replaceable

      >DIRECTORY</replaceable></option></arg>

      <sbr/>

      be specified as a <quote>keyscript</quote> for the root disk in

      <citerefentry><refentrytitle>crypttab</refentrytitle>

      <manvolnum>5</manvolnum></citerefentry>.  The aim of this

      program is therefore to output a password, which then

      <citerefentry><refentrytitle>cryptsetup</refentrytitle>

        <replaceable>ENV</replaceable><literal>=</literal><replaceable

        <replaceable>ENV</replaceable><literal>=</literal><replaceable

      

          </para>

      

            from the configuration file.

      

      

      

        <term><option>--plugin-helper-dir

        <replaceable>DIRECTORY</replaceable></option></term>

        <listitem>

          <para>

            Specify a different plugin helper directory.  The default

            is <filename>/lib/mandos/plugin-helpers</filename>, which

            will exist in the initial <acronym>RAM</acronym> disk

            environment.  (This will simply be passed to all plugins

            via the <envar>MANDOSPLUGINHELPERDIR</envar> environment

            variable.  See <xref linkend="writing_plugins"/>)

          </para>

        </listitem>

      </varlistentry>

      

      <varlistentry>

      

  

      <firstterm>plugins</firstterm>, which are executable programs in

      a directory in the initial <acronym>RAM</acronym> disk

      environment.  The default directory is

    

        A plugin is an executable program which prints a password to

        its standard output and then exits with a successful (zero)

        exit status.  If the exit status is not zero, any output on

        If the password is a single-line, manually entered passprase,

        a final trailing newline character should

        <emphasis>not</emphasis> be printed.

      </para>

      <para>

        services not available there.  Any helper executables required

        by the plugin (which are not in the <envar>PATH</envar>) can

        be placed in the plugin helper directory, the name of which

        will be made available to the plugin via the

        <envar>MANDOSPLUGINHELPERDIR</envar> environment variable.

        from the standard input, without knowing that no other plugin

        is also using it.

      options.  Also, the <option>--plugin-helper-dir</option> option

      will affect the environment variable

      <envar>MANDOSPLUGINHELPERDIR</envar> for the plugins.

        <varlistentry>

          <term><filename class="directory"

          >/lib/mandos/plugins.d</filename></term>

          <listitem>

            <para>

              The default plugin directory; can be changed by the

              <option>--plugin-dir</option> option.

            </para>

          </listitem>

        </varlistentry>

        <varlistentry>

          <term><filename class="directory"

          >/lib/mandos/plugin-helpers</filename></term>

          <listitem>

            <para>

              The default plugin helper directory; can be changed by

              the <option>--plugin-helper-dir</option> option.

            </para>

          </listitem>

        </varlistentry>

  <refsect1 id="bugs">

    <title>BUGS</title>

    <para>

      The <option>--config-file</option> option is ignored when

      specified from within a configuration file.

    </para>

    <xi:include href="bugs.xml"/>

  </refsect1>

        Read a different configuration file, run plugins from a

        different directory, specify an alternate plugin helper

        directory and add four options to the

        <citerefentry><refentrytitle >mandos-client</refentrytitle>

<userinput>cd /etc/keys/mandos; &COMMANDNAME;  --config-file=/etc/mandos/plugin-runner.conf --plugin-dir /usr/lib/x86_64-linux-gnu/mandos/plugins.d --plugin-helper-dir /usr/lib/x86_64-linux-gnu/mandos/plugin-helpers --options-for=mandos-client:--pubkey=pubkey.txt,&#x200b;--seckey=seckey.txt,&#x200b;--tls-pubkey=tls-pubkey.pem,&#x200b;--tls-privkey=tls-privkey.pem</userinput>

      set on the plugin executable file (see <citerefentry>

      </citerefentry>, there is a slight risk that if this program

      fails to work, there might be no way to boot the system except

      for booting from another media and editing the initial RAM disk

      <citerefentry><refentrytitle>intro</refentrytitle>

      <manvolnum>8mandos</manvolnum></citerefentry>,

      <citerefentry><refentrytitle>mandos-client</refentrytitle>