credentials: document that their path is stable for system services

This commit is contained in:
Joerg Behrmann
2023-10-20 11:35:04 +02:00
committed by Luca Boccassi
parent af7417ac7b
commit cf37171890
2 changed files with 12 additions and 2 deletions

View File

@@ -468,7 +468,12 @@ READY=1
## Relevant Paths
From *service* perspective the runtime path to find loaded credentials in is
provided in the `$CREDENTIALS_DIRECTORY` environment variable.
provided in the `$CREDENTIALS_DIRECTORY` environment variable. For *system
services* the credential directory will be `/run/credentials/<unit name>`, but
hardcoding this path is discouraged, because it does not work for *user
services*. Packagers and system administrators may hardcode the credential path
as a last resort for software that does not yet search for credentials relative
to `$CREDENTIALS_DIRECTORY`.
From *generator* perspective the runtime path to find credentials passed into
the system in plaintext form in is provided in `$CREDENTIALS_DIRECTORY`, and