mirror of
https://github.com/morgan9e/systemd
synced 2026-04-14 08:25:20 +09:00
a1d46e3078
This allows loading the X.509 certificate from an OpenSSL provider instead of a file system path. This allows loading certficates directly from hardware tokens instead of having to export them to a file on disk first.
57 lines
1.9 KiB
C
57 lines
1.9 KiB
C
/* SPDX-License-Identifier: LGPL-2.1-or-later */
|
|
#pragma once
|
|
|
|
#include "sd-id128.h"
|
|
#include "sd-json.h"
|
|
|
|
#include "boot-entry.h"
|
|
#include "image-policy.h"
|
|
#include "openssl-util.h"
|
|
#include "pager.h"
|
|
|
|
typedef enum InstallSource {
|
|
ARG_INSTALL_SOURCE_IMAGE,
|
|
ARG_INSTALL_SOURCE_HOST,
|
|
ARG_INSTALL_SOURCE_AUTO,
|
|
} InstallSource;
|
|
|
|
extern char *arg_esp_path;
|
|
extern char *arg_xbootldr_path;
|
|
extern bool arg_print_esp_path;
|
|
extern bool arg_print_dollar_boot_path;
|
|
extern unsigned arg_print_root_device;
|
|
extern bool arg_touch_variables;
|
|
extern bool arg_install_random_seed;
|
|
extern PagerFlags arg_pager_flags;
|
|
extern bool arg_graceful;
|
|
extern bool arg_quiet;
|
|
extern int arg_make_entry_directory; /* tri-state: < 0 for automatic logic */
|
|
extern sd_id128_t arg_machine_id;
|
|
extern char *arg_install_layout;
|
|
extern BootEntryTokenType arg_entry_token_type;
|
|
extern char *arg_entry_token;
|
|
extern sd_json_format_flags_t arg_json_format_flags;
|
|
extern bool arg_arch_all;
|
|
extern char *arg_root;
|
|
extern char *arg_image;
|
|
extern InstallSource arg_install_source;
|
|
extern char *arg_efi_boot_option_description;
|
|
extern bool arg_dry_run;
|
|
extern ImagePolicy *arg_image_policy;
|
|
extern bool arg_varlink;
|
|
extern bool arg_secure_boot_auto_enroll;
|
|
extern char *arg_certificate;
|
|
extern CertificateSourceType arg_certificate_source_type;
|
|
extern char *arg_certificate_source;
|
|
extern char *arg_private_key;
|
|
extern KeySourceType arg_private_key_source_type;
|
|
extern char *arg_private_key_source;
|
|
|
|
static inline const char* arg_dollar_boot_path(void) {
|
|
/* $BOOT shall be the XBOOTLDR partition if it exists, and otherwise the ESP */
|
|
return arg_xbootldr_path ?: arg_esp_path;
|
|
}
|
|
|
|
int acquire_esp(int unprivileged_mode, bool graceful, uint32_t *ret_part, uint64_t *ret_pstart, uint64_t *ret_psize, sd_id128_t *ret_uuid, dev_t *ret_devid);
|
|
int acquire_xbootldr(int unprivileged_mode, sd_id128_t *ret_uuid, dev_t *ret_devid);
|