'\" t
.TH "SYSTEMD\-REPORT\-SIGN\-PLAIN@\&.SERVICE" "8" "" "systemd 262" "systemd-report-sign-plain@.service"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.\" http://bugs.debian.org/507673
.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.ie \n(.g .ds Aq \(aq
.el       .ds Aq '
.\" -----------------------------------------------------------------
.\" * set default formatting
.\" -----------------------------------------------------------------
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
.ad l
.\" -----------------------------------------------------------------
.\" * MAIN CONTENT STARTS HERE *
.\" -----------------------------------------------------------------
.SH "NAME"
systemd-report-sign-plain@.service, systemd-report-sign-plain.socket, systemd-report-sign-plain \- Sign system reports with a local software key
.SH "SYNOPSIS"
.PP
systemd\-report\-sign\-plain@\&.service
.PP
systemd\-report\-sign\-plain\&.socket
.PP
/usr/lib/systemd/systemd\-report\-sign\-plain
.SH "DESCRIPTION"
.PP
\fBsystemd\-report\-sign\-plain@\&.service\fR
is a system service that signs system reports generated by
\fBsystemd-report\fR(1)\&. It is a signing backend for the
\fB\-\-sign=\fR
logic of that tool: it implements the
\fBio\&.systemd\&.Report\&.Signer\&.Sign()\fR
Varlink method and is reached via a socket linked into the
/run/systemd/report\&.sign/
directory, named
plain\&.
.PP
The service is socket\-activated (one instance per connection) via
systemd\-report\-sign\-plain\&.socket, and signs the digest passed to it with a local software key\&. Signatures are made with the Ed25519 (EdDSA) algorithm\&.
.PP
On first use a key pair is generated automatically and stored below
/var/lib/systemd/report\&.sign\&.plain/: the private key in
local\&.private
(PKCS#8 PEM, readable only by the root user) and the public key in
local\&.public
(PEM, world readable)\&.
.PP
The public key is also exported as a system report metric\&.
.SH "SEE ALSO"
.PP
\fBsystemd\fR(1), \fBsystemd-report\fR(1)