Kai Lüke
e50f4b7387
By default there is a fixed keyring in /usr or /etc. But when running systemd-pull unprivileged in the user context or with a custom transfer definition as in systemd-sysupdate --definitions=./... (e.g., for local ParticleOS updates) it is limiting to require that all keys have to be part of the OS keyring or otherwise no verification can be used. Also, for testing it is valuable to point it at a different keyring. Add a SYSTEMD_OPENPGP_KEYRING env var where the omission or empty assignment sticks to the current behavior of the global OS keyrings but a keyring path given will take precedence. While an env var can leak down the process tree and is more difficult to secure for being the trust anchor the advantage is that one can directly specify it in the service unit as drop-in instead of having to patch the command invocation. Anyway it's a niche use case and thus not part of the man page.
System and Service Manager
Details
Most documentation is available on systemd's web site.
Assorted, older, general information about systemd can be found in the systemd Wiki.
Information about build requirements is provided in the README file.
Consult our NEWS file for information about what's new in the most recent systemd versions.
Please see the Code Map for information about this repository's layout and content.
Please see the Hacking guide for information on how to hack on systemd and test your modifications.
Please see our Contribution Guidelines for more information about filing GitHub Issues and posting GitHub Pull Requests.
When preparing patches for systemd, please follow our Coding Style Guidelines.
If you are looking for support, please contact our mailing list, join our IRC channel #systemd on libera.chat or Matrix channel
Stable branches with backported patches are available in the stable repo.
We have a security bug bounty program sponsored by the Sovereign Tech Fund hosted on YesWeHack
Repositories with distribution packages built from git main are available on OBS, and also repositories with packages built from the latest stable release