Personacrypt and PEFS: TRANSLATIONS

- Update translation files.
This commit is contained in:
Mrt134
2016-12-09 14:38:17 -05:00
parent 36e6a94031
commit 79a32b5009
13 changed files with 3224 additions and 1963 deletions

View File

@@ -482,7 +482,7 @@ msgid ""
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <update4>`."
msgstr ""
#: ../../sysadmclient.rst:1326
#: ../../sysadmclient.rst:1355
msgid "Settings Tab"
msgstr ""
@@ -924,20 +924,7 @@ msgstr ""
msgid "PersonaCrypt"
msgstr ""
#: ../../sysadmclient.rst:894
msgid ""
"|trueos| provides support for a security feature known as PersonaCrypt. A "
"PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
" with ZFS and encrypted with GELI. This device is used to hold a specific "
"user's home directory, meaning they can securely transport and access their "
"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
"example, this can be used to securely access one's home directory from a "
"laptop, home computer, and work computer. The device is protected by an "
"encryption key and a password which is, and should be, separate from the "
"user's login password."
msgstr ""
#: ../../sysadmclient.rst:904
#: ../../sysadmclient.rst:905
msgid ""
"When a user is configured to use a PersonaCrypt device, that user can not "
"login using an unencrypted session on the same system. In other words, the "
@@ -946,22 +933,13 @@ msgid ""
"different user accounts, one for each type of session."
msgstr ""
#: ../../sysadmclient.rst:911
msgid ""
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
"your passphrase, and the other being a key stored on disk. Without both of "
"these parts, the media cannot be decrypted. This means if somebody steals "
"the key and manages to get your password, it is still worthless without the "
"system it was paired with."
msgstr ""
#: ../../sysadmclient.rst:917
#: ../../sysadmclient.rst:925
msgid ""
"USB devices do eventually fail. Always backup any important files stored on "
"the PersonaCrypt device to another device or system."
msgstr ""
#: ../../sysadmclient.rst:920
#: ../../sysadmclient.rst:928
msgid ""
"The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt "
"device for any login user, **except** for the currently logged in user. In "
@@ -969,13 +947,13 @@ msgid ""
"*dlavigne*, has been created and the entry for the user has been clicked."
msgstr ""
#: ../../sysadmclient.rst:939
#: ../../sysadmclient.rst:947
msgid ""
"**Initialize Device:** Used to prepare the USB device which will be used as "
"the user's home directory."
msgstr ""
#: ../../sysadmclient.rst:942
#: ../../sysadmclient.rst:950
msgid ""
"**Import Key:** If the user has already created a PersonaCrypt device on "
"another |trueos| system, click this button to import a previously saved copy"
@@ -983,7 +961,7 @@ msgid ""
"can now login to this computer using PersonaCrypt."
msgstr ""
#: ../../sysadmclient.rst:950
#: ../../sysadmclient.rst:958
msgid ""
"Since the USB stick will hold the user's home directory and files, ensure "
"the stick is large enough to meet the anticipated storage needs of the home "
@@ -993,7 +971,7 @@ msgid ""
"logged in."
msgstr ""
#: ../../sysadmclient.rst:999
#: ../../sysadmclient.rst:982
msgid ""
"When stealth sessions have been configured, PersonaCrypt users will still be"
" displayed in the login menu, even if their USB device is not inserted. This"
@@ -1001,47 +979,47 @@ msgid ""
"session."
msgstr ""
#: ../../sysadmclient.rst:1004
#: ../../sysadmclient.rst:987
msgid ""
"In the field with the yellow padlock icon, input the password for the user "
"account. In the field with the grey USB stick icon, input the password "
"associated with the PersonaCrypt device."
msgstr ""
#: ../../sysadmclient.rst:1008
#: ../../sysadmclient.rst:991
msgid ""
"To prevent data corruption and freezing the system **DO NOT** remove the "
"PersonaCrypt device while logged in! Always log out of your session before "
"physically removing the device."
msgstr ""
#: ../../sysadmclient.rst:1016
#: ../../sysadmclient.rst:1045
msgid "Managing Groups"
msgstr ""
#: ../../sysadmclient.rst:1018
#: ../../sysadmclient.rst:1047
msgid ""
"Click the :guilabel:`Groups` tab to view and manage the groups on the "
"system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s <user4>`, "
"shows the group membership for the *operator* and *wheel* groups:"
msgstr ""
#: ../../sysadmclient.rst:1029
#: ../../sysadmclient.rst:1058
msgid "This screen has 2 columns:"
msgstr ""
#: ../../sysadmclient.rst:1031
#: ../../sysadmclient.rst:1060
msgid ""
"**Members:** Indicates if the highlighted group contains any user accounts."
msgstr ""
#: ../../sysadmclient.rst:1034
#: ../../sysadmclient.rst:1063
msgid ""
"**Available:** Shows all of the system and user accounts on the system in "
"alphabetical order."
msgstr ""
#: ../../sysadmclient.rst:1037
#: ../../sysadmclient.rst:1066
msgid ""
"To add an account to a group, highlight the group name, then highlight the "
"account name in the :guilabel:`Available` column. Click the left arrow and "
@@ -1051,7 +1029,7 @@ msgid ""
"added to a group."
msgstr ""
#: ../../sysadmclient.rst:1044
#: ../../sysadmclient.rst:1073
msgid ""
"If you add a user to the *operator* group, they will have permission to use "
"commands requiring administrative access and will be prompted for their own "
@@ -1060,15 +1038,15 @@ msgid ""
"will be prompted for the superuser password whenever they use the command."
msgstr ""
#: ../../sysadmclient.rst:1051
#: ../../sysadmclient.rst:1080
msgid "To view all of the groups on the system, click :guilabel:`Advanced`."
msgstr ""
#: ../../sysadmclient.rst:1057
#: ../../sysadmclient.rst:1086
msgid "Life Preserver"
msgstr ""
#: ../../sysadmclient.rst:1059
#: ../../sysadmclient.rst:1088
msgid ""
"The Life Preserver utility is designed to take full advantage of the "
"functionality provided by ZFS snapshots. This utility allows you to schedule"
@@ -1077,25 +1055,25 @@ msgid ""
"benefits:"
msgstr ""
#: ../../sysadmclient.rst:1081
#: ../../sysadmclient.rst:1110
msgid ""
"Replication is an efficient way to keep the files on two systems in sync. "
"With Life Preserver, the snapshots taken on the |trueos| system will be "
"synchronized with their versions stored on the specified backup server."
msgstr ""
#: ../../sysadmclient.rst:1086
#: ../../sysadmclient.rst:1115
msgid "Snapshots are sent to the backup server over an encrypted connection."
msgstr ""
#: ../../sysadmclient.rst:1088
#: ../../sysadmclient.rst:1117
msgid ""
"Having a copy of the snapshots on another system makes it possible to "
"perform an operating system restore should the |trueos| system become "
"unusable or to deploy an identical system to different hardware."
msgstr ""
#: ../../sysadmclient.rst:1092
#: ../../sysadmclient.rst:1121
msgid ""
"To manage snapshots and replication using the |sysadm| graphical client, go "
"to :menuselection:`Utilities --> Life Preserver`. The rest of this section "
@@ -1103,16 +1081,16 @@ msgid ""
"Preserver."
msgstr ""
#: ../../sysadmclient.rst:1101
#: ../../sysadmclient.rst:1130
msgid "Snapshots Tab"
msgstr ""
#: ../../sysadmclient.rst:1112
#: ../../sysadmclient.rst:1141
msgid ""
"This screen will display any created snapshots and provides buttons to:"
msgstr ""
#: ../../sysadmclient.rst:1114
#: ../../sysadmclient.rst:1143
msgid ""
"**Create:** Used to create a manual snapshot of the specified pool now. For "
"example, you could create a snapshot before making changes to an important "
@@ -1126,14 +1104,14 @@ msgid ""
"snapshot was created."
msgstr ""
#: ../../sysadmclient.rst:1125
#: ../../sysadmclient.rst:1154
msgid ""
"**Remove:** Used to delete a highlighted snapshot. **This is a permanent "
"change that can not be reversed.** In other words, the versions of files at "
"the point in time the snapshot was created will be lost."
msgstr ""
#: ../../sysadmclient.rst:1130
#: ../../sysadmclient.rst:1159
msgid ""
"**Revert:** If you highlight a snapshot entry, this button and the drop-down"
" menu next to it will activate. You can use the drop-down menu to specify "
@@ -1143,11 +1121,11 @@ msgid ""
" after the snapshot was taken will be lost."
msgstr ""
#: ../../sysadmclient.rst:1142
#: ../../sysadmclient.rst:1171
msgid "Replication Tab"
msgstr ""
#: ../../sysadmclient.rst:1144
#: ../../sysadmclient.rst:1173
msgid ""
"Life Preserver can be configured to replicate snapshots to another system "
"over an encrypted SSH connection, though the backup itself is stored in an "
@@ -1155,13 +1133,13 @@ msgid ""
" another system."
msgstr ""
#: ../../sysadmclient.rst:1149
#: ../../sysadmclient.rst:1178
msgid ""
"In order to configure replication, the remote system to hold a copy of the "
"snapshots must first meet several requirements:"
msgstr ""
#: ../../sysadmclient.rst:1156
#: ../../sysadmclient.rst:1185
msgid ""
"The backup server **must be formatted with the latest version of ZFS,** also"
" known as ZFS feature flags or ZFSv5000. Operating systems that support this"
@@ -1169,14 +1147,14 @@ msgid ""
"FreeNAS 9.1.x or higher."
msgstr ""
#: ../../sysadmclient.rst:1162
#: ../../sysadmclient.rst:1191
msgid ""
"The system must have SSH installed and the SSH service must be running. If "
"the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is"
" already installed, but you will need to start the SSH service."
msgstr ""
#: ../../sysadmclient.rst:1167
#: ../../sysadmclient.rst:1196
msgid ""
"If the backup server is running |trueos| or |pcbsd|, you will need to open "
"TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is "
@@ -1186,7 +1164,7 @@ msgid ""
"backup system, make sure it has a rule to allow SSH."
msgstr ""
#: ../../sysadmclient.rst:1175
#: ../../sysadmclient.rst:1204
msgid ""
":numref:`Figure %s <lpreserver2>` shows the initial :guilabel:`Replication` "
"tab on a system that has not yet been configured for replication. This "
@@ -1194,29 +1172,29 @@ msgid ""
"schedule."
msgstr ""
#: ../../sysadmclient.rst:1186
#: ../../sysadmclient.rst:1215
msgid ""
"To schedule the replication, click :guilabel:`+` to display the \"Setup "
"Replication\" screen shown in :numref:`Figure %s <lpreserver3>`."
msgstr ""
#: ../../sysadmclient.rst:1196
#: ../../sysadmclient.rst:1225
msgid "Input the following information:"
msgstr ""
#: ../../sysadmclient.rst:1198
#: ../../sysadmclient.rst:1227
msgid ""
"**Host IP:** The IP address of the remote system to store the replicated "
"snapshots."
msgstr ""
#: ../../sysadmclient.rst:1201
#: ../../sysadmclient.rst:1230
msgid ""
"**SSH Port:** The port number, if the remote system is running SSH on a port"
" other than the default of 22."
msgstr ""
#: ../../sysadmclient.rst:1204
#: ../../sysadmclient.rst:1233
msgid ""
"**Dataset:** The name of the ZFS pool and optional dataset on the remote "
"system. For example, \"remotetank\" will save the snapshots to a ZFS pool of"
@@ -1224,7 +1202,7 @@ msgid ""
"existing dataset named \"mybackups\" on the pool named \"remotetank\"."
msgstr ""
#: ../../sysadmclient.rst:1210
#: ../../sysadmclient.rst:1239
msgid ""
"**Frequency:** Use the drop-down menu to select how often to initiate the "
"replication. Available choices are :guilabel:`Sync with snapshot` (at the "
@@ -1235,87 +1213,87 @@ msgid ""
":guilabel:`Start`) in this screen."
msgstr ""
#: ../../sysadmclient.rst:1219
#: ../../sysadmclient.rst:1248
msgid ""
"**Username:** The username must already exist on the remote system, have "
"write access to the specified \"Dataset\", and have permission to SSH into "
"that system."
msgstr ""
#: ../../sysadmclient.rst:1223
#: ../../sysadmclient.rst:1252
msgid "**Password:** The password associated with the \"Username\"."
msgstr ""
#: ../../sysadmclient.rst:1225
#: ../../sysadmclient.rst:1254
msgid ""
"**Local DS:** Use the drop-down menu to select the pool or dataset to "
"replicate to the remote system."
msgstr ""
#: ../../sysadmclient.rst:1228
#: ../../sysadmclient.rst:1257
msgid ""
"The buttons at the top of the \"Setup Replication\" screen have several "
"uses:"
msgstr ""
#: ../../sysadmclient.rst:1231
#: ../../sysadmclient.rst:1260
msgid ""
"**+ icon:** Sdd a replication schedule. Multiple schedules are supported, "
"meaning you can replicate to multiple systems or replicate different \"Local"
" DS\" datasets at different times."
msgstr ""
#: ../../sysadmclient.rst:1235
#: ../../sysadmclient.rst:1264
msgid ""
"**- icon:** Remove an already created, and highlighted, replication "
"schedule."
msgstr ""
#: ../../sysadmclient.rst:1238
#: ../../sysadmclient.rst:1267
msgid "**gear icon:** Modify the schedule for the highlighted replication."
msgstr ""
#: ../../sysadmclient.rst:1240
#: ../../sysadmclient.rst:1269
msgid ""
"**Start:** Manually starts a replication to the system specified in the "
"highlighted replication."
msgstr ""
#: ../../sysadmclient.rst:1243
#: ../../sysadmclient.rst:1272
msgid ""
"**Initialize:** Deletes the existing replicated snapshots on the remote "
"system and starts a new replication. This is useful if a replication gets "
"stuck and will not complete."
msgstr ""
#: ../../sysadmclient.rst:1251
#: ../../sysadmclient.rst:1280
msgid "Schedules Tab"
msgstr ""
#: ../../sysadmclient.rst:1253
#: ../../sysadmclient.rst:1282
msgid ""
"This tab is used to manage when snapshots of the ZFS pool are created. "
"Multiple snapshot schedules are supported if the system has multiple pools."
msgstr ""
#: ../../sysadmclient.rst:1257
#: ../../sysadmclient.rst:1286
msgid ""
"Snapshots are created on the entire pool as they are needed when "
":ref:`Restoring the Operating System`."
msgstr ""
#: ../../sysadmclient.rst:1260
#: ../../sysadmclient.rst:1289
msgid ""
"To create a snapshot schedule, click the :guilabel:`camera` icon in the "
"lower left corner of this tab. This will activate the \"Setup Snapshot "
"Schedule\" pane as seen in :numref:`Figure %s <lpreserver4>`."
msgstr ""
#: ../../sysadmclient.rst:1270
#: ../../sysadmclient.rst:1299
msgid "This pane contains several options:"
msgstr ""
#: ../../sysadmclient.rst:1275
#: ../../sysadmclient.rst:1304
msgid ""
"**Snapshots to keep:** Snapshots are automatically pruned after the "
"specified number of snapshots to prevent snapshots from eventually using up "
@@ -1326,7 +1304,7 @@ msgid ""
"manually in the :guilabel:`Snapshots` tab."
msgstr ""
#: ../../sysadmclient.rst:1284
#: ../../sysadmclient.rst:1313
msgid ""
"**Frequency:** Use the drop-down menu to select how often snapshots occur. "
"Options include \"Daily\" (which will allow you to select the time of day), "
@@ -1334,37 +1312,37 @@ msgid ""
"Minutes\"."
msgstr ""
#: ../../sysadmclient.rst:1289
#: ../../sysadmclient.rst:1318
msgid ""
"Once you have created a snapshot schedule, you can use the \"gear\" icon "
"next to the \"camera\" icon to modify the highlighted schedule or the \"X\" "
"icon to delete the highlighted schedule."
msgstr ""
#: ../../sysadmclient.rst:1300
#: ../../sysadmclient.rst:1329
msgid ""
"To schedule when the scrub occurs, click the third icon from the right which"
" will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure "
"%s <lpreserver5>`."
msgstr ""
#: ../../sysadmclient.rst:1318
#: ../../sysadmclient.rst:1347
msgid ""
"Once you have created a scrub schedule, you can use the \"gear\" icon next "
"to the \"schedule scrub\" icon to modify the highlighted schedule or the "
"\"X\" icon to delete the highlighted schedule."
msgstr ""
#: ../../sysadmclient.rst:1328
#: ../../sysadmclient.rst:1357
msgid ""
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <lpreserver6>`."
msgstr ""
#: ../../sysadmclient.rst:1337
#: ../../sysadmclient.rst:1366
msgid "Many settings are configurable:"
msgstr ""
#: ../../sysadmclient.rst:1339
#: ../../sysadmclient.rst:1368
msgid ""
"**Disk Usage Warning:** Enter a number up to 99 to indicate at which "
"percentage of disk space Life Preserver will display an alert in the system "
@@ -1372,41 +1350,41 @@ msgid ""
"space."
msgstr ""
#: ../../sysadmclient.rst:1344
#: ../../sysadmclient.rst:1373
msgid ""
"**Email:** To receive an email when disk usage reaches the percentage "
"configured in the \"Disk Usage Warning\", enter an email address."
msgstr ""
#: ../../sysadmclient.rst:1347
#: ../../sysadmclient.rst:1376
msgid ""
"**Email Trigger:** This setting can be set to \"All\", \"Warn\", or "
"\"Error\" and indicates the type of condition which will trigger an email "
"message."
msgstr ""
#: ../../sysadmclient.rst:1350
#: ../../sysadmclient.rst:1379
msgid "**Recursive Management:**"
msgstr ""
#: ../../sysadmclient.rst:1352
#: ../../sysadmclient.rst:1381
msgid ""
"If you make any changes in this screen, press :guilabel:`Save Settings` to "
"apply them."
msgstr ""
#: ../../sysadmclient.rst:1359
#: ../../sysadmclient.rst:1388
msgid "Using the lpreserver CLI"
msgstr ""
#: ../../sysadmclient.rst:1361
#: ../../sysadmclient.rst:1390
msgid ""
"The :command:`lpreserver` command line utility can also be used to manage "
"snapshots and replication. This command needs to be run as the superuser. To"
" display its usage, type the command without any arguments:"
msgstr ""
#: ../../sysadmclient.rst:1381
#: ../../sysadmclient.rst:1410
msgid ""
"Each command has its own help text that describes its parameters and "
"provides a usage example. For example, to receive help on how to use the "
@@ -1417,104 +1395,104 @@ msgstr ""
msgid "Command Line and GUI Equivalents"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**Command Line**"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**GUI**"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**Description**"
msgstr ""
#: ../../sysadmclient.rst:1452
#: ../../sysadmclient.rst:1481
msgid "**cronsnap**"
msgstr ""
#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499
msgid "\"Snapshots\" tab"
msgstr ""
#: ../../sysadmclient.rst:1452
#: ../../sysadmclient.rst:1481
msgid ""
"schedule when snapshots occur and how long to keep them; the **stop** option"
" can be used to disable snapshot creation"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "**cronscrub**"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "\"Schedules\" tab"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "schedule a ZFS scrub"
msgstr ""
#: ../../sysadmclient.rst:1459
#: ../../sysadmclient.rst:1488
msgid "**get**"
msgstr ""
#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495
msgid "\"Settings\" tab"
msgstr ""
#: ../../sysadmclient.rst:1459
#: ../../sysadmclient.rst:1488
msgid "list Life Preserver options"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid "**replicate**"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid "\"Replication\" tab"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid ""
"used to list, add, and remove backup server; read the **help** for this "
"command for examples"
msgstr ""
#: ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1495
msgid "**set**"
msgstr ""
#: ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1495
msgid ""
"configures Life Preserver options; read **help** for the list of "
"configurable options"
msgstr ""
#: ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1499
msgid "**snapshot**"
msgstr ""
#: ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1499
msgid ""
"create and replicate a new ZFS snapshot; by default, snapshots are "
"recursive, meaning that a that a snapshot is taken of every dataset within a"
" pool"
msgstr ""
#: ../../sysadmclient.rst:1476
#: ../../sysadmclient.rst:1505
msgid "**status**"
msgstr ""
#: ../../sysadmclient.rst:1476
#: ../../sysadmclient.rst:1505
msgid "lists the last snapshot name and replication status"
msgstr ""
#: ../../sysadmclient.rst:1483
#: ../../sysadmclient.rst:1512
msgid "Restoring the Operating System"
msgstr ""
#: ../../sysadmclient.rst:1485
#: ../../sysadmclient.rst:1514
msgid ""
"If you have replicated the system's snapshots to a remote backup server, you"
" can use a |trueos| installation media to perform an operating system "
@@ -1522,7 +1500,7 @@ msgid ""
"you get to the screen shown in :numref:`Figure %s <restore1>`."
msgstr ""
#: ../../sysadmclient.rst:1497
#: ../../sysadmclient.rst:1526
msgid ""
"Before you can perform a restore, the network interface must be configured. "
"Click :guilabel:`Network Connectivity` (second icon from the left) in order "
@@ -1533,7 +1511,7 @@ msgid ""
"continuing."
msgstr ""
#: ../../sysadmclient.rst:1505
#: ../../sysadmclient.rst:1534
msgid ""
"Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and"
" :guilabel:`Next`. This will start the Restore Wizard. In the screen shown "
@@ -1543,7 +1521,7 @@ msgid ""
"number."
msgstr ""
#: ../../sysadmclient.rst:1519
#: ../../sysadmclient.rst:1548
msgid ""
"Click :guilabel:`Next` and the wizard will provide a summary of your "
"selections. If correct, click :guilabel:`Finish`; otherwise, click "
@@ -1626,7 +1604,7 @@ msgid ""
"press :guilabel:`Close Ports`."
msgstr ""
#: ../../sysadmclient.rst:1152
#: ../../sysadmclient.rst:1181
msgid ""
"Snapshots occurring too frequently can introduce errors in replication. To "
"avoid errors, ensure snapshots are configured to take place slower than the "
@@ -1685,7 +1663,7 @@ msgid ""
"accounts."
msgstr ""
#: ../../sysadmclient.rst:1065
#: ../../sysadmclient.rst:1094
msgid ""
"A snapshot provides a \"point-in-time\" image of the ZFS pool. This is "
"similar to a full system backup as the snapshot contains the information for"
@@ -1703,26 +1681,26 @@ msgid ""
"snapshot."
msgstr ""
#: ../../sysadmclient.rst:1272
#: ../../sysadmclient.rst:1301
msgid ""
"**Storage Pool:** Select the ZFS storage pool that contains the datasets "
"that you wish to snapshot."
msgstr ""
#: ../../sysadmclient.rst:1293
#: ../../sysadmclient.rst:1322
msgid ""
"This screen can also be used to manage the ZFS scrub schedule. Scrubs are "
"recommended as they can provide an early indication of a potential disk "
"failure. Scrubs can be scheduled on a per-pool basis."
msgstr ""
#: ../../sysadmclient.rst:1297
#: ../../sysadmclient.rst:1326
msgid ""
"If you have multiple pools, be sure to create a scrub schedule for each "
"pool."
msgstr ""
#: ../../sysadmclient.rst:1310
#: ../../sysadmclient.rst:1339
msgid ""
"Select the pool from the :guilabel:`Storage Pool` drop-down menu, then "
"select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", "
@@ -1807,26 +1785,17 @@ msgstr ""
msgid ": Viewing All Accounts and Their Details"
msgstr ""
#: ../../sysadmclient.rst:930
#: ../../sysadmclient.rst:938
msgid ": Initialize PersonaCrypt Device"
msgstr ""
#: ../../sysadmclient.rst:932
msgid ""
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
"Note this section is hidden if the currently logged in user is selected. "
"Also, if you have just created a user and do not see these options, click "
":guilabel:`Save` then re-highlight the user to display these options:"
msgstr ""
#: ../../sysadmclient.rst:947
#: ../../sysadmclient.rst:955
msgid ""
"To prepare a PersonaCrypt device for this user, insert a USB stick and click"
" :guilabel:`Initialize Device`."
msgstr ""
#: ../../sysadmclient.rst:957
#: ../../sysadmclient.rst:965
msgid ""
"Type a password to associate with the device. Click :guilabel:`Save` to "
"initialize the device. The User Manager may take a moment to prepare the "
@@ -1834,49 +1803,49 @@ msgid ""
" to allow removal of PersonaCrypt."
msgstr ""
#: ../../sysadmclient.rst:1027
#: ../../sysadmclient.rst:1056
msgid ": Managing Groups Using User Manager"
msgstr ""
#: ../../sysadmclient.rst:1110
#: ../../sysadmclient.rst:1139
msgid ": Snapshot Tab"
msgstr ""
#: ../../sysadmclient.rst:1184
#: ../../sysadmclient.rst:1213
msgid ": Replication Tab"
msgstr ""
#: ../../sysadmclient.rst:1194
#: ../../sysadmclient.rst:1223
msgid ": Scheduling a Replication"
msgstr ""
#: ../../sysadmclient.rst:1268
#: ../../sysadmclient.rst:1297
msgid ": Scheduling a Snapshot"
msgstr ""
#: ../../sysadmclient.rst:1308
#: ../../sysadmclient.rst:1337
msgid ": Scheduling a Scrub"
msgstr ""
#: ../../sysadmclient.rst:1335
#: ../../sysadmclient.rst:1364
msgid ": Life Preserver Settings"
msgstr ""
#: ../../sysadmclient.rst:1442
#: ../../sysadmclient.rst:1471
msgid ""
":numref:`Table %s <cmdgui>` shows the command line equivalents to the "
"graphical options provided by the Life Preserver GUI."
msgstr ""
#: ../../sysadmclient.rst:1495
#: ../../sysadmclient.rst:1524
msgid ": Selecting to Restore/Clone From Backup"
msgstr ""
#: ../../sysadmclient.rst:1517
#: ../../sysadmclient.rst:1546
msgid ": Input the Information for a SSH Restore"
msgstr ""
#: ../../sysadmclient.rst:1523
#: ../../sysadmclient.rst:1552
msgid ""
"Once the connection to the backup server succeeds, you will be able to "
"select which host to restore. After making your selection, click "
@@ -1892,7 +1861,7 @@ msgid ""
":guilabel:`Next` to perform the restore."
msgstr ""
#: ../../sysadmclient.rst:987
#: ../../sysadmclient.rst:970
msgid ""
"Once a user has been initialized for PersonaCrypt on the system, their user "
"account will no longer be displayed when logging in, **unless** their "
@@ -1901,7 +1870,7 @@ msgid ""
":numref:`Figure %s <troslogin5>`."
msgstr ""
#: ../../sysadmclient.rst:997
#: ../../sysadmclient.rst:980
msgid ": |trueos| Login Screen with PersonaCrypt"
msgstr ""
@@ -1949,7 +1918,7 @@ msgstr ""
msgid ": |sysadm| Task Manager"
msgstr ""
#: ../../sysadmclient.rst:1103
#: ../../sysadmclient.rst:1132
msgid ""
":numref:`Figure %s <lpreserver1>` shows the :guilabel:`Snapshots` tab on a "
"system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"."
@@ -2013,6 +1982,134 @@ msgid ""
":guilabel:`Save Settings`."
msgstr ""
#: ../../sysadmclient.rst:894
msgid ""
"|trueos| provides support for a security feature known as PersonaCrypt. A "
"PersonaCrypt device is a removable USB media, such as a USB flash drive, "
"formatted with ZFS and encrypted with either GELI or PEFS. This device is "
"used to hold a specific user's home directory, meaning they can securely "
"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 "
"or higher system. For example, this can be used to securely access one's "
"home directory from a laptop, home computer, and work computer. The device "
"is protected by an encryption key and a different (recommended) password "
"separate from the user's login password."
msgstr ""
#: ../../sysadmclient.rst:916
msgid "GELI"
msgstr ""
#: ../../sysadmclient.rst:918
msgid ""
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
"your passphrase, and the other being a key stored on disk. Without both of "
"these parts, the media cannot be decrypted. This means if somebody steals "
"the key and manages to get your password, it is still worthless without the "
"system it was paired with. GELI is used by default in |trueos| as it is more"
" fully featured over PEFS."
msgstr ""
#: ../../sysadmclient.rst:940
msgid ""
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
"buttons are available in the :guilabel:`PersonaCrypt` tab of "
":guilabel:`Advanced Mode`. Note this section is hidden if the currently "
"logged in user is selected. Also, if you have just created a user and do not"
" see these options, click :guilabel:`Save`, then re-highlight the user to "
"display these options:"
msgstr ""
#: ../../sysadmclient.rst:999
msgid "PEFS"
msgstr ""
#: ../../sysadmclient.rst:1001
msgid ""
"`PEFS <http://pefs.io/>`_ stands for Private Encrypted File System. It is "
"open source software freely available under the BSD license, and is included"
" in |trueos| by default. PEFS runs on top of any existing file system, "
"providing an encryption layer independent of the underlying file system. "
"PersonaCrypt can be configured to use PEFS in place of GELI, which "
"eliminates the need for external media, as the encrypted PEFS database is "
"stored on the local disk."
msgstr ""
#: ../../sysadmclient.rst:1009
msgid ""
"While PEFS does not use a USB drive, be sure to print or otherwise backup "
"the PEFS generated key fragment stored on the disk."
msgstr ""
#: ../../sysadmclient.rst:1012
msgid "**Initialize PEFS with the Command Line**"
msgstr ""
#: ../../sysadmclient.rst:1014
msgid ""
"Because PEFS does not use a USB drive with its encryption, the user will "
"need a password file (pfile) containing the desired password, **before** "
"initializing PEFS for a user account. Once this pfile is created, enabling "
"PEFS through PersonaCrypt is accomplished in a CLI with "
":command:`personacrypt init <username> <pfile> PEFS`."
msgstr ""
#: ../../sysadmclient.rst:1020
msgid ""
"For example, the user account **test** has a pfile named "
":file:`testpfile.txt`, which contains the single text string of **test's** "
"chosen password. Next, the administrator adds PEFS encryption to the "
"**test** acount by opening a CLI, logging in as root, and typing:"
msgstr ""
#: ../../sysadmclient.rst:1029
msgid ""
"PersonaCrypt will initialize the account **test** with PEFS, using the "
"string in :file:`testpfile.txt` as the new password."
msgstr ""
#: ../../sysadmclient.rst:1032
msgid ""
"The |sysadm| User Manager can also initialize a user account with PEFS by "
"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` "
"drop down menu of the :guilabel:`PersonaCrypt` tab."
msgstr ""
#: ../../sysadmclient.rst:1036
msgid ""
"In addition to initializing an account with PEFS, PersonaCrypt also supports"
" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt "
"export <username>` and :command:`personacrypt import <keyfile>`, "
"respectively."
msgstr ""
#~ msgid ""
#~ "|trueos| provides support for a security feature known as PersonaCrypt. A "
#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
#~ " with ZFS and encrypted with GELI. This device is used to hold a specific "
#~ "user's home directory, meaning they can securely transport and access their "
#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
#~ "example, this can be used to securely access one's home directory from a "
#~ "laptop, home computer, and work computer. The device is protected by an "
#~ "encryption key and a password which is, and should be, separate from the "
#~ "user's login password."
#~ msgstr ""
#~ msgid ""
#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being "
#~ "your passphrase, and the other being a key stored on disk. Without both of "
#~ "these parts, the media cannot be decrypted. This means if somebody steals "
#~ "the key and manages to get your password, it is still worthless without the "
#~ "system it was paired with."
#~ msgstr ""
#~ msgid ""
#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two "
#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
#~ "Note this section is hidden if the currently logged in user is selected. "
#~ "Also, if you have just created a user and do not see these options, click "
#~ ":guilabel:`Save` then re-highlight the user to display these options:"
#~ msgstr ""
#~ msgid ""
#~ "**Max Boot Environments:** |trueos| automatically creates a boot environment"
#~ " before updating any software, the operating system, or applying a system "

View File

@@ -482,7 +482,7 @@ msgid ""
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <update4>`."
msgstr ""
#: ../../sysadmclient.rst:1326
#: ../../sysadmclient.rst:1355
msgid "Settings Tab"
msgstr ""
@@ -924,20 +924,7 @@ msgstr ""
msgid "PersonaCrypt"
msgstr ""
#: ../../sysadmclient.rst:894
msgid ""
"|trueos| provides support for a security feature known as PersonaCrypt. A "
"PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
" with ZFS and encrypted with GELI. This device is used to hold a specific "
"user's home directory, meaning they can securely transport and access their "
"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
"example, this can be used to securely access one's home directory from a "
"laptop, home computer, and work computer. The device is protected by an "
"encryption key and a password which is, and should be, separate from the "
"user's login password."
msgstr ""
#: ../../sysadmclient.rst:904
#: ../../sysadmclient.rst:905
msgid ""
"When a user is configured to use a PersonaCrypt device, that user can not "
"login using an unencrypted session on the same system. In other words, the "
@@ -946,22 +933,13 @@ msgid ""
"different user accounts, one for each type of session."
msgstr ""
#: ../../sysadmclient.rst:911
msgid ""
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
"your passphrase, and the other being a key stored on disk. Without both of "
"these parts, the media cannot be decrypted. This means if somebody steals "
"the key and manages to get your password, it is still worthless without the "
"system it was paired with."
msgstr ""
#: ../../sysadmclient.rst:917
#: ../../sysadmclient.rst:925
msgid ""
"USB devices do eventually fail. Always backup any important files stored on "
"the PersonaCrypt device to another device or system."
msgstr ""
#: ../../sysadmclient.rst:920
#: ../../sysadmclient.rst:928
msgid ""
"The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt "
"device for any login user, **except** for the currently logged in user. In "
@@ -969,13 +947,13 @@ msgid ""
"*dlavigne*, has been created and the entry for the user has been clicked."
msgstr ""
#: ../../sysadmclient.rst:939
#: ../../sysadmclient.rst:947
msgid ""
"**Initialize Device:** Used to prepare the USB device which will be used as "
"the user's home directory."
msgstr ""
#: ../../sysadmclient.rst:942
#: ../../sysadmclient.rst:950
msgid ""
"**Import Key:** If the user has already created a PersonaCrypt device on "
"another |trueos| system, click this button to import a previously saved copy"
@@ -983,7 +961,7 @@ msgid ""
"can now login to this computer using PersonaCrypt."
msgstr ""
#: ../../sysadmclient.rst:950
#: ../../sysadmclient.rst:958
msgid ""
"Since the USB stick will hold the user's home directory and files, ensure "
"the stick is large enough to meet the anticipated storage needs of the home "
@@ -993,7 +971,7 @@ msgid ""
"logged in."
msgstr ""
#: ../../sysadmclient.rst:999
#: ../../sysadmclient.rst:982
msgid ""
"When stealth sessions have been configured, PersonaCrypt users will still be"
" displayed in the login menu, even if their USB device is not inserted. This"
@@ -1001,47 +979,47 @@ msgid ""
"session."
msgstr ""
#: ../../sysadmclient.rst:1004
#: ../../sysadmclient.rst:987
msgid ""
"In the field with the yellow padlock icon, input the password for the user "
"account. In the field with the grey USB stick icon, input the password "
"associated with the PersonaCrypt device."
msgstr ""
#: ../../sysadmclient.rst:1008
#: ../../sysadmclient.rst:991
msgid ""
"To prevent data corruption and freezing the system **DO NOT** remove the "
"PersonaCrypt device while logged in! Always log out of your session before "
"physically removing the device."
msgstr ""
#: ../../sysadmclient.rst:1016
#: ../../sysadmclient.rst:1045
msgid "Managing Groups"
msgstr ""
#: ../../sysadmclient.rst:1018
#: ../../sysadmclient.rst:1047
msgid ""
"Click the :guilabel:`Groups` tab to view and manage the groups on the "
"system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s <user4>`, "
"shows the group membership for the *operator* and *wheel* groups:"
msgstr ""
#: ../../sysadmclient.rst:1029
#: ../../sysadmclient.rst:1058
msgid "This screen has 2 columns:"
msgstr ""
#: ../../sysadmclient.rst:1031
#: ../../sysadmclient.rst:1060
msgid ""
"**Members:** Indicates if the highlighted group contains any user accounts."
msgstr ""
#: ../../sysadmclient.rst:1034
#: ../../sysadmclient.rst:1063
msgid ""
"**Available:** Shows all of the system and user accounts on the system in "
"alphabetical order."
msgstr ""
#: ../../sysadmclient.rst:1037
#: ../../sysadmclient.rst:1066
msgid ""
"To add an account to a group, highlight the group name, then highlight the "
"account name in the :guilabel:`Available` column. Click the left arrow and "
@@ -1051,7 +1029,7 @@ msgid ""
"added to a group."
msgstr ""
#: ../../sysadmclient.rst:1044
#: ../../sysadmclient.rst:1073
msgid ""
"If you add a user to the *operator* group, they will have permission to use "
"commands requiring administrative access and will be prompted for their own "
@@ -1060,15 +1038,15 @@ msgid ""
"will be prompted for the superuser password whenever they use the command."
msgstr ""
#: ../../sysadmclient.rst:1051
#: ../../sysadmclient.rst:1080
msgid "To view all of the groups on the system, click :guilabel:`Advanced`."
msgstr ""
#: ../../sysadmclient.rst:1057
#: ../../sysadmclient.rst:1086
msgid "Life Preserver"
msgstr ""
#: ../../sysadmclient.rst:1059
#: ../../sysadmclient.rst:1088
msgid ""
"The Life Preserver utility is designed to take full advantage of the "
"functionality provided by ZFS snapshots. This utility allows you to schedule"
@@ -1077,25 +1055,25 @@ msgid ""
"benefits:"
msgstr ""
#: ../../sysadmclient.rst:1081
#: ../../sysadmclient.rst:1110
msgid ""
"Replication is an efficient way to keep the files on two systems in sync. "
"With Life Preserver, the snapshots taken on the |trueos| system will be "
"synchronized with their versions stored on the specified backup server."
msgstr ""
#: ../../sysadmclient.rst:1086
#: ../../sysadmclient.rst:1115
msgid "Snapshots are sent to the backup server over an encrypted connection."
msgstr ""
#: ../../sysadmclient.rst:1088
#: ../../sysadmclient.rst:1117
msgid ""
"Having a copy of the snapshots on another system makes it possible to "
"perform an operating system restore should the |trueos| system become "
"unusable or to deploy an identical system to different hardware."
msgstr ""
#: ../../sysadmclient.rst:1092
#: ../../sysadmclient.rst:1121
msgid ""
"To manage snapshots and replication using the |sysadm| graphical client, go "
"to :menuselection:`Utilities --> Life Preserver`. The rest of this section "
@@ -1103,16 +1081,16 @@ msgid ""
"Preserver."
msgstr ""
#: ../../sysadmclient.rst:1101
#: ../../sysadmclient.rst:1130
msgid "Snapshots Tab"
msgstr ""
#: ../../sysadmclient.rst:1112
#: ../../sysadmclient.rst:1141
msgid ""
"This screen will display any created snapshots and provides buttons to:"
msgstr ""
#: ../../sysadmclient.rst:1114
#: ../../sysadmclient.rst:1143
msgid ""
"**Create:** Used to create a manual snapshot of the specified pool now. For "
"example, you could create a snapshot before making changes to an important "
@@ -1126,14 +1104,14 @@ msgid ""
"snapshot was created."
msgstr ""
#: ../../sysadmclient.rst:1125
#: ../../sysadmclient.rst:1154
msgid ""
"**Remove:** Used to delete a highlighted snapshot. **This is a permanent "
"change that can not be reversed.** In other words, the versions of files at "
"the point in time the snapshot was created will be lost."
msgstr ""
#: ../../sysadmclient.rst:1130
#: ../../sysadmclient.rst:1159
msgid ""
"**Revert:** If you highlight a snapshot entry, this button and the drop-down"
" menu next to it will activate. You can use the drop-down menu to specify "
@@ -1143,11 +1121,11 @@ msgid ""
" after the snapshot was taken will be lost."
msgstr ""
#: ../../sysadmclient.rst:1142
#: ../../sysadmclient.rst:1171
msgid "Replication Tab"
msgstr ""
#: ../../sysadmclient.rst:1144
#: ../../sysadmclient.rst:1173
msgid ""
"Life Preserver can be configured to replicate snapshots to another system "
"over an encrypted SSH connection, though the backup itself is stored in an "
@@ -1155,13 +1133,13 @@ msgid ""
" another system."
msgstr ""
#: ../../sysadmclient.rst:1149
#: ../../sysadmclient.rst:1178
msgid ""
"In order to configure replication, the remote system to hold a copy of the "
"snapshots must first meet several requirements:"
msgstr ""
#: ../../sysadmclient.rst:1156
#: ../../sysadmclient.rst:1185
msgid ""
"The backup server **must be formatted with the latest version of ZFS,** also"
" known as ZFS feature flags or ZFSv5000. Operating systems that support this"
@@ -1169,14 +1147,14 @@ msgid ""
"FreeNAS 9.1.x or higher."
msgstr ""
#: ../../sysadmclient.rst:1162
#: ../../sysadmclient.rst:1191
msgid ""
"The system must have SSH installed and the SSH service must be running. If "
"the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is"
" already installed, but you will need to start the SSH service."
msgstr ""
#: ../../sysadmclient.rst:1167
#: ../../sysadmclient.rst:1196
msgid ""
"If the backup server is running |trueos| or |pcbsd|, you will need to open "
"TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is "
@@ -1186,7 +1164,7 @@ msgid ""
"backup system, make sure it has a rule to allow SSH."
msgstr ""
#: ../../sysadmclient.rst:1175
#: ../../sysadmclient.rst:1204
msgid ""
":numref:`Figure %s <lpreserver2>` shows the initial :guilabel:`Replication` "
"tab on a system that has not yet been configured for replication. This "
@@ -1194,29 +1172,29 @@ msgid ""
"schedule."
msgstr ""
#: ../../sysadmclient.rst:1186
#: ../../sysadmclient.rst:1215
msgid ""
"To schedule the replication, click :guilabel:`+` to display the \"Setup "
"Replication\" screen shown in :numref:`Figure %s <lpreserver3>`."
msgstr ""
#: ../../sysadmclient.rst:1196
#: ../../sysadmclient.rst:1225
msgid "Input the following information:"
msgstr ""
#: ../../sysadmclient.rst:1198
#: ../../sysadmclient.rst:1227
msgid ""
"**Host IP:** The IP address of the remote system to store the replicated "
"snapshots."
msgstr ""
#: ../../sysadmclient.rst:1201
#: ../../sysadmclient.rst:1230
msgid ""
"**SSH Port:** The port number, if the remote system is running SSH on a port"
" other than the default of 22."
msgstr ""
#: ../../sysadmclient.rst:1204
#: ../../sysadmclient.rst:1233
msgid ""
"**Dataset:** The name of the ZFS pool and optional dataset on the remote "
"system. For example, \"remotetank\" will save the snapshots to a ZFS pool of"
@@ -1224,7 +1202,7 @@ msgid ""
"existing dataset named \"mybackups\" on the pool named \"remotetank\"."
msgstr ""
#: ../../sysadmclient.rst:1210
#: ../../sysadmclient.rst:1239
msgid ""
"**Frequency:** Use the drop-down menu to select how often to initiate the "
"replication. Available choices are :guilabel:`Sync with snapshot` (at the "
@@ -1235,87 +1213,87 @@ msgid ""
":guilabel:`Start`) in this screen."
msgstr ""
#: ../../sysadmclient.rst:1219
#: ../../sysadmclient.rst:1248
msgid ""
"**Username:** The username must already exist on the remote system, have "
"write access to the specified \"Dataset\", and have permission to SSH into "
"that system."
msgstr ""
#: ../../sysadmclient.rst:1223
#: ../../sysadmclient.rst:1252
msgid "**Password:** The password associated with the \"Username\"."
msgstr ""
#: ../../sysadmclient.rst:1225
#: ../../sysadmclient.rst:1254
msgid ""
"**Local DS:** Use the drop-down menu to select the pool or dataset to "
"replicate to the remote system."
msgstr ""
#: ../../sysadmclient.rst:1228
#: ../../sysadmclient.rst:1257
msgid ""
"The buttons at the top of the \"Setup Replication\" screen have several "
"uses:"
msgstr ""
#: ../../sysadmclient.rst:1231
#: ../../sysadmclient.rst:1260
msgid ""
"**+ icon:** Sdd a replication schedule. Multiple schedules are supported, "
"meaning you can replicate to multiple systems or replicate different \"Local"
" DS\" datasets at different times."
msgstr ""
#: ../../sysadmclient.rst:1235
#: ../../sysadmclient.rst:1264
msgid ""
"**- icon:** Remove an already created, and highlighted, replication "
"schedule."
msgstr ""
#: ../../sysadmclient.rst:1238
#: ../../sysadmclient.rst:1267
msgid "**gear icon:** Modify the schedule for the highlighted replication."
msgstr ""
#: ../../sysadmclient.rst:1240
#: ../../sysadmclient.rst:1269
msgid ""
"**Start:** Manually starts a replication to the system specified in the "
"highlighted replication."
msgstr ""
#: ../../sysadmclient.rst:1243
#: ../../sysadmclient.rst:1272
msgid ""
"**Initialize:** Deletes the existing replicated snapshots on the remote "
"system and starts a new replication. This is useful if a replication gets "
"stuck and will not complete."
msgstr ""
#: ../../sysadmclient.rst:1251
#: ../../sysadmclient.rst:1280
msgid "Schedules Tab"
msgstr ""
#: ../../sysadmclient.rst:1253
#: ../../sysadmclient.rst:1282
msgid ""
"This tab is used to manage when snapshots of the ZFS pool are created. "
"Multiple snapshot schedules are supported if the system has multiple pools."
msgstr ""
#: ../../sysadmclient.rst:1257
#: ../../sysadmclient.rst:1286
msgid ""
"Snapshots are created on the entire pool as they are needed when "
":ref:`Restoring the Operating System`."
msgstr ""
#: ../../sysadmclient.rst:1260
#: ../../sysadmclient.rst:1289
msgid ""
"To create a snapshot schedule, click the :guilabel:`camera` icon in the "
"lower left corner of this tab. This will activate the \"Setup Snapshot "
"Schedule\" pane as seen in :numref:`Figure %s <lpreserver4>`."
msgstr ""
#: ../../sysadmclient.rst:1270
#: ../../sysadmclient.rst:1299
msgid "This pane contains several options:"
msgstr ""
#: ../../sysadmclient.rst:1275
#: ../../sysadmclient.rst:1304
msgid ""
"**Snapshots to keep:** Snapshots are automatically pruned after the "
"specified number of snapshots to prevent snapshots from eventually using up "
@@ -1326,7 +1304,7 @@ msgid ""
"manually in the :guilabel:`Snapshots` tab."
msgstr ""
#: ../../sysadmclient.rst:1284
#: ../../sysadmclient.rst:1313
msgid ""
"**Frequency:** Use the drop-down menu to select how often snapshots occur. "
"Options include \"Daily\" (which will allow you to select the time of day), "
@@ -1334,37 +1312,37 @@ msgid ""
"Minutes\"."
msgstr ""
#: ../../sysadmclient.rst:1289
#: ../../sysadmclient.rst:1318
msgid ""
"Once you have created a snapshot schedule, you can use the \"gear\" icon "
"next to the \"camera\" icon to modify the highlighted schedule or the \"X\" "
"icon to delete the highlighted schedule."
msgstr ""
#: ../../sysadmclient.rst:1300
#: ../../sysadmclient.rst:1329
msgid ""
"To schedule when the scrub occurs, click the third icon from the right which"
" will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure "
"%s <lpreserver5>`."
msgstr ""
#: ../../sysadmclient.rst:1318
#: ../../sysadmclient.rst:1347
msgid ""
"Once you have created a scrub schedule, you can use the \"gear\" icon next "
"to the \"schedule scrub\" icon to modify the highlighted schedule or the "
"\"X\" icon to delete the highlighted schedule."
msgstr ""
#: ../../sysadmclient.rst:1328
#: ../../sysadmclient.rst:1357
msgid ""
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <lpreserver6>`."
msgstr ""
#: ../../sysadmclient.rst:1337
#: ../../sysadmclient.rst:1366
msgid "Many settings are configurable:"
msgstr ""
#: ../../sysadmclient.rst:1339
#: ../../sysadmclient.rst:1368
msgid ""
"**Disk Usage Warning:** Enter a number up to 99 to indicate at which "
"percentage of disk space Life Preserver will display an alert in the system "
@@ -1372,41 +1350,41 @@ msgid ""
"space."
msgstr ""
#: ../../sysadmclient.rst:1344
#: ../../sysadmclient.rst:1373
msgid ""
"**Email:** To receive an email when disk usage reaches the percentage "
"configured in the \"Disk Usage Warning\", enter an email address."
msgstr ""
#: ../../sysadmclient.rst:1347
#: ../../sysadmclient.rst:1376
msgid ""
"**Email Trigger:** This setting can be set to \"All\", \"Warn\", or "
"\"Error\" and indicates the type of condition which will trigger an email "
"message."
msgstr ""
#: ../../sysadmclient.rst:1350
#: ../../sysadmclient.rst:1379
msgid "**Recursive Management:**"
msgstr ""
#: ../../sysadmclient.rst:1352
#: ../../sysadmclient.rst:1381
msgid ""
"If you make any changes in this screen, press :guilabel:`Save Settings` to "
"apply them."
msgstr ""
#: ../../sysadmclient.rst:1359
#: ../../sysadmclient.rst:1388
msgid "Using the lpreserver CLI"
msgstr ""
#: ../../sysadmclient.rst:1361
#: ../../sysadmclient.rst:1390
msgid ""
"The :command:`lpreserver` command line utility can also be used to manage "
"snapshots and replication. This command needs to be run as the superuser. To"
" display its usage, type the command without any arguments:"
msgstr ""
#: ../../sysadmclient.rst:1381
#: ../../sysadmclient.rst:1410
msgid ""
"Each command has its own help text that describes its parameters and "
"provides a usage example. For example, to receive help on how to use the "
@@ -1417,104 +1395,104 @@ msgstr ""
msgid "Command Line and GUI Equivalents"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**Command Line**"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**GUI**"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**Description**"
msgstr ""
#: ../../sysadmclient.rst:1452
#: ../../sysadmclient.rst:1481
msgid "**cronsnap**"
msgstr ""
#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499
msgid "\"Snapshots\" tab"
msgstr ""
#: ../../sysadmclient.rst:1452
#: ../../sysadmclient.rst:1481
msgid ""
"schedule when snapshots occur and how long to keep them; the **stop** option"
" can be used to disable snapshot creation"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "**cronscrub**"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "\"Schedules\" tab"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "schedule a ZFS scrub"
msgstr ""
#: ../../sysadmclient.rst:1459
#: ../../sysadmclient.rst:1488
msgid "**get**"
msgstr ""
#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495
msgid "\"Settings\" tab"
msgstr ""
#: ../../sysadmclient.rst:1459
#: ../../sysadmclient.rst:1488
msgid "list Life Preserver options"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid "**replicate**"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid "\"Replication\" tab"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid ""
"used to list, add, and remove backup server; read the **help** for this "
"command for examples"
msgstr ""
#: ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1495
msgid "**set**"
msgstr ""
#: ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1495
msgid ""
"configures Life Preserver options; read **help** for the list of "
"configurable options"
msgstr ""
#: ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1499
msgid "**snapshot**"
msgstr ""
#: ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1499
msgid ""
"create and replicate a new ZFS snapshot; by default, snapshots are "
"recursive, meaning that a that a snapshot is taken of every dataset within a"
" pool"
msgstr ""
#: ../../sysadmclient.rst:1476
#: ../../sysadmclient.rst:1505
msgid "**status**"
msgstr ""
#: ../../sysadmclient.rst:1476
#: ../../sysadmclient.rst:1505
msgid "lists the last snapshot name and replication status"
msgstr ""
#: ../../sysadmclient.rst:1483
#: ../../sysadmclient.rst:1512
msgid "Restoring the Operating System"
msgstr ""
#: ../../sysadmclient.rst:1485
#: ../../sysadmclient.rst:1514
msgid ""
"If you have replicated the system's snapshots to a remote backup server, you"
" can use a |trueos| installation media to perform an operating system "
@@ -1522,7 +1500,7 @@ msgid ""
"you get to the screen shown in :numref:`Figure %s <restore1>`."
msgstr ""
#: ../../sysadmclient.rst:1497
#: ../../sysadmclient.rst:1526
msgid ""
"Before you can perform a restore, the network interface must be configured. "
"Click :guilabel:`Network Connectivity` (second icon from the left) in order "
@@ -1533,7 +1511,7 @@ msgid ""
"continuing."
msgstr ""
#: ../../sysadmclient.rst:1505
#: ../../sysadmclient.rst:1534
msgid ""
"Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and"
" :guilabel:`Next`. This will start the Restore Wizard. In the screen shown "
@@ -1543,7 +1521,7 @@ msgid ""
"number."
msgstr ""
#: ../../sysadmclient.rst:1519
#: ../../sysadmclient.rst:1548
msgid ""
"Click :guilabel:`Next` and the wizard will provide a summary of your "
"selections. If correct, click :guilabel:`Finish`; otherwise, click "
@@ -1626,7 +1604,7 @@ msgid ""
"press :guilabel:`Close Ports`."
msgstr ""
#: ../../sysadmclient.rst:1152
#: ../../sysadmclient.rst:1181
msgid ""
"Snapshots occurring too frequently can introduce errors in replication. To "
"avoid errors, ensure snapshots are configured to take place slower than the "
@@ -1685,7 +1663,7 @@ msgid ""
"accounts."
msgstr ""
#: ../../sysadmclient.rst:1065
#: ../../sysadmclient.rst:1094
msgid ""
"A snapshot provides a \"point-in-time\" image of the ZFS pool. This is "
"similar to a full system backup as the snapshot contains the information for"
@@ -1703,26 +1681,26 @@ msgid ""
"snapshot."
msgstr ""
#: ../../sysadmclient.rst:1272
#: ../../sysadmclient.rst:1301
msgid ""
"**Storage Pool:** Select the ZFS storage pool that contains the datasets "
"that you wish to snapshot."
msgstr ""
#: ../../sysadmclient.rst:1293
#: ../../sysadmclient.rst:1322
msgid ""
"This screen can also be used to manage the ZFS scrub schedule. Scrubs are "
"recommended as they can provide an early indication of a potential disk "
"failure. Scrubs can be scheduled on a per-pool basis."
msgstr ""
#: ../../sysadmclient.rst:1297
#: ../../sysadmclient.rst:1326
msgid ""
"If you have multiple pools, be sure to create a scrub schedule for each "
"pool."
msgstr ""
#: ../../sysadmclient.rst:1310
#: ../../sysadmclient.rst:1339
msgid ""
"Select the pool from the :guilabel:`Storage Pool` drop-down menu, then "
"select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", "
@@ -1807,26 +1785,17 @@ msgstr ""
msgid ": Viewing All Accounts and Their Details"
msgstr ""
#: ../../sysadmclient.rst:930
#: ../../sysadmclient.rst:938
msgid ": Initialize PersonaCrypt Device"
msgstr ""
#: ../../sysadmclient.rst:932
msgid ""
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
"Note this section is hidden if the currently logged in user is selected. "
"Also, if you have just created a user and do not see these options, click "
":guilabel:`Save` then re-highlight the user to display these options:"
msgstr ""
#: ../../sysadmclient.rst:947
#: ../../sysadmclient.rst:955
msgid ""
"To prepare a PersonaCrypt device for this user, insert a USB stick and click"
" :guilabel:`Initialize Device`."
msgstr ""
#: ../../sysadmclient.rst:957
#: ../../sysadmclient.rst:965
msgid ""
"Type a password to associate with the device. Click :guilabel:`Save` to "
"initialize the device. The User Manager may take a moment to prepare the "
@@ -1834,49 +1803,49 @@ msgid ""
" to allow removal of PersonaCrypt."
msgstr ""
#: ../../sysadmclient.rst:1027
#: ../../sysadmclient.rst:1056
msgid ": Managing Groups Using User Manager"
msgstr ""
#: ../../sysadmclient.rst:1110
#: ../../sysadmclient.rst:1139
msgid ": Snapshot Tab"
msgstr ""
#: ../../sysadmclient.rst:1184
#: ../../sysadmclient.rst:1213
msgid ": Replication Tab"
msgstr ""
#: ../../sysadmclient.rst:1194
#: ../../sysadmclient.rst:1223
msgid ": Scheduling a Replication"
msgstr ""
#: ../../sysadmclient.rst:1268
#: ../../sysadmclient.rst:1297
msgid ": Scheduling a Snapshot"
msgstr ""
#: ../../sysadmclient.rst:1308
#: ../../sysadmclient.rst:1337
msgid ": Scheduling a Scrub"
msgstr ""
#: ../../sysadmclient.rst:1335
#: ../../sysadmclient.rst:1364
msgid ": Life Preserver Settings"
msgstr ""
#: ../../sysadmclient.rst:1442
#: ../../sysadmclient.rst:1471
msgid ""
":numref:`Table %s <cmdgui>` shows the command line equivalents to the "
"graphical options provided by the Life Preserver GUI."
msgstr ""
#: ../../sysadmclient.rst:1495
#: ../../sysadmclient.rst:1524
msgid ": Selecting to Restore/Clone From Backup"
msgstr ""
#: ../../sysadmclient.rst:1517
#: ../../sysadmclient.rst:1546
msgid ": Input the Information for a SSH Restore"
msgstr ""
#: ../../sysadmclient.rst:1523
#: ../../sysadmclient.rst:1552
msgid ""
"Once the connection to the backup server succeeds, you will be able to "
"select which host to restore. After making your selection, click "
@@ -1892,7 +1861,7 @@ msgid ""
":guilabel:`Next` to perform the restore."
msgstr ""
#: ../../sysadmclient.rst:987
#: ../../sysadmclient.rst:970
msgid ""
"Once a user has been initialized for PersonaCrypt on the system, their user "
"account will no longer be displayed when logging in, **unless** their "
@@ -1901,7 +1870,7 @@ msgid ""
":numref:`Figure %s <troslogin5>`."
msgstr ""
#: ../../sysadmclient.rst:997
#: ../../sysadmclient.rst:980
msgid ": |trueos| Login Screen with PersonaCrypt"
msgstr ""
@@ -1949,7 +1918,7 @@ msgstr ""
msgid ": |sysadm| Task Manager"
msgstr ""
#: ../../sysadmclient.rst:1103
#: ../../sysadmclient.rst:1132
msgid ""
":numref:`Figure %s <lpreserver1>` shows the :guilabel:`Snapshots` tab on a "
"system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"."
@@ -2013,6 +1982,134 @@ msgid ""
":guilabel:`Save Settings`."
msgstr ""
#: ../../sysadmclient.rst:894
msgid ""
"|trueos| provides support for a security feature known as PersonaCrypt. A "
"PersonaCrypt device is a removable USB media, such as a USB flash drive, "
"formatted with ZFS and encrypted with either GELI or PEFS. This device is "
"used to hold a specific user's home directory, meaning they can securely "
"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 "
"or higher system. For example, this can be used to securely access one's "
"home directory from a laptop, home computer, and work computer. The device "
"is protected by an encryption key and a different (recommended) password "
"separate from the user's login password."
msgstr ""
#: ../../sysadmclient.rst:916
msgid "GELI"
msgstr ""
#: ../../sysadmclient.rst:918
msgid ""
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
"your passphrase, and the other being a key stored on disk. Without both of "
"these parts, the media cannot be decrypted. This means if somebody steals "
"the key and manages to get your password, it is still worthless without the "
"system it was paired with. GELI is used by default in |trueos| as it is more"
" fully featured over PEFS."
msgstr ""
#: ../../sysadmclient.rst:940
msgid ""
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
"buttons are available in the :guilabel:`PersonaCrypt` tab of "
":guilabel:`Advanced Mode`. Note this section is hidden if the currently "
"logged in user is selected. Also, if you have just created a user and do not"
" see these options, click :guilabel:`Save`, then re-highlight the user to "
"display these options:"
msgstr ""
#: ../../sysadmclient.rst:999
msgid "PEFS"
msgstr ""
#: ../../sysadmclient.rst:1001
msgid ""
"`PEFS <http://pefs.io/>`_ stands for Private Encrypted File System. It is "
"open source software freely available under the BSD license, and is included"
" in |trueos| by default. PEFS runs on top of any existing file system, "
"providing an encryption layer independent of the underlying file system. "
"PersonaCrypt can be configured to use PEFS in place of GELI, which "
"eliminates the need for external media, as the encrypted PEFS database is "
"stored on the local disk."
msgstr ""
#: ../../sysadmclient.rst:1009
msgid ""
"While PEFS does not use a USB drive, be sure to print or otherwise backup "
"the PEFS generated key fragment stored on the disk."
msgstr ""
#: ../../sysadmclient.rst:1012
msgid "**Initialize PEFS with the Command Line**"
msgstr ""
#: ../../sysadmclient.rst:1014
msgid ""
"Because PEFS does not use a USB drive with its encryption, the user will "
"need a password file (pfile) containing the desired password, **before** "
"initializing PEFS for a user account. Once this pfile is created, enabling "
"PEFS through PersonaCrypt is accomplished in a CLI with "
":command:`personacrypt init <username> <pfile> PEFS`."
msgstr ""
#: ../../sysadmclient.rst:1020
msgid ""
"For example, the user account **test** has a pfile named "
":file:`testpfile.txt`, which contains the single text string of **test's** "
"chosen password. Next, the administrator adds PEFS encryption to the "
"**test** acount by opening a CLI, logging in as root, and typing:"
msgstr ""
#: ../../sysadmclient.rst:1029
msgid ""
"PersonaCrypt will initialize the account **test** with PEFS, using the "
"string in :file:`testpfile.txt` as the new password."
msgstr ""
#: ../../sysadmclient.rst:1032
msgid ""
"The |sysadm| User Manager can also initialize a user account with PEFS by "
"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` "
"drop down menu of the :guilabel:`PersonaCrypt` tab."
msgstr ""
#: ../../sysadmclient.rst:1036
msgid ""
"In addition to initializing an account with PEFS, PersonaCrypt also supports"
" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt "
"export <username>` and :command:`personacrypt import <keyfile>`, "
"respectively."
msgstr ""
#~ msgid ""
#~ "|trueos| provides support for a security feature known as PersonaCrypt. A "
#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
#~ " with ZFS and encrypted with GELI. This device is used to hold a specific "
#~ "user's home directory, meaning they can securely transport and access their "
#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
#~ "example, this can be used to securely access one's home directory from a "
#~ "laptop, home computer, and work computer. The device is protected by an "
#~ "encryption key and a password which is, and should be, separate from the "
#~ "user's login password."
#~ msgstr ""
#~ msgid ""
#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being "
#~ "your passphrase, and the other being a key stored on disk. Without both of "
#~ "these parts, the media cannot be decrypted. This means if somebody steals "
#~ "the key and manages to get your password, it is still worthless without the "
#~ "system it was paired with."
#~ msgstr ""
#~ msgid ""
#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two "
#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
#~ "Note this section is hidden if the currently logged in user is selected. "
#~ "Also, if you have just created a user and do not see these options, click "
#~ ":guilabel:`Save` then re-highlight the user to display these options:"
#~ msgstr ""
#~ msgid ""
#~ "**Max Boot Environments:** |trueos| automatically creates a boot environment"
#~ " before updating any software, the operating system, or applying a system "

View File

@@ -482,7 +482,7 @@ msgid ""
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <update4>`."
msgstr ""
#: ../../sysadmclient.rst:1326
#: ../../sysadmclient.rst:1355
msgid "Settings Tab"
msgstr ""
@@ -924,20 +924,7 @@ msgstr ""
msgid "PersonaCrypt"
msgstr ""
#: ../../sysadmclient.rst:894
msgid ""
"|trueos| provides support for a security feature known as PersonaCrypt. A "
"PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
" with ZFS and encrypted with GELI. This device is used to hold a specific "
"user's home directory, meaning they can securely transport and access their "
"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
"example, this can be used to securely access one's home directory from a "
"laptop, home computer, and work computer. The device is protected by an "
"encryption key and a password which is, and should be, separate from the "
"user's login password."
msgstr ""
#: ../../sysadmclient.rst:904
#: ../../sysadmclient.rst:905
msgid ""
"When a user is configured to use a PersonaCrypt device, that user can not "
"login using an unencrypted session on the same system. In other words, the "
@@ -946,22 +933,13 @@ msgid ""
"different user accounts, one for each type of session."
msgstr ""
#: ../../sysadmclient.rst:911
msgid ""
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
"your passphrase, and the other being a key stored on disk. Without both of "
"these parts, the media cannot be decrypted. This means if somebody steals "
"the key and manages to get your password, it is still worthless without the "
"system it was paired with."
msgstr ""
#: ../../sysadmclient.rst:917
#: ../../sysadmclient.rst:925
msgid ""
"USB devices do eventually fail. Always backup any important files stored on "
"the PersonaCrypt device to another device or system."
msgstr ""
#: ../../sysadmclient.rst:920
#: ../../sysadmclient.rst:928
msgid ""
"The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt "
"device for any login user, **except** for the currently logged in user. In "
@@ -969,13 +947,13 @@ msgid ""
"*dlavigne*, has been created and the entry for the user has been clicked."
msgstr ""
#: ../../sysadmclient.rst:939
#: ../../sysadmclient.rst:947
msgid ""
"**Initialize Device:** Used to prepare the USB device which will be used as "
"the user's home directory."
msgstr ""
#: ../../sysadmclient.rst:942
#: ../../sysadmclient.rst:950
msgid ""
"**Import Key:** If the user has already created a PersonaCrypt device on "
"another |trueos| system, click this button to import a previously saved copy"
@@ -983,7 +961,7 @@ msgid ""
"can now login to this computer using PersonaCrypt."
msgstr ""
#: ../../sysadmclient.rst:950
#: ../../sysadmclient.rst:958
msgid ""
"Since the USB stick will hold the user's home directory and files, ensure "
"the stick is large enough to meet the anticipated storage needs of the home "
@@ -993,7 +971,7 @@ msgid ""
"logged in."
msgstr ""
#: ../../sysadmclient.rst:999
#: ../../sysadmclient.rst:982
msgid ""
"When stealth sessions have been configured, PersonaCrypt users will still be"
" displayed in the login menu, even if their USB device is not inserted. This"
@@ -1001,47 +979,47 @@ msgid ""
"session."
msgstr ""
#: ../../sysadmclient.rst:1004
#: ../../sysadmclient.rst:987
msgid ""
"In the field with the yellow padlock icon, input the password for the user "
"account. In the field with the grey USB stick icon, input the password "
"associated with the PersonaCrypt device."
msgstr ""
#: ../../sysadmclient.rst:1008
#: ../../sysadmclient.rst:991
msgid ""
"To prevent data corruption and freezing the system **DO NOT** remove the "
"PersonaCrypt device while logged in! Always log out of your session before "
"physically removing the device."
msgstr ""
#: ../../sysadmclient.rst:1016
#: ../../sysadmclient.rst:1045
msgid "Managing Groups"
msgstr ""
#: ../../sysadmclient.rst:1018
#: ../../sysadmclient.rst:1047
msgid ""
"Click the :guilabel:`Groups` tab to view and manage the groups on the "
"system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s <user4>`, "
"shows the group membership for the *operator* and *wheel* groups:"
msgstr ""
#: ../../sysadmclient.rst:1029
#: ../../sysadmclient.rst:1058
msgid "This screen has 2 columns:"
msgstr ""
#: ../../sysadmclient.rst:1031
#: ../../sysadmclient.rst:1060
msgid ""
"**Members:** Indicates if the highlighted group contains any user accounts."
msgstr ""
#: ../../sysadmclient.rst:1034
#: ../../sysadmclient.rst:1063
msgid ""
"**Available:** Shows all of the system and user accounts on the system in "
"alphabetical order."
msgstr ""
#: ../../sysadmclient.rst:1037
#: ../../sysadmclient.rst:1066
msgid ""
"To add an account to a group, highlight the group name, then highlight the "
"account name in the :guilabel:`Available` column. Click the left arrow and "
@@ -1051,7 +1029,7 @@ msgid ""
"added to a group."
msgstr ""
#: ../../sysadmclient.rst:1044
#: ../../sysadmclient.rst:1073
msgid ""
"If you add a user to the *operator* group, they will have permission to use "
"commands requiring administrative access and will be prompted for their own "
@@ -1060,15 +1038,15 @@ msgid ""
"will be prompted for the superuser password whenever they use the command."
msgstr ""
#: ../../sysadmclient.rst:1051
#: ../../sysadmclient.rst:1080
msgid "To view all of the groups on the system, click :guilabel:`Advanced`."
msgstr ""
#: ../../sysadmclient.rst:1057
#: ../../sysadmclient.rst:1086
msgid "Life Preserver"
msgstr ""
#: ../../sysadmclient.rst:1059
#: ../../sysadmclient.rst:1088
msgid ""
"The Life Preserver utility is designed to take full advantage of the "
"functionality provided by ZFS snapshots. This utility allows you to schedule"
@@ -1077,25 +1055,25 @@ msgid ""
"benefits:"
msgstr ""
#: ../../sysadmclient.rst:1081
#: ../../sysadmclient.rst:1110
msgid ""
"Replication is an efficient way to keep the files on two systems in sync. "
"With Life Preserver, the snapshots taken on the |trueos| system will be "
"synchronized with their versions stored on the specified backup server."
msgstr ""
#: ../../sysadmclient.rst:1086
#: ../../sysadmclient.rst:1115
msgid "Snapshots are sent to the backup server over an encrypted connection."
msgstr ""
#: ../../sysadmclient.rst:1088
#: ../../sysadmclient.rst:1117
msgid ""
"Having a copy of the snapshots on another system makes it possible to "
"perform an operating system restore should the |trueos| system become "
"unusable or to deploy an identical system to different hardware."
msgstr ""
#: ../../sysadmclient.rst:1092
#: ../../sysadmclient.rst:1121
msgid ""
"To manage snapshots and replication using the |sysadm| graphical client, go "
"to :menuselection:`Utilities --> Life Preserver`. The rest of this section "
@@ -1103,16 +1081,16 @@ msgid ""
"Preserver."
msgstr ""
#: ../../sysadmclient.rst:1101
#: ../../sysadmclient.rst:1130
msgid "Snapshots Tab"
msgstr ""
#: ../../sysadmclient.rst:1112
#: ../../sysadmclient.rst:1141
msgid ""
"This screen will display any created snapshots and provides buttons to:"
msgstr ""
#: ../../sysadmclient.rst:1114
#: ../../sysadmclient.rst:1143
msgid ""
"**Create:** Used to create a manual snapshot of the specified pool now. For "
"example, you could create a snapshot before making changes to an important "
@@ -1126,14 +1104,14 @@ msgid ""
"snapshot was created."
msgstr ""
#: ../../sysadmclient.rst:1125
#: ../../sysadmclient.rst:1154
msgid ""
"**Remove:** Used to delete a highlighted snapshot. **This is a permanent "
"change that can not be reversed.** In other words, the versions of files at "
"the point in time the snapshot was created will be lost."
msgstr ""
#: ../../sysadmclient.rst:1130
#: ../../sysadmclient.rst:1159
msgid ""
"**Revert:** If you highlight a snapshot entry, this button and the drop-down"
" menu next to it will activate. You can use the drop-down menu to specify "
@@ -1143,11 +1121,11 @@ msgid ""
" after the snapshot was taken will be lost."
msgstr ""
#: ../../sysadmclient.rst:1142
#: ../../sysadmclient.rst:1171
msgid "Replication Tab"
msgstr ""
#: ../../sysadmclient.rst:1144
#: ../../sysadmclient.rst:1173
msgid ""
"Life Preserver can be configured to replicate snapshots to another system "
"over an encrypted SSH connection, though the backup itself is stored in an "
@@ -1155,13 +1133,13 @@ msgid ""
" another system."
msgstr ""
#: ../../sysadmclient.rst:1149
#: ../../sysadmclient.rst:1178
msgid ""
"In order to configure replication, the remote system to hold a copy of the "
"snapshots must first meet several requirements:"
msgstr ""
#: ../../sysadmclient.rst:1156
#: ../../sysadmclient.rst:1185
msgid ""
"The backup server **must be formatted with the latest version of ZFS,** also"
" known as ZFS feature flags or ZFSv5000. Operating systems that support this"
@@ -1169,14 +1147,14 @@ msgid ""
"FreeNAS 9.1.x or higher."
msgstr ""
#: ../../sysadmclient.rst:1162
#: ../../sysadmclient.rst:1191
msgid ""
"The system must have SSH installed and the SSH service must be running. If "
"the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is"
" already installed, but you will need to start the SSH service."
msgstr ""
#: ../../sysadmclient.rst:1167
#: ../../sysadmclient.rst:1196
msgid ""
"If the backup server is running |trueos| or |pcbsd|, you will need to open "
"TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is "
@@ -1186,7 +1164,7 @@ msgid ""
"backup system, make sure it has a rule to allow SSH."
msgstr ""
#: ../../sysadmclient.rst:1175
#: ../../sysadmclient.rst:1204
msgid ""
":numref:`Figure %s <lpreserver2>` shows the initial :guilabel:`Replication` "
"tab on a system that has not yet been configured for replication. This "
@@ -1194,29 +1172,29 @@ msgid ""
"schedule."
msgstr ""
#: ../../sysadmclient.rst:1186
#: ../../sysadmclient.rst:1215
msgid ""
"To schedule the replication, click :guilabel:`+` to display the \"Setup "
"Replication\" screen shown in :numref:`Figure %s <lpreserver3>`."
msgstr ""
#: ../../sysadmclient.rst:1196
#: ../../sysadmclient.rst:1225
msgid "Input the following information:"
msgstr ""
#: ../../sysadmclient.rst:1198
#: ../../sysadmclient.rst:1227
msgid ""
"**Host IP:** The IP address of the remote system to store the replicated "
"snapshots."
msgstr ""
#: ../../sysadmclient.rst:1201
#: ../../sysadmclient.rst:1230
msgid ""
"**SSH Port:** The port number, if the remote system is running SSH on a port"
" other than the default of 22."
msgstr ""
#: ../../sysadmclient.rst:1204
#: ../../sysadmclient.rst:1233
msgid ""
"**Dataset:** The name of the ZFS pool and optional dataset on the remote "
"system. For example, \"remotetank\" will save the snapshots to a ZFS pool of"
@@ -1224,7 +1202,7 @@ msgid ""
"existing dataset named \"mybackups\" on the pool named \"remotetank\"."
msgstr ""
#: ../../sysadmclient.rst:1210
#: ../../sysadmclient.rst:1239
msgid ""
"**Frequency:** Use the drop-down menu to select how often to initiate the "
"replication. Available choices are :guilabel:`Sync with snapshot` (at the "
@@ -1235,87 +1213,87 @@ msgid ""
":guilabel:`Start`) in this screen."
msgstr ""
#: ../../sysadmclient.rst:1219
#: ../../sysadmclient.rst:1248
msgid ""
"**Username:** The username must already exist on the remote system, have "
"write access to the specified \"Dataset\", and have permission to SSH into "
"that system."
msgstr ""
#: ../../sysadmclient.rst:1223
#: ../../sysadmclient.rst:1252
msgid "**Password:** The password associated with the \"Username\"."
msgstr ""
#: ../../sysadmclient.rst:1225
#: ../../sysadmclient.rst:1254
msgid ""
"**Local DS:** Use the drop-down menu to select the pool or dataset to "
"replicate to the remote system."
msgstr ""
#: ../../sysadmclient.rst:1228
#: ../../sysadmclient.rst:1257
msgid ""
"The buttons at the top of the \"Setup Replication\" screen have several "
"uses:"
msgstr ""
#: ../../sysadmclient.rst:1231
#: ../../sysadmclient.rst:1260
msgid ""
"**+ icon:** Sdd a replication schedule. Multiple schedules are supported, "
"meaning you can replicate to multiple systems or replicate different \"Local"
" DS\" datasets at different times."
msgstr ""
#: ../../sysadmclient.rst:1235
#: ../../sysadmclient.rst:1264
msgid ""
"**- icon:** Remove an already created, and highlighted, replication "
"schedule."
msgstr ""
#: ../../sysadmclient.rst:1238
#: ../../sysadmclient.rst:1267
msgid "**gear icon:** Modify the schedule for the highlighted replication."
msgstr ""
#: ../../sysadmclient.rst:1240
#: ../../sysadmclient.rst:1269
msgid ""
"**Start:** Manually starts a replication to the system specified in the "
"highlighted replication."
msgstr ""
#: ../../sysadmclient.rst:1243
#: ../../sysadmclient.rst:1272
msgid ""
"**Initialize:** Deletes the existing replicated snapshots on the remote "
"system and starts a new replication. This is useful if a replication gets "
"stuck and will not complete."
msgstr ""
#: ../../sysadmclient.rst:1251
#: ../../sysadmclient.rst:1280
msgid "Schedules Tab"
msgstr ""
#: ../../sysadmclient.rst:1253
#: ../../sysadmclient.rst:1282
msgid ""
"This tab is used to manage when snapshots of the ZFS pool are created. "
"Multiple snapshot schedules are supported if the system has multiple pools."
msgstr ""
#: ../../sysadmclient.rst:1257
#: ../../sysadmclient.rst:1286
msgid ""
"Snapshots are created on the entire pool as they are needed when "
":ref:`Restoring the Operating System`."
msgstr ""
#: ../../sysadmclient.rst:1260
#: ../../sysadmclient.rst:1289
msgid ""
"To create a snapshot schedule, click the :guilabel:`camera` icon in the "
"lower left corner of this tab. This will activate the \"Setup Snapshot "
"Schedule\" pane as seen in :numref:`Figure %s <lpreserver4>`."
msgstr ""
#: ../../sysadmclient.rst:1270
#: ../../sysadmclient.rst:1299
msgid "This pane contains several options:"
msgstr ""
#: ../../sysadmclient.rst:1275
#: ../../sysadmclient.rst:1304
msgid ""
"**Snapshots to keep:** Snapshots are automatically pruned after the "
"specified number of snapshots to prevent snapshots from eventually using up "
@@ -1326,7 +1304,7 @@ msgid ""
"manually in the :guilabel:`Snapshots` tab."
msgstr ""
#: ../../sysadmclient.rst:1284
#: ../../sysadmclient.rst:1313
msgid ""
"**Frequency:** Use the drop-down menu to select how often snapshots occur. "
"Options include \"Daily\" (which will allow you to select the time of day), "
@@ -1334,37 +1312,37 @@ msgid ""
"Minutes\"."
msgstr ""
#: ../../sysadmclient.rst:1289
#: ../../sysadmclient.rst:1318
msgid ""
"Once you have created a snapshot schedule, you can use the \"gear\" icon "
"next to the \"camera\" icon to modify the highlighted schedule or the \"X\" "
"icon to delete the highlighted schedule."
msgstr ""
#: ../../sysadmclient.rst:1300
#: ../../sysadmclient.rst:1329
msgid ""
"To schedule when the scrub occurs, click the third icon from the right which"
" will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure "
"%s <lpreserver5>`."
msgstr ""
#: ../../sysadmclient.rst:1318
#: ../../sysadmclient.rst:1347
msgid ""
"Once you have created a scrub schedule, you can use the \"gear\" icon next "
"to the \"schedule scrub\" icon to modify the highlighted schedule or the "
"\"X\" icon to delete the highlighted schedule."
msgstr ""
#: ../../sysadmclient.rst:1328
#: ../../sysadmclient.rst:1357
msgid ""
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <lpreserver6>`."
msgstr ""
#: ../../sysadmclient.rst:1337
#: ../../sysadmclient.rst:1366
msgid "Many settings are configurable:"
msgstr ""
#: ../../sysadmclient.rst:1339
#: ../../sysadmclient.rst:1368
msgid ""
"**Disk Usage Warning:** Enter a number up to 99 to indicate at which "
"percentage of disk space Life Preserver will display an alert in the system "
@@ -1372,41 +1350,41 @@ msgid ""
"space."
msgstr ""
#: ../../sysadmclient.rst:1344
#: ../../sysadmclient.rst:1373
msgid ""
"**Email:** To receive an email when disk usage reaches the percentage "
"configured in the \"Disk Usage Warning\", enter an email address."
msgstr ""
#: ../../sysadmclient.rst:1347
#: ../../sysadmclient.rst:1376
msgid ""
"**Email Trigger:** This setting can be set to \"All\", \"Warn\", or "
"\"Error\" and indicates the type of condition which will trigger an email "
"message."
msgstr ""
#: ../../sysadmclient.rst:1350
#: ../../sysadmclient.rst:1379
msgid "**Recursive Management:**"
msgstr ""
#: ../../sysadmclient.rst:1352
#: ../../sysadmclient.rst:1381
msgid ""
"If you make any changes in this screen, press :guilabel:`Save Settings` to "
"apply them."
msgstr ""
#: ../../sysadmclient.rst:1359
#: ../../sysadmclient.rst:1388
msgid "Using the lpreserver CLI"
msgstr ""
#: ../../sysadmclient.rst:1361
#: ../../sysadmclient.rst:1390
msgid ""
"The :command:`lpreserver` command line utility can also be used to manage "
"snapshots and replication. This command needs to be run as the superuser. To"
" display its usage, type the command without any arguments:"
msgstr ""
#: ../../sysadmclient.rst:1381
#: ../../sysadmclient.rst:1410
msgid ""
"Each command has its own help text that describes its parameters and "
"provides a usage example. For example, to receive help on how to use the "
@@ -1417,104 +1395,104 @@ msgstr ""
msgid "Command Line and GUI Equivalents"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**Command Line**"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**GUI**"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**Description**"
msgstr ""
#: ../../sysadmclient.rst:1452
#: ../../sysadmclient.rst:1481
msgid "**cronsnap**"
msgstr ""
#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499
msgid "\"Snapshots\" tab"
msgstr ""
#: ../../sysadmclient.rst:1452
#: ../../sysadmclient.rst:1481
msgid ""
"schedule when snapshots occur and how long to keep them; the **stop** option"
" can be used to disable snapshot creation"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "**cronscrub**"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "\"Schedules\" tab"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "schedule a ZFS scrub"
msgstr ""
#: ../../sysadmclient.rst:1459
#: ../../sysadmclient.rst:1488
msgid "**get**"
msgstr ""
#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495
msgid "\"Settings\" tab"
msgstr ""
#: ../../sysadmclient.rst:1459
#: ../../sysadmclient.rst:1488
msgid "list Life Preserver options"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid "**replicate**"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid "\"Replication\" tab"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid ""
"used to list, add, and remove backup server; read the **help** for this "
"command for examples"
msgstr ""
#: ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1495
msgid "**set**"
msgstr ""
#: ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1495
msgid ""
"configures Life Preserver options; read **help** for the list of "
"configurable options"
msgstr ""
#: ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1499
msgid "**snapshot**"
msgstr ""
#: ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1499
msgid ""
"create and replicate a new ZFS snapshot; by default, snapshots are "
"recursive, meaning that a that a snapshot is taken of every dataset within a"
" pool"
msgstr ""
#: ../../sysadmclient.rst:1476
#: ../../sysadmclient.rst:1505
msgid "**status**"
msgstr ""
#: ../../sysadmclient.rst:1476
#: ../../sysadmclient.rst:1505
msgid "lists the last snapshot name and replication status"
msgstr ""
#: ../../sysadmclient.rst:1483
#: ../../sysadmclient.rst:1512
msgid "Restoring the Operating System"
msgstr ""
#: ../../sysadmclient.rst:1485
#: ../../sysadmclient.rst:1514
msgid ""
"If you have replicated the system's snapshots to a remote backup server, you"
" can use a |trueos| installation media to perform an operating system "
@@ -1522,7 +1500,7 @@ msgid ""
"you get to the screen shown in :numref:`Figure %s <restore1>`."
msgstr ""
#: ../../sysadmclient.rst:1497
#: ../../sysadmclient.rst:1526
msgid ""
"Before you can perform a restore, the network interface must be configured. "
"Click :guilabel:`Network Connectivity` (second icon from the left) in order "
@@ -1533,7 +1511,7 @@ msgid ""
"continuing."
msgstr ""
#: ../../sysadmclient.rst:1505
#: ../../sysadmclient.rst:1534
msgid ""
"Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and"
" :guilabel:`Next`. This will start the Restore Wizard. In the screen shown "
@@ -1543,7 +1521,7 @@ msgid ""
"number."
msgstr ""
#: ../../sysadmclient.rst:1519
#: ../../sysadmclient.rst:1548
msgid ""
"Click :guilabel:`Next` and the wizard will provide a summary of your "
"selections. If correct, click :guilabel:`Finish`; otherwise, click "
@@ -1626,7 +1604,7 @@ msgid ""
"press :guilabel:`Close Ports`."
msgstr ""
#: ../../sysadmclient.rst:1152
#: ../../sysadmclient.rst:1181
msgid ""
"Snapshots occurring too frequently can introduce errors in replication. To "
"avoid errors, ensure snapshots are configured to take place slower than the "
@@ -1685,7 +1663,7 @@ msgid ""
"accounts."
msgstr ""
#: ../../sysadmclient.rst:1065
#: ../../sysadmclient.rst:1094
msgid ""
"A snapshot provides a \"point-in-time\" image of the ZFS pool. This is "
"similar to a full system backup as the snapshot contains the information for"
@@ -1703,26 +1681,26 @@ msgid ""
"snapshot."
msgstr ""
#: ../../sysadmclient.rst:1272
#: ../../sysadmclient.rst:1301
msgid ""
"**Storage Pool:** Select the ZFS storage pool that contains the datasets "
"that you wish to snapshot."
msgstr ""
#: ../../sysadmclient.rst:1293
#: ../../sysadmclient.rst:1322
msgid ""
"This screen can also be used to manage the ZFS scrub schedule. Scrubs are "
"recommended as they can provide an early indication of a potential disk "
"failure. Scrubs can be scheduled on a per-pool basis."
msgstr ""
#: ../../sysadmclient.rst:1297
#: ../../sysadmclient.rst:1326
msgid ""
"If you have multiple pools, be sure to create a scrub schedule for each "
"pool."
msgstr ""
#: ../../sysadmclient.rst:1310
#: ../../sysadmclient.rst:1339
msgid ""
"Select the pool from the :guilabel:`Storage Pool` drop-down menu, then "
"select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", "
@@ -1807,26 +1785,17 @@ msgstr ""
msgid ": Viewing All Accounts and Their Details"
msgstr ""
#: ../../sysadmclient.rst:930
#: ../../sysadmclient.rst:938
msgid ": Initialize PersonaCrypt Device"
msgstr ""
#: ../../sysadmclient.rst:932
msgid ""
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
"Note this section is hidden if the currently logged in user is selected. "
"Also, if you have just created a user and do not see these options, click "
":guilabel:`Save` then re-highlight the user to display these options:"
msgstr ""
#: ../../sysadmclient.rst:947
#: ../../sysadmclient.rst:955
msgid ""
"To prepare a PersonaCrypt device for this user, insert a USB stick and click"
" :guilabel:`Initialize Device`."
msgstr ""
#: ../../sysadmclient.rst:957
#: ../../sysadmclient.rst:965
msgid ""
"Type a password to associate with the device. Click :guilabel:`Save` to "
"initialize the device. The User Manager may take a moment to prepare the "
@@ -1834,49 +1803,49 @@ msgid ""
" to allow removal of PersonaCrypt."
msgstr ""
#: ../../sysadmclient.rst:1027
#: ../../sysadmclient.rst:1056
msgid ": Managing Groups Using User Manager"
msgstr ""
#: ../../sysadmclient.rst:1110
#: ../../sysadmclient.rst:1139
msgid ": Snapshot Tab"
msgstr ""
#: ../../sysadmclient.rst:1184
#: ../../sysadmclient.rst:1213
msgid ": Replication Tab"
msgstr ""
#: ../../sysadmclient.rst:1194
#: ../../sysadmclient.rst:1223
msgid ": Scheduling a Replication"
msgstr ""
#: ../../sysadmclient.rst:1268
#: ../../sysadmclient.rst:1297
msgid ": Scheduling a Snapshot"
msgstr ""
#: ../../sysadmclient.rst:1308
#: ../../sysadmclient.rst:1337
msgid ": Scheduling a Scrub"
msgstr ""
#: ../../sysadmclient.rst:1335
#: ../../sysadmclient.rst:1364
msgid ": Life Preserver Settings"
msgstr ""
#: ../../sysadmclient.rst:1442
#: ../../sysadmclient.rst:1471
msgid ""
":numref:`Table %s <cmdgui>` shows the command line equivalents to the "
"graphical options provided by the Life Preserver GUI."
msgstr ""
#: ../../sysadmclient.rst:1495
#: ../../sysadmclient.rst:1524
msgid ": Selecting to Restore/Clone From Backup"
msgstr ""
#: ../../sysadmclient.rst:1517
#: ../../sysadmclient.rst:1546
msgid ": Input the Information for a SSH Restore"
msgstr ""
#: ../../sysadmclient.rst:1523
#: ../../sysadmclient.rst:1552
msgid ""
"Once the connection to the backup server succeeds, you will be able to "
"select which host to restore. After making your selection, click "
@@ -1892,7 +1861,7 @@ msgid ""
":guilabel:`Next` to perform the restore."
msgstr ""
#: ../../sysadmclient.rst:987
#: ../../sysadmclient.rst:970
msgid ""
"Once a user has been initialized for PersonaCrypt on the system, their user "
"account will no longer be displayed when logging in, **unless** their "
@@ -1901,7 +1870,7 @@ msgid ""
":numref:`Figure %s <troslogin5>`."
msgstr ""
#: ../../sysadmclient.rst:997
#: ../../sysadmclient.rst:980
msgid ": |trueos| Login Screen with PersonaCrypt"
msgstr ""
@@ -1949,7 +1918,7 @@ msgstr ""
msgid ": |sysadm| Task Manager"
msgstr ""
#: ../../sysadmclient.rst:1103
#: ../../sysadmclient.rst:1132
msgid ""
":numref:`Figure %s <lpreserver1>` shows the :guilabel:`Snapshots` tab on a "
"system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"."
@@ -2013,6 +1982,134 @@ msgid ""
":guilabel:`Save Settings`."
msgstr ""
#: ../../sysadmclient.rst:894
msgid ""
"|trueos| provides support for a security feature known as PersonaCrypt. A "
"PersonaCrypt device is a removable USB media, such as a USB flash drive, "
"formatted with ZFS and encrypted with either GELI or PEFS. This device is "
"used to hold a specific user's home directory, meaning they can securely "
"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 "
"or higher system. For example, this can be used to securely access one's "
"home directory from a laptop, home computer, and work computer. The device "
"is protected by an encryption key and a different (recommended) password "
"separate from the user's login password."
msgstr ""
#: ../../sysadmclient.rst:916
msgid "GELI"
msgstr ""
#: ../../sysadmclient.rst:918
msgid ""
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
"your passphrase, and the other being a key stored on disk. Without both of "
"these parts, the media cannot be decrypted. This means if somebody steals "
"the key and manages to get your password, it is still worthless without the "
"system it was paired with. GELI is used by default in |trueos| as it is more"
" fully featured over PEFS."
msgstr ""
#: ../../sysadmclient.rst:940
msgid ""
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
"buttons are available in the :guilabel:`PersonaCrypt` tab of "
":guilabel:`Advanced Mode`. Note this section is hidden if the currently "
"logged in user is selected. Also, if you have just created a user and do not"
" see these options, click :guilabel:`Save`, then re-highlight the user to "
"display these options:"
msgstr ""
#: ../../sysadmclient.rst:999
msgid "PEFS"
msgstr ""
#: ../../sysadmclient.rst:1001
msgid ""
"`PEFS <http://pefs.io/>`_ stands for Private Encrypted File System. It is "
"open source software freely available under the BSD license, and is included"
" in |trueos| by default. PEFS runs on top of any existing file system, "
"providing an encryption layer independent of the underlying file system. "
"PersonaCrypt can be configured to use PEFS in place of GELI, which "
"eliminates the need for external media, as the encrypted PEFS database is "
"stored on the local disk."
msgstr ""
#: ../../sysadmclient.rst:1009
msgid ""
"While PEFS does not use a USB drive, be sure to print or otherwise backup "
"the PEFS generated key fragment stored on the disk."
msgstr ""
#: ../../sysadmclient.rst:1012
msgid "**Initialize PEFS with the Command Line**"
msgstr ""
#: ../../sysadmclient.rst:1014
msgid ""
"Because PEFS does not use a USB drive with its encryption, the user will "
"need a password file (pfile) containing the desired password, **before** "
"initializing PEFS for a user account. Once this pfile is created, enabling "
"PEFS through PersonaCrypt is accomplished in a CLI with "
":command:`personacrypt init <username> <pfile> PEFS`."
msgstr ""
#: ../../sysadmclient.rst:1020
msgid ""
"For example, the user account **test** has a pfile named "
":file:`testpfile.txt`, which contains the single text string of **test's** "
"chosen password. Next, the administrator adds PEFS encryption to the "
"**test** acount by opening a CLI, logging in as root, and typing:"
msgstr ""
#: ../../sysadmclient.rst:1029
msgid ""
"PersonaCrypt will initialize the account **test** with PEFS, using the "
"string in :file:`testpfile.txt` as the new password."
msgstr ""
#: ../../sysadmclient.rst:1032
msgid ""
"The |sysadm| User Manager can also initialize a user account with PEFS by "
"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` "
"drop down menu of the :guilabel:`PersonaCrypt` tab."
msgstr ""
#: ../../sysadmclient.rst:1036
msgid ""
"In addition to initializing an account with PEFS, PersonaCrypt also supports"
" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt "
"export <username>` and :command:`personacrypt import <keyfile>`, "
"respectively."
msgstr ""
#~ msgid ""
#~ "|trueos| provides support for a security feature known as PersonaCrypt. A "
#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
#~ " with ZFS and encrypted with GELI. This device is used to hold a specific "
#~ "user's home directory, meaning they can securely transport and access their "
#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
#~ "example, this can be used to securely access one's home directory from a "
#~ "laptop, home computer, and work computer. The device is protected by an "
#~ "encryption key and a password which is, and should be, separate from the "
#~ "user's login password."
#~ msgstr ""
#~ msgid ""
#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being "
#~ "your passphrase, and the other being a key stored on disk. Without both of "
#~ "these parts, the media cannot be decrypted. This means if somebody steals "
#~ "the key and manages to get your password, it is still worthless without the "
#~ "system it was paired with."
#~ msgstr ""
#~ msgid ""
#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two "
#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
#~ "Note this section is hidden if the currently logged in user is selected. "
#~ "Also, if you have just created a user and do not see these options, click "
#~ ":guilabel:`Save` then re-highlight the user to display these options:"
#~ msgstr ""
#~ msgid ""
#~ "**Max Boot Environments:** |trueos| automatically creates a boot environment"
#~ " before updating any software, the operating system, or applying a system "

View File

@@ -482,7 +482,7 @@ msgid ""
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <update4>`."
msgstr ""
#: ../../sysadmclient.rst:1326
#: ../../sysadmclient.rst:1355
msgid "Settings Tab"
msgstr ""
@@ -924,20 +924,7 @@ msgstr ""
msgid "PersonaCrypt"
msgstr ""
#: ../../sysadmclient.rst:894
msgid ""
"|trueos| provides support for a security feature known as PersonaCrypt. A "
"PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
" with ZFS and encrypted with GELI. This device is used to hold a specific "
"user's home directory, meaning they can securely transport and access their "
"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
"example, this can be used to securely access one's home directory from a "
"laptop, home computer, and work computer. The device is protected by an "
"encryption key and a password which is, and should be, separate from the "
"user's login password."
msgstr ""
#: ../../sysadmclient.rst:904
#: ../../sysadmclient.rst:905
msgid ""
"When a user is configured to use a PersonaCrypt device, that user can not "
"login using an unencrypted session on the same system. In other words, the "
@@ -946,22 +933,13 @@ msgid ""
"different user accounts, one for each type of session."
msgstr ""
#: ../../sysadmclient.rst:911
msgid ""
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
"your passphrase, and the other being a key stored on disk. Without both of "
"these parts, the media cannot be decrypted. This means if somebody steals "
"the key and manages to get your password, it is still worthless without the "
"system it was paired with."
msgstr ""
#: ../../sysadmclient.rst:917
#: ../../sysadmclient.rst:925
msgid ""
"USB devices do eventually fail. Always backup any important files stored on "
"the PersonaCrypt device to another device or system."
msgstr ""
#: ../../sysadmclient.rst:920
#: ../../sysadmclient.rst:928
msgid ""
"The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt "
"device for any login user, **except** for the currently logged in user. In "
@@ -969,13 +947,13 @@ msgid ""
"*dlavigne*, has been created and the entry for the user has been clicked."
msgstr ""
#: ../../sysadmclient.rst:939
#: ../../sysadmclient.rst:947
msgid ""
"**Initialize Device:** Used to prepare the USB device which will be used as "
"the user's home directory."
msgstr ""
#: ../../sysadmclient.rst:942
#: ../../sysadmclient.rst:950
msgid ""
"**Import Key:** If the user has already created a PersonaCrypt device on "
"another |trueos| system, click this button to import a previously saved copy"
@@ -983,7 +961,7 @@ msgid ""
"can now login to this computer using PersonaCrypt."
msgstr ""
#: ../../sysadmclient.rst:950
#: ../../sysadmclient.rst:958
msgid ""
"Since the USB stick will hold the user's home directory and files, ensure "
"the stick is large enough to meet the anticipated storage needs of the home "
@@ -993,7 +971,7 @@ msgid ""
"logged in."
msgstr ""
#: ../../sysadmclient.rst:999
#: ../../sysadmclient.rst:982
msgid ""
"When stealth sessions have been configured, PersonaCrypt users will still be"
" displayed in the login menu, even if their USB device is not inserted. This"
@@ -1001,47 +979,47 @@ msgid ""
"session."
msgstr ""
#: ../../sysadmclient.rst:1004
#: ../../sysadmclient.rst:987
msgid ""
"In the field with the yellow padlock icon, input the password for the user "
"account. In the field with the grey USB stick icon, input the password "
"associated with the PersonaCrypt device."
msgstr ""
#: ../../sysadmclient.rst:1008
#: ../../sysadmclient.rst:991
msgid ""
"To prevent data corruption and freezing the system **DO NOT** remove the "
"PersonaCrypt device while logged in! Always log out of your session before "
"physically removing the device."
msgstr ""
#: ../../sysadmclient.rst:1016
#: ../../sysadmclient.rst:1045
msgid "Managing Groups"
msgstr ""
#: ../../sysadmclient.rst:1018
#: ../../sysadmclient.rst:1047
msgid ""
"Click the :guilabel:`Groups` tab to view and manage the groups on the "
"system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s <user4>`, "
"shows the group membership for the *operator* and *wheel* groups:"
msgstr ""
#: ../../sysadmclient.rst:1029
#: ../../sysadmclient.rst:1058
msgid "This screen has 2 columns:"
msgstr ""
#: ../../sysadmclient.rst:1031
#: ../../sysadmclient.rst:1060
msgid ""
"**Members:** Indicates if the highlighted group contains any user accounts."
msgstr ""
#: ../../sysadmclient.rst:1034
#: ../../sysadmclient.rst:1063
msgid ""
"**Available:** Shows all of the system and user accounts on the system in "
"alphabetical order."
msgstr ""
#: ../../sysadmclient.rst:1037
#: ../../sysadmclient.rst:1066
msgid ""
"To add an account to a group, highlight the group name, then highlight the "
"account name in the :guilabel:`Available` column. Click the left arrow and "
@@ -1051,7 +1029,7 @@ msgid ""
"added to a group."
msgstr ""
#: ../../sysadmclient.rst:1044
#: ../../sysadmclient.rst:1073
msgid ""
"If you add a user to the *operator* group, they will have permission to use "
"commands requiring administrative access and will be prompted for their own "
@@ -1060,15 +1038,15 @@ msgid ""
"will be prompted for the superuser password whenever they use the command."
msgstr ""
#: ../../sysadmclient.rst:1051
#: ../../sysadmclient.rst:1080
msgid "To view all of the groups on the system, click :guilabel:`Advanced`."
msgstr ""
#: ../../sysadmclient.rst:1057
#: ../../sysadmclient.rst:1086
msgid "Life Preserver"
msgstr ""
#: ../../sysadmclient.rst:1059
#: ../../sysadmclient.rst:1088
msgid ""
"The Life Preserver utility is designed to take full advantage of the "
"functionality provided by ZFS snapshots. This utility allows you to schedule"
@@ -1077,25 +1055,25 @@ msgid ""
"benefits:"
msgstr ""
#: ../../sysadmclient.rst:1081
#: ../../sysadmclient.rst:1110
msgid ""
"Replication is an efficient way to keep the files on two systems in sync. "
"With Life Preserver, the snapshots taken on the |trueos| system will be "
"synchronized with their versions stored on the specified backup server."
msgstr ""
#: ../../sysadmclient.rst:1086
#: ../../sysadmclient.rst:1115
msgid "Snapshots are sent to the backup server over an encrypted connection."
msgstr ""
#: ../../sysadmclient.rst:1088
#: ../../sysadmclient.rst:1117
msgid ""
"Having a copy of the snapshots on another system makes it possible to "
"perform an operating system restore should the |trueos| system become "
"unusable or to deploy an identical system to different hardware."
msgstr ""
#: ../../sysadmclient.rst:1092
#: ../../sysadmclient.rst:1121
msgid ""
"To manage snapshots and replication using the |sysadm| graphical client, go "
"to :menuselection:`Utilities --> Life Preserver`. The rest of this section "
@@ -1103,16 +1081,16 @@ msgid ""
"Preserver."
msgstr ""
#: ../../sysadmclient.rst:1101
#: ../../sysadmclient.rst:1130
msgid "Snapshots Tab"
msgstr ""
#: ../../sysadmclient.rst:1112
#: ../../sysadmclient.rst:1141
msgid ""
"This screen will display any created snapshots and provides buttons to:"
msgstr ""
#: ../../sysadmclient.rst:1114
#: ../../sysadmclient.rst:1143
msgid ""
"**Create:** Used to create a manual snapshot of the specified pool now. For "
"example, you could create a snapshot before making changes to an important "
@@ -1126,14 +1104,14 @@ msgid ""
"snapshot was created."
msgstr ""
#: ../../sysadmclient.rst:1125
#: ../../sysadmclient.rst:1154
msgid ""
"**Remove:** Used to delete a highlighted snapshot. **This is a permanent "
"change that can not be reversed.** In other words, the versions of files at "
"the point in time the snapshot was created will be lost."
msgstr ""
#: ../../sysadmclient.rst:1130
#: ../../sysadmclient.rst:1159
msgid ""
"**Revert:** If you highlight a snapshot entry, this button and the drop-down"
" menu next to it will activate. You can use the drop-down menu to specify "
@@ -1143,11 +1121,11 @@ msgid ""
" after the snapshot was taken will be lost."
msgstr ""
#: ../../sysadmclient.rst:1142
#: ../../sysadmclient.rst:1171
msgid "Replication Tab"
msgstr ""
#: ../../sysadmclient.rst:1144
#: ../../sysadmclient.rst:1173
msgid ""
"Life Preserver can be configured to replicate snapshots to another system "
"over an encrypted SSH connection, though the backup itself is stored in an "
@@ -1155,13 +1133,13 @@ msgid ""
" another system."
msgstr ""
#: ../../sysadmclient.rst:1149
#: ../../sysadmclient.rst:1178
msgid ""
"In order to configure replication, the remote system to hold a copy of the "
"snapshots must first meet several requirements:"
msgstr ""
#: ../../sysadmclient.rst:1156
#: ../../sysadmclient.rst:1185
msgid ""
"The backup server **must be formatted with the latest version of ZFS,** also"
" known as ZFS feature flags or ZFSv5000. Operating systems that support this"
@@ -1169,14 +1147,14 @@ msgid ""
"FreeNAS 9.1.x or higher."
msgstr ""
#: ../../sysadmclient.rst:1162
#: ../../sysadmclient.rst:1191
msgid ""
"The system must have SSH installed and the SSH service must be running. If "
"the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is"
" already installed, but you will need to start the SSH service."
msgstr ""
#: ../../sysadmclient.rst:1167
#: ../../sysadmclient.rst:1196
msgid ""
"If the backup server is running |trueos| or |pcbsd|, you will need to open "
"TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is "
@@ -1186,7 +1164,7 @@ msgid ""
"backup system, make sure it has a rule to allow SSH."
msgstr ""
#: ../../sysadmclient.rst:1175
#: ../../sysadmclient.rst:1204
msgid ""
":numref:`Figure %s <lpreserver2>` shows the initial :guilabel:`Replication` "
"tab on a system that has not yet been configured for replication. This "
@@ -1194,29 +1172,29 @@ msgid ""
"schedule."
msgstr ""
#: ../../sysadmclient.rst:1186
#: ../../sysadmclient.rst:1215
msgid ""
"To schedule the replication, click :guilabel:`+` to display the \"Setup "
"Replication\" screen shown in :numref:`Figure %s <lpreserver3>`."
msgstr ""
#: ../../sysadmclient.rst:1196
#: ../../sysadmclient.rst:1225
msgid "Input the following information:"
msgstr ""
#: ../../sysadmclient.rst:1198
#: ../../sysadmclient.rst:1227
msgid ""
"**Host IP:** The IP address of the remote system to store the replicated "
"snapshots."
msgstr ""
#: ../../sysadmclient.rst:1201
#: ../../sysadmclient.rst:1230
msgid ""
"**SSH Port:** The port number, if the remote system is running SSH on a port"
" other than the default of 22."
msgstr ""
#: ../../sysadmclient.rst:1204
#: ../../sysadmclient.rst:1233
msgid ""
"**Dataset:** The name of the ZFS pool and optional dataset on the remote "
"system. For example, \"remotetank\" will save the snapshots to a ZFS pool of"
@@ -1224,7 +1202,7 @@ msgid ""
"existing dataset named \"mybackups\" on the pool named \"remotetank\"."
msgstr ""
#: ../../sysadmclient.rst:1210
#: ../../sysadmclient.rst:1239
msgid ""
"**Frequency:** Use the drop-down menu to select how often to initiate the "
"replication. Available choices are :guilabel:`Sync with snapshot` (at the "
@@ -1235,87 +1213,87 @@ msgid ""
":guilabel:`Start`) in this screen."
msgstr ""
#: ../../sysadmclient.rst:1219
#: ../../sysadmclient.rst:1248
msgid ""
"**Username:** The username must already exist on the remote system, have "
"write access to the specified \"Dataset\", and have permission to SSH into "
"that system."
msgstr ""
#: ../../sysadmclient.rst:1223
#: ../../sysadmclient.rst:1252
msgid "**Password:** The password associated with the \"Username\"."
msgstr ""
#: ../../sysadmclient.rst:1225
#: ../../sysadmclient.rst:1254
msgid ""
"**Local DS:** Use the drop-down menu to select the pool or dataset to "
"replicate to the remote system."
msgstr ""
#: ../../sysadmclient.rst:1228
#: ../../sysadmclient.rst:1257
msgid ""
"The buttons at the top of the \"Setup Replication\" screen have several "
"uses:"
msgstr ""
#: ../../sysadmclient.rst:1231
#: ../../sysadmclient.rst:1260
msgid ""
"**+ icon:** Sdd a replication schedule. Multiple schedules are supported, "
"meaning you can replicate to multiple systems or replicate different \"Local"
" DS\" datasets at different times."
msgstr ""
#: ../../sysadmclient.rst:1235
#: ../../sysadmclient.rst:1264
msgid ""
"**- icon:** Remove an already created, and highlighted, replication "
"schedule."
msgstr ""
#: ../../sysadmclient.rst:1238
#: ../../sysadmclient.rst:1267
msgid "**gear icon:** Modify the schedule for the highlighted replication."
msgstr ""
#: ../../sysadmclient.rst:1240
#: ../../sysadmclient.rst:1269
msgid ""
"**Start:** Manually starts a replication to the system specified in the "
"highlighted replication."
msgstr ""
#: ../../sysadmclient.rst:1243
#: ../../sysadmclient.rst:1272
msgid ""
"**Initialize:** Deletes the existing replicated snapshots on the remote "
"system and starts a new replication. This is useful if a replication gets "
"stuck and will not complete."
msgstr ""
#: ../../sysadmclient.rst:1251
#: ../../sysadmclient.rst:1280
msgid "Schedules Tab"
msgstr ""
#: ../../sysadmclient.rst:1253
#: ../../sysadmclient.rst:1282
msgid ""
"This tab is used to manage when snapshots of the ZFS pool are created. "
"Multiple snapshot schedules are supported if the system has multiple pools."
msgstr ""
#: ../../sysadmclient.rst:1257
#: ../../sysadmclient.rst:1286
msgid ""
"Snapshots are created on the entire pool as they are needed when "
":ref:`Restoring the Operating System`."
msgstr ""
#: ../../sysadmclient.rst:1260
#: ../../sysadmclient.rst:1289
msgid ""
"To create a snapshot schedule, click the :guilabel:`camera` icon in the "
"lower left corner of this tab. This will activate the \"Setup Snapshot "
"Schedule\" pane as seen in :numref:`Figure %s <lpreserver4>`."
msgstr ""
#: ../../sysadmclient.rst:1270
#: ../../sysadmclient.rst:1299
msgid "This pane contains several options:"
msgstr ""
#: ../../sysadmclient.rst:1275
#: ../../sysadmclient.rst:1304
msgid ""
"**Snapshots to keep:** Snapshots are automatically pruned after the "
"specified number of snapshots to prevent snapshots from eventually using up "
@@ -1326,7 +1304,7 @@ msgid ""
"manually in the :guilabel:`Snapshots` tab."
msgstr ""
#: ../../sysadmclient.rst:1284
#: ../../sysadmclient.rst:1313
msgid ""
"**Frequency:** Use the drop-down menu to select how often snapshots occur. "
"Options include \"Daily\" (which will allow you to select the time of day), "
@@ -1334,37 +1312,37 @@ msgid ""
"Minutes\"."
msgstr ""
#: ../../sysadmclient.rst:1289
#: ../../sysadmclient.rst:1318
msgid ""
"Once you have created a snapshot schedule, you can use the \"gear\" icon "
"next to the \"camera\" icon to modify the highlighted schedule or the \"X\" "
"icon to delete the highlighted schedule."
msgstr ""
#: ../../sysadmclient.rst:1300
#: ../../sysadmclient.rst:1329
msgid ""
"To schedule when the scrub occurs, click the third icon from the right which"
" will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure "
"%s <lpreserver5>`."
msgstr ""
#: ../../sysadmclient.rst:1318
#: ../../sysadmclient.rst:1347
msgid ""
"Once you have created a scrub schedule, you can use the \"gear\" icon next "
"to the \"schedule scrub\" icon to modify the highlighted schedule or the "
"\"X\" icon to delete the highlighted schedule."
msgstr ""
#: ../../sysadmclient.rst:1328
#: ../../sysadmclient.rst:1357
msgid ""
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <lpreserver6>`."
msgstr ""
#: ../../sysadmclient.rst:1337
#: ../../sysadmclient.rst:1366
msgid "Many settings are configurable:"
msgstr ""
#: ../../sysadmclient.rst:1339
#: ../../sysadmclient.rst:1368
msgid ""
"**Disk Usage Warning:** Enter a number up to 99 to indicate at which "
"percentage of disk space Life Preserver will display an alert in the system "
@@ -1372,41 +1350,41 @@ msgid ""
"space."
msgstr ""
#: ../../sysadmclient.rst:1344
#: ../../sysadmclient.rst:1373
msgid ""
"**Email:** To receive an email when disk usage reaches the percentage "
"configured in the \"Disk Usage Warning\", enter an email address."
msgstr ""
#: ../../sysadmclient.rst:1347
#: ../../sysadmclient.rst:1376
msgid ""
"**Email Trigger:** This setting can be set to \"All\", \"Warn\", or "
"\"Error\" and indicates the type of condition which will trigger an email "
"message."
msgstr ""
#: ../../sysadmclient.rst:1350
#: ../../sysadmclient.rst:1379
msgid "**Recursive Management:**"
msgstr ""
#: ../../sysadmclient.rst:1352
#: ../../sysadmclient.rst:1381
msgid ""
"If you make any changes in this screen, press :guilabel:`Save Settings` to "
"apply them."
msgstr ""
#: ../../sysadmclient.rst:1359
#: ../../sysadmclient.rst:1388
msgid "Using the lpreserver CLI"
msgstr ""
#: ../../sysadmclient.rst:1361
#: ../../sysadmclient.rst:1390
msgid ""
"The :command:`lpreserver` command line utility can also be used to manage "
"snapshots and replication. This command needs to be run as the superuser. To"
" display its usage, type the command without any arguments:"
msgstr ""
#: ../../sysadmclient.rst:1381
#: ../../sysadmclient.rst:1410
msgid ""
"Each command has its own help text that describes its parameters and "
"provides a usage example. For example, to receive help on how to use the "
@@ -1417,104 +1395,104 @@ msgstr ""
msgid "Command Line and GUI Equivalents"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**Command Line**"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**GUI**"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**Description**"
msgstr ""
#: ../../sysadmclient.rst:1452
#: ../../sysadmclient.rst:1481
msgid "**cronsnap**"
msgstr ""
#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499
msgid "\"Snapshots\" tab"
msgstr ""
#: ../../sysadmclient.rst:1452
#: ../../sysadmclient.rst:1481
msgid ""
"schedule when snapshots occur and how long to keep them; the **stop** option"
" can be used to disable snapshot creation"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "**cronscrub**"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "\"Schedules\" tab"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "schedule a ZFS scrub"
msgstr ""
#: ../../sysadmclient.rst:1459
#: ../../sysadmclient.rst:1488
msgid "**get**"
msgstr ""
#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495
msgid "\"Settings\" tab"
msgstr ""
#: ../../sysadmclient.rst:1459
#: ../../sysadmclient.rst:1488
msgid "list Life Preserver options"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid "**replicate**"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid "\"Replication\" tab"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid ""
"used to list, add, and remove backup server; read the **help** for this "
"command for examples"
msgstr ""
#: ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1495
msgid "**set**"
msgstr ""
#: ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1495
msgid ""
"configures Life Preserver options; read **help** for the list of "
"configurable options"
msgstr ""
#: ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1499
msgid "**snapshot**"
msgstr ""
#: ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1499
msgid ""
"create and replicate a new ZFS snapshot; by default, snapshots are "
"recursive, meaning that a that a snapshot is taken of every dataset within a"
" pool"
msgstr ""
#: ../../sysadmclient.rst:1476
#: ../../sysadmclient.rst:1505
msgid "**status**"
msgstr ""
#: ../../sysadmclient.rst:1476
#: ../../sysadmclient.rst:1505
msgid "lists the last snapshot name and replication status"
msgstr ""
#: ../../sysadmclient.rst:1483
#: ../../sysadmclient.rst:1512
msgid "Restoring the Operating System"
msgstr ""
#: ../../sysadmclient.rst:1485
#: ../../sysadmclient.rst:1514
msgid ""
"If you have replicated the system's snapshots to a remote backup server, you"
" can use a |trueos| installation media to perform an operating system "
@@ -1522,7 +1500,7 @@ msgid ""
"you get to the screen shown in :numref:`Figure %s <restore1>`."
msgstr ""
#: ../../sysadmclient.rst:1497
#: ../../sysadmclient.rst:1526
msgid ""
"Before you can perform a restore, the network interface must be configured. "
"Click :guilabel:`Network Connectivity` (second icon from the left) in order "
@@ -1533,7 +1511,7 @@ msgid ""
"continuing."
msgstr ""
#: ../../sysadmclient.rst:1505
#: ../../sysadmclient.rst:1534
msgid ""
"Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and"
" :guilabel:`Next`. This will start the Restore Wizard. In the screen shown "
@@ -1543,7 +1521,7 @@ msgid ""
"number."
msgstr ""
#: ../../sysadmclient.rst:1519
#: ../../sysadmclient.rst:1548
msgid ""
"Click :guilabel:`Next` and the wizard will provide a summary of your "
"selections. If correct, click :guilabel:`Finish`; otherwise, click "
@@ -1626,7 +1604,7 @@ msgid ""
"press :guilabel:`Close Ports`."
msgstr ""
#: ../../sysadmclient.rst:1152
#: ../../sysadmclient.rst:1181
msgid ""
"Snapshots occurring too frequently can introduce errors in replication. To "
"avoid errors, ensure snapshots are configured to take place slower than the "
@@ -1685,7 +1663,7 @@ msgid ""
"accounts."
msgstr ""
#: ../../sysadmclient.rst:1065
#: ../../sysadmclient.rst:1094
msgid ""
"A snapshot provides a \"point-in-time\" image of the ZFS pool. This is "
"similar to a full system backup as the snapshot contains the information for"
@@ -1703,26 +1681,26 @@ msgid ""
"snapshot."
msgstr ""
#: ../../sysadmclient.rst:1272
#: ../../sysadmclient.rst:1301
msgid ""
"**Storage Pool:** Select the ZFS storage pool that contains the datasets "
"that you wish to snapshot."
msgstr ""
#: ../../sysadmclient.rst:1293
#: ../../sysadmclient.rst:1322
msgid ""
"This screen can also be used to manage the ZFS scrub schedule. Scrubs are "
"recommended as they can provide an early indication of a potential disk "
"failure. Scrubs can be scheduled on a per-pool basis."
msgstr ""
#: ../../sysadmclient.rst:1297
#: ../../sysadmclient.rst:1326
msgid ""
"If you have multiple pools, be sure to create a scrub schedule for each "
"pool."
msgstr ""
#: ../../sysadmclient.rst:1310
#: ../../sysadmclient.rst:1339
msgid ""
"Select the pool from the :guilabel:`Storage Pool` drop-down menu, then "
"select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", "
@@ -1807,26 +1785,17 @@ msgstr ""
msgid ": Viewing All Accounts and Their Details"
msgstr ""
#: ../../sysadmclient.rst:930
#: ../../sysadmclient.rst:938
msgid ": Initialize PersonaCrypt Device"
msgstr ""
#: ../../sysadmclient.rst:932
msgid ""
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
"Note this section is hidden if the currently logged in user is selected. "
"Also, if you have just created a user and do not see these options, click "
":guilabel:`Save` then re-highlight the user to display these options:"
msgstr ""
#: ../../sysadmclient.rst:947
#: ../../sysadmclient.rst:955
msgid ""
"To prepare a PersonaCrypt device for this user, insert a USB stick and click"
" :guilabel:`Initialize Device`."
msgstr ""
#: ../../sysadmclient.rst:957
#: ../../sysadmclient.rst:965
msgid ""
"Type a password to associate with the device. Click :guilabel:`Save` to "
"initialize the device. The User Manager may take a moment to prepare the "
@@ -1834,49 +1803,49 @@ msgid ""
" to allow removal of PersonaCrypt."
msgstr ""
#: ../../sysadmclient.rst:1027
#: ../../sysadmclient.rst:1056
msgid ": Managing Groups Using User Manager"
msgstr ""
#: ../../sysadmclient.rst:1110
#: ../../sysadmclient.rst:1139
msgid ": Snapshot Tab"
msgstr ""
#: ../../sysadmclient.rst:1184
#: ../../sysadmclient.rst:1213
msgid ": Replication Tab"
msgstr ""
#: ../../sysadmclient.rst:1194
#: ../../sysadmclient.rst:1223
msgid ": Scheduling a Replication"
msgstr ""
#: ../../sysadmclient.rst:1268
#: ../../sysadmclient.rst:1297
msgid ": Scheduling a Snapshot"
msgstr ""
#: ../../sysadmclient.rst:1308
#: ../../sysadmclient.rst:1337
msgid ": Scheduling a Scrub"
msgstr ""
#: ../../sysadmclient.rst:1335
#: ../../sysadmclient.rst:1364
msgid ": Life Preserver Settings"
msgstr ""
#: ../../sysadmclient.rst:1442
#: ../../sysadmclient.rst:1471
msgid ""
":numref:`Table %s <cmdgui>` shows the command line equivalents to the "
"graphical options provided by the Life Preserver GUI."
msgstr ""
#: ../../sysadmclient.rst:1495
#: ../../sysadmclient.rst:1524
msgid ": Selecting to Restore/Clone From Backup"
msgstr ""
#: ../../sysadmclient.rst:1517
#: ../../sysadmclient.rst:1546
msgid ": Input the Information for a SSH Restore"
msgstr ""
#: ../../sysadmclient.rst:1523
#: ../../sysadmclient.rst:1552
msgid ""
"Once the connection to the backup server succeeds, you will be able to "
"select which host to restore. After making your selection, click "
@@ -1892,7 +1861,7 @@ msgid ""
":guilabel:`Next` to perform the restore."
msgstr ""
#: ../../sysadmclient.rst:987
#: ../../sysadmclient.rst:970
msgid ""
"Once a user has been initialized for PersonaCrypt on the system, their user "
"account will no longer be displayed when logging in, **unless** their "
@@ -1901,7 +1870,7 @@ msgid ""
":numref:`Figure %s <troslogin5>`."
msgstr ""
#: ../../sysadmclient.rst:997
#: ../../sysadmclient.rst:980
msgid ": |trueos| Login Screen with PersonaCrypt"
msgstr ""
@@ -1949,7 +1918,7 @@ msgstr ""
msgid ": |sysadm| Task Manager"
msgstr ""
#: ../../sysadmclient.rst:1103
#: ../../sysadmclient.rst:1132
msgid ""
":numref:`Figure %s <lpreserver1>` shows the :guilabel:`Snapshots` tab on a "
"system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"."
@@ -2013,6 +1982,134 @@ msgid ""
":guilabel:`Save Settings`."
msgstr ""
#: ../../sysadmclient.rst:894
msgid ""
"|trueos| provides support for a security feature known as PersonaCrypt. A "
"PersonaCrypt device is a removable USB media, such as a USB flash drive, "
"formatted with ZFS and encrypted with either GELI or PEFS. This device is "
"used to hold a specific user's home directory, meaning they can securely "
"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 "
"or higher system. For example, this can be used to securely access one's "
"home directory from a laptop, home computer, and work computer. The device "
"is protected by an encryption key and a different (recommended) password "
"separate from the user's login password."
msgstr ""
#: ../../sysadmclient.rst:916
msgid "GELI"
msgstr ""
#: ../../sysadmclient.rst:918
msgid ""
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
"your passphrase, and the other being a key stored on disk. Without both of "
"these parts, the media cannot be decrypted. This means if somebody steals "
"the key and manages to get your password, it is still worthless without the "
"system it was paired with. GELI is used by default in |trueos| as it is more"
" fully featured over PEFS."
msgstr ""
#: ../../sysadmclient.rst:940
msgid ""
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
"buttons are available in the :guilabel:`PersonaCrypt` tab of "
":guilabel:`Advanced Mode`. Note this section is hidden if the currently "
"logged in user is selected. Also, if you have just created a user and do not"
" see these options, click :guilabel:`Save`, then re-highlight the user to "
"display these options:"
msgstr ""
#: ../../sysadmclient.rst:999
msgid "PEFS"
msgstr ""
#: ../../sysadmclient.rst:1001
msgid ""
"`PEFS <http://pefs.io/>`_ stands for Private Encrypted File System. It is "
"open source software freely available under the BSD license, and is included"
" in |trueos| by default. PEFS runs on top of any existing file system, "
"providing an encryption layer independent of the underlying file system. "
"PersonaCrypt can be configured to use PEFS in place of GELI, which "
"eliminates the need for external media, as the encrypted PEFS database is "
"stored on the local disk."
msgstr ""
#: ../../sysadmclient.rst:1009
msgid ""
"While PEFS does not use a USB drive, be sure to print or otherwise backup "
"the PEFS generated key fragment stored on the disk."
msgstr ""
#: ../../sysadmclient.rst:1012
msgid "**Initialize PEFS with the Command Line**"
msgstr ""
#: ../../sysadmclient.rst:1014
msgid ""
"Because PEFS does not use a USB drive with its encryption, the user will "
"need a password file (pfile) containing the desired password, **before** "
"initializing PEFS for a user account. Once this pfile is created, enabling "
"PEFS through PersonaCrypt is accomplished in a CLI with "
":command:`personacrypt init <username> <pfile> PEFS`."
msgstr ""
#: ../../sysadmclient.rst:1020
msgid ""
"For example, the user account **test** has a pfile named "
":file:`testpfile.txt`, which contains the single text string of **test's** "
"chosen password. Next, the administrator adds PEFS encryption to the "
"**test** acount by opening a CLI, logging in as root, and typing:"
msgstr ""
#: ../../sysadmclient.rst:1029
msgid ""
"PersonaCrypt will initialize the account **test** with PEFS, using the "
"string in :file:`testpfile.txt` as the new password."
msgstr ""
#: ../../sysadmclient.rst:1032
msgid ""
"The |sysadm| User Manager can also initialize a user account with PEFS by "
"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` "
"drop down menu of the :guilabel:`PersonaCrypt` tab."
msgstr ""
#: ../../sysadmclient.rst:1036
msgid ""
"In addition to initializing an account with PEFS, PersonaCrypt also supports"
" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt "
"export <username>` and :command:`personacrypt import <keyfile>`, "
"respectively."
msgstr ""
#~ msgid ""
#~ "|trueos| provides support for a security feature known as PersonaCrypt. A "
#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
#~ " with ZFS and encrypted with GELI. This device is used to hold a specific "
#~ "user's home directory, meaning they can securely transport and access their "
#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
#~ "example, this can be used to securely access one's home directory from a "
#~ "laptop, home computer, and work computer. The device is protected by an "
#~ "encryption key and a password which is, and should be, separate from the "
#~ "user's login password."
#~ msgstr ""
#~ msgid ""
#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being "
#~ "your passphrase, and the other being a key stored on disk. Without both of "
#~ "these parts, the media cannot be decrypted. This means if somebody steals "
#~ "the key and manages to get your password, it is still worthless without the "
#~ "system it was paired with."
#~ msgstr ""
#~ msgid ""
#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two "
#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
#~ "Note this section is hidden if the currently logged in user is selected. "
#~ "Also, if you have just created a user and do not see these options, click "
#~ ":guilabel:`Save` then re-highlight the user to display these options:"
#~ msgstr ""
#~ msgid ""
#~ "**Max Boot Environments:** |trueos| automatically creates a boot environment"
#~ " before updating any software, the operating system, or applying a system "

View File

@@ -482,7 +482,7 @@ msgid ""
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <update4>`."
msgstr ""
#: ../../sysadmclient.rst:1326
#: ../../sysadmclient.rst:1355
msgid "Settings Tab"
msgstr ""
@@ -924,20 +924,7 @@ msgstr ""
msgid "PersonaCrypt"
msgstr ""
#: ../../sysadmclient.rst:894
msgid ""
"|trueos| provides support for a security feature known as PersonaCrypt. A "
"PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
" with ZFS and encrypted with GELI. This device is used to hold a specific "
"user's home directory, meaning they can securely transport and access their "
"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
"example, this can be used to securely access one's home directory from a "
"laptop, home computer, and work computer. The device is protected by an "
"encryption key and a password which is, and should be, separate from the "
"user's login password."
msgstr ""
#: ../../sysadmclient.rst:904
#: ../../sysadmclient.rst:905
msgid ""
"When a user is configured to use a PersonaCrypt device, that user can not "
"login using an unencrypted session on the same system. In other words, the "
@@ -946,22 +933,13 @@ msgid ""
"different user accounts, one for each type of session."
msgstr ""
#: ../../sysadmclient.rst:911
msgid ""
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
"your passphrase, and the other being a key stored on disk. Without both of "
"these parts, the media cannot be decrypted. This means if somebody steals "
"the key and manages to get your password, it is still worthless without the "
"system it was paired with."
msgstr ""
#: ../../sysadmclient.rst:917
#: ../../sysadmclient.rst:925
msgid ""
"USB devices do eventually fail. Always backup any important files stored on "
"the PersonaCrypt device to another device or system."
msgstr ""
#: ../../sysadmclient.rst:920
#: ../../sysadmclient.rst:928
msgid ""
"The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt "
"device for any login user, **except** for the currently logged in user. In "
@@ -969,13 +947,13 @@ msgid ""
"*dlavigne*, has been created and the entry for the user has been clicked."
msgstr ""
#: ../../sysadmclient.rst:939
#: ../../sysadmclient.rst:947
msgid ""
"**Initialize Device:** Used to prepare the USB device which will be used as "
"the user's home directory."
msgstr ""
#: ../../sysadmclient.rst:942
#: ../../sysadmclient.rst:950
msgid ""
"**Import Key:** If the user has already created a PersonaCrypt device on "
"another |trueos| system, click this button to import a previously saved copy"
@@ -983,7 +961,7 @@ msgid ""
"can now login to this computer using PersonaCrypt."
msgstr ""
#: ../../sysadmclient.rst:950
#: ../../sysadmclient.rst:958
msgid ""
"Since the USB stick will hold the user's home directory and files, ensure "
"the stick is large enough to meet the anticipated storage needs of the home "
@@ -993,7 +971,7 @@ msgid ""
"logged in."
msgstr ""
#: ../../sysadmclient.rst:999
#: ../../sysadmclient.rst:982
msgid ""
"When stealth sessions have been configured, PersonaCrypt users will still be"
" displayed in the login menu, even if their USB device is not inserted. This"
@@ -1001,47 +979,47 @@ msgid ""
"session."
msgstr ""
#: ../../sysadmclient.rst:1004
#: ../../sysadmclient.rst:987
msgid ""
"In the field with the yellow padlock icon, input the password for the user "
"account. In the field with the grey USB stick icon, input the password "
"associated with the PersonaCrypt device."
msgstr ""
#: ../../sysadmclient.rst:1008
#: ../../sysadmclient.rst:991
msgid ""
"To prevent data corruption and freezing the system **DO NOT** remove the "
"PersonaCrypt device while logged in! Always log out of your session before "
"physically removing the device."
msgstr ""
#: ../../sysadmclient.rst:1016
#: ../../sysadmclient.rst:1045
msgid "Managing Groups"
msgstr ""
#: ../../sysadmclient.rst:1018
#: ../../sysadmclient.rst:1047
msgid ""
"Click the :guilabel:`Groups` tab to view and manage the groups on the "
"system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s <user4>`, "
"shows the group membership for the *operator* and *wheel* groups:"
msgstr ""
#: ../../sysadmclient.rst:1029
#: ../../sysadmclient.rst:1058
msgid "This screen has 2 columns:"
msgstr ""
#: ../../sysadmclient.rst:1031
#: ../../sysadmclient.rst:1060
msgid ""
"**Members:** Indicates if the highlighted group contains any user accounts."
msgstr ""
#: ../../sysadmclient.rst:1034
#: ../../sysadmclient.rst:1063
msgid ""
"**Available:** Shows all of the system and user accounts on the system in "
"alphabetical order."
msgstr ""
#: ../../sysadmclient.rst:1037
#: ../../sysadmclient.rst:1066
msgid ""
"To add an account to a group, highlight the group name, then highlight the "
"account name in the :guilabel:`Available` column. Click the left arrow and "
@@ -1051,7 +1029,7 @@ msgid ""
"added to a group."
msgstr ""
#: ../../sysadmclient.rst:1044
#: ../../sysadmclient.rst:1073
msgid ""
"If you add a user to the *operator* group, they will have permission to use "
"commands requiring administrative access and will be prompted for their own "
@@ -1060,15 +1038,15 @@ msgid ""
"will be prompted for the superuser password whenever they use the command."
msgstr ""
#: ../../sysadmclient.rst:1051
#: ../../sysadmclient.rst:1080
msgid "To view all of the groups on the system, click :guilabel:`Advanced`."
msgstr ""
#: ../../sysadmclient.rst:1057
#: ../../sysadmclient.rst:1086
msgid "Life Preserver"
msgstr ""
#: ../../sysadmclient.rst:1059
#: ../../sysadmclient.rst:1088
msgid ""
"The Life Preserver utility is designed to take full advantage of the "
"functionality provided by ZFS snapshots. This utility allows you to schedule"
@@ -1077,25 +1055,25 @@ msgid ""
"benefits:"
msgstr ""
#: ../../sysadmclient.rst:1081
#: ../../sysadmclient.rst:1110
msgid ""
"Replication is an efficient way to keep the files on two systems in sync. "
"With Life Preserver, the snapshots taken on the |trueos| system will be "
"synchronized with their versions stored on the specified backup server."
msgstr ""
#: ../../sysadmclient.rst:1086
#: ../../sysadmclient.rst:1115
msgid "Snapshots are sent to the backup server over an encrypted connection."
msgstr ""
#: ../../sysadmclient.rst:1088
#: ../../sysadmclient.rst:1117
msgid ""
"Having a copy of the snapshots on another system makes it possible to "
"perform an operating system restore should the |trueos| system become "
"unusable or to deploy an identical system to different hardware."
msgstr ""
#: ../../sysadmclient.rst:1092
#: ../../sysadmclient.rst:1121
msgid ""
"To manage snapshots and replication using the |sysadm| graphical client, go "
"to :menuselection:`Utilities --> Life Preserver`. The rest of this section "
@@ -1103,16 +1081,16 @@ msgid ""
"Preserver."
msgstr ""
#: ../../sysadmclient.rst:1101
#: ../../sysadmclient.rst:1130
msgid "Snapshots Tab"
msgstr ""
#: ../../sysadmclient.rst:1112
#: ../../sysadmclient.rst:1141
msgid ""
"This screen will display any created snapshots and provides buttons to:"
msgstr ""
#: ../../sysadmclient.rst:1114
#: ../../sysadmclient.rst:1143
msgid ""
"**Create:** Used to create a manual snapshot of the specified pool now. For "
"example, you could create a snapshot before making changes to an important "
@@ -1126,14 +1104,14 @@ msgid ""
"snapshot was created."
msgstr ""
#: ../../sysadmclient.rst:1125
#: ../../sysadmclient.rst:1154
msgid ""
"**Remove:** Used to delete a highlighted snapshot. **This is a permanent "
"change that can not be reversed.** In other words, the versions of files at "
"the point in time the snapshot was created will be lost."
msgstr ""
#: ../../sysadmclient.rst:1130
#: ../../sysadmclient.rst:1159
msgid ""
"**Revert:** If you highlight a snapshot entry, this button and the drop-down"
" menu next to it will activate. You can use the drop-down menu to specify "
@@ -1143,11 +1121,11 @@ msgid ""
" after the snapshot was taken will be lost."
msgstr ""
#: ../../sysadmclient.rst:1142
#: ../../sysadmclient.rst:1171
msgid "Replication Tab"
msgstr ""
#: ../../sysadmclient.rst:1144
#: ../../sysadmclient.rst:1173
msgid ""
"Life Preserver can be configured to replicate snapshots to another system "
"over an encrypted SSH connection, though the backup itself is stored in an "
@@ -1155,13 +1133,13 @@ msgid ""
" another system."
msgstr ""
#: ../../sysadmclient.rst:1149
#: ../../sysadmclient.rst:1178
msgid ""
"In order to configure replication, the remote system to hold a copy of the "
"snapshots must first meet several requirements:"
msgstr ""
#: ../../sysadmclient.rst:1156
#: ../../sysadmclient.rst:1185
msgid ""
"The backup server **must be formatted with the latest version of ZFS,** also"
" known as ZFS feature flags or ZFSv5000. Operating systems that support this"
@@ -1169,14 +1147,14 @@ msgid ""
"FreeNAS 9.1.x or higher."
msgstr ""
#: ../../sysadmclient.rst:1162
#: ../../sysadmclient.rst:1191
msgid ""
"The system must have SSH installed and the SSH service must be running. If "
"the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is"
" already installed, but you will need to start the SSH service."
msgstr ""
#: ../../sysadmclient.rst:1167
#: ../../sysadmclient.rst:1196
msgid ""
"If the backup server is running |trueos| or |pcbsd|, you will need to open "
"TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is "
@@ -1186,7 +1164,7 @@ msgid ""
"backup system, make sure it has a rule to allow SSH."
msgstr ""
#: ../../sysadmclient.rst:1175
#: ../../sysadmclient.rst:1204
msgid ""
":numref:`Figure %s <lpreserver2>` shows the initial :guilabel:`Replication` "
"tab on a system that has not yet been configured for replication. This "
@@ -1194,29 +1172,29 @@ msgid ""
"schedule."
msgstr ""
#: ../../sysadmclient.rst:1186
#: ../../sysadmclient.rst:1215
msgid ""
"To schedule the replication, click :guilabel:`+` to display the \"Setup "
"Replication\" screen shown in :numref:`Figure %s <lpreserver3>`."
msgstr ""
#: ../../sysadmclient.rst:1196
#: ../../sysadmclient.rst:1225
msgid "Input the following information:"
msgstr ""
#: ../../sysadmclient.rst:1198
#: ../../sysadmclient.rst:1227
msgid ""
"**Host IP:** The IP address of the remote system to store the replicated "
"snapshots."
msgstr ""
#: ../../sysadmclient.rst:1201
#: ../../sysadmclient.rst:1230
msgid ""
"**SSH Port:** The port number, if the remote system is running SSH on a port"
" other than the default of 22."
msgstr ""
#: ../../sysadmclient.rst:1204
#: ../../sysadmclient.rst:1233
msgid ""
"**Dataset:** The name of the ZFS pool and optional dataset on the remote "
"system. For example, \"remotetank\" will save the snapshots to a ZFS pool of"
@@ -1224,7 +1202,7 @@ msgid ""
"existing dataset named \"mybackups\" on the pool named \"remotetank\"."
msgstr ""
#: ../../sysadmclient.rst:1210
#: ../../sysadmclient.rst:1239
msgid ""
"**Frequency:** Use the drop-down menu to select how often to initiate the "
"replication. Available choices are :guilabel:`Sync with snapshot` (at the "
@@ -1235,87 +1213,87 @@ msgid ""
":guilabel:`Start`) in this screen."
msgstr ""
#: ../../sysadmclient.rst:1219
#: ../../sysadmclient.rst:1248
msgid ""
"**Username:** The username must already exist on the remote system, have "
"write access to the specified \"Dataset\", and have permission to SSH into "
"that system."
msgstr ""
#: ../../sysadmclient.rst:1223
#: ../../sysadmclient.rst:1252
msgid "**Password:** The password associated with the \"Username\"."
msgstr ""
#: ../../sysadmclient.rst:1225
#: ../../sysadmclient.rst:1254
msgid ""
"**Local DS:** Use the drop-down menu to select the pool or dataset to "
"replicate to the remote system."
msgstr ""
#: ../../sysadmclient.rst:1228
#: ../../sysadmclient.rst:1257
msgid ""
"The buttons at the top of the \"Setup Replication\" screen have several "
"uses:"
msgstr ""
#: ../../sysadmclient.rst:1231
#: ../../sysadmclient.rst:1260
msgid ""
"**+ icon:** Sdd a replication schedule. Multiple schedules are supported, "
"meaning you can replicate to multiple systems or replicate different \"Local"
" DS\" datasets at different times."
msgstr ""
#: ../../sysadmclient.rst:1235
#: ../../sysadmclient.rst:1264
msgid ""
"**- icon:** Remove an already created, and highlighted, replication "
"schedule."
msgstr ""
#: ../../sysadmclient.rst:1238
#: ../../sysadmclient.rst:1267
msgid "**gear icon:** Modify the schedule for the highlighted replication."
msgstr ""
#: ../../sysadmclient.rst:1240
#: ../../sysadmclient.rst:1269
msgid ""
"**Start:** Manually starts a replication to the system specified in the "
"highlighted replication."
msgstr ""
#: ../../sysadmclient.rst:1243
#: ../../sysadmclient.rst:1272
msgid ""
"**Initialize:** Deletes the existing replicated snapshots on the remote "
"system and starts a new replication. This is useful if a replication gets "
"stuck and will not complete."
msgstr ""
#: ../../sysadmclient.rst:1251
#: ../../sysadmclient.rst:1280
msgid "Schedules Tab"
msgstr ""
#: ../../sysadmclient.rst:1253
#: ../../sysadmclient.rst:1282
msgid ""
"This tab is used to manage when snapshots of the ZFS pool are created. "
"Multiple snapshot schedules are supported if the system has multiple pools."
msgstr ""
#: ../../sysadmclient.rst:1257
#: ../../sysadmclient.rst:1286
msgid ""
"Snapshots are created on the entire pool as they are needed when "
":ref:`Restoring the Operating System`."
msgstr ""
#: ../../sysadmclient.rst:1260
#: ../../sysadmclient.rst:1289
msgid ""
"To create a snapshot schedule, click the :guilabel:`camera` icon in the "
"lower left corner of this tab. This will activate the \"Setup Snapshot "
"Schedule\" pane as seen in :numref:`Figure %s <lpreserver4>`."
msgstr ""
#: ../../sysadmclient.rst:1270
#: ../../sysadmclient.rst:1299
msgid "This pane contains several options:"
msgstr ""
#: ../../sysadmclient.rst:1275
#: ../../sysadmclient.rst:1304
msgid ""
"**Snapshots to keep:** Snapshots are automatically pruned after the "
"specified number of snapshots to prevent snapshots from eventually using up "
@@ -1326,7 +1304,7 @@ msgid ""
"manually in the :guilabel:`Snapshots` tab."
msgstr ""
#: ../../sysadmclient.rst:1284
#: ../../sysadmclient.rst:1313
msgid ""
"**Frequency:** Use the drop-down menu to select how often snapshots occur. "
"Options include \"Daily\" (which will allow you to select the time of day), "
@@ -1334,37 +1312,37 @@ msgid ""
"Minutes\"."
msgstr ""
#: ../../sysadmclient.rst:1289
#: ../../sysadmclient.rst:1318
msgid ""
"Once you have created a snapshot schedule, you can use the \"gear\" icon "
"next to the \"camera\" icon to modify the highlighted schedule or the \"X\" "
"icon to delete the highlighted schedule."
msgstr ""
#: ../../sysadmclient.rst:1300
#: ../../sysadmclient.rst:1329
msgid ""
"To schedule when the scrub occurs, click the third icon from the right which"
" will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure "
"%s <lpreserver5>`."
msgstr ""
#: ../../sysadmclient.rst:1318
#: ../../sysadmclient.rst:1347
msgid ""
"Once you have created a scrub schedule, you can use the \"gear\" icon next "
"to the \"schedule scrub\" icon to modify the highlighted schedule or the "
"\"X\" icon to delete the highlighted schedule."
msgstr ""
#: ../../sysadmclient.rst:1328
#: ../../sysadmclient.rst:1357
msgid ""
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <lpreserver6>`."
msgstr ""
#: ../../sysadmclient.rst:1337
#: ../../sysadmclient.rst:1366
msgid "Many settings are configurable:"
msgstr ""
#: ../../sysadmclient.rst:1339
#: ../../sysadmclient.rst:1368
msgid ""
"**Disk Usage Warning:** Enter a number up to 99 to indicate at which "
"percentage of disk space Life Preserver will display an alert in the system "
@@ -1372,41 +1350,41 @@ msgid ""
"space."
msgstr ""
#: ../../sysadmclient.rst:1344
#: ../../sysadmclient.rst:1373
msgid ""
"**Email:** To receive an email when disk usage reaches the percentage "
"configured in the \"Disk Usage Warning\", enter an email address."
msgstr ""
#: ../../sysadmclient.rst:1347
#: ../../sysadmclient.rst:1376
msgid ""
"**Email Trigger:** This setting can be set to \"All\", \"Warn\", or "
"\"Error\" and indicates the type of condition which will trigger an email "
"message."
msgstr ""
#: ../../sysadmclient.rst:1350
#: ../../sysadmclient.rst:1379
msgid "**Recursive Management:**"
msgstr ""
#: ../../sysadmclient.rst:1352
#: ../../sysadmclient.rst:1381
msgid ""
"If you make any changes in this screen, press :guilabel:`Save Settings` to "
"apply them."
msgstr ""
#: ../../sysadmclient.rst:1359
#: ../../sysadmclient.rst:1388
msgid "Using the lpreserver CLI"
msgstr ""
#: ../../sysadmclient.rst:1361
#: ../../sysadmclient.rst:1390
msgid ""
"The :command:`lpreserver` command line utility can also be used to manage "
"snapshots and replication. This command needs to be run as the superuser. To"
" display its usage, type the command without any arguments:"
msgstr ""
#: ../../sysadmclient.rst:1381
#: ../../sysadmclient.rst:1410
msgid ""
"Each command has its own help text that describes its parameters and "
"provides a usage example. For example, to receive help on how to use the "
@@ -1417,104 +1395,104 @@ msgstr ""
msgid "Command Line and GUI Equivalents"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**Command Line**"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**GUI**"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**Description**"
msgstr ""
#: ../../sysadmclient.rst:1452
#: ../../sysadmclient.rst:1481
msgid "**cronsnap**"
msgstr ""
#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499
msgid "\"Snapshots\" tab"
msgstr ""
#: ../../sysadmclient.rst:1452
#: ../../sysadmclient.rst:1481
msgid ""
"schedule when snapshots occur and how long to keep them; the **stop** option"
" can be used to disable snapshot creation"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "**cronscrub**"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "\"Schedules\" tab"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "schedule a ZFS scrub"
msgstr ""
#: ../../sysadmclient.rst:1459
#: ../../sysadmclient.rst:1488
msgid "**get**"
msgstr ""
#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495
msgid "\"Settings\" tab"
msgstr ""
#: ../../sysadmclient.rst:1459
#: ../../sysadmclient.rst:1488
msgid "list Life Preserver options"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid "**replicate**"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid "\"Replication\" tab"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid ""
"used to list, add, and remove backup server; read the **help** for this "
"command for examples"
msgstr ""
#: ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1495
msgid "**set**"
msgstr ""
#: ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1495
msgid ""
"configures Life Preserver options; read **help** for the list of "
"configurable options"
msgstr ""
#: ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1499
msgid "**snapshot**"
msgstr ""
#: ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1499
msgid ""
"create and replicate a new ZFS snapshot; by default, snapshots are "
"recursive, meaning that a that a snapshot is taken of every dataset within a"
" pool"
msgstr ""
#: ../../sysadmclient.rst:1476
#: ../../sysadmclient.rst:1505
msgid "**status**"
msgstr ""
#: ../../sysadmclient.rst:1476
#: ../../sysadmclient.rst:1505
msgid "lists the last snapshot name and replication status"
msgstr ""
#: ../../sysadmclient.rst:1483
#: ../../sysadmclient.rst:1512
msgid "Restoring the Operating System"
msgstr ""
#: ../../sysadmclient.rst:1485
#: ../../sysadmclient.rst:1514
msgid ""
"If you have replicated the system's snapshots to a remote backup server, you"
" can use a |trueos| installation media to perform an operating system "
@@ -1522,7 +1500,7 @@ msgid ""
"you get to the screen shown in :numref:`Figure %s <restore1>`."
msgstr ""
#: ../../sysadmclient.rst:1497
#: ../../sysadmclient.rst:1526
msgid ""
"Before you can perform a restore, the network interface must be configured. "
"Click :guilabel:`Network Connectivity` (second icon from the left) in order "
@@ -1533,7 +1511,7 @@ msgid ""
"continuing."
msgstr ""
#: ../../sysadmclient.rst:1505
#: ../../sysadmclient.rst:1534
msgid ""
"Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and"
" :guilabel:`Next`. This will start the Restore Wizard. In the screen shown "
@@ -1543,7 +1521,7 @@ msgid ""
"number."
msgstr ""
#: ../../sysadmclient.rst:1519
#: ../../sysadmclient.rst:1548
msgid ""
"Click :guilabel:`Next` and the wizard will provide a summary of your "
"selections. If correct, click :guilabel:`Finish`; otherwise, click "
@@ -1626,7 +1604,7 @@ msgid ""
"press :guilabel:`Close Ports`."
msgstr ""
#: ../../sysadmclient.rst:1152
#: ../../sysadmclient.rst:1181
msgid ""
"Snapshots occurring too frequently can introduce errors in replication. To "
"avoid errors, ensure snapshots are configured to take place slower than the "
@@ -1685,7 +1663,7 @@ msgid ""
"accounts."
msgstr ""
#: ../../sysadmclient.rst:1065
#: ../../sysadmclient.rst:1094
msgid ""
"A snapshot provides a \"point-in-time\" image of the ZFS pool. This is "
"similar to a full system backup as the snapshot contains the information for"
@@ -1703,26 +1681,26 @@ msgid ""
"snapshot."
msgstr ""
#: ../../sysadmclient.rst:1272
#: ../../sysadmclient.rst:1301
msgid ""
"**Storage Pool:** Select the ZFS storage pool that contains the datasets "
"that you wish to snapshot."
msgstr ""
#: ../../sysadmclient.rst:1293
#: ../../sysadmclient.rst:1322
msgid ""
"This screen can also be used to manage the ZFS scrub schedule. Scrubs are "
"recommended as they can provide an early indication of a potential disk "
"failure. Scrubs can be scheduled on a per-pool basis."
msgstr ""
#: ../../sysadmclient.rst:1297
#: ../../sysadmclient.rst:1326
msgid ""
"If you have multiple pools, be sure to create a scrub schedule for each "
"pool."
msgstr ""
#: ../../sysadmclient.rst:1310
#: ../../sysadmclient.rst:1339
msgid ""
"Select the pool from the :guilabel:`Storage Pool` drop-down menu, then "
"select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", "
@@ -1807,26 +1785,17 @@ msgstr ""
msgid ": Viewing All Accounts and Their Details"
msgstr ""
#: ../../sysadmclient.rst:930
#: ../../sysadmclient.rst:938
msgid ": Initialize PersonaCrypt Device"
msgstr ""
#: ../../sysadmclient.rst:932
msgid ""
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
"Note this section is hidden if the currently logged in user is selected. "
"Also, if you have just created a user and do not see these options, click "
":guilabel:`Save` then re-highlight the user to display these options:"
msgstr ""
#: ../../sysadmclient.rst:947
#: ../../sysadmclient.rst:955
msgid ""
"To prepare a PersonaCrypt device for this user, insert a USB stick and click"
" :guilabel:`Initialize Device`."
msgstr ""
#: ../../sysadmclient.rst:957
#: ../../sysadmclient.rst:965
msgid ""
"Type a password to associate with the device. Click :guilabel:`Save` to "
"initialize the device. The User Manager may take a moment to prepare the "
@@ -1834,49 +1803,49 @@ msgid ""
" to allow removal of PersonaCrypt."
msgstr ""
#: ../../sysadmclient.rst:1027
#: ../../sysadmclient.rst:1056
msgid ": Managing Groups Using User Manager"
msgstr ""
#: ../../sysadmclient.rst:1110
#: ../../sysadmclient.rst:1139
msgid ": Snapshot Tab"
msgstr ""
#: ../../sysadmclient.rst:1184
#: ../../sysadmclient.rst:1213
msgid ": Replication Tab"
msgstr ""
#: ../../sysadmclient.rst:1194
#: ../../sysadmclient.rst:1223
msgid ": Scheduling a Replication"
msgstr ""
#: ../../sysadmclient.rst:1268
#: ../../sysadmclient.rst:1297
msgid ": Scheduling a Snapshot"
msgstr ""
#: ../../sysadmclient.rst:1308
#: ../../sysadmclient.rst:1337
msgid ": Scheduling a Scrub"
msgstr ""
#: ../../sysadmclient.rst:1335
#: ../../sysadmclient.rst:1364
msgid ": Life Preserver Settings"
msgstr ""
#: ../../sysadmclient.rst:1442
#: ../../sysadmclient.rst:1471
msgid ""
":numref:`Table %s <cmdgui>` shows the command line equivalents to the "
"graphical options provided by the Life Preserver GUI."
msgstr ""
#: ../../sysadmclient.rst:1495
#: ../../sysadmclient.rst:1524
msgid ": Selecting to Restore/Clone From Backup"
msgstr ""
#: ../../sysadmclient.rst:1517
#: ../../sysadmclient.rst:1546
msgid ": Input the Information for a SSH Restore"
msgstr ""
#: ../../sysadmclient.rst:1523
#: ../../sysadmclient.rst:1552
msgid ""
"Once the connection to the backup server succeeds, you will be able to "
"select which host to restore. After making your selection, click "
@@ -1892,7 +1861,7 @@ msgid ""
":guilabel:`Next` to perform the restore."
msgstr ""
#: ../../sysadmclient.rst:987
#: ../../sysadmclient.rst:970
msgid ""
"Once a user has been initialized for PersonaCrypt on the system, their user "
"account will no longer be displayed when logging in, **unless** their "
@@ -1901,7 +1870,7 @@ msgid ""
":numref:`Figure %s <troslogin5>`."
msgstr ""
#: ../../sysadmclient.rst:997
#: ../../sysadmclient.rst:980
msgid ": |trueos| Login Screen with PersonaCrypt"
msgstr ""
@@ -1949,7 +1918,7 @@ msgstr ""
msgid ": |sysadm| Task Manager"
msgstr ""
#: ../../sysadmclient.rst:1103
#: ../../sysadmclient.rst:1132
msgid ""
":numref:`Figure %s <lpreserver1>` shows the :guilabel:`Snapshots` tab on a "
"system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"."
@@ -2013,6 +1982,134 @@ msgid ""
":guilabel:`Save Settings`."
msgstr ""
#: ../../sysadmclient.rst:894
msgid ""
"|trueos| provides support for a security feature known as PersonaCrypt. A "
"PersonaCrypt device is a removable USB media, such as a USB flash drive, "
"formatted with ZFS and encrypted with either GELI or PEFS. This device is "
"used to hold a specific user's home directory, meaning they can securely "
"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 "
"or higher system. For example, this can be used to securely access one's "
"home directory from a laptop, home computer, and work computer. The device "
"is protected by an encryption key and a different (recommended) password "
"separate from the user's login password."
msgstr ""
#: ../../sysadmclient.rst:916
msgid "GELI"
msgstr ""
#: ../../sysadmclient.rst:918
msgid ""
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
"your passphrase, and the other being a key stored on disk. Without both of "
"these parts, the media cannot be decrypted. This means if somebody steals "
"the key and manages to get your password, it is still worthless without the "
"system it was paired with. GELI is used by default in |trueos| as it is more"
" fully featured over PEFS."
msgstr ""
#: ../../sysadmclient.rst:940
msgid ""
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
"buttons are available in the :guilabel:`PersonaCrypt` tab of "
":guilabel:`Advanced Mode`. Note this section is hidden if the currently "
"logged in user is selected. Also, if you have just created a user and do not"
" see these options, click :guilabel:`Save`, then re-highlight the user to "
"display these options:"
msgstr ""
#: ../../sysadmclient.rst:999
msgid "PEFS"
msgstr ""
#: ../../sysadmclient.rst:1001
msgid ""
"`PEFS <http://pefs.io/>`_ stands for Private Encrypted File System. It is "
"open source software freely available under the BSD license, and is included"
" in |trueos| by default. PEFS runs on top of any existing file system, "
"providing an encryption layer independent of the underlying file system. "
"PersonaCrypt can be configured to use PEFS in place of GELI, which "
"eliminates the need for external media, as the encrypted PEFS database is "
"stored on the local disk."
msgstr ""
#: ../../sysadmclient.rst:1009
msgid ""
"While PEFS does not use a USB drive, be sure to print or otherwise backup "
"the PEFS generated key fragment stored on the disk."
msgstr ""
#: ../../sysadmclient.rst:1012
msgid "**Initialize PEFS with the Command Line**"
msgstr ""
#: ../../sysadmclient.rst:1014
msgid ""
"Because PEFS does not use a USB drive with its encryption, the user will "
"need a password file (pfile) containing the desired password, **before** "
"initializing PEFS for a user account. Once this pfile is created, enabling "
"PEFS through PersonaCrypt is accomplished in a CLI with "
":command:`personacrypt init <username> <pfile> PEFS`."
msgstr ""
#: ../../sysadmclient.rst:1020
msgid ""
"For example, the user account **test** has a pfile named "
":file:`testpfile.txt`, which contains the single text string of **test's** "
"chosen password. Next, the administrator adds PEFS encryption to the "
"**test** acount by opening a CLI, logging in as root, and typing:"
msgstr ""
#: ../../sysadmclient.rst:1029
msgid ""
"PersonaCrypt will initialize the account **test** with PEFS, using the "
"string in :file:`testpfile.txt` as the new password."
msgstr ""
#: ../../sysadmclient.rst:1032
msgid ""
"The |sysadm| User Manager can also initialize a user account with PEFS by "
"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` "
"drop down menu of the :guilabel:`PersonaCrypt` tab."
msgstr ""
#: ../../sysadmclient.rst:1036
msgid ""
"In addition to initializing an account with PEFS, PersonaCrypt also supports"
" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt "
"export <username>` and :command:`personacrypt import <keyfile>`, "
"respectively."
msgstr ""
#~ msgid ""
#~ "|trueos| provides support for a security feature known as PersonaCrypt. A "
#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
#~ " with ZFS and encrypted with GELI. This device is used to hold a specific "
#~ "user's home directory, meaning they can securely transport and access their "
#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
#~ "example, this can be used to securely access one's home directory from a "
#~ "laptop, home computer, and work computer. The device is protected by an "
#~ "encryption key and a password which is, and should be, separate from the "
#~ "user's login password."
#~ msgstr ""
#~ msgid ""
#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being "
#~ "your passphrase, and the other being a key stored on disk. Without both of "
#~ "these parts, the media cannot be decrypted. This means if somebody steals "
#~ "the key and manages to get your password, it is still worthless without the "
#~ "system it was paired with."
#~ msgstr ""
#~ msgid ""
#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two "
#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
#~ "Note this section is hidden if the currently logged in user is selected. "
#~ "Also, if you have just created a user and do not see these options, click "
#~ ":guilabel:`Save` then re-highlight the user to display these options:"
#~ msgstr ""
#~ msgid ""
#~ "**Max Boot Environments:** |trueos| automatically creates a boot environment"
#~ " before updating any software, the operating system, or applying a system "

View File

@@ -482,7 +482,7 @@ msgid ""
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <update4>`."
msgstr ""
#: ../../sysadmclient.rst:1326
#: ../../sysadmclient.rst:1355
msgid "Settings Tab"
msgstr ""
@@ -924,20 +924,7 @@ msgstr ""
msgid "PersonaCrypt"
msgstr ""
#: ../../sysadmclient.rst:894
msgid ""
"|trueos| provides support for a security feature known as PersonaCrypt. A "
"PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
" with ZFS and encrypted with GELI. This device is used to hold a specific "
"user's home directory, meaning they can securely transport and access their "
"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
"example, this can be used to securely access one's home directory from a "
"laptop, home computer, and work computer. The device is protected by an "
"encryption key and a password which is, and should be, separate from the "
"user's login password."
msgstr ""
#: ../../sysadmclient.rst:904
#: ../../sysadmclient.rst:905
msgid ""
"When a user is configured to use a PersonaCrypt device, that user can not "
"login using an unencrypted session on the same system. In other words, the "
@@ -946,22 +933,13 @@ msgid ""
"different user accounts, one for each type of session."
msgstr ""
#: ../../sysadmclient.rst:911
msgid ""
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
"your passphrase, and the other being a key stored on disk. Without both of "
"these parts, the media cannot be decrypted. This means if somebody steals "
"the key and manages to get your password, it is still worthless without the "
"system it was paired with."
msgstr ""
#: ../../sysadmclient.rst:917
#: ../../sysadmclient.rst:925
msgid ""
"USB devices do eventually fail. Always backup any important files stored on "
"the PersonaCrypt device to another device or system."
msgstr ""
#: ../../sysadmclient.rst:920
#: ../../sysadmclient.rst:928
msgid ""
"The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt "
"device for any login user, **except** for the currently logged in user. In "
@@ -969,13 +947,13 @@ msgid ""
"*dlavigne*, has been created and the entry for the user has been clicked."
msgstr ""
#: ../../sysadmclient.rst:939
#: ../../sysadmclient.rst:947
msgid ""
"**Initialize Device:** Used to prepare the USB device which will be used as "
"the user's home directory."
msgstr ""
#: ../../sysadmclient.rst:942
#: ../../sysadmclient.rst:950
msgid ""
"**Import Key:** If the user has already created a PersonaCrypt device on "
"another |trueos| system, click this button to import a previously saved copy"
@@ -983,7 +961,7 @@ msgid ""
"can now login to this computer using PersonaCrypt."
msgstr ""
#: ../../sysadmclient.rst:950
#: ../../sysadmclient.rst:958
msgid ""
"Since the USB stick will hold the user's home directory and files, ensure "
"the stick is large enough to meet the anticipated storage needs of the home "
@@ -993,7 +971,7 @@ msgid ""
"logged in."
msgstr ""
#: ../../sysadmclient.rst:999
#: ../../sysadmclient.rst:982
msgid ""
"When stealth sessions have been configured, PersonaCrypt users will still be"
" displayed in the login menu, even if their USB device is not inserted. This"
@@ -1001,47 +979,47 @@ msgid ""
"session."
msgstr ""
#: ../../sysadmclient.rst:1004
#: ../../sysadmclient.rst:987
msgid ""
"In the field with the yellow padlock icon, input the password for the user "
"account. In the field with the grey USB stick icon, input the password "
"associated with the PersonaCrypt device."
msgstr ""
#: ../../sysadmclient.rst:1008
#: ../../sysadmclient.rst:991
msgid ""
"To prevent data corruption and freezing the system **DO NOT** remove the "
"PersonaCrypt device while logged in! Always log out of your session before "
"physically removing the device."
msgstr ""
#: ../../sysadmclient.rst:1016
#: ../../sysadmclient.rst:1045
msgid "Managing Groups"
msgstr ""
#: ../../sysadmclient.rst:1018
#: ../../sysadmclient.rst:1047
msgid ""
"Click the :guilabel:`Groups` tab to view and manage the groups on the "
"system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s <user4>`, "
"shows the group membership for the *operator* and *wheel* groups:"
msgstr ""
#: ../../sysadmclient.rst:1029
#: ../../sysadmclient.rst:1058
msgid "This screen has 2 columns:"
msgstr ""
#: ../../sysadmclient.rst:1031
#: ../../sysadmclient.rst:1060
msgid ""
"**Members:** Indicates if the highlighted group contains any user accounts."
msgstr ""
#: ../../sysadmclient.rst:1034
#: ../../sysadmclient.rst:1063
msgid ""
"**Available:** Shows all of the system and user accounts on the system in "
"alphabetical order."
msgstr ""
#: ../../sysadmclient.rst:1037
#: ../../sysadmclient.rst:1066
msgid ""
"To add an account to a group, highlight the group name, then highlight the "
"account name in the :guilabel:`Available` column. Click the left arrow and "
@@ -1051,7 +1029,7 @@ msgid ""
"added to a group."
msgstr ""
#: ../../sysadmclient.rst:1044
#: ../../sysadmclient.rst:1073
msgid ""
"If you add a user to the *operator* group, they will have permission to use "
"commands requiring administrative access and will be prompted for their own "
@@ -1060,15 +1038,15 @@ msgid ""
"will be prompted for the superuser password whenever they use the command."
msgstr ""
#: ../../sysadmclient.rst:1051
#: ../../sysadmclient.rst:1080
msgid "To view all of the groups on the system, click :guilabel:`Advanced`."
msgstr ""
#: ../../sysadmclient.rst:1057
#: ../../sysadmclient.rst:1086
msgid "Life Preserver"
msgstr ""
#: ../../sysadmclient.rst:1059
#: ../../sysadmclient.rst:1088
msgid ""
"The Life Preserver utility is designed to take full advantage of the "
"functionality provided by ZFS snapshots. This utility allows you to schedule"
@@ -1077,25 +1055,25 @@ msgid ""
"benefits:"
msgstr ""
#: ../../sysadmclient.rst:1081
#: ../../sysadmclient.rst:1110
msgid ""
"Replication is an efficient way to keep the files on two systems in sync. "
"With Life Preserver, the snapshots taken on the |trueos| system will be "
"synchronized with their versions stored on the specified backup server."
msgstr ""
#: ../../sysadmclient.rst:1086
#: ../../sysadmclient.rst:1115
msgid "Snapshots are sent to the backup server over an encrypted connection."
msgstr ""
#: ../../sysadmclient.rst:1088
#: ../../sysadmclient.rst:1117
msgid ""
"Having a copy of the snapshots on another system makes it possible to "
"perform an operating system restore should the |trueos| system become "
"unusable or to deploy an identical system to different hardware."
msgstr ""
#: ../../sysadmclient.rst:1092
#: ../../sysadmclient.rst:1121
msgid ""
"To manage snapshots and replication using the |sysadm| graphical client, go "
"to :menuselection:`Utilities --> Life Preserver`. The rest of this section "
@@ -1103,16 +1081,16 @@ msgid ""
"Preserver."
msgstr ""
#: ../../sysadmclient.rst:1101
#: ../../sysadmclient.rst:1130
msgid "Snapshots Tab"
msgstr ""
#: ../../sysadmclient.rst:1112
#: ../../sysadmclient.rst:1141
msgid ""
"This screen will display any created snapshots and provides buttons to:"
msgstr ""
#: ../../sysadmclient.rst:1114
#: ../../sysadmclient.rst:1143
msgid ""
"**Create:** Used to create a manual snapshot of the specified pool now. For "
"example, you could create a snapshot before making changes to an important "
@@ -1126,14 +1104,14 @@ msgid ""
"snapshot was created."
msgstr ""
#: ../../sysadmclient.rst:1125
#: ../../sysadmclient.rst:1154
msgid ""
"**Remove:** Used to delete a highlighted snapshot. **This is a permanent "
"change that can not be reversed.** In other words, the versions of files at "
"the point in time the snapshot was created will be lost."
msgstr ""
#: ../../sysadmclient.rst:1130
#: ../../sysadmclient.rst:1159
msgid ""
"**Revert:** If you highlight a snapshot entry, this button and the drop-down"
" menu next to it will activate. You can use the drop-down menu to specify "
@@ -1143,11 +1121,11 @@ msgid ""
" after the snapshot was taken will be lost."
msgstr ""
#: ../../sysadmclient.rst:1142
#: ../../sysadmclient.rst:1171
msgid "Replication Tab"
msgstr ""
#: ../../sysadmclient.rst:1144
#: ../../sysadmclient.rst:1173
msgid ""
"Life Preserver can be configured to replicate snapshots to another system "
"over an encrypted SSH connection, though the backup itself is stored in an "
@@ -1155,13 +1133,13 @@ msgid ""
" another system."
msgstr ""
#: ../../sysadmclient.rst:1149
#: ../../sysadmclient.rst:1178
msgid ""
"In order to configure replication, the remote system to hold a copy of the "
"snapshots must first meet several requirements:"
msgstr ""
#: ../../sysadmclient.rst:1156
#: ../../sysadmclient.rst:1185
msgid ""
"The backup server **must be formatted with the latest version of ZFS,** also"
" known as ZFS feature flags or ZFSv5000. Operating systems that support this"
@@ -1169,14 +1147,14 @@ msgid ""
"FreeNAS 9.1.x or higher."
msgstr ""
#: ../../sysadmclient.rst:1162
#: ../../sysadmclient.rst:1191
msgid ""
"The system must have SSH installed and the SSH service must be running. If "
"the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is"
" already installed, but you will need to start the SSH service."
msgstr ""
#: ../../sysadmclient.rst:1167
#: ../../sysadmclient.rst:1196
msgid ""
"If the backup server is running |trueos| or |pcbsd|, you will need to open "
"TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is "
@@ -1186,7 +1164,7 @@ msgid ""
"backup system, make sure it has a rule to allow SSH."
msgstr ""
#: ../../sysadmclient.rst:1175
#: ../../sysadmclient.rst:1204
msgid ""
":numref:`Figure %s <lpreserver2>` shows the initial :guilabel:`Replication` "
"tab on a system that has not yet been configured for replication. This "
@@ -1194,29 +1172,29 @@ msgid ""
"schedule."
msgstr ""
#: ../../sysadmclient.rst:1186
#: ../../sysadmclient.rst:1215
msgid ""
"To schedule the replication, click :guilabel:`+` to display the \"Setup "
"Replication\" screen shown in :numref:`Figure %s <lpreserver3>`."
msgstr ""
#: ../../sysadmclient.rst:1196
#: ../../sysadmclient.rst:1225
msgid "Input the following information:"
msgstr ""
#: ../../sysadmclient.rst:1198
#: ../../sysadmclient.rst:1227
msgid ""
"**Host IP:** The IP address of the remote system to store the replicated "
"snapshots."
msgstr ""
#: ../../sysadmclient.rst:1201
#: ../../sysadmclient.rst:1230
msgid ""
"**SSH Port:** The port number, if the remote system is running SSH on a port"
" other than the default of 22."
msgstr ""
#: ../../sysadmclient.rst:1204
#: ../../sysadmclient.rst:1233
msgid ""
"**Dataset:** The name of the ZFS pool and optional dataset on the remote "
"system. For example, \"remotetank\" will save the snapshots to a ZFS pool of"
@@ -1224,7 +1202,7 @@ msgid ""
"existing dataset named \"mybackups\" on the pool named \"remotetank\"."
msgstr ""
#: ../../sysadmclient.rst:1210
#: ../../sysadmclient.rst:1239
msgid ""
"**Frequency:** Use the drop-down menu to select how often to initiate the "
"replication. Available choices are :guilabel:`Sync with snapshot` (at the "
@@ -1235,87 +1213,87 @@ msgid ""
":guilabel:`Start`) in this screen."
msgstr ""
#: ../../sysadmclient.rst:1219
#: ../../sysadmclient.rst:1248
msgid ""
"**Username:** The username must already exist on the remote system, have "
"write access to the specified \"Dataset\", and have permission to SSH into "
"that system."
msgstr ""
#: ../../sysadmclient.rst:1223
#: ../../sysadmclient.rst:1252
msgid "**Password:** The password associated with the \"Username\"."
msgstr ""
#: ../../sysadmclient.rst:1225
#: ../../sysadmclient.rst:1254
msgid ""
"**Local DS:** Use the drop-down menu to select the pool or dataset to "
"replicate to the remote system."
msgstr ""
#: ../../sysadmclient.rst:1228
#: ../../sysadmclient.rst:1257
msgid ""
"The buttons at the top of the \"Setup Replication\" screen have several "
"uses:"
msgstr ""
#: ../../sysadmclient.rst:1231
#: ../../sysadmclient.rst:1260
msgid ""
"**+ icon:** Sdd a replication schedule. Multiple schedules are supported, "
"meaning you can replicate to multiple systems or replicate different \"Local"
" DS\" datasets at different times."
msgstr ""
#: ../../sysadmclient.rst:1235
#: ../../sysadmclient.rst:1264
msgid ""
"**- icon:** Remove an already created, and highlighted, replication "
"schedule."
msgstr ""
#: ../../sysadmclient.rst:1238
#: ../../sysadmclient.rst:1267
msgid "**gear icon:** Modify the schedule for the highlighted replication."
msgstr ""
#: ../../sysadmclient.rst:1240
#: ../../sysadmclient.rst:1269
msgid ""
"**Start:** Manually starts a replication to the system specified in the "
"highlighted replication."
msgstr ""
#: ../../sysadmclient.rst:1243
#: ../../sysadmclient.rst:1272
msgid ""
"**Initialize:** Deletes the existing replicated snapshots on the remote "
"system and starts a new replication. This is useful if a replication gets "
"stuck and will not complete."
msgstr ""
#: ../../sysadmclient.rst:1251
#: ../../sysadmclient.rst:1280
msgid "Schedules Tab"
msgstr ""
#: ../../sysadmclient.rst:1253
#: ../../sysadmclient.rst:1282
msgid ""
"This tab is used to manage when snapshots of the ZFS pool are created. "
"Multiple snapshot schedules are supported if the system has multiple pools."
msgstr ""
#: ../../sysadmclient.rst:1257
#: ../../sysadmclient.rst:1286
msgid ""
"Snapshots are created on the entire pool as they are needed when "
":ref:`Restoring the Operating System`."
msgstr ""
#: ../../sysadmclient.rst:1260
#: ../../sysadmclient.rst:1289
msgid ""
"To create a snapshot schedule, click the :guilabel:`camera` icon in the "
"lower left corner of this tab. This will activate the \"Setup Snapshot "
"Schedule\" pane as seen in :numref:`Figure %s <lpreserver4>`."
msgstr ""
#: ../../sysadmclient.rst:1270
#: ../../sysadmclient.rst:1299
msgid "This pane contains several options:"
msgstr ""
#: ../../sysadmclient.rst:1275
#: ../../sysadmclient.rst:1304
msgid ""
"**Snapshots to keep:** Snapshots are automatically pruned after the "
"specified number of snapshots to prevent snapshots from eventually using up "
@@ -1326,7 +1304,7 @@ msgid ""
"manually in the :guilabel:`Snapshots` tab."
msgstr ""
#: ../../sysadmclient.rst:1284
#: ../../sysadmclient.rst:1313
msgid ""
"**Frequency:** Use the drop-down menu to select how often snapshots occur. "
"Options include \"Daily\" (which will allow you to select the time of day), "
@@ -1334,37 +1312,37 @@ msgid ""
"Minutes\"."
msgstr ""
#: ../../sysadmclient.rst:1289
#: ../../sysadmclient.rst:1318
msgid ""
"Once you have created a snapshot schedule, you can use the \"gear\" icon "
"next to the \"camera\" icon to modify the highlighted schedule or the \"X\" "
"icon to delete the highlighted schedule."
msgstr ""
#: ../../sysadmclient.rst:1300
#: ../../sysadmclient.rst:1329
msgid ""
"To schedule when the scrub occurs, click the third icon from the right which"
" will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure "
"%s <lpreserver5>`."
msgstr ""
#: ../../sysadmclient.rst:1318
#: ../../sysadmclient.rst:1347
msgid ""
"Once you have created a scrub schedule, you can use the \"gear\" icon next "
"to the \"schedule scrub\" icon to modify the highlighted schedule or the "
"\"X\" icon to delete the highlighted schedule."
msgstr ""
#: ../../sysadmclient.rst:1328
#: ../../sysadmclient.rst:1357
msgid ""
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <lpreserver6>`."
msgstr ""
#: ../../sysadmclient.rst:1337
#: ../../sysadmclient.rst:1366
msgid "Many settings are configurable:"
msgstr ""
#: ../../sysadmclient.rst:1339
#: ../../sysadmclient.rst:1368
msgid ""
"**Disk Usage Warning:** Enter a number up to 99 to indicate at which "
"percentage of disk space Life Preserver will display an alert in the system "
@@ -1372,41 +1350,41 @@ msgid ""
"space."
msgstr ""
#: ../../sysadmclient.rst:1344
#: ../../sysadmclient.rst:1373
msgid ""
"**Email:** To receive an email when disk usage reaches the percentage "
"configured in the \"Disk Usage Warning\", enter an email address."
msgstr ""
#: ../../sysadmclient.rst:1347
#: ../../sysadmclient.rst:1376
msgid ""
"**Email Trigger:** This setting can be set to \"All\", \"Warn\", or "
"\"Error\" and indicates the type of condition which will trigger an email "
"message."
msgstr ""
#: ../../sysadmclient.rst:1350
#: ../../sysadmclient.rst:1379
msgid "**Recursive Management:**"
msgstr ""
#: ../../sysadmclient.rst:1352
#: ../../sysadmclient.rst:1381
msgid ""
"If you make any changes in this screen, press :guilabel:`Save Settings` to "
"apply them."
msgstr ""
#: ../../sysadmclient.rst:1359
#: ../../sysadmclient.rst:1388
msgid "Using the lpreserver CLI"
msgstr ""
#: ../../sysadmclient.rst:1361
#: ../../sysadmclient.rst:1390
msgid ""
"The :command:`lpreserver` command line utility can also be used to manage "
"snapshots and replication. This command needs to be run as the superuser. To"
" display its usage, type the command without any arguments:"
msgstr ""
#: ../../sysadmclient.rst:1381
#: ../../sysadmclient.rst:1410
msgid ""
"Each command has its own help text that describes its parameters and "
"provides a usage example. For example, to receive help on how to use the "
@@ -1417,104 +1395,104 @@ msgstr ""
msgid "Command Line and GUI Equivalents"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**Command Line**"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**GUI**"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**Description**"
msgstr ""
#: ../../sysadmclient.rst:1452
#: ../../sysadmclient.rst:1481
msgid "**cronsnap**"
msgstr ""
#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499
msgid "\"Snapshots\" tab"
msgstr ""
#: ../../sysadmclient.rst:1452
#: ../../sysadmclient.rst:1481
msgid ""
"schedule when snapshots occur and how long to keep them; the **stop** option"
" can be used to disable snapshot creation"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "**cronscrub**"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "\"Schedules\" tab"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "schedule a ZFS scrub"
msgstr ""
#: ../../sysadmclient.rst:1459
#: ../../sysadmclient.rst:1488
msgid "**get**"
msgstr ""
#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495
msgid "\"Settings\" tab"
msgstr ""
#: ../../sysadmclient.rst:1459
#: ../../sysadmclient.rst:1488
msgid "list Life Preserver options"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid "**replicate**"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid "\"Replication\" tab"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid ""
"used to list, add, and remove backup server; read the **help** for this "
"command for examples"
msgstr ""
#: ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1495
msgid "**set**"
msgstr ""
#: ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1495
msgid ""
"configures Life Preserver options; read **help** for the list of "
"configurable options"
msgstr ""
#: ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1499
msgid "**snapshot**"
msgstr ""
#: ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1499
msgid ""
"create and replicate a new ZFS snapshot; by default, snapshots are "
"recursive, meaning that a that a snapshot is taken of every dataset within a"
" pool"
msgstr ""
#: ../../sysadmclient.rst:1476
#: ../../sysadmclient.rst:1505
msgid "**status**"
msgstr ""
#: ../../sysadmclient.rst:1476
#: ../../sysadmclient.rst:1505
msgid "lists the last snapshot name and replication status"
msgstr ""
#: ../../sysadmclient.rst:1483
#: ../../sysadmclient.rst:1512
msgid "Restoring the Operating System"
msgstr ""
#: ../../sysadmclient.rst:1485
#: ../../sysadmclient.rst:1514
msgid ""
"If you have replicated the system's snapshots to a remote backup server, you"
" can use a |trueos| installation media to perform an operating system "
@@ -1522,7 +1500,7 @@ msgid ""
"you get to the screen shown in :numref:`Figure %s <restore1>`."
msgstr ""
#: ../../sysadmclient.rst:1497
#: ../../sysadmclient.rst:1526
msgid ""
"Before you can perform a restore, the network interface must be configured. "
"Click :guilabel:`Network Connectivity` (second icon from the left) in order "
@@ -1533,7 +1511,7 @@ msgid ""
"continuing."
msgstr ""
#: ../../sysadmclient.rst:1505
#: ../../sysadmclient.rst:1534
msgid ""
"Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and"
" :guilabel:`Next`. This will start the Restore Wizard. In the screen shown "
@@ -1543,7 +1521,7 @@ msgid ""
"number."
msgstr ""
#: ../../sysadmclient.rst:1519
#: ../../sysadmclient.rst:1548
msgid ""
"Click :guilabel:`Next` and the wizard will provide a summary of your "
"selections. If correct, click :guilabel:`Finish`; otherwise, click "
@@ -1626,7 +1604,7 @@ msgid ""
"press :guilabel:`Close Ports`."
msgstr ""
#: ../../sysadmclient.rst:1152
#: ../../sysadmclient.rst:1181
msgid ""
"Snapshots occurring too frequently can introduce errors in replication. To "
"avoid errors, ensure snapshots are configured to take place slower than the "
@@ -1685,7 +1663,7 @@ msgid ""
"accounts."
msgstr ""
#: ../../sysadmclient.rst:1065
#: ../../sysadmclient.rst:1094
msgid ""
"A snapshot provides a \"point-in-time\" image of the ZFS pool. This is "
"similar to a full system backup as the snapshot contains the information for"
@@ -1703,26 +1681,26 @@ msgid ""
"snapshot."
msgstr ""
#: ../../sysadmclient.rst:1272
#: ../../sysadmclient.rst:1301
msgid ""
"**Storage Pool:** Select the ZFS storage pool that contains the datasets "
"that you wish to snapshot."
msgstr ""
#: ../../sysadmclient.rst:1293
#: ../../sysadmclient.rst:1322
msgid ""
"This screen can also be used to manage the ZFS scrub schedule. Scrubs are "
"recommended as they can provide an early indication of a potential disk "
"failure. Scrubs can be scheduled on a per-pool basis."
msgstr ""
#: ../../sysadmclient.rst:1297
#: ../../sysadmclient.rst:1326
msgid ""
"If you have multiple pools, be sure to create a scrub schedule for each "
"pool."
msgstr ""
#: ../../sysadmclient.rst:1310
#: ../../sysadmclient.rst:1339
msgid ""
"Select the pool from the :guilabel:`Storage Pool` drop-down menu, then "
"select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", "
@@ -1807,26 +1785,17 @@ msgstr ""
msgid ": Viewing All Accounts and Their Details"
msgstr ""
#: ../../sysadmclient.rst:930
#: ../../sysadmclient.rst:938
msgid ": Initialize PersonaCrypt Device"
msgstr ""
#: ../../sysadmclient.rst:932
msgid ""
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
"Note this section is hidden if the currently logged in user is selected. "
"Also, if you have just created a user and do not see these options, click "
":guilabel:`Save` then re-highlight the user to display these options:"
msgstr ""
#: ../../sysadmclient.rst:947
#: ../../sysadmclient.rst:955
msgid ""
"To prepare a PersonaCrypt device for this user, insert a USB stick and click"
" :guilabel:`Initialize Device`."
msgstr ""
#: ../../sysadmclient.rst:957
#: ../../sysadmclient.rst:965
msgid ""
"Type a password to associate with the device. Click :guilabel:`Save` to "
"initialize the device. The User Manager may take a moment to prepare the "
@@ -1834,49 +1803,49 @@ msgid ""
" to allow removal of PersonaCrypt."
msgstr ""
#: ../../sysadmclient.rst:1027
#: ../../sysadmclient.rst:1056
msgid ": Managing Groups Using User Manager"
msgstr ""
#: ../../sysadmclient.rst:1110
#: ../../sysadmclient.rst:1139
msgid ": Snapshot Tab"
msgstr ""
#: ../../sysadmclient.rst:1184
#: ../../sysadmclient.rst:1213
msgid ": Replication Tab"
msgstr ""
#: ../../sysadmclient.rst:1194
#: ../../sysadmclient.rst:1223
msgid ": Scheduling a Replication"
msgstr ""
#: ../../sysadmclient.rst:1268
#: ../../sysadmclient.rst:1297
msgid ": Scheduling a Snapshot"
msgstr ""
#: ../../sysadmclient.rst:1308
#: ../../sysadmclient.rst:1337
msgid ": Scheduling a Scrub"
msgstr ""
#: ../../sysadmclient.rst:1335
#: ../../sysadmclient.rst:1364
msgid ": Life Preserver Settings"
msgstr ""
#: ../../sysadmclient.rst:1442
#: ../../sysadmclient.rst:1471
msgid ""
":numref:`Table %s <cmdgui>` shows the command line equivalents to the "
"graphical options provided by the Life Preserver GUI."
msgstr ""
#: ../../sysadmclient.rst:1495
#: ../../sysadmclient.rst:1524
msgid ": Selecting to Restore/Clone From Backup"
msgstr ""
#: ../../sysadmclient.rst:1517
#: ../../sysadmclient.rst:1546
msgid ": Input the Information for a SSH Restore"
msgstr ""
#: ../../sysadmclient.rst:1523
#: ../../sysadmclient.rst:1552
msgid ""
"Once the connection to the backup server succeeds, you will be able to "
"select which host to restore. After making your selection, click "
@@ -1892,7 +1861,7 @@ msgid ""
":guilabel:`Next` to perform the restore."
msgstr ""
#: ../../sysadmclient.rst:987
#: ../../sysadmclient.rst:970
msgid ""
"Once a user has been initialized for PersonaCrypt on the system, their user "
"account will no longer be displayed when logging in, **unless** their "
@@ -1901,7 +1870,7 @@ msgid ""
":numref:`Figure %s <troslogin5>`."
msgstr ""
#: ../../sysadmclient.rst:997
#: ../../sysadmclient.rst:980
msgid ": |trueos| Login Screen with PersonaCrypt"
msgstr ""
@@ -1949,7 +1918,7 @@ msgstr ""
msgid ": |sysadm| Task Manager"
msgstr ""
#: ../../sysadmclient.rst:1103
#: ../../sysadmclient.rst:1132
msgid ""
":numref:`Figure %s <lpreserver1>` shows the :guilabel:`Snapshots` tab on a "
"system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"."
@@ -2013,6 +1982,134 @@ msgid ""
":guilabel:`Save Settings`."
msgstr ""
#: ../../sysadmclient.rst:894
msgid ""
"|trueos| provides support for a security feature known as PersonaCrypt. A "
"PersonaCrypt device is a removable USB media, such as a USB flash drive, "
"formatted with ZFS and encrypted with either GELI or PEFS. This device is "
"used to hold a specific user's home directory, meaning they can securely "
"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 "
"or higher system. For example, this can be used to securely access one's "
"home directory from a laptop, home computer, and work computer. The device "
"is protected by an encryption key and a different (recommended) password "
"separate from the user's login password."
msgstr ""
#: ../../sysadmclient.rst:916
msgid "GELI"
msgstr ""
#: ../../sysadmclient.rst:918
msgid ""
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
"your passphrase, and the other being a key stored on disk. Without both of "
"these parts, the media cannot be decrypted. This means if somebody steals "
"the key and manages to get your password, it is still worthless without the "
"system it was paired with. GELI is used by default in |trueos| as it is more"
" fully featured over PEFS."
msgstr ""
#: ../../sysadmclient.rst:940
msgid ""
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
"buttons are available in the :guilabel:`PersonaCrypt` tab of "
":guilabel:`Advanced Mode`. Note this section is hidden if the currently "
"logged in user is selected. Also, if you have just created a user and do not"
" see these options, click :guilabel:`Save`, then re-highlight the user to "
"display these options:"
msgstr ""
#: ../../sysadmclient.rst:999
msgid "PEFS"
msgstr ""
#: ../../sysadmclient.rst:1001
msgid ""
"`PEFS <http://pefs.io/>`_ stands for Private Encrypted File System. It is "
"open source software freely available under the BSD license, and is included"
" in |trueos| by default. PEFS runs on top of any existing file system, "
"providing an encryption layer independent of the underlying file system. "
"PersonaCrypt can be configured to use PEFS in place of GELI, which "
"eliminates the need for external media, as the encrypted PEFS database is "
"stored on the local disk."
msgstr ""
#: ../../sysadmclient.rst:1009
msgid ""
"While PEFS does not use a USB drive, be sure to print or otherwise backup "
"the PEFS generated key fragment stored on the disk."
msgstr ""
#: ../../sysadmclient.rst:1012
msgid "**Initialize PEFS with the Command Line**"
msgstr ""
#: ../../sysadmclient.rst:1014
msgid ""
"Because PEFS does not use a USB drive with its encryption, the user will "
"need a password file (pfile) containing the desired password, **before** "
"initializing PEFS for a user account. Once this pfile is created, enabling "
"PEFS through PersonaCrypt is accomplished in a CLI with "
":command:`personacrypt init <username> <pfile> PEFS`."
msgstr ""
#: ../../sysadmclient.rst:1020
msgid ""
"For example, the user account **test** has a pfile named "
":file:`testpfile.txt`, which contains the single text string of **test's** "
"chosen password. Next, the administrator adds PEFS encryption to the "
"**test** acount by opening a CLI, logging in as root, and typing:"
msgstr ""
#: ../../sysadmclient.rst:1029
msgid ""
"PersonaCrypt will initialize the account **test** with PEFS, using the "
"string in :file:`testpfile.txt` as the new password."
msgstr ""
#: ../../sysadmclient.rst:1032
msgid ""
"The |sysadm| User Manager can also initialize a user account with PEFS by "
"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` "
"drop down menu of the :guilabel:`PersonaCrypt` tab."
msgstr ""
#: ../../sysadmclient.rst:1036
msgid ""
"In addition to initializing an account with PEFS, PersonaCrypt also supports"
" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt "
"export <username>` and :command:`personacrypt import <keyfile>`, "
"respectively."
msgstr ""
#~ msgid ""
#~ "|trueos| provides support for a security feature known as PersonaCrypt. A "
#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
#~ " with ZFS and encrypted with GELI. This device is used to hold a specific "
#~ "user's home directory, meaning they can securely transport and access their "
#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
#~ "example, this can be used to securely access one's home directory from a "
#~ "laptop, home computer, and work computer. The device is protected by an "
#~ "encryption key and a password which is, and should be, separate from the "
#~ "user's login password."
#~ msgstr ""
#~ msgid ""
#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being "
#~ "your passphrase, and the other being a key stored on disk. Without both of "
#~ "these parts, the media cannot be decrypted. This means if somebody steals "
#~ "the key and manages to get your password, it is still worthless without the "
#~ "system it was paired with."
#~ msgstr ""
#~ msgid ""
#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two "
#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
#~ "Note this section is hidden if the currently logged in user is selected. "
#~ "Also, if you have just created a user and do not see these options, click "
#~ ":guilabel:`Save` then re-highlight the user to display these options:"
#~ msgstr ""
#~ msgid ""
#~ "**Max Boot Environments:** |trueos| automatically creates a boot environment"
#~ " before updating any software, the operating system, or applying a system "

View File

@@ -482,7 +482,7 @@ msgid ""
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <update4>`."
msgstr ""
#: ../../sysadmclient.rst:1326
#: ../../sysadmclient.rst:1355
msgid "Settings Tab"
msgstr ""
@@ -924,20 +924,7 @@ msgstr ""
msgid "PersonaCrypt"
msgstr ""
#: ../../sysadmclient.rst:894
msgid ""
"|trueos| provides support for a security feature known as PersonaCrypt. A "
"PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
" with ZFS and encrypted with GELI. This device is used to hold a specific "
"user's home directory, meaning they can securely transport and access their "
"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
"example, this can be used to securely access one's home directory from a "
"laptop, home computer, and work computer. The device is protected by an "
"encryption key and a password which is, and should be, separate from the "
"user's login password."
msgstr ""
#: ../../sysadmclient.rst:904
#: ../../sysadmclient.rst:905
msgid ""
"When a user is configured to use a PersonaCrypt device, that user can not "
"login using an unencrypted session on the same system. In other words, the "
@@ -946,22 +933,13 @@ msgid ""
"different user accounts, one for each type of session."
msgstr ""
#: ../../sysadmclient.rst:911
msgid ""
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
"your passphrase, and the other being a key stored on disk. Without both of "
"these parts, the media cannot be decrypted. This means if somebody steals "
"the key and manages to get your password, it is still worthless without the "
"system it was paired with."
msgstr ""
#: ../../sysadmclient.rst:917
#: ../../sysadmclient.rst:925
msgid ""
"USB devices do eventually fail. Always backup any important files stored on "
"the PersonaCrypt device to another device or system."
msgstr ""
#: ../../sysadmclient.rst:920
#: ../../sysadmclient.rst:928
msgid ""
"The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt "
"device for any login user, **except** for the currently logged in user. In "
@@ -969,13 +947,13 @@ msgid ""
"*dlavigne*, has been created and the entry for the user has been clicked."
msgstr ""
#: ../../sysadmclient.rst:939
#: ../../sysadmclient.rst:947
msgid ""
"**Initialize Device:** Used to prepare the USB device which will be used as "
"the user's home directory."
msgstr ""
#: ../../sysadmclient.rst:942
#: ../../sysadmclient.rst:950
msgid ""
"**Import Key:** If the user has already created a PersonaCrypt device on "
"another |trueos| system, click this button to import a previously saved copy"
@@ -983,7 +961,7 @@ msgid ""
"can now login to this computer using PersonaCrypt."
msgstr ""
#: ../../sysadmclient.rst:950
#: ../../sysadmclient.rst:958
msgid ""
"Since the USB stick will hold the user's home directory and files, ensure "
"the stick is large enough to meet the anticipated storage needs of the home "
@@ -993,7 +971,7 @@ msgid ""
"logged in."
msgstr ""
#: ../../sysadmclient.rst:999
#: ../../sysadmclient.rst:982
msgid ""
"When stealth sessions have been configured, PersonaCrypt users will still be"
" displayed in the login menu, even if their USB device is not inserted. This"
@@ -1001,47 +979,47 @@ msgid ""
"session."
msgstr ""
#: ../../sysadmclient.rst:1004
#: ../../sysadmclient.rst:987
msgid ""
"In the field with the yellow padlock icon, input the password for the user "
"account. In the field with the grey USB stick icon, input the password "
"associated with the PersonaCrypt device."
msgstr ""
#: ../../sysadmclient.rst:1008
#: ../../sysadmclient.rst:991
msgid ""
"To prevent data corruption and freezing the system **DO NOT** remove the "
"PersonaCrypt device while logged in! Always log out of your session before "
"physically removing the device."
msgstr ""
#: ../../sysadmclient.rst:1016
#: ../../sysadmclient.rst:1045
msgid "Managing Groups"
msgstr ""
#: ../../sysadmclient.rst:1018
#: ../../sysadmclient.rst:1047
msgid ""
"Click the :guilabel:`Groups` tab to view and manage the groups on the "
"system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s <user4>`, "
"shows the group membership for the *operator* and *wheel* groups:"
msgstr ""
#: ../../sysadmclient.rst:1029
#: ../../sysadmclient.rst:1058
msgid "This screen has 2 columns:"
msgstr ""
#: ../../sysadmclient.rst:1031
#: ../../sysadmclient.rst:1060
msgid ""
"**Members:** Indicates if the highlighted group contains any user accounts."
msgstr ""
#: ../../sysadmclient.rst:1034
#: ../../sysadmclient.rst:1063
msgid ""
"**Available:** Shows all of the system and user accounts on the system in "
"alphabetical order."
msgstr ""
#: ../../sysadmclient.rst:1037
#: ../../sysadmclient.rst:1066
msgid ""
"To add an account to a group, highlight the group name, then highlight the "
"account name in the :guilabel:`Available` column. Click the left arrow and "
@@ -1051,7 +1029,7 @@ msgid ""
"added to a group."
msgstr ""
#: ../../sysadmclient.rst:1044
#: ../../sysadmclient.rst:1073
msgid ""
"If you add a user to the *operator* group, they will have permission to use "
"commands requiring administrative access and will be prompted for their own "
@@ -1060,15 +1038,15 @@ msgid ""
"will be prompted for the superuser password whenever they use the command."
msgstr ""
#: ../../sysadmclient.rst:1051
#: ../../sysadmclient.rst:1080
msgid "To view all of the groups on the system, click :guilabel:`Advanced`."
msgstr ""
#: ../../sysadmclient.rst:1057
#: ../../sysadmclient.rst:1086
msgid "Life Preserver"
msgstr ""
#: ../../sysadmclient.rst:1059
#: ../../sysadmclient.rst:1088
msgid ""
"The Life Preserver utility is designed to take full advantage of the "
"functionality provided by ZFS snapshots. This utility allows you to schedule"
@@ -1077,25 +1055,25 @@ msgid ""
"benefits:"
msgstr ""
#: ../../sysadmclient.rst:1081
#: ../../sysadmclient.rst:1110
msgid ""
"Replication is an efficient way to keep the files on two systems in sync. "
"With Life Preserver, the snapshots taken on the |trueos| system will be "
"synchronized with their versions stored on the specified backup server."
msgstr ""
#: ../../sysadmclient.rst:1086
#: ../../sysadmclient.rst:1115
msgid "Snapshots are sent to the backup server over an encrypted connection."
msgstr ""
#: ../../sysadmclient.rst:1088
#: ../../sysadmclient.rst:1117
msgid ""
"Having a copy of the snapshots on another system makes it possible to "
"perform an operating system restore should the |trueos| system become "
"unusable or to deploy an identical system to different hardware."
msgstr ""
#: ../../sysadmclient.rst:1092
#: ../../sysadmclient.rst:1121
msgid ""
"To manage snapshots and replication using the |sysadm| graphical client, go "
"to :menuselection:`Utilities --> Life Preserver`. The rest of this section "
@@ -1103,16 +1081,16 @@ msgid ""
"Preserver."
msgstr ""
#: ../../sysadmclient.rst:1101
#: ../../sysadmclient.rst:1130
msgid "Snapshots Tab"
msgstr ""
#: ../../sysadmclient.rst:1112
#: ../../sysadmclient.rst:1141
msgid ""
"This screen will display any created snapshots and provides buttons to:"
msgstr ""
#: ../../sysadmclient.rst:1114
#: ../../sysadmclient.rst:1143
msgid ""
"**Create:** Used to create a manual snapshot of the specified pool now. For "
"example, you could create a snapshot before making changes to an important "
@@ -1126,14 +1104,14 @@ msgid ""
"snapshot was created."
msgstr ""
#: ../../sysadmclient.rst:1125
#: ../../sysadmclient.rst:1154
msgid ""
"**Remove:** Used to delete a highlighted snapshot. **This is a permanent "
"change that can not be reversed.** In other words, the versions of files at "
"the point in time the snapshot was created will be lost."
msgstr ""
#: ../../sysadmclient.rst:1130
#: ../../sysadmclient.rst:1159
msgid ""
"**Revert:** If you highlight a snapshot entry, this button and the drop-down"
" menu next to it will activate. You can use the drop-down menu to specify "
@@ -1143,11 +1121,11 @@ msgid ""
" after the snapshot was taken will be lost."
msgstr ""
#: ../../sysadmclient.rst:1142
#: ../../sysadmclient.rst:1171
msgid "Replication Tab"
msgstr ""
#: ../../sysadmclient.rst:1144
#: ../../sysadmclient.rst:1173
msgid ""
"Life Preserver can be configured to replicate snapshots to another system "
"over an encrypted SSH connection, though the backup itself is stored in an "
@@ -1155,13 +1133,13 @@ msgid ""
" another system."
msgstr ""
#: ../../sysadmclient.rst:1149
#: ../../sysadmclient.rst:1178
msgid ""
"In order to configure replication, the remote system to hold a copy of the "
"snapshots must first meet several requirements:"
msgstr ""
#: ../../sysadmclient.rst:1156
#: ../../sysadmclient.rst:1185
msgid ""
"The backup server **must be formatted with the latest version of ZFS,** also"
" known as ZFS feature flags or ZFSv5000. Operating systems that support this"
@@ -1169,14 +1147,14 @@ msgid ""
"FreeNAS 9.1.x or higher."
msgstr ""
#: ../../sysadmclient.rst:1162
#: ../../sysadmclient.rst:1191
msgid ""
"The system must have SSH installed and the SSH service must be running. If "
"the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is"
" already installed, but you will need to start the SSH service."
msgstr ""
#: ../../sysadmclient.rst:1167
#: ../../sysadmclient.rst:1196
msgid ""
"If the backup server is running |trueos| or |pcbsd|, you will need to open "
"TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is "
@@ -1186,7 +1164,7 @@ msgid ""
"backup system, make sure it has a rule to allow SSH."
msgstr ""
#: ../../sysadmclient.rst:1175
#: ../../sysadmclient.rst:1204
msgid ""
":numref:`Figure %s <lpreserver2>` shows the initial :guilabel:`Replication` "
"tab on a system that has not yet been configured for replication. This "
@@ -1194,29 +1172,29 @@ msgid ""
"schedule."
msgstr ""
#: ../../sysadmclient.rst:1186
#: ../../sysadmclient.rst:1215
msgid ""
"To schedule the replication, click :guilabel:`+` to display the \"Setup "
"Replication\" screen shown in :numref:`Figure %s <lpreserver3>`."
msgstr ""
#: ../../sysadmclient.rst:1196
#: ../../sysadmclient.rst:1225
msgid "Input the following information:"
msgstr ""
#: ../../sysadmclient.rst:1198
#: ../../sysadmclient.rst:1227
msgid ""
"**Host IP:** The IP address of the remote system to store the replicated "
"snapshots."
msgstr ""
#: ../../sysadmclient.rst:1201
#: ../../sysadmclient.rst:1230
msgid ""
"**SSH Port:** The port number, if the remote system is running SSH on a port"
" other than the default of 22."
msgstr ""
#: ../../sysadmclient.rst:1204
#: ../../sysadmclient.rst:1233
msgid ""
"**Dataset:** The name of the ZFS pool and optional dataset on the remote "
"system. For example, \"remotetank\" will save the snapshots to a ZFS pool of"
@@ -1224,7 +1202,7 @@ msgid ""
"existing dataset named \"mybackups\" on the pool named \"remotetank\"."
msgstr ""
#: ../../sysadmclient.rst:1210
#: ../../sysadmclient.rst:1239
msgid ""
"**Frequency:** Use the drop-down menu to select how often to initiate the "
"replication. Available choices are :guilabel:`Sync with snapshot` (at the "
@@ -1235,87 +1213,87 @@ msgid ""
":guilabel:`Start`) in this screen."
msgstr ""
#: ../../sysadmclient.rst:1219
#: ../../sysadmclient.rst:1248
msgid ""
"**Username:** The username must already exist on the remote system, have "
"write access to the specified \"Dataset\", and have permission to SSH into "
"that system."
msgstr ""
#: ../../sysadmclient.rst:1223
#: ../../sysadmclient.rst:1252
msgid "**Password:** The password associated with the \"Username\"."
msgstr ""
#: ../../sysadmclient.rst:1225
#: ../../sysadmclient.rst:1254
msgid ""
"**Local DS:** Use the drop-down menu to select the pool or dataset to "
"replicate to the remote system."
msgstr ""
#: ../../sysadmclient.rst:1228
#: ../../sysadmclient.rst:1257
msgid ""
"The buttons at the top of the \"Setup Replication\" screen have several "
"uses:"
msgstr ""
#: ../../sysadmclient.rst:1231
#: ../../sysadmclient.rst:1260
msgid ""
"**+ icon:** Sdd a replication schedule. Multiple schedules are supported, "
"meaning you can replicate to multiple systems or replicate different \"Local"
" DS\" datasets at different times."
msgstr ""
#: ../../sysadmclient.rst:1235
#: ../../sysadmclient.rst:1264
msgid ""
"**- icon:** Remove an already created, and highlighted, replication "
"schedule."
msgstr ""
#: ../../sysadmclient.rst:1238
#: ../../sysadmclient.rst:1267
msgid "**gear icon:** Modify the schedule for the highlighted replication."
msgstr ""
#: ../../sysadmclient.rst:1240
#: ../../sysadmclient.rst:1269
msgid ""
"**Start:** Manually starts a replication to the system specified in the "
"highlighted replication."
msgstr ""
#: ../../sysadmclient.rst:1243
#: ../../sysadmclient.rst:1272
msgid ""
"**Initialize:** Deletes the existing replicated snapshots on the remote "
"system and starts a new replication. This is useful if a replication gets "
"stuck and will not complete."
msgstr ""
#: ../../sysadmclient.rst:1251
#: ../../sysadmclient.rst:1280
msgid "Schedules Tab"
msgstr ""
#: ../../sysadmclient.rst:1253
#: ../../sysadmclient.rst:1282
msgid ""
"This tab is used to manage when snapshots of the ZFS pool are created. "
"Multiple snapshot schedules are supported if the system has multiple pools."
msgstr ""
#: ../../sysadmclient.rst:1257
#: ../../sysadmclient.rst:1286
msgid ""
"Snapshots are created on the entire pool as they are needed when "
":ref:`Restoring the Operating System`."
msgstr ""
#: ../../sysadmclient.rst:1260
#: ../../sysadmclient.rst:1289
msgid ""
"To create a snapshot schedule, click the :guilabel:`camera` icon in the "
"lower left corner of this tab. This will activate the \"Setup Snapshot "
"Schedule\" pane as seen in :numref:`Figure %s <lpreserver4>`."
msgstr ""
#: ../../sysadmclient.rst:1270
#: ../../sysadmclient.rst:1299
msgid "This pane contains several options:"
msgstr ""
#: ../../sysadmclient.rst:1275
#: ../../sysadmclient.rst:1304
msgid ""
"**Snapshots to keep:** Snapshots are automatically pruned after the "
"specified number of snapshots to prevent snapshots from eventually using up "
@@ -1326,7 +1304,7 @@ msgid ""
"manually in the :guilabel:`Snapshots` tab."
msgstr ""
#: ../../sysadmclient.rst:1284
#: ../../sysadmclient.rst:1313
msgid ""
"**Frequency:** Use the drop-down menu to select how often snapshots occur. "
"Options include \"Daily\" (which will allow you to select the time of day), "
@@ -1334,37 +1312,37 @@ msgid ""
"Minutes\"."
msgstr ""
#: ../../sysadmclient.rst:1289
#: ../../sysadmclient.rst:1318
msgid ""
"Once you have created a snapshot schedule, you can use the \"gear\" icon "
"next to the \"camera\" icon to modify the highlighted schedule or the \"X\" "
"icon to delete the highlighted schedule."
msgstr ""
#: ../../sysadmclient.rst:1300
#: ../../sysadmclient.rst:1329
msgid ""
"To schedule when the scrub occurs, click the third icon from the right which"
" will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure "
"%s <lpreserver5>`."
msgstr ""
#: ../../sysadmclient.rst:1318
#: ../../sysadmclient.rst:1347
msgid ""
"Once you have created a scrub schedule, you can use the \"gear\" icon next "
"to the \"schedule scrub\" icon to modify the highlighted schedule or the "
"\"X\" icon to delete the highlighted schedule."
msgstr ""
#: ../../sysadmclient.rst:1328
#: ../../sysadmclient.rst:1357
msgid ""
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <lpreserver6>`."
msgstr ""
#: ../../sysadmclient.rst:1337
#: ../../sysadmclient.rst:1366
msgid "Many settings are configurable:"
msgstr ""
#: ../../sysadmclient.rst:1339
#: ../../sysadmclient.rst:1368
msgid ""
"**Disk Usage Warning:** Enter a number up to 99 to indicate at which "
"percentage of disk space Life Preserver will display an alert in the system "
@@ -1372,41 +1350,41 @@ msgid ""
"space."
msgstr ""
#: ../../sysadmclient.rst:1344
#: ../../sysadmclient.rst:1373
msgid ""
"**Email:** To receive an email when disk usage reaches the percentage "
"configured in the \"Disk Usage Warning\", enter an email address."
msgstr ""
#: ../../sysadmclient.rst:1347
#: ../../sysadmclient.rst:1376
msgid ""
"**Email Trigger:** This setting can be set to \"All\", \"Warn\", or "
"\"Error\" and indicates the type of condition which will trigger an email "
"message."
msgstr ""
#: ../../sysadmclient.rst:1350
#: ../../sysadmclient.rst:1379
msgid "**Recursive Management:**"
msgstr ""
#: ../../sysadmclient.rst:1352
#: ../../sysadmclient.rst:1381
msgid ""
"If you make any changes in this screen, press :guilabel:`Save Settings` to "
"apply them."
msgstr ""
#: ../../sysadmclient.rst:1359
#: ../../sysadmclient.rst:1388
msgid "Using the lpreserver CLI"
msgstr ""
#: ../../sysadmclient.rst:1361
#: ../../sysadmclient.rst:1390
msgid ""
"The :command:`lpreserver` command line utility can also be used to manage "
"snapshots and replication. This command needs to be run as the superuser. To"
" display its usage, type the command without any arguments:"
msgstr ""
#: ../../sysadmclient.rst:1381
#: ../../sysadmclient.rst:1410
msgid ""
"Each command has its own help text that describes its parameters and "
"provides a usage example. For example, to receive help on how to use the "
@@ -1417,104 +1395,104 @@ msgstr ""
msgid "Command Line and GUI Equivalents"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**Command Line**"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**GUI**"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**Description**"
msgstr ""
#: ../../sysadmclient.rst:1452
#: ../../sysadmclient.rst:1481
msgid "**cronsnap**"
msgstr ""
#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499
msgid "\"Snapshots\" tab"
msgstr ""
#: ../../sysadmclient.rst:1452
#: ../../sysadmclient.rst:1481
msgid ""
"schedule when snapshots occur and how long to keep them; the **stop** option"
" can be used to disable snapshot creation"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "**cronscrub**"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "\"Schedules\" tab"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "schedule a ZFS scrub"
msgstr ""
#: ../../sysadmclient.rst:1459
#: ../../sysadmclient.rst:1488
msgid "**get**"
msgstr ""
#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495
msgid "\"Settings\" tab"
msgstr ""
#: ../../sysadmclient.rst:1459
#: ../../sysadmclient.rst:1488
msgid "list Life Preserver options"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid "**replicate**"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid "\"Replication\" tab"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid ""
"used to list, add, and remove backup server; read the **help** for this "
"command for examples"
msgstr ""
#: ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1495
msgid "**set**"
msgstr ""
#: ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1495
msgid ""
"configures Life Preserver options; read **help** for the list of "
"configurable options"
msgstr ""
#: ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1499
msgid "**snapshot**"
msgstr ""
#: ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1499
msgid ""
"create and replicate a new ZFS snapshot; by default, snapshots are "
"recursive, meaning that a that a snapshot is taken of every dataset within a"
" pool"
msgstr ""
#: ../../sysadmclient.rst:1476
#: ../../sysadmclient.rst:1505
msgid "**status**"
msgstr ""
#: ../../sysadmclient.rst:1476
#: ../../sysadmclient.rst:1505
msgid "lists the last snapshot name and replication status"
msgstr ""
#: ../../sysadmclient.rst:1483
#: ../../sysadmclient.rst:1512
msgid "Restoring the Operating System"
msgstr ""
#: ../../sysadmclient.rst:1485
#: ../../sysadmclient.rst:1514
msgid ""
"If you have replicated the system's snapshots to a remote backup server, you"
" can use a |trueos| installation media to perform an operating system "
@@ -1522,7 +1500,7 @@ msgid ""
"you get to the screen shown in :numref:`Figure %s <restore1>`."
msgstr ""
#: ../../sysadmclient.rst:1497
#: ../../sysadmclient.rst:1526
msgid ""
"Before you can perform a restore, the network interface must be configured. "
"Click :guilabel:`Network Connectivity` (second icon from the left) in order "
@@ -1533,7 +1511,7 @@ msgid ""
"continuing."
msgstr ""
#: ../../sysadmclient.rst:1505
#: ../../sysadmclient.rst:1534
msgid ""
"Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and"
" :guilabel:`Next`. This will start the Restore Wizard. In the screen shown "
@@ -1543,7 +1521,7 @@ msgid ""
"number."
msgstr ""
#: ../../sysadmclient.rst:1519
#: ../../sysadmclient.rst:1548
msgid ""
"Click :guilabel:`Next` and the wizard will provide a summary of your "
"selections. If correct, click :guilabel:`Finish`; otherwise, click "
@@ -1626,7 +1604,7 @@ msgid ""
"press :guilabel:`Close Ports`."
msgstr ""
#: ../../sysadmclient.rst:1152
#: ../../sysadmclient.rst:1181
msgid ""
"Snapshots occurring too frequently can introduce errors in replication. To "
"avoid errors, ensure snapshots are configured to take place slower than the "
@@ -1685,7 +1663,7 @@ msgid ""
"accounts."
msgstr ""
#: ../../sysadmclient.rst:1065
#: ../../sysadmclient.rst:1094
msgid ""
"A snapshot provides a \"point-in-time\" image of the ZFS pool. This is "
"similar to a full system backup as the snapshot contains the information for"
@@ -1703,26 +1681,26 @@ msgid ""
"snapshot."
msgstr ""
#: ../../sysadmclient.rst:1272
#: ../../sysadmclient.rst:1301
msgid ""
"**Storage Pool:** Select the ZFS storage pool that contains the datasets "
"that you wish to snapshot."
msgstr ""
#: ../../sysadmclient.rst:1293
#: ../../sysadmclient.rst:1322
msgid ""
"This screen can also be used to manage the ZFS scrub schedule. Scrubs are "
"recommended as they can provide an early indication of a potential disk "
"failure. Scrubs can be scheduled on a per-pool basis."
msgstr ""
#: ../../sysadmclient.rst:1297
#: ../../sysadmclient.rst:1326
msgid ""
"If you have multiple pools, be sure to create a scrub schedule for each "
"pool."
msgstr ""
#: ../../sysadmclient.rst:1310
#: ../../sysadmclient.rst:1339
msgid ""
"Select the pool from the :guilabel:`Storage Pool` drop-down menu, then "
"select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", "
@@ -1807,26 +1785,17 @@ msgstr ""
msgid ": Viewing All Accounts and Their Details"
msgstr ""
#: ../../sysadmclient.rst:930
#: ../../sysadmclient.rst:938
msgid ": Initialize PersonaCrypt Device"
msgstr ""
#: ../../sysadmclient.rst:932
msgid ""
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
"Note this section is hidden if the currently logged in user is selected. "
"Also, if you have just created a user and do not see these options, click "
":guilabel:`Save` then re-highlight the user to display these options:"
msgstr ""
#: ../../sysadmclient.rst:947
#: ../../sysadmclient.rst:955
msgid ""
"To prepare a PersonaCrypt device for this user, insert a USB stick and click"
" :guilabel:`Initialize Device`."
msgstr ""
#: ../../sysadmclient.rst:957
#: ../../sysadmclient.rst:965
msgid ""
"Type a password to associate with the device. Click :guilabel:`Save` to "
"initialize the device. The User Manager may take a moment to prepare the "
@@ -1834,49 +1803,49 @@ msgid ""
" to allow removal of PersonaCrypt."
msgstr ""
#: ../../sysadmclient.rst:1027
#: ../../sysadmclient.rst:1056
msgid ": Managing Groups Using User Manager"
msgstr ""
#: ../../sysadmclient.rst:1110
#: ../../sysadmclient.rst:1139
msgid ": Snapshot Tab"
msgstr ""
#: ../../sysadmclient.rst:1184
#: ../../sysadmclient.rst:1213
msgid ": Replication Tab"
msgstr ""
#: ../../sysadmclient.rst:1194
#: ../../sysadmclient.rst:1223
msgid ": Scheduling a Replication"
msgstr ""
#: ../../sysadmclient.rst:1268
#: ../../sysadmclient.rst:1297
msgid ": Scheduling a Snapshot"
msgstr ""
#: ../../sysadmclient.rst:1308
#: ../../sysadmclient.rst:1337
msgid ": Scheduling a Scrub"
msgstr ""
#: ../../sysadmclient.rst:1335
#: ../../sysadmclient.rst:1364
msgid ": Life Preserver Settings"
msgstr ""
#: ../../sysadmclient.rst:1442
#: ../../sysadmclient.rst:1471
msgid ""
":numref:`Table %s <cmdgui>` shows the command line equivalents to the "
"graphical options provided by the Life Preserver GUI."
msgstr ""
#: ../../sysadmclient.rst:1495
#: ../../sysadmclient.rst:1524
msgid ": Selecting to Restore/Clone From Backup"
msgstr ""
#: ../../sysadmclient.rst:1517
#: ../../sysadmclient.rst:1546
msgid ": Input the Information for a SSH Restore"
msgstr ""
#: ../../sysadmclient.rst:1523
#: ../../sysadmclient.rst:1552
msgid ""
"Once the connection to the backup server succeeds, you will be able to "
"select which host to restore. After making your selection, click "
@@ -1892,7 +1861,7 @@ msgid ""
":guilabel:`Next` to perform the restore."
msgstr ""
#: ../../sysadmclient.rst:987
#: ../../sysadmclient.rst:970
msgid ""
"Once a user has been initialized for PersonaCrypt on the system, their user "
"account will no longer be displayed when logging in, **unless** their "
@@ -1901,7 +1870,7 @@ msgid ""
":numref:`Figure %s <troslogin5>`."
msgstr ""
#: ../../sysadmclient.rst:997
#: ../../sysadmclient.rst:980
msgid ": |trueos| Login Screen with PersonaCrypt"
msgstr ""
@@ -1949,7 +1918,7 @@ msgstr ""
msgid ": |sysadm| Task Manager"
msgstr ""
#: ../../sysadmclient.rst:1103
#: ../../sysadmclient.rst:1132
msgid ""
":numref:`Figure %s <lpreserver1>` shows the :guilabel:`Snapshots` tab on a "
"system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"."
@@ -2013,6 +1982,134 @@ msgid ""
":guilabel:`Save Settings`."
msgstr ""
#: ../../sysadmclient.rst:894
msgid ""
"|trueos| provides support for a security feature known as PersonaCrypt. A "
"PersonaCrypt device is a removable USB media, such as a USB flash drive, "
"formatted with ZFS and encrypted with either GELI or PEFS. This device is "
"used to hold a specific user's home directory, meaning they can securely "
"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 "
"or higher system. For example, this can be used to securely access one's "
"home directory from a laptop, home computer, and work computer. The device "
"is protected by an encryption key and a different (recommended) password "
"separate from the user's login password."
msgstr ""
#: ../../sysadmclient.rst:916
msgid "GELI"
msgstr ""
#: ../../sysadmclient.rst:918
msgid ""
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
"your passphrase, and the other being a key stored on disk. Without both of "
"these parts, the media cannot be decrypted. This means if somebody steals "
"the key and manages to get your password, it is still worthless without the "
"system it was paired with. GELI is used by default in |trueos| as it is more"
" fully featured over PEFS."
msgstr ""
#: ../../sysadmclient.rst:940
msgid ""
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
"buttons are available in the :guilabel:`PersonaCrypt` tab of "
":guilabel:`Advanced Mode`. Note this section is hidden if the currently "
"logged in user is selected. Also, if you have just created a user and do not"
" see these options, click :guilabel:`Save`, then re-highlight the user to "
"display these options:"
msgstr ""
#: ../../sysadmclient.rst:999
msgid "PEFS"
msgstr ""
#: ../../sysadmclient.rst:1001
msgid ""
"`PEFS <http://pefs.io/>`_ stands for Private Encrypted File System. It is "
"open source software freely available under the BSD license, and is included"
" in |trueos| by default. PEFS runs on top of any existing file system, "
"providing an encryption layer independent of the underlying file system. "
"PersonaCrypt can be configured to use PEFS in place of GELI, which "
"eliminates the need for external media, as the encrypted PEFS database is "
"stored on the local disk."
msgstr ""
#: ../../sysadmclient.rst:1009
msgid ""
"While PEFS does not use a USB drive, be sure to print or otherwise backup "
"the PEFS generated key fragment stored on the disk."
msgstr ""
#: ../../sysadmclient.rst:1012
msgid "**Initialize PEFS with the Command Line**"
msgstr ""
#: ../../sysadmclient.rst:1014
msgid ""
"Because PEFS does not use a USB drive with its encryption, the user will "
"need a password file (pfile) containing the desired password, **before** "
"initializing PEFS for a user account. Once this pfile is created, enabling "
"PEFS through PersonaCrypt is accomplished in a CLI with "
":command:`personacrypt init <username> <pfile> PEFS`."
msgstr ""
#: ../../sysadmclient.rst:1020
msgid ""
"For example, the user account **test** has a pfile named "
":file:`testpfile.txt`, which contains the single text string of **test's** "
"chosen password. Next, the administrator adds PEFS encryption to the "
"**test** acount by opening a CLI, logging in as root, and typing:"
msgstr ""
#: ../../sysadmclient.rst:1029
msgid ""
"PersonaCrypt will initialize the account **test** with PEFS, using the "
"string in :file:`testpfile.txt` as the new password."
msgstr ""
#: ../../sysadmclient.rst:1032
msgid ""
"The |sysadm| User Manager can also initialize a user account with PEFS by "
"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` "
"drop down menu of the :guilabel:`PersonaCrypt` tab."
msgstr ""
#: ../../sysadmclient.rst:1036
msgid ""
"In addition to initializing an account with PEFS, PersonaCrypt also supports"
" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt "
"export <username>` and :command:`personacrypt import <keyfile>`, "
"respectively."
msgstr ""
#~ msgid ""
#~ "|trueos| provides support for a security feature known as PersonaCrypt. A "
#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
#~ " with ZFS and encrypted with GELI. This device is used to hold a specific "
#~ "user's home directory, meaning they can securely transport and access their "
#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
#~ "example, this can be used to securely access one's home directory from a "
#~ "laptop, home computer, and work computer. The device is protected by an "
#~ "encryption key and a password which is, and should be, separate from the "
#~ "user's login password."
#~ msgstr ""
#~ msgid ""
#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being "
#~ "your passphrase, and the other being a key stored on disk. Without both of "
#~ "these parts, the media cannot be decrypted. This means if somebody steals "
#~ "the key and manages to get your password, it is still worthless without the "
#~ "system it was paired with."
#~ msgstr ""
#~ msgid ""
#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two "
#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
#~ "Note this section is hidden if the currently logged in user is selected. "
#~ "Also, if you have just created a user and do not see these options, click "
#~ ":guilabel:`Save` then re-highlight the user to display these options:"
#~ msgstr ""
#~ msgid ""
#~ "**Max Boot Environments:** |trueos| automatically creates a boot environment"
#~ " before updating any software, the operating system, or applying a system "

View File

@@ -482,7 +482,7 @@ msgid ""
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <update4>`."
msgstr ""
#: ../../sysadmclient.rst:1326
#: ../../sysadmclient.rst:1355
msgid "Settings Tab"
msgstr ""
@@ -924,20 +924,7 @@ msgstr ""
msgid "PersonaCrypt"
msgstr ""
#: ../../sysadmclient.rst:894
msgid ""
"|trueos| provides support for a security feature known as PersonaCrypt. A "
"PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
" with ZFS and encrypted with GELI. This device is used to hold a specific "
"user's home directory, meaning they can securely transport and access their "
"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
"example, this can be used to securely access one's home directory from a "
"laptop, home computer, and work computer. The device is protected by an "
"encryption key and a password which is, and should be, separate from the "
"user's login password."
msgstr ""
#: ../../sysadmclient.rst:904
#: ../../sysadmclient.rst:905
msgid ""
"When a user is configured to use a PersonaCrypt device, that user can not "
"login using an unencrypted session on the same system. In other words, the "
@@ -946,22 +933,13 @@ msgid ""
"different user accounts, one for each type of session."
msgstr ""
#: ../../sysadmclient.rst:911
msgid ""
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
"your passphrase, and the other being a key stored on disk. Without both of "
"these parts, the media cannot be decrypted. This means if somebody steals "
"the key and manages to get your password, it is still worthless without the "
"system it was paired with."
msgstr ""
#: ../../sysadmclient.rst:917
#: ../../sysadmclient.rst:925
msgid ""
"USB devices do eventually fail. Always backup any important files stored on "
"the PersonaCrypt device to another device or system."
msgstr ""
#: ../../sysadmclient.rst:920
#: ../../sysadmclient.rst:928
msgid ""
"The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt "
"device for any login user, **except** for the currently logged in user. In "
@@ -969,13 +947,13 @@ msgid ""
"*dlavigne*, has been created and the entry for the user has been clicked."
msgstr ""
#: ../../sysadmclient.rst:939
#: ../../sysadmclient.rst:947
msgid ""
"**Initialize Device:** Used to prepare the USB device which will be used as "
"the user's home directory."
msgstr ""
#: ../../sysadmclient.rst:942
#: ../../sysadmclient.rst:950
msgid ""
"**Import Key:** If the user has already created a PersonaCrypt device on "
"another |trueos| system, click this button to import a previously saved copy"
@@ -983,7 +961,7 @@ msgid ""
"can now login to this computer using PersonaCrypt."
msgstr ""
#: ../../sysadmclient.rst:950
#: ../../sysadmclient.rst:958
msgid ""
"Since the USB stick will hold the user's home directory and files, ensure "
"the stick is large enough to meet the anticipated storage needs of the home "
@@ -993,7 +971,7 @@ msgid ""
"logged in."
msgstr ""
#: ../../sysadmclient.rst:999
#: ../../sysadmclient.rst:982
msgid ""
"When stealth sessions have been configured, PersonaCrypt users will still be"
" displayed in the login menu, even if their USB device is not inserted. This"
@@ -1001,47 +979,47 @@ msgid ""
"session."
msgstr ""
#: ../../sysadmclient.rst:1004
#: ../../sysadmclient.rst:987
msgid ""
"In the field with the yellow padlock icon, input the password for the user "
"account. In the field with the grey USB stick icon, input the password "
"associated with the PersonaCrypt device."
msgstr ""
#: ../../sysadmclient.rst:1008
#: ../../sysadmclient.rst:991
msgid ""
"To prevent data corruption and freezing the system **DO NOT** remove the "
"PersonaCrypt device while logged in! Always log out of your session before "
"physically removing the device."
msgstr ""
#: ../../sysadmclient.rst:1016
#: ../../sysadmclient.rst:1045
msgid "Managing Groups"
msgstr ""
#: ../../sysadmclient.rst:1018
#: ../../sysadmclient.rst:1047
msgid ""
"Click the :guilabel:`Groups` tab to view and manage the groups on the "
"system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s <user4>`, "
"shows the group membership for the *operator* and *wheel* groups:"
msgstr ""
#: ../../sysadmclient.rst:1029
#: ../../sysadmclient.rst:1058
msgid "This screen has 2 columns:"
msgstr ""
#: ../../sysadmclient.rst:1031
#: ../../sysadmclient.rst:1060
msgid ""
"**Members:** Indicates if the highlighted group contains any user accounts."
msgstr ""
#: ../../sysadmclient.rst:1034
#: ../../sysadmclient.rst:1063
msgid ""
"**Available:** Shows all of the system and user accounts on the system in "
"alphabetical order."
msgstr ""
#: ../../sysadmclient.rst:1037
#: ../../sysadmclient.rst:1066
msgid ""
"To add an account to a group, highlight the group name, then highlight the "
"account name in the :guilabel:`Available` column. Click the left arrow and "
@@ -1051,7 +1029,7 @@ msgid ""
"added to a group."
msgstr ""
#: ../../sysadmclient.rst:1044
#: ../../sysadmclient.rst:1073
msgid ""
"If you add a user to the *operator* group, they will have permission to use "
"commands requiring administrative access and will be prompted for their own "
@@ -1060,15 +1038,15 @@ msgid ""
"will be prompted for the superuser password whenever they use the command."
msgstr ""
#: ../../sysadmclient.rst:1051
#: ../../sysadmclient.rst:1080
msgid "To view all of the groups on the system, click :guilabel:`Advanced`."
msgstr ""
#: ../../sysadmclient.rst:1057
#: ../../sysadmclient.rst:1086
msgid "Life Preserver"
msgstr ""
#: ../../sysadmclient.rst:1059
#: ../../sysadmclient.rst:1088
msgid ""
"The Life Preserver utility is designed to take full advantage of the "
"functionality provided by ZFS snapshots. This utility allows you to schedule"
@@ -1077,25 +1055,25 @@ msgid ""
"benefits:"
msgstr ""
#: ../../sysadmclient.rst:1081
#: ../../sysadmclient.rst:1110
msgid ""
"Replication is an efficient way to keep the files on two systems in sync. "
"With Life Preserver, the snapshots taken on the |trueos| system will be "
"synchronized with their versions stored on the specified backup server."
msgstr ""
#: ../../sysadmclient.rst:1086
#: ../../sysadmclient.rst:1115
msgid "Snapshots are sent to the backup server over an encrypted connection."
msgstr ""
#: ../../sysadmclient.rst:1088
#: ../../sysadmclient.rst:1117
msgid ""
"Having a copy of the snapshots on another system makes it possible to "
"perform an operating system restore should the |trueos| system become "
"unusable or to deploy an identical system to different hardware."
msgstr ""
#: ../../sysadmclient.rst:1092
#: ../../sysadmclient.rst:1121
msgid ""
"To manage snapshots and replication using the |sysadm| graphical client, go "
"to :menuselection:`Utilities --> Life Preserver`. The rest of this section "
@@ -1103,16 +1081,16 @@ msgid ""
"Preserver."
msgstr ""
#: ../../sysadmclient.rst:1101
#: ../../sysadmclient.rst:1130
msgid "Snapshots Tab"
msgstr ""
#: ../../sysadmclient.rst:1112
#: ../../sysadmclient.rst:1141
msgid ""
"This screen will display any created snapshots and provides buttons to:"
msgstr ""
#: ../../sysadmclient.rst:1114
#: ../../sysadmclient.rst:1143
msgid ""
"**Create:** Used to create a manual snapshot of the specified pool now. For "
"example, you could create a snapshot before making changes to an important "
@@ -1126,14 +1104,14 @@ msgid ""
"snapshot was created."
msgstr ""
#: ../../sysadmclient.rst:1125
#: ../../sysadmclient.rst:1154
msgid ""
"**Remove:** Used to delete a highlighted snapshot. **This is a permanent "
"change that can not be reversed.** In other words, the versions of files at "
"the point in time the snapshot was created will be lost."
msgstr ""
#: ../../sysadmclient.rst:1130
#: ../../sysadmclient.rst:1159
msgid ""
"**Revert:** If you highlight a snapshot entry, this button and the drop-down"
" menu next to it will activate. You can use the drop-down menu to specify "
@@ -1143,11 +1121,11 @@ msgid ""
" after the snapshot was taken will be lost."
msgstr ""
#: ../../sysadmclient.rst:1142
#: ../../sysadmclient.rst:1171
msgid "Replication Tab"
msgstr ""
#: ../../sysadmclient.rst:1144
#: ../../sysadmclient.rst:1173
msgid ""
"Life Preserver can be configured to replicate snapshots to another system "
"over an encrypted SSH connection, though the backup itself is stored in an "
@@ -1155,13 +1133,13 @@ msgid ""
" another system."
msgstr ""
#: ../../sysadmclient.rst:1149
#: ../../sysadmclient.rst:1178
msgid ""
"In order to configure replication, the remote system to hold a copy of the "
"snapshots must first meet several requirements:"
msgstr ""
#: ../../sysadmclient.rst:1156
#: ../../sysadmclient.rst:1185
msgid ""
"The backup server **must be formatted with the latest version of ZFS,** also"
" known as ZFS feature flags or ZFSv5000. Operating systems that support this"
@@ -1169,14 +1147,14 @@ msgid ""
"FreeNAS 9.1.x or higher."
msgstr ""
#: ../../sysadmclient.rst:1162
#: ../../sysadmclient.rst:1191
msgid ""
"The system must have SSH installed and the SSH service must be running. If "
"the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is"
" already installed, but you will need to start the SSH service."
msgstr ""
#: ../../sysadmclient.rst:1167
#: ../../sysadmclient.rst:1196
msgid ""
"If the backup server is running |trueos| or |pcbsd|, you will need to open "
"TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is "
@@ -1186,7 +1164,7 @@ msgid ""
"backup system, make sure it has a rule to allow SSH."
msgstr ""
#: ../../sysadmclient.rst:1175
#: ../../sysadmclient.rst:1204
msgid ""
":numref:`Figure %s <lpreserver2>` shows the initial :guilabel:`Replication` "
"tab on a system that has not yet been configured for replication. This "
@@ -1194,29 +1172,29 @@ msgid ""
"schedule."
msgstr ""
#: ../../sysadmclient.rst:1186
#: ../../sysadmclient.rst:1215
msgid ""
"To schedule the replication, click :guilabel:`+` to display the \"Setup "
"Replication\" screen shown in :numref:`Figure %s <lpreserver3>`."
msgstr ""
#: ../../sysadmclient.rst:1196
#: ../../sysadmclient.rst:1225
msgid "Input the following information:"
msgstr ""
#: ../../sysadmclient.rst:1198
#: ../../sysadmclient.rst:1227
msgid ""
"**Host IP:** The IP address of the remote system to store the replicated "
"snapshots."
msgstr ""
#: ../../sysadmclient.rst:1201
#: ../../sysadmclient.rst:1230
msgid ""
"**SSH Port:** The port number, if the remote system is running SSH on a port"
" other than the default of 22."
msgstr ""
#: ../../sysadmclient.rst:1204
#: ../../sysadmclient.rst:1233
msgid ""
"**Dataset:** The name of the ZFS pool and optional dataset on the remote "
"system. For example, \"remotetank\" will save the snapshots to a ZFS pool of"
@@ -1224,7 +1202,7 @@ msgid ""
"existing dataset named \"mybackups\" on the pool named \"remotetank\"."
msgstr ""
#: ../../sysadmclient.rst:1210
#: ../../sysadmclient.rst:1239
msgid ""
"**Frequency:** Use the drop-down menu to select how often to initiate the "
"replication. Available choices are :guilabel:`Sync with snapshot` (at the "
@@ -1235,87 +1213,87 @@ msgid ""
":guilabel:`Start`) in this screen."
msgstr ""
#: ../../sysadmclient.rst:1219
#: ../../sysadmclient.rst:1248
msgid ""
"**Username:** The username must already exist on the remote system, have "
"write access to the specified \"Dataset\", and have permission to SSH into "
"that system."
msgstr ""
#: ../../sysadmclient.rst:1223
#: ../../sysadmclient.rst:1252
msgid "**Password:** The password associated with the \"Username\"."
msgstr ""
#: ../../sysadmclient.rst:1225
#: ../../sysadmclient.rst:1254
msgid ""
"**Local DS:** Use the drop-down menu to select the pool or dataset to "
"replicate to the remote system."
msgstr ""
#: ../../sysadmclient.rst:1228
#: ../../sysadmclient.rst:1257
msgid ""
"The buttons at the top of the \"Setup Replication\" screen have several "
"uses:"
msgstr ""
#: ../../sysadmclient.rst:1231
#: ../../sysadmclient.rst:1260
msgid ""
"**+ icon:** Sdd a replication schedule. Multiple schedules are supported, "
"meaning you can replicate to multiple systems or replicate different \"Local"
" DS\" datasets at different times."
msgstr ""
#: ../../sysadmclient.rst:1235
#: ../../sysadmclient.rst:1264
msgid ""
"**- icon:** Remove an already created, and highlighted, replication "
"schedule."
msgstr ""
#: ../../sysadmclient.rst:1238
#: ../../sysadmclient.rst:1267
msgid "**gear icon:** Modify the schedule for the highlighted replication."
msgstr ""
#: ../../sysadmclient.rst:1240
#: ../../sysadmclient.rst:1269
msgid ""
"**Start:** Manually starts a replication to the system specified in the "
"highlighted replication."
msgstr ""
#: ../../sysadmclient.rst:1243
#: ../../sysadmclient.rst:1272
msgid ""
"**Initialize:** Deletes the existing replicated snapshots on the remote "
"system and starts a new replication. This is useful if a replication gets "
"stuck and will not complete."
msgstr ""
#: ../../sysadmclient.rst:1251
#: ../../sysadmclient.rst:1280
msgid "Schedules Tab"
msgstr ""
#: ../../sysadmclient.rst:1253
#: ../../sysadmclient.rst:1282
msgid ""
"This tab is used to manage when snapshots of the ZFS pool are created. "
"Multiple snapshot schedules are supported if the system has multiple pools."
msgstr ""
#: ../../sysadmclient.rst:1257
#: ../../sysadmclient.rst:1286
msgid ""
"Snapshots are created on the entire pool as they are needed when "
":ref:`Restoring the Operating System`."
msgstr ""
#: ../../sysadmclient.rst:1260
#: ../../sysadmclient.rst:1289
msgid ""
"To create a snapshot schedule, click the :guilabel:`camera` icon in the "
"lower left corner of this tab. This will activate the \"Setup Snapshot "
"Schedule\" pane as seen in :numref:`Figure %s <lpreserver4>`."
msgstr ""
#: ../../sysadmclient.rst:1270
#: ../../sysadmclient.rst:1299
msgid "This pane contains several options:"
msgstr ""
#: ../../sysadmclient.rst:1275
#: ../../sysadmclient.rst:1304
msgid ""
"**Snapshots to keep:** Snapshots are automatically pruned after the "
"specified number of snapshots to prevent snapshots from eventually using up "
@@ -1326,7 +1304,7 @@ msgid ""
"manually in the :guilabel:`Snapshots` tab."
msgstr ""
#: ../../sysadmclient.rst:1284
#: ../../sysadmclient.rst:1313
msgid ""
"**Frequency:** Use the drop-down menu to select how often snapshots occur. "
"Options include \"Daily\" (which will allow you to select the time of day), "
@@ -1334,37 +1312,37 @@ msgid ""
"Minutes\"."
msgstr ""
#: ../../sysadmclient.rst:1289
#: ../../sysadmclient.rst:1318
msgid ""
"Once you have created a snapshot schedule, you can use the \"gear\" icon "
"next to the \"camera\" icon to modify the highlighted schedule or the \"X\" "
"icon to delete the highlighted schedule."
msgstr ""
#: ../../sysadmclient.rst:1300
#: ../../sysadmclient.rst:1329
msgid ""
"To schedule when the scrub occurs, click the third icon from the right which"
" will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure "
"%s <lpreserver5>`."
msgstr ""
#: ../../sysadmclient.rst:1318
#: ../../sysadmclient.rst:1347
msgid ""
"Once you have created a scrub schedule, you can use the \"gear\" icon next "
"to the \"schedule scrub\" icon to modify the highlighted schedule or the "
"\"X\" icon to delete the highlighted schedule."
msgstr ""
#: ../../sysadmclient.rst:1328
#: ../../sysadmclient.rst:1357
msgid ""
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <lpreserver6>`."
msgstr ""
#: ../../sysadmclient.rst:1337
#: ../../sysadmclient.rst:1366
msgid "Many settings are configurable:"
msgstr ""
#: ../../sysadmclient.rst:1339
#: ../../sysadmclient.rst:1368
msgid ""
"**Disk Usage Warning:** Enter a number up to 99 to indicate at which "
"percentage of disk space Life Preserver will display an alert in the system "
@@ -1372,41 +1350,41 @@ msgid ""
"space."
msgstr ""
#: ../../sysadmclient.rst:1344
#: ../../sysadmclient.rst:1373
msgid ""
"**Email:** To receive an email when disk usage reaches the percentage "
"configured in the \"Disk Usage Warning\", enter an email address."
msgstr ""
#: ../../sysadmclient.rst:1347
#: ../../sysadmclient.rst:1376
msgid ""
"**Email Trigger:** This setting can be set to \"All\", \"Warn\", or "
"\"Error\" and indicates the type of condition which will trigger an email "
"message."
msgstr ""
#: ../../sysadmclient.rst:1350
#: ../../sysadmclient.rst:1379
msgid "**Recursive Management:**"
msgstr ""
#: ../../sysadmclient.rst:1352
#: ../../sysadmclient.rst:1381
msgid ""
"If you make any changes in this screen, press :guilabel:`Save Settings` to "
"apply them."
msgstr ""
#: ../../sysadmclient.rst:1359
#: ../../sysadmclient.rst:1388
msgid "Using the lpreserver CLI"
msgstr ""
#: ../../sysadmclient.rst:1361
#: ../../sysadmclient.rst:1390
msgid ""
"The :command:`lpreserver` command line utility can also be used to manage "
"snapshots and replication. This command needs to be run as the superuser. To"
" display its usage, type the command without any arguments:"
msgstr ""
#: ../../sysadmclient.rst:1381
#: ../../sysadmclient.rst:1410
msgid ""
"Each command has its own help text that describes its parameters and "
"provides a usage example. For example, to receive help on how to use the "
@@ -1417,104 +1395,104 @@ msgstr ""
msgid "Command Line and GUI Equivalents"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**Command Line**"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**GUI**"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**Description**"
msgstr ""
#: ../../sysadmclient.rst:1452
#: ../../sysadmclient.rst:1481
msgid "**cronsnap**"
msgstr ""
#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499
msgid "\"Snapshots\" tab"
msgstr ""
#: ../../sysadmclient.rst:1452
#: ../../sysadmclient.rst:1481
msgid ""
"schedule when snapshots occur and how long to keep them; the **stop** option"
" can be used to disable snapshot creation"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "**cronscrub**"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "\"Schedules\" tab"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "schedule a ZFS scrub"
msgstr ""
#: ../../sysadmclient.rst:1459
#: ../../sysadmclient.rst:1488
msgid "**get**"
msgstr ""
#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495
msgid "\"Settings\" tab"
msgstr ""
#: ../../sysadmclient.rst:1459
#: ../../sysadmclient.rst:1488
msgid "list Life Preserver options"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid "**replicate**"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid "\"Replication\" tab"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid ""
"used to list, add, and remove backup server; read the **help** for this "
"command for examples"
msgstr ""
#: ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1495
msgid "**set**"
msgstr ""
#: ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1495
msgid ""
"configures Life Preserver options; read **help** for the list of "
"configurable options"
msgstr ""
#: ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1499
msgid "**snapshot**"
msgstr ""
#: ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1499
msgid ""
"create and replicate a new ZFS snapshot; by default, snapshots are "
"recursive, meaning that a that a snapshot is taken of every dataset within a"
" pool"
msgstr ""
#: ../../sysadmclient.rst:1476
#: ../../sysadmclient.rst:1505
msgid "**status**"
msgstr ""
#: ../../sysadmclient.rst:1476
#: ../../sysadmclient.rst:1505
msgid "lists the last snapshot name and replication status"
msgstr ""
#: ../../sysadmclient.rst:1483
#: ../../sysadmclient.rst:1512
msgid "Restoring the Operating System"
msgstr ""
#: ../../sysadmclient.rst:1485
#: ../../sysadmclient.rst:1514
msgid ""
"If you have replicated the system's snapshots to a remote backup server, you"
" can use a |trueos| installation media to perform an operating system "
@@ -1522,7 +1500,7 @@ msgid ""
"you get to the screen shown in :numref:`Figure %s <restore1>`."
msgstr ""
#: ../../sysadmclient.rst:1497
#: ../../sysadmclient.rst:1526
msgid ""
"Before you can perform a restore, the network interface must be configured. "
"Click :guilabel:`Network Connectivity` (second icon from the left) in order "
@@ -1533,7 +1511,7 @@ msgid ""
"continuing."
msgstr ""
#: ../../sysadmclient.rst:1505
#: ../../sysadmclient.rst:1534
msgid ""
"Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and"
" :guilabel:`Next`. This will start the Restore Wizard. In the screen shown "
@@ -1543,7 +1521,7 @@ msgid ""
"number."
msgstr ""
#: ../../sysadmclient.rst:1519
#: ../../sysadmclient.rst:1548
msgid ""
"Click :guilabel:`Next` and the wizard will provide a summary of your "
"selections. If correct, click :guilabel:`Finish`; otherwise, click "
@@ -1626,7 +1604,7 @@ msgid ""
"press :guilabel:`Close Ports`."
msgstr ""
#: ../../sysadmclient.rst:1152
#: ../../sysadmclient.rst:1181
msgid ""
"Snapshots occurring too frequently can introduce errors in replication. To "
"avoid errors, ensure snapshots are configured to take place slower than the "
@@ -1685,7 +1663,7 @@ msgid ""
"accounts."
msgstr ""
#: ../../sysadmclient.rst:1065
#: ../../sysadmclient.rst:1094
msgid ""
"A snapshot provides a \"point-in-time\" image of the ZFS pool. This is "
"similar to a full system backup as the snapshot contains the information for"
@@ -1703,26 +1681,26 @@ msgid ""
"snapshot."
msgstr ""
#: ../../sysadmclient.rst:1272
#: ../../sysadmclient.rst:1301
msgid ""
"**Storage Pool:** Select the ZFS storage pool that contains the datasets "
"that you wish to snapshot."
msgstr ""
#: ../../sysadmclient.rst:1293
#: ../../sysadmclient.rst:1322
msgid ""
"This screen can also be used to manage the ZFS scrub schedule. Scrubs are "
"recommended as they can provide an early indication of a potential disk "
"failure. Scrubs can be scheduled on a per-pool basis."
msgstr ""
#: ../../sysadmclient.rst:1297
#: ../../sysadmclient.rst:1326
msgid ""
"If you have multiple pools, be sure to create a scrub schedule for each "
"pool."
msgstr ""
#: ../../sysadmclient.rst:1310
#: ../../sysadmclient.rst:1339
msgid ""
"Select the pool from the :guilabel:`Storage Pool` drop-down menu, then "
"select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", "
@@ -1807,26 +1785,17 @@ msgstr ""
msgid ": Viewing All Accounts and Their Details"
msgstr ""
#: ../../sysadmclient.rst:930
#: ../../sysadmclient.rst:938
msgid ": Initialize PersonaCrypt Device"
msgstr ""
#: ../../sysadmclient.rst:932
msgid ""
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
"Note this section is hidden if the currently logged in user is selected. "
"Also, if you have just created a user and do not see these options, click "
":guilabel:`Save` then re-highlight the user to display these options:"
msgstr ""
#: ../../sysadmclient.rst:947
#: ../../sysadmclient.rst:955
msgid ""
"To prepare a PersonaCrypt device for this user, insert a USB stick and click"
" :guilabel:`Initialize Device`."
msgstr ""
#: ../../sysadmclient.rst:957
#: ../../sysadmclient.rst:965
msgid ""
"Type a password to associate with the device. Click :guilabel:`Save` to "
"initialize the device. The User Manager may take a moment to prepare the "
@@ -1834,49 +1803,49 @@ msgid ""
" to allow removal of PersonaCrypt."
msgstr ""
#: ../../sysadmclient.rst:1027
#: ../../sysadmclient.rst:1056
msgid ": Managing Groups Using User Manager"
msgstr ""
#: ../../sysadmclient.rst:1110
#: ../../sysadmclient.rst:1139
msgid ": Snapshot Tab"
msgstr ""
#: ../../sysadmclient.rst:1184
#: ../../sysadmclient.rst:1213
msgid ": Replication Tab"
msgstr ""
#: ../../sysadmclient.rst:1194
#: ../../sysadmclient.rst:1223
msgid ": Scheduling a Replication"
msgstr ""
#: ../../sysadmclient.rst:1268
#: ../../sysadmclient.rst:1297
msgid ": Scheduling a Snapshot"
msgstr ""
#: ../../sysadmclient.rst:1308
#: ../../sysadmclient.rst:1337
msgid ": Scheduling a Scrub"
msgstr ""
#: ../../sysadmclient.rst:1335
#: ../../sysadmclient.rst:1364
msgid ": Life Preserver Settings"
msgstr ""
#: ../../sysadmclient.rst:1442
#: ../../sysadmclient.rst:1471
msgid ""
":numref:`Table %s <cmdgui>` shows the command line equivalents to the "
"graphical options provided by the Life Preserver GUI."
msgstr ""
#: ../../sysadmclient.rst:1495
#: ../../sysadmclient.rst:1524
msgid ": Selecting to Restore/Clone From Backup"
msgstr ""
#: ../../sysadmclient.rst:1517
#: ../../sysadmclient.rst:1546
msgid ": Input the Information for a SSH Restore"
msgstr ""
#: ../../sysadmclient.rst:1523
#: ../../sysadmclient.rst:1552
msgid ""
"Once the connection to the backup server succeeds, you will be able to "
"select which host to restore. After making your selection, click "
@@ -1892,7 +1861,7 @@ msgid ""
":guilabel:`Next` to perform the restore."
msgstr ""
#: ../../sysadmclient.rst:987
#: ../../sysadmclient.rst:970
msgid ""
"Once a user has been initialized for PersonaCrypt on the system, their user "
"account will no longer be displayed when logging in, **unless** their "
@@ -1901,7 +1870,7 @@ msgid ""
":numref:`Figure %s <troslogin5>`."
msgstr ""
#: ../../sysadmclient.rst:997
#: ../../sysadmclient.rst:980
msgid ": |trueos| Login Screen with PersonaCrypt"
msgstr ""
@@ -1949,7 +1918,7 @@ msgstr ""
msgid ": |sysadm| Task Manager"
msgstr ""
#: ../../sysadmclient.rst:1103
#: ../../sysadmclient.rst:1132
msgid ""
":numref:`Figure %s <lpreserver1>` shows the :guilabel:`Snapshots` tab on a "
"system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"."
@@ -2013,6 +1982,134 @@ msgid ""
":guilabel:`Save Settings`."
msgstr ""
#: ../../sysadmclient.rst:894
msgid ""
"|trueos| provides support for a security feature known as PersonaCrypt. A "
"PersonaCrypt device is a removable USB media, such as a USB flash drive, "
"formatted with ZFS and encrypted with either GELI or PEFS. This device is "
"used to hold a specific user's home directory, meaning they can securely "
"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 "
"or higher system. For example, this can be used to securely access one's "
"home directory from a laptop, home computer, and work computer. The device "
"is protected by an encryption key and a different (recommended) password "
"separate from the user's login password."
msgstr ""
#: ../../sysadmclient.rst:916
msgid "GELI"
msgstr ""
#: ../../sysadmclient.rst:918
msgid ""
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
"your passphrase, and the other being a key stored on disk. Without both of "
"these parts, the media cannot be decrypted. This means if somebody steals "
"the key and manages to get your password, it is still worthless without the "
"system it was paired with. GELI is used by default in |trueos| as it is more"
" fully featured over PEFS."
msgstr ""
#: ../../sysadmclient.rst:940
msgid ""
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
"buttons are available in the :guilabel:`PersonaCrypt` tab of "
":guilabel:`Advanced Mode`. Note this section is hidden if the currently "
"logged in user is selected. Also, if you have just created a user and do not"
" see these options, click :guilabel:`Save`, then re-highlight the user to "
"display these options:"
msgstr ""
#: ../../sysadmclient.rst:999
msgid "PEFS"
msgstr ""
#: ../../sysadmclient.rst:1001
msgid ""
"`PEFS <http://pefs.io/>`_ stands for Private Encrypted File System. It is "
"open source software freely available under the BSD license, and is included"
" in |trueos| by default. PEFS runs on top of any existing file system, "
"providing an encryption layer independent of the underlying file system. "
"PersonaCrypt can be configured to use PEFS in place of GELI, which "
"eliminates the need for external media, as the encrypted PEFS database is "
"stored on the local disk."
msgstr ""
#: ../../sysadmclient.rst:1009
msgid ""
"While PEFS does not use a USB drive, be sure to print or otherwise backup "
"the PEFS generated key fragment stored on the disk."
msgstr ""
#: ../../sysadmclient.rst:1012
msgid "**Initialize PEFS with the Command Line**"
msgstr ""
#: ../../sysadmclient.rst:1014
msgid ""
"Because PEFS does not use a USB drive with its encryption, the user will "
"need a password file (pfile) containing the desired password, **before** "
"initializing PEFS for a user account. Once this pfile is created, enabling "
"PEFS through PersonaCrypt is accomplished in a CLI with "
":command:`personacrypt init <username> <pfile> PEFS`."
msgstr ""
#: ../../sysadmclient.rst:1020
msgid ""
"For example, the user account **test** has a pfile named "
":file:`testpfile.txt`, which contains the single text string of **test's** "
"chosen password. Next, the administrator adds PEFS encryption to the "
"**test** acount by opening a CLI, logging in as root, and typing:"
msgstr ""
#: ../../sysadmclient.rst:1029
msgid ""
"PersonaCrypt will initialize the account **test** with PEFS, using the "
"string in :file:`testpfile.txt` as the new password."
msgstr ""
#: ../../sysadmclient.rst:1032
msgid ""
"The |sysadm| User Manager can also initialize a user account with PEFS by "
"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` "
"drop down menu of the :guilabel:`PersonaCrypt` tab."
msgstr ""
#: ../../sysadmclient.rst:1036
msgid ""
"In addition to initializing an account with PEFS, PersonaCrypt also supports"
" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt "
"export <username>` and :command:`personacrypt import <keyfile>`, "
"respectively."
msgstr ""
#~ msgid ""
#~ "|trueos| provides support for a security feature known as PersonaCrypt. A "
#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
#~ " with ZFS and encrypted with GELI. This device is used to hold a specific "
#~ "user's home directory, meaning they can securely transport and access their "
#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
#~ "example, this can be used to securely access one's home directory from a "
#~ "laptop, home computer, and work computer. The device is protected by an "
#~ "encryption key and a password which is, and should be, separate from the "
#~ "user's login password."
#~ msgstr ""
#~ msgid ""
#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being "
#~ "your passphrase, and the other being a key stored on disk. Without both of "
#~ "these parts, the media cannot be decrypted. This means if somebody steals "
#~ "the key and manages to get your password, it is still worthless without the "
#~ "system it was paired with."
#~ msgstr ""
#~ msgid ""
#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two "
#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
#~ "Note this section is hidden if the currently logged in user is selected. "
#~ "Also, if you have just created a user and do not see these options, click "
#~ ":guilabel:`Save` then re-highlight the user to display these options:"
#~ msgstr ""
#~ msgid ""
#~ "**Max Boot Environments:** |trueos| automatically creates a boot environment"
#~ " before updating any software, the operating system, or applying a system "

View File

@@ -482,7 +482,7 @@ msgid ""
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <update4>`."
msgstr ""
#: ../../sysadmclient.rst:1326
#: ../../sysadmclient.rst:1355
msgid "Settings Tab"
msgstr ""
@@ -924,20 +924,7 @@ msgstr ""
msgid "PersonaCrypt"
msgstr ""
#: ../../sysadmclient.rst:894
msgid ""
"|trueos| provides support for a security feature known as PersonaCrypt. A "
"PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
" with ZFS and encrypted with GELI. This device is used to hold a specific "
"user's home directory, meaning they can securely transport and access their "
"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
"example, this can be used to securely access one's home directory from a "
"laptop, home computer, and work computer. The device is protected by an "
"encryption key and a password which is, and should be, separate from the "
"user's login password."
msgstr ""
#: ../../sysadmclient.rst:904
#: ../../sysadmclient.rst:905
msgid ""
"When a user is configured to use a PersonaCrypt device, that user can not "
"login using an unencrypted session on the same system. In other words, the "
@@ -946,22 +933,13 @@ msgid ""
"different user accounts, one for each type of session."
msgstr ""
#: ../../sysadmclient.rst:911
msgid ""
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
"your passphrase, and the other being a key stored on disk. Without both of "
"these parts, the media cannot be decrypted. This means if somebody steals "
"the key and manages to get your password, it is still worthless without the "
"system it was paired with."
msgstr ""
#: ../../sysadmclient.rst:917
#: ../../sysadmclient.rst:925
msgid ""
"USB devices do eventually fail. Always backup any important files stored on "
"the PersonaCrypt device to another device or system."
msgstr ""
#: ../../sysadmclient.rst:920
#: ../../sysadmclient.rst:928
msgid ""
"The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt "
"device for any login user, **except** for the currently logged in user. In "
@@ -969,13 +947,13 @@ msgid ""
"*dlavigne*, has been created and the entry for the user has been clicked."
msgstr ""
#: ../../sysadmclient.rst:939
#: ../../sysadmclient.rst:947
msgid ""
"**Initialize Device:** Used to prepare the USB device which will be used as "
"the user's home directory."
msgstr ""
#: ../../sysadmclient.rst:942
#: ../../sysadmclient.rst:950
msgid ""
"**Import Key:** If the user has already created a PersonaCrypt device on "
"another |trueos| system, click this button to import a previously saved copy"
@@ -983,7 +961,7 @@ msgid ""
"can now login to this computer using PersonaCrypt."
msgstr ""
#: ../../sysadmclient.rst:950
#: ../../sysadmclient.rst:958
msgid ""
"Since the USB stick will hold the user's home directory and files, ensure "
"the stick is large enough to meet the anticipated storage needs of the home "
@@ -993,7 +971,7 @@ msgid ""
"logged in."
msgstr ""
#: ../../sysadmclient.rst:999
#: ../../sysadmclient.rst:982
msgid ""
"When stealth sessions have been configured, PersonaCrypt users will still be"
" displayed in the login menu, even if their USB device is not inserted. This"
@@ -1001,47 +979,47 @@ msgid ""
"session."
msgstr ""
#: ../../sysadmclient.rst:1004
#: ../../sysadmclient.rst:987
msgid ""
"In the field with the yellow padlock icon, input the password for the user "
"account. In the field with the grey USB stick icon, input the password "
"associated with the PersonaCrypt device."
msgstr ""
#: ../../sysadmclient.rst:1008
#: ../../sysadmclient.rst:991
msgid ""
"To prevent data corruption and freezing the system **DO NOT** remove the "
"PersonaCrypt device while logged in! Always log out of your session before "
"physically removing the device."
msgstr ""
#: ../../sysadmclient.rst:1016
#: ../../sysadmclient.rst:1045
msgid "Managing Groups"
msgstr ""
#: ../../sysadmclient.rst:1018
#: ../../sysadmclient.rst:1047
msgid ""
"Click the :guilabel:`Groups` tab to view and manage the groups on the "
"system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s <user4>`, "
"shows the group membership for the *operator* and *wheel* groups:"
msgstr ""
#: ../../sysadmclient.rst:1029
#: ../../sysadmclient.rst:1058
msgid "This screen has 2 columns:"
msgstr ""
#: ../../sysadmclient.rst:1031
#: ../../sysadmclient.rst:1060
msgid ""
"**Members:** Indicates if the highlighted group contains any user accounts."
msgstr ""
#: ../../sysadmclient.rst:1034
#: ../../sysadmclient.rst:1063
msgid ""
"**Available:** Shows all of the system and user accounts on the system in "
"alphabetical order."
msgstr ""
#: ../../sysadmclient.rst:1037
#: ../../sysadmclient.rst:1066
msgid ""
"To add an account to a group, highlight the group name, then highlight the "
"account name in the :guilabel:`Available` column. Click the left arrow and "
@@ -1051,7 +1029,7 @@ msgid ""
"added to a group."
msgstr ""
#: ../../sysadmclient.rst:1044
#: ../../sysadmclient.rst:1073
msgid ""
"If you add a user to the *operator* group, they will have permission to use "
"commands requiring administrative access and will be prompted for their own "
@@ -1060,15 +1038,15 @@ msgid ""
"will be prompted for the superuser password whenever they use the command."
msgstr ""
#: ../../sysadmclient.rst:1051
#: ../../sysadmclient.rst:1080
msgid "To view all of the groups on the system, click :guilabel:`Advanced`."
msgstr ""
#: ../../sysadmclient.rst:1057
#: ../../sysadmclient.rst:1086
msgid "Life Preserver"
msgstr ""
#: ../../sysadmclient.rst:1059
#: ../../sysadmclient.rst:1088
msgid ""
"The Life Preserver utility is designed to take full advantage of the "
"functionality provided by ZFS snapshots. This utility allows you to schedule"
@@ -1077,25 +1055,25 @@ msgid ""
"benefits:"
msgstr ""
#: ../../sysadmclient.rst:1081
#: ../../sysadmclient.rst:1110
msgid ""
"Replication is an efficient way to keep the files on two systems in sync. "
"With Life Preserver, the snapshots taken on the |trueos| system will be "
"synchronized with their versions stored on the specified backup server."
msgstr ""
#: ../../sysadmclient.rst:1086
#: ../../sysadmclient.rst:1115
msgid "Snapshots are sent to the backup server over an encrypted connection."
msgstr ""
#: ../../sysadmclient.rst:1088
#: ../../sysadmclient.rst:1117
msgid ""
"Having a copy of the snapshots on another system makes it possible to "
"perform an operating system restore should the |trueos| system become "
"unusable or to deploy an identical system to different hardware."
msgstr ""
#: ../../sysadmclient.rst:1092
#: ../../sysadmclient.rst:1121
msgid ""
"To manage snapshots and replication using the |sysadm| graphical client, go "
"to :menuselection:`Utilities --> Life Preserver`. The rest of this section "
@@ -1103,16 +1081,16 @@ msgid ""
"Preserver."
msgstr ""
#: ../../sysadmclient.rst:1101
#: ../../sysadmclient.rst:1130
msgid "Snapshots Tab"
msgstr ""
#: ../../sysadmclient.rst:1112
#: ../../sysadmclient.rst:1141
msgid ""
"This screen will display any created snapshots and provides buttons to:"
msgstr ""
#: ../../sysadmclient.rst:1114
#: ../../sysadmclient.rst:1143
msgid ""
"**Create:** Used to create a manual snapshot of the specified pool now. For "
"example, you could create a snapshot before making changes to an important "
@@ -1126,14 +1104,14 @@ msgid ""
"snapshot was created."
msgstr ""
#: ../../sysadmclient.rst:1125
#: ../../sysadmclient.rst:1154
msgid ""
"**Remove:** Used to delete a highlighted snapshot. **This is a permanent "
"change that can not be reversed.** In other words, the versions of files at "
"the point in time the snapshot was created will be lost."
msgstr ""
#: ../../sysadmclient.rst:1130
#: ../../sysadmclient.rst:1159
msgid ""
"**Revert:** If you highlight a snapshot entry, this button and the drop-down"
" menu next to it will activate. You can use the drop-down menu to specify "
@@ -1143,11 +1121,11 @@ msgid ""
" after the snapshot was taken will be lost."
msgstr ""
#: ../../sysadmclient.rst:1142
#: ../../sysadmclient.rst:1171
msgid "Replication Tab"
msgstr ""
#: ../../sysadmclient.rst:1144
#: ../../sysadmclient.rst:1173
msgid ""
"Life Preserver can be configured to replicate snapshots to another system "
"over an encrypted SSH connection, though the backup itself is stored in an "
@@ -1155,13 +1133,13 @@ msgid ""
" another system."
msgstr ""
#: ../../sysadmclient.rst:1149
#: ../../sysadmclient.rst:1178
msgid ""
"In order to configure replication, the remote system to hold a copy of the "
"snapshots must first meet several requirements:"
msgstr ""
#: ../../sysadmclient.rst:1156
#: ../../sysadmclient.rst:1185
msgid ""
"The backup server **must be formatted with the latest version of ZFS,** also"
" known as ZFS feature flags or ZFSv5000. Operating systems that support this"
@@ -1169,14 +1147,14 @@ msgid ""
"FreeNAS 9.1.x or higher."
msgstr ""
#: ../../sysadmclient.rst:1162
#: ../../sysadmclient.rst:1191
msgid ""
"The system must have SSH installed and the SSH service must be running. If "
"the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is"
" already installed, but you will need to start the SSH service."
msgstr ""
#: ../../sysadmclient.rst:1167
#: ../../sysadmclient.rst:1196
msgid ""
"If the backup server is running |trueos| or |pcbsd|, you will need to open "
"TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is "
@@ -1186,7 +1164,7 @@ msgid ""
"backup system, make sure it has a rule to allow SSH."
msgstr ""
#: ../../sysadmclient.rst:1175
#: ../../sysadmclient.rst:1204
msgid ""
":numref:`Figure %s <lpreserver2>` shows the initial :guilabel:`Replication` "
"tab on a system that has not yet been configured for replication. This "
@@ -1194,29 +1172,29 @@ msgid ""
"schedule."
msgstr ""
#: ../../sysadmclient.rst:1186
#: ../../sysadmclient.rst:1215
msgid ""
"To schedule the replication, click :guilabel:`+` to display the \"Setup "
"Replication\" screen shown in :numref:`Figure %s <lpreserver3>`."
msgstr ""
#: ../../sysadmclient.rst:1196
#: ../../sysadmclient.rst:1225
msgid "Input the following information:"
msgstr ""
#: ../../sysadmclient.rst:1198
#: ../../sysadmclient.rst:1227
msgid ""
"**Host IP:** The IP address of the remote system to store the replicated "
"snapshots."
msgstr ""
#: ../../sysadmclient.rst:1201
#: ../../sysadmclient.rst:1230
msgid ""
"**SSH Port:** The port number, if the remote system is running SSH on a port"
" other than the default of 22."
msgstr ""
#: ../../sysadmclient.rst:1204
#: ../../sysadmclient.rst:1233
msgid ""
"**Dataset:** The name of the ZFS pool and optional dataset on the remote "
"system. For example, \"remotetank\" will save the snapshots to a ZFS pool of"
@@ -1224,7 +1202,7 @@ msgid ""
"existing dataset named \"mybackups\" on the pool named \"remotetank\"."
msgstr ""
#: ../../sysadmclient.rst:1210
#: ../../sysadmclient.rst:1239
msgid ""
"**Frequency:** Use the drop-down menu to select how often to initiate the "
"replication. Available choices are :guilabel:`Sync with snapshot` (at the "
@@ -1235,87 +1213,87 @@ msgid ""
":guilabel:`Start`) in this screen."
msgstr ""
#: ../../sysadmclient.rst:1219
#: ../../sysadmclient.rst:1248
msgid ""
"**Username:** The username must already exist on the remote system, have "
"write access to the specified \"Dataset\", and have permission to SSH into "
"that system."
msgstr ""
#: ../../sysadmclient.rst:1223
#: ../../sysadmclient.rst:1252
msgid "**Password:** The password associated with the \"Username\"."
msgstr ""
#: ../../sysadmclient.rst:1225
#: ../../sysadmclient.rst:1254
msgid ""
"**Local DS:** Use the drop-down menu to select the pool or dataset to "
"replicate to the remote system."
msgstr ""
#: ../../sysadmclient.rst:1228
#: ../../sysadmclient.rst:1257
msgid ""
"The buttons at the top of the \"Setup Replication\" screen have several "
"uses:"
msgstr ""
#: ../../sysadmclient.rst:1231
#: ../../sysadmclient.rst:1260
msgid ""
"**+ icon:** Sdd a replication schedule. Multiple schedules are supported, "
"meaning you can replicate to multiple systems or replicate different \"Local"
" DS\" datasets at different times."
msgstr ""
#: ../../sysadmclient.rst:1235
#: ../../sysadmclient.rst:1264
msgid ""
"**- icon:** Remove an already created, and highlighted, replication "
"schedule."
msgstr ""
#: ../../sysadmclient.rst:1238
#: ../../sysadmclient.rst:1267
msgid "**gear icon:** Modify the schedule for the highlighted replication."
msgstr ""
#: ../../sysadmclient.rst:1240
#: ../../sysadmclient.rst:1269
msgid ""
"**Start:** Manually starts a replication to the system specified in the "
"highlighted replication."
msgstr ""
#: ../../sysadmclient.rst:1243
#: ../../sysadmclient.rst:1272
msgid ""
"**Initialize:** Deletes the existing replicated snapshots on the remote "
"system and starts a new replication. This is useful if a replication gets "
"stuck and will not complete."
msgstr ""
#: ../../sysadmclient.rst:1251
#: ../../sysadmclient.rst:1280
msgid "Schedules Tab"
msgstr ""
#: ../../sysadmclient.rst:1253
#: ../../sysadmclient.rst:1282
msgid ""
"This tab is used to manage when snapshots of the ZFS pool are created. "
"Multiple snapshot schedules are supported if the system has multiple pools."
msgstr ""
#: ../../sysadmclient.rst:1257
#: ../../sysadmclient.rst:1286
msgid ""
"Snapshots are created on the entire pool as they are needed when "
":ref:`Restoring the Operating System`."
msgstr ""
#: ../../sysadmclient.rst:1260
#: ../../sysadmclient.rst:1289
msgid ""
"To create a snapshot schedule, click the :guilabel:`camera` icon in the "
"lower left corner of this tab. This will activate the \"Setup Snapshot "
"Schedule\" pane as seen in :numref:`Figure %s <lpreserver4>`."
msgstr ""
#: ../../sysadmclient.rst:1270
#: ../../sysadmclient.rst:1299
msgid "This pane contains several options:"
msgstr ""
#: ../../sysadmclient.rst:1275
#: ../../sysadmclient.rst:1304
msgid ""
"**Snapshots to keep:** Snapshots are automatically pruned after the "
"specified number of snapshots to prevent snapshots from eventually using up "
@@ -1326,7 +1304,7 @@ msgid ""
"manually in the :guilabel:`Snapshots` tab."
msgstr ""
#: ../../sysadmclient.rst:1284
#: ../../sysadmclient.rst:1313
msgid ""
"**Frequency:** Use the drop-down menu to select how often snapshots occur. "
"Options include \"Daily\" (which will allow you to select the time of day), "
@@ -1334,37 +1312,37 @@ msgid ""
"Minutes\"."
msgstr ""
#: ../../sysadmclient.rst:1289
#: ../../sysadmclient.rst:1318
msgid ""
"Once you have created a snapshot schedule, you can use the \"gear\" icon "
"next to the \"camera\" icon to modify the highlighted schedule or the \"X\" "
"icon to delete the highlighted schedule."
msgstr ""
#: ../../sysadmclient.rst:1300
#: ../../sysadmclient.rst:1329
msgid ""
"To schedule when the scrub occurs, click the third icon from the right which"
" will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure "
"%s <lpreserver5>`."
msgstr ""
#: ../../sysadmclient.rst:1318
#: ../../sysadmclient.rst:1347
msgid ""
"Once you have created a scrub schedule, you can use the \"gear\" icon next "
"to the \"schedule scrub\" icon to modify the highlighted schedule or the "
"\"X\" icon to delete the highlighted schedule."
msgstr ""
#: ../../sysadmclient.rst:1328
#: ../../sysadmclient.rst:1357
msgid ""
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <lpreserver6>`."
msgstr ""
#: ../../sysadmclient.rst:1337
#: ../../sysadmclient.rst:1366
msgid "Many settings are configurable:"
msgstr ""
#: ../../sysadmclient.rst:1339
#: ../../sysadmclient.rst:1368
msgid ""
"**Disk Usage Warning:** Enter a number up to 99 to indicate at which "
"percentage of disk space Life Preserver will display an alert in the system "
@@ -1372,41 +1350,41 @@ msgid ""
"space."
msgstr ""
#: ../../sysadmclient.rst:1344
#: ../../sysadmclient.rst:1373
msgid ""
"**Email:** To receive an email when disk usage reaches the percentage "
"configured in the \"Disk Usage Warning\", enter an email address."
msgstr ""
#: ../../sysadmclient.rst:1347
#: ../../sysadmclient.rst:1376
msgid ""
"**Email Trigger:** This setting can be set to \"All\", \"Warn\", or "
"\"Error\" and indicates the type of condition which will trigger an email "
"message."
msgstr ""
#: ../../sysadmclient.rst:1350
#: ../../sysadmclient.rst:1379
msgid "**Recursive Management:**"
msgstr ""
#: ../../sysadmclient.rst:1352
#: ../../sysadmclient.rst:1381
msgid ""
"If you make any changes in this screen, press :guilabel:`Save Settings` to "
"apply them."
msgstr ""
#: ../../sysadmclient.rst:1359
#: ../../sysadmclient.rst:1388
msgid "Using the lpreserver CLI"
msgstr ""
#: ../../sysadmclient.rst:1361
#: ../../sysadmclient.rst:1390
msgid ""
"The :command:`lpreserver` command line utility can also be used to manage "
"snapshots and replication. This command needs to be run as the superuser. To"
" display its usage, type the command without any arguments:"
msgstr ""
#: ../../sysadmclient.rst:1381
#: ../../sysadmclient.rst:1410
msgid ""
"Each command has its own help text that describes its parameters and "
"provides a usage example. For example, to receive help on how to use the "
@@ -1417,104 +1395,104 @@ msgstr ""
msgid "Command Line and GUI Equivalents"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**Command Line**"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**GUI**"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**Description**"
msgstr ""
#: ../../sysadmclient.rst:1452
#: ../../sysadmclient.rst:1481
msgid "**cronsnap**"
msgstr ""
#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499
msgid "\"Snapshots\" tab"
msgstr ""
#: ../../sysadmclient.rst:1452
#: ../../sysadmclient.rst:1481
msgid ""
"schedule when snapshots occur and how long to keep them; the **stop** option"
" can be used to disable snapshot creation"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "**cronscrub**"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "\"Schedules\" tab"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "schedule a ZFS scrub"
msgstr ""
#: ../../sysadmclient.rst:1459
#: ../../sysadmclient.rst:1488
msgid "**get**"
msgstr ""
#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495
msgid "\"Settings\" tab"
msgstr ""
#: ../../sysadmclient.rst:1459
#: ../../sysadmclient.rst:1488
msgid "list Life Preserver options"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid "**replicate**"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid "\"Replication\" tab"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid ""
"used to list, add, and remove backup server; read the **help** for this "
"command for examples"
msgstr ""
#: ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1495
msgid "**set**"
msgstr ""
#: ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1495
msgid ""
"configures Life Preserver options; read **help** for the list of "
"configurable options"
msgstr ""
#: ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1499
msgid "**snapshot**"
msgstr ""
#: ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1499
msgid ""
"create and replicate a new ZFS snapshot; by default, snapshots are "
"recursive, meaning that a that a snapshot is taken of every dataset within a"
" pool"
msgstr ""
#: ../../sysadmclient.rst:1476
#: ../../sysadmclient.rst:1505
msgid "**status**"
msgstr ""
#: ../../sysadmclient.rst:1476
#: ../../sysadmclient.rst:1505
msgid "lists the last snapshot name and replication status"
msgstr ""
#: ../../sysadmclient.rst:1483
#: ../../sysadmclient.rst:1512
msgid "Restoring the Operating System"
msgstr ""
#: ../../sysadmclient.rst:1485
#: ../../sysadmclient.rst:1514
msgid ""
"If you have replicated the system's snapshots to a remote backup server, you"
" can use a |trueos| installation media to perform an operating system "
@@ -1522,7 +1500,7 @@ msgid ""
"you get to the screen shown in :numref:`Figure %s <restore1>`."
msgstr ""
#: ../../sysadmclient.rst:1497
#: ../../sysadmclient.rst:1526
msgid ""
"Before you can perform a restore, the network interface must be configured. "
"Click :guilabel:`Network Connectivity` (second icon from the left) in order "
@@ -1533,7 +1511,7 @@ msgid ""
"continuing."
msgstr ""
#: ../../sysadmclient.rst:1505
#: ../../sysadmclient.rst:1534
msgid ""
"Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and"
" :guilabel:`Next`. This will start the Restore Wizard. In the screen shown "
@@ -1543,7 +1521,7 @@ msgid ""
"number."
msgstr ""
#: ../../sysadmclient.rst:1519
#: ../../sysadmclient.rst:1548
msgid ""
"Click :guilabel:`Next` and the wizard will provide a summary of your "
"selections. If correct, click :guilabel:`Finish`; otherwise, click "
@@ -1626,7 +1604,7 @@ msgid ""
"press :guilabel:`Close Ports`."
msgstr ""
#: ../../sysadmclient.rst:1152
#: ../../sysadmclient.rst:1181
msgid ""
"Snapshots occurring too frequently can introduce errors in replication. To "
"avoid errors, ensure snapshots are configured to take place slower than the "
@@ -1685,7 +1663,7 @@ msgid ""
"accounts."
msgstr ""
#: ../../sysadmclient.rst:1065
#: ../../sysadmclient.rst:1094
msgid ""
"A snapshot provides a \"point-in-time\" image of the ZFS pool. This is "
"similar to a full system backup as the snapshot contains the information for"
@@ -1703,26 +1681,26 @@ msgid ""
"snapshot."
msgstr ""
#: ../../sysadmclient.rst:1272
#: ../../sysadmclient.rst:1301
msgid ""
"**Storage Pool:** Select the ZFS storage pool that contains the datasets "
"that you wish to snapshot."
msgstr ""
#: ../../sysadmclient.rst:1293
#: ../../sysadmclient.rst:1322
msgid ""
"This screen can also be used to manage the ZFS scrub schedule. Scrubs are "
"recommended as they can provide an early indication of a potential disk "
"failure. Scrubs can be scheduled on a per-pool basis."
msgstr ""
#: ../../sysadmclient.rst:1297
#: ../../sysadmclient.rst:1326
msgid ""
"If you have multiple pools, be sure to create a scrub schedule for each "
"pool."
msgstr ""
#: ../../sysadmclient.rst:1310
#: ../../sysadmclient.rst:1339
msgid ""
"Select the pool from the :guilabel:`Storage Pool` drop-down menu, then "
"select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", "
@@ -1807,26 +1785,17 @@ msgstr ""
msgid ": Viewing All Accounts and Their Details"
msgstr ""
#: ../../sysadmclient.rst:930
#: ../../sysadmclient.rst:938
msgid ": Initialize PersonaCrypt Device"
msgstr ""
#: ../../sysadmclient.rst:932
msgid ""
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
"Note this section is hidden if the currently logged in user is selected. "
"Also, if you have just created a user and do not see these options, click "
":guilabel:`Save` then re-highlight the user to display these options:"
msgstr ""
#: ../../sysadmclient.rst:947
#: ../../sysadmclient.rst:955
msgid ""
"To prepare a PersonaCrypt device for this user, insert a USB stick and click"
" :guilabel:`Initialize Device`."
msgstr ""
#: ../../sysadmclient.rst:957
#: ../../sysadmclient.rst:965
msgid ""
"Type a password to associate with the device. Click :guilabel:`Save` to "
"initialize the device. The User Manager may take a moment to prepare the "
@@ -1834,49 +1803,49 @@ msgid ""
" to allow removal of PersonaCrypt."
msgstr ""
#: ../../sysadmclient.rst:1027
#: ../../sysadmclient.rst:1056
msgid ": Managing Groups Using User Manager"
msgstr ""
#: ../../sysadmclient.rst:1110
#: ../../sysadmclient.rst:1139
msgid ": Snapshot Tab"
msgstr ""
#: ../../sysadmclient.rst:1184
#: ../../sysadmclient.rst:1213
msgid ": Replication Tab"
msgstr ""
#: ../../sysadmclient.rst:1194
#: ../../sysadmclient.rst:1223
msgid ": Scheduling a Replication"
msgstr ""
#: ../../sysadmclient.rst:1268
#: ../../sysadmclient.rst:1297
msgid ": Scheduling a Snapshot"
msgstr ""
#: ../../sysadmclient.rst:1308
#: ../../sysadmclient.rst:1337
msgid ": Scheduling a Scrub"
msgstr ""
#: ../../sysadmclient.rst:1335
#: ../../sysadmclient.rst:1364
msgid ": Life Preserver Settings"
msgstr ""
#: ../../sysadmclient.rst:1442
#: ../../sysadmclient.rst:1471
msgid ""
":numref:`Table %s <cmdgui>` shows the command line equivalents to the "
"graphical options provided by the Life Preserver GUI."
msgstr ""
#: ../../sysadmclient.rst:1495
#: ../../sysadmclient.rst:1524
msgid ": Selecting to Restore/Clone From Backup"
msgstr ""
#: ../../sysadmclient.rst:1517
#: ../../sysadmclient.rst:1546
msgid ": Input the Information for a SSH Restore"
msgstr ""
#: ../../sysadmclient.rst:1523
#: ../../sysadmclient.rst:1552
msgid ""
"Once the connection to the backup server succeeds, you will be able to "
"select which host to restore. After making your selection, click "
@@ -1892,7 +1861,7 @@ msgid ""
":guilabel:`Next` to perform the restore."
msgstr ""
#: ../../sysadmclient.rst:987
#: ../../sysadmclient.rst:970
msgid ""
"Once a user has been initialized for PersonaCrypt on the system, their user "
"account will no longer be displayed when logging in, **unless** their "
@@ -1901,7 +1870,7 @@ msgid ""
":numref:`Figure %s <troslogin5>`."
msgstr ""
#: ../../sysadmclient.rst:997
#: ../../sysadmclient.rst:980
msgid ": |trueos| Login Screen with PersonaCrypt"
msgstr ""
@@ -1949,7 +1918,7 @@ msgstr ""
msgid ": |sysadm| Task Manager"
msgstr ""
#: ../../sysadmclient.rst:1103
#: ../../sysadmclient.rst:1132
msgid ""
":numref:`Figure %s <lpreserver1>` shows the :guilabel:`Snapshots` tab on a "
"system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"."
@@ -2013,6 +1982,134 @@ msgid ""
":guilabel:`Save Settings`."
msgstr ""
#: ../../sysadmclient.rst:894
msgid ""
"|trueos| provides support for a security feature known as PersonaCrypt. A "
"PersonaCrypt device is a removable USB media, such as a USB flash drive, "
"formatted with ZFS and encrypted with either GELI or PEFS. This device is "
"used to hold a specific user's home directory, meaning they can securely "
"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 "
"or higher system. For example, this can be used to securely access one's "
"home directory from a laptop, home computer, and work computer. The device "
"is protected by an encryption key and a different (recommended) password "
"separate from the user's login password."
msgstr ""
#: ../../sysadmclient.rst:916
msgid "GELI"
msgstr ""
#: ../../sysadmclient.rst:918
msgid ""
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
"your passphrase, and the other being a key stored on disk. Without both of "
"these parts, the media cannot be decrypted. This means if somebody steals "
"the key and manages to get your password, it is still worthless without the "
"system it was paired with. GELI is used by default in |trueos| as it is more"
" fully featured over PEFS."
msgstr ""
#: ../../sysadmclient.rst:940
msgid ""
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
"buttons are available in the :guilabel:`PersonaCrypt` tab of "
":guilabel:`Advanced Mode`. Note this section is hidden if the currently "
"logged in user is selected. Also, if you have just created a user and do not"
" see these options, click :guilabel:`Save`, then re-highlight the user to "
"display these options:"
msgstr ""
#: ../../sysadmclient.rst:999
msgid "PEFS"
msgstr ""
#: ../../sysadmclient.rst:1001
msgid ""
"`PEFS <http://pefs.io/>`_ stands for Private Encrypted File System. It is "
"open source software freely available under the BSD license, and is included"
" in |trueos| by default. PEFS runs on top of any existing file system, "
"providing an encryption layer independent of the underlying file system. "
"PersonaCrypt can be configured to use PEFS in place of GELI, which "
"eliminates the need for external media, as the encrypted PEFS database is "
"stored on the local disk."
msgstr ""
#: ../../sysadmclient.rst:1009
msgid ""
"While PEFS does not use a USB drive, be sure to print or otherwise backup "
"the PEFS generated key fragment stored on the disk."
msgstr ""
#: ../../sysadmclient.rst:1012
msgid "**Initialize PEFS with the Command Line**"
msgstr ""
#: ../../sysadmclient.rst:1014
msgid ""
"Because PEFS does not use a USB drive with its encryption, the user will "
"need a password file (pfile) containing the desired password, **before** "
"initializing PEFS for a user account. Once this pfile is created, enabling "
"PEFS through PersonaCrypt is accomplished in a CLI with "
":command:`personacrypt init <username> <pfile> PEFS`."
msgstr ""
#: ../../sysadmclient.rst:1020
msgid ""
"For example, the user account **test** has a pfile named "
":file:`testpfile.txt`, which contains the single text string of **test's** "
"chosen password. Next, the administrator adds PEFS encryption to the "
"**test** acount by opening a CLI, logging in as root, and typing:"
msgstr ""
#: ../../sysadmclient.rst:1029
msgid ""
"PersonaCrypt will initialize the account **test** with PEFS, using the "
"string in :file:`testpfile.txt` as the new password."
msgstr ""
#: ../../sysadmclient.rst:1032
msgid ""
"The |sysadm| User Manager can also initialize a user account with PEFS by "
"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` "
"drop down menu of the :guilabel:`PersonaCrypt` tab."
msgstr ""
#: ../../sysadmclient.rst:1036
msgid ""
"In addition to initializing an account with PEFS, PersonaCrypt also supports"
" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt "
"export <username>` and :command:`personacrypt import <keyfile>`, "
"respectively."
msgstr ""
#~ msgid ""
#~ "|trueos| provides support for a security feature known as PersonaCrypt. A "
#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
#~ " with ZFS and encrypted with GELI. This device is used to hold a specific "
#~ "user's home directory, meaning they can securely transport and access their "
#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
#~ "example, this can be used to securely access one's home directory from a "
#~ "laptop, home computer, and work computer. The device is protected by an "
#~ "encryption key and a password which is, and should be, separate from the "
#~ "user's login password."
#~ msgstr ""
#~ msgid ""
#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being "
#~ "your passphrase, and the other being a key stored on disk. Without both of "
#~ "these parts, the media cannot be decrypted. This means if somebody steals "
#~ "the key and manages to get your password, it is still worthless without the "
#~ "system it was paired with."
#~ msgstr ""
#~ msgid ""
#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two "
#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
#~ "Note this section is hidden if the currently logged in user is selected. "
#~ "Also, if you have just created a user and do not see these options, click "
#~ ":guilabel:`Save` then re-highlight the user to display these options:"
#~ msgstr ""
#~ msgid ""
#~ "**Max Boot Environments:** |trueos| automatically creates a boot environment"
#~ " before updating any software, the operating system, or applying a system "

View File

@@ -482,7 +482,7 @@ msgid ""
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <update4>`."
msgstr ""
#: ../../sysadmclient.rst:1326
#: ../../sysadmclient.rst:1355
msgid "Settings Tab"
msgstr ""
@@ -924,20 +924,7 @@ msgstr ""
msgid "PersonaCrypt"
msgstr ""
#: ../../sysadmclient.rst:894
msgid ""
"|trueos| provides support for a security feature known as PersonaCrypt. A "
"PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
" with ZFS and encrypted with GELI. This device is used to hold a specific "
"user's home directory, meaning they can securely transport and access their "
"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
"example, this can be used to securely access one's home directory from a "
"laptop, home computer, and work computer. The device is protected by an "
"encryption key and a password which is, and should be, separate from the "
"user's login password."
msgstr ""
#: ../../sysadmclient.rst:904
#: ../../sysadmclient.rst:905
msgid ""
"When a user is configured to use a PersonaCrypt device, that user can not "
"login using an unencrypted session on the same system. In other words, the "
@@ -946,22 +933,13 @@ msgid ""
"different user accounts, one for each type of session."
msgstr ""
#: ../../sysadmclient.rst:911
msgid ""
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
"your passphrase, and the other being a key stored on disk. Without both of "
"these parts, the media cannot be decrypted. This means if somebody steals "
"the key and manages to get your password, it is still worthless without the "
"system it was paired with."
msgstr ""
#: ../../sysadmclient.rst:917
#: ../../sysadmclient.rst:925
msgid ""
"USB devices do eventually fail. Always backup any important files stored on "
"the PersonaCrypt device to another device or system."
msgstr ""
#: ../../sysadmclient.rst:920
#: ../../sysadmclient.rst:928
msgid ""
"The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt "
"device for any login user, **except** for the currently logged in user. In "
@@ -969,13 +947,13 @@ msgid ""
"*dlavigne*, has been created and the entry for the user has been clicked."
msgstr ""
#: ../../sysadmclient.rst:939
#: ../../sysadmclient.rst:947
msgid ""
"**Initialize Device:** Used to prepare the USB device which will be used as "
"the user's home directory."
msgstr ""
#: ../../sysadmclient.rst:942
#: ../../sysadmclient.rst:950
msgid ""
"**Import Key:** If the user has already created a PersonaCrypt device on "
"another |trueos| system, click this button to import a previously saved copy"
@@ -983,7 +961,7 @@ msgid ""
"can now login to this computer using PersonaCrypt."
msgstr ""
#: ../../sysadmclient.rst:950
#: ../../sysadmclient.rst:958
msgid ""
"Since the USB stick will hold the user's home directory and files, ensure "
"the stick is large enough to meet the anticipated storage needs of the home "
@@ -993,7 +971,7 @@ msgid ""
"logged in."
msgstr ""
#: ../../sysadmclient.rst:999
#: ../../sysadmclient.rst:982
msgid ""
"When stealth sessions have been configured, PersonaCrypt users will still be"
" displayed in the login menu, even if their USB device is not inserted. This"
@@ -1001,47 +979,47 @@ msgid ""
"session."
msgstr ""
#: ../../sysadmclient.rst:1004
#: ../../sysadmclient.rst:987
msgid ""
"In the field with the yellow padlock icon, input the password for the user "
"account. In the field with the grey USB stick icon, input the password "
"associated with the PersonaCrypt device."
msgstr ""
#: ../../sysadmclient.rst:1008
#: ../../sysadmclient.rst:991
msgid ""
"To prevent data corruption and freezing the system **DO NOT** remove the "
"PersonaCrypt device while logged in! Always log out of your session before "
"physically removing the device."
msgstr ""
#: ../../sysadmclient.rst:1016
#: ../../sysadmclient.rst:1045
msgid "Managing Groups"
msgstr ""
#: ../../sysadmclient.rst:1018
#: ../../sysadmclient.rst:1047
msgid ""
"Click the :guilabel:`Groups` tab to view and manage the groups on the "
"system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s <user4>`, "
"shows the group membership for the *operator* and *wheel* groups:"
msgstr ""
#: ../../sysadmclient.rst:1029
#: ../../sysadmclient.rst:1058
msgid "This screen has 2 columns:"
msgstr ""
#: ../../sysadmclient.rst:1031
#: ../../sysadmclient.rst:1060
msgid ""
"**Members:** Indicates if the highlighted group contains any user accounts."
msgstr ""
#: ../../sysadmclient.rst:1034
#: ../../sysadmclient.rst:1063
msgid ""
"**Available:** Shows all of the system and user accounts on the system in "
"alphabetical order."
msgstr ""
#: ../../sysadmclient.rst:1037
#: ../../sysadmclient.rst:1066
msgid ""
"To add an account to a group, highlight the group name, then highlight the "
"account name in the :guilabel:`Available` column. Click the left arrow and "
@@ -1051,7 +1029,7 @@ msgid ""
"added to a group."
msgstr ""
#: ../../sysadmclient.rst:1044
#: ../../sysadmclient.rst:1073
msgid ""
"If you add a user to the *operator* group, they will have permission to use "
"commands requiring administrative access and will be prompted for their own "
@@ -1060,15 +1038,15 @@ msgid ""
"will be prompted for the superuser password whenever they use the command."
msgstr ""
#: ../../sysadmclient.rst:1051
#: ../../sysadmclient.rst:1080
msgid "To view all of the groups on the system, click :guilabel:`Advanced`."
msgstr ""
#: ../../sysadmclient.rst:1057
#: ../../sysadmclient.rst:1086
msgid "Life Preserver"
msgstr ""
#: ../../sysadmclient.rst:1059
#: ../../sysadmclient.rst:1088
msgid ""
"The Life Preserver utility is designed to take full advantage of the "
"functionality provided by ZFS snapshots. This utility allows you to schedule"
@@ -1077,25 +1055,25 @@ msgid ""
"benefits:"
msgstr ""
#: ../../sysadmclient.rst:1081
#: ../../sysadmclient.rst:1110
msgid ""
"Replication is an efficient way to keep the files on two systems in sync. "
"With Life Preserver, the snapshots taken on the |trueos| system will be "
"synchronized with their versions stored on the specified backup server."
msgstr ""
#: ../../sysadmclient.rst:1086
#: ../../sysadmclient.rst:1115
msgid "Snapshots are sent to the backup server over an encrypted connection."
msgstr ""
#: ../../sysadmclient.rst:1088
#: ../../sysadmclient.rst:1117
msgid ""
"Having a copy of the snapshots on another system makes it possible to "
"perform an operating system restore should the |trueos| system become "
"unusable or to deploy an identical system to different hardware."
msgstr ""
#: ../../sysadmclient.rst:1092
#: ../../sysadmclient.rst:1121
msgid ""
"To manage snapshots and replication using the |sysadm| graphical client, go "
"to :menuselection:`Utilities --> Life Preserver`. The rest of this section "
@@ -1103,16 +1081,16 @@ msgid ""
"Preserver."
msgstr ""
#: ../../sysadmclient.rst:1101
#: ../../sysadmclient.rst:1130
msgid "Snapshots Tab"
msgstr ""
#: ../../sysadmclient.rst:1112
#: ../../sysadmclient.rst:1141
msgid ""
"This screen will display any created snapshots and provides buttons to:"
msgstr ""
#: ../../sysadmclient.rst:1114
#: ../../sysadmclient.rst:1143
msgid ""
"**Create:** Used to create a manual snapshot of the specified pool now. For "
"example, you could create a snapshot before making changes to an important "
@@ -1126,14 +1104,14 @@ msgid ""
"snapshot was created."
msgstr ""
#: ../../sysadmclient.rst:1125
#: ../../sysadmclient.rst:1154
msgid ""
"**Remove:** Used to delete a highlighted snapshot. **This is a permanent "
"change that can not be reversed.** In other words, the versions of files at "
"the point in time the snapshot was created will be lost."
msgstr ""
#: ../../sysadmclient.rst:1130
#: ../../sysadmclient.rst:1159
msgid ""
"**Revert:** If you highlight a snapshot entry, this button and the drop-down"
" menu next to it will activate. You can use the drop-down menu to specify "
@@ -1143,11 +1121,11 @@ msgid ""
" after the snapshot was taken will be lost."
msgstr ""
#: ../../sysadmclient.rst:1142
#: ../../sysadmclient.rst:1171
msgid "Replication Tab"
msgstr ""
#: ../../sysadmclient.rst:1144
#: ../../sysadmclient.rst:1173
msgid ""
"Life Preserver can be configured to replicate snapshots to another system "
"over an encrypted SSH connection, though the backup itself is stored in an "
@@ -1155,13 +1133,13 @@ msgid ""
" another system."
msgstr ""
#: ../../sysadmclient.rst:1149
#: ../../sysadmclient.rst:1178
msgid ""
"In order to configure replication, the remote system to hold a copy of the "
"snapshots must first meet several requirements:"
msgstr ""
#: ../../sysadmclient.rst:1156
#: ../../sysadmclient.rst:1185
msgid ""
"The backup server **must be formatted with the latest version of ZFS,** also"
" known as ZFS feature flags or ZFSv5000. Operating systems that support this"
@@ -1169,14 +1147,14 @@ msgid ""
"FreeNAS 9.1.x or higher."
msgstr ""
#: ../../sysadmclient.rst:1162
#: ../../sysadmclient.rst:1191
msgid ""
"The system must have SSH installed and the SSH service must be running. If "
"the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is"
" already installed, but you will need to start the SSH service."
msgstr ""
#: ../../sysadmclient.rst:1167
#: ../../sysadmclient.rst:1196
msgid ""
"If the backup server is running |trueos| or |pcbsd|, you will need to open "
"TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is "
@@ -1186,7 +1164,7 @@ msgid ""
"backup system, make sure it has a rule to allow SSH."
msgstr ""
#: ../../sysadmclient.rst:1175
#: ../../sysadmclient.rst:1204
msgid ""
":numref:`Figure %s <lpreserver2>` shows the initial :guilabel:`Replication` "
"tab on a system that has not yet been configured for replication. This "
@@ -1194,29 +1172,29 @@ msgid ""
"schedule."
msgstr ""
#: ../../sysadmclient.rst:1186
#: ../../sysadmclient.rst:1215
msgid ""
"To schedule the replication, click :guilabel:`+` to display the \"Setup "
"Replication\" screen shown in :numref:`Figure %s <lpreserver3>`."
msgstr ""
#: ../../sysadmclient.rst:1196
#: ../../sysadmclient.rst:1225
msgid "Input the following information:"
msgstr ""
#: ../../sysadmclient.rst:1198
#: ../../sysadmclient.rst:1227
msgid ""
"**Host IP:** The IP address of the remote system to store the replicated "
"snapshots."
msgstr ""
#: ../../sysadmclient.rst:1201
#: ../../sysadmclient.rst:1230
msgid ""
"**SSH Port:** The port number, if the remote system is running SSH on a port"
" other than the default of 22."
msgstr ""
#: ../../sysadmclient.rst:1204
#: ../../sysadmclient.rst:1233
msgid ""
"**Dataset:** The name of the ZFS pool and optional dataset on the remote "
"system. For example, \"remotetank\" will save the snapshots to a ZFS pool of"
@@ -1224,7 +1202,7 @@ msgid ""
"existing dataset named \"mybackups\" on the pool named \"remotetank\"."
msgstr ""
#: ../../sysadmclient.rst:1210
#: ../../sysadmclient.rst:1239
msgid ""
"**Frequency:** Use the drop-down menu to select how often to initiate the "
"replication. Available choices are :guilabel:`Sync with snapshot` (at the "
@@ -1235,87 +1213,87 @@ msgid ""
":guilabel:`Start`) in this screen."
msgstr ""
#: ../../sysadmclient.rst:1219
#: ../../sysadmclient.rst:1248
msgid ""
"**Username:** The username must already exist on the remote system, have "
"write access to the specified \"Dataset\", and have permission to SSH into "
"that system."
msgstr ""
#: ../../sysadmclient.rst:1223
#: ../../sysadmclient.rst:1252
msgid "**Password:** The password associated with the \"Username\"."
msgstr ""
#: ../../sysadmclient.rst:1225
#: ../../sysadmclient.rst:1254
msgid ""
"**Local DS:** Use the drop-down menu to select the pool or dataset to "
"replicate to the remote system."
msgstr ""
#: ../../sysadmclient.rst:1228
#: ../../sysadmclient.rst:1257
msgid ""
"The buttons at the top of the \"Setup Replication\" screen have several "
"uses:"
msgstr ""
#: ../../sysadmclient.rst:1231
#: ../../sysadmclient.rst:1260
msgid ""
"**+ icon:** Sdd a replication schedule. Multiple schedules are supported, "
"meaning you can replicate to multiple systems or replicate different \"Local"
" DS\" datasets at different times."
msgstr ""
#: ../../sysadmclient.rst:1235
#: ../../sysadmclient.rst:1264
msgid ""
"**- icon:** Remove an already created, and highlighted, replication "
"schedule."
msgstr ""
#: ../../sysadmclient.rst:1238
#: ../../sysadmclient.rst:1267
msgid "**gear icon:** Modify the schedule for the highlighted replication."
msgstr ""
#: ../../sysadmclient.rst:1240
#: ../../sysadmclient.rst:1269
msgid ""
"**Start:** Manually starts a replication to the system specified in the "
"highlighted replication."
msgstr ""
#: ../../sysadmclient.rst:1243
#: ../../sysadmclient.rst:1272
msgid ""
"**Initialize:** Deletes the existing replicated snapshots on the remote "
"system and starts a new replication. This is useful if a replication gets "
"stuck and will not complete."
msgstr ""
#: ../../sysadmclient.rst:1251
#: ../../sysadmclient.rst:1280
msgid "Schedules Tab"
msgstr ""
#: ../../sysadmclient.rst:1253
#: ../../sysadmclient.rst:1282
msgid ""
"This tab is used to manage when snapshots of the ZFS pool are created. "
"Multiple snapshot schedules are supported if the system has multiple pools."
msgstr ""
#: ../../sysadmclient.rst:1257
#: ../../sysadmclient.rst:1286
msgid ""
"Snapshots are created on the entire pool as they are needed when "
":ref:`Restoring the Operating System`."
msgstr ""
#: ../../sysadmclient.rst:1260
#: ../../sysadmclient.rst:1289
msgid ""
"To create a snapshot schedule, click the :guilabel:`camera` icon in the "
"lower left corner of this tab. This will activate the \"Setup Snapshot "
"Schedule\" pane as seen in :numref:`Figure %s <lpreserver4>`."
msgstr ""
#: ../../sysadmclient.rst:1270
#: ../../sysadmclient.rst:1299
msgid "This pane contains several options:"
msgstr ""
#: ../../sysadmclient.rst:1275
#: ../../sysadmclient.rst:1304
msgid ""
"**Snapshots to keep:** Snapshots are automatically pruned after the "
"specified number of snapshots to prevent snapshots from eventually using up "
@@ -1326,7 +1304,7 @@ msgid ""
"manually in the :guilabel:`Snapshots` tab."
msgstr ""
#: ../../sysadmclient.rst:1284
#: ../../sysadmclient.rst:1313
msgid ""
"**Frequency:** Use the drop-down menu to select how often snapshots occur. "
"Options include \"Daily\" (which will allow you to select the time of day), "
@@ -1334,37 +1312,37 @@ msgid ""
"Minutes\"."
msgstr ""
#: ../../sysadmclient.rst:1289
#: ../../sysadmclient.rst:1318
msgid ""
"Once you have created a snapshot schedule, you can use the \"gear\" icon "
"next to the \"camera\" icon to modify the highlighted schedule or the \"X\" "
"icon to delete the highlighted schedule."
msgstr ""
#: ../../sysadmclient.rst:1300
#: ../../sysadmclient.rst:1329
msgid ""
"To schedule when the scrub occurs, click the third icon from the right which"
" will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure "
"%s <lpreserver5>`."
msgstr ""
#: ../../sysadmclient.rst:1318
#: ../../sysadmclient.rst:1347
msgid ""
"Once you have created a scrub schedule, you can use the \"gear\" icon next "
"to the \"schedule scrub\" icon to modify the highlighted schedule or the "
"\"X\" icon to delete the highlighted schedule."
msgstr ""
#: ../../sysadmclient.rst:1328
#: ../../sysadmclient.rst:1357
msgid ""
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <lpreserver6>`."
msgstr ""
#: ../../sysadmclient.rst:1337
#: ../../sysadmclient.rst:1366
msgid "Many settings are configurable:"
msgstr ""
#: ../../sysadmclient.rst:1339
#: ../../sysadmclient.rst:1368
msgid ""
"**Disk Usage Warning:** Enter a number up to 99 to indicate at which "
"percentage of disk space Life Preserver will display an alert in the system "
@@ -1372,41 +1350,41 @@ msgid ""
"space."
msgstr ""
#: ../../sysadmclient.rst:1344
#: ../../sysadmclient.rst:1373
msgid ""
"**Email:** To receive an email when disk usage reaches the percentage "
"configured in the \"Disk Usage Warning\", enter an email address."
msgstr ""
#: ../../sysadmclient.rst:1347
#: ../../sysadmclient.rst:1376
msgid ""
"**Email Trigger:** This setting can be set to \"All\", \"Warn\", or "
"\"Error\" and indicates the type of condition which will trigger an email "
"message."
msgstr ""
#: ../../sysadmclient.rst:1350
#: ../../sysadmclient.rst:1379
msgid "**Recursive Management:**"
msgstr ""
#: ../../sysadmclient.rst:1352
#: ../../sysadmclient.rst:1381
msgid ""
"If you make any changes in this screen, press :guilabel:`Save Settings` to "
"apply them."
msgstr ""
#: ../../sysadmclient.rst:1359
#: ../../sysadmclient.rst:1388
msgid "Using the lpreserver CLI"
msgstr ""
#: ../../sysadmclient.rst:1361
#: ../../sysadmclient.rst:1390
msgid ""
"The :command:`lpreserver` command line utility can also be used to manage "
"snapshots and replication. This command needs to be run as the superuser. To"
" display its usage, type the command without any arguments:"
msgstr ""
#: ../../sysadmclient.rst:1381
#: ../../sysadmclient.rst:1410
msgid ""
"Each command has its own help text that describes its parameters and "
"provides a usage example. For example, to receive help on how to use the "
@@ -1417,104 +1395,104 @@ msgstr ""
msgid "Command Line and GUI Equivalents"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**Command Line**"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**GUI**"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**Description**"
msgstr ""
#: ../../sysadmclient.rst:1452
#: ../../sysadmclient.rst:1481
msgid "**cronsnap**"
msgstr ""
#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499
msgid "\"Snapshots\" tab"
msgstr ""
#: ../../sysadmclient.rst:1452
#: ../../sysadmclient.rst:1481
msgid ""
"schedule when snapshots occur and how long to keep them; the **stop** option"
" can be used to disable snapshot creation"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "**cronscrub**"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "\"Schedules\" tab"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "schedule a ZFS scrub"
msgstr ""
#: ../../sysadmclient.rst:1459
#: ../../sysadmclient.rst:1488
msgid "**get**"
msgstr ""
#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495
msgid "\"Settings\" tab"
msgstr ""
#: ../../sysadmclient.rst:1459
#: ../../sysadmclient.rst:1488
msgid "list Life Preserver options"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid "**replicate**"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid "\"Replication\" tab"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid ""
"used to list, add, and remove backup server; read the **help** for this "
"command for examples"
msgstr ""
#: ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1495
msgid "**set**"
msgstr ""
#: ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1495
msgid ""
"configures Life Preserver options; read **help** for the list of "
"configurable options"
msgstr ""
#: ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1499
msgid "**snapshot**"
msgstr ""
#: ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1499
msgid ""
"create and replicate a new ZFS snapshot; by default, snapshots are "
"recursive, meaning that a that a snapshot is taken of every dataset within a"
" pool"
msgstr ""
#: ../../sysadmclient.rst:1476
#: ../../sysadmclient.rst:1505
msgid "**status**"
msgstr ""
#: ../../sysadmclient.rst:1476
#: ../../sysadmclient.rst:1505
msgid "lists the last snapshot name and replication status"
msgstr ""
#: ../../sysadmclient.rst:1483
#: ../../sysadmclient.rst:1512
msgid "Restoring the Operating System"
msgstr ""
#: ../../sysadmclient.rst:1485
#: ../../sysadmclient.rst:1514
msgid ""
"If you have replicated the system's snapshots to a remote backup server, you"
" can use a |trueos| installation media to perform an operating system "
@@ -1522,7 +1500,7 @@ msgid ""
"you get to the screen shown in :numref:`Figure %s <restore1>`."
msgstr ""
#: ../../sysadmclient.rst:1497
#: ../../sysadmclient.rst:1526
msgid ""
"Before you can perform a restore, the network interface must be configured. "
"Click :guilabel:`Network Connectivity` (second icon from the left) in order "
@@ -1533,7 +1511,7 @@ msgid ""
"continuing."
msgstr ""
#: ../../sysadmclient.rst:1505
#: ../../sysadmclient.rst:1534
msgid ""
"Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and"
" :guilabel:`Next`. This will start the Restore Wizard. In the screen shown "
@@ -1543,7 +1521,7 @@ msgid ""
"number."
msgstr ""
#: ../../sysadmclient.rst:1519
#: ../../sysadmclient.rst:1548
msgid ""
"Click :guilabel:`Next` and the wizard will provide a summary of your "
"selections. If correct, click :guilabel:`Finish`; otherwise, click "
@@ -1626,7 +1604,7 @@ msgid ""
"press :guilabel:`Close Ports`."
msgstr ""
#: ../../sysadmclient.rst:1152
#: ../../sysadmclient.rst:1181
msgid ""
"Snapshots occurring too frequently can introduce errors in replication. To "
"avoid errors, ensure snapshots are configured to take place slower than the "
@@ -1685,7 +1663,7 @@ msgid ""
"accounts."
msgstr ""
#: ../../sysadmclient.rst:1065
#: ../../sysadmclient.rst:1094
msgid ""
"A snapshot provides a \"point-in-time\" image of the ZFS pool. This is "
"similar to a full system backup as the snapshot contains the information for"
@@ -1703,26 +1681,26 @@ msgid ""
"snapshot."
msgstr ""
#: ../../sysadmclient.rst:1272
#: ../../sysadmclient.rst:1301
msgid ""
"**Storage Pool:** Select the ZFS storage pool that contains the datasets "
"that you wish to snapshot."
msgstr ""
#: ../../sysadmclient.rst:1293
#: ../../sysadmclient.rst:1322
msgid ""
"This screen can also be used to manage the ZFS scrub schedule. Scrubs are "
"recommended as they can provide an early indication of a potential disk "
"failure. Scrubs can be scheduled on a per-pool basis."
msgstr ""
#: ../../sysadmclient.rst:1297
#: ../../sysadmclient.rst:1326
msgid ""
"If you have multiple pools, be sure to create a scrub schedule for each "
"pool."
msgstr ""
#: ../../sysadmclient.rst:1310
#: ../../sysadmclient.rst:1339
msgid ""
"Select the pool from the :guilabel:`Storage Pool` drop-down menu, then "
"select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", "
@@ -1807,26 +1785,17 @@ msgstr ""
msgid ": Viewing All Accounts and Their Details"
msgstr ""
#: ../../sysadmclient.rst:930
#: ../../sysadmclient.rst:938
msgid ": Initialize PersonaCrypt Device"
msgstr ""
#: ../../sysadmclient.rst:932
msgid ""
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
"Note this section is hidden if the currently logged in user is selected. "
"Also, if you have just created a user and do not see these options, click "
":guilabel:`Save` then re-highlight the user to display these options:"
msgstr ""
#: ../../sysadmclient.rst:947
#: ../../sysadmclient.rst:955
msgid ""
"To prepare a PersonaCrypt device for this user, insert a USB stick and click"
" :guilabel:`Initialize Device`."
msgstr ""
#: ../../sysadmclient.rst:957
#: ../../sysadmclient.rst:965
msgid ""
"Type a password to associate with the device. Click :guilabel:`Save` to "
"initialize the device. The User Manager may take a moment to prepare the "
@@ -1834,49 +1803,49 @@ msgid ""
" to allow removal of PersonaCrypt."
msgstr ""
#: ../../sysadmclient.rst:1027
#: ../../sysadmclient.rst:1056
msgid ": Managing Groups Using User Manager"
msgstr ""
#: ../../sysadmclient.rst:1110
#: ../../sysadmclient.rst:1139
msgid ": Snapshot Tab"
msgstr ""
#: ../../sysadmclient.rst:1184
#: ../../sysadmclient.rst:1213
msgid ": Replication Tab"
msgstr ""
#: ../../sysadmclient.rst:1194
#: ../../sysadmclient.rst:1223
msgid ": Scheduling a Replication"
msgstr ""
#: ../../sysadmclient.rst:1268
#: ../../sysadmclient.rst:1297
msgid ": Scheduling a Snapshot"
msgstr ""
#: ../../sysadmclient.rst:1308
#: ../../sysadmclient.rst:1337
msgid ": Scheduling a Scrub"
msgstr ""
#: ../../sysadmclient.rst:1335
#: ../../sysadmclient.rst:1364
msgid ": Life Preserver Settings"
msgstr ""
#: ../../sysadmclient.rst:1442
#: ../../sysadmclient.rst:1471
msgid ""
":numref:`Table %s <cmdgui>` shows the command line equivalents to the "
"graphical options provided by the Life Preserver GUI."
msgstr ""
#: ../../sysadmclient.rst:1495
#: ../../sysadmclient.rst:1524
msgid ": Selecting to Restore/Clone From Backup"
msgstr ""
#: ../../sysadmclient.rst:1517
#: ../../sysadmclient.rst:1546
msgid ": Input the Information for a SSH Restore"
msgstr ""
#: ../../sysadmclient.rst:1523
#: ../../sysadmclient.rst:1552
msgid ""
"Once the connection to the backup server succeeds, you will be able to "
"select which host to restore. After making your selection, click "
@@ -1892,7 +1861,7 @@ msgid ""
":guilabel:`Next` to perform the restore."
msgstr ""
#: ../../sysadmclient.rst:987
#: ../../sysadmclient.rst:970
msgid ""
"Once a user has been initialized for PersonaCrypt on the system, their user "
"account will no longer be displayed when logging in, **unless** their "
@@ -1901,7 +1870,7 @@ msgid ""
":numref:`Figure %s <troslogin5>`."
msgstr ""
#: ../../sysadmclient.rst:997
#: ../../sysadmclient.rst:980
msgid ": |trueos| Login Screen with PersonaCrypt"
msgstr ""
@@ -1949,7 +1918,7 @@ msgstr ""
msgid ": |sysadm| Task Manager"
msgstr ""
#: ../../sysadmclient.rst:1103
#: ../../sysadmclient.rst:1132
msgid ""
":numref:`Figure %s <lpreserver1>` shows the :guilabel:`Snapshots` tab on a "
"system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"."
@@ -2013,6 +1982,134 @@ msgid ""
":guilabel:`Save Settings`."
msgstr ""
#: ../../sysadmclient.rst:894
msgid ""
"|trueos| provides support for a security feature known as PersonaCrypt. A "
"PersonaCrypt device is a removable USB media, such as a USB flash drive, "
"formatted with ZFS and encrypted with either GELI or PEFS. This device is "
"used to hold a specific user's home directory, meaning they can securely "
"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 "
"or higher system. For example, this can be used to securely access one's "
"home directory from a laptop, home computer, and work computer. The device "
"is protected by an encryption key and a different (recommended) password "
"separate from the user's login password."
msgstr ""
#: ../../sysadmclient.rst:916
msgid "GELI"
msgstr ""
#: ../../sysadmclient.rst:918
msgid ""
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
"your passphrase, and the other being a key stored on disk. Without both of "
"these parts, the media cannot be decrypted. This means if somebody steals "
"the key and manages to get your password, it is still worthless without the "
"system it was paired with. GELI is used by default in |trueos| as it is more"
" fully featured over PEFS."
msgstr ""
#: ../../sysadmclient.rst:940
msgid ""
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
"buttons are available in the :guilabel:`PersonaCrypt` tab of "
":guilabel:`Advanced Mode`. Note this section is hidden if the currently "
"logged in user is selected. Also, if you have just created a user and do not"
" see these options, click :guilabel:`Save`, then re-highlight the user to "
"display these options:"
msgstr ""
#: ../../sysadmclient.rst:999
msgid "PEFS"
msgstr ""
#: ../../sysadmclient.rst:1001
msgid ""
"`PEFS <http://pefs.io/>`_ stands for Private Encrypted File System. It is "
"open source software freely available under the BSD license, and is included"
" in |trueos| by default. PEFS runs on top of any existing file system, "
"providing an encryption layer independent of the underlying file system. "
"PersonaCrypt can be configured to use PEFS in place of GELI, which "
"eliminates the need for external media, as the encrypted PEFS database is "
"stored on the local disk."
msgstr ""
#: ../../sysadmclient.rst:1009
msgid ""
"While PEFS does not use a USB drive, be sure to print or otherwise backup "
"the PEFS generated key fragment stored on the disk."
msgstr ""
#: ../../sysadmclient.rst:1012
msgid "**Initialize PEFS with the Command Line**"
msgstr ""
#: ../../sysadmclient.rst:1014
msgid ""
"Because PEFS does not use a USB drive with its encryption, the user will "
"need a password file (pfile) containing the desired password, **before** "
"initializing PEFS for a user account. Once this pfile is created, enabling "
"PEFS through PersonaCrypt is accomplished in a CLI with "
":command:`personacrypt init <username> <pfile> PEFS`."
msgstr ""
#: ../../sysadmclient.rst:1020
msgid ""
"For example, the user account **test** has a pfile named "
":file:`testpfile.txt`, which contains the single text string of **test's** "
"chosen password. Next, the administrator adds PEFS encryption to the "
"**test** acount by opening a CLI, logging in as root, and typing:"
msgstr ""
#: ../../sysadmclient.rst:1029
msgid ""
"PersonaCrypt will initialize the account **test** with PEFS, using the "
"string in :file:`testpfile.txt` as the new password."
msgstr ""
#: ../../sysadmclient.rst:1032
msgid ""
"The |sysadm| User Manager can also initialize a user account with PEFS by "
"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` "
"drop down menu of the :guilabel:`PersonaCrypt` tab."
msgstr ""
#: ../../sysadmclient.rst:1036
msgid ""
"In addition to initializing an account with PEFS, PersonaCrypt also supports"
" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt "
"export <username>` and :command:`personacrypt import <keyfile>`, "
"respectively."
msgstr ""
#~ msgid ""
#~ "|trueos| provides support for a security feature known as PersonaCrypt. A "
#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
#~ " with ZFS and encrypted with GELI. This device is used to hold a specific "
#~ "user's home directory, meaning they can securely transport and access their "
#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
#~ "example, this can be used to securely access one's home directory from a "
#~ "laptop, home computer, and work computer. The device is protected by an "
#~ "encryption key and a password which is, and should be, separate from the "
#~ "user's login password."
#~ msgstr ""
#~ msgid ""
#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being "
#~ "your passphrase, and the other being a key stored on disk. Without both of "
#~ "these parts, the media cannot be decrypted. This means if somebody steals "
#~ "the key and manages to get your password, it is still worthless without the "
#~ "system it was paired with."
#~ msgstr ""
#~ msgid ""
#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two "
#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
#~ "Note this section is hidden if the currently logged in user is selected. "
#~ "Also, if you have just created a user and do not see these options, click "
#~ ":guilabel:`Save` then re-highlight the user to display these options:"
#~ msgstr ""
#~ msgid ""
#~ "**Max Boot Environments:** |trueos| automatically creates a boot environment"
#~ " before updating any software, the operating system, or applying a system "

View File

@@ -482,7 +482,7 @@ msgid ""
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <update4>`."
msgstr ""
#: ../../sysadmclient.rst:1326
#: ../../sysadmclient.rst:1355
msgid "Settings Tab"
msgstr ""
@@ -924,20 +924,7 @@ msgstr ""
msgid "PersonaCrypt"
msgstr ""
#: ../../sysadmclient.rst:894
msgid ""
"|trueos| provides support for a security feature known as PersonaCrypt. A "
"PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
" with ZFS and encrypted with GELI. This device is used to hold a specific "
"user's home directory, meaning they can securely transport and access their "
"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
"example, this can be used to securely access one's home directory from a "
"laptop, home computer, and work computer. The device is protected by an "
"encryption key and a password which is, and should be, separate from the "
"user's login password."
msgstr ""
#: ../../sysadmclient.rst:904
#: ../../sysadmclient.rst:905
msgid ""
"When a user is configured to use a PersonaCrypt device, that user can not "
"login using an unencrypted session on the same system. In other words, the "
@@ -946,22 +933,13 @@ msgid ""
"different user accounts, one for each type of session."
msgstr ""
#: ../../sysadmclient.rst:911
msgid ""
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
"your passphrase, and the other being a key stored on disk. Without both of "
"these parts, the media cannot be decrypted. This means if somebody steals "
"the key and manages to get your password, it is still worthless without the "
"system it was paired with."
msgstr ""
#: ../../sysadmclient.rst:917
#: ../../sysadmclient.rst:925
msgid ""
"USB devices do eventually fail. Always backup any important files stored on "
"the PersonaCrypt device to another device or system."
msgstr ""
#: ../../sysadmclient.rst:920
#: ../../sysadmclient.rst:928
msgid ""
"The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt "
"device for any login user, **except** for the currently logged in user. In "
@@ -969,13 +947,13 @@ msgid ""
"*dlavigne*, has been created and the entry for the user has been clicked."
msgstr ""
#: ../../sysadmclient.rst:939
#: ../../sysadmclient.rst:947
msgid ""
"**Initialize Device:** Used to prepare the USB device which will be used as "
"the user's home directory."
msgstr ""
#: ../../sysadmclient.rst:942
#: ../../sysadmclient.rst:950
msgid ""
"**Import Key:** If the user has already created a PersonaCrypt device on "
"another |trueos| system, click this button to import a previously saved copy"
@@ -983,7 +961,7 @@ msgid ""
"can now login to this computer using PersonaCrypt."
msgstr ""
#: ../../sysadmclient.rst:950
#: ../../sysadmclient.rst:958
msgid ""
"Since the USB stick will hold the user's home directory and files, ensure "
"the stick is large enough to meet the anticipated storage needs of the home "
@@ -993,7 +971,7 @@ msgid ""
"logged in."
msgstr ""
#: ../../sysadmclient.rst:999
#: ../../sysadmclient.rst:982
msgid ""
"When stealth sessions have been configured, PersonaCrypt users will still be"
" displayed in the login menu, even if their USB device is not inserted. This"
@@ -1001,47 +979,47 @@ msgid ""
"session."
msgstr ""
#: ../../sysadmclient.rst:1004
#: ../../sysadmclient.rst:987
msgid ""
"In the field with the yellow padlock icon, input the password for the user "
"account. In the field with the grey USB stick icon, input the password "
"associated with the PersonaCrypt device."
msgstr ""
#: ../../sysadmclient.rst:1008
#: ../../sysadmclient.rst:991
msgid ""
"To prevent data corruption and freezing the system **DO NOT** remove the "
"PersonaCrypt device while logged in! Always log out of your session before "
"physically removing the device."
msgstr ""
#: ../../sysadmclient.rst:1016
#: ../../sysadmclient.rst:1045
msgid "Managing Groups"
msgstr ""
#: ../../sysadmclient.rst:1018
#: ../../sysadmclient.rst:1047
msgid ""
"Click the :guilabel:`Groups` tab to view and manage the groups on the "
"system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s <user4>`, "
"shows the group membership for the *operator* and *wheel* groups:"
msgstr ""
#: ../../sysadmclient.rst:1029
#: ../../sysadmclient.rst:1058
msgid "This screen has 2 columns:"
msgstr ""
#: ../../sysadmclient.rst:1031
#: ../../sysadmclient.rst:1060
msgid ""
"**Members:** Indicates if the highlighted group contains any user accounts."
msgstr ""
#: ../../sysadmclient.rst:1034
#: ../../sysadmclient.rst:1063
msgid ""
"**Available:** Shows all of the system and user accounts on the system in "
"alphabetical order."
msgstr ""
#: ../../sysadmclient.rst:1037
#: ../../sysadmclient.rst:1066
msgid ""
"To add an account to a group, highlight the group name, then highlight the "
"account name in the :guilabel:`Available` column. Click the left arrow and "
@@ -1051,7 +1029,7 @@ msgid ""
"added to a group."
msgstr ""
#: ../../sysadmclient.rst:1044
#: ../../sysadmclient.rst:1073
msgid ""
"If you add a user to the *operator* group, they will have permission to use "
"commands requiring administrative access and will be prompted for their own "
@@ -1060,15 +1038,15 @@ msgid ""
"will be prompted for the superuser password whenever they use the command."
msgstr ""
#: ../../sysadmclient.rst:1051
#: ../../sysadmclient.rst:1080
msgid "To view all of the groups on the system, click :guilabel:`Advanced`."
msgstr ""
#: ../../sysadmclient.rst:1057
#: ../../sysadmclient.rst:1086
msgid "Life Preserver"
msgstr ""
#: ../../sysadmclient.rst:1059
#: ../../sysadmclient.rst:1088
msgid ""
"The Life Preserver utility is designed to take full advantage of the "
"functionality provided by ZFS snapshots. This utility allows you to schedule"
@@ -1077,25 +1055,25 @@ msgid ""
"benefits:"
msgstr ""
#: ../../sysadmclient.rst:1081
#: ../../sysadmclient.rst:1110
msgid ""
"Replication is an efficient way to keep the files on two systems in sync. "
"With Life Preserver, the snapshots taken on the |trueos| system will be "
"synchronized with their versions stored on the specified backup server."
msgstr ""
#: ../../sysadmclient.rst:1086
#: ../../sysadmclient.rst:1115
msgid "Snapshots are sent to the backup server over an encrypted connection."
msgstr ""
#: ../../sysadmclient.rst:1088
#: ../../sysadmclient.rst:1117
msgid ""
"Having a copy of the snapshots on another system makes it possible to "
"perform an operating system restore should the |trueos| system become "
"unusable or to deploy an identical system to different hardware."
msgstr ""
#: ../../sysadmclient.rst:1092
#: ../../sysadmclient.rst:1121
msgid ""
"To manage snapshots and replication using the |sysadm| graphical client, go "
"to :menuselection:`Utilities --> Life Preserver`. The rest of this section "
@@ -1103,16 +1081,16 @@ msgid ""
"Preserver."
msgstr ""
#: ../../sysadmclient.rst:1101
#: ../../sysadmclient.rst:1130
msgid "Snapshots Tab"
msgstr ""
#: ../../sysadmclient.rst:1112
#: ../../sysadmclient.rst:1141
msgid ""
"This screen will display any created snapshots and provides buttons to:"
msgstr ""
#: ../../sysadmclient.rst:1114
#: ../../sysadmclient.rst:1143
msgid ""
"**Create:** Used to create a manual snapshot of the specified pool now. For "
"example, you could create a snapshot before making changes to an important "
@@ -1126,14 +1104,14 @@ msgid ""
"snapshot was created."
msgstr ""
#: ../../sysadmclient.rst:1125
#: ../../sysadmclient.rst:1154
msgid ""
"**Remove:** Used to delete a highlighted snapshot. **This is a permanent "
"change that can not be reversed.** In other words, the versions of files at "
"the point in time the snapshot was created will be lost."
msgstr ""
#: ../../sysadmclient.rst:1130
#: ../../sysadmclient.rst:1159
msgid ""
"**Revert:** If you highlight a snapshot entry, this button and the drop-down"
" menu next to it will activate. You can use the drop-down menu to specify "
@@ -1143,11 +1121,11 @@ msgid ""
" after the snapshot was taken will be lost."
msgstr ""
#: ../../sysadmclient.rst:1142
#: ../../sysadmclient.rst:1171
msgid "Replication Tab"
msgstr ""
#: ../../sysadmclient.rst:1144
#: ../../sysadmclient.rst:1173
msgid ""
"Life Preserver can be configured to replicate snapshots to another system "
"over an encrypted SSH connection, though the backup itself is stored in an "
@@ -1155,13 +1133,13 @@ msgid ""
" another system."
msgstr ""
#: ../../sysadmclient.rst:1149
#: ../../sysadmclient.rst:1178
msgid ""
"In order to configure replication, the remote system to hold a copy of the "
"snapshots must first meet several requirements:"
msgstr ""
#: ../../sysadmclient.rst:1156
#: ../../sysadmclient.rst:1185
msgid ""
"The backup server **must be formatted with the latest version of ZFS,** also"
" known as ZFS feature flags or ZFSv5000. Operating systems that support this"
@@ -1169,14 +1147,14 @@ msgid ""
"FreeNAS 9.1.x or higher."
msgstr ""
#: ../../sysadmclient.rst:1162
#: ../../sysadmclient.rst:1191
msgid ""
"The system must have SSH installed and the SSH service must be running. If "
"the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is"
" already installed, but you will need to start the SSH service."
msgstr ""
#: ../../sysadmclient.rst:1167
#: ../../sysadmclient.rst:1196
msgid ""
"If the backup server is running |trueos| or |pcbsd|, you will need to open "
"TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is "
@@ -1186,7 +1164,7 @@ msgid ""
"backup system, make sure it has a rule to allow SSH."
msgstr ""
#: ../../sysadmclient.rst:1175
#: ../../sysadmclient.rst:1204
msgid ""
":numref:`Figure %s <lpreserver2>` shows the initial :guilabel:`Replication` "
"tab on a system that has not yet been configured for replication. This "
@@ -1194,29 +1172,29 @@ msgid ""
"schedule."
msgstr ""
#: ../../sysadmclient.rst:1186
#: ../../sysadmclient.rst:1215
msgid ""
"To schedule the replication, click :guilabel:`+` to display the \"Setup "
"Replication\" screen shown in :numref:`Figure %s <lpreserver3>`."
msgstr ""
#: ../../sysadmclient.rst:1196
#: ../../sysadmclient.rst:1225
msgid "Input the following information:"
msgstr ""
#: ../../sysadmclient.rst:1198
#: ../../sysadmclient.rst:1227
msgid ""
"**Host IP:** The IP address of the remote system to store the replicated "
"snapshots."
msgstr ""
#: ../../sysadmclient.rst:1201
#: ../../sysadmclient.rst:1230
msgid ""
"**SSH Port:** The port number, if the remote system is running SSH on a port"
" other than the default of 22."
msgstr ""
#: ../../sysadmclient.rst:1204
#: ../../sysadmclient.rst:1233
msgid ""
"**Dataset:** The name of the ZFS pool and optional dataset on the remote "
"system. For example, \"remotetank\" will save the snapshots to a ZFS pool of"
@@ -1224,7 +1202,7 @@ msgid ""
"existing dataset named \"mybackups\" on the pool named \"remotetank\"."
msgstr ""
#: ../../sysadmclient.rst:1210
#: ../../sysadmclient.rst:1239
msgid ""
"**Frequency:** Use the drop-down menu to select how often to initiate the "
"replication. Available choices are :guilabel:`Sync with snapshot` (at the "
@@ -1235,87 +1213,87 @@ msgid ""
":guilabel:`Start`) in this screen."
msgstr ""
#: ../../sysadmclient.rst:1219
#: ../../sysadmclient.rst:1248
msgid ""
"**Username:** The username must already exist on the remote system, have "
"write access to the specified \"Dataset\", and have permission to SSH into "
"that system."
msgstr ""
#: ../../sysadmclient.rst:1223
#: ../../sysadmclient.rst:1252
msgid "**Password:** The password associated with the \"Username\"."
msgstr ""
#: ../../sysadmclient.rst:1225
#: ../../sysadmclient.rst:1254
msgid ""
"**Local DS:** Use the drop-down menu to select the pool or dataset to "
"replicate to the remote system."
msgstr ""
#: ../../sysadmclient.rst:1228
#: ../../sysadmclient.rst:1257
msgid ""
"The buttons at the top of the \"Setup Replication\" screen have several "
"uses:"
msgstr ""
#: ../../sysadmclient.rst:1231
#: ../../sysadmclient.rst:1260
msgid ""
"**+ icon:** Sdd a replication schedule. Multiple schedules are supported, "
"meaning you can replicate to multiple systems or replicate different \"Local"
" DS\" datasets at different times."
msgstr ""
#: ../../sysadmclient.rst:1235
#: ../../sysadmclient.rst:1264
msgid ""
"**- icon:** Remove an already created, and highlighted, replication "
"schedule."
msgstr ""
#: ../../sysadmclient.rst:1238
#: ../../sysadmclient.rst:1267
msgid "**gear icon:** Modify the schedule for the highlighted replication."
msgstr ""
#: ../../sysadmclient.rst:1240
#: ../../sysadmclient.rst:1269
msgid ""
"**Start:** Manually starts a replication to the system specified in the "
"highlighted replication."
msgstr ""
#: ../../sysadmclient.rst:1243
#: ../../sysadmclient.rst:1272
msgid ""
"**Initialize:** Deletes the existing replicated snapshots on the remote "
"system and starts a new replication. This is useful if a replication gets "
"stuck and will not complete."
msgstr ""
#: ../../sysadmclient.rst:1251
#: ../../sysadmclient.rst:1280
msgid "Schedules Tab"
msgstr ""
#: ../../sysadmclient.rst:1253
#: ../../sysadmclient.rst:1282
msgid ""
"This tab is used to manage when snapshots of the ZFS pool are created. "
"Multiple snapshot schedules are supported if the system has multiple pools."
msgstr ""
#: ../../sysadmclient.rst:1257
#: ../../sysadmclient.rst:1286
msgid ""
"Snapshots are created on the entire pool as they are needed when "
":ref:`Restoring the Operating System`."
msgstr ""
#: ../../sysadmclient.rst:1260
#: ../../sysadmclient.rst:1289
msgid ""
"To create a snapshot schedule, click the :guilabel:`camera` icon in the "
"lower left corner of this tab. This will activate the \"Setup Snapshot "
"Schedule\" pane as seen in :numref:`Figure %s <lpreserver4>`."
msgstr ""
#: ../../sysadmclient.rst:1270
#: ../../sysadmclient.rst:1299
msgid "This pane contains several options:"
msgstr ""
#: ../../sysadmclient.rst:1275
#: ../../sysadmclient.rst:1304
msgid ""
"**Snapshots to keep:** Snapshots are automatically pruned after the "
"specified number of snapshots to prevent snapshots from eventually using up "
@@ -1326,7 +1304,7 @@ msgid ""
"manually in the :guilabel:`Snapshots` tab."
msgstr ""
#: ../../sysadmclient.rst:1284
#: ../../sysadmclient.rst:1313
msgid ""
"**Frequency:** Use the drop-down menu to select how often snapshots occur. "
"Options include \"Daily\" (which will allow you to select the time of day), "
@@ -1334,37 +1312,37 @@ msgid ""
"Minutes\"."
msgstr ""
#: ../../sysadmclient.rst:1289
#: ../../sysadmclient.rst:1318
msgid ""
"Once you have created a snapshot schedule, you can use the \"gear\" icon "
"next to the \"camera\" icon to modify the highlighted schedule or the \"X\" "
"icon to delete the highlighted schedule."
msgstr ""
#: ../../sysadmclient.rst:1300
#: ../../sysadmclient.rst:1329
msgid ""
"To schedule when the scrub occurs, click the third icon from the right which"
" will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure "
"%s <lpreserver5>`."
msgstr ""
#: ../../sysadmclient.rst:1318
#: ../../sysadmclient.rst:1347
msgid ""
"Once you have created a scrub schedule, you can use the \"gear\" icon next "
"to the \"schedule scrub\" icon to modify the highlighted schedule or the "
"\"X\" icon to delete the highlighted schedule."
msgstr ""
#: ../../sysadmclient.rst:1328
#: ../../sysadmclient.rst:1357
msgid ""
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <lpreserver6>`."
msgstr ""
#: ../../sysadmclient.rst:1337
#: ../../sysadmclient.rst:1366
msgid "Many settings are configurable:"
msgstr ""
#: ../../sysadmclient.rst:1339
#: ../../sysadmclient.rst:1368
msgid ""
"**Disk Usage Warning:** Enter a number up to 99 to indicate at which "
"percentage of disk space Life Preserver will display an alert in the system "
@@ -1372,41 +1350,41 @@ msgid ""
"space."
msgstr ""
#: ../../sysadmclient.rst:1344
#: ../../sysadmclient.rst:1373
msgid ""
"**Email:** To receive an email when disk usage reaches the percentage "
"configured in the \"Disk Usage Warning\", enter an email address."
msgstr ""
#: ../../sysadmclient.rst:1347
#: ../../sysadmclient.rst:1376
msgid ""
"**Email Trigger:** This setting can be set to \"All\", \"Warn\", or "
"\"Error\" and indicates the type of condition which will trigger an email "
"message."
msgstr ""
#: ../../sysadmclient.rst:1350
#: ../../sysadmclient.rst:1379
msgid "**Recursive Management:**"
msgstr ""
#: ../../sysadmclient.rst:1352
#: ../../sysadmclient.rst:1381
msgid ""
"If you make any changes in this screen, press :guilabel:`Save Settings` to "
"apply them."
msgstr ""
#: ../../sysadmclient.rst:1359
#: ../../sysadmclient.rst:1388
msgid "Using the lpreserver CLI"
msgstr ""
#: ../../sysadmclient.rst:1361
#: ../../sysadmclient.rst:1390
msgid ""
"The :command:`lpreserver` command line utility can also be used to manage "
"snapshots and replication. This command needs to be run as the superuser. To"
" display its usage, type the command without any arguments:"
msgstr ""
#: ../../sysadmclient.rst:1381
#: ../../sysadmclient.rst:1410
msgid ""
"Each command has its own help text that describes its parameters and "
"provides a usage example. For example, to receive help on how to use the "
@@ -1417,104 +1395,104 @@ msgstr ""
msgid "Command Line and GUI Equivalents"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**Command Line**"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**GUI**"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**Description**"
msgstr ""
#: ../../sysadmclient.rst:1452
#: ../../sysadmclient.rst:1481
msgid "**cronsnap**"
msgstr ""
#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499
msgid "\"Snapshots\" tab"
msgstr ""
#: ../../sysadmclient.rst:1452
#: ../../sysadmclient.rst:1481
msgid ""
"schedule when snapshots occur and how long to keep them; the **stop** option"
" can be used to disable snapshot creation"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "**cronscrub**"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "\"Schedules\" tab"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "schedule a ZFS scrub"
msgstr ""
#: ../../sysadmclient.rst:1459
#: ../../sysadmclient.rst:1488
msgid "**get**"
msgstr ""
#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495
msgid "\"Settings\" tab"
msgstr ""
#: ../../sysadmclient.rst:1459
#: ../../sysadmclient.rst:1488
msgid "list Life Preserver options"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid "**replicate**"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid "\"Replication\" tab"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid ""
"used to list, add, and remove backup server; read the **help** for this "
"command for examples"
msgstr ""
#: ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1495
msgid "**set**"
msgstr ""
#: ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1495
msgid ""
"configures Life Preserver options; read **help** for the list of "
"configurable options"
msgstr ""
#: ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1499
msgid "**snapshot**"
msgstr ""
#: ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1499
msgid ""
"create and replicate a new ZFS snapshot; by default, snapshots are "
"recursive, meaning that a that a snapshot is taken of every dataset within a"
" pool"
msgstr ""
#: ../../sysadmclient.rst:1476
#: ../../sysadmclient.rst:1505
msgid "**status**"
msgstr ""
#: ../../sysadmclient.rst:1476
#: ../../sysadmclient.rst:1505
msgid "lists the last snapshot name and replication status"
msgstr ""
#: ../../sysadmclient.rst:1483
#: ../../sysadmclient.rst:1512
msgid "Restoring the Operating System"
msgstr ""
#: ../../sysadmclient.rst:1485
#: ../../sysadmclient.rst:1514
msgid ""
"If you have replicated the system's snapshots to a remote backup server, you"
" can use a |trueos| installation media to perform an operating system "
@@ -1522,7 +1500,7 @@ msgid ""
"you get to the screen shown in :numref:`Figure %s <restore1>`."
msgstr ""
#: ../../sysadmclient.rst:1497
#: ../../sysadmclient.rst:1526
msgid ""
"Before you can perform a restore, the network interface must be configured. "
"Click :guilabel:`Network Connectivity` (second icon from the left) in order "
@@ -1533,7 +1511,7 @@ msgid ""
"continuing."
msgstr ""
#: ../../sysadmclient.rst:1505
#: ../../sysadmclient.rst:1534
msgid ""
"Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and"
" :guilabel:`Next`. This will start the Restore Wizard. In the screen shown "
@@ -1543,7 +1521,7 @@ msgid ""
"number."
msgstr ""
#: ../../sysadmclient.rst:1519
#: ../../sysadmclient.rst:1548
msgid ""
"Click :guilabel:`Next` and the wizard will provide a summary of your "
"selections. If correct, click :guilabel:`Finish`; otherwise, click "
@@ -1626,7 +1604,7 @@ msgid ""
"press :guilabel:`Close Ports`."
msgstr ""
#: ../../sysadmclient.rst:1152
#: ../../sysadmclient.rst:1181
msgid ""
"Snapshots occurring too frequently can introduce errors in replication. To "
"avoid errors, ensure snapshots are configured to take place slower than the "
@@ -1685,7 +1663,7 @@ msgid ""
"accounts."
msgstr ""
#: ../../sysadmclient.rst:1065
#: ../../sysadmclient.rst:1094
msgid ""
"A snapshot provides a \"point-in-time\" image of the ZFS pool. This is "
"similar to a full system backup as the snapshot contains the information for"
@@ -1703,26 +1681,26 @@ msgid ""
"snapshot."
msgstr ""
#: ../../sysadmclient.rst:1272
#: ../../sysadmclient.rst:1301
msgid ""
"**Storage Pool:** Select the ZFS storage pool that contains the datasets "
"that you wish to snapshot."
msgstr ""
#: ../../sysadmclient.rst:1293
#: ../../sysadmclient.rst:1322
msgid ""
"This screen can also be used to manage the ZFS scrub schedule. Scrubs are "
"recommended as they can provide an early indication of a potential disk "
"failure. Scrubs can be scheduled on a per-pool basis."
msgstr ""
#: ../../sysadmclient.rst:1297
#: ../../sysadmclient.rst:1326
msgid ""
"If you have multiple pools, be sure to create a scrub schedule for each "
"pool."
msgstr ""
#: ../../sysadmclient.rst:1310
#: ../../sysadmclient.rst:1339
msgid ""
"Select the pool from the :guilabel:`Storage Pool` drop-down menu, then "
"select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", "
@@ -1807,26 +1785,17 @@ msgstr ""
msgid ": Viewing All Accounts and Their Details"
msgstr ""
#: ../../sysadmclient.rst:930
#: ../../sysadmclient.rst:938
msgid ": Initialize PersonaCrypt Device"
msgstr ""
#: ../../sysadmclient.rst:932
msgid ""
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
"Note this section is hidden if the currently logged in user is selected. "
"Also, if you have just created a user and do not see these options, click "
":guilabel:`Save` then re-highlight the user to display these options:"
msgstr ""
#: ../../sysadmclient.rst:947
#: ../../sysadmclient.rst:955
msgid ""
"To prepare a PersonaCrypt device for this user, insert a USB stick and click"
" :guilabel:`Initialize Device`."
msgstr ""
#: ../../sysadmclient.rst:957
#: ../../sysadmclient.rst:965
msgid ""
"Type a password to associate with the device. Click :guilabel:`Save` to "
"initialize the device. The User Manager may take a moment to prepare the "
@@ -1834,49 +1803,49 @@ msgid ""
" to allow removal of PersonaCrypt."
msgstr ""
#: ../../sysadmclient.rst:1027
#: ../../sysadmclient.rst:1056
msgid ": Managing Groups Using User Manager"
msgstr ""
#: ../../sysadmclient.rst:1110
#: ../../sysadmclient.rst:1139
msgid ": Snapshot Tab"
msgstr ""
#: ../../sysadmclient.rst:1184
#: ../../sysadmclient.rst:1213
msgid ": Replication Tab"
msgstr ""
#: ../../sysadmclient.rst:1194
#: ../../sysadmclient.rst:1223
msgid ": Scheduling a Replication"
msgstr ""
#: ../../sysadmclient.rst:1268
#: ../../sysadmclient.rst:1297
msgid ": Scheduling a Snapshot"
msgstr ""
#: ../../sysadmclient.rst:1308
#: ../../sysadmclient.rst:1337
msgid ": Scheduling a Scrub"
msgstr ""
#: ../../sysadmclient.rst:1335
#: ../../sysadmclient.rst:1364
msgid ": Life Preserver Settings"
msgstr ""
#: ../../sysadmclient.rst:1442
#: ../../sysadmclient.rst:1471
msgid ""
":numref:`Table %s <cmdgui>` shows the command line equivalents to the "
"graphical options provided by the Life Preserver GUI."
msgstr ""
#: ../../sysadmclient.rst:1495
#: ../../sysadmclient.rst:1524
msgid ": Selecting to Restore/Clone From Backup"
msgstr ""
#: ../../sysadmclient.rst:1517
#: ../../sysadmclient.rst:1546
msgid ": Input the Information for a SSH Restore"
msgstr ""
#: ../../sysadmclient.rst:1523
#: ../../sysadmclient.rst:1552
msgid ""
"Once the connection to the backup server succeeds, you will be able to "
"select which host to restore. After making your selection, click "
@@ -1892,7 +1861,7 @@ msgid ""
":guilabel:`Next` to perform the restore."
msgstr ""
#: ../../sysadmclient.rst:987
#: ../../sysadmclient.rst:970
msgid ""
"Once a user has been initialized for PersonaCrypt on the system, their user "
"account will no longer be displayed when logging in, **unless** their "
@@ -1901,7 +1870,7 @@ msgid ""
":numref:`Figure %s <troslogin5>`."
msgstr ""
#: ../../sysadmclient.rst:997
#: ../../sysadmclient.rst:980
msgid ": |trueos| Login Screen with PersonaCrypt"
msgstr ""
@@ -1949,7 +1918,7 @@ msgstr ""
msgid ": |sysadm| Task Manager"
msgstr ""
#: ../../sysadmclient.rst:1103
#: ../../sysadmclient.rst:1132
msgid ""
":numref:`Figure %s <lpreserver1>` shows the :guilabel:`Snapshots` tab on a "
"system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"."
@@ -2013,6 +1982,134 @@ msgid ""
":guilabel:`Save Settings`."
msgstr ""
#: ../../sysadmclient.rst:894
msgid ""
"|trueos| provides support for a security feature known as PersonaCrypt. A "
"PersonaCrypt device is a removable USB media, such as a USB flash drive, "
"formatted with ZFS and encrypted with either GELI or PEFS. This device is "
"used to hold a specific user's home directory, meaning they can securely "
"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 "
"or higher system. For example, this can be used to securely access one's "
"home directory from a laptop, home computer, and work computer. The device "
"is protected by an encryption key and a different (recommended) password "
"separate from the user's login password."
msgstr ""
#: ../../sysadmclient.rst:916
msgid "GELI"
msgstr ""
#: ../../sysadmclient.rst:918
msgid ""
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
"your passphrase, and the other being a key stored on disk. Without both of "
"these parts, the media cannot be decrypted. This means if somebody steals "
"the key and manages to get your password, it is still worthless without the "
"system it was paired with. GELI is used by default in |trueos| as it is more"
" fully featured over PEFS."
msgstr ""
#: ../../sysadmclient.rst:940
msgid ""
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
"buttons are available in the :guilabel:`PersonaCrypt` tab of "
":guilabel:`Advanced Mode`. Note this section is hidden if the currently "
"logged in user is selected. Also, if you have just created a user and do not"
" see these options, click :guilabel:`Save`, then re-highlight the user to "
"display these options:"
msgstr ""
#: ../../sysadmclient.rst:999
msgid "PEFS"
msgstr ""
#: ../../sysadmclient.rst:1001
msgid ""
"`PEFS <http://pefs.io/>`_ stands for Private Encrypted File System. It is "
"open source software freely available under the BSD license, and is included"
" in |trueos| by default. PEFS runs on top of any existing file system, "
"providing an encryption layer independent of the underlying file system. "
"PersonaCrypt can be configured to use PEFS in place of GELI, which "
"eliminates the need for external media, as the encrypted PEFS database is "
"stored on the local disk."
msgstr ""
#: ../../sysadmclient.rst:1009
msgid ""
"While PEFS does not use a USB drive, be sure to print or otherwise backup "
"the PEFS generated key fragment stored on the disk."
msgstr ""
#: ../../sysadmclient.rst:1012
msgid "**Initialize PEFS with the Command Line**"
msgstr ""
#: ../../sysadmclient.rst:1014
msgid ""
"Because PEFS does not use a USB drive with its encryption, the user will "
"need a password file (pfile) containing the desired password, **before** "
"initializing PEFS for a user account. Once this pfile is created, enabling "
"PEFS through PersonaCrypt is accomplished in a CLI with "
":command:`personacrypt init <username> <pfile> PEFS`."
msgstr ""
#: ../../sysadmclient.rst:1020
msgid ""
"For example, the user account **test** has a pfile named "
":file:`testpfile.txt`, which contains the single text string of **test's** "
"chosen password. Next, the administrator adds PEFS encryption to the "
"**test** acount by opening a CLI, logging in as root, and typing:"
msgstr ""
#: ../../sysadmclient.rst:1029
msgid ""
"PersonaCrypt will initialize the account **test** with PEFS, using the "
"string in :file:`testpfile.txt` as the new password."
msgstr ""
#: ../../sysadmclient.rst:1032
msgid ""
"The |sysadm| User Manager can also initialize a user account with PEFS by "
"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` "
"drop down menu of the :guilabel:`PersonaCrypt` tab."
msgstr ""
#: ../../sysadmclient.rst:1036
msgid ""
"In addition to initializing an account with PEFS, PersonaCrypt also supports"
" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt "
"export <username>` and :command:`personacrypt import <keyfile>`, "
"respectively."
msgstr ""
#~ msgid ""
#~ "|trueos| provides support for a security feature known as PersonaCrypt. A "
#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
#~ " with ZFS and encrypted with GELI. This device is used to hold a specific "
#~ "user's home directory, meaning they can securely transport and access their "
#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
#~ "example, this can be used to securely access one's home directory from a "
#~ "laptop, home computer, and work computer. The device is protected by an "
#~ "encryption key and a password which is, and should be, separate from the "
#~ "user's login password."
#~ msgstr ""
#~ msgid ""
#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being "
#~ "your passphrase, and the other being a key stored on disk. Without both of "
#~ "these parts, the media cannot be decrypted. This means if somebody steals "
#~ "the key and manages to get your password, it is still worthless without the "
#~ "system it was paired with."
#~ msgstr ""
#~ msgid ""
#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two "
#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
#~ "Note this section is hidden if the currently logged in user is selected. "
#~ "Also, if you have just created a user and do not see these options, click "
#~ ":guilabel:`Save` then re-highlight the user to display these options:"
#~ msgstr ""
#~ msgid ""
#~ "**Max Boot Environments:** |trueos| automatically creates a boot environment"
#~ " before updating any software, the operating system, or applying a system "

View File

@@ -482,7 +482,7 @@ msgid ""
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <update4>`."
msgstr ""
#: ../../sysadmclient.rst:1326
#: ../../sysadmclient.rst:1355
msgid "Settings Tab"
msgstr ""
@@ -924,20 +924,7 @@ msgstr ""
msgid "PersonaCrypt"
msgstr ""
#: ../../sysadmclient.rst:894
msgid ""
"|trueos| provides support for a security feature known as PersonaCrypt. A "
"PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
" with ZFS and encrypted with GELI. This device is used to hold a specific "
"user's home directory, meaning they can securely transport and access their "
"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
"example, this can be used to securely access one's home directory from a "
"laptop, home computer, and work computer. The device is protected by an "
"encryption key and a password which is, and should be, separate from the "
"user's login password."
msgstr ""
#: ../../sysadmclient.rst:904
#: ../../sysadmclient.rst:905
msgid ""
"When a user is configured to use a PersonaCrypt device, that user can not "
"login using an unencrypted session on the same system. In other words, the "
@@ -946,22 +933,13 @@ msgid ""
"different user accounts, one for each type of session."
msgstr ""
#: ../../sysadmclient.rst:911
msgid ""
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
"your passphrase, and the other being a key stored on disk. Without both of "
"these parts, the media cannot be decrypted. This means if somebody steals "
"the key and manages to get your password, it is still worthless without the "
"system it was paired with."
msgstr ""
#: ../../sysadmclient.rst:917
#: ../../sysadmclient.rst:925
msgid ""
"USB devices do eventually fail. Always backup any important files stored on "
"the PersonaCrypt device to another device or system."
msgstr ""
#: ../../sysadmclient.rst:920
#: ../../sysadmclient.rst:928
msgid ""
"The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt "
"device for any login user, **except** for the currently logged in user. In "
@@ -969,13 +947,13 @@ msgid ""
"*dlavigne*, has been created and the entry for the user has been clicked."
msgstr ""
#: ../../sysadmclient.rst:939
#: ../../sysadmclient.rst:947
msgid ""
"**Initialize Device:** Used to prepare the USB device which will be used as "
"the user's home directory."
msgstr ""
#: ../../sysadmclient.rst:942
#: ../../sysadmclient.rst:950
msgid ""
"**Import Key:** If the user has already created a PersonaCrypt device on "
"another |trueos| system, click this button to import a previously saved copy"
@@ -983,7 +961,7 @@ msgid ""
"can now login to this computer using PersonaCrypt."
msgstr ""
#: ../../sysadmclient.rst:950
#: ../../sysadmclient.rst:958
msgid ""
"Since the USB stick will hold the user's home directory and files, ensure "
"the stick is large enough to meet the anticipated storage needs of the home "
@@ -993,7 +971,7 @@ msgid ""
"logged in."
msgstr ""
#: ../../sysadmclient.rst:999
#: ../../sysadmclient.rst:982
msgid ""
"When stealth sessions have been configured, PersonaCrypt users will still be"
" displayed in the login menu, even if their USB device is not inserted. This"
@@ -1001,47 +979,47 @@ msgid ""
"session."
msgstr ""
#: ../../sysadmclient.rst:1004
#: ../../sysadmclient.rst:987
msgid ""
"In the field with the yellow padlock icon, input the password for the user "
"account. In the field with the grey USB stick icon, input the password "
"associated with the PersonaCrypt device."
msgstr ""
#: ../../sysadmclient.rst:1008
#: ../../sysadmclient.rst:991
msgid ""
"To prevent data corruption and freezing the system **DO NOT** remove the "
"PersonaCrypt device while logged in! Always log out of your session before "
"physically removing the device."
msgstr ""
#: ../../sysadmclient.rst:1016
#: ../../sysadmclient.rst:1045
msgid "Managing Groups"
msgstr ""
#: ../../sysadmclient.rst:1018
#: ../../sysadmclient.rst:1047
msgid ""
"Click the :guilabel:`Groups` tab to view and manage the groups on the "
"system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s <user4>`, "
"shows the group membership for the *operator* and *wheel* groups:"
msgstr ""
#: ../../sysadmclient.rst:1029
#: ../../sysadmclient.rst:1058
msgid "This screen has 2 columns:"
msgstr ""
#: ../../sysadmclient.rst:1031
#: ../../sysadmclient.rst:1060
msgid ""
"**Members:** Indicates if the highlighted group contains any user accounts."
msgstr ""
#: ../../sysadmclient.rst:1034
#: ../../sysadmclient.rst:1063
msgid ""
"**Available:** Shows all of the system and user accounts on the system in "
"alphabetical order."
msgstr ""
#: ../../sysadmclient.rst:1037
#: ../../sysadmclient.rst:1066
msgid ""
"To add an account to a group, highlight the group name, then highlight the "
"account name in the :guilabel:`Available` column. Click the left arrow and "
@@ -1051,7 +1029,7 @@ msgid ""
"added to a group."
msgstr ""
#: ../../sysadmclient.rst:1044
#: ../../sysadmclient.rst:1073
msgid ""
"If you add a user to the *operator* group, they will have permission to use "
"commands requiring administrative access and will be prompted for their own "
@@ -1060,15 +1038,15 @@ msgid ""
"will be prompted for the superuser password whenever they use the command."
msgstr ""
#: ../../sysadmclient.rst:1051
#: ../../sysadmclient.rst:1080
msgid "To view all of the groups on the system, click :guilabel:`Advanced`."
msgstr ""
#: ../../sysadmclient.rst:1057
#: ../../sysadmclient.rst:1086
msgid "Life Preserver"
msgstr ""
#: ../../sysadmclient.rst:1059
#: ../../sysadmclient.rst:1088
msgid ""
"The Life Preserver utility is designed to take full advantage of the "
"functionality provided by ZFS snapshots. This utility allows you to schedule"
@@ -1077,25 +1055,25 @@ msgid ""
"benefits:"
msgstr ""
#: ../../sysadmclient.rst:1081
#: ../../sysadmclient.rst:1110
msgid ""
"Replication is an efficient way to keep the files on two systems in sync. "
"With Life Preserver, the snapshots taken on the |trueos| system will be "
"synchronized with their versions stored on the specified backup server."
msgstr ""
#: ../../sysadmclient.rst:1086
#: ../../sysadmclient.rst:1115
msgid "Snapshots are sent to the backup server over an encrypted connection."
msgstr ""
#: ../../sysadmclient.rst:1088
#: ../../sysadmclient.rst:1117
msgid ""
"Having a copy of the snapshots on another system makes it possible to "
"perform an operating system restore should the |trueos| system become "
"unusable or to deploy an identical system to different hardware."
msgstr ""
#: ../../sysadmclient.rst:1092
#: ../../sysadmclient.rst:1121
msgid ""
"To manage snapshots and replication using the |sysadm| graphical client, go "
"to :menuselection:`Utilities --> Life Preserver`. The rest of this section "
@@ -1103,16 +1081,16 @@ msgid ""
"Preserver."
msgstr ""
#: ../../sysadmclient.rst:1101
#: ../../sysadmclient.rst:1130
msgid "Snapshots Tab"
msgstr ""
#: ../../sysadmclient.rst:1112
#: ../../sysadmclient.rst:1141
msgid ""
"This screen will display any created snapshots and provides buttons to:"
msgstr ""
#: ../../sysadmclient.rst:1114
#: ../../sysadmclient.rst:1143
msgid ""
"**Create:** Used to create a manual snapshot of the specified pool now. For "
"example, you could create a snapshot before making changes to an important "
@@ -1126,14 +1104,14 @@ msgid ""
"snapshot was created."
msgstr ""
#: ../../sysadmclient.rst:1125
#: ../../sysadmclient.rst:1154
msgid ""
"**Remove:** Used to delete a highlighted snapshot. **This is a permanent "
"change that can not be reversed.** In other words, the versions of files at "
"the point in time the snapshot was created will be lost."
msgstr ""
#: ../../sysadmclient.rst:1130
#: ../../sysadmclient.rst:1159
msgid ""
"**Revert:** If you highlight a snapshot entry, this button and the drop-down"
" menu next to it will activate. You can use the drop-down menu to specify "
@@ -1143,11 +1121,11 @@ msgid ""
" after the snapshot was taken will be lost."
msgstr ""
#: ../../sysadmclient.rst:1142
#: ../../sysadmclient.rst:1171
msgid "Replication Tab"
msgstr ""
#: ../../sysadmclient.rst:1144
#: ../../sysadmclient.rst:1173
msgid ""
"Life Preserver can be configured to replicate snapshots to another system "
"over an encrypted SSH connection, though the backup itself is stored in an "
@@ -1155,13 +1133,13 @@ msgid ""
" another system."
msgstr ""
#: ../../sysadmclient.rst:1149
#: ../../sysadmclient.rst:1178
msgid ""
"In order to configure replication, the remote system to hold a copy of the "
"snapshots must first meet several requirements:"
msgstr ""
#: ../../sysadmclient.rst:1156
#: ../../sysadmclient.rst:1185
msgid ""
"The backup server **must be formatted with the latest version of ZFS,** also"
" known as ZFS feature flags or ZFSv5000. Operating systems that support this"
@@ -1169,14 +1147,14 @@ msgid ""
"FreeNAS 9.1.x or higher."
msgstr ""
#: ../../sysadmclient.rst:1162
#: ../../sysadmclient.rst:1191
msgid ""
"The system must have SSH installed and the SSH service must be running. If "
"the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is"
" already installed, but you will need to start the SSH service."
msgstr ""
#: ../../sysadmclient.rst:1167
#: ../../sysadmclient.rst:1196
msgid ""
"If the backup server is running |trueos| or |pcbsd|, you will need to open "
"TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is "
@@ -1186,7 +1164,7 @@ msgid ""
"backup system, make sure it has a rule to allow SSH."
msgstr ""
#: ../../sysadmclient.rst:1175
#: ../../sysadmclient.rst:1204
msgid ""
":numref:`Figure %s <lpreserver2>` shows the initial :guilabel:`Replication` "
"tab on a system that has not yet been configured for replication. This "
@@ -1194,29 +1172,29 @@ msgid ""
"schedule."
msgstr ""
#: ../../sysadmclient.rst:1186
#: ../../sysadmclient.rst:1215
msgid ""
"To schedule the replication, click :guilabel:`+` to display the \"Setup "
"Replication\" screen shown in :numref:`Figure %s <lpreserver3>`."
msgstr ""
#: ../../sysadmclient.rst:1196
#: ../../sysadmclient.rst:1225
msgid "Input the following information:"
msgstr ""
#: ../../sysadmclient.rst:1198
#: ../../sysadmclient.rst:1227
msgid ""
"**Host IP:** The IP address of the remote system to store the replicated "
"snapshots."
msgstr ""
#: ../../sysadmclient.rst:1201
#: ../../sysadmclient.rst:1230
msgid ""
"**SSH Port:** The port number, if the remote system is running SSH on a port"
" other than the default of 22."
msgstr ""
#: ../../sysadmclient.rst:1204
#: ../../sysadmclient.rst:1233
msgid ""
"**Dataset:** The name of the ZFS pool and optional dataset on the remote "
"system. For example, \"remotetank\" will save the snapshots to a ZFS pool of"
@@ -1224,7 +1202,7 @@ msgid ""
"existing dataset named \"mybackups\" on the pool named \"remotetank\"."
msgstr ""
#: ../../sysadmclient.rst:1210
#: ../../sysadmclient.rst:1239
msgid ""
"**Frequency:** Use the drop-down menu to select how often to initiate the "
"replication. Available choices are :guilabel:`Sync with snapshot` (at the "
@@ -1235,87 +1213,87 @@ msgid ""
":guilabel:`Start`) in this screen."
msgstr ""
#: ../../sysadmclient.rst:1219
#: ../../sysadmclient.rst:1248
msgid ""
"**Username:** The username must already exist on the remote system, have "
"write access to the specified \"Dataset\", and have permission to SSH into "
"that system."
msgstr ""
#: ../../sysadmclient.rst:1223
#: ../../sysadmclient.rst:1252
msgid "**Password:** The password associated with the \"Username\"."
msgstr ""
#: ../../sysadmclient.rst:1225
#: ../../sysadmclient.rst:1254
msgid ""
"**Local DS:** Use the drop-down menu to select the pool or dataset to "
"replicate to the remote system."
msgstr ""
#: ../../sysadmclient.rst:1228
#: ../../sysadmclient.rst:1257
msgid ""
"The buttons at the top of the \"Setup Replication\" screen have several "
"uses:"
msgstr ""
#: ../../sysadmclient.rst:1231
#: ../../sysadmclient.rst:1260
msgid ""
"**+ icon:** Sdd a replication schedule. Multiple schedules are supported, "
"meaning you can replicate to multiple systems or replicate different \"Local"
" DS\" datasets at different times."
msgstr ""
#: ../../sysadmclient.rst:1235
#: ../../sysadmclient.rst:1264
msgid ""
"**- icon:** Remove an already created, and highlighted, replication "
"schedule."
msgstr ""
#: ../../sysadmclient.rst:1238
#: ../../sysadmclient.rst:1267
msgid "**gear icon:** Modify the schedule for the highlighted replication."
msgstr ""
#: ../../sysadmclient.rst:1240
#: ../../sysadmclient.rst:1269
msgid ""
"**Start:** Manually starts a replication to the system specified in the "
"highlighted replication."
msgstr ""
#: ../../sysadmclient.rst:1243
#: ../../sysadmclient.rst:1272
msgid ""
"**Initialize:** Deletes the existing replicated snapshots on the remote "
"system and starts a new replication. This is useful if a replication gets "
"stuck and will not complete."
msgstr ""
#: ../../sysadmclient.rst:1251
#: ../../sysadmclient.rst:1280
msgid "Schedules Tab"
msgstr ""
#: ../../sysadmclient.rst:1253
#: ../../sysadmclient.rst:1282
msgid ""
"This tab is used to manage when snapshots of the ZFS pool are created. "
"Multiple snapshot schedules are supported if the system has multiple pools."
msgstr ""
#: ../../sysadmclient.rst:1257
#: ../../sysadmclient.rst:1286
msgid ""
"Snapshots are created on the entire pool as they are needed when "
":ref:`Restoring the Operating System`."
msgstr ""
#: ../../sysadmclient.rst:1260
#: ../../sysadmclient.rst:1289
msgid ""
"To create a snapshot schedule, click the :guilabel:`camera` icon in the "
"lower left corner of this tab. This will activate the \"Setup Snapshot "
"Schedule\" pane as seen in :numref:`Figure %s <lpreserver4>`."
msgstr ""
#: ../../sysadmclient.rst:1270
#: ../../sysadmclient.rst:1299
msgid "This pane contains several options:"
msgstr ""
#: ../../sysadmclient.rst:1275
#: ../../sysadmclient.rst:1304
msgid ""
"**Snapshots to keep:** Snapshots are automatically pruned after the "
"specified number of snapshots to prevent snapshots from eventually using up "
@@ -1326,7 +1304,7 @@ msgid ""
"manually in the :guilabel:`Snapshots` tab."
msgstr ""
#: ../../sysadmclient.rst:1284
#: ../../sysadmclient.rst:1313
msgid ""
"**Frequency:** Use the drop-down menu to select how often snapshots occur. "
"Options include \"Daily\" (which will allow you to select the time of day), "
@@ -1334,37 +1312,37 @@ msgid ""
"Minutes\"."
msgstr ""
#: ../../sysadmclient.rst:1289
#: ../../sysadmclient.rst:1318
msgid ""
"Once you have created a snapshot schedule, you can use the \"gear\" icon "
"next to the \"camera\" icon to modify the highlighted schedule or the \"X\" "
"icon to delete the highlighted schedule."
msgstr ""
#: ../../sysadmclient.rst:1300
#: ../../sysadmclient.rst:1329
msgid ""
"To schedule when the scrub occurs, click the third icon from the right which"
" will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure "
"%s <lpreserver5>`."
msgstr ""
#: ../../sysadmclient.rst:1318
#: ../../sysadmclient.rst:1347
msgid ""
"Once you have created a scrub schedule, you can use the \"gear\" icon next "
"to the \"schedule scrub\" icon to modify the highlighted schedule or the "
"\"X\" icon to delete the highlighted schedule."
msgstr ""
#: ../../sysadmclient.rst:1328
#: ../../sysadmclient.rst:1357
msgid ""
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <lpreserver6>`."
msgstr ""
#: ../../sysadmclient.rst:1337
#: ../../sysadmclient.rst:1366
msgid "Many settings are configurable:"
msgstr ""
#: ../../sysadmclient.rst:1339
#: ../../sysadmclient.rst:1368
msgid ""
"**Disk Usage Warning:** Enter a number up to 99 to indicate at which "
"percentage of disk space Life Preserver will display an alert in the system "
@@ -1372,41 +1350,41 @@ msgid ""
"space."
msgstr ""
#: ../../sysadmclient.rst:1344
#: ../../sysadmclient.rst:1373
msgid ""
"**Email:** To receive an email when disk usage reaches the percentage "
"configured in the \"Disk Usage Warning\", enter an email address."
msgstr ""
#: ../../sysadmclient.rst:1347
#: ../../sysadmclient.rst:1376
msgid ""
"**Email Trigger:** This setting can be set to \"All\", \"Warn\", or "
"\"Error\" and indicates the type of condition which will trigger an email "
"message."
msgstr ""
#: ../../sysadmclient.rst:1350
#: ../../sysadmclient.rst:1379
msgid "**Recursive Management:**"
msgstr ""
#: ../../sysadmclient.rst:1352
#: ../../sysadmclient.rst:1381
msgid ""
"If you make any changes in this screen, press :guilabel:`Save Settings` to "
"apply them."
msgstr ""
#: ../../sysadmclient.rst:1359
#: ../../sysadmclient.rst:1388
msgid "Using the lpreserver CLI"
msgstr ""
#: ../../sysadmclient.rst:1361
#: ../../sysadmclient.rst:1390
msgid ""
"The :command:`lpreserver` command line utility can also be used to manage "
"snapshots and replication. This command needs to be run as the superuser. To"
" display its usage, type the command without any arguments:"
msgstr ""
#: ../../sysadmclient.rst:1381
#: ../../sysadmclient.rst:1410
msgid ""
"Each command has its own help text that describes its parameters and "
"provides a usage example. For example, to receive help on how to use the "
@@ -1417,104 +1395,104 @@ msgstr ""
msgid "Command Line and GUI Equivalents"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**Command Line**"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**GUI**"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**Description**"
msgstr ""
#: ../../sysadmclient.rst:1452
#: ../../sysadmclient.rst:1481
msgid "**cronsnap**"
msgstr ""
#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499
msgid "\"Snapshots\" tab"
msgstr ""
#: ../../sysadmclient.rst:1452
#: ../../sysadmclient.rst:1481
msgid ""
"schedule when snapshots occur and how long to keep them; the **stop** option"
" can be used to disable snapshot creation"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "**cronscrub**"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "\"Schedules\" tab"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "schedule a ZFS scrub"
msgstr ""
#: ../../sysadmclient.rst:1459
#: ../../sysadmclient.rst:1488
msgid "**get**"
msgstr ""
#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495
msgid "\"Settings\" tab"
msgstr ""
#: ../../sysadmclient.rst:1459
#: ../../sysadmclient.rst:1488
msgid "list Life Preserver options"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid "**replicate**"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid "\"Replication\" tab"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid ""
"used to list, add, and remove backup server; read the **help** for this "
"command for examples"
msgstr ""
#: ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1495
msgid "**set**"
msgstr ""
#: ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1495
msgid ""
"configures Life Preserver options; read **help** for the list of "
"configurable options"
msgstr ""
#: ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1499
msgid "**snapshot**"
msgstr ""
#: ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1499
msgid ""
"create and replicate a new ZFS snapshot; by default, snapshots are "
"recursive, meaning that a that a snapshot is taken of every dataset within a"
" pool"
msgstr ""
#: ../../sysadmclient.rst:1476
#: ../../sysadmclient.rst:1505
msgid "**status**"
msgstr ""
#: ../../sysadmclient.rst:1476
#: ../../sysadmclient.rst:1505
msgid "lists the last snapshot name and replication status"
msgstr ""
#: ../../sysadmclient.rst:1483
#: ../../sysadmclient.rst:1512
msgid "Restoring the Operating System"
msgstr ""
#: ../../sysadmclient.rst:1485
#: ../../sysadmclient.rst:1514
msgid ""
"If you have replicated the system's snapshots to a remote backup server, you"
" can use a |trueos| installation media to perform an operating system "
@@ -1522,7 +1500,7 @@ msgid ""
"you get to the screen shown in :numref:`Figure %s <restore1>`."
msgstr ""
#: ../../sysadmclient.rst:1497
#: ../../sysadmclient.rst:1526
msgid ""
"Before you can perform a restore, the network interface must be configured. "
"Click :guilabel:`Network Connectivity` (second icon from the left) in order "
@@ -1533,7 +1511,7 @@ msgid ""
"continuing."
msgstr ""
#: ../../sysadmclient.rst:1505
#: ../../sysadmclient.rst:1534
msgid ""
"Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and"
" :guilabel:`Next`. This will start the Restore Wizard. In the screen shown "
@@ -1543,7 +1521,7 @@ msgid ""
"number."
msgstr ""
#: ../../sysadmclient.rst:1519
#: ../../sysadmclient.rst:1548
msgid ""
"Click :guilabel:`Next` and the wizard will provide a summary of your "
"selections. If correct, click :guilabel:`Finish`; otherwise, click "
@@ -1626,7 +1604,7 @@ msgid ""
"press :guilabel:`Close Ports`."
msgstr ""
#: ../../sysadmclient.rst:1152
#: ../../sysadmclient.rst:1181
msgid ""
"Snapshots occurring too frequently can introduce errors in replication. To "
"avoid errors, ensure snapshots are configured to take place slower than the "
@@ -1685,7 +1663,7 @@ msgid ""
"accounts."
msgstr ""
#: ../../sysadmclient.rst:1065
#: ../../sysadmclient.rst:1094
msgid ""
"A snapshot provides a \"point-in-time\" image of the ZFS pool. This is "
"similar to a full system backup as the snapshot contains the information for"
@@ -1703,26 +1681,26 @@ msgid ""
"snapshot."
msgstr ""
#: ../../sysadmclient.rst:1272
#: ../../sysadmclient.rst:1301
msgid ""
"**Storage Pool:** Select the ZFS storage pool that contains the datasets "
"that you wish to snapshot."
msgstr ""
#: ../../sysadmclient.rst:1293
#: ../../sysadmclient.rst:1322
msgid ""
"This screen can also be used to manage the ZFS scrub schedule. Scrubs are "
"recommended as they can provide an early indication of a potential disk "
"failure. Scrubs can be scheduled on a per-pool basis."
msgstr ""
#: ../../sysadmclient.rst:1297
#: ../../sysadmclient.rst:1326
msgid ""
"If you have multiple pools, be sure to create a scrub schedule for each "
"pool."
msgstr ""
#: ../../sysadmclient.rst:1310
#: ../../sysadmclient.rst:1339
msgid ""
"Select the pool from the :guilabel:`Storage Pool` drop-down menu, then "
"select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", "
@@ -1807,26 +1785,17 @@ msgstr ""
msgid ": Viewing All Accounts and Their Details"
msgstr ""
#: ../../sysadmclient.rst:930
#: ../../sysadmclient.rst:938
msgid ": Initialize PersonaCrypt Device"
msgstr ""
#: ../../sysadmclient.rst:932
msgid ""
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
"Note this section is hidden if the currently logged in user is selected. "
"Also, if you have just created a user and do not see these options, click "
":guilabel:`Save` then re-highlight the user to display these options:"
msgstr ""
#: ../../sysadmclient.rst:947
#: ../../sysadmclient.rst:955
msgid ""
"To prepare a PersonaCrypt device for this user, insert a USB stick and click"
" :guilabel:`Initialize Device`."
msgstr ""
#: ../../sysadmclient.rst:957
#: ../../sysadmclient.rst:965
msgid ""
"Type a password to associate with the device. Click :guilabel:`Save` to "
"initialize the device. The User Manager may take a moment to prepare the "
@@ -1834,49 +1803,49 @@ msgid ""
" to allow removal of PersonaCrypt."
msgstr ""
#: ../../sysadmclient.rst:1027
#: ../../sysadmclient.rst:1056
msgid ": Managing Groups Using User Manager"
msgstr ""
#: ../../sysadmclient.rst:1110
#: ../../sysadmclient.rst:1139
msgid ": Snapshot Tab"
msgstr ""
#: ../../sysadmclient.rst:1184
#: ../../sysadmclient.rst:1213
msgid ": Replication Tab"
msgstr ""
#: ../../sysadmclient.rst:1194
#: ../../sysadmclient.rst:1223
msgid ": Scheduling a Replication"
msgstr ""
#: ../../sysadmclient.rst:1268
#: ../../sysadmclient.rst:1297
msgid ": Scheduling a Snapshot"
msgstr ""
#: ../../sysadmclient.rst:1308
#: ../../sysadmclient.rst:1337
msgid ": Scheduling a Scrub"
msgstr ""
#: ../../sysadmclient.rst:1335
#: ../../sysadmclient.rst:1364
msgid ": Life Preserver Settings"
msgstr ""
#: ../../sysadmclient.rst:1442
#: ../../sysadmclient.rst:1471
msgid ""
":numref:`Table %s <cmdgui>` shows the command line equivalents to the "
"graphical options provided by the Life Preserver GUI."
msgstr ""
#: ../../sysadmclient.rst:1495
#: ../../sysadmclient.rst:1524
msgid ": Selecting to Restore/Clone From Backup"
msgstr ""
#: ../../sysadmclient.rst:1517
#: ../../sysadmclient.rst:1546
msgid ": Input the Information for a SSH Restore"
msgstr ""
#: ../../sysadmclient.rst:1523
#: ../../sysadmclient.rst:1552
msgid ""
"Once the connection to the backup server succeeds, you will be able to "
"select which host to restore. After making your selection, click "
@@ -1892,7 +1861,7 @@ msgid ""
":guilabel:`Next` to perform the restore."
msgstr ""
#: ../../sysadmclient.rst:987
#: ../../sysadmclient.rst:970
msgid ""
"Once a user has been initialized for PersonaCrypt on the system, their user "
"account will no longer be displayed when logging in, **unless** their "
@@ -1901,7 +1870,7 @@ msgid ""
":numref:`Figure %s <troslogin5>`."
msgstr ""
#: ../../sysadmclient.rst:997
#: ../../sysadmclient.rst:980
msgid ": |trueos| Login Screen with PersonaCrypt"
msgstr ""
@@ -1949,7 +1918,7 @@ msgstr ""
msgid ": |sysadm| Task Manager"
msgstr ""
#: ../../sysadmclient.rst:1103
#: ../../sysadmclient.rst:1132
msgid ""
":numref:`Figure %s <lpreserver1>` shows the :guilabel:`Snapshots` tab on a "
"system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"."
@@ -2013,6 +1982,134 @@ msgid ""
":guilabel:`Save Settings`."
msgstr ""
#: ../../sysadmclient.rst:894
msgid ""
"|trueos| provides support for a security feature known as PersonaCrypt. A "
"PersonaCrypt device is a removable USB media, such as a USB flash drive, "
"formatted with ZFS and encrypted with either GELI or PEFS. This device is "
"used to hold a specific user's home directory, meaning they can securely "
"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 "
"or higher system. For example, this can be used to securely access one's "
"home directory from a laptop, home computer, and work computer. The device "
"is protected by an encryption key and a different (recommended) password "
"separate from the user's login password."
msgstr ""
#: ../../sysadmclient.rst:916
msgid "GELI"
msgstr ""
#: ../../sysadmclient.rst:918
msgid ""
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
"your passphrase, and the other being a key stored on disk. Without both of "
"these parts, the media cannot be decrypted. This means if somebody steals "
"the key and manages to get your password, it is still worthless without the "
"system it was paired with. GELI is used by default in |trueos| as it is more"
" fully featured over PEFS."
msgstr ""
#: ../../sysadmclient.rst:940
msgid ""
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
"buttons are available in the :guilabel:`PersonaCrypt` tab of "
":guilabel:`Advanced Mode`. Note this section is hidden if the currently "
"logged in user is selected. Also, if you have just created a user and do not"
" see these options, click :guilabel:`Save`, then re-highlight the user to "
"display these options:"
msgstr ""
#: ../../sysadmclient.rst:999
msgid "PEFS"
msgstr ""
#: ../../sysadmclient.rst:1001
msgid ""
"`PEFS <http://pefs.io/>`_ stands for Private Encrypted File System. It is "
"open source software freely available under the BSD license, and is included"
" in |trueos| by default. PEFS runs on top of any existing file system, "
"providing an encryption layer independent of the underlying file system. "
"PersonaCrypt can be configured to use PEFS in place of GELI, which "
"eliminates the need for external media, as the encrypted PEFS database is "
"stored on the local disk."
msgstr ""
#: ../../sysadmclient.rst:1009
msgid ""
"While PEFS does not use a USB drive, be sure to print or otherwise backup "
"the PEFS generated key fragment stored on the disk."
msgstr ""
#: ../../sysadmclient.rst:1012
msgid "**Initialize PEFS with the Command Line**"
msgstr ""
#: ../../sysadmclient.rst:1014
msgid ""
"Because PEFS does not use a USB drive with its encryption, the user will "
"need a password file (pfile) containing the desired password, **before** "
"initializing PEFS for a user account. Once this pfile is created, enabling "
"PEFS through PersonaCrypt is accomplished in a CLI with "
":command:`personacrypt init <username> <pfile> PEFS`."
msgstr ""
#: ../../sysadmclient.rst:1020
msgid ""
"For example, the user account **test** has a pfile named "
":file:`testpfile.txt`, which contains the single text string of **test's** "
"chosen password. Next, the administrator adds PEFS encryption to the "
"**test** acount by opening a CLI, logging in as root, and typing:"
msgstr ""
#: ../../sysadmclient.rst:1029
msgid ""
"PersonaCrypt will initialize the account **test** with PEFS, using the "
"string in :file:`testpfile.txt` as the new password."
msgstr ""
#: ../../sysadmclient.rst:1032
msgid ""
"The |sysadm| User Manager can also initialize a user account with PEFS by "
"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` "
"drop down menu of the :guilabel:`PersonaCrypt` tab."
msgstr ""
#: ../../sysadmclient.rst:1036
msgid ""
"In addition to initializing an account with PEFS, PersonaCrypt also supports"
" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt "
"export <username>` and :command:`personacrypt import <keyfile>`, "
"respectively."
msgstr ""
#~ msgid ""
#~ "|trueos| provides support for a security feature known as PersonaCrypt. A "
#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
#~ " with ZFS and encrypted with GELI. This device is used to hold a specific "
#~ "user's home directory, meaning they can securely transport and access their "
#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
#~ "example, this can be used to securely access one's home directory from a "
#~ "laptop, home computer, and work computer. The device is protected by an "
#~ "encryption key and a password which is, and should be, separate from the "
#~ "user's login password."
#~ msgstr ""
#~ msgid ""
#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being "
#~ "your passphrase, and the other being a key stored on disk. Without both of "
#~ "these parts, the media cannot be decrypted. This means if somebody steals "
#~ "the key and manages to get your password, it is still worthless without the "
#~ "system it was paired with."
#~ msgstr ""
#~ msgid ""
#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two "
#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
#~ "Note this section is hidden if the currently logged in user is selected. "
#~ "Also, if you have just created a user and do not see these options, click "
#~ ":guilabel:`Save` then re-highlight the user to display these options:"
#~ msgstr ""
#~ msgid ""
#~ "**Max Boot Environments:** |trueos| automatically creates a boot environment"
#~ " before updating any software, the operating system, or applying a system "

View File

@@ -482,7 +482,7 @@ msgid ""
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <update4>`."
msgstr ""
#: ../../sysadmclient.rst:1326
#: ../../sysadmclient.rst:1355
msgid "Settings Tab"
msgstr ""
@@ -924,20 +924,7 @@ msgstr ""
msgid "PersonaCrypt"
msgstr ""
#: ../../sysadmclient.rst:894
msgid ""
"|trueos| provides support for a security feature known as PersonaCrypt. A "
"PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
" with ZFS and encrypted with GELI. This device is used to hold a specific "
"user's home directory, meaning they can securely transport and access their "
"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
"example, this can be used to securely access one's home directory from a "
"laptop, home computer, and work computer. The device is protected by an "
"encryption key and a password which is, and should be, separate from the "
"user's login password."
msgstr ""
#: ../../sysadmclient.rst:904
#: ../../sysadmclient.rst:905
msgid ""
"When a user is configured to use a PersonaCrypt device, that user can not "
"login using an unencrypted session on the same system. In other words, the "
@@ -946,22 +933,13 @@ msgid ""
"different user accounts, one for each type of session."
msgstr ""
#: ../../sysadmclient.rst:911
msgid ""
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
"your passphrase, and the other being a key stored on disk. Without both of "
"these parts, the media cannot be decrypted. This means if somebody steals "
"the key and manages to get your password, it is still worthless without the "
"system it was paired with."
msgstr ""
#: ../../sysadmclient.rst:917
#: ../../sysadmclient.rst:925
msgid ""
"USB devices do eventually fail. Always backup any important files stored on "
"the PersonaCrypt device to another device or system."
msgstr ""
#: ../../sysadmclient.rst:920
#: ../../sysadmclient.rst:928
msgid ""
"The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt "
"device for any login user, **except** for the currently logged in user. In "
@@ -969,13 +947,13 @@ msgid ""
"*dlavigne*, has been created and the entry for the user has been clicked."
msgstr ""
#: ../../sysadmclient.rst:939
#: ../../sysadmclient.rst:947
msgid ""
"**Initialize Device:** Used to prepare the USB device which will be used as "
"the user's home directory."
msgstr ""
#: ../../sysadmclient.rst:942
#: ../../sysadmclient.rst:950
msgid ""
"**Import Key:** If the user has already created a PersonaCrypt device on "
"another |trueos| system, click this button to import a previously saved copy"
@@ -983,7 +961,7 @@ msgid ""
"can now login to this computer using PersonaCrypt."
msgstr ""
#: ../../sysadmclient.rst:950
#: ../../sysadmclient.rst:958
msgid ""
"Since the USB stick will hold the user's home directory and files, ensure "
"the stick is large enough to meet the anticipated storage needs of the home "
@@ -993,7 +971,7 @@ msgid ""
"logged in."
msgstr ""
#: ../../sysadmclient.rst:999
#: ../../sysadmclient.rst:982
msgid ""
"When stealth sessions have been configured, PersonaCrypt users will still be"
" displayed in the login menu, even if their USB device is not inserted. This"
@@ -1001,47 +979,47 @@ msgid ""
"session."
msgstr ""
#: ../../sysadmclient.rst:1004
#: ../../sysadmclient.rst:987
msgid ""
"In the field with the yellow padlock icon, input the password for the user "
"account. In the field with the grey USB stick icon, input the password "
"associated with the PersonaCrypt device."
msgstr ""
#: ../../sysadmclient.rst:1008
#: ../../sysadmclient.rst:991
msgid ""
"To prevent data corruption and freezing the system **DO NOT** remove the "
"PersonaCrypt device while logged in! Always log out of your session before "
"physically removing the device."
msgstr ""
#: ../../sysadmclient.rst:1016
#: ../../sysadmclient.rst:1045
msgid "Managing Groups"
msgstr ""
#: ../../sysadmclient.rst:1018
#: ../../sysadmclient.rst:1047
msgid ""
"Click the :guilabel:`Groups` tab to view and manage the groups on the "
"system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s <user4>`, "
"shows the group membership for the *operator* and *wheel* groups:"
msgstr ""
#: ../../sysadmclient.rst:1029
#: ../../sysadmclient.rst:1058
msgid "This screen has 2 columns:"
msgstr ""
#: ../../sysadmclient.rst:1031
#: ../../sysadmclient.rst:1060
msgid ""
"**Members:** Indicates if the highlighted group contains any user accounts."
msgstr ""
#: ../../sysadmclient.rst:1034
#: ../../sysadmclient.rst:1063
msgid ""
"**Available:** Shows all of the system and user accounts on the system in "
"alphabetical order."
msgstr ""
#: ../../sysadmclient.rst:1037
#: ../../sysadmclient.rst:1066
msgid ""
"To add an account to a group, highlight the group name, then highlight the "
"account name in the :guilabel:`Available` column. Click the left arrow and "
@@ -1051,7 +1029,7 @@ msgid ""
"added to a group."
msgstr ""
#: ../../sysadmclient.rst:1044
#: ../../sysadmclient.rst:1073
msgid ""
"If you add a user to the *operator* group, they will have permission to use "
"commands requiring administrative access and will be prompted for their own "
@@ -1060,15 +1038,15 @@ msgid ""
"will be prompted for the superuser password whenever they use the command."
msgstr ""
#: ../../sysadmclient.rst:1051
#: ../../sysadmclient.rst:1080
msgid "To view all of the groups on the system, click :guilabel:`Advanced`."
msgstr ""
#: ../../sysadmclient.rst:1057
#: ../../sysadmclient.rst:1086
msgid "Life Preserver"
msgstr ""
#: ../../sysadmclient.rst:1059
#: ../../sysadmclient.rst:1088
msgid ""
"The Life Preserver utility is designed to take full advantage of the "
"functionality provided by ZFS snapshots. This utility allows you to schedule"
@@ -1077,25 +1055,25 @@ msgid ""
"benefits:"
msgstr ""
#: ../../sysadmclient.rst:1081
#: ../../sysadmclient.rst:1110
msgid ""
"Replication is an efficient way to keep the files on two systems in sync. "
"With Life Preserver, the snapshots taken on the |trueos| system will be "
"synchronized with their versions stored on the specified backup server."
msgstr ""
#: ../../sysadmclient.rst:1086
#: ../../sysadmclient.rst:1115
msgid "Snapshots are sent to the backup server over an encrypted connection."
msgstr ""
#: ../../sysadmclient.rst:1088
#: ../../sysadmclient.rst:1117
msgid ""
"Having a copy of the snapshots on another system makes it possible to "
"perform an operating system restore should the |trueos| system become "
"unusable or to deploy an identical system to different hardware."
msgstr ""
#: ../../sysadmclient.rst:1092
#: ../../sysadmclient.rst:1121
msgid ""
"To manage snapshots and replication using the |sysadm| graphical client, go "
"to :menuselection:`Utilities --> Life Preserver`. The rest of this section "
@@ -1103,16 +1081,16 @@ msgid ""
"Preserver."
msgstr ""
#: ../../sysadmclient.rst:1101
#: ../../sysadmclient.rst:1130
msgid "Snapshots Tab"
msgstr ""
#: ../../sysadmclient.rst:1112
#: ../../sysadmclient.rst:1141
msgid ""
"This screen will display any created snapshots and provides buttons to:"
msgstr ""
#: ../../sysadmclient.rst:1114
#: ../../sysadmclient.rst:1143
msgid ""
"**Create:** Used to create a manual snapshot of the specified pool now. For "
"example, you could create a snapshot before making changes to an important "
@@ -1126,14 +1104,14 @@ msgid ""
"snapshot was created."
msgstr ""
#: ../../sysadmclient.rst:1125
#: ../../sysadmclient.rst:1154
msgid ""
"**Remove:** Used to delete a highlighted snapshot. **This is a permanent "
"change that can not be reversed.** In other words, the versions of files at "
"the point in time the snapshot was created will be lost."
msgstr ""
#: ../../sysadmclient.rst:1130
#: ../../sysadmclient.rst:1159
msgid ""
"**Revert:** If you highlight a snapshot entry, this button and the drop-down"
" menu next to it will activate. You can use the drop-down menu to specify "
@@ -1143,11 +1121,11 @@ msgid ""
" after the snapshot was taken will be lost."
msgstr ""
#: ../../sysadmclient.rst:1142
#: ../../sysadmclient.rst:1171
msgid "Replication Tab"
msgstr ""
#: ../../sysadmclient.rst:1144
#: ../../sysadmclient.rst:1173
msgid ""
"Life Preserver can be configured to replicate snapshots to another system "
"over an encrypted SSH connection, though the backup itself is stored in an "
@@ -1155,13 +1133,13 @@ msgid ""
" another system."
msgstr ""
#: ../../sysadmclient.rst:1149
#: ../../sysadmclient.rst:1178
msgid ""
"In order to configure replication, the remote system to hold a copy of the "
"snapshots must first meet several requirements:"
msgstr ""
#: ../../sysadmclient.rst:1156
#: ../../sysadmclient.rst:1185
msgid ""
"The backup server **must be formatted with the latest version of ZFS,** also"
" known as ZFS feature flags or ZFSv5000. Operating systems that support this"
@@ -1169,14 +1147,14 @@ msgid ""
"FreeNAS 9.1.x or higher."
msgstr ""
#: ../../sysadmclient.rst:1162
#: ../../sysadmclient.rst:1191
msgid ""
"The system must have SSH installed and the SSH service must be running. If "
"the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is"
" already installed, but you will need to start the SSH service."
msgstr ""
#: ../../sysadmclient.rst:1167
#: ../../sysadmclient.rst:1196
msgid ""
"If the backup server is running |trueos| or |pcbsd|, you will need to open "
"TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is "
@@ -1186,7 +1164,7 @@ msgid ""
"backup system, make sure it has a rule to allow SSH."
msgstr ""
#: ../../sysadmclient.rst:1175
#: ../../sysadmclient.rst:1204
msgid ""
":numref:`Figure %s <lpreserver2>` shows the initial :guilabel:`Replication` "
"tab on a system that has not yet been configured for replication. This "
@@ -1194,29 +1172,29 @@ msgid ""
"schedule."
msgstr ""
#: ../../sysadmclient.rst:1186
#: ../../sysadmclient.rst:1215
msgid ""
"To schedule the replication, click :guilabel:`+` to display the \"Setup "
"Replication\" screen shown in :numref:`Figure %s <lpreserver3>`."
msgstr ""
#: ../../sysadmclient.rst:1196
#: ../../sysadmclient.rst:1225
msgid "Input the following information:"
msgstr ""
#: ../../sysadmclient.rst:1198
#: ../../sysadmclient.rst:1227
msgid ""
"**Host IP:** The IP address of the remote system to store the replicated "
"snapshots."
msgstr ""
#: ../../sysadmclient.rst:1201
#: ../../sysadmclient.rst:1230
msgid ""
"**SSH Port:** The port number, if the remote system is running SSH on a port"
" other than the default of 22."
msgstr ""
#: ../../sysadmclient.rst:1204
#: ../../sysadmclient.rst:1233
msgid ""
"**Dataset:** The name of the ZFS pool and optional dataset on the remote "
"system. For example, \"remotetank\" will save the snapshots to a ZFS pool of"
@@ -1224,7 +1202,7 @@ msgid ""
"existing dataset named \"mybackups\" on the pool named \"remotetank\"."
msgstr ""
#: ../../sysadmclient.rst:1210
#: ../../sysadmclient.rst:1239
msgid ""
"**Frequency:** Use the drop-down menu to select how often to initiate the "
"replication. Available choices are :guilabel:`Sync with snapshot` (at the "
@@ -1235,87 +1213,87 @@ msgid ""
":guilabel:`Start`) in this screen."
msgstr ""
#: ../../sysadmclient.rst:1219
#: ../../sysadmclient.rst:1248
msgid ""
"**Username:** The username must already exist on the remote system, have "
"write access to the specified \"Dataset\", and have permission to SSH into "
"that system."
msgstr ""
#: ../../sysadmclient.rst:1223
#: ../../sysadmclient.rst:1252
msgid "**Password:** The password associated with the \"Username\"."
msgstr ""
#: ../../sysadmclient.rst:1225
#: ../../sysadmclient.rst:1254
msgid ""
"**Local DS:** Use the drop-down menu to select the pool or dataset to "
"replicate to the remote system."
msgstr ""
#: ../../sysadmclient.rst:1228
#: ../../sysadmclient.rst:1257
msgid ""
"The buttons at the top of the \"Setup Replication\" screen have several "
"uses:"
msgstr ""
#: ../../sysadmclient.rst:1231
#: ../../sysadmclient.rst:1260
msgid ""
"**+ icon:** Sdd a replication schedule. Multiple schedules are supported, "
"meaning you can replicate to multiple systems or replicate different \"Local"
" DS\" datasets at different times."
msgstr ""
#: ../../sysadmclient.rst:1235
#: ../../sysadmclient.rst:1264
msgid ""
"**- icon:** Remove an already created, and highlighted, replication "
"schedule."
msgstr ""
#: ../../sysadmclient.rst:1238
#: ../../sysadmclient.rst:1267
msgid "**gear icon:** Modify the schedule for the highlighted replication."
msgstr ""
#: ../../sysadmclient.rst:1240
#: ../../sysadmclient.rst:1269
msgid ""
"**Start:** Manually starts a replication to the system specified in the "
"highlighted replication."
msgstr ""
#: ../../sysadmclient.rst:1243
#: ../../sysadmclient.rst:1272
msgid ""
"**Initialize:** Deletes the existing replicated snapshots on the remote "
"system and starts a new replication. This is useful if a replication gets "
"stuck and will not complete."
msgstr ""
#: ../../sysadmclient.rst:1251
#: ../../sysadmclient.rst:1280
msgid "Schedules Tab"
msgstr ""
#: ../../sysadmclient.rst:1253
#: ../../sysadmclient.rst:1282
msgid ""
"This tab is used to manage when snapshots of the ZFS pool are created. "
"Multiple snapshot schedules are supported if the system has multiple pools."
msgstr ""
#: ../../sysadmclient.rst:1257
#: ../../sysadmclient.rst:1286
msgid ""
"Snapshots are created on the entire pool as they are needed when "
":ref:`Restoring the Operating System`."
msgstr ""
#: ../../sysadmclient.rst:1260
#: ../../sysadmclient.rst:1289
msgid ""
"To create a snapshot schedule, click the :guilabel:`camera` icon in the "
"lower left corner of this tab. This will activate the \"Setup Snapshot "
"Schedule\" pane as seen in :numref:`Figure %s <lpreserver4>`."
msgstr ""
#: ../../sysadmclient.rst:1270
#: ../../sysadmclient.rst:1299
msgid "This pane contains several options:"
msgstr ""
#: ../../sysadmclient.rst:1275
#: ../../sysadmclient.rst:1304
msgid ""
"**Snapshots to keep:** Snapshots are automatically pruned after the "
"specified number of snapshots to prevent snapshots from eventually using up "
@@ -1326,7 +1304,7 @@ msgid ""
"manually in the :guilabel:`Snapshots` tab."
msgstr ""
#: ../../sysadmclient.rst:1284
#: ../../sysadmclient.rst:1313
msgid ""
"**Frequency:** Use the drop-down menu to select how often snapshots occur. "
"Options include \"Daily\" (which will allow you to select the time of day), "
@@ -1334,37 +1312,37 @@ msgid ""
"Minutes\"."
msgstr ""
#: ../../sysadmclient.rst:1289
#: ../../sysadmclient.rst:1318
msgid ""
"Once you have created a snapshot schedule, you can use the \"gear\" icon "
"next to the \"camera\" icon to modify the highlighted schedule or the \"X\" "
"icon to delete the highlighted schedule."
msgstr ""
#: ../../sysadmclient.rst:1300
#: ../../sysadmclient.rst:1329
msgid ""
"To schedule when the scrub occurs, click the third icon from the right which"
" will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure "
"%s <lpreserver5>`."
msgstr ""
#: ../../sysadmclient.rst:1318
#: ../../sysadmclient.rst:1347
msgid ""
"Once you have created a scrub schedule, you can use the \"gear\" icon next "
"to the \"schedule scrub\" icon to modify the highlighted schedule or the "
"\"X\" icon to delete the highlighted schedule."
msgstr ""
#: ../../sysadmclient.rst:1328
#: ../../sysadmclient.rst:1357
msgid ""
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <lpreserver6>`."
msgstr ""
#: ../../sysadmclient.rst:1337
#: ../../sysadmclient.rst:1366
msgid "Many settings are configurable:"
msgstr ""
#: ../../sysadmclient.rst:1339
#: ../../sysadmclient.rst:1368
msgid ""
"**Disk Usage Warning:** Enter a number up to 99 to indicate at which "
"percentage of disk space Life Preserver will display an alert in the system "
@@ -1372,41 +1350,41 @@ msgid ""
"space."
msgstr ""
#: ../../sysadmclient.rst:1344
#: ../../sysadmclient.rst:1373
msgid ""
"**Email:** To receive an email when disk usage reaches the percentage "
"configured in the \"Disk Usage Warning\", enter an email address."
msgstr ""
#: ../../sysadmclient.rst:1347
#: ../../sysadmclient.rst:1376
msgid ""
"**Email Trigger:** This setting can be set to \"All\", \"Warn\", or "
"\"Error\" and indicates the type of condition which will trigger an email "
"message."
msgstr ""
#: ../../sysadmclient.rst:1350
#: ../../sysadmclient.rst:1379
msgid "**Recursive Management:**"
msgstr ""
#: ../../sysadmclient.rst:1352
#: ../../sysadmclient.rst:1381
msgid ""
"If you make any changes in this screen, press :guilabel:`Save Settings` to "
"apply them."
msgstr ""
#: ../../sysadmclient.rst:1359
#: ../../sysadmclient.rst:1388
msgid "Using the lpreserver CLI"
msgstr ""
#: ../../sysadmclient.rst:1361
#: ../../sysadmclient.rst:1390
msgid ""
"The :command:`lpreserver` command line utility can also be used to manage "
"snapshots and replication. This command needs to be run as the superuser. To"
" display its usage, type the command without any arguments:"
msgstr ""
#: ../../sysadmclient.rst:1381
#: ../../sysadmclient.rst:1410
msgid ""
"Each command has its own help text that describes its parameters and "
"provides a usage example. For example, to receive help on how to use the "
@@ -1417,104 +1395,104 @@ msgstr ""
msgid "Command Line and GUI Equivalents"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**Command Line**"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**GUI**"
msgstr ""
#: ../../sysadmclient.rst:1450
#: ../../sysadmclient.rst:1479
msgid "**Description**"
msgstr ""
#: ../../sysadmclient.rst:1452
#: ../../sysadmclient.rst:1481
msgid "**cronsnap**"
msgstr ""
#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499
msgid "\"Snapshots\" tab"
msgstr ""
#: ../../sysadmclient.rst:1452
#: ../../sysadmclient.rst:1481
msgid ""
"schedule when snapshots occur and how long to keep them; the **stop** option"
" can be used to disable snapshot creation"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "**cronscrub**"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "\"Schedules\" tab"
msgstr ""
#: ../../sysadmclient.rst:1457
#: ../../sysadmclient.rst:1486
msgid "schedule a ZFS scrub"
msgstr ""
#: ../../sysadmclient.rst:1459
#: ../../sysadmclient.rst:1488
msgid "**get**"
msgstr ""
#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495
msgid "\"Settings\" tab"
msgstr ""
#: ../../sysadmclient.rst:1459
#: ../../sysadmclient.rst:1488
msgid "list Life Preserver options"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid "**replicate**"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid "\"Replication\" tab"
msgstr ""
#: ../../sysadmclient.rst:1461
#: ../../sysadmclient.rst:1490
msgid ""
"used to list, add, and remove backup server; read the **help** for this "
"command for examples"
msgstr ""
#: ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1495
msgid "**set**"
msgstr ""
#: ../../sysadmclient.rst:1466
#: ../../sysadmclient.rst:1495
msgid ""
"configures Life Preserver options; read **help** for the list of "
"configurable options"
msgstr ""
#: ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1499
msgid "**snapshot**"
msgstr ""
#: ../../sysadmclient.rst:1470
#: ../../sysadmclient.rst:1499
msgid ""
"create and replicate a new ZFS snapshot; by default, snapshots are "
"recursive, meaning that a that a snapshot is taken of every dataset within a"
" pool"
msgstr ""
#: ../../sysadmclient.rst:1476
#: ../../sysadmclient.rst:1505
msgid "**status**"
msgstr ""
#: ../../sysadmclient.rst:1476
#: ../../sysadmclient.rst:1505
msgid "lists the last snapshot name and replication status"
msgstr ""
#: ../../sysadmclient.rst:1483
#: ../../sysadmclient.rst:1512
msgid "Restoring the Operating System"
msgstr ""
#: ../../sysadmclient.rst:1485
#: ../../sysadmclient.rst:1514
msgid ""
"If you have replicated the system's snapshots to a remote backup server, you"
" can use a |trueos| installation media to perform an operating system "
@@ -1522,7 +1500,7 @@ msgid ""
"you get to the screen shown in :numref:`Figure %s <restore1>`."
msgstr ""
#: ../../sysadmclient.rst:1497
#: ../../sysadmclient.rst:1526
msgid ""
"Before you can perform a restore, the network interface must be configured. "
"Click :guilabel:`Network Connectivity` (second icon from the left) in order "
@@ -1533,7 +1511,7 @@ msgid ""
"continuing."
msgstr ""
#: ../../sysadmclient.rst:1505
#: ../../sysadmclient.rst:1534
msgid ""
"Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and"
" :guilabel:`Next`. This will start the Restore Wizard. In the screen shown "
@@ -1543,7 +1521,7 @@ msgid ""
"number."
msgstr ""
#: ../../sysadmclient.rst:1519
#: ../../sysadmclient.rst:1548
msgid ""
"Click :guilabel:`Next` and the wizard will provide a summary of your "
"selections. If correct, click :guilabel:`Finish`; otherwise, click "
@@ -1626,7 +1604,7 @@ msgid ""
"press :guilabel:`Close Ports`."
msgstr ""
#: ../../sysadmclient.rst:1152
#: ../../sysadmclient.rst:1181
msgid ""
"Snapshots occurring too frequently can introduce errors in replication. To "
"avoid errors, ensure snapshots are configured to take place slower than the "
@@ -1685,7 +1663,7 @@ msgid ""
"accounts."
msgstr ""
#: ../../sysadmclient.rst:1065
#: ../../sysadmclient.rst:1094
msgid ""
"A snapshot provides a \"point-in-time\" image of the ZFS pool. This is "
"similar to a full system backup as the snapshot contains the information for"
@@ -1703,26 +1681,26 @@ msgid ""
"snapshot."
msgstr ""
#: ../../sysadmclient.rst:1272
#: ../../sysadmclient.rst:1301
msgid ""
"**Storage Pool:** Select the ZFS storage pool that contains the datasets "
"that you wish to snapshot."
msgstr ""
#: ../../sysadmclient.rst:1293
#: ../../sysadmclient.rst:1322
msgid ""
"This screen can also be used to manage the ZFS scrub schedule. Scrubs are "
"recommended as they can provide an early indication of a potential disk "
"failure. Scrubs can be scheduled on a per-pool basis."
msgstr ""
#: ../../sysadmclient.rst:1297
#: ../../sysadmclient.rst:1326
msgid ""
"If you have multiple pools, be sure to create a scrub schedule for each "
"pool."
msgstr ""
#: ../../sysadmclient.rst:1310
#: ../../sysadmclient.rst:1339
msgid ""
"Select the pool from the :guilabel:`Storage Pool` drop-down menu, then "
"select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", "
@@ -1807,26 +1785,17 @@ msgstr ""
msgid ": Viewing All Accounts and Their Details"
msgstr ""
#: ../../sysadmclient.rst:930
#: ../../sysadmclient.rst:938
msgid ": Initialize PersonaCrypt Device"
msgstr ""
#: ../../sysadmclient.rst:932
msgid ""
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
"Note this section is hidden if the currently logged in user is selected. "
"Also, if you have just created a user and do not see these options, click "
":guilabel:`Save` then re-highlight the user to display these options:"
msgstr ""
#: ../../sysadmclient.rst:947
#: ../../sysadmclient.rst:955
msgid ""
"To prepare a PersonaCrypt device for this user, insert a USB stick and click"
" :guilabel:`Initialize Device`."
msgstr ""
#: ../../sysadmclient.rst:957
#: ../../sysadmclient.rst:965
msgid ""
"Type a password to associate with the device. Click :guilabel:`Save` to "
"initialize the device. The User Manager may take a moment to prepare the "
@@ -1834,49 +1803,49 @@ msgid ""
" to allow removal of PersonaCrypt."
msgstr ""
#: ../../sysadmclient.rst:1027
#: ../../sysadmclient.rst:1056
msgid ": Managing Groups Using User Manager"
msgstr ""
#: ../../sysadmclient.rst:1110
#: ../../sysadmclient.rst:1139
msgid ": Snapshot Tab"
msgstr ""
#: ../../sysadmclient.rst:1184
#: ../../sysadmclient.rst:1213
msgid ": Replication Tab"
msgstr ""
#: ../../sysadmclient.rst:1194
#: ../../sysadmclient.rst:1223
msgid ": Scheduling a Replication"
msgstr ""
#: ../../sysadmclient.rst:1268
#: ../../sysadmclient.rst:1297
msgid ": Scheduling a Snapshot"
msgstr ""
#: ../../sysadmclient.rst:1308
#: ../../sysadmclient.rst:1337
msgid ": Scheduling a Scrub"
msgstr ""
#: ../../sysadmclient.rst:1335
#: ../../sysadmclient.rst:1364
msgid ": Life Preserver Settings"
msgstr ""
#: ../../sysadmclient.rst:1442
#: ../../sysadmclient.rst:1471
msgid ""
":numref:`Table %s <cmdgui>` shows the command line equivalents to the "
"graphical options provided by the Life Preserver GUI."
msgstr ""
#: ../../sysadmclient.rst:1495
#: ../../sysadmclient.rst:1524
msgid ": Selecting to Restore/Clone From Backup"
msgstr ""
#: ../../sysadmclient.rst:1517
#: ../../sysadmclient.rst:1546
msgid ": Input the Information for a SSH Restore"
msgstr ""
#: ../../sysadmclient.rst:1523
#: ../../sysadmclient.rst:1552
msgid ""
"Once the connection to the backup server succeeds, you will be able to "
"select which host to restore. After making your selection, click "
@@ -1892,7 +1861,7 @@ msgid ""
":guilabel:`Next` to perform the restore."
msgstr ""
#: ../../sysadmclient.rst:987
#: ../../sysadmclient.rst:970
msgid ""
"Once a user has been initialized for PersonaCrypt on the system, their user "
"account will no longer be displayed when logging in, **unless** their "
@@ -1901,7 +1870,7 @@ msgid ""
":numref:`Figure %s <troslogin5>`."
msgstr ""
#: ../../sysadmclient.rst:997
#: ../../sysadmclient.rst:980
msgid ": |trueos| Login Screen with PersonaCrypt"
msgstr ""
@@ -1949,7 +1918,7 @@ msgstr ""
msgid ": |sysadm| Task Manager"
msgstr ""
#: ../../sysadmclient.rst:1103
#: ../../sysadmclient.rst:1132
msgid ""
":numref:`Figure %s <lpreserver1>` shows the :guilabel:`Snapshots` tab on a "
"system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"."
@@ -2013,6 +1982,134 @@ msgid ""
":guilabel:`Save Settings`."
msgstr ""
#: ../../sysadmclient.rst:894
msgid ""
"|trueos| provides support for a security feature known as PersonaCrypt. A "
"PersonaCrypt device is a removable USB media, such as a USB flash drive, "
"formatted with ZFS and encrypted with either GELI or PEFS. This device is "
"used to hold a specific user's home directory, meaning they can securely "
"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 "
"or higher system. For example, this can be used to securely access one's "
"home directory from a laptop, home computer, and work computer. The device "
"is protected by an encryption key and a different (recommended) password "
"separate from the user's login password."
msgstr ""
#: ../../sysadmclient.rst:916
msgid "GELI"
msgstr ""
#: ../../sysadmclient.rst:918
msgid ""
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
"your passphrase, and the other being a key stored on disk. Without both of "
"these parts, the media cannot be decrypted. This means if somebody steals "
"the key and manages to get your password, it is still worthless without the "
"system it was paired with. GELI is used by default in |trueos| as it is more"
" fully featured over PEFS."
msgstr ""
#: ../../sysadmclient.rst:940
msgid ""
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
"buttons are available in the :guilabel:`PersonaCrypt` tab of "
":guilabel:`Advanced Mode`. Note this section is hidden if the currently "
"logged in user is selected. Also, if you have just created a user and do not"
" see these options, click :guilabel:`Save`, then re-highlight the user to "
"display these options:"
msgstr ""
#: ../../sysadmclient.rst:999
msgid "PEFS"
msgstr ""
#: ../../sysadmclient.rst:1001
msgid ""
"`PEFS <http://pefs.io/>`_ stands for Private Encrypted File System. It is "
"open source software freely available under the BSD license, and is included"
" in |trueos| by default. PEFS runs on top of any existing file system, "
"providing an encryption layer independent of the underlying file system. "
"PersonaCrypt can be configured to use PEFS in place of GELI, which "
"eliminates the need for external media, as the encrypted PEFS database is "
"stored on the local disk."
msgstr ""
#: ../../sysadmclient.rst:1009
msgid ""
"While PEFS does not use a USB drive, be sure to print or otherwise backup "
"the PEFS generated key fragment stored on the disk."
msgstr ""
#: ../../sysadmclient.rst:1012
msgid "**Initialize PEFS with the Command Line**"
msgstr ""
#: ../../sysadmclient.rst:1014
msgid ""
"Because PEFS does not use a USB drive with its encryption, the user will "
"need a password file (pfile) containing the desired password, **before** "
"initializing PEFS for a user account. Once this pfile is created, enabling "
"PEFS through PersonaCrypt is accomplished in a CLI with "
":command:`personacrypt init <username> <pfile> PEFS`."
msgstr ""
#: ../../sysadmclient.rst:1020
msgid ""
"For example, the user account **test** has a pfile named "
":file:`testpfile.txt`, which contains the single text string of **test's** "
"chosen password. Next, the administrator adds PEFS encryption to the "
"**test** acount by opening a CLI, logging in as root, and typing:"
msgstr ""
#: ../../sysadmclient.rst:1029
msgid ""
"PersonaCrypt will initialize the account **test** with PEFS, using the "
"string in :file:`testpfile.txt` as the new password."
msgstr ""
#: ../../sysadmclient.rst:1032
msgid ""
"The |sysadm| User Manager can also initialize a user account with PEFS by "
"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` "
"drop down menu of the :guilabel:`PersonaCrypt` tab."
msgstr ""
#: ../../sysadmclient.rst:1036
msgid ""
"In addition to initializing an account with PEFS, PersonaCrypt also supports"
" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt "
"export <username>` and :command:`personacrypt import <keyfile>`, "
"respectively."
msgstr ""
#~ msgid ""
#~ "|trueos| provides support for a security feature known as PersonaCrypt. A "
#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
#~ " with ZFS and encrypted with GELI. This device is used to hold a specific "
#~ "user's home directory, meaning they can securely transport and access their "
#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
#~ "example, this can be used to securely access one's home directory from a "
#~ "laptop, home computer, and work computer. The device is protected by an "
#~ "encryption key and a password which is, and should be, separate from the "
#~ "user's login password."
#~ msgstr ""
#~ msgid ""
#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being "
#~ "your passphrase, and the other being a key stored on disk. Without both of "
#~ "these parts, the media cannot be decrypted. This means if somebody steals "
#~ "the key and manages to get your password, it is still worthless without the "
#~ "system it was paired with."
#~ msgstr ""
#~ msgid ""
#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two "
#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
#~ "Note this section is hidden if the currently logged in user is selected. "
#~ "Also, if you have just created a user and do not see these options, click "
#~ ":guilabel:`Save` then re-highlight the user to display these options:"
#~ msgstr ""
#~ msgid ""
#~ "**Max Boot Environments:** |trueos| automatically creates a boot environment"
#~ " before updating any software, the operating system, or applying a system "