mirror of
https://github.com/outbackdingo/sysadm.git
synced 2026-01-27 10:20:26 +00:00
Personacrypt and PEFS: TRANSLATIONS
- Update translation files.
This commit is contained in:
@@ -482,7 +482,7 @@ msgid ""
|
||||
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <update4>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1326
|
||||
#: ../../sysadmclient.rst:1355
|
||||
msgid "Settings Tab"
|
||||
msgstr ""
|
||||
|
||||
@@ -924,20 +924,7 @@ msgstr ""
|
||||
msgid "PersonaCrypt"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:894
|
||||
msgid ""
|
||||
"|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
"PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
|
||||
" with ZFS and encrypted with GELI. This device is used to hold a specific "
|
||||
"user's home directory, meaning they can securely transport and access their "
|
||||
"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
|
||||
"example, this can be used to securely access one's home directory from a "
|
||||
"laptop, home computer, and work computer. The device is protected by an "
|
||||
"encryption key and a password which is, and should be, separate from the "
|
||||
"user's login password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:904
|
||||
#: ../../sysadmclient.rst:905
|
||||
msgid ""
|
||||
"When a user is configured to use a PersonaCrypt device, that user can not "
|
||||
"login using an unencrypted session on the same system. In other words, the "
|
||||
@@ -946,22 +933,13 @@ msgid ""
|
||||
"different user accounts, one for each type of session."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:911
|
||||
msgid ""
|
||||
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
"your passphrase, and the other being a key stored on disk. Without both of "
|
||||
"these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
"the key and manages to get your password, it is still worthless without the "
|
||||
"system it was paired with."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:917
|
||||
#: ../../sysadmclient.rst:925
|
||||
msgid ""
|
||||
"USB devices do eventually fail. Always backup any important files stored on "
|
||||
"the PersonaCrypt device to another device or system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:920
|
||||
#: ../../sysadmclient.rst:928
|
||||
msgid ""
|
||||
"The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt "
|
||||
"device for any login user, **except** for the currently logged in user. In "
|
||||
@@ -969,13 +947,13 @@ msgid ""
|
||||
"*dlavigne*, has been created and the entry for the user has been clicked."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:939
|
||||
#: ../../sysadmclient.rst:947
|
||||
msgid ""
|
||||
"**Initialize Device:** Used to prepare the USB device which will be used as "
|
||||
"the user's home directory."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:942
|
||||
#: ../../sysadmclient.rst:950
|
||||
msgid ""
|
||||
"**Import Key:** If the user has already created a PersonaCrypt device on "
|
||||
"another |trueos| system, click this button to import a previously saved copy"
|
||||
@@ -983,7 +961,7 @@ msgid ""
|
||||
"can now login to this computer using PersonaCrypt."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:950
|
||||
#: ../../sysadmclient.rst:958
|
||||
msgid ""
|
||||
"Since the USB stick will hold the user's home directory and files, ensure "
|
||||
"the stick is large enough to meet the anticipated storage needs of the home "
|
||||
@@ -993,7 +971,7 @@ msgid ""
|
||||
"logged in."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:999
|
||||
#: ../../sysadmclient.rst:982
|
||||
msgid ""
|
||||
"When stealth sessions have been configured, PersonaCrypt users will still be"
|
||||
" displayed in the login menu, even if their USB device is not inserted. This"
|
||||
@@ -1001,47 +979,47 @@ msgid ""
|
||||
"session."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1004
|
||||
#: ../../sysadmclient.rst:987
|
||||
msgid ""
|
||||
"In the field with the yellow padlock icon, input the password for the user "
|
||||
"account. In the field with the grey USB stick icon, input the password "
|
||||
"associated with the PersonaCrypt device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1008
|
||||
#: ../../sysadmclient.rst:991
|
||||
msgid ""
|
||||
"To prevent data corruption and freezing the system **DO NOT** remove the "
|
||||
"PersonaCrypt device while logged in! Always log out of your session before "
|
||||
"physically removing the device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1016
|
||||
#: ../../sysadmclient.rst:1045
|
||||
msgid "Managing Groups"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1018
|
||||
#: ../../sysadmclient.rst:1047
|
||||
msgid ""
|
||||
"Click the :guilabel:`Groups` tab to view and manage the groups on the "
|
||||
"system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s <user4>`, "
|
||||
"shows the group membership for the *operator* and *wheel* groups:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1029
|
||||
#: ../../sysadmclient.rst:1058
|
||||
msgid "This screen has 2 columns:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1031
|
||||
#: ../../sysadmclient.rst:1060
|
||||
msgid ""
|
||||
"**Members:** Indicates if the highlighted group contains any user accounts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1034
|
||||
#: ../../sysadmclient.rst:1063
|
||||
msgid ""
|
||||
"**Available:** Shows all of the system and user accounts on the system in "
|
||||
"alphabetical order."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1037
|
||||
#: ../../sysadmclient.rst:1066
|
||||
msgid ""
|
||||
"To add an account to a group, highlight the group name, then highlight the "
|
||||
"account name in the :guilabel:`Available` column. Click the left arrow and "
|
||||
@@ -1051,7 +1029,7 @@ msgid ""
|
||||
"added to a group."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1044
|
||||
#: ../../sysadmclient.rst:1073
|
||||
msgid ""
|
||||
"If you add a user to the *operator* group, they will have permission to use "
|
||||
"commands requiring administrative access and will be prompted for their own "
|
||||
@@ -1060,15 +1038,15 @@ msgid ""
|
||||
"will be prompted for the superuser password whenever they use the command."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1051
|
||||
#: ../../sysadmclient.rst:1080
|
||||
msgid "To view all of the groups on the system, click :guilabel:`Advanced`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1057
|
||||
#: ../../sysadmclient.rst:1086
|
||||
msgid "Life Preserver"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1059
|
||||
#: ../../sysadmclient.rst:1088
|
||||
msgid ""
|
||||
"The Life Preserver utility is designed to take full advantage of the "
|
||||
"functionality provided by ZFS snapshots. This utility allows you to schedule"
|
||||
@@ -1077,25 +1055,25 @@ msgid ""
|
||||
"benefits:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1081
|
||||
#: ../../sysadmclient.rst:1110
|
||||
msgid ""
|
||||
"Replication is an efficient way to keep the files on two systems in sync. "
|
||||
"With Life Preserver, the snapshots taken on the |trueos| system will be "
|
||||
"synchronized with their versions stored on the specified backup server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1086
|
||||
#: ../../sysadmclient.rst:1115
|
||||
msgid "Snapshots are sent to the backup server over an encrypted connection."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1088
|
||||
#: ../../sysadmclient.rst:1117
|
||||
msgid ""
|
||||
"Having a copy of the snapshots on another system makes it possible to "
|
||||
"perform an operating system restore should the |trueos| system become "
|
||||
"unusable or to deploy an identical system to different hardware."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1092
|
||||
#: ../../sysadmclient.rst:1121
|
||||
msgid ""
|
||||
"To manage snapshots and replication using the |sysadm| graphical client, go "
|
||||
"to :menuselection:`Utilities --> Life Preserver`. The rest of this section "
|
||||
@@ -1103,16 +1081,16 @@ msgid ""
|
||||
"Preserver."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1101
|
||||
#: ../../sysadmclient.rst:1130
|
||||
msgid "Snapshots Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1112
|
||||
#: ../../sysadmclient.rst:1141
|
||||
msgid ""
|
||||
"This screen will display any created snapshots and provides buttons to:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1114
|
||||
#: ../../sysadmclient.rst:1143
|
||||
msgid ""
|
||||
"**Create:** Used to create a manual snapshot of the specified pool now. For "
|
||||
"example, you could create a snapshot before making changes to an important "
|
||||
@@ -1126,14 +1104,14 @@ msgid ""
|
||||
"snapshot was created."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1125
|
||||
#: ../../sysadmclient.rst:1154
|
||||
msgid ""
|
||||
"**Remove:** Used to delete a highlighted snapshot. **This is a permanent "
|
||||
"change that can not be reversed.** In other words, the versions of files at "
|
||||
"the point in time the snapshot was created will be lost."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1130
|
||||
#: ../../sysadmclient.rst:1159
|
||||
msgid ""
|
||||
"**Revert:** If you highlight a snapshot entry, this button and the drop-down"
|
||||
" menu next to it will activate. You can use the drop-down menu to specify "
|
||||
@@ -1143,11 +1121,11 @@ msgid ""
|
||||
" after the snapshot was taken will be lost."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1142
|
||||
#: ../../sysadmclient.rst:1171
|
||||
msgid "Replication Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1144
|
||||
#: ../../sysadmclient.rst:1173
|
||||
msgid ""
|
||||
"Life Preserver can be configured to replicate snapshots to another system "
|
||||
"over an encrypted SSH connection, though the backup itself is stored in an "
|
||||
@@ -1155,13 +1133,13 @@ msgid ""
|
||||
" another system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1149
|
||||
#: ../../sysadmclient.rst:1178
|
||||
msgid ""
|
||||
"In order to configure replication, the remote system to hold a copy of the "
|
||||
"snapshots must first meet several requirements:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1156
|
||||
#: ../../sysadmclient.rst:1185
|
||||
msgid ""
|
||||
"The backup server **must be formatted with the latest version of ZFS,** also"
|
||||
" known as ZFS feature flags or ZFSv5000. Operating systems that support this"
|
||||
@@ -1169,14 +1147,14 @@ msgid ""
|
||||
"FreeNAS 9.1.x or higher."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1162
|
||||
#: ../../sysadmclient.rst:1191
|
||||
msgid ""
|
||||
"The system must have SSH installed and the SSH service must be running. If "
|
||||
"the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is"
|
||||
" already installed, but you will need to start the SSH service."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1167
|
||||
#: ../../sysadmclient.rst:1196
|
||||
msgid ""
|
||||
"If the backup server is running |trueos| or |pcbsd|, you will need to open "
|
||||
"TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is "
|
||||
@@ -1186,7 +1164,7 @@ msgid ""
|
||||
"backup system, make sure it has a rule to allow SSH."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1175
|
||||
#: ../../sysadmclient.rst:1204
|
||||
msgid ""
|
||||
":numref:`Figure %s <lpreserver2>` shows the initial :guilabel:`Replication` "
|
||||
"tab on a system that has not yet been configured for replication. This "
|
||||
@@ -1194,29 +1172,29 @@ msgid ""
|
||||
"schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1186
|
||||
#: ../../sysadmclient.rst:1215
|
||||
msgid ""
|
||||
"To schedule the replication, click :guilabel:`+` to display the \"Setup "
|
||||
"Replication\" screen shown in :numref:`Figure %s <lpreserver3>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1196
|
||||
#: ../../sysadmclient.rst:1225
|
||||
msgid "Input the following information:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1198
|
||||
#: ../../sysadmclient.rst:1227
|
||||
msgid ""
|
||||
"**Host IP:** The IP address of the remote system to store the replicated "
|
||||
"snapshots."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1201
|
||||
#: ../../sysadmclient.rst:1230
|
||||
msgid ""
|
||||
"**SSH Port:** The port number, if the remote system is running SSH on a port"
|
||||
" other than the default of 22."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1204
|
||||
#: ../../sysadmclient.rst:1233
|
||||
msgid ""
|
||||
"**Dataset:** The name of the ZFS pool and optional dataset on the remote "
|
||||
"system. For example, \"remotetank\" will save the snapshots to a ZFS pool of"
|
||||
@@ -1224,7 +1202,7 @@ msgid ""
|
||||
"existing dataset named \"mybackups\" on the pool named \"remotetank\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1210
|
||||
#: ../../sysadmclient.rst:1239
|
||||
msgid ""
|
||||
"**Frequency:** Use the drop-down menu to select how often to initiate the "
|
||||
"replication. Available choices are :guilabel:`Sync with snapshot` (at the "
|
||||
@@ -1235,87 +1213,87 @@ msgid ""
|
||||
":guilabel:`Start`) in this screen."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1219
|
||||
#: ../../sysadmclient.rst:1248
|
||||
msgid ""
|
||||
"**Username:** The username must already exist on the remote system, have "
|
||||
"write access to the specified \"Dataset\", and have permission to SSH into "
|
||||
"that system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1223
|
||||
#: ../../sysadmclient.rst:1252
|
||||
msgid "**Password:** The password associated with the \"Username\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1225
|
||||
#: ../../sysadmclient.rst:1254
|
||||
msgid ""
|
||||
"**Local DS:** Use the drop-down menu to select the pool or dataset to "
|
||||
"replicate to the remote system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1228
|
||||
#: ../../sysadmclient.rst:1257
|
||||
msgid ""
|
||||
"The buttons at the top of the \"Setup Replication\" screen have several "
|
||||
"uses:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1231
|
||||
#: ../../sysadmclient.rst:1260
|
||||
msgid ""
|
||||
"**+ icon:** Sdd a replication schedule. Multiple schedules are supported, "
|
||||
"meaning you can replicate to multiple systems or replicate different \"Local"
|
||||
" DS\" datasets at different times."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1235
|
||||
#: ../../sysadmclient.rst:1264
|
||||
msgid ""
|
||||
"**- icon:** Remove an already created, and highlighted, replication "
|
||||
"schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1238
|
||||
#: ../../sysadmclient.rst:1267
|
||||
msgid "**gear icon:** Modify the schedule for the highlighted replication."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1240
|
||||
#: ../../sysadmclient.rst:1269
|
||||
msgid ""
|
||||
"**Start:** Manually starts a replication to the system specified in the "
|
||||
"highlighted replication."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1243
|
||||
#: ../../sysadmclient.rst:1272
|
||||
msgid ""
|
||||
"**Initialize:** Deletes the existing replicated snapshots on the remote "
|
||||
"system and starts a new replication. This is useful if a replication gets "
|
||||
"stuck and will not complete."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1251
|
||||
#: ../../sysadmclient.rst:1280
|
||||
msgid "Schedules Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1253
|
||||
#: ../../sysadmclient.rst:1282
|
||||
msgid ""
|
||||
"This tab is used to manage when snapshots of the ZFS pool are created. "
|
||||
"Multiple snapshot schedules are supported if the system has multiple pools."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1257
|
||||
#: ../../sysadmclient.rst:1286
|
||||
msgid ""
|
||||
"Snapshots are created on the entire pool as they are needed when "
|
||||
":ref:`Restoring the Operating System`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1260
|
||||
#: ../../sysadmclient.rst:1289
|
||||
msgid ""
|
||||
"To create a snapshot schedule, click the :guilabel:`camera` icon in the "
|
||||
"lower left corner of this tab. This will activate the \"Setup Snapshot "
|
||||
"Schedule\" pane as seen in :numref:`Figure %s <lpreserver4>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1270
|
||||
#: ../../sysadmclient.rst:1299
|
||||
msgid "This pane contains several options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1275
|
||||
#: ../../sysadmclient.rst:1304
|
||||
msgid ""
|
||||
"**Snapshots to keep:** Snapshots are automatically pruned after the "
|
||||
"specified number of snapshots to prevent snapshots from eventually using up "
|
||||
@@ -1326,7 +1304,7 @@ msgid ""
|
||||
"manually in the :guilabel:`Snapshots` tab."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1284
|
||||
#: ../../sysadmclient.rst:1313
|
||||
msgid ""
|
||||
"**Frequency:** Use the drop-down menu to select how often snapshots occur. "
|
||||
"Options include \"Daily\" (which will allow you to select the time of day), "
|
||||
@@ -1334,37 +1312,37 @@ msgid ""
|
||||
"Minutes\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1289
|
||||
#: ../../sysadmclient.rst:1318
|
||||
msgid ""
|
||||
"Once you have created a snapshot schedule, you can use the \"gear\" icon "
|
||||
"next to the \"camera\" icon to modify the highlighted schedule or the \"X\" "
|
||||
"icon to delete the highlighted schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1300
|
||||
#: ../../sysadmclient.rst:1329
|
||||
msgid ""
|
||||
"To schedule when the scrub occurs, click the third icon from the right which"
|
||||
" will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure "
|
||||
"%s <lpreserver5>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1318
|
||||
#: ../../sysadmclient.rst:1347
|
||||
msgid ""
|
||||
"Once you have created a scrub schedule, you can use the \"gear\" icon next "
|
||||
"to the \"schedule scrub\" icon to modify the highlighted schedule or the "
|
||||
"\"X\" icon to delete the highlighted schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1328
|
||||
#: ../../sysadmclient.rst:1357
|
||||
msgid ""
|
||||
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <lpreserver6>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1337
|
||||
#: ../../sysadmclient.rst:1366
|
||||
msgid "Many settings are configurable:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1339
|
||||
#: ../../sysadmclient.rst:1368
|
||||
msgid ""
|
||||
"**Disk Usage Warning:** Enter a number up to 99 to indicate at which "
|
||||
"percentage of disk space Life Preserver will display an alert in the system "
|
||||
@@ -1372,41 +1350,41 @@ msgid ""
|
||||
"space."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1344
|
||||
#: ../../sysadmclient.rst:1373
|
||||
msgid ""
|
||||
"**Email:** To receive an email when disk usage reaches the percentage "
|
||||
"configured in the \"Disk Usage Warning\", enter an email address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1347
|
||||
#: ../../sysadmclient.rst:1376
|
||||
msgid ""
|
||||
"**Email Trigger:** This setting can be set to \"All\", \"Warn\", or "
|
||||
"\"Error\" and indicates the type of condition which will trigger an email "
|
||||
"message."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1350
|
||||
#: ../../sysadmclient.rst:1379
|
||||
msgid "**Recursive Management:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1352
|
||||
#: ../../sysadmclient.rst:1381
|
||||
msgid ""
|
||||
"If you make any changes in this screen, press :guilabel:`Save Settings` to "
|
||||
"apply them."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1359
|
||||
#: ../../sysadmclient.rst:1388
|
||||
msgid "Using the lpreserver CLI"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1361
|
||||
#: ../../sysadmclient.rst:1390
|
||||
msgid ""
|
||||
"The :command:`lpreserver` command line utility can also be used to manage "
|
||||
"snapshots and replication. This command needs to be run as the superuser. To"
|
||||
" display its usage, type the command without any arguments:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1381
|
||||
#: ../../sysadmclient.rst:1410
|
||||
msgid ""
|
||||
"Each command has its own help text that describes its parameters and "
|
||||
"provides a usage example. For example, to receive help on how to use the "
|
||||
@@ -1417,104 +1395,104 @@ msgstr ""
|
||||
msgid "Command Line and GUI Equivalents"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**Command Line**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**GUI**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**Description**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452
|
||||
#: ../../sysadmclient.rst:1481
|
||||
msgid "**cronsnap**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499
|
||||
msgid "\"Snapshots\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452
|
||||
#: ../../sysadmclient.rst:1481
|
||||
msgid ""
|
||||
"schedule when snapshots occur and how long to keep them; the **stop** option"
|
||||
" can be used to disable snapshot creation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "**cronscrub**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "\"Schedules\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "schedule a ZFS scrub"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459
|
||||
#: ../../sysadmclient.rst:1488
|
||||
msgid "**get**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495
|
||||
msgid "\"Settings\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459
|
||||
#: ../../sysadmclient.rst:1488
|
||||
msgid "list Life Preserver options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid "**replicate**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid "\"Replication\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid ""
|
||||
"used to list, add, and remove backup server; read the **help** for this "
|
||||
"command for examples"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1495
|
||||
msgid "**set**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1495
|
||||
msgid ""
|
||||
"configures Life Preserver options; read **help** for the list of "
|
||||
"configurable options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1499
|
||||
msgid "**snapshot**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1499
|
||||
msgid ""
|
||||
"create and replicate a new ZFS snapshot; by default, snapshots are "
|
||||
"recursive, meaning that a that a snapshot is taken of every dataset within a"
|
||||
" pool"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1476
|
||||
#: ../../sysadmclient.rst:1505
|
||||
msgid "**status**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1476
|
||||
#: ../../sysadmclient.rst:1505
|
||||
msgid "lists the last snapshot name and replication status"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1483
|
||||
#: ../../sysadmclient.rst:1512
|
||||
msgid "Restoring the Operating System"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1485
|
||||
#: ../../sysadmclient.rst:1514
|
||||
msgid ""
|
||||
"If you have replicated the system's snapshots to a remote backup server, you"
|
||||
" can use a |trueos| installation media to perform an operating system "
|
||||
@@ -1522,7 +1500,7 @@ msgid ""
|
||||
"you get to the screen shown in :numref:`Figure %s <restore1>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1497
|
||||
#: ../../sysadmclient.rst:1526
|
||||
msgid ""
|
||||
"Before you can perform a restore, the network interface must be configured. "
|
||||
"Click :guilabel:`Network Connectivity` (second icon from the left) in order "
|
||||
@@ -1533,7 +1511,7 @@ msgid ""
|
||||
"continuing."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1505
|
||||
#: ../../sysadmclient.rst:1534
|
||||
msgid ""
|
||||
"Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and"
|
||||
" :guilabel:`Next`. This will start the Restore Wizard. In the screen shown "
|
||||
@@ -1543,7 +1521,7 @@ msgid ""
|
||||
"number."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1519
|
||||
#: ../../sysadmclient.rst:1548
|
||||
msgid ""
|
||||
"Click :guilabel:`Next` and the wizard will provide a summary of your "
|
||||
"selections. If correct, click :guilabel:`Finish`; otherwise, click "
|
||||
@@ -1626,7 +1604,7 @@ msgid ""
|
||||
"press :guilabel:`Close Ports`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1152
|
||||
#: ../../sysadmclient.rst:1181
|
||||
msgid ""
|
||||
"Snapshots occurring too frequently can introduce errors in replication. To "
|
||||
"avoid errors, ensure snapshots are configured to take place slower than the "
|
||||
@@ -1685,7 +1663,7 @@ msgid ""
|
||||
"accounts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1065
|
||||
#: ../../sysadmclient.rst:1094
|
||||
msgid ""
|
||||
"A snapshot provides a \"point-in-time\" image of the ZFS pool. This is "
|
||||
"similar to a full system backup as the snapshot contains the information for"
|
||||
@@ -1703,26 +1681,26 @@ msgid ""
|
||||
"snapshot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1272
|
||||
#: ../../sysadmclient.rst:1301
|
||||
msgid ""
|
||||
"**Storage Pool:** Select the ZFS storage pool that contains the datasets "
|
||||
"that you wish to snapshot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1293
|
||||
#: ../../sysadmclient.rst:1322
|
||||
msgid ""
|
||||
"This screen can also be used to manage the ZFS scrub schedule. Scrubs are "
|
||||
"recommended as they can provide an early indication of a potential disk "
|
||||
"failure. Scrubs can be scheduled on a per-pool basis."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1297
|
||||
#: ../../sysadmclient.rst:1326
|
||||
msgid ""
|
||||
"If you have multiple pools, be sure to create a scrub schedule for each "
|
||||
"pool."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1310
|
||||
#: ../../sysadmclient.rst:1339
|
||||
msgid ""
|
||||
"Select the pool from the :guilabel:`Storage Pool` drop-down menu, then "
|
||||
"select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", "
|
||||
@@ -1807,26 +1785,17 @@ msgstr ""
|
||||
msgid ": Viewing All Accounts and Their Details"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:930
|
||||
#: ../../sysadmclient.rst:938
|
||||
msgid ": Initialize PersonaCrypt Device"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:932
|
||||
msgid ""
|
||||
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
|
||||
"Note this section is hidden if the currently logged in user is selected. "
|
||||
"Also, if you have just created a user and do not see these options, click "
|
||||
":guilabel:`Save` then re-highlight the user to display these options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:947
|
||||
#: ../../sysadmclient.rst:955
|
||||
msgid ""
|
||||
"To prepare a PersonaCrypt device for this user, insert a USB stick and click"
|
||||
" :guilabel:`Initialize Device`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:957
|
||||
#: ../../sysadmclient.rst:965
|
||||
msgid ""
|
||||
"Type a password to associate with the device. Click :guilabel:`Save` to "
|
||||
"initialize the device. The User Manager may take a moment to prepare the "
|
||||
@@ -1834,49 +1803,49 @@ msgid ""
|
||||
" to allow removal of PersonaCrypt."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1027
|
||||
#: ../../sysadmclient.rst:1056
|
||||
msgid ": Managing Groups Using User Manager"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1110
|
||||
#: ../../sysadmclient.rst:1139
|
||||
msgid ": Snapshot Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1184
|
||||
#: ../../sysadmclient.rst:1213
|
||||
msgid ": Replication Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1194
|
||||
#: ../../sysadmclient.rst:1223
|
||||
msgid ": Scheduling a Replication"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1268
|
||||
#: ../../sysadmclient.rst:1297
|
||||
msgid ": Scheduling a Snapshot"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1308
|
||||
#: ../../sysadmclient.rst:1337
|
||||
msgid ": Scheduling a Scrub"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1335
|
||||
#: ../../sysadmclient.rst:1364
|
||||
msgid ": Life Preserver Settings"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1442
|
||||
#: ../../sysadmclient.rst:1471
|
||||
msgid ""
|
||||
":numref:`Table %s <cmdgui>` shows the command line equivalents to the "
|
||||
"graphical options provided by the Life Preserver GUI."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1495
|
||||
#: ../../sysadmclient.rst:1524
|
||||
msgid ": Selecting to Restore/Clone From Backup"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1517
|
||||
#: ../../sysadmclient.rst:1546
|
||||
msgid ": Input the Information for a SSH Restore"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1523
|
||||
#: ../../sysadmclient.rst:1552
|
||||
msgid ""
|
||||
"Once the connection to the backup server succeeds, you will be able to "
|
||||
"select which host to restore. After making your selection, click "
|
||||
@@ -1892,7 +1861,7 @@ msgid ""
|
||||
":guilabel:`Next` to perform the restore."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:987
|
||||
#: ../../sysadmclient.rst:970
|
||||
msgid ""
|
||||
"Once a user has been initialized for PersonaCrypt on the system, their user "
|
||||
"account will no longer be displayed when logging in, **unless** their "
|
||||
@@ -1901,7 +1870,7 @@ msgid ""
|
||||
":numref:`Figure %s <troslogin5>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:997
|
||||
#: ../../sysadmclient.rst:980
|
||||
msgid ": |trueos| Login Screen with PersonaCrypt"
|
||||
msgstr ""
|
||||
|
||||
@@ -1949,7 +1918,7 @@ msgstr ""
|
||||
msgid ": |sysadm| Task Manager"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1103
|
||||
#: ../../sysadmclient.rst:1132
|
||||
msgid ""
|
||||
":numref:`Figure %s <lpreserver1>` shows the :guilabel:`Snapshots` tab on a "
|
||||
"system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"."
|
||||
@@ -2013,6 +1982,134 @@ msgid ""
|
||||
":guilabel:`Save Settings`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:894
|
||||
msgid ""
|
||||
"|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
"PersonaCrypt device is a removable USB media, such as a USB flash drive, "
|
||||
"formatted with ZFS and encrypted with either GELI or PEFS. This device is "
|
||||
"used to hold a specific user's home directory, meaning they can securely "
|
||||
"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 "
|
||||
"or higher system. For example, this can be used to securely access one's "
|
||||
"home directory from a laptop, home computer, and work computer. The device "
|
||||
"is protected by an encryption key and a different (recommended) password "
|
||||
"separate from the user's login password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:916
|
||||
msgid "GELI"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:918
|
||||
msgid ""
|
||||
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
"your passphrase, and the other being a key stored on disk. Without both of "
|
||||
"these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
"the key and manages to get your password, it is still worthless without the "
|
||||
"system it was paired with. GELI is used by default in |trueos| as it is more"
|
||||
" fully featured over PEFS."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:940
|
||||
msgid ""
|
||||
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
"buttons are available in the :guilabel:`PersonaCrypt` tab of "
|
||||
":guilabel:`Advanced Mode`. Note this section is hidden if the currently "
|
||||
"logged in user is selected. Also, if you have just created a user and do not"
|
||||
" see these options, click :guilabel:`Save`, then re-highlight the user to "
|
||||
"display these options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:999
|
||||
msgid "PEFS"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1001
|
||||
msgid ""
|
||||
"`PEFS <http://pefs.io/>`_ stands for Private Encrypted File System. It is "
|
||||
"open source software freely available under the BSD license, and is included"
|
||||
" in |trueos| by default. PEFS runs on top of any existing file system, "
|
||||
"providing an encryption layer independent of the underlying file system. "
|
||||
"PersonaCrypt can be configured to use PEFS in place of GELI, which "
|
||||
"eliminates the need for external media, as the encrypted PEFS database is "
|
||||
"stored on the local disk."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1009
|
||||
msgid ""
|
||||
"While PEFS does not use a USB drive, be sure to print or otherwise backup "
|
||||
"the PEFS generated key fragment stored on the disk."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1012
|
||||
msgid "**Initialize PEFS with the Command Line**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1014
|
||||
msgid ""
|
||||
"Because PEFS does not use a USB drive with its encryption, the user will "
|
||||
"need a password file (pfile) containing the desired password, **before** "
|
||||
"initializing PEFS for a user account. Once this pfile is created, enabling "
|
||||
"PEFS through PersonaCrypt is accomplished in a CLI with "
|
||||
":command:`personacrypt init <username> <pfile> PEFS`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1020
|
||||
msgid ""
|
||||
"For example, the user account **test** has a pfile named "
|
||||
":file:`testpfile.txt`, which contains the single text string of **test's** "
|
||||
"chosen password. Next, the administrator adds PEFS encryption to the "
|
||||
"**test** acount by opening a CLI, logging in as root, and typing:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1029
|
||||
msgid ""
|
||||
"PersonaCrypt will initialize the account **test** with PEFS, using the "
|
||||
"string in :file:`testpfile.txt` as the new password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1032
|
||||
msgid ""
|
||||
"The |sysadm| User Manager can also initialize a user account with PEFS by "
|
||||
"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` "
|
||||
"drop down menu of the :guilabel:`PersonaCrypt` tab."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1036
|
||||
msgid ""
|
||||
"In addition to initializing an account with PEFS, PersonaCrypt also supports"
|
||||
" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt "
|
||||
"export <username>` and :command:`personacrypt import <keyfile>`, "
|
||||
"respectively."
|
||||
msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
|
||||
#~ " with ZFS and encrypted with GELI. This device is used to hold a specific "
|
||||
#~ "user's home directory, meaning they can securely transport and access their "
|
||||
#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
|
||||
#~ "example, this can be used to securely access one's home directory from a "
|
||||
#~ "laptop, home computer, and work computer. The device is protected by an "
|
||||
#~ "encryption key and a password which is, and should be, separate from the "
|
||||
#~ "user's login password."
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
#~ "your passphrase, and the other being a key stored on disk. Without both of "
|
||||
#~ "these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
#~ "the key and manages to get your password, it is still worthless without the "
|
||||
#~ "system it was paired with."
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
|
||||
#~ "Note this section is hidden if the currently logged in user is selected. "
|
||||
#~ "Also, if you have just created a user and do not see these options, click "
|
||||
#~ ":guilabel:`Save` then re-highlight the user to display these options:"
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "**Max Boot Environments:** |trueos| automatically creates a boot environment"
|
||||
#~ " before updating any software, the operating system, or applying a system "
|
||||
|
||||
@@ -482,7 +482,7 @@ msgid ""
|
||||
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <update4>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1326
|
||||
#: ../../sysadmclient.rst:1355
|
||||
msgid "Settings Tab"
|
||||
msgstr ""
|
||||
|
||||
@@ -924,20 +924,7 @@ msgstr ""
|
||||
msgid "PersonaCrypt"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:894
|
||||
msgid ""
|
||||
"|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
"PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
|
||||
" with ZFS and encrypted with GELI. This device is used to hold a specific "
|
||||
"user's home directory, meaning they can securely transport and access their "
|
||||
"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
|
||||
"example, this can be used to securely access one's home directory from a "
|
||||
"laptop, home computer, and work computer. The device is protected by an "
|
||||
"encryption key and a password which is, and should be, separate from the "
|
||||
"user's login password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:904
|
||||
#: ../../sysadmclient.rst:905
|
||||
msgid ""
|
||||
"When a user is configured to use a PersonaCrypt device, that user can not "
|
||||
"login using an unencrypted session on the same system. In other words, the "
|
||||
@@ -946,22 +933,13 @@ msgid ""
|
||||
"different user accounts, one for each type of session."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:911
|
||||
msgid ""
|
||||
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
"your passphrase, and the other being a key stored on disk. Without both of "
|
||||
"these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
"the key and manages to get your password, it is still worthless without the "
|
||||
"system it was paired with."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:917
|
||||
#: ../../sysadmclient.rst:925
|
||||
msgid ""
|
||||
"USB devices do eventually fail. Always backup any important files stored on "
|
||||
"the PersonaCrypt device to another device or system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:920
|
||||
#: ../../sysadmclient.rst:928
|
||||
msgid ""
|
||||
"The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt "
|
||||
"device for any login user, **except** for the currently logged in user. In "
|
||||
@@ -969,13 +947,13 @@ msgid ""
|
||||
"*dlavigne*, has been created and the entry for the user has been clicked."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:939
|
||||
#: ../../sysadmclient.rst:947
|
||||
msgid ""
|
||||
"**Initialize Device:** Used to prepare the USB device which will be used as "
|
||||
"the user's home directory."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:942
|
||||
#: ../../sysadmclient.rst:950
|
||||
msgid ""
|
||||
"**Import Key:** If the user has already created a PersonaCrypt device on "
|
||||
"another |trueos| system, click this button to import a previously saved copy"
|
||||
@@ -983,7 +961,7 @@ msgid ""
|
||||
"can now login to this computer using PersonaCrypt."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:950
|
||||
#: ../../sysadmclient.rst:958
|
||||
msgid ""
|
||||
"Since the USB stick will hold the user's home directory and files, ensure "
|
||||
"the stick is large enough to meet the anticipated storage needs of the home "
|
||||
@@ -993,7 +971,7 @@ msgid ""
|
||||
"logged in."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:999
|
||||
#: ../../sysadmclient.rst:982
|
||||
msgid ""
|
||||
"When stealth sessions have been configured, PersonaCrypt users will still be"
|
||||
" displayed in the login menu, even if their USB device is not inserted. This"
|
||||
@@ -1001,47 +979,47 @@ msgid ""
|
||||
"session."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1004
|
||||
#: ../../sysadmclient.rst:987
|
||||
msgid ""
|
||||
"In the field with the yellow padlock icon, input the password for the user "
|
||||
"account. In the field with the grey USB stick icon, input the password "
|
||||
"associated with the PersonaCrypt device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1008
|
||||
#: ../../sysadmclient.rst:991
|
||||
msgid ""
|
||||
"To prevent data corruption and freezing the system **DO NOT** remove the "
|
||||
"PersonaCrypt device while logged in! Always log out of your session before "
|
||||
"physically removing the device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1016
|
||||
#: ../../sysadmclient.rst:1045
|
||||
msgid "Managing Groups"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1018
|
||||
#: ../../sysadmclient.rst:1047
|
||||
msgid ""
|
||||
"Click the :guilabel:`Groups` tab to view and manage the groups on the "
|
||||
"system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s <user4>`, "
|
||||
"shows the group membership for the *operator* and *wheel* groups:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1029
|
||||
#: ../../sysadmclient.rst:1058
|
||||
msgid "This screen has 2 columns:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1031
|
||||
#: ../../sysadmclient.rst:1060
|
||||
msgid ""
|
||||
"**Members:** Indicates if the highlighted group contains any user accounts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1034
|
||||
#: ../../sysadmclient.rst:1063
|
||||
msgid ""
|
||||
"**Available:** Shows all of the system and user accounts on the system in "
|
||||
"alphabetical order."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1037
|
||||
#: ../../sysadmclient.rst:1066
|
||||
msgid ""
|
||||
"To add an account to a group, highlight the group name, then highlight the "
|
||||
"account name in the :guilabel:`Available` column. Click the left arrow and "
|
||||
@@ -1051,7 +1029,7 @@ msgid ""
|
||||
"added to a group."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1044
|
||||
#: ../../sysadmclient.rst:1073
|
||||
msgid ""
|
||||
"If you add a user to the *operator* group, they will have permission to use "
|
||||
"commands requiring administrative access and will be prompted for their own "
|
||||
@@ -1060,15 +1038,15 @@ msgid ""
|
||||
"will be prompted for the superuser password whenever they use the command."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1051
|
||||
#: ../../sysadmclient.rst:1080
|
||||
msgid "To view all of the groups on the system, click :guilabel:`Advanced`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1057
|
||||
#: ../../sysadmclient.rst:1086
|
||||
msgid "Life Preserver"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1059
|
||||
#: ../../sysadmclient.rst:1088
|
||||
msgid ""
|
||||
"The Life Preserver utility is designed to take full advantage of the "
|
||||
"functionality provided by ZFS snapshots. This utility allows you to schedule"
|
||||
@@ -1077,25 +1055,25 @@ msgid ""
|
||||
"benefits:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1081
|
||||
#: ../../sysadmclient.rst:1110
|
||||
msgid ""
|
||||
"Replication is an efficient way to keep the files on two systems in sync. "
|
||||
"With Life Preserver, the snapshots taken on the |trueos| system will be "
|
||||
"synchronized with their versions stored on the specified backup server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1086
|
||||
#: ../../sysadmclient.rst:1115
|
||||
msgid "Snapshots are sent to the backup server over an encrypted connection."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1088
|
||||
#: ../../sysadmclient.rst:1117
|
||||
msgid ""
|
||||
"Having a copy of the snapshots on another system makes it possible to "
|
||||
"perform an operating system restore should the |trueos| system become "
|
||||
"unusable or to deploy an identical system to different hardware."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1092
|
||||
#: ../../sysadmclient.rst:1121
|
||||
msgid ""
|
||||
"To manage snapshots and replication using the |sysadm| graphical client, go "
|
||||
"to :menuselection:`Utilities --> Life Preserver`. The rest of this section "
|
||||
@@ -1103,16 +1081,16 @@ msgid ""
|
||||
"Preserver."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1101
|
||||
#: ../../sysadmclient.rst:1130
|
||||
msgid "Snapshots Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1112
|
||||
#: ../../sysadmclient.rst:1141
|
||||
msgid ""
|
||||
"This screen will display any created snapshots and provides buttons to:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1114
|
||||
#: ../../sysadmclient.rst:1143
|
||||
msgid ""
|
||||
"**Create:** Used to create a manual snapshot of the specified pool now. For "
|
||||
"example, you could create a snapshot before making changes to an important "
|
||||
@@ -1126,14 +1104,14 @@ msgid ""
|
||||
"snapshot was created."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1125
|
||||
#: ../../sysadmclient.rst:1154
|
||||
msgid ""
|
||||
"**Remove:** Used to delete a highlighted snapshot. **This is a permanent "
|
||||
"change that can not be reversed.** In other words, the versions of files at "
|
||||
"the point in time the snapshot was created will be lost."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1130
|
||||
#: ../../sysadmclient.rst:1159
|
||||
msgid ""
|
||||
"**Revert:** If you highlight a snapshot entry, this button and the drop-down"
|
||||
" menu next to it will activate. You can use the drop-down menu to specify "
|
||||
@@ -1143,11 +1121,11 @@ msgid ""
|
||||
" after the snapshot was taken will be lost."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1142
|
||||
#: ../../sysadmclient.rst:1171
|
||||
msgid "Replication Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1144
|
||||
#: ../../sysadmclient.rst:1173
|
||||
msgid ""
|
||||
"Life Preserver can be configured to replicate snapshots to another system "
|
||||
"over an encrypted SSH connection, though the backup itself is stored in an "
|
||||
@@ -1155,13 +1133,13 @@ msgid ""
|
||||
" another system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1149
|
||||
#: ../../sysadmclient.rst:1178
|
||||
msgid ""
|
||||
"In order to configure replication, the remote system to hold a copy of the "
|
||||
"snapshots must first meet several requirements:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1156
|
||||
#: ../../sysadmclient.rst:1185
|
||||
msgid ""
|
||||
"The backup server **must be formatted with the latest version of ZFS,** also"
|
||||
" known as ZFS feature flags or ZFSv5000. Operating systems that support this"
|
||||
@@ -1169,14 +1147,14 @@ msgid ""
|
||||
"FreeNAS 9.1.x or higher."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1162
|
||||
#: ../../sysadmclient.rst:1191
|
||||
msgid ""
|
||||
"The system must have SSH installed and the SSH service must be running. If "
|
||||
"the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is"
|
||||
" already installed, but you will need to start the SSH service."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1167
|
||||
#: ../../sysadmclient.rst:1196
|
||||
msgid ""
|
||||
"If the backup server is running |trueos| or |pcbsd|, you will need to open "
|
||||
"TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is "
|
||||
@@ -1186,7 +1164,7 @@ msgid ""
|
||||
"backup system, make sure it has a rule to allow SSH."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1175
|
||||
#: ../../sysadmclient.rst:1204
|
||||
msgid ""
|
||||
":numref:`Figure %s <lpreserver2>` shows the initial :guilabel:`Replication` "
|
||||
"tab on a system that has not yet been configured for replication. This "
|
||||
@@ -1194,29 +1172,29 @@ msgid ""
|
||||
"schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1186
|
||||
#: ../../sysadmclient.rst:1215
|
||||
msgid ""
|
||||
"To schedule the replication, click :guilabel:`+` to display the \"Setup "
|
||||
"Replication\" screen shown in :numref:`Figure %s <lpreserver3>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1196
|
||||
#: ../../sysadmclient.rst:1225
|
||||
msgid "Input the following information:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1198
|
||||
#: ../../sysadmclient.rst:1227
|
||||
msgid ""
|
||||
"**Host IP:** The IP address of the remote system to store the replicated "
|
||||
"snapshots."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1201
|
||||
#: ../../sysadmclient.rst:1230
|
||||
msgid ""
|
||||
"**SSH Port:** The port number, if the remote system is running SSH on a port"
|
||||
" other than the default of 22."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1204
|
||||
#: ../../sysadmclient.rst:1233
|
||||
msgid ""
|
||||
"**Dataset:** The name of the ZFS pool and optional dataset on the remote "
|
||||
"system. For example, \"remotetank\" will save the snapshots to a ZFS pool of"
|
||||
@@ -1224,7 +1202,7 @@ msgid ""
|
||||
"existing dataset named \"mybackups\" on the pool named \"remotetank\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1210
|
||||
#: ../../sysadmclient.rst:1239
|
||||
msgid ""
|
||||
"**Frequency:** Use the drop-down menu to select how often to initiate the "
|
||||
"replication. Available choices are :guilabel:`Sync with snapshot` (at the "
|
||||
@@ -1235,87 +1213,87 @@ msgid ""
|
||||
":guilabel:`Start`) in this screen."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1219
|
||||
#: ../../sysadmclient.rst:1248
|
||||
msgid ""
|
||||
"**Username:** The username must already exist on the remote system, have "
|
||||
"write access to the specified \"Dataset\", and have permission to SSH into "
|
||||
"that system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1223
|
||||
#: ../../sysadmclient.rst:1252
|
||||
msgid "**Password:** The password associated with the \"Username\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1225
|
||||
#: ../../sysadmclient.rst:1254
|
||||
msgid ""
|
||||
"**Local DS:** Use the drop-down menu to select the pool or dataset to "
|
||||
"replicate to the remote system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1228
|
||||
#: ../../sysadmclient.rst:1257
|
||||
msgid ""
|
||||
"The buttons at the top of the \"Setup Replication\" screen have several "
|
||||
"uses:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1231
|
||||
#: ../../sysadmclient.rst:1260
|
||||
msgid ""
|
||||
"**+ icon:** Sdd a replication schedule. Multiple schedules are supported, "
|
||||
"meaning you can replicate to multiple systems or replicate different \"Local"
|
||||
" DS\" datasets at different times."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1235
|
||||
#: ../../sysadmclient.rst:1264
|
||||
msgid ""
|
||||
"**- icon:** Remove an already created, and highlighted, replication "
|
||||
"schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1238
|
||||
#: ../../sysadmclient.rst:1267
|
||||
msgid "**gear icon:** Modify the schedule for the highlighted replication."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1240
|
||||
#: ../../sysadmclient.rst:1269
|
||||
msgid ""
|
||||
"**Start:** Manually starts a replication to the system specified in the "
|
||||
"highlighted replication."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1243
|
||||
#: ../../sysadmclient.rst:1272
|
||||
msgid ""
|
||||
"**Initialize:** Deletes the existing replicated snapshots on the remote "
|
||||
"system and starts a new replication. This is useful if a replication gets "
|
||||
"stuck and will not complete."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1251
|
||||
#: ../../sysadmclient.rst:1280
|
||||
msgid "Schedules Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1253
|
||||
#: ../../sysadmclient.rst:1282
|
||||
msgid ""
|
||||
"This tab is used to manage when snapshots of the ZFS pool are created. "
|
||||
"Multiple snapshot schedules are supported if the system has multiple pools."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1257
|
||||
#: ../../sysadmclient.rst:1286
|
||||
msgid ""
|
||||
"Snapshots are created on the entire pool as they are needed when "
|
||||
":ref:`Restoring the Operating System`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1260
|
||||
#: ../../sysadmclient.rst:1289
|
||||
msgid ""
|
||||
"To create a snapshot schedule, click the :guilabel:`camera` icon in the "
|
||||
"lower left corner of this tab. This will activate the \"Setup Snapshot "
|
||||
"Schedule\" pane as seen in :numref:`Figure %s <lpreserver4>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1270
|
||||
#: ../../sysadmclient.rst:1299
|
||||
msgid "This pane contains several options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1275
|
||||
#: ../../sysadmclient.rst:1304
|
||||
msgid ""
|
||||
"**Snapshots to keep:** Snapshots are automatically pruned after the "
|
||||
"specified number of snapshots to prevent snapshots from eventually using up "
|
||||
@@ -1326,7 +1304,7 @@ msgid ""
|
||||
"manually in the :guilabel:`Snapshots` tab."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1284
|
||||
#: ../../sysadmclient.rst:1313
|
||||
msgid ""
|
||||
"**Frequency:** Use the drop-down menu to select how often snapshots occur. "
|
||||
"Options include \"Daily\" (which will allow you to select the time of day), "
|
||||
@@ -1334,37 +1312,37 @@ msgid ""
|
||||
"Minutes\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1289
|
||||
#: ../../sysadmclient.rst:1318
|
||||
msgid ""
|
||||
"Once you have created a snapshot schedule, you can use the \"gear\" icon "
|
||||
"next to the \"camera\" icon to modify the highlighted schedule or the \"X\" "
|
||||
"icon to delete the highlighted schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1300
|
||||
#: ../../sysadmclient.rst:1329
|
||||
msgid ""
|
||||
"To schedule when the scrub occurs, click the third icon from the right which"
|
||||
" will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure "
|
||||
"%s <lpreserver5>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1318
|
||||
#: ../../sysadmclient.rst:1347
|
||||
msgid ""
|
||||
"Once you have created a scrub schedule, you can use the \"gear\" icon next "
|
||||
"to the \"schedule scrub\" icon to modify the highlighted schedule or the "
|
||||
"\"X\" icon to delete the highlighted schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1328
|
||||
#: ../../sysadmclient.rst:1357
|
||||
msgid ""
|
||||
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <lpreserver6>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1337
|
||||
#: ../../sysadmclient.rst:1366
|
||||
msgid "Many settings are configurable:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1339
|
||||
#: ../../sysadmclient.rst:1368
|
||||
msgid ""
|
||||
"**Disk Usage Warning:** Enter a number up to 99 to indicate at which "
|
||||
"percentage of disk space Life Preserver will display an alert in the system "
|
||||
@@ -1372,41 +1350,41 @@ msgid ""
|
||||
"space."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1344
|
||||
#: ../../sysadmclient.rst:1373
|
||||
msgid ""
|
||||
"**Email:** To receive an email when disk usage reaches the percentage "
|
||||
"configured in the \"Disk Usage Warning\", enter an email address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1347
|
||||
#: ../../sysadmclient.rst:1376
|
||||
msgid ""
|
||||
"**Email Trigger:** This setting can be set to \"All\", \"Warn\", or "
|
||||
"\"Error\" and indicates the type of condition which will trigger an email "
|
||||
"message."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1350
|
||||
#: ../../sysadmclient.rst:1379
|
||||
msgid "**Recursive Management:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1352
|
||||
#: ../../sysadmclient.rst:1381
|
||||
msgid ""
|
||||
"If you make any changes in this screen, press :guilabel:`Save Settings` to "
|
||||
"apply them."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1359
|
||||
#: ../../sysadmclient.rst:1388
|
||||
msgid "Using the lpreserver CLI"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1361
|
||||
#: ../../sysadmclient.rst:1390
|
||||
msgid ""
|
||||
"The :command:`lpreserver` command line utility can also be used to manage "
|
||||
"snapshots and replication. This command needs to be run as the superuser. To"
|
||||
" display its usage, type the command without any arguments:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1381
|
||||
#: ../../sysadmclient.rst:1410
|
||||
msgid ""
|
||||
"Each command has its own help text that describes its parameters and "
|
||||
"provides a usage example. For example, to receive help on how to use the "
|
||||
@@ -1417,104 +1395,104 @@ msgstr ""
|
||||
msgid "Command Line and GUI Equivalents"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**Command Line**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**GUI**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**Description**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452
|
||||
#: ../../sysadmclient.rst:1481
|
||||
msgid "**cronsnap**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499
|
||||
msgid "\"Snapshots\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452
|
||||
#: ../../sysadmclient.rst:1481
|
||||
msgid ""
|
||||
"schedule when snapshots occur and how long to keep them; the **stop** option"
|
||||
" can be used to disable snapshot creation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "**cronscrub**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "\"Schedules\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "schedule a ZFS scrub"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459
|
||||
#: ../../sysadmclient.rst:1488
|
||||
msgid "**get**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495
|
||||
msgid "\"Settings\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459
|
||||
#: ../../sysadmclient.rst:1488
|
||||
msgid "list Life Preserver options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid "**replicate**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid "\"Replication\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid ""
|
||||
"used to list, add, and remove backup server; read the **help** for this "
|
||||
"command for examples"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1495
|
||||
msgid "**set**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1495
|
||||
msgid ""
|
||||
"configures Life Preserver options; read **help** for the list of "
|
||||
"configurable options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1499
|
||||
msgid "**snapshot**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1499
|
||||
msgid ""
|
||||
"create and replicate a new ZFS snapshot; by default, snapshots are "
|
||||
"recursive, meaning that a that a snapshot is taken of every dataset within a"
|
||||
" pool"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1476
|
||||
#: ../../sysadmclient.rst:1505
|
||||
msgid "**status**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1476
|
||||
#: ../../sysadmclient.rst:1505
|
||||
msgid "lists the last snapshot name and replication status"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1483
|
||||
#: ../../sysadmclient.rst:1512
|
||||
msgid "Restoring the Operating System"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1485
|
||||
#: ../../sysadmclient.rst:1514
|
||||
msgid ""
|
||||
"If you have replicated the system's snapshots to a remote backup server, you"
|
||||
" can use a |trueos| installation media to perform an operating system "
|
||||
@@ -1522,7 +1500,7 @@ msgid ""
|
||||
"you get to the screen shown in :numref:`Figure %s <restore1>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1497
|
||||
#: ../../sysadmclient.rst:1526
|
||||
msgid ""
|
||||
"Before you can perform a restore, the network interface must be configured. "
|
||||
"Click :guilabel:`Network Connectivity` (second icon from the left) in order "
|
||||
@@ -1533,7 +1511,7 @@ msgid ""
|
||||
"continuing."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1505
|
||||
#: ../../sysadmclient.rst:1534
|
||||
msgid ""
|
||||
"Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and"
|
||||
" :guilabel:`Next`. This will start the Restore Wizard. In the screen shown "
|
||||
@@ -1543,7 +1521,7 @@ msgid ""
|
||||
"number."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1519
|
||||
#: ../../sysadmclient.rst:1548
|
||||
msgid ""
|
||||
"Click :guilabel:`Next` and the wizard will provide a summary of your "
|
||||
"selections. If correct, click :guilabel:`Finish`; otherwise, click "
|
||||
@@ -1626,7 +1604,7 @@ msgid ""
|
||||
"press :guilabel:`Close Ports`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1152
|
||||
#: ../../sysadmclient.rst:1181
|
||||
msgid ""
|
||||
"Snapshots occurring too frequently can introduce errors in replication. To "
|
||||
"avoid errors, ensure snapshots are configured to take place slower than the "
|
||||
@@ -1685,7 +1663,7 @@ msgid ""
|
||||
"accounts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1065
|
||||
#: ../../sysadmclient.rst:1094
|
||||
msgid ""
|
||||
"A snapshot provides a \"point-in-time\" image of the ZFS pool. This is "
|
||||
"similar to a full system backup as the snapshot contains the information for"
|
||||
@@ -1703,26 +1681,26 @@ msgid ""
|
||||
"snapshot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1272
|
||||
#: ../../sysadmclient.rst:1301
|
||||
msgid ""
|
||||
"**Storage Pool:** Select the ZFS storage pool that contains the datasets "
|
||||
"that you wish to snapshot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1293
|
||||
#: ../../sysadmclient.rst:1322
|
||||
msgid ""
|
||||
"This screen can also be used to manage the ZFS scrub schedule. Scrubs are "
|
||||
"recommended as they can provide an early indication of a potential disk "
|
||||
"failure. Scrubs can be scheduled on a per-pool basis."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1297
|
||||
#: ../../sysadmclient.rst:1326
|
||||
msgid ""
|
||||
"If you have multiple pools, be sure to create a scrub schedule for each "
|
||||
"pool."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1310
|
||||
#: ../../sysadmclient.rst:1339
|
||||
msgid ""
|
||||
"Select the pool from the :guilabel:`Storage Pool` drop-down menu, then "
|
||||
"select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", "
|
||||
@@ -1807,26 +1785,17 @@ msgstr ""
|
||||
msgid ": Viewing All Accounts and Their Details"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:930
|
||||
#: ../../sysadmclient.rst:938
|
||||
msgid ": Initialize PersonaCrypt Device"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:932
|
||||
msgid ""
|
||||
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
|
||||
"Note this section is hidden if the currently logged in user is selected. "
|
||||
"Also, if you have just created a user and do not see these options, click "
|
||||
":guilabel:`Save` then re-highlight the user to display these options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:947
|
||||
#: ../../sysadmclient.rst:955
|
||||
msgid ""
|
||||
"To prepare a PersonaCrypt device for this user, insert a USB stick and click"
|
||||
" :guilabel:`Initialize Device`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:957
|
||||
#: ../../sysadmclient.rst:965
|
||||
msgid ""
|
||||
"Type a password to associate with the device. Click :guilabel:`Save` to "
|
||||
"initialize the device. The User Manager may take a moment to prepare the "
|
||||
@@ -1834,49 +1803,49 @@ msgid ""
|
||||
" to allow removal of PersonaCrypt."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1027
|
||||
#: ../../sysadmclient.rst:1056
|
||||
msgid ": Managing Groups Using User Manager"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1110
|
||||
#: ../../sysadmclient.rst:1139
|
||||
msgid ": Snapshot Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1184
|
||||
#: ../../sysadmclient.rst:1213
|
||||
msgid ": Replication Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1194
|
||||
#: ../../sysadmclient.rst:1223
|
||||
msgid ": Scheduling a Replication"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1268
|
||||
#: ../../sysadmclient.rst:1297
|
||||
msgid ": Scheduling a Snapshot"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1308
|
||||
#: ../../sysadmclient.rst:1337
|
||||
msgid ": Scheduling a Scrub"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1335
|
||||
#: ../../sysadmclient.rst:1364
|
||||
msgid ": Life Preserver Settings"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1442
|
||||
#: ../../sysadmclient.rst:1471
|
||||
msgid ""
|
||||
":numref:`Table %s <cmdgui>` shows the command line equivalents to the "
|
||||
"graphical options provided by the Life Preserver GUI."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1495
|
||||
#: ../../sysadmclient.rst:1524
|
||||
msgid ": Selecting to Restore/Clone From Backup"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1517
|
||||
#: ../../sysadmclient.rst:1546
|
||||
msgid ": Input the Information for a SSH Restore"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1523
|
||||
#: ../../sysadmclient.rst:1552
|
||||
msgid ""
|
||||
"Once the connection to the backup server succeeds, you will be able to "
|
||||
"select which host to restore. After making your selection, click "
|
||||
@@ -1892,7 +1861,7 @@ msgid ""
|
||||
":guilabel:`Next` to perform the restore."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:987
|
||||
#: ../../sysadmclient.rst:970
|
||||
msgid ""
|
||||
"Once a user has been initialized for PersonaCrypt on the system, their user "
|
||||
"account will no longer be displayed when logging in, **unless** their "
|
||||
@@ -1901,7 +1870,7 @@ msgid ""
|
||||
":numref:`Figure %s <troslogin5>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:997
|
||||
#: ../../sysadmclient.rst:980
|
||||
msgid ": |trueos| Login Screen with PersonaCrypt"
|
||||
msgstr ""
|
||||
|
||||
@@ -1949,7 +1918,7 @@ msgstr ""
|
||||
msgid ": |sysadm| Task Manager"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1103
|
||||
#: ../../sysadmclient.rst:1132
|
||||
msgid ""
|
||||
":numref:`Figure %s <lpreserver1>` shows the :guilabel:`Snapshots` tab on a "
|
||||
"system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"."
|
||||
@@ -2013,6 +1982,134 @@ msgid ""
|
||||
":guilabel:`Save Settings`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:894
|
||||
msgid ""
|
||||
"|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
"PersonaCrypt device is a removable USB media, such as a USB flash drive, "
|
||||
"formatted with ZFS and encrypted with either GELI or PEFS. This device is "
|
||||
"used to hold a specific user's home directory, meaning they can securely "
|
||||
"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 "
|
||||
"or higher system. For example, this can be used to securely access one's "
|
||||
"home directory from a laptop, home computer, and work computer. The device "
|
||||
"is protected by an encryption key and a different (recommended) password "
|
||||
"separate from the user's login password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:916
|
||||
msgid "GELI"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:918
|
||||
msgid ""
|
||||
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
"your passphrase, and the other being a key stored on disk. Without both of "
|
||||
"these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
"the key and manages to get your password, it is still worthless without the "
|
||||
"system it was paired with. GELI is used by default in |trueos| as it is more"
|
||||
" fully featured over PEFS."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:940
|
||||
msgid ""
|
||||
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
"buttons are available in the :guilabel:`PersonaCrypt` tab of "
|
||||
":guilabel:`Advanced Mode`. Note this section is hidden if the currently "
|
||||
"logged in user is selected. Also, if you have just created a user and do not"
|
||||
" see these options, click :guilabel:`Save`, then re-highlight the user to "
|
||||
"display these options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:999
|
||||
msgid "PEFS"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1001
|
||||
msgid ""
|
||||
"`PEFS <http://pefs.io/>`_ stands for Private Encrypted File System. It is "
|
||||
"open source software freely available under the BSD license, and is included"
|
||||
" in |trueos| by default. PEFS runs on top of any existing file system, "
|
||||
"providing an encryption layer independent of the underlying file system. "
|
||||
"PersonaCrypt can be configured to use PEFS in place of GELI, which "
|
||||
"eliminates the need for external media, as the encrypted PEFS database is "
|
||||
"stored on the local disk."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1009
|
||||
msgid ""
|
||||
"While PEFS does not use a USB drive, be sure to print or otherwise backup "
|
||||
"the PEFS generated key fragment stored on the disk."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1012
|
||||
msgid "**Initialize PEFS with the Command Line**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1014
|
||||
msgid ""
|
||||
"Because PEFS does not use a USB drive with its encryption, the user will "
|
||||
"need a password file (pfile) containing the desired password, **before** "
|
||||
"initializing PEFS for a user account. Once this pfile is created, enabling "
|
||||
"PEFS through PersonaCrypt is accomplished in a CLI with "
|
||||
":command:`personacrypt init <username> <pfile> PEFS`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1020
|
||||
msgid ""
|
||||
"For example, the user account **test** has a pfile named "
|
||||
":file:`testpfile.txt`, which contains the single text string of **test's** "
|
||||
"chosen password. Next, the administrator adds PEFS encryption to the "
|
||||
"**test** acount by opening a CLI, logging in as root, and typing:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1029
|
||||
msgid ""
|
||||
"PersonaCrypt will initialize the account **test** with PEFS, using the "
|
||||
"string in :file:`testpfile.txt` as the new password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1032
|
||||
msgid ""
|
||||
"The |sysadm| User Manager can also initialize a user account with PEFS by "
|
||||
"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` "
|
||||
"drop down menu of the :guilabel:`PersonaCrypt` tab."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1036
|
||||
msgid ""
|
||||
"In addition to initializing an account with PEFS, PersonaCrypt also supports"
|
||||
" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt "
|
||||
"export <username>` and :command:`personacrypt import <keyfile>`, "
|
||||
"respectively."
|
||||
msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
|
||||
#~ " with ZFS and encrypted with GELI. This device is used to hold a specific "
|
||||
#~ "user's home directory, meaning they can securely transport and access their "
|
||||
#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
|
||||
#~ "example, this can be used to securely access one's home directory from a "
|
||||
#~ "laptop, home computer, and work computer. The device is protected by an "
|
||||
#~ "encryption key and a password which is, and should be, separate from the "
|
||||
#~ "user's login password."
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
#~ "your passphrase, and the other being a key stored on disk. Without both of "
|
||||
#~ "these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
#~ "the key and manages to get your password, it is still worthless without the "
|
||||
#~ "system it was paired with."
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
|
||||
#~ "Note this section is hidden if the currently logged in user is selected. "
|
||||
#~ "Also, if you have just created a user and do not see these options, click "
|
||||
#~ ":guilabel:`Save` then re-highlight the user to display these options:"
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "**Max Boot Environments:** |trueos| automatically creates a boot environment"
|
||||
#~ " before updating any software, the operating system, or applying a system "
|
||||
|
||||
@@ -482,7 +482,7 @@ msgid ""
|
||||
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <update4>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1326
|
||||
#: ../../sysadmclient.rst:1355
|
||||
msgid "Settings Tab"
|
||||
msgstr ""
|
||||
|
||||
@@ -924,20 +924,7 @@ msgstr ""
|
||||
msgid "PersonaCrypt"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:894
|
||||
msgid ""
|
||||
"|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
"PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
|
||||
" with ZFS and encrypted with GELI. This device is used to hold a specific "
|
||||
"user's home directory, meaning they can securely transport and access their "
|
||||
"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
|
||||
"example, this can be used to securely access one's home directory from a "
|
||||
"laptop, home computer, and work computer. The device is protected by an "
|
||||
"encryption key and a password which is, and should be, separate from the "
|
||||
"user's login password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:904
|
||||
#: ../../sysadmclient.rst:905
|
||||
msgid ""
|
||||
"When a user is configured to use a PersonaCrypt device, that user can not "
|
||||
"login using an unencrypted session on the same system. In other words, the "
|
||||
@@ -946,22 +933,13 @@ msgid ""
|
||||
"different user accounts, one for each type of session."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:911
|
||||
msgid ""
|
||||
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
"your passphrase, and the other being a key stored on disk. Without both of "
|
||||
"these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
"the key and manages to get your password, it is still worthless without the "
|
||||
"system it was paired with."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:917
|
||||
#: ../../sysadmclient.rst:925
|
||||
msgid ""
|
||||
"USB devices do eventually fail. Always backup any important files stored on "
|
||||
"the PersonaCrypt device to another device or system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:920
|
||||
#: ../../sysadmclient.rst:928
|
||||
msgid ""
|
||||
"The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt "
|
||||
"device for any login user, **except** for the currently logged in user. In "
|
||||
@@ -969,13 +947,13 @@ msgid ""
|
||||
"*dlavigne*, has been created and the entry for the user has been clicked."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:939
|
||||
#: ../../sysadmclient.rst:947
|
||||
msgid ""
|
||||
"**Initialize Device:** Used to prepare the USB device which will be used as "
|
||||
"the user's home directory."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:942
|
||||
#: ../../sysadmclient.rst:950
|
||||
msgid ""
|
||||
"**Import Key:** If the user has already created a PersonaCrypt device on "
|
||||
"another |trueos| system, click this button to import a previously saved copy"
|
||||
@@ -983,7 +961,7 @@ msgid ""
|
||||
"can now login to this computer using PersonaCrypt."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:950
|
||||
#: ../../sysadmclient.rst:958
|
||||
msgid ""
|
||||
"Since the USB stick will hold the user's home directory and files, ensure "
|
||||
"the stick is large enough to meet the anticipated storage needs of the home "
|
||||
@@ -993,7 +971,7 @@ msgid ""
|
||||
"logged in."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:999
|
||||
#: ../../sysadmclient.rst:982
|
||||
msgid ""
|
||||
"When stealth sessions have been configured, PersonaCrypt users will still be"
|
||||
" displayed in the login menu, even if their USB device is not inserted. This"
|
||||
@@ -1001,47 +979,47 @@ msgid ""
|
||||
"session."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1004
|
||||
#: ../../sysadmclient.rst:987
|
||||
msgid ""
|
||||
"In the field with the yellow padlock icon, input the password for the user "
|
||||
"account. In the field with the grey USB stick icon, input the password "
|
||||
"associated with the PersonaCrypt device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1008
|
||||
#: ../../sysadmclient.rst:991
|
||||
msgid ""
|
||||
"To prevent data corruption and freezing the system **DO NOT** remove the "
|
||||
"PersonaCrypt device while logged in! Always log out of your session before "
|
||||
"physically removing the device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1016
|
||||
#: ../../sysadmclient.rst:1045
|
||||
msgid "Managing Groups"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1018
|
||||
#: ../../sysadmclient.rst:1047
|
||||
msgid ""
|
||||
"Click the :guilabel:`Groups` tab to view and manage the groups on the "
|
||||
"system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s <user4>`, "
|
||||
"shows the group membership for the *operator* and *wheel* groups:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1029
|
||||
#: ../../sysadmclient.rst:1058
|
||||
msgid "This screen has 2 columns:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1031
|
||||
#: ../../sysadmclient.rst:1060
|
||||
msgid ""
|
||||
"**Members:** Indicates if the highlighted group contains any user accounts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1034
|
||||
#: ../../sysadmclient.rst:1063
|
||||
msgid ""
|
||||
"**Available:** Shows all of the system and user accounts on the system in "
|
||||
"alphabetical order."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1037
|
||||
#: ../../sysadmclient.rst:1066
|
||||
msgid ""
|
||||
"To add an account to a group, highlight the group name, then highlight the "
|
||||
"account name in the :guilabel:`Available` column. Click the left arrow and "
|
||||
@@ -1051,7 +1029,7 @@ msgid ""
|
||||
"added to a group."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1044
|
||||
#: ../../sysadmclient.rst:1073
|
||||
msgid ""
|
||||
"If you add a user to the *operator* group, they will have permission to use "
|
||||
"commands requiring administrative access and will be prompted for their own "
|
||||
@@ -1060,15 +1038,15 @@ msgid ""
|
||||
"will be prompted for the superuser password whenever they use the command."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1051
|
||||
#: ../../sysadmclient.rst:1080
|
||||
msgid "To view all of the groups on the system, click :guilabel:`Advanced`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1057
|
||||
#: ../../sysadmclient.rst:1086
|
||||
msgid "Life Preserver"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1059
|
||||
#: ../../sysadmclient.rst:1088
|
||||
msgid ""
|
||||
"The Life Preserver utility is designed to take full advantage of the "
|
||||
"functionality provided by ZFS snapshots. This utility allows you to schedule"
|
||||
@@ -1077,25 +1055,25 @@ msgid ""
|
||||
"benefits:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1081
|
||||
#: ../../sysadmclient.rst:1110
|
||||
msgid ""
|
||||
"Replication is an efficient way to keep the files on two systems in sync. "
|
||||
"With Life Preserver, the snapshots taken on the |trueos| system will be "
|
||||
"synchronized with their versions stored on the specified backup server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1086
|
||||
#: ../../sysadmclient.rst:1115
|
||||
msgid "Snapshots are sent to the backup server over an encrypted connection."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1088
|
||||
#: ../../sysadmclient.rst:1117
|
||||
msgid ""
|
||||
"Having a copy of the snapshots on another system makes it possible to "
|
||||
"perform an operating system restore should the |trueos| system become "
|
||||
"unusable or to deploy an identical system to different hardware."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1092
|
||||
#: ../../sysadmclient.rst:1121
|
||||
msgid ""
|
||||
"To manage snapshots and replication using the |sysadm| graphical client, go "
|
||||
"to :menuselection:`Utilities --> Life Preserver`. The rest of this section "
|
||||
@@ -1103,16 +1081,16 @@ msgid ""
|
||||
"Preserver."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1101
|
||||
#: ../../sysadmclient.rst:1130
|
||||
msgid "Snapshots Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1112
|
||||
#: ../../sysadmclient.rst:1141
|
||||
msgid ""
|
||||
"This screen will display any created snapshots and provides buttons to:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1114
|
||||
#: ../../sysadmclient.rst:1143
|
||||
msgid ""
|
||||
"**Create:** Used to create a manual snapshot of the specified pool now. For "
|
||||
"example, you could create a snapshot before making changes to an important "
|
||||
@@ -1126,14 +1104,14 @@ msgid ""
|
||||
"snapshot was created."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1125
|
||||
#: ../../sysadmclient.rst:1154
|
||||
msgid ""
|
||||
"**Remove:** Used to delete a highlighted snapshot. **This is a permanent "
|
||||
"change that can not be reversed.** In other words, the versions of files at "
|
||||
"the point in time the snapshot was created will be lost."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1130
|
||||
#: ../../sysadmclient.rst:1159
|
||||
msgid ""
|
||||
"**Revert:** If you highlight a snapshot entry, this button and the drop-down"
|
||||
" menu next to it will activate. You can use the drop-down menu to specify "
|
||||
@@ -1143,11 +1121,11 @@ msgid ""
|
||||
" after the snapshot was taken will be lost."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1142
|
||||
#: ../../sysadmclient.rst:1171
|
||||
msgid "Replication Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1144
|
||||
#: ../../sysadmclient.rst:1173
|
||||
msgid ""
|
||||
"Life Preserver can be configured to replicate snapshots to another system "
|
||||
"over an encrypted SSH connection, though the backup itself is stored in an "
|
||||
@@ -1155,13 +1133,13 @@ msgid ""
|
||||
" another system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1149
|
||||
#: ../../sysadmclient.rst:1178
|
||||
msgid ""
|
||||
"In order to configure replication, the remote system to hold a copy of the "
|
||||
"snapshots must first meet several requirements:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1156
|
||||
#: ../../sysadmclient.rst:1185
|
||||
msgid ""
|
||||
"The backup server **must be formatted with the latest version of ZFS,** also"
|
||||
" known as ZFS feature flags or ZFSv5000. Operating systems that support this"
|
||||
@@ -1169,14 +1147,14 @@ msgid ""
|
||||
"FreeNAS 9.1.x or higher."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1162
|
||||
#: ../../sysadmclient.rst:1191
|
||||
msgid ""
|
||||
"The system must have SSH installed and the SSH service must be running. If "
|
||||
"the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is"
|
||||
" already installed, but you will need to start the SSH service."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1167
|
||||
#: ../../sysadmclient.rst:1196
|
||||
msgid ""
|
||||
"If the backup server is running |trueos| or |pcbsd|, you will need to open "
|
||||
"TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is "
|
||||
@@ -1186,7 +1164,7 @@ msgid ""
|
||||
"backup system, make sure it has a rule to allow SSH."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1175
|
||||
#: ../../sysadmclient.rst:1204
|
||||
msgid ""
|
||||
":numref:`Figure %s <lpreserver2>` shows the initial :guilabel:`Replication` "
|
||||
"tab on a system that has not yet been configured for replication. This "
|
||||
@@ -1194,29 +1172,29 @@ msgid ""
|
||||
"schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1186
|
||||
#: ../../sysadmclient.rst:1215
|
||||
msgid ""
|
||||
"To schedule the replication, click :guilabel:`+` to display the \"Setup "
|
||||
"Replication\" screen shown in :numref:`Figure %s <lpreserver3>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1196
|
||||
#: ../../sysadmclient.rst:1225
|
||||
msgid "Input the following information:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1198
|
||||
#: ../../sysadmclient.rst:1227
|
||||
msgid ""
|
||||
"**Host IP:** The IP address of the remote system to store the replicated "
|
||||
"snapshots."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1201
|
||||
#: ../../sysadmclient.rst:1230
|
||||
msgid ""
|
||||
"**SSH Port:** The port number, if the remote system is running SSH on a port"
|
||||
" other than the default of 22."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1204
|
||||
#: ../../sysadmclient.rst:1233
|
||||
msgid ""
|
||||
"**Dataset:** The name of the ZFS pool and optional dataset on the remote "
|
||||
"system. For example, \"remotetank\" will save the snapshots to a ZFS pool of"
|
||||
@@ -1224,7 +1202,7 @@ msgid ""
|
||||
"existing dataset named \"mybackups\" on the pool named \"remotetank\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1210
|
||||
#: ../../sysadmclient.rst:1239
|
||||
msgid ""
|
||||
"**Frequency:** Use the drop-down menu to select how often to initiate the "
|
||||
"replication. Available choices are :guilabel:`Sync with snapshot` (at the "
|
||||
@@ -1235,87 +1213,87 @@ msgid ""
|
||||
":guilabel:`Start`) in this screen."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1219
|
||||
#: ../../sysadmclient.rst:1248
|
||||
msgid ""
|
||||
"**Username:** The username must already exist on the remote system, have "
|
||||
"write access to the specified \"Dataset\", and have permission to SSH into "
|
||||
"that system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1223
|
||||
#: ../../sysadmclient.rst:1252
|
||||
msgid "**Password:** The password associated with the \"Username\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1225
|
||||
#: ../../sysadmclient.rst:1254
|
||||
msgid ""
|
||||
"**Local DS:** Use the drop-down menu to select the pool or dataset to "
|
||||
"replicate to the remote system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1228
|
||||
#: ../../sysadmclient.rst:1257
|
||||
msgid ""
|
||||
"The buttons at the top of the \"Setup Replication\" screen have several "
|
||||
"uses:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1231
|
||||
#: ../../sysadmclient.rst:1260
|
||||
msgid ""
|
||||
"**+ icon:** Sdd a replication schedule. Multiple schedules are supported, "
|
||||
"meaning you can replicate to multiple systems or replicate different \"Local"
|
||||
" DS\" datasets at different times."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1235
|
||||
#: ../../sysadmclient.rst:1264
|
||||
msgid ""
|
||||
"**- icon:** Remove an already created, and highlighted, replication "
|
||||
"schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1238
|
||||
#: ../../sysadmclient.rst:1267
|
||||
msgid "**gear icon:** Modify the schedule for the highlighted replication."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1240
|
||||
#: ../../sysadmclient.rst:1269
|
||||
msgid ""
|
||||
"**Start:** Manually starts a replication to the system specified in the "
|
||||
"highlighted replication."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1243
|
||||
#: ../../sysadmclient.rst:1272
|
||||
msgid ""
|
||||
"**Initialize:** Deletes the existing replicated snapshots on the remote "
|
||||
"system and starts a new replication. This is useful if a replication gets "
|
||||
"stuck and will not complete."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1251
|
||||
#: ../../sysadmclient.rst:1280
|
||||
msgid "Schedules Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1253
|
||||
#: ../../sysadmclient.rst:1282
|
||||
msgid ""
|
||||
"This tab is used to manage when snapshots of the ZFS pool are created. "
|
||||
"Multiple snapshot schedules are supported if the system has multiple pools."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1257
|
||||
#: ../../sysadmclient.rst:1286
|
||||
msgid ""
|
||||
"Snapshots are created on the entire pool as they are needed when "
|
||||
":ref:`Restoring the Operating System`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1260
|
||||
#: ../../sysadmclient.rst:1289
|
||||
msgid ""
|
||||
"To create a snapshot schedule, click the :guilabel:`camera` icon in the "
|
||||
"lower left corner of this tab. This will activate the \"Setup Snapshot "
|
||||
"Schedule\" pane as seen in :numref:`Figure %s <lpreserver4>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1270
|
||||
#: ../../sysadmclient.rst:1299
|
||||
msgid "This pane contains several options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1275
|
||||
#: ../../sysadmclient.rst:1304
|
||||
msgid ""
|
||||
"**Snapshots to keep:** Snapshots are automatically pruned after the "
|
||||
"specified number of snapshots to prevent snapshots from eventually using up "
|
||||
@@ -1326,7 +1304,7 @@ msgid ""
|
||||
"manually in the :guilabel:`Snapshots` tab."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1284
|
||||
#: ../../sysadmclient.rst:1313
|
||||
msgid ""
|
||||
"**Frequency:** Use the drop-down menu to select how often snapshots occur. "
|
||||
"Options include \"Daily\" (which will allow you to select the time of day), "
|
||||
@@ -1334,37 +1312,37 @@ msgid ""
|
||||
"Minutes\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1289
|
||||
#: ../../sysadmclient.rst:1318
|
||||
msgid ""
|
||||
"Once you have created a snapshot schedule, you can use the \"gear\" icon "
|
||||
"next to the \"camera\" icon to modify the highlighted schedule or the \"X\" "
|
||||
"icon to delete the highlighted schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1300
|
||||
#: ../../sysadmclient.rst:1329
|
||||
msgid ""
|
||||
"To schedule when the scrub occurs, click the third icon from the right which"
|
||||
" will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure "
|
||||
"%s <lpreserver5>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1318
|
||||
#: ../../sysadmclient.rst:1347
|
||||
msgid ""
|
||||
"Once you have created a scrub schedule, you can use the \"gear\" icon next "
|
||||
"to the \"schedule scrub\" icon to modify the highlighted schedule or the "
|
||||
"\"X\" icon to delete the highlighted schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1328
|
||||
#: ../../sysadmclient.rst:1357
|
||||
msgid ""
|
||||
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <lpreserver6>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1337
|
||||
#: ../../sysadmclient.rst:1366
|
||||
msgid "Many settings are configurable:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1339
|
||||
#: ../../sysadmclient.rst:1368
|
||||
msgid ""
|
||||
"**Disk Usage Warning:** Enter a number up to 99 to indicate at which "
|
||||
"percentage of disk space Life Preserver will display an alert in the system "
|
||||
@@ -1372,41 +1350,41 @@ msgid ""
|
||||
"space."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1344
|
||||
#: ../../sysadmclient.rst:1373
|
||||
msgid ""
|
||||
"**Email:** To receive an email when disk usage reaches the percentage "
|
||||
"configured in the \"Disk Usage Warning\", enter an email address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1347
|
||||
#: ../../sysadmclient.rst:1376
|
||||
msgid ""
|
||||
"**Email Trigger:** This setting can be set to \"All\", \"Warn\", or "
|
||||
"\"Error\" and indicates the type of condition which will trigger an email "
|
||||
"message."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1350
|
||||
#: ../../sysadmclient.rst:1379
|
||||
msgid "**Recursive Management:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1352
|
||||
#: ../../sysadmclient.rst:1381
|
||||
msgid ""
|
||||
"If you make any changes in this screen, press :guilabel:`Save Settings` to "
|
||||
"apply them."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1359
|
||||
#: ../../sysadmclient.rst:1388
|
||||
msgid "Using the lpreserver CLI"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1361
|
||||
#: ../../sysadmclient.rst:1390
|
||||
msgid ""
|
||||
"The :command:`lpreserver` command line utility can also be used to manage "
|
||||
"snapshots and replication. This command needs to be run as the superuser. To"
|
||||
" display its usage, type the command without any arguments:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1381
|
||||
#: ../../sysadmclient.rst:1410
|
||||
msgid ""
|
||||
"Each command has its own help text that describes its parameters and "
|
||||
"provides a usage example. For example, to receive help on how to use the "
|
||||
@@ -1417,104 +1395,104 @@ msgstr ""
|
||||
msgid "Command Line and GUI Equivalents"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**Command Line**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**GUI**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**Description**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452
|
||||
#: ../../sysadmclient.rst:1481
|
||||
msgid "**cronsnap**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499
|
||||
msgid "\"Snapshots\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452
|
||||
#: ../../sysadmclient.rst:1481
|
||||
msgid ""
|
||||
"schedule when snapshots occur and how long to keep them; the **stop** option"
|
||||
" can be used to disable snapshot creation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "**cronscrub**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "\"Schedules\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "schedule a ZFS scrub"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459
|
||||
#: ../../sysadmclient.rst:1488
|
||||
msgid "**get**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495
|
||||
msgid "\"Settings\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459
|
||||
#: ../../sysadmclient.rst:1488
|
||||
msgid "list Life Preserver options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid "**replicate**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid "\"Replication\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid ""
|
||||
"used to list, add, and remove backup server; read the **help** for this "
|
||||
"command for examples"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1495
|
||||
msgid "**set**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1495
|
||||
msgid ""
|
||||
"configures Life Preserver options; read **help** for the list of "
|
||||
"configurable options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1499
|
||||
msgid "**snapshot**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1499
|
||||
msgid ""
|
||||
"create and replicate a new ZFS snapshot; by default, snapshots are "
|
||||
"recursive, meaning that a that a snapshot is taken of every dataset within a"
|
||||
" pool"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1476
|
||||
#: ../../sysadmclient.rst:1505
|
||||
msgid "**status**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1476
|
||||
#: ../../sysadmclient.rst:1505
|
||||
msgid "lists the last snapshot name and replication status"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1483
|
||||
#: ../../sysadmclient.rst:1512
|
||||
msgid "Restoring the Operating System"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1485
|
||||
#: ../../sysadmclient.rst:1514
|
||||
msgid ""
|
||||
"If you have replicated the system's snapshots to a remote backup server, you"
|
||||
" can use a |trueos| installation media to perform an operating system "
|
||||
@@ -1522,7 +1500,7 @@ msgid ""
|
||||
"you get to the screen shown in :numref:`Figure %s <restore1>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1497
|
||||
#: ../../sysadmclient.rst:1526
|
||||
msgid ""
|
||||
"Before you can perform a restore, the network interface must be configured. "
|
||||
"Click :guilabel:`Network Connectivity` (second icon from the left) in order "
|
||||
@@ -1533,7 +1511,7 @@ msgid ""
|
||||
"continuing."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1505
|
||||
#: ../../sysadmclient.rst:1534
|
||||
msgid ""
|
||||
"Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and"
|
||||
" :guilabel:`Next`. This will start the Restore Wizard. In the screen shown "
|
||||
@@ -1543,7 +1521,7 @@ msgid ""
|
||||
"number."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1519
|
||||
#: ../../sysadmclient.rst:1548
|
||||
msgid ""
|
||||
"Click :guilabel:`Next` and the wizard will provide a summary of your "
|
||||
"selections. If correct, click :guilabel:`Finish`; otherwise, click "
|
||||
@@ -1626,7 +1604,7 @@ msgid ""
|
||||
"press :guilabel:`Close Ports`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1152
|
||||
#: ../../sysadmclient.rst:1181
|
||||
msgid ""
|
||||
"Snapshots occurring too frequently can introduce errors in replication. To "
|
||||
"avoid errors, ensure snapshots are configured to take place slower than the "
|
||||
@@ -1685,7 +1663,7 @@ msgid ""
|
||||
"accounts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1065
|
||||
#: ../../sysadmclient.rst:1094
|
||||
msgid ""
|
||||
"A snapshot provides a \"point-in-time\" image of the ZFS pool. This is "
|
||||
"similar to a full system backup as the snapshot contains the information for"
|
||||
@@ -1703,26 +1681,26 @@ msgid ""
|
||||
"snapshot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1272
|
||||
#: ../../sysadmclient.rst:1301
|
||||
msgid ""
|
||||
"**Storage Pool:** Select the ZFS storage pool that contains the datasets "
|
||||
"that you wish to snapshot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1293
|
||||
#: ../../sysadmclient.rst:1322
|
||||
msgid ""
|
||||
"This screen can also be used to manage the ZFS scrub schedule. Scrubs are "
|
||||
"recommended as they can provide an early indication of a potential disk "
|
||||
"failure. Scrubs can be scheduled on a per-pool basis."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1297
|
||||
#: ../../sysadmclient.rst:1326
|
||||
msgid ""
|
||||
"If you have multiple pools, be sure to create a scrub schedule for each "
|
||||
"pool."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1310
|
||||
#: ../../sysadmclient.rst:1339
|
||||
msgid ""
|
||||
"Select the pool from the :guilabel:`Storage Pool` drop-down menu, then "
|
||||
"select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", "
|
||||
@@ -1807,26 +1785,17 @@ msgstr ""
|
||||
msgid ": Viewing All Accounts and Their Details"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:930
|
||||
#: ../../sysadmclient.rst:938
|
||||
msgid ": Initialize PersonaCrypt Device"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:932
|
||||
msgid ""
|
||||
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
|
||||
"Note this section is hidden if the currently logged in user is selected. "
|
||||
"Also, if you have just created a user and do not see these options, click "
|
||||
":guilabel:`Save` then re-highlight the user to display these options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:947
|
||||
#: ../../sysadmclient.rst:955
|
||||
msgid ""
|
||||
"To prepare a PersonaCrypt device for this user, insert a USB stick and click"
|
||||
" :guilabel:`Initialize Device`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:957
|
||||
#: ../../sysadmclient.rst:965
|
||||
msgid ""
|
||||
"Type a password to associate with the device. Click :guilabel:`Save` to "
|
||||
"initialize the device. The User Manager may take a moment to prepare the "
|
||||
@@ -1834,49 +1803,49 @@ msgid ""
|
||||
" to allow removal of PersonaCrypt."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1027
|
||||
#: ../../sysadmclient.rst:1056
|
||||
msgid ": Managing Groups Using User Manager"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1110
|
||||
#: ../../sysadmclient.rst:1139
|
||||
msgid ": Snapshot Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1184
|
||||
#: ../../sysadmclient.rst:1213
|
||||
msgid ": Replication Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1194
|
||||
#: ../../sysadmclient.rst:1223
|
||||
msgid ": Scheduling a Replication"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1268
|
||||
#: ../../sysadmclient.rst:1297
|
||||
msgid ": Scheduling a Snapshot"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1308
|
||||
#: ../../sysadmclient.rst:1337
|
||||
msgid ": Scheduling a Scrub"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1335
|
||||
#: ../../sysadmclient.rst:1364
|
||||
msgid ": Life Preserver Settings"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1442
|
||||
#: ../../sysadmclient.rst:1471
|
||||
msgid ""
|
||||
":numref:`Table %s <cmdgui>` shows the command line equivalents to the "
|
||||
"graphical options provided by the Life Preserver GUI."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1495
|
||||
#: ../../sysadmclient.rst:1524
|
||||
msgid ": Selecting to Restore/Clone From Backup"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1517
|
||||
#: ../../sysadmclient.rst:1546
|
||||
msgid ": Input the Information for a SSH Restore"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1523
|
||||
#: ../../sysadmclient.rst:1552
|
||||
msgid ""
|
||||
"Once the connection to the backup server succeeds, you will be able to "
|
||||
"select which host to restore. After making your selection, click "
|
||||
@@ -1892,7 +1861,7 @@ msgid ""
|
||||
":guilabel:`Next` to perform the restore."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:987
|
||||
#: ../../sysadmclient.rst:970
|
||||
msgid ""
|
||||
"Once a user has been initialized for PersonaCrypt on the system, their user "
|
||||
"account will no longer be displayed when logging in, **unless** their "
|
||||
@@ -1901,7 +1870,7 @@ msgid ""
|
||||
":numref:`Figure %s <troslogin5>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:997
|
||||
#: ../../sysadmclient.rst:980
|
||||
msgid ": |trueos| Login Screen with PersonaCrypt"
|
||||
msgstr ""
|
||||
|
||||
@@ -1949,7 +1918,7 @@ msgstr ""
|
||||
msgid ": |sysadm| Task Manager"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1103
|
||||
#: ../../sysadmclient.rst:1132
|
||||
msgid ""
|
||||
":numref:`Figure %s <lpreserver1>` shows the :guilabel:`Snapshots` tab on a "
|
||||
"system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"."
|
||||
@@ -2013,6 +1982,134 @@ msgid ""
|
||||
":guilabel:`Save Settings`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:894
|
||||
msgid ""
|
||||
"|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
"PersonaCrypt device is a removable USB media, such as a USB flash drive, "
|
||||
"formatted with ZFS and encrypted with either GELI or PEFS. This device is "
|
||||
"used to hold a specific user's home directory, meaning they can securely "
|
||||
"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 "
|
||||
"or higher system. For example, this can be used to securely access one's "
|
||||
"home directory from a laptop, home computer, and work computer. The device "
|
||||
"is protected by an encryption key and a different (recommended) password "
|
||||
"separate from the user's login password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:916
|
||||
msgid "GELI"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:918
|
||||
msgid ""
|
||||
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
"your passphrase, and the other being a key stored on disk. Without both of "
|
||||
"these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
"the key and manages to get your password, it is still worthless without the "
|
||||
"system it was paired with. GELI is used by default in |trueos| as it is more"
|
||||
" fully featured over PEFS."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:940
|
||||
msgid ""
|
||||
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
"buttons are available in the :guilabel:`PersonaCrypt` tab of "
|
||||
":guilabel:`Advanced Mode`. Note this section is hidden if the currently "
|
||||
"logged in user is selected. Also, if you have just created a user and do not"
|
||||
" see these options, click :guilabel:`Save`, then re-highlight the user to "
|
||||
"display these options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:999
|
||||
msgid "PEFS"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1001
|
||||
msgid ""
|
||||
"`PEFS <http://pefs.io/>`_ stands for Private Encrypted File System. It is "
|
||||
"open source software freely available under the BSD license, and is included"
|
||||
" in |trueos| by default. PEFS runs on top of any existing file system, "
|
||||
"providing an encryption layer independent of the underlying file system. "
|
||||
"PersonaCrypt can be configured to use PEFS in place of GELI, which "
|
||||
"eliminates the need for external media, as the encrypted PEFS database is "
|
||||
"stored on the local disk."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1009
|
||||
msgid ""
|
||||
"While PEFS does not use a USB drive, be sure to print or otherwise backup "
|
||||
"the PEFS generated key fragment stored on the disk."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1012
|
||||
msgid "**Initialize PEFS with the Command Line**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1014
|
||||
msgid ""
|
||||
"Because PEFS does not use a USB drive with its encryption, the user will "
|
||||
"need a password file (pfile) containing the desired password, **before** "
|
||||
"initializing PEFS for a user account. Once this pfile is created, enabling "
|
||||
"PEFS through PersonaCrypt is accomplished in a CLI with "
|
||||
":command:`personacrypt init <username> <pfile> PEFS`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1020
|
||||
msgid ""
|
||||
"For example, the user account **test** has a pfile named "
|
||||
":file:`testpfile.txt`, which contains the single text string of **test's** "
|
||||
"chosen password. Next, the administrator adds PEFS encryption to the "
|
||||
"**test** acount by opening a CLI, logging in as root, and typing:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1029
|
||||
msgid ""
|
||||
"PersonaCrypt will initialize the account **test** with PEFS, using the "
|
||||
"string in :file:`testpfile.txt` as the new password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1032
|
||||
msgid ""
|
||||
"The |sysadm| User Manager can also initialize a user account with PEFS by "
|
||||
"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` "
|
||||
"drop down menu of the :guilabel:`PersonaCrypt` tab."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1036
|
||||
msgid ""
|
||||
"In addition to initializing an account with PEFS, PersonaCrypt also supports"
|
||||
" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt "
|
||||
"export <username>` and :command:`personacrypt import <keyfile>`, "
|
||||
"respectively."
|
||||
msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
|
||||
#~ " with ZFS and encrypted with GELI. This device is used to hold a specific "
|
||||
#~ "user's home directory, meaning they can securely transport and access their "
|
||||
#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
|
||||
#~ "example, this can be used to securely access one's home directory from a "
|
||||
#~ "laptop, home computer, and work computer. The device is protected by an "
|
||||
#~ "encryption key and a password which is, and should be, separate from the "
|
||||
#~ "user's login password."
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
#~ "your passphrase, and the other being a key stored on disk. Without both of "
|
||||
#~ "these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
#~ "the key and manages to get your password, it is still worthless without the "
|
||||
#~ "system it was paired with."
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
|
||||
#~ "Note this section is hidden if the currently logged in user is selected. "
|
||||
#~ "Also, if you have just created a user and do not see these options, click "
|
||||
#~ ":guilabel:`Save` then re-highlight the user to display these options:"
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "**Max Boot Environments:** |trueos| automatically creates a boot environment"
|
||||
#~ " before updating any software, the operating system, or applying a system "
|
||||
|
||||
@@ -482,7 +482,7 @@ msgid ""
|
||||
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <update4>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1326
|
||||
#: ../../sysadmclient.rst:1355
|
||||
msgid "Settings Tab"
|
||||
msgstr ""
|
||||
|
||||
@@ -924,20 +924,7 @@ msgstr ""
|
||||
msgid "PersonaCrypt"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:894
|
||||
msgid ""
|
||||
"|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
"PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
|
||||
" with ZFS and encrypted with GELI. This device is used to hold a specific "
|
||||
"user's home directory, meaning they can securely transport and access their "
|
||||
"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
|
||||
"example, this can be used to securely access one's home directory from a "
|
||||
"laptop, home computer, and work computer. The device is protected by an "
|
||||
"encryption key and a password which is, and should be, separate from the "
|
||||
"user's login password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:904
|
||||
#: ../../sysadmclient.rst:905
|
||||
msgid ""
|
||||
"When a user is configured to use a PersonaCrypt device, that user can not "
|
||||
"login using an unencrypted session on the same system. In other words, the "
|
||||
@@ -946,22 +933,13 @@ msgid ""
|
||||
"different user accounts, one for each type of session."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:911
|
||||
msgid ""
|
||||
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
"your passphrase, and the other being a key stored on disk. Without both of "
|
||||
"these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
"the key and manages to get your password, it is still worthless without the "
|
||||
"system it was paired with."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:917
|
||||
#: ../../sysadmclient.rst:925
|
||||
msgid ""
|
||||
"USB devices do eventually fail. Always backup any important files stored on "
|
||||
"the PersonaCrypt device to another device or system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:920
|
||||
#: ../../sysadmclient.rst:928
|
||||
msgid ""
|
||||
"The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt "
|
||||
"device for any login user, **except** for the currently logged in user. In "
|
||||
@@ -969,13 +947,13 @@ msgid ""
|
||||
"*dlavigne*, has been created and the entry for the user has been clicked."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:939
|
||||
#: ../../sysadmclient.rst:947
|
||||
msgid ""
|
||||
"**Initialize Device:** Used to prepare the USB device which will be used as "
|
||||
"the user's home directory."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:942
|
||||
#: ../../sysadmclient.rst:950
|
||||
msgid ""
|
||||
"**Import Key:** If the user has already created a PersonaCrypt device on "
|
||||
"another |trueos| system, click this button to import a previously saved copy"
|
||||
@@ -983,7 +961,7 @@ msgid ""
|
||||
"can now login to this computer using PersonaCrypt."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:950
|
||||
#: ../../sysadmclient.rst:958
|
||||
msgid ""
|
||||
"Since the USB stick will hold the user's home directory and files, ensure "
|
||||
"the stick is large enough to meet the anticipated storage needs of the home "
|
||||
@@ -993,7 +971,7 @@ msgid ""
|
||||
"logged in."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:999
|
||||
#: ../../sysadmclient.rst:982
|
||||
msgid ""
|
||||
"When stealth sessions have been configured, PersonaCrypt users will still be"
|
||||
" displayed in the login menu, even if their USB device is not inserted. This"
|
||||
@@ -1001,47 +979,47 @@ msgid ""
|
||||
"session."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1004
|
||||
#: ../../sysadmclient.rst:987
|
||||
msgid ""
|
||||
"In the field with the yellow padlock icon, input the password for the user "
|
||||
"account. In the field with the grey USB stick icon, input the password "
|
||||
"associated with the PersonaCrypt device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1008
|
||||
#: ../../sysadmclient.rst:991
|
||||
msgid ""
|
||||
"To prevent data corruption and freezing the system **DO NOT** remove the "
|
||||
"PersonaCrypt device while logged in! Always log out of your session before "
|
||||
"physically removing the device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1016
|
||||
#: ../../sysadmclient.rst:1045
|
||||
msgid "Managing Groups"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1018
|
||||
#: ../../sysadmclient.rst:1047
|
||||
msgid ""
|
||||
"Click the :guilabel:`Groups` tab to view and manage the groups on the "
|
||||
"system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s <user4>`, "
|
||||
"shows the group membership for the *operator* and *wheel* groups:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1029
|
||||
#: ../../sysadmclient.rst:1058
|
||||
msgid "This screen has 2 columns:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1031
|
||||
#: ../../sysadmclient.rst:1060
|
||||
msgid ""
|
||||
"**Members:** Indicates if the highlighted group contains any user accounts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1034
|
||||
#: ../../sysadmclient.rst:1063
|
||||
msgid ""
|
||||
"**Available:** Shows all of the system and user accounts on the system in "
|
||||
"alphabetical order."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1037
|
||||
#: ../../sysadmclient.rst:1066
|
||||
msgid ""
|
||||
"To add an account to a group, highlight the group name, then highlight the "
|
||||
"account name in the :guilabel:`Available` column. Click the left arrow and "
|
||||
@@ -1051,7 +1029,7 @@ msgid ""
|
||||
"added to a group."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1044
|
||||
#: ../../sysadmclient.rst:1073
|
||||
msgid ""
|
||||
"If you add a user to the *operator* group, they will have permission to use "
|
||||
"commands requiring administrative access and will be prompted for their own "
|
||||
@@ -1060,15 +1038,15 @@ msgid ""
|
||||
"will be prompted for the superuser password whenever they use the command."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1051
|
||||
#: ../../sysadmclient.rst:1080
|
||||
msgid "To view all of the groups on the system, click :guilabel:`Advanced`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1057
|
||||
#: ../../sysadmclient.rst:1086
|
||||
msgid "Life Preserver"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1059
|
||||
#: ../../sysadmclient.rst:1088
|
||||
msgid ""
|
||||
"The Life Preserver utility is designed to take full advantage of the "
|
||||
"functionality provided by ZFS snapshots. This utility allows you to schedule"
|
||||
@@ -1077,25 +1055,25 @@ msgid ""
|
||||
"benefits:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1081
|
||||
#: ../../sysadmclient.rst:1110
|
||||
msgid ""
|
||||
"Replication is an efficient way to keep the files on two systems in sync. "
|
||||
"With Life Preserver, the snapshots taken on the |trueos| system will be "
|
||||
"synchronized with their versions stored on the specified backup server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1086
|
||||
#: ../../sysadmclient.rst:1115
|
||||
msgid "Snapshots are sent to the backup server over an encrypted connection."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1088
|
||||
#: ../../sysadmclient.rst:1117
|
||||
msgid ""
|
||||
"Having a copy of the snapshots on another system makes it possible to "
|
||||
"perform an operating system restore should the |trueos| system become "
|
||||
"unusable or to deploy an identical system to different hardware."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1092
|
||||
#: ../../sysadmclient.rst:1121
|
||||
msgid ""
|
||||
"To manage snapshots and replication using the |sysadm| graphical client, go "
|
||||
"to :menuselection:`Utilities --> Life Preserver`. The rest of this section "
|
||||
@@ -1103,16 +1081,16 @@ msgid ""
|
||||
"Preserver."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1101
|
||||
#: ../../sysadmclient.rst:1130
|
||||
msgid "Snapshots Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1112
|
||||
#: ../../sysadmclient.rst:1141
|
||||
msgid ""
|
||||
"This screen will display any created snapshots and provides buttons to:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1114
|
||||
#: ../../sysadmclient.rst:1143
|
||||
msgid ""
|
||||
"**Create:** Used to create a manual snapshot of the specified pool now. For "
|
||||
"example, you could create a snapshot before making changes to an important "
|
||||
@@ -1126,14 +1104,14 @@ msgid ""
|
||||
"snapshot was created."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1125
|
||||
#: ../../sysadmclient.rst:1154
|
||||
msgid ""
|
||||
"**Remove:** Used to delete a highlighted snapshot. **This is a permanent "
|
||||
"change that can not be reversed.** In other words, the versions of files at "
|
||||
"the point in time the snapshot was created will be lost."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1130
|
||||
#: ../../sysadmclient.rst:1159
|
||||
msgid ""
|
||||
"**Revert:** If you highlight a snapshot entry, this button and the drop-down"
|
||||
" menu next to it will activate. You can use the drop-down menu to specify "
|
||||
@@ -1143,11 +1121,11 @@ msgid ""
|
||||
" after the snapshot was taken will be lost."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1142
|
||||
#: ../../sysadmclient.rst:1171
|
||||
msgid "Replication Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1144
|
||||
#: ../../sysadmclient.rst:1173
|
||||
msgid ""
|
||||
"Life Preserver can be configured to replicate snapshots to another system "
|
||||
"over an encrypted SSH connection, though the backup itself is stored in an "
|
||||
@@ -1155,13 +1133,13 @@ msgid ""
|
||||
" another system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1149
|
||||
#: ../../sysadmclient.rst:1178
|
||||
msgid ""
|
||||
"In order to configure replication, the remote system to hold a copy of the "
|
||||
"snapshots must first meet several requirements:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1156
|
||||
#: ../../sysadmclient.rst:1185
|
||||
msgid ""
|
||||
"The backup server **must be formatted with the latest version of ZFS,** also"
|
||||
" known as ZFS feature flags or ZFSv5000. Operating systems that support this"
|
||||
@@ -1169,14 +1147,14 @@ msgid ""
|
||||
"FreeNAS 9.1.x or higher."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1162
|
||||
#: ../../sysadmclient.rst:1191
|
||||
msgid ""
|
||||
"The system must have SSH installed and the SSH service must be running. If "
|
||||
"the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is"
|
||||
" already installed, but you will need to start the SSH service."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1167
|
||||
#: ../../sysadmclient.rst:1196
|
||||
msgid ""
|
||||
"If the backup server is running |trueos| or |pcbsd|, you will need to open "
|
||||
"TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is "
|
||||
@@ -1186,7 +1164,7 @@ msgid ""
|
||||
"backup system, make sure it has a rule to allow SSH."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1175
|
||||
#: ../../sysadmclient.rst:1204
|
||||
msgid ""
|
||||
":numref:`Figure %s <lpreserver2>` shows the initial :guilabel:`Replication` "
|
||||
"tab on a system that has not yet been configured for replication. This "
|
||||
@@ -1194,29 +1172,29 @@ msgid ""
|
||||
"schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1186
|
||||
#: ../../sysadmclient.rst:1215
|
||||
msgid ""
|
||||
"To schedule the replication, click :guilabel:`+` to display the \"Setup "
|
||||
"Replication\" screen shown in :numref:`Figure %s <lpreserver3>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1196
|
||||
#: ../../sysadmclient.rst:1225
|
||||
msgid "Input the following information:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1198
|
||||
#: ../../sysadmclient.rst:1227
|
||||
msgid ""
|
||||
"**Host IP:** The IP address of the remote system to store the replicated "
|
||||
"snapshots."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1201
|
||||
#: ../../sysadmclient.rst:1230
|
||||
msgid ""
|
||||
"**SSH Port:** The port number, if the remote system is running SSH on a port"
|
||||
" other than the default of 22."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1204
|
||||
#: ../../sysadmclient.rst:1233
|
||||
msgid ""
|
||||
"**Dataset:** The name of the ZFS pool and optional dataset on the remote "
|
||||
"system. For example, \"remotetank\" will save the snapshots to a ZFS pool of"
|
||||
@@ -1224,7 +1202,7 @@ msgid ""
|
||||
"existing dataset named \"mybackups\" on the pool named \"remotetank\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1210
|
||||
#: ../../sysadmclient.rst:1239
|
||||
msgid ""
|
||||
"**Frequency:** Use the drop-down menu to select how often to initiate the "
|
||||
"replication. Available choices are :guilabel:`Sync with snapshot` (at the "
|
||||
@@ -1235,87 +1213,87 @@ msgid ""
|
||||
":guilabel:`Start`) in this screen."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1219
|
||||
#: ../../sysadmclient.rst:1248
|
||||
msgid ""
|
||||
"**Username:** The username must already exist on the remote system, have "
|
||||
"write access to the specified \"Dataset\", and have permission to SSH into "
|
||||
"that system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1223
|
||||
#: ../../sysadmclient.rst:1252
|
||||
msgid "**Password:** The password associated with the \"Username\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1225
|
||||
#: ../../sysadmclient.rst:1254
|
||||
msgid ""
|
||||
"**Local DS:** Use the drop-down menu to select the pool or dataset to "
|
||||
"replicate to the remote system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1228
|
||||
#: ../../sysadmclient.rst:1257
|
||||
msgid ""
|
||||
"The buttons at the top of the \"Setup Replication\" screen have several "
|
||||
"uses:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1231
|
||||
#: ../../sysadmclient.rst:1260
|
||||
msgid ""
|
||||
"**+ icon:** Sdd a replication schedule. Multiple schedules are supported, "
|
||||
"meaning you can replicate to multiple systems or replicate different \"Local"
|
||||
" DS\" datasets at different times."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1235
|
||||
#: ../../sysadmclient.rst:1264
|
||||
msgid ""
|
||||
"**- icon:** Remove an already created, and highlighted, replication "
|
||||
"schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1238
|
||||
#: ../../sysadmclient.rst:1267
|
||||
msgid "**gear icon:** Modify the schedule for the highlighted replication."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1240
|
||||
#: ../../sysadmclient.rst:1269
|
||||
msgid ""
|
||||
"**Start:** Manually starts a replication to the system specified in the "
|
||||
"highlighted replication."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1243
|
||||
#: ../../sysadmclient.rst:1272
|
||||
msgid ""
|
||||
"**Initialize:** Deletes the existing replicated snapshots on the remote "
|
||||
"system and starts a new replication. This is useful if a replication gets "
|
||||
"stuck and will not complete."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1251
|
||||
#: ../../sysadmclient.rst:1280
|
||||
msgid "Schedules Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1253
|
||||
#: ../../sysadmclient.rst:1282
|
||||
msgid ""
|
||||
"This tab is used to manage when snapshots of the ZFS pool are created. "
|
||||
"Multiple snapshot schedules are supported if the system has multiple pools."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1257
|
||||
#: ../../sysadmclient.rst:1286
|
||||
msgid ""
|
||||
"Snapshots are created on the entire pool as they are needed when "
|
||||
":ref:`Restoring the Operating System`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1260
|
||||
#: ../../sysadmclient.rst:1289
|
||||
msgid ""
|
||||
"To create a snapshot schedule, click the :guilabel:`camera` icon in the "
|
||||
"lower left corner of this tab. This will activate the \"Setup Snapshot "
|
||||
"Schedule\" pane as seen in :numref:`Figure %s <lpreserver4>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1270
|
||||
#: ../../sysadmclient.rst:1299
|
||||
msgid "This pane contains several options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1275
|
||||
#: ../../sysadmclient.rst:1304
|
||||
msgid ""
|
||||
"**Snapshots to keep:** Snapshots are automatically pruned after the "
|
||||
"specified number of snapshots to prevent snapshots from eventually using up "
|
||||
@@ -1326,7 +1304,7 @@ msgid ""
|
||||
"manually in the :guilabel:`Snapshots` tab."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1284
|
||||
#: ../../sysadmclient.rst:1313
|
||||
msgid ""
|
||||
"**Frequency:** Use the drop-down menu to select how often snapshots occur. "
|
||||
"Options include \"Daily\" (which will allow you to select the time of day), "
|
||||
@@ -1334,37 +1312,37 @@ msgid ""
|
||||
"Minutes\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1289
|
||||
#: ../../sysadmclient.rst:1318
|
||||
msgid ""
|
||||
"Once you have created a snapshot schedule, you can use the \"gear\" icon "
|
||||
"next to the \"camera\" icon to modify the highlighted schedule or the \"X\" "
|
||||
"icon to delete the highlighted schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1300
|
||||
#: ../../sysadmclient.rst:1329
|
||||
msgid ""
|
||||
"To schedule when the scrub occurs, click the third icon from the right which"
|
||||
" will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure "
|
||||
"%s <lpreserver5>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1318
|
||||
#: ../../sysadmclient.rst:1347
|
||||
msgid ""
|
||||
"Once you have created a scrub schedule, you can use the \"gear\" icon next "
|
||||
"to the \"schedule scrub\" icon to modify the highlighted schedule or the "
|
||||
"\"X\" icon to delete the highlighted schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1328
|
||||
#: ../../sysadmclient.rst:1357
|
||||
msgid ""
|
||||
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <lpreserver6>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1337
|
||||
#: ../../sysadmclient.rst:1366
|
||||
msgid "Many settings are configurable:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1339
|
||||
#: ../../sysadmclient.rst:1368
|
||||
msgid ""
|
||||
"**Disk Usage Warning:** Enter a number up to 99 to indicate at which "
|
||||
"percentage of disk space Life Preserver will display an alert in the system "
|
||||
@@ -1372,41 +1350,41 @@ msgid ""
|
||||
"space."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1344
|
||||
#: ../../sysadmclient.rst:1373
|
||||
msgid ""
|
||||
"**Email:** To receive an email when disk usage reaches the percentage "
|
||||
"configured in the \"Disk Usage Warning\", enter an email address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1347
|
||||
#: ../../sysadmclient.rst:1376
|
||||
msgid ""
|
||||
"**Email Trigger:** This setting can be set to \"All\", \"Warn\", or "
|
||||
"\"Error\" and indicates the type of condition which will trigger an email "
|
||||
"message."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1350
|
||||
#: ../../sysadmclient.rst:1379
|
||||
msgid "**Recursive Management:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1352
|
||||
#: ../../sysadmclient.rst:1381
|
||||
msgid ""
|
||||
"If you make any changes in this screen, press :guilabel:`Save Settings` to "
|
||||
"apply them."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1359
|
||||
#: ../../sysadmclient.rst:1388
|
||||
msgid "Using the lpreserver CLI"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1361
|
||||
#: ../../sysadmclient.rst:1390
|
||||
msgid ""
|
||||
"The :command:`lpreserver` command line utility can also be used to manage "
|
||||
"snapshots and replication. This command needs to be run as the superuser. To"
|
||||
" display its usage, type the command without any arguments:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1381
|
||||
#: ../../sysadmclient.rst:1410
|
||||
msgid ""
|
||||
"Each command has its own help text that describes its parameters and "
|
||||
"provides a usage example. For example, to receive help on how to use the "
|
||||
@@ -1417,104 +1395,104 @@ msgstr ""
|
||||
msgid "Command Line and GUI Equivalents"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**Command Line**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**GUI**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**Description**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452
|
||||
#: ../../sysadmclient.rst:1481
|
||||
msgid "**cronsnap**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499
|
||||
msgid "\"Snapshots\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452
|
||||
#: ../../sysadmclient.rst:1481
|
||||
msgid ""
|
||||
"schedule when snapshots occur and how long to keep them; the **stop** option"
|
||||
" can be used to disable snapshot creation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "**cronscrub**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "\"Schedules\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "schedule a ZFS scrub"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459
|
||||
#: ../../sysadmclient.rst:1488
|
||||
msgid "**get**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495
|
||||
msgid "\"Settings\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459
|
||||
#: ../../sysadmclient.rst:1488
|
||||
msgid "list Life Preserver options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid "**replicate**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid "\"Replication\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid ""
|
||||
"used to list, add, and remove backup server; read the **help** for this "
|
||||
"command for examples"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1495
|
||||
msgid "**set**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1495
|
||||
msgid ""
|
||||
"configures Life Preserver options; read **help** for the list of "
|
||||
"configurable options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1499
|
||||
msgid "**snapshot**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1499
|
||||
msgid ""
|
||||
"create and replicate a new ZFS snapshot; by default, snapshots are "
|
||||
"recursive, meaning that a that a snapshot is taken of every dataset within a"
|
||||
" pool"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1476
|
||||
#: ../../sysadmclient.rst:1505
|
||||
msgid "**status**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1476
|
||||
#: ../../sysadmclient.rst:1505
|
||||
msgid "lists the last snapshot name and replication status"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1483
|
||||
#: ../../sysadmclient.rst:1512
|
||||
msgid "Restoring the Operating System"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1485
|
||||
#: ../../sysadmclient.rst:1514
|
||||
msgid ""
|
||||
"If you have replicated the system's snapshots to a remote backup server, you"
|
||||
" can use a |trueos| installation media to perform an operating system "
|
||||
@@ -1522,7 +1500,7 @@ msgid ""
|
||||
"you get to the screen shown in :numref:`Figure %s <restore1>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1497
|
||||
#: ../../sysadmclient.rst:1526
|
||||
msgid ""
|
||||
"Before you can perform a restore, the network interface must be configured. "
|
||||
"Click :guilabel:`Network Connectivity` (second icon from the left) in order "
|
||||
@@ -1533,7 +1511,7 @@ msgid ""
|
||||
"continuing."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1505
|
||||
#: ../../sysadmclient.rst:1534
|
||||
msgid ""
|
||||
"Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and"
|
||||
" :guilabel:`Next`. This will start the Restore Wizard. In the screen shown "
|
||||
@@ -1543,7 +1521,7 @@ msgid ""
|
||||
"number."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1519
|
||||
#: ../../sysadmclient.rst:1548
|
||||
msgid ""
|
||||
"Click :guilabel:`Next` and the wizard will provide a summary of your "
|
||||
"selections. If correct, click :guilabel:`Finish`; otherwise, click "
|
||||
@@ -1626,7 +1604,7 @@ msgid ""
|
||||
"press :guilabel:`Close Ports`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1152
|
||||
#: ../../sysadmclient.rst:1181
|
||||
msgid ""
|
||||
"Snapshots occurring too frequently can introduce errors in replication. To "
|
||||
"avoid errors, ensure snapshots are configured to take place slower than the "
|
||||
@@ -1685,7 +1663,7 @@ msgid ""
|
||||
"accounts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1065
|
||||
#: ../../sysadmclient.rst:1094
|
||||
msgid ""
|
||||
"A snapshot provides a \"point-in-time\" image of the ZFS pool. This is "
|
||||
"similar to a full system backup as the snapshot contains the information for"
|
||||
@@ -1703,26 +1681,26 @@ msgid ""
|
||||
"snapshot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1272
|
||||
#: ../../sysadmclient.rst:1301
|
||||
msgid ""
|
||||
"**Storage Pool:** Select the ZFS storage pool that contains the datasets "
|
||||
"that you wish to snapshot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1293
|
||||
#: ../../sysadmclient.rst:1322
|
||||
msgid ""
|
||||
"This screen can also be used to manage the ZFS scrub schedule. Scrubs are "
|
||||
"recommended as they can provide an early indication of a potential disk "
|
||||
"failure. Scrubs can be scheduled on a per-pool basis."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1297
|
||||
#: ../../sysadmclient.rst:1326
|
||||
msgid ""
|
||||
"If you have multiple pools, be sure to create a scrub schedule for each "
|
||||
"pool."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1310
|
||||
#: ../../sysadmclient.rst:1339
|
||||
msgid ""
|
||||
"Select the pool from the :guilabel:`Storage Pool` drop-down menu, then "
|
||||
"select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", "
|
||||
@@ -1807,26 +1785,17 @@ msgstr ""
|
||||
msgid ": Viewing All Accounts and Their Details"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:930
|
||||
#: ../../sysadmclient.rst:938
|
||||
msgid ": Initialize PersonaCrypt Device"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:932
|
||||
msgid ""
|
||||
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
|
||||
"Note this section is hidden if the currently logged in user is selected. "
|
||||
"Also, if you have just created a user and do not see these options, click "
|
||||
":guilabel:`Save` then re-highlight the user to display these options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:947
|
||||
#: ../../sysadmclient.rst:955
|
||||
msgid ""
|
||||
"To prepare a PersonaCrypt device for this user, insert a USB stick and click"
|
||||
" :guilabel:`Initialize Device`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:957
|
||||
#: ../../sysadmclient.rst:965
|
||||
msgid ""
|
||||
"Type a password to associate with the device. Click :guilabel:`Save` to "
|
||||
"initialize the device. The User Manager may take a moment to prepare the "
|
||||
@@ -1834,49 +1803,49 @@ msgid ""
|
||||
" to allow removal of PersonaCrypt."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1027
|
||||
#: ../../sysadmclient.rst:1056
|
||||
msgid ": Managing Groups Using User Manager"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1110
|
||||
#: ../../sysadmclient.rst:1139
|
||||
msgid ": Snapshot Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1184
|
||||
#: ../../sysadmclient.rst:1213
|
||||
msgid ": Replication Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1194
|
||||
#: ../../sysadmclient.rst:1223
|
||||
msgid ": Scheduling a Replication"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1268
|
||||
#: ../../sysadmclient.rst:1297
|
||||
msgid ": Scheduling a Snapshot"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1308
|
||||
#: ../../sysadmclient.rst:1337
|
||||
msgid ": Scheduling a Scrub"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1335
|
||||
#: ../../sysadmclient.rst:1364
|
||||
msgid ": Life Preserver Settings"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1442
|
||||
#: ../../sysadmclient.rst:1471
|
||||
msgid ""
|
||||
":numref:`Table %s <cmdgui>` shows the command line equivalents to the "
|
||||
"graphical options provided by the Life Preserver GUI."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1495
|
||||
#: ../../sysadmclient.rst:1524
|
||||
msgid ": Selecting to Restore/Clone From Backup"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1517
|
||||
#: ../../sysadmclient.rst:1546
|
||||
msgid ": Input the Information for a SSH Restore"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1523
|
||||
#: ../../sysadmclient.rst:1552
|
||||
msgid ""
|
||||
"Once the connection to the backup server succeeds, you will be able to "
|
||||
"select which host to restore. After making your selection, click "
|
||||
@@ -1892,7 +1861,7 @@ msgid ""
|
||||
":guilabel:`Next` to perform the restore."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:987
|
||||
#: ../../sysadmclient.rst:970
|
||||
msgid ""
|
||||
"Once a user has been initialized for PersonaCrypt on the system, their user "
|
||||
"account will no longer be displayed when logging in, **unless** their "
|
||||
@@ -1901,7 +1870,7 @@ msgid ""
|
||||
":numref:`Figure %s <troslogin5>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:997
|
||||
#: ../../sysadmclient.rst:980
|
||||
msgid ": |trueos| Login Screen with PersonaCrypt"
|
||||
msgstr ""
|
||||
|
||||
@@ -1949,7 +1918,7 @@ msgstr ""
|
||||
msgid ": |sysadm| Task Manager"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1103
|
||||
#: ../../sysadmclient.rst:1132
|
||||
msgid ""
|
||||
":numref:`Figure %s <lpreserver1>` shows the :guilabel:`Snapshots` tab on a "
|
||||
"system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"."
|
||||
@@ -2013,6 +1982,134 @@ msgid ""
|
||||
":guilabel:`Save Settings`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:894
|
||||
msgid ""
|
||||
"|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
"PersonaCrypt device is a removable USB media, such as a USB flash drive, "
|
||||
"formatted with ZFS and encrypted with either GELI or PEFS. This device is "
|
||||
"used to hold a specific user's home directory, meaning they can securely "
|
||||
"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 "
|
||||
"or higher system. For example, this can be used to securely access one's "
|
||||
"home directory from a laptop, home computer, and work computer. The device "
|
||||
"is protected by an encryption key and a different (recommended) password "
|
||||
"separate from the user's login password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:916
|
||||
msgid "GELI"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:918
|
||||
msgid ""
|
||||
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
"your passphrase, and the other being a key stored on disk. Without both of "
|
||||
"these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
"the key and manages to get your password, it is still worthless without the "
|
||||
"system it was paired with. GELI is used by default in |trueos| as it is more"
|
||||
" fully featured over PEFS."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:940
|
||||
msgid ""
|
||||
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
"buttons are available in the :guilabel:`PersonaCrypt` tab of "
|
||||
":guilabel:`Advanced Mode`. Note this section is hidden if the currently "
|
||||
"logged in user is selected. Also, if you have just created a user and do not"
|
||||
" see these options, click :guilabel:`Save`, then re-highlight the user to "
|
||||
"display these options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:999
|
||||
msgid "PEFS"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1001
|
||||
msgid ""
|
||||
"`PEFS <http://pefs.io/>`_ stands for Private Encrypted File System. It is "
|
||||
"open source software freely available under the BSD license, and is included"
|
||||
" in |trueos| by default. PEFS runs on top of any existing file system, "
|
||||
"providing an encryption layer independent of the underlying file system. "
|
||||
"PersonaCrypt can be configured to use PEFS in place of GELI, which "
|
||||
"eliminates the need for external media, as the encrypted PEFS database is "
|
||||
"stored on the local disk."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1009
|
||||
msgid ""
|
||||
"While PEFS does not use a USB drive, be sure to print or otherwise backup "
|
||||
"the PEFS generated key fragment stored on the disk."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1012
|
||||
msgid "**Initialize PEFS with the Command Line**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1014
|
||||
msgid ""
|
||||
"Because PEFS does not use a USB drive with its encryption, the user will "
|
||||
"need a password file (pfile) containing the desired password, **before** "
|
||||
"initializing PEFS for a user account. Once this pfile is created, enabling "
|
||||
"PEFS through PersonaCrypt is accomplished in a CLI with "
|
||||
":command:`personacrypt init <username> <pfile> PEFS`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1020
|
||||
msgid ""
|
||||
"For example, the user account **test** has a pfile named "
|
||||
":file:`testpfile.txt`, which contains the single text string of **test's** "
|
||||
"chosen password. Next, the administrator adds PEFS encryption to the "
|
||||
"**test** acount by opening a CLI, logging in as root, and typing:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1029
|
||||
msgid ""
|
||||
"PersonaCrypt will initialize the account **test** with PEFS, using the "
|
||||
"string in :file:`testpfile.txt` as the new password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1032
|
||||
msgid ""
|
||||
"The |sysadm| User Manager can also initialize a user account with PEFS by "
|
||||
"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` "
|
||||
"drop down menu of the :guilabel:`PersonaCrypt` tab."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1036
|
||||
msgid ""
|
||||
"In addition to initializing an account with PEFS, PersonaCrypt also supports"
|
||||
" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt "
|
||||
"export <username>` and :command:`personacrypt import <keyfile>`, "
|
||||
"respectively."
|
||||
msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
|
||||
#~ " with ZFS and encrypted with GELI. This device is used to hold a specific "
|
||||
#~ "user's home directory, meaning they can securely transport and access their "
|
||||
#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
|
||||
#~ "example, this can be used to securely access one's home directory from a "
|
||||
#~ "laptop, home computer, and work computer. The device is protected by an "
|
||||
#~ "encryption key and a password which is, and should be, separate from the "
|
||||
#~ "user's login password."
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
#~ "your passphrase, and the other being a key stored on disk. Without both of "
|
||||
#~ "these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
#~ "the key and manages to get your password, it is still worthless without the "
|
||||
#~ "system it was paired with."
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
|
||||
#~ "Note this section is hidden if the currently logged in user is selected. "
|
||||
#~ "Also, if you have just created a user and do not see these options, click "
|
||||
#~ ":guilabel:`Save` then re-highlight the user to display these options:"
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "**Max Boot Environments:** |trueos| automatically creates a boot environment"
|
||||
#~ " before updating any software, the operating system, or applying a system "
|
||||
|
||||
@@ -482,7 +482,7 @@ msgid ""
|
||||
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <update4>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1326
|
||||
#: ../../sysadmclient.rst:1355
|
||||
msgid "Settings Tab"
|
||||
msgstr ""
|
||||
|
||||
@@ -924,20 +924,7 @@ msgstr ""
|
||||
msgid "PersonaCrypt"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:894
|
||||
msgid ""
|
||||
"|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
"PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
|
||||
" with ZFS and encrypted with GELI. This device is used to hold a specific "
|
||||
"user's home directory, meaning they can securely transport and access their "
|
||||
"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
|
||||
"example, this can be used to securely access one's home directory from a "
|
||||
"laptop, home computer, and work computer. The device is protected by an "
|
||||
"encryption key and a password which is, and should be, separate from the "
|
||||
"user's login password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:904
|
||||
#: ../../sysadmclient.rst:905
|
||||
msgid ""
|
||||
"When a user is configured to use a PersonaCrypt device, that user can not "
|
||||
"login using an unencrypted session on the same system. In other words, the "
|
||||
@@ -946,22 +933,13 @@ msgid ""
|
||||
"different user accounts, one for each type of session."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:911
|
||||
msgid ""
|
||||
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
"your passphrase, and the other being a key stored on disk. Without both of "
|
||||
"these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
"the key and manages to get your password, it is still worthless without the "
|
||||
"system it was paired with."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:917
|
||||
#: ../../sysadmclient.rst:925
|
||||
msgid ""
|
||||
"USB devices do eventually fail. Always backup any important files stored on "
|
||||
"the PersonaCrypt device to another device or system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:920
|
||||
#: ../../sysadmclient.rst:928
|
||||
msgid ""
|
||||
"The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt "
|
||||
"device for any login user, **except** for the currently logged in user. In "
|
||||
@@ -969,13 +947,13 @@ msgid ""
|
||||
"*dlavigne*, has been created and the entry for the user has been clicked."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:939
|
||||
#: ../../sysadmclient.rst:947
|
||||
msgid ""
|
||||
"**Initialize Device:** Used to prepare the USB device which will be used as "
|
||||
"the user's home directory."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:942
|
||||
#: ../../sysadmclient.rst:950
|
||||
msgid ""
|
||||
"**Import Key:** If the user has already created a PersonaCrypt device on "
|
||||
"another |trueos| system, click this button to import a previously saved copy"
|
||||
@@ -983,7 +961,7 @@ msgid ""
|
||||
"can now login to this computer using PersonaCrypt."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:950
|
||||
#: ../../sysadmclient.rst:958
|
||||
msgid ""
|
||||
"Since the USB stick will hold the user's home directory and files, ensure "
|
||||
"the stick is large enough to meet the anticipated storage needs of the home "
|
||||
@@ -993,7 +971,7 @@ msgid ""
|
||||
"logged in."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:999
|
||||
#: ../../sysadmclient.rst:982
|
||||
msgid ""
|
||||
"When stealth sessions have been configured, PersonaCrypt users will still be"
|
||||
" displayed in the login menu, even if their USB device is not inserted. This"
|
||||
@@ -1001,47 +979,47 @@ msgid ""
|
||||
"session."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1004
|
||||
#: ../../sysadmclient.rst:987
|
||||
msgid ""
|
||||
"In the field with the yellow padlock icon, input the password for the user "
|
||||
"account. In the field with the grey USB stick icon, input the password "
|
||||
"associated with the PersonaCrypt device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1008
|
||||
#: ../../sysadmclient.rst:991
|
||||
msgid ""
|
||||
"To prevent data corruption and freezing the system **DO NOT** remove the "
|
||||
"PersonaCrypt device while logged in! Always log out of your session before "
|
||||
"physically removing the device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1016
|
||||
#: ../../sysadmclient.rst:1045
|
||||
msgid "Managing Groups"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1018
|
||||
#: ../../sysadmclient.rst:1047
|
||||
msgid ""
|
||||
"Click the :guilabel:`Groups` tab to view and manage the groups on the "
|
||||
"system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s <user4>`, "
|
||||
"shows the group membership for the *operator* and *wheel* groups:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1029
|
||||
#: ../../sysadmclient.rst:1058
|
||||
msgid "This screen has 2 columns:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1031
|
||||
#: ../../sysadmclient.rst:1060
|
||||
msgid ""
|
||||
"**Members:** Indicates if the highlighted group contains any user accounts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1034
|
||||
#: ../../sysadmclient.rst:1063
|
||||
msgid ""
|
||||
"**Available:** Shows all of the system and user accounts on the system in "
|
||||
"alphabetical order."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1037
|
||||
#: ../../sysadmclient.rst:1066
|
||||
msgid ""
|
||||
"To add an account to a group, highlight the group name, then highlight the "
|
||||
"account name in the :guilabel:`Available` column. Click the left arrow and "
|
||||
@@ -1051,7 +1029,7 @@ msgid ""
|
||||
"added to a group."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1044
|
||||
#: ../../sysadmclient.rst:1073
|
||||
msgid ""
|
||||
"If you add a user to the *operator* group, they will have permission to use "
|
||||
"commands requiring administrative access and will be prompted for their own "
|
||||
@@ -1060,15 +1038,15 @@ msgid ""
|
||||
"will be prompted for the superuser password whenever they use the command."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1051
|
||||
#: ../../sysadmclient.rst:1080
|
||||
msgid "To view all of the groups on the system, click :guilabel:`Advanced`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1057
|
||||
#: ../../sysadmclient.rst:1086
|
||||
msgid "Life Preserver"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1059
|
||||
#: ../../sysadmclient.rst:1088
|
||||
msgid ""
|
||||
"The Life Preserver utility is designed to take full advantage of the "
|
||||
"functionality provided by ZFS snapshots. This utility allows you to schedule"
|
||||
@@ -1077,25 +1055,25 @@ msgid ""
|
||||
"benefits:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1081
|
||||
#: ../../sysadmclient.rst:1110
|
||||
msgid ""
|
||||
"Replication is an efficient way to keep the files on two systems in sync. "
|
||||
"With Life Preserver, the snapshots taken on the |trueos| system will be "
|
||||
"synchronized with their versions stored on the specified backup server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1086
|
||||
#: ../../sysadmclient.rst:1115
|
||||
msgid "Snapshots are sent to the backup server over an encrypted connection."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1088
|
||||
#: ../../sysadmclient.rst:1117
|
||||
msgid ""
|
||||
"Having a copy of the snapshots on another system makes it possible to "
|
||||
"perform an operating system restore should the |trueos| system become "
|
||||
"unusable or to deploy an identical system to different hardware."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1092
|
||||
#: ../../sysadmclient.rst:1121
|
||||
msgid ""
|
||||
"To manage snapshots and replication using the |sysadm| graphical client, go "
|
||||
"to :menuselection:`Utilities --> Life Preserver`. The rest of this section "
|
||||
@@ -1103,16 +1081,16 @@ msgid ""
|
||||
"Preserver."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1101
|
||||
#: ../../sysadmclient.rst:1130
|
||||
msgid "Snapshots Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1112
|
||||
#: ../../sysadmclient.rst:1141
|
||||
msgid ""
|
||||
"This screen will display any created snapshots and provides buttons to:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1114
|
||||
#: ../../sysadmclient.rst:1143
|
||||
msgid ""
|
||||
"**Create:** Used to create a manual snapshot of the specified pool now. For "
|
||||
"example, you could create a snapshot before making changes to an important "
|
||||
@@ -1126,14 +1104,14 @@ msgid ""
|
||||
"snapshot was created."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1125
|
||||
#: ../../sysadmclient.rst:1154
|
||||
msgid ""
|
||||
"**Remove:** Used to delete a highlighted snapshot. **This is a permanent "
|
||||
"change that can not be reversed.** In other words, the versions of files at "
|
||||
"the point in time the snapshot was created will be lost."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1130
|
||||
#: ../../sysadmclient.rst:1159
|
||||
msgid ""
|
||||
"**Revert:** If you highlight a snapshot entry, this button and the drop-down"
|
||||
" menu next to it will activate. You can use the drop-down menu to specify "
|
||||
@@ -1143,11 +1121,11 @@ msgid ""
|
||||
" after the snapshot was taken will be lost."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1142
|
||||
#: ../../sysadmclient.rst:1171
|
||||
msgid "Replication Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1144
|
||||
#: ../../sysadmclient.rst:1173
|
||||
msgid ""
|
||||
"Life Preserver can be configured to replicate snapshots to another system "
|
||||
"over an encrypted SSH connection, though the backup itself is stored in an "
|
||||
@@ -1155,13 +1133,13 @@ msgid ""
|
||||
" another system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1149
|
||||
#: ../../sysadmclient.rst:1178
|
||||
msgid ""
|
||||
"In order to configure replication, the remote system to hold a copy of the "
|
||||
"snapshots must first meet several requirements:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1156
|
||||
#: ../../sysadmclient.rst:1185
|
||||
msgid ""
|
||||
"The backup server **must be formatted with the latest version of ZFS,** also"
|
||||
" known as ZFS feature flags or ZFSv5000. Operating systems that support this"
|
||||
@@ -1169,14 +1147,14 @@ msgid ""
|
||||
"FreeNAS 9.1.x or higher."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1162
|
||||
#: ../../sysadmclient.rst:1191
|
||||
msgid ""
|
||||
"The system must have SSH installed and the SSH service must be running. If "
|
||||
"the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is"
|
||||
" already installed, but you will need to start the SSH service."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1167
|
||||
#: ../../sysadmclient.rst:1196
|
||||
msgid ""
|
||||
"If the backup server is running |trueos| or |pcbsd|, you will need to open "
|
||||
"TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is "
|
||||
@@ -1186,7 +1164,7 @@ msgid ""
|
||||
"backup system, make sure it has a rule to allow SSH."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1175
|
||||
#: ../../sysadmclient.rst:1204
|
||||
msgid ""
|
||||
":numref:`Figure %s <lpreserver2>` shows the initial :guilabel:`Replication` "
|
||||
"tab on a system that has not yet been configured for replication. This "
|
||||
@@ -1194,29 +1172,29 @@ msgid ""
|
||||
"schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1186
|
||||
#: ../../sysadmclient.rst:1215
|
||||
msgid ""
|
||||
"To schedule the replication, click :guilabel:`+` to display the \"Setup "
|
||||
"Replication\" screen shown in :numref:`Figure %s <lpreserver3>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1196
|
||||
#: ../../sysadmclient.rst:1225
|
||||
msgid "Input the following information:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1198
|
||||
#: ../../sysadmclient.rst:1227
|
||||
msgid ""
|
||||
"**Host IP:** The IP address of the remote system to store the replicated "
|
||||
"snapshots."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1201
|
||||
#: ../../sysadmclient.rst:1230
|
||||
msgid ""
|
||||
"**SSH Port:** The port number, if the remote system is running SSH on a port"
|
||||
" other than the default of 22."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1204
|
||||
#: ../../sysadmclient.rst:1233
|
||||
msgid ""
|
||||
"**Dataset:** The name of the ZFS pool and optional dataset on the remote "
|
||||
"system. For example, \"remotetank\" will save the snapshots to a ZFS pool of"
|
||||
@@ -1224,7 +1202,7 @@ msgid ""
|
||||
"existing dataset named \"mybackups\" on the pool named \"remotetank\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1210
|
||||
#: ../../sysadmclient.rst:1239
|
||||
msgid ""
|
||||
"**Frequency:** Use the drop-down menu to select how often to initiate the "
|
||||
"replication. Available choices are :guilabel:`Sync with snapshot` (at the "
|
||||
@@ -1235,87 +1213,87 @@ msgid ""
|
||||
":guilabel:`Start`) in this screen."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1219
|
||||
#: ../../sysadmclient.rst:1248
|
||||
msgid ""
|
||||
"**Username:** The username must already exist on the remote system, have "
|
||||
"write access to the specified \"Dataset\", and have permission to SSH into "
|
||||
"that system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1223
|
||||
#: ../../sysadmclient.rst:1252
|
||||
msgid "**Password:** The password associated with the \"Username\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1225
|
||||
#: ../../sysadmclient.rst:1254
|
||||
msgid ""
|
||||
"**Local DS:** Use the drop-down menu to select the pool or dataset to "
|
||||
"replicate to the remote system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1228
|
||||
#: ../../sysadmclient.rst:1257
|
||||
msgid ""
|
||||
"The buttons at the top of the \"Setup Replication\" screen have several "
|
||||
"uses:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1231
|
||||
#: ../../sysadmclient.rst:1260
|
||||
msgid ""
|
||||
"**+ icon:** Sdd a replication schedule. Multiple schedules are supported, "
|
||||
"meaning you can replicate to multiple systems or replicate different \"Local"
|
||||
" DS\" datasets at different times."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1235
|
||||
#: ../../sysadmclient.rst:1264
|
||||
msgid ""
|
||||
"**- icon:** Remove an already created, and highlighted, replication "
|
||||
"schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1238
|
||||
#: ../../sysadmclient.rst:1267
|
||||
msgid "**gear icon:** Modify the schedule for the highlighted replication."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1240
|
||||
#: ../../sysadmclient.rst:1269
|
||||
msgid ""
|
||||
"**Start:** Manually starts a replication to the system specified in the "
|
||||
"highlighted replication."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1243
|
||||
#: ../../sysadmclient.rst:1272
|
||||
msgid ""
|
||||
"**Initialize:** Deletes the existing replicated snapshots on the remote "
|
||||
"system and starts a new replication. This is useful if a replication gets "
|
||||
"stuck and will not complete."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1251
|
||||
#: ../../sysadmclient.rst:1280
|
||||
msgid "Schedules Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1253
|
||||
#: ../../sysadmclient.rst:1282
|
||||
msgid ""
|
||||
"This tab is used to manage when snapshots of the ZFS pool are created. "
|
||||
"Multiple snapshot schedules are supported if the system has multiple pools."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1257
|
||||
#: ../../sysadmclient.rst:1286
|
||||
msgid ""
|
||||
"Snapshots are created on the entire pool as they are needed when "
|
||||
":ref:`Restoring the Operating System`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1260
|
||||
#: ../../sysadmclient.rst:1289
|
||||
msgid ""
|
||||
"To create a snapshot schedule, click the :guilabel:`camera` icon in the "
|
||||
"lower left corner of this tab. This will activate the \"Setup Snapshot "
|
||||
"Schedule\" pane as seen in :numref:`Figure %s <lpreserver4>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1270
|
||||
#: ../../sysadmclient.rst:1299
|
||||
msgid "This pane contains several options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1275
|
||||
#: ../../sysadmclient.rst:1304
|
||||
msgid ""
|
||||
"**Snapshots to keep:** Snapshots are automatically pruned after the "
|
||||
"specified number of snapshots to prevent snapshots from eventually using up "
|
||||
@@ -1326,7 +1304,7 @@ msgid ""
|
||||
"manually in the :guilabel:`Snapshots` tab."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1284
|
||||
#: ../../sysadmclient.rst:1313
|
||||
msgid ""
|
||||
"**Frequency:** Use the drop-down menu to select how often snapshots occur. "
|
||||
"Options include \"Daily\" (which will allow you to select the time of day), "
|
||||
@@ -1334,37 +1312,37 @@ msgid ""
|
||||
"Minutes\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1289
|
||||
#: ../../sysadmclient.rst:1318
|
||||
msgid ""
|
||||
"Once you have created a snapshot schedule, you can use the \"gear\" icon "
|
||||
"next to the \"camera\" icon to modify the highlighted schedule or the \"X\" "
|
||||
"icon to delete the highlighted schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1300
|
||||
#: ../../sysadmclient.rst:1329
|
||||
msgid ""
|
||||
"To schedule when the scrub occurs, click the third icon from the right which"
|
||||
" will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure "
|
||||
"%s <lpreserver5>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1318
|
||||
#: ../../sysadmclient.rst:1347
|
||||
msgid ""
|
||||
"Once you have created a scrub schedule, you can use the \"gear\" icon next "
|
||||
"to the \"schedule scrub\" icon to modify the highlighted schedule or the "
|
||||
"\"X\" icon to delete the highlighted schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1328
|
||||
#: ../../sysadmclient.rst:1357
|
||||
msgid ""
|
||||
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <lpreserver6>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1337
|
||||
#: ../../sysadmclient.rst:1366
|
||||
msgid "Many settings are configurable:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1339
|
||||
#: ../../sysadmclient.rst:1368
|
||||
msgid ""
|
||||
"**Disk Usage Warning:** Enter a number up to 99 to indicate at which "
|
||||
"percentage of disk space Life Preserver will display an alert in the system "
|
||||
@@ -1372,41 +1350,41 @@ msgid ""
|
||||
"space."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1344
|
||||
#: ../../sysadmclient.rst:1373
|
||||
msgid ""
|
||||
"**Email:** To receive an email when disk usage reaches the percentage "
|
||||
"configured in the \"Disk Usage Warning\", enter an email address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1347
|
||||
#: ../../sysadmclient.rst:1376
|
||||
msgid ""
|
||||
"**Email Trigger:** This setting can be set to \"All\", \"Warn\", or "
|
||||
"\"Error\" and indicates the type of condition which will trigger an email "
|
||||
"message."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1350
|
||||
#: ../../sysadmclient.rst:1379
|
||||
msgid "**Recursive Management:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1352
|
||||
#: ../../sysadmclient.rst:1381
|
||||
msgid ""
|
||||
"If you make any changes in this screen, press :guilabel:`Save Settings` to "
|
||||
"apply them."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1359
|
||||
#: ../../sysadmclient.rst:1388
|
||||
msgid "Using the lpreserver CLI"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1361
|
||||
#: ../../sysadmclient.rst:1390
|
||||
msgid ""
|
||||
"The :command:`lpreserver` command line utility can also be used to manage "
|
||||
"snapshots and replication. This command needs to be run as the superuser. To"
|
||||
" display its usage, type the command without any arguments:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1381
|
||||
#: ../../sysadmclient.rst:1410
|
||||
msgid ""
|
||||
"Each command has its own help text that describes its parameters and "
|
||||
"provides a usage example. For example, to receive help on how to use the "
|
||||
@@ -1417,104 +1395,104 @@ msgstr ""
|
||||
msgid "Command Line and GUI Equivalents"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**Command Line**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**GUI**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**Description**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452
|
||||
#: ../../sysadmclient.rst:1481
|
||||
msgid "**cronsnap**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499
|
||||
msgid "\"Snapshots\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452
|
||||
#: ../../sysadmclient.rst:1481
|
||||
msgid ""
|
||||
"schedule when snapshots occur and how long to keep them; the **stop** option"
|
||||
" can be used to disable snapshot creation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "**cronscrub**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "\"Schedules\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "schedule a ZFS scrub"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459
|
||||
#: ../../sysadmclient.rst:1488
|
||||
msgid "**get**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495
|
||||
msgid "\"Settings\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459
|
||||
#: ../../sysadmclient.rst:1488
|
||||
msgid "list Life Preserver options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid "**replicate**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid "\"Replication\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid ""
|
||||
"used to list, add, and remove backup server; read the **help** for this "
|
||||
"command for examples"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1495
|
||||
msgid "**set**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1495
|
||||
msgid ""
|
||||
"configures Life Preserver options; read **help** for the list of "
|
||||
"configurable options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1499
|
||||
msgid "**snapshot**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1499
|
||||
msgid ""
|
||||
"create and replicate a new ZFS snapshot; by default, snapshots are "
|
||||
"recursive, meaning that a that a snapshot is taken of every dataset within a"
|
||||
" pool"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1476
|
||||
#: ../../sysadmclient.rst:1505
|
||||
msgid "**status**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1476
|
||||
#: ../../sysadmclient.rst:1505
|
||||
msgid "lists the last snapshot name and replication status"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1483
|
||||
#: ../../sysadmclient.rst:1512
|
||||
msgid "Restoring the Operating System"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1485
|
||||
#: ../../sysadmclient.rst:1514
|
||||
msgid ""
|
||||
"If you have replicated the system's snapshots to a remote backup server, you"
|
||||
" can use a |trueos| installation media to perform an operating system "
|
||||
@@ -1522,7 +1500,7 @@ msgid ""
|
||||
"you get to the screen shown in :numref:`Figure %s <restore1>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1497
|
||||
#: ../../sysadmclient.rst:1526
|
||||
msgid ""
|
||||
"Before you can perform a restore, the network interface must be configured. "
|
||||
"Click :guilabel:`Network Connectivity` (second icon from the left) in order "
|
||||
@@ -1533,7 +1511,7 @@ msgid ""
|
||||
"continuing."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1505
|
||||
#: ../../sysadmclient.rst:1534
|
||||
msgid ""
|
||||
"Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and"
|
||||
" :guilabel:`Next`. This will start the Restore Wizard. In the screen shown "
|
||||
@@ -1543,7 +1521,7 @@ msgid ""
|
||||
"number."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1519
|
||||
#: ../../sysadmclient.rst:1548
|
||||
msgid ""
|
||||
"Click :guilabel:`Next` and the wizard will provide a summary of your "
|
||||
"selections. If correct, click :guilabel:`Finish`; otherwise, click "
|
||||
@@ -1626,7 +1604,7 @@ msgid ""
|
||||
"press :guilabel:`Close Ports`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1152
|
||||
#: ../../sysadmclient.rst:1181
|
||||
msgid ""
|
||||
"Snapshots occurring too frequently can introduce errors in replication. To "
|
||||
"avoid errors, ensure snapshots are configured to take place slower than the "
|
||||
@@ -1685,7 +1663,7 @@ msgid ""
|
||||
"accounts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1065
|
||||
#: ../../sysadmclient.rst:1094
|
||||
msgid ""
|
||||
"A snapshot provides a \"point-in-time\" image of the ZFS pool. This is "
|
||||
"similar to a full system backup as the snapshot contains the information for"
|
||||
@@ -1703,26 +1681,26 @@ msgid ""
|
||||
"snapshot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1272
|
||||
#: ../../sysadmclient.rst:1301
|
||||
msgid ""
|
||||
"**Storage Pool:** Select the ZFS storage pool that contains the datasets "
|
||||
"that you wish to snapshot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1293
|
||||
#: ../../sysadmclient.rst:1322
|
||||
msgid ""
|
||||
"This screen can also be used to manage the ZFS scrub schedule. Scrubs are "
|
||||
"recommended as they can provide an early indication of a potential disk "
|
||||
"failure. Scrubs can be scheduled on a per-pool basis."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1297
|
||||
#: ../../sysadmclient.rst:1326
|
||||
msgid ""
|
||||
"If you have multiple pools, be sure to create a scrub schedule for each "
|
||||
"pool."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1310
|
||||
#: ../../sysadmclient.rst:1339
|
||||
msgid ""
|
||||
"Select the pool from the :guilabel:`Storage Pool` drop-down menu, then "
|
||||
"select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", "
|
||||
@@ -1807,26 +1785,17 @@ msgstr ""
|
||||
msgid ": Viewing All Accounts and Their Details"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:930
|
||||
#: ../../sysadmclient.rst:938
|
||||
msgid ": Initialize PersonaCrypt Device"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:932
|
||||
msgid ""
|
||||
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
|
||||
"Note this section is hidden if the currently logged in user is selected. "
|
||||
"Also, if you have just created a user and do not see these options, click "
|
||||
":guilabel:`Save` then re-highlight the user to display these options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:947
|
||||
#: ../../sysadmclient.rst:955
|
||||
msgid ""
|
||||
"To prepare a PersonaCrypt device for this user, insert a USB stick and click"
|
||||
" :guilabel:`Initialize Device`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:957
|
||||
#: ../../sysadmclient.rst:965
|
||||
msgid ""
|
||||
"Type a password to associate with the device. Click :guilabel:`Save` to "
|
||||
"initialize the device. The User Manager may take a moment to prepare the "
|
||||
@@ -1834,49 +1803,49 @@ msgid ""
|
||||
" to allow removal of PersonaCrypt."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1027
|
||||
#: ../../sysadmclient.rst:1056
|
||||
msgid ": Managing Groups Using User Manager"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1110
|
||||
#: ../../sysadmclient.rst:1139
|
||||
msgid ": Snapshot Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1184
|
||||
#: ../../sysadmclient.rst:1213
|
||||
msgid ": Replication Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1194
|
||||
#: ../../sysadmclient.rst:1223
|
||||
msgid ": Scheduling a Replication"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1268
|
||||
#: ../../sysadmclient.rst:1297
|
||||
msgid ": Scheduling a Snapshot"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1308
|
||||
#: ../../sysadmclient.rst:1337
|
||||
msgid ": Scheduling a Scrub"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1335
|
||||
#: ../../sysadmclient.rst:1364
|
||||
msgid ": Life Preserver Settings"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1442
|
||||
#: ../../sysadmclient.rst:1471
|
||||
msgid ""
|
||||
":numref:`Table %s <cmdgui>` shows the command line equivalents to the "
|
||||
"graphical options provided by the Life Preserver GUI."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1495
|
||||
#: ../../sysadmclient.rst:1524
|
||||
msgid ": Selecting to Restore/Clone From Backup"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1517
|
||||
#: ../../sysadmclient.rst:1546
|
||||
msgid ": Input the Information for a SSH Restore"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1523
|
||||
#: ../../sysadmclient.rst:1552
|
||||
msgid ""
|
||||
"Once the connection to the backup server succeeds, you will be able to "
|
||||
"select which host to restore. After making your selection, click "
|
||||
@@ -1892,7 +1861,7 @@ msgid ""
|
||||
":guilabel:`Next` to perform the restore."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:987
|
||||
#: ../../sysadmclient.rst:970
|
||||
msgid ""
|
||||
"Once a user has been initialized for PersonaCrypt on the system, their user "
|
||||
"account will no longer be displayed when logging in, **unless** their "
|
||||
@@ -1901,7 +1870,7 @@ msgid ""
|
||||
":numref:`Figure %s <troslogin5>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:997
|
||||
#: ../../sysadmclient.rst:980
|
||||
msgid ": |trueos| Login Screen with PersonaCrypt"
|
||||
msgstr ""
|
||||
|
||||
@@ -1949,7 +1918,7 @@ msgstr ""
|
||||
msgid ": |sysadm| Task Manager"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1103
|
||||
#: ../../sysadmclient.rst:1132
|
||||
msgid ""
|
||||
":numref:`Figure %s <lpreserver1>` shows the :guilabel:`Snapshots` tab on a "
|
||||
"system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"."
|
||||
@@ -2013,6 +1982,134 @@ msgid ""
|
||||
":guilabel:`Save Settings`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:894
|
||||
msgid ""
|
||||
"|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
"PersonaCrypt device is a removable USB media, such as a USB flash drive, "
|
||||
"formatted with ZFS and encrypted with either GELI or PEFS. This device is "
|
||||
"used to hold a specific user's home directory, meaning they can securely "
|
||||
"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 "
|
||||
"or higher system. For example, this can be used to securely access one's "
|
||||
"home directory from a laptop, home computer, and work computer. The device "
|
||||
"is protected by an encryption key and a different (recommended) password "
|
||||
"separate from the user's login password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:916
|
||||
msgid "GELI"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:918
|
||||
msgid ""
|
||||
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
"your passphrase, and the other being a key stored on disk. Without both of "
|
||||
"these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
"the key and manages to get your password, it is still worthless without the "
|
||||
"system it was paired with. GELI is used by default in |trueos| as it is more"
|
||||
" fully featured over PEFS."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:940
|
||||
msgid ""
|
||||
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
"buttons are available in the :guilabel:`PersonaCrypt` tab of "
|
||||
":guilabel:`Advanced Mode`. Note this section is hidden if the currently "
|
||||
"logged in user is selected. Also, if you have just created a user and do not"
|
||||
" see these options, click :guilabel:`Save`, then re-highlight the user to "
|
||||
"display these options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:999
|
||||
msgid "PEFS"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1001
|
||||
msgid ""
|
||||
"`PEFS <http://pefs.io/>`_ stands for Private Encrypted File System. It is "
|
||||
"open source software freely available under the BSD license, and is included"
|
||||
" in |trueos| by default. PEFS runs on top of any existing file system, "
|
||||
"providing an encryption layer independent of the underlying file system. "
|
||||
"PersonaCrypt can be configured to use PEFS in place of GELI, which "
|
||||
"eliminates the need for external media, as the encrypted PEFS database is "
|
||||
"stored on the local disk."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1009
|
||||
msgid ""
|
||||
"While PEFS does not use a USB drive, be sure to print or otherwise backup "
|
||||
"the PEFS generated key fragment stored on the disk."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1012
|
||||
msgid "**Initialize PEFS with the Command Line**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1014
|
||||
msgid ""
|
||||
"Because PEFS does not use a USB drive with its encryption, the user will "
|
||||
"need a password file (pfile) containing the desired password, **before** "
|
||||
"initializing PEFS for a user account. Once this pfile is created, enabling "
|
||||
"PEFS through PersonaCrypt is accomplished in a CLI with "
|
||||
":command:`personacrypt init <username> <pfile> PEFS`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1020
|
||||
msgid ""
|
||||
"For example, the user account **test** has a pfile named "
|
||||
":file:`testpfile.txt`, which contains the single text string of **test's** "
|
||||
"chosen password. Next, the administrator adds PEFS encryption to the "
|
||||
"**test** acount by opening a CLI, logging in as root, and typing:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1029
|
||||
msgid ""
|
||||
"PersonaCrypt will initialize the account **test** with PEFS, using the "
|
||||
"string in :file:`testpfile.txt` as the new password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1032
|
||||
msgid ""
|
||||
"The |sysadm| User Manager can also initialize a user account with PEFS by "
|
||||
"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` "
|
||||
"drop down menu of the :guilabel:`PersonaCrypt` tab."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1036
|
||||
msgid ""
|
||||
"In addition to initializing an account with PEFS, PersonaCrypt also supports"
|
||||
" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt "
|
||||
"export <username>` and :command:`personacrypt import <keyfile>`, "
|
||||
"respectively."
|
||||
msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
|
||||
#~ " with ZFS and encrypted with GELI. This device is used to hold a specific "
|
||||
#~ "user's home directory, meaning they can securely transport and access their "
|
||||
#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
|
||||
#~ "example, this can be used to securely access one's home directory from a "
|
||||
#~ "laptop, home computer, and work computer. The device is protected by an "
|
||||
#~ "encryption key and a password which is, and should be, separate from the "
|
||||
#~ "user's login password."
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
#~ "your passphrase, and the other being a key stored on disk. Without both of "
|
||||
#~ "these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
#~ "the key and manages to get your password, it is still worthless without the "
|
||||
#~ "system it was paired with."
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
|
||||
#~ "Note this section is hidden if the currently logged in user is selected. "
|
||||
#~ "Also, if you have just created a user and do not see these options, click "
|
||||
#~ ":guilabel:`Save` then re-highlight the user to display these options:"
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "**Max Boot Environments:** |trueos| automatically creates a boot environment"
|
||||
#~ " before updating any software, the operating system, or applying a system "
|
||||
|
||||
@@ -482,7 +482,7 @@ msgid ""
|
||||
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <update4>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1326
|
||||
#: ../../sysadmclient.rst:1355
|
||||
msgid "Settings Tab"
|
||||
msgstr ""
|
||||
|
||||
@@ -924,20 +924,7 @@ msgstr ""
|
||||
msgid "PersonaCrypt"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:894
|
||||
msgid ""
|
||||
"|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
"PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
|
||||
" with ZFS and encrypted with GELI. This device is used to hold a specific "
|
||||
"user's home directory, meaning they can securely transport and access their "
|
||||
"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
|
||||
"example, this can be used to securely access one's home directory from a "
|
||||
"laptop, home computer, and work computer. The device is protected by an "
|
||||
"encryption key and a password which is, and should be, separate from the "
|
||||
"user's login password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:904
|
||||
#: ../../sysadmclient.rst:905
|
||||
msgid ""
|
||||
"When a user is configured to use a PersonaCrypt device, that user can not "
|
||||
"login using an unencrypted session on the same system. In other words, the "
|
||||
@@ -946,22 +933,13 @@ msgid ""
|
||||
"different user accounts, one for each type of session."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:911
|
||||
msgid ""
|
||||
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
"your passphrase, and the other being a key stored on disk. Without both of "
|
||||
"these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
"the key and manages to get your password, it is still worthless without the "
|
||||
"system it was paired with."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:917
|
||||
#: ../../sysadmclient.rst:925
|
||||
msgid ""
|
||||
"USB devices do eventually fail. Always backup any important files stored on "
|
||||
"the PersonaCrypt device to another device or system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:920
|
||||
#: ../../sysadmclient.rst:928
|
||||
msgid ""
|
||||
"The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt "
|
||||
"device for any login user, **except** for the currently logged in user. In "
|
||||
@@ -969,13 +947,13 @@ msgid ""
|
||||
"*dlavigne*, has been created and the entry for the user has been clicked."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:939
|
||||
#: ../../sysadmclient.rst:947
|
||||
msgid ""
|
||||
"**Initialize Device:** Used to prepare the USB device which will be used as "
|
||||
"the user's home directory."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:942
|
||||
#: ../../sysadmclient.rst:950
|
||||
msgid ""
|
||||
"**Import Key:** If the user has already created a PersonaCrypt device on "
|
||||
"another |trueos| system, click this button to import a previously saved copy"
|
||||
@@ -983,7 +961,7 @@ msgid ""
|
||||
"can now login to this computer using PersonaCrypt."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:950
|
||||
#: ../../sysadmclient.rst:958
|
||||
msgid ""
|
||||
"Since the USB stick will hold the user's home directory and files, ensure "
|
||||
"the stick is large enough to meet the anticipated storage needs of the home "
|
||||
@@ -993,7 +971,7 @@ msgid ""
|
||||
"logged in."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:999
|
||||
#: ../../sysadmclient.rst:982
|
||||
msgid ""
|
||||
"When stealth sessions have been configured, PersonaCrypt users will still be"
|
||||
" displayed in the login menu, even if their USB device is not inserted. This"
|
||||
@@ -1001,47 +979,47 @@ msgid ""
|
||||
"session."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1004
|
||||
#: ../../sysadmclient.rst:987
|
||||
msgid ""
|
||||
"In the field with the yellow padlock icon, input the password for the user "
|
||||
"account. In the field with the grey USB stick icon, input the password "
|
||||
"associated with the PersonaCrypt device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1008
|
||||
#: ../../sysadmclient.rst:991
|
||||
msgid ""
|
||||
"To prevent data corruption and freezing the system **DO NOT** remove the "
|
||||
"PersonaCrypt device while logged in! Always log out of your session before "
|
||||
"physically removing the device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1016
|
||||
#: ../../sysadmclient.rst:1045
|
||||
msgid "Managing Groups"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1018
|
||||
#: ../../sysadmclient.rst:1047
|
||||
msgid ""
|
||||
"Click the :guilabel:`Groups` tab to view and manage the groups on the "
|
||||
"system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s <user4>`, "
|
||||
"shows the group membership for the *operator* and *wheel* groups:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1029
|
||||
#: ../../sysadmclient.rst:1058
|
||||
msgid "This screen has 2 columns:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1031
|
||||
#: ../../sysadmclient.rst:1060
|
||||
msgid ""
|
||||
"**Members:** Indicates if the highlighted group contains any user accounts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1034
|
||||
#: ../../sysadmclient.rst:1063
|
||||
msgid ""
|
||||
"**Available:** Shows all of the system and user accounts on the system in "
|
||||
"alphabetical order."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1037
|
||||
#: ../../sysadmclient.rst:1066
|
||||
msgid ""
|
||||
"To add an account to a group, highlight the group name, then highlight the "
|
||||
"account name in the :guilabel:`Available` column. Click the left arrow and "
|
||||
@@ -1051,7 +1029,7 @@ msgid ""
|
||||
"added to a group."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1044
|
||||
#: ../../sysadmclient.rst:1073
|
||||
msgid ""
|
||||
"If you add a user to the *operator* group, they will have permission to use "
|
||||
"commands requiring administrative access and will be prompted for their own "
|
||||
@@ -1060,15 +1038,15 @@ msgid ""
|
||||
"will be prompted for the superuser password whenever they use the command."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1051
|
||||
#: ../../sysadmclient.rst:1080
|
||||
msgid "To view all of the groups on the system, click :guilabel:`Advanced`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1057
|
||||
#: ../../sysadmclient.rst:1086
|
||||
msgid "Life Preserver"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1059
|
||||
#: ../../sysadmclient.rst:1088
|
||||
msgid ""
|
||||
"The Life Preserver utility is designed to take full advantage of the "
|
||||
"functionality provided by ZFS snapshots. This utility allows you to schedule"
|
||||
@@ -1077,25 +1055,25 @@ msgid ""
|
||||
"benefits:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1081
|
||||
#: ../../sysadmclient.rst:1110
|
||||
msgid ""
|
||||
"Replication is an efficient way to keep the files on two systems in sync. "
|
||||
"With Life Preserver, the snapshots taken on the |trueos| system will be "
|
||||
"synchronized with their versions stored on the specified backup server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1086
|
||||
#: ../../sysadmclient.rst:1115
|
||||
msgid "Snapshots are sent to the backup server over an encrypted connection."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1088
|
||||
#: ../../sysadmclient.rst:1117
|
||||
msgid ""
|
||||
"Having a copy of the snapshots on another system makes it possible to "
|
||||
"perform an operating system restore should the |trueos| system become "
|
||||
"unusable or to deploy an identical system to different hardware."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1092
|
||||
#: ../../sysadmclient.rst:1121
|
||||
msgid ""
|
||||
"To manage snapshots and replication using the |sysadm| graphical client, go "
|
||||
"to :menuselection:`Utilities --> Life Preserver`. The rest of this section "
|
||||
@@ -1103,16 +1081,16 @@ msgid ""
|
||||
"Preserver."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1101
|
||||
#: ../../sysadmclient.rst:1130
|
||||
msgid "Snapshots Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1112
|
||||
#: ../../sysadmclient.rst:1141
|
||||
msgid ""
|
||||
"This screen will display any created snapshots and provides buttons to:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1114
|
||||
#: ../../sysadmclient.rst:1143
|
||||
msgid ""
|
||||
"**Create:** Used to create a manual snapshot of the specified pool now. For "
|
||||
"example, you could create a snapshot before making changes to an important "
|
||||
@@ -1126,14 +1104,14 @@ msgid ""
|
||||
"snapshot was created."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1125
|
||||
#: ../../sysadmclient.rst:1154
|
||||
msgid ""
|
||||
"**Remove:** Used to delete a highlighted snapshot. **This is a permanent "
|
||||
"change that can not be reversed.** In other words, the versions of files at "
|
||||
"the point in time the snapshot was created will be lost."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1130
|
||||
#: ../../sysadmclient.rst:1159
|
||||
msgid ""
|
||||
"**Revert:** If you highlight a snapshot entry, this button and the drop-down"
|
||||
" menu next to it will activate. You can use the drop-down menu to specify "
|
||||
@@ -1143,11 +1121,11 @@ msgid ""
|
||||
" after the snapshot was taken will be lost."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1142
|
||||
#: ../../sysadmclient.rst:1171
|
||||
msgid "Replication Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1144
|
||||
#: ../../sysadmclient.rst:1173
|
||||
msgid ""
|
||||
"Life Preserver can be configured to replicate snapshots to another system "
|
||||
"over an encrypted SSH connection, though the backup itself is stored in an "
|
||||
@@ -1155,13 +1133,13 @@ msgid ""
|
||||
" another system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1149
|
||||
#: ../../sysadmclient.rst:1178
|
||||
msgid ""
|
||||
"In order to configure replication, the remote system to hold a copy of the "
|
||||
"snapshots must first meet several requirements:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1156
|
||||
#: ../../sysadmclient.rst:1185
|
||||
msgid ""
|
||||
"The backup server **must be formatted with the latest version of ZFS,** also"
|
||||
" known as ZFS feature flags or ZFSv5000. Operating systems that support this"
|
||||
@@ -1169,14 +1147,14 @@ msgid ""
|
||||
"FreeNAS 9.1.x or higher."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1162
|
||||
#: ../../sysadmclient.rst:1191
|
||||
msgid ""
|
||||
"The system must have SSH installed and the SSH service must be running. If "
|
||||
"the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is"
|
||||
" already installed, but you will need to start the SSH service."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1167
|
||||
#: ../../sysadmclient.rst:1196
|
||||
msgid ""
|
||||
"If the backup server is running |trueos| or |pcbsd|, you will need to open "
|
||||
"TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is "
|
||||
@@ -1186,7 +1164,7 @@ msgid ""
|
||||
"backup system, make sure it has a rule to allow SSH."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1175
|
||||
#: ../../sysadmclient.rst:1204
|
||||
msgid ""
|
||||
":numref:`Figure %s <lpreserver2>` shows the initial :guilabel:`Replication` "
|
||||
"tab on a system that has not yet been configured for replication. This "
|
||||
@@ -1194,29 +1172,29 @@ msgid ""
|
||||
"schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1186
|
||||
#: ../../sysadmclient.rst:1215
|
||||
msgid ""
|
||||
"To schedule the replication, click :guilabel:`+` to display the \"Setup "
|
||||
"Replication\" screen shown in :numref:`Figure %s <lpreserver3>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1196
|
||||
#: ../../sysadmclient.rst:1225
|
||||
msgid "Input the following information:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1198
|
||||
#: ../../sysadmclient.rst:1227
|
||||
msgid ""
|
||||
"**Host IP:** The IP address of the remote system to store the replicated "
|
||||
"snapshots."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1201
|
||||
#: ../../sysadmclient.rst:1230
|
||||
msgid ""
|
||||
"**SSH Port:** The port number, if the remote system is running SSH on a port"
|
||||
" other than the default of 22."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1204
|
||||
#: ../../sysadmclient.rst:1233
|
||||
msgid ""
|
||||
"**Dataset:** The name of the ZFS pool and optional dataset on the remote "
|
||||
"system. For example, \"remotetank\" will save the snapshots to a ZFS pool of"
|
||||
@@ -1224,7 +1202,7 @@ msgid ""
|
||||
"existing dataset named \"mybackups\" on the pool named \"remotetank\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1210
|
||||
#: ../../sysadmclient.rst:1239
|
||||
msgid ""
|
||||
"**Frequency:** Use the drop-down menu to select how often to initiate the "
|
||||
"replication. Available choices are :guilabel:`Sync with snapshot` (at the "
|
||||
@@ -1235,87 +1213,87 @@ msgid ""
|
||||
":guilabel:`Start`) in this screen."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1219
|
||||
#: ../../sysadmclient.rst:1248
|
||||
msgid ""
|
||||
"**Username:** The username must already exist on the remote system, have "
|
||||
"write access to the specified \"Dataset\", and have permission to SSH into "
|
||||
"that system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1223
|
||||
#: ../../sysadmclient.rst:1252
|
||||
msgid "**Password:** The password associated with the \"Username\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1225
|
||||
#: ../../sysadmclient.rst:1254
|
||||
msgid ""
|
||||
"**Local DS:** Use the drop-down menu to select the pool or dataset to "
|
||||
"replicate to the remote system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1228
|
||||
#: ../../sysadmclient.rst:1257
|
||||
msgid ""
|
||||
"The buttons at the top of the \"Setup Replication\" screen have several "
|
||||
"uses:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1231
|
||||
#: ../../sysadmclient.rst:1260
|
||||
msgid ""
|
||||
"**+ icon:** Sdd a replication schedule. Multiple schedules are supported, "
|
||||
"meaning you can replicate to multiple systems or replicate different \"Local"
|
||||
" DS\" datasets at different times."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1235
|
||||
#: ../../sysadmclient.rst:1264
|
||||
msgid ""
|
||||
"**- icon:** Remove an already created, and highlighted, replication "
|
||||
"schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1238
|
||||
#: ../../sysadmclient.rst:1267
|
||||
msgid "**gear icon:** Modify the schedule for the highlighted replication."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1240
|
||||
#: ../../sysadmclient.rst:1269
|
||||
msgid ""
|
||||
"**Start:** Manually starts a replication to the system specified in the "
|
||||
"highlighted replication."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1243
|
||||
#: ../../sysadmclient.rst:1272
|
||||
msgid ""
|
||||
"**Initialize:** Deletes the existing replicated snapshots on the remote "
|
||||
"system and starts a new replication. This is useful if a replication gets "
|
||||
"stuck and will not complete."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1251
|
||||
#: ../../sysadmclient.rst:1280
|
||||
msgid "Schedules Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1253
|
||||
#: ../../sysadmclient.rst:1282
|
||||
msgid ""
|
||||
"This tab is used to manage when snapshots of the ZFS pool are created. "
|
||||
"Multiple snapshot schedules are supported if the system has multiple pools."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1257
|
||||
#: ../../sysadmclient.rst:1286
|
||||
msgid ""
|
||||
"Snapshots are created on the entire pool as they are needed when "
|
||||
":ref:`Restoring the Operating System`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1260
|
||||
#: ../../sysadmclient.rst:1289
|
||||
msgid ""
|
||||
"To create a snapshot schedule, click the :guilabel:`camera` icon in the "
|
||||
"lower left corner of this tab. This will activate the \"Setup Snapshot "
|
||||
"Schedule\" pane as seen in :numref:`Figure %s <lpreserver4>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1270
|
||||
#: ../../sysadmclient.rst:1299
|
||||
msgid "This pane contains several options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1275
|
||||
#: ../../sysadmclient.rst:1304
|
||||
msgid ""
|
||||
"**Snapshots to keep:** Snapshots are automatically pruned after the "
|
||||
"specified number of snapshots to prevent snapshots from eventually using up "
|
||||
@@ -1326,7 +1304,7 @@ msgid ""
|
||||
"manually in the :guilabel:`Snapshots` tab."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1284
|
||||
#: ../../sysadmclient.rst:1313
|
||||
msgid ""
|
||||
"**Frequency:** Use the drop-down menu to select how often snapshots occur. "
|
||||
"Options include \"Daily\" (which will allow you to select the time of day), "
|
||||
@@ -1334,37 +1312,37 @@ msgid ""
|
||||
"Minutes\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1289
|
||||
#: ../../sysadmclient.rst:1318
|
||||
msgid ""
|
||||
"Once you have created a snapshot schedule, you can use the \"gear\" icon "
|
||||
"next to the \"camera\" icon to modify the highlighted schedule or the \"X\" "
|
||||
"icon to delete the highlighted schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1300
|
||||
#: ../../sysadmclient.rst:1329
|
||||
msgid ""
|
||||
"To schedule when the scrub occurs, click the third icon from the right which"
|
||||
" will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure "
|
||||
"%s <lpreserver5>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1318
|
||||
#: ../../sysadmclient.rst:1347
|
||||
msgid ""
|
||||
"Once you have created a scrub schedule, you can use the \"gear\" icon next "
|
||||
"to the \"schedule scrub\" icon to modify the highlighted schedule or the "
|
||||
"\"X\" icon to delete the highlighted schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1328
|
||||
#: ../../sysadmclient.rst:1357
|
||||
msgid ""
|
||||
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <lpreserver6>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1337
|
||||
#: ../../sysadmclient.rst:1366
|
||||
msgid "Many settings are configurable:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1339
|
||||
#: ../../sysadmclient.rst:1368
|
||||
msgid ""
|
||||
"**Disk Usage Warning:** Enter a number up to 99 to indicate at which "
|
||||
"percentage of disk space Life Preserver will display an alert in the system "
|
||||
@@ -1372,41 +1350,41 @@ msgid ""
|
||||
"space."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1344
|
||||
#: ../../sysadmclient.rst:1373
|
||||
msgid ""
|
||||
"**Email:** To receive an email when disk usage reaches the percentage "
|
||||
"configured in the \"Disk Usage Warning\", enter an email address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1347
|
||||
#: ../../sysadmclient.rst:1376
|
||||
msgid ""
|
||||
"**Email Trigger:** This setting can be set to \"All\", \"Warn\", or "
|
||||
"\"Error\" and indicates the type of condition which will trigger an email "
|
||||
"message."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1350
|
||||
#: ../../sysadmclient.rst:1379
|
||||
msgid "**Recursive Management:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1352
|
||||
#: ../../sysadmclient.rst:1381
|
||||
msgid ""
|
||||
"If you make any changes in this screen, press :guilabel:`Save Settings` to "
|
||||
"apply them."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1359
|
||||
#: ../../sysadmclient.rst:1388
|
||||
msgid "Using the lpreserver CLI"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1361
|
||||
#: ../../sysadmclient.rst:1390
|
||||
msgid ""
|
||||
"The :command:`lpreserver` command line utility can also be used to manage "
|
||||
"snapshots and replication. This command needs to be run as the superuser. To"
|
||||
" display its usage, type the command without any arguments:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1381
|
||||
#: ../../sysadmclient.rst:1410
|
||||
msgid ""
|
||||
"Each command has its own help text that describes its parameters and "
|
||||
"provides a usage example. For example, to receive help on how to use the "
|
||||
@@ -1417,104 +1395,104 @@ msgstr ""
|
||||
msgid "Command Line and GUI Equivalents"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**Command Line**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**GUI**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**Description**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452
|
||||
#: ../../sysadmclient.rst:1481
|
||||
msgid "**cronsnap**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499
|
||||
msgid "\"Snapshots\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452
|
||||
#: ../../sysadmclient.rst:1481
|
||||
msgid ""
|
||||
"schedule when snapshots occur and how long to keep them; the **stop** option"
|
||||
" can be used to disable snapshot creation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "**cronscrub**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "\"Schedules\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "schedule a ZFS scrub"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459
|
||||
#: ../../sysadmclient.rst:1488
|
||||
msgid "**get**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495
|
||||
msgid "\"Settings\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459
|
||||
#: ../../sysadmclient.rst:1488
|
||||
msgid "list Life Preserver options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid "**replicate**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid "\"Replication\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid ""
|
||||
"used to list, add, and remove backup server; read the **help** for this "
|
||||
"command for examples"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1495
|
||||
msgid "**set**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1495
|
||||
msgid ""
|
||||
"configures Life Preserver options; read **help** for the list of "
|
||||
"configurable options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1499
|
||||
msgid "**snapshot**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1499
|
||||
msgid ""
|
||||
"create and replicate a new ZFS snapshot; by default, snapshots are "
|
||||
"recursive, meaning that a that a snapshot is taken of every dataset within a"
|
||||
" pool"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1476
|
||||
#: ../../sysadmclient.rst:1505
|
||||
msgid "**status**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1476
|
||||
#: ../../sysadmclient.rst:1505
|
||||
msgid "lists the last snapshot name and replication status"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1483
|
||||
#: ../../sysadmclient.rst:1512
|
||||
msgid "Restoring the Operating System"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1485
|
||||
#: ../../sysadmclient.rst:1514
|
||||
msgid ""
|
||||
"If you have replicated the system's snapshots to a remote backup server, you"
|
||||
" can use a |trueos| installation media to perform an operating system "
|
||||
@@ -1522,7 +1500,7 @@ msgid ""
|
||||
"you get to the screen shown in :numref:`Figure %s <restore1>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1497
|
||||
#: ../../sysadmclient.rst:1526
|
||||
msgid ""
|
||||
"Before you can perform a restore, the network interface must be configured. "
|
||||
"Click :guilabel:`Network Connectivity` (second icon from the left) in order "
|
||||
@@ -1533,7 +1511,7 @@ msgid ""
|
||||
"continuing."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1505
|
||||
#: ../../sysadmclient.rst:1534
|
||||
msgid ""
|
||||
"Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and"
|
||||
" :guilabel:`Next`. This will start the Restore Wizard. In the screen shown "
|
||||
@@ -1543,7 +1521,7 @@ msgid ""
|
||||
"number."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1519
|
||||
#: ../../sysadmclient.rst:1548
|
||||
msgid ""
|
||||
"Click :guilabel:`Next` and the wizard will provide a summary of your "
|
||||
"selections. If correct, click :guilabel:`Finish`; otherwise, click "
|
||||
@@ -1626,7 +1604,7 @@ msgid ""
|
||||
"press :guilabel:`Close Ports`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1152
|
||||
#: ../../sysadmclient.rst:1181
|
||||
msgid ""
|
||||
"Snapshots occurring too frequently can introduce errors in replication. To "
|
||||
"avoid errors, ensure snapshots are configured to take place slower than the "
|
||||
@@ -1685,7 +1663,7 @@ msgid ""
|
||||
"accounts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1065
|
||||
#: ../../sysadmclient.rst:1094
|
||||
msgid ""
|
||||
"A snapshot provides a \"point-in-time\" image of the ZFS pool. This is "
|
||||
"similar to a full system backup as the snapshot contains the information for"
|
||||
@@ -1703,26 +1681,26 @@ msgid ""
|
||||
"snapshot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1272
|
||||
#: ../../sysadmclient.rst:1301
|
||||
msgid ""
|
||||
"**Storage Pool:** Select the ZFS storage pool that contains the datasets "
|
||||
"that you wish to snapshot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1293
|
||||
#: ../../sysadmclient.rst:1322
|
||||
msgid ""
|
||||
"This screen can also be used to manage the ZFS scrub schedule. Scrubs are "
|
||||
"recommended as they can provide an early indication of a potential disk "
|
||||
"failure. Scrubs can be scheduled on a per-pool basis."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1297
|
||||
#: ../../sysadmclient.rst:1326
|
||||
msgid ""
|
||||
"If you have multiple pools, be sure to create a scrub schedule for each "
|
||||
"pool."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1310
|
||||
#: ../../sysadmclient.rst:1339
|
||||
msgid ""
|
||||
"Select the pool from the :guilabel:`Storage Pool` drop-down menu, then "
|
||||
"select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", "
|
||||
@@ -1807,26 +1785,17 @@ msgstr ""
|
||||
msgid ": Viewing All Accounts and Their Details"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:930
|
||||
#: ../../sysadmclient.rst:938
|
||||
msgid ": Initialize PersonaCrypt Device"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:932
|
||||
msgid ""
|
||||
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
|
||||
"Note this section is hidden if the currently logged in user is selected. "
|
||||
"Also, if you have just created a user and do not see these options, click "
|
||||
":guilabel:`Save` then re-highlight the user to display these options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:947
|
||||
#: ../../sysadmclient.rst:955
|
||||
msgid ""
|
||||
"To prepare a PersonaCrypt device for this user, insert a USB stick and click"
|
||||
" :guilabel:`Initialize Device`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:957
|
||||
#: ../../sysadmclient.rst:965
|
||||
msgid ""
|
||||
"Type a password to associate with the device. Click :guilabel:`Save` to "
|
||||
"initialize the device. The User Manager may take a moment to prepare the "
|
||||
@@ -1834,49 +1803,49 @@ msgid ""
|
||||
" to allow removal of PersonaCrypt."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1027
|
||||
#: ../../sysadmclient.rst:1056
|
||||
msgid ": Managing Groups Using User Manager"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1110
|
||||
#: ../../sysadmclient.rst:1139
|
||||
msgid ": Snapshot Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1184
|
||||
#: ../../sysadmclient.rst:1213
|
||||
msgid ": Replication Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1194
|
||||
#: ../../sysadmclient.rst:1223
|
||||
msgid ": Scheduling a Replication"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1268
|
||||
#: ../../sysadmclient.rst:1297
|
||||
msgid ": Scheduling a Snapshot"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1308
|
||||
#: ../../sysadmclient.rst:1337
|
||||
msgid ": Scheduling a Scrub"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1335
|
||||
#: ../../sysadmclient.rst:1364
|
||||
msgid ": Life Preserver Settings"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1442
|
||||
#: ../../sysadmclient.rst:1471
|
||||
msgid ""
|
||||
":numref:`Table %s <cmdgui>` shows the command line equivalents to the "
|
||||
"graphical options provided by the Life Preserver GUI."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1495
|
||||
#: ../../sysadmclient.rst:1524
|
||||
msgid ": Selecting to Restore/Clone From Backup"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1517
|
||||
#: ../../sysadmclient.rst:1546
|
||||
msgid ": Input the Information for a SSH Restore"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1523
|
||||
#: ../../sysadmclient.rst:1552
|
||||
msgid ""
|
||||
"Once the connection to the backup server succeeds, you will be able to "
|
||||
"select which host to restore. After making your selection, click "
|
||||
@@ -1892,7 +1861,7 @@ msgid ""
|
||||
":guilabel:`Next` to perform the restore."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:987
|
||||
#: ../../sysadmclient.rst:970
|
||||
msgid ""
|
||||
"Once a user has been initialized for PersonaCrypt on the system, their user "
|
||||
"account will no longer be displayed when logging in, **unless** their "
|
||||
@@ -1901,7 +1870,7 @@ msgid ""
|
||||
":numref:`Figure %s <troslogin5>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:997
|
||||
#: ../../sysadmclient.rst:980
|
||||
msgid ": |trueos| Login Screen with PersonaCrypt"
|
||||
msgstr ""
|
||||
|
||||
@@ -1949,7 +1918,7 @@ msgstr ""
|
||||
msgid ": |sysadm| Task Manager"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1103
|
||||
#: ../../sysadmclient.rst:1132
|
||||
msgid ""
|
||||
":numref:`Figure %s <lpreserver1>` shows the :guilabel:`Snapshots` tab on a "
|
||||
"system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"."
|
||||
@@ -2013,6 +1982,134 @@ msgid ""
|
||||
":guilabel:`Save Settings`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:894
|
||||
msgid ""
|
||||
"|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
"PersonaCrypt device is a removable USB media, such as a USB flash drive, "
|
||||
"formatted with ZFS and encrypted with either GELI or PEFS. This device is "
|
||||
"used to hold a specific user's home directory, meaning they can securely "
|
||||
"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 "
|
||||
"or higher system. For example, this can be used to securely access one's "
|
||||
"home directory from a laptop, home computer, and work computer. The device "
|
||||
"is protected by an encryption key and a different (recommended) password "
|
||||
"separate from the user's login password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:916
|
||||
msgid "GELI"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:918
|
||||
msgid ""
|
||||
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
"your passphrase, and the other being a key stored on disk. Without both of "
|
||||
"these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
"the key and manages to get your password, it is still worthless without the "
|
||||
"system it was paired with. GELI is used by default in |trueos| as it is more"
|
||||
" fully featured over PEFS."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:940
|
||||
msgid ""
|
||||
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
"buttons are available in the :guilabel:`PersonaCrypt` tab of "
|
||||
":guilabel:`Advanced Mode`. Note this section is hidden if the currently "
|
||||
"logged in user is selected. Also, if you have just created a user and do not"
|
||||
" see these options, click :guilabel:`Save`, then re-highlight the user to "
|
||||
"display these options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:999
|
||||
msgid "PEFS"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1001
|
||||
msgid ""
|
||||
"`PEFS <http://pefs.io/>`_ stands for Private Encrypted File System. It is "
|
||||
"open source software freely available under the BSD license, and is included"
|
||||
" in |trueos| by default. PEFS runs on top of any existing file system, "
|
||||
"providing an encryption layer independent of the underlying file system. "
|
||||
"PersonaCrypt can be configured to use PEFS in place of GELI, which "
|
||||
"eliminates the need for external media, as the encrypted PEFS database is "
|
||||
"stored on the local disk."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1009
|
||||
msgid ""
|
||||
"While PEFS does not use a USB drive, be sure to print or otherwise backup "
|
||||
"the PEFS generated key fragment stored on the disk."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1012
|
||||
msgid "**Initialize PEFS with the Command Line**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1014
|
||||
msgid ""
|
||||
"Because PEFS does not use a USB drive with its encryption, the user will "
|
||||
"need a password file (pfile) containing the desired password, **before** "
|
||||
"initializing PEFS for a user account. Once this pfile is created, enabling "
|
||||
"PEFS through PersonaCrypt is accomplished in a CLI with "
|
||||
":command:`personacrypt init <username> <pfile> PEFS`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1020
|
||||
msgid ""
|
||||
"For example, the user account **test** has a pfile named "
|
||||
":file:`testpfile.txt`, which contains the single text string of **test's** "
|
||||
"chosen password. Next, the administrator adds PEFS encryption to the "
|
||||
"**test** acount by opening a CLI, logging in as root, and typing:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1029
|
||||
msgid ""
|
||||
"PersonaCrypt will initialize the account **test** with PEFS, using the "
|
||||
"string in :file:`testpfile.txt` as the new password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1032
|
||||
msgid ""
|
||||
"The |sysadm| User Manager can also initialize a user account with PEFS by "
|
||||
"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` "
|
||||
"drop down menu of the :guilabel:`PersonaCrypt` tab."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1036
|
||||
msgid ""
|
||||
"In addition to initializing an account with PEFS, PersonaCrypt also supports"
|
||||
" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt "
|
||||
"export <username>` and :command:`personacrypt import <keyfile>`, "
|
||||
"respectively."
|
||||
msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
|
||||
#~ " with ZFS and encrypted with GELI. This device is used to hold a specific "
|
||||
#~ "user's home directory, meaning they can securely transport and access their "
|
||||
#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
|
||||
#~ "example, this can be used to securely access one's home directory from a "
|
||||
#~ "laptop, home computer, and work computer. The device is protected by an "
|
||||
#~ "encryption key and a password which is, and should be, separate from the "
|
||||
#~ "user's login password."
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
#~ "your passphrase, and the other being a key stored on disk. Without both of "
|
||||
#~ "these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
#~ "the key and manages to get your password, it is still worthless without the "
|
||||
#~ "system it was paired with."
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
|
||||
#~ "Note this section is hidden if the currently logged in user is selected. "
|
||||
#~ "Also, if you have just created a user and do not see these options, click "
|
||||
#~ ":guilabel:`Save` then re-highlight the user to display these options:"
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "**Max Boot Environments:** |trueos| automatically creates a boot environment"
|
||||
#~ " before updating any software, the operating system, or applying a system "
|
||||
|
||||
@@ -482,7 +482,7 @@ msgid ""
|
||||
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <update4>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1326
|
||||
#: ../../sysadmclient.rst:1355
|
||||
msgid "Settings Tab"
|
||||
msgstr ""
|
||||
|
||||
@@ -924,20 +924,7 @@ msgstr ""
|
||||
msgid "PersonaCrypt"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:894
|
||||
msgid ""
|
||||
"|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
"PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
|
||||
" with ZFS and encrypted with GELI. This device is used to hold a specific "
|
||||
"user's home directory, meaning they can securely transport and access their "
|
||||
"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
|
||||
"example, this can be used to securely access one's home directory from a "
|
||||
"laptop, home computer, and work computer. The device is protected by an "
|
||||
"encryption key and a password which is, and should be, separate from the "
|
||||
"user's login password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:904
|
||||
#: ../../sysadmclient.rst:905
|
||||
msgid ""
|
||||
"When a user is configured to use a PersonaCrypt device, that user can not "
|
||||
"login using an unencrypted session on the same system. In other words, the "
|
||||
@@ -946,22 +933,13 @@ msgid ""
|
||||
"different user accounts, one for each type of session."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:911
|
||||
msgid ""
|
||||
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
"your passphrase, and the other being a key stored on disk. Without both of "
|
||||
"these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
"the key and manages to get your password, it is still worthless without the "
|
||||
"system it was paired with."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:917
|
||||
#: ../../sysadmclient.rst:925
|
||||
msgid ""
|
||||
"USB devices do eventually fail. Always backup any important files stored on "
|
||||
"the PersonaCrypt device to another device or system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:920
|
||||
#: ../../sysadmclient.rst:928
|
||||
msgid ""
|
||||
"The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt "
|
||||
"device for any login user, **except** for the currently logged in user. In "
|
||||
@@ -969,13 +947,13 @@ msgid ""
|
||||
"*dlavigne*, has been created and the entry for the user has been clicked."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:939
|
||||
#: ../../sysadmclient.rst:947
|
||||
msgid ""
|
||||
"**Initialize Device:** Used to prepare the USB device which will be used as "
|
||||
"the user's home directory."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:942
|
||||
#: ../../sysadmclient.rst:950
|
||||
msgid ""
|
||||
"**Import Key:** If the user has already created a PersonaCrypt device on "
|
||||
"another |trueos| system, click this button to import a previously saved copy"
|
||||
@@ -983,7 +961,7 @@ msgid ""
|
||||
"can now login to this computer using PersonaCrypt."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:950
|
||||
#: ../../sysadmclient.rst:958
|
||||
msgid ""
|
||||
"Since the USB stick will hold the user's home directory and files, ensure "
|
||||
"the stick is large enough to meet the anticipated storage needs of the home "
|
||||
@@ -993,7 +971,7 @@ msgid ""
|
||||
"logged in."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:999
|
||||
#: ../../sysadmclient.rst:982
|
||||
msgid ""
|
||||
"When stealth sessions have been configured, PersonaCrypt users will still be"
|
||||
" displayed in the login menu, even if their USB device is not inserted. This"
|
||||
@@ -1001,47 +979,47 @@ msgid ""
|
||||
"session."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1004
|
||||
#: ../../sysadmclient.rst:987
|
||||
msgid ""
|
||||
"In the field with the yellow padlock icon, input the password for the user "
|
||||
"account. In the field with the grey USB stick icon, input the password "
|
||||
"associated with the PersonaCrypt device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1008
|
||||
#: ../../sysadmclient.rst:991
|
||||
msgid ""
|
||||
"To prevent data corruption and freezing the system **DO NOT** remove the "
|
||||
"PersonaCrypt device while logged in! Always log out of your session before "
|
||||
"physically removing the device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1016
|
||||
#: ../../sysadmclient.rst:1045
|
||||
msgid "Managing Groups"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1018
|
||||
#: ../../sysadmclient.rst:1047
|
||||
msgid ""
|
||||
"Click the :guilabel:`Groups` tab to view and manage the groups on the "
|
||||
"system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s <user4>`, "
|
||||
"shows the group membership for the *operator* and *wheel* groups:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1029
|
||||
#: ../../sysadmclient.rst:1058
|
||||
msgid "This screen has 2 columns:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1031
|
||||
#: ../../sysadmclient.rst:1060
|
||||
msgid ""
|
||||
"**Members:** Indicates if the highlighted group contains any user accounts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1034
|
||||
#: ../../sysadmclient.rst:1063
|
||||
msgid ""
|
||||
"**Available:** Shows all of the system and user accounts on the system in "
|
||||
"alphabetical order."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1037
|
||||
#: ../../sysadmclient.rst:1066
|
||||
msgid ""
|
||||
"To add an account to a group, highlight the group name, then highlight the "
|
||||
"account name in the :guilabel:`Available` column. Click the left arrow and "
|
||||
@@ -1051,7 +1029,7 @@ msgid ""
|
||||
"added to a group."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1044
|
||||
#: ../../sysadmclient.rst:1073
|
||||
msgid ""
|
||||
"If you add a user to the *operator* group, they will have permission to use "
|
||||
"commands requiring administrative access and will be prompted for their own "
|
||||
@@ -1060,15 +1038,15 @@ msgid ""
|
||||
"will be prompted for the superuser password whenever they use the command."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1051
|
||||
#: ../../sysadmclient.rst:1080
|
||||
msgid "To view all of the groups on the system, click :guilabel:`Advanced`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1057
|
||||
#: ../../sysadmclient.rst:1086
|
||||
msgid "Life Preserver"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1059
|
||||
#: ../../sysadmclient.rst:1088
|
||||
msgid ""
|
||||
"The Life Preserver utility is designed to take full advantage of the "
|
||||
"functionality provided by ZFS snapshots. This utility allows you to schedule"
|
||||
@@ -1077,25 +1055,25 @@ msgid ""
|
||||
"benefits:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1081
|
||||
#: ../../sysadmclient.rst:1110
|
||||
msgid ""
|
||||
"Replication is an efficient way to keep the files on two systems in sync. "
|
||||
"With Life Preserver, the snapshots taken on the |trueos| system will be "
|
||||
"synchronized with their versions stored on the specified backup server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1086
|
||||
#: ../../sysadmclient.rst:1115
|
||||
msgid "Snapshots are sent to the backup server over an encrypted connection."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1088
|
||||
#: ../../sysadmclient.rst:1117
|
||||
msgid ""
|
||||
"Having a copy of the snapshots on another system makes it possible to "
|
||||
"perform an operating system restore should the |trueos| system become "
|
||||
"unusable or to deploy an identical system to different hardware."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1092
|
||||
#: ../../sysadmclient.rst:1121
|
||||
msgid ""
|
||||
"To manage snapshots and replication using the |sysadm| graphical client, go "
|
||||
"to :menuselection:`Utilities --> Life Preserver`. The rest of this section "
|
||||
@@ -1103,16 +1081,16 @@ msgid ""
|
||||
"Preserver."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1101
|
||||
#: ../../sysadmclient.rst:1130
|
||||
msgid "Snapshots Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1112
|
||||
#: ../../sysadmclient.rst:1141
|
||||
msgid ""
|
||||
"This screen will display any created snapshots and provides buttons to:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1114
|
||||
#: ../../sysadmclient.rst:1143
|
||||
msgid ""
|
||||
"**Create:** Used to create a manual snapshot of the specified pool now. For "
|
||||
"example, you could create a snapshot before making changes to an important "
|
||||
@@ -1126,14 +1104,14 @@ msgid ""
|
||||
"snapshot was created."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1125
|
||||
#: ../../sysadmclient.rst:1154
|
||||
msgid ""
|
||||
"**Remove:** Used to delete a highlighted snapshot. **This is a permanent "
|
||||
"change that can not be reversed.** In other words, the versions of files at "
|
||||
"the point in time the snapshot was created will be lost."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1130
|
||||
#: ../../sysadmclient.rst:1159
|
||||
msgid ""
|
||||
"**Revert:** If you highlight a snapshot entry, this button and the drop-down"
|
||||
" menu next to it will activate. You can use the drop-down menu to specify "
|
||||
@@ -1143,11 +1121,11 @@ msgid ""
|
||||
" after the snapshot was taken will be lost."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1142
|
||||
#: ../../sysadmclient.rst:1171
|
||||
msgid "Replication Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1144
|
||||
#: ../../sysadmclient.rst:1173
|
||||
msgid ""
|
||||
"Life Preserver can be configured to replicate snapshots to another system "
|
||||
"over an encrypted SSH connection, though the backup itself is stored in an "
|
||||
@@ -1155,13 +1133,13 @@ msgid ""
|
||||
" another system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1149
|
||||
#: ../../sysadmclient.rst:1178
|
||||
msgid ""
|
||||
"In order to configure replication, the remote system to hold a copy of the "
|
||||
"snapshots must first meet several requirements:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1156
|
||||
#: ../../sysadmclient.rst:1185
|
||||
msgid ""
|
||||
"The backup server **must be formatted with the latest version of ZFS,** also"
|
||||
" known as ZFS feature flags or ZFSv5000. Operating systems that support this"
|
||||
@@ -1169,14 +1147,14 @@ msgid ""
|
||||
"FreeNAS 9.1.x or higher."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1162
|
||||
#: ../../sysadmclient.rst:1191
|
||||
msgid ""
|
||||
"The system must have SSH installed and the SSH service must be running. If "
|
||||
"the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is"
|
||||
" already installed, but you will need to start the SSH service."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1167
|
||||
#: ../../sysadmclient.rst:1196
|
||||
msgid ""
|
||||
"If the backup server is running |trueos| or |pcbsd|, you will need to open "
|
||||
"TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is "
|
||||
@@ -1186,7 +1164,7 @@ msgid ""
|
||||
"backup system, make sure it has a rule to allow SSH."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1175
|
||||
#: ../../sysadmclient.rst:1204
|
||||
msgid ""
|
||||
":numref:`Figure %s <lpreserver2>` shows the initial :guilabel:`Replication` "
|
||||
"tab on a system that has not yet been configured for replication. This "
|
||||
@@ -1194,29 +1172,29 @@ msgid ""
|
||||
"schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1186
|
||||
#: ../../sysadmclient.rst:1215
|
||||
msgid ""
|
||||
"To schedule the replication, click :guilabel:`+` to display the \"Setup "
|
||||
"Replication\" screen shown in :numref:`Figure %s <lpreserver3>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1196
|
||||
#: ../../sysadmclient.rst:1225
|
||||
msgid "Input the following information:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1198
|
||||
#: ../../sysadmclient.rst:1227
|
||||
msgid ""
|
||||
"**Host IP:** The IP address of the remote system to store the replicated "
|
||||
"snapshots."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1201
|
||||
#: ../../sysadmclient.rst:1230
|
||||
msgid ""
|
||||
"**SSH Port:** The port number, if the remote system is running SSH on a port"
|
||||
" other than the default of 22."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1204
|
||||
#: ../../sysadmclient.rst:1233
|
||||
msgid ""
|
||||
"**Dataset:** The name of the ZFS pool and optional dataset on the remote "
|
||||
"system. For example, \"remotetank\" will save the snapshots to a ZFS pool of"
|
||||
@@ -1224,7 +1202,7 @@ msgid ""
|
||||
"existing dataset named \"mybackups\" on the pool named \"remotetank\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1210
|
||||
#: ../../sysadmclient.rst:1239
|
||||
msgid ""
|
||||
"**Frequency:** Use the drop-down menu to select how often to initiate the "
|
||||
"replication. Available choices are :guilabel:`Sync with snapshot` (at the "
|
||||
@@ -1235,87 +1213,87 @@ msgid ""
|
||||
":guilabel:`Start`) in this screen."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1219
|
||||
#: ../../sysadmclient.rst:1248
|
||||
msgid ""
|
||||
"**Username:** The username must already exist on the remote system, have "
|
||||
"write access to the specified \"Dataset\", and have permission to SSH into "
|
||||
"that system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1223
|
||||
#: ../../sysadmclient.rst:1252
|
||||
msgid "**Password:** The password associated with the \"Username\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1225
|
||||
#: ../../sysadmclient.rst:1254
|
||||
msgid ""
|
||||
"**Local DS:** Use the drop-down menu to select the pool or dataset to "
|
||||
"replicate to the remote system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1228
|
||||
#: ../../sysadmclient.rst:1257
|
||||
msgid ""
|
||||
"The buttons at the top of the \"Setup Replication\" screen have several "
|
||||
"uses:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1231
|
||||
#: ../../sysadmclient.rst:1260
|
||||
msgid ""
|
||||
"**+ icon:** Sdd a replication schedule. Multiple schedules are supported, "
|
||||
"meaning you can replicate to multiple systems or replicate different \"Local"
|
||||
" DS\" datasets at different times."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1235
|
||||
#: ../../sysadmclient.rst:1264
|
||||
msgid ""
|
||||
"**- icon:** Remove an already created, and highlighted, replication "
|
||||
"schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1238
|
||||
#: ../../sysadmclient.rst:1267
|
||||
msgid "**gear icon:** Modify the schedule for the highlighted replication."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1240
|
||||
#: ../../sysadmclient.rst:1269
|
||||
msgid ""
|
||||
"**Start:** Manually starts a replication to the system specified in the "
|
||||
"highlighted replication."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1243
|
||||
#: ../../sysadmclient.rst:1272
|
||||
msgid ""
|
||||
"**Initialize:** Deletes the existing replicated snapshots on the remote "
|
||||
"system and starts a new replication. This is useful if a replication gets "
|
||||
"stuck and will not complete."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1251
|
||||
#: ../../sysadmclient.rst:1280
|
||||
msgid "Schedules Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1253
|
||||
#: ../../sysadmclient.rst:1282
|
||||
msgid ""
|
||||
"This tab is used to manage when snapshots of the ZFS pool are created. "
|
||||
"Multiple snapshot schedules are supported if the system has multiple pools."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1257
|
||||
#: ../../sysadmclient.rst:1286
|
||||
msgid ""
|
||||
"Snapshots are created on the entire pool as they are needed when "
|
||||
":ref:`Restoring the Operating System`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1260
|
||||
#: ../../sysadmclient.rst:1289
|
||||
msgid ""
|
||||
"To create a snapshot schedule, click the :guilabel:`camera` icon in the "
|
||||
"lower left corner of this tab. This will activate the \"Setup Snapshot "
|
||||
"Schedule\" pane as seen in :numref:`Figure %s <lpreserver4>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1270
|
||||
#: ../../sysadmclient.rst:1299
|
||||
msgid "This pane contains several options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1275
|
||||
#: ../../sysadmclient.rst:1304
|
||||
msgid ""
|
||||
"**Snapshots to keep:** Snapshots are automatically pruned after the "
|
||||
"specified number of snapshots to prevent snapshots from eventually using up "
|
||||
@@ -1326,7 +1304,7 @@ msgid ""
|
||||
"manually in the :guilabel:`Snapshots` tab."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1284
|
||||
#: ../../sysadmclient.rst:1313
|
||||
msgid ""
|
||||
"**Frequency:** Use the drop-down menu to select how often snapshots occur. "
|
||||
"Options include \"Daily\" (which will allow you to select the time of day), "
|
||||
@@ -1334,37 +1312,37 @@ msgid ""
|
||||
"Minutes\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1289
|
||||
#: ../../sysadmclient.rst:1318
|
||||
msgid ""
|
||||
"Once you have created a snapshot schedule, you can use the \"gear\" icon "
|
||||
"next to the \"camera\" icon to modify the highlighted schedule or the \"X\" "
|
||||
"icon to delete the highlighted schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1300
|
||||
#: ../../sysadmclient.rst:1329
|
||||
msgid ""
|
||||
"To schedule when the scrub occurs, click the third icon from the right which"
|
||||
" will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure "
|
||||
"%s <lpreserver5>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1318
|
||||
#: ../../sysadmclient.rst:1347
|
||||
msgid ""
|
||||
"Once you have created a scrub schedule, you can use the \"gear\" icon next "
|
||||
"to the \"schedule scrub\" icon to modify the highlighted schedule or the "
|
||||
"\"X\" icon to delete the highlighted schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1328
|
||||
#: ../../sysadmclient.rst:1357
|
||||
msgid ""
|
||||
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <lpreserver6>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1337
|
||||
#: ../../sysadmclient.rst:1366
|
||||
msgid "Many settings are configurable:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1339
|
||||
#: ../../sysadmclient.rst:1368
|
||||
msgid ""
|
||||
"**Disk Usage Warning:** Enter a number up to 99 to indicate at which "
|
||||
"percentage of disk space Life Preserver will display an alert in the system "
|
||||
@@ -1372,41 +1350,41 @@ msgid ""
|
||||
"space."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1344
|
||||
#: ../../sysadmclient.rst:1373
|
||||
msgid ""
|
||||
"**Email:** To receive an email when disk usage reaches the percentage "
|
||||
"configured in the \"Disk Usage Warning\", enter an email address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1347
|
||||
#: ../../sysadmclient.rst:1376
|
||||
msgid ""
|
||||
"**Email Trigger:** This setting can be set to \"All\", \"Warn\", or "
|
||||
"\"Error\" and indicates the type of condition which will trigger an email "
|
||||
"message."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1350
|
||||
#: ../../sysadmclient.rst:1379
|
||||
msgid "**Recursive Management:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1352
|
||||
#: ../../sysadmclient.rst:1381
|
||||
msgid ""
|
||||
"If you make any changes in this screen, press :guilabel:`Save Settings` to "
|
||||
"apply them."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1359
|
||||
#: ../../sysadmclient.rst:1388
|
||||
msgid "Using the lpreserver CLI"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1361
|
||||
#: ../../sysadmclient.rst:1390
|
||||
msgid ""
|
||||
"The :command:`lpreserver` command line utility can also be used to manage "
|
||||
"snapshots and replication. This command needs to be run as the superuser. To"
|
||||
" display its usage, type the command without any arguments:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1381
|
||||
#: ../../sysadmclient.rst:1410
|
||||
msgid ""
|
||||
"Each command has its own help text that describes its parameters and "
|
||||
"provides a usage example. For example, to receive help on how to use the "
|
||||
@@ -1417,104 +1395,104 @@ msgstr ""
|
||||
msgid "Command Line and GUI Equivalents"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**Command Line**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**GUI**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**Description**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452
|
||||
#: ../../sysadmclient.rst:1481
|
||||
msgid "**cronsnap**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499
|
||||
msgid "\"Snapshots\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452
|
||||
#: ../../sysadmclient.rst:1481
|
||||
msgid ""
|
||||
"schedule when snapshots occur and how long to keep them; the **stop** option"
|
||||
" can be used to disable snapshot creation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "**cronscrub**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "\"Schedules\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "schedule a ZFS scrub"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459
|
||||
#: ../../sysadmclient.rst:1488
|
||||
msgid "**get**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495
|
||||
msgid "\"Settings\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459
|
||||
#: ../../sysadmclient.rst:1488
|
||||
msgid "list Life Preserver options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid "**replicate**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid "\"Replication\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid ""
|
||||
"used to list, add, and remove backup server; read the **help** for this "
|
||||
"command for examples"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1495
|
||||
msgid "**set**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1495
|
||||
msgid ""
|
||||
"configures Life Preserver options; read **help** for the list of "
|
||||
"configurable options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1499
|
||||
msgid "**snapshot**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1499
|
||||
msgid ""
|
||||
"create and replicate a new ZFS snapshot; by default, snapshots are "
|
||||
"recursive, meaning that a that a snapshot is taken of every dataset within a"
|
||||
" pool"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1476
|
||||
#: ../../sysadmclient.rst:1505
|
||||
msgid "**status**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1476
|
||||
#: ../../sysadmclient.rst:1505
|
||||
msgid "lists the last snapshot name and replication status"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1483
|
||||
#: ../../sysadmclient.rst:1512
|
||||
msgid "Restoring the Operating System"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1485
|
||||
#: ../../sysadmclient.rst:1514
|
||||
msgid ""
|
||||
"If you have replicated the system's snapshots to a remote backup server, you"
|
||||
" can use a |trueos| installation media to perform an operating system "
|
||||
@@ -1522,7 +1500,7 @@ msgid ""
|
||||
"you get to the screen shown in :numref:`Figure %s <restore1>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1497
|
||||
#: ../../sysadmclient.rst:1526
|
||||
msgid ""
|
||||
"Before you can perform a restore, the network interface must be configured. "
|
||||
"Click :guilabel:`Network Connectivity` (second icon from the left) in order "
|
||||
@@ -1533,7 +1511,7 @@ msgid ""
|
||||
"continuing."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1505
|
||||
#: ../../sysadmclient.rst:1534
|
||||
msgid ""
|
||||
"Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and"
|
||||
" :guilabel:`Next`. This will start the Restore Wizard. In the screen shown "
|
||||
@@ -1543,7 +1521,7 @@ msgid ""
|
||||
"number."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1519
|
||||
#: ../../sysadmclient.rst:1548
|
||||
msgid ""
|
||||
"Click :guilabel:`Next` and the wizard will provide a summary of your "
|
||||
"selections. If correct, click :guilabel:`Finish`; otherwise, click "
|
||||
@@ -1626,7 +1604,7 @@ msgid ""
|
||||
"press :guilabel:`Close Ports`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1152
|
||||
#: ../../sysadmclient.rst:1181
|
||||
msgid ""
|
||||
"Snapshots occurring too frequently can introduce errors in replication. To "
|
||||
"avoid errors, ensure snapshots are configured to take place slower than the "
|
||||
@@ -1685,7 +1663,7 @@ msgid ""
|
||||
"accounts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1065
|
||||
#: ../../sysadmclient.rst:1094
|
||||
msgid ""
|
||||
"A snapshot provides a \"point-in-time\" image of the ZFS pool. This is "
|
||||
"similar to a full system backup as the snapshot contains the information for"
|
||||
@@ -1703,26 +1681,26 @@ msgid ""
|
||||
"snapshot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1272
|
||||
#: ../../sysadmclient.rst:1301
|
||||
msgid ""
|
||||
"**Storage Pool:** Select the ZFS storage pool that contains the datasets "
|
||||
"that you wish to snapshot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1293
|
||||
#: ../../sysadmclient.rst:1322
|
||||
msgid ""
|
||||
"This screen can also be used to manage the ZFS scrub schedule. Scrubs are "
|
||||
"recommended as they can provide an early indication of a potential disk "
|
||||
"failure. Scrubs can be scheduled on a per-pool basis."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1297
|
||||
#: ../../sysadmclient.rst:1326
|
||||
msgid ""
|
||||
"If you have multiple pools, be sure to create a scrub schedule for each "
|
||||
"pool."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1310
|
||||
#: ../../sysadmclient.rst:1339
|
||||
msgid ""
|
||||
"Select the pool from the :guilabel:`Storage Pool` drop-down menu, then "
|
||||
"select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", "
|
||||
@@ -1807,26 +1785,17 @@ msgstr ""
|
||||
msgid ": Viewing All Accounts and Their Details"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:930
|
||||
#: ../../sysadmclient.rst:938
|
||||
msgid ": Initialize PersonaCrypt Device"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:932
|
||||
msgid ""
|
||||
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
|
||||
"Note this section is hidden if the currently logged in user is selected. "
|
||||
"Also, if you have just created a user and do not see these options, click "
|
||||
":guilabel:`Save` then re-highlight the user to display these options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:947
|
||||
#: ../../sysadmclient.rst:955
|
||||
msgid ""
|
||||
"To prepare a PersonaCrypt device for this user, insert a USB stick and click"
|
||||
" :guilabel:`Initialize Device`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:957
|
||||
#: ../../sysadmclient.rst:965
|
||||
msgid ""
|
||||
"Type a password to associate with the device. Click :guilabel:`Save` to "
|
||||
"initialize the device. The User Manager may take a moment to prepare the "
|
||||
@@ -1834,49 +1803,49 @@ msgid ""
|
||||
" to allow removal of PersonaCrypt."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1027
|
||||
#: ../../sysadmclient.rst:1056
|
||||
msgid ": Managing Groups Using User Manager"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1110
|
||||
#: ../../sysadmclient.rst:1139
|
||||
msgid ": Snapshot Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1184
|
||||
#: ../../sysadmclient.rst:1213
|
||||
msgid ": Replication Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1194
|
||||
#: ../../sysadmclient.rst:1223
|
||||
msgid ": Scheduling a Replication"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1268
|
||||
#: ../../sysadmclient.rst:1297
|
||||
msgid ": Scheduling a Snapshot"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1308
|
||||
#: ../../sysadmclient.rst:1337
|
||||
msgid ": Scheduling a Scrub"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1335
|
||||
#: ../../sysadmclient.rst:1364
|
||||
msgid ": Life Preserver Settings"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1442
|
||||
#: ../../sysadmclient.rst:1471
|
||||
msgid ""
|
||||
":numref:`Table %s <cmdgui>` shows the command line equivalents to the "
|
||||
"graphical options provided by the Life Preserver GUI."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1495
|
||||
#: ../../sysadmclient.rst:1524
|
||||
msgid ": Selecting to Restore/Clone From Backup"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1517
|
||||
#: ../../sysadmclient.rst:1546
|
||||
msgid ": Input the Information for a SSH Restore"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1523
|
||||
#: ../../sysadmclient.rst:1552
|
||||
msgid ""
|
||||
"Once the connection to the backup server succeeds, you will be able to "
|
||||
"select which host to restore. After making your selection, click "
|
||||
@@ -1892,7 +1861,7 @@ msgid ""
|
||||
":guilabel:`Next` to perform the restore."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:987
|
||||
#: ../../sysadmclient.rst:970
|
||||
msgid ""
|
||||
"Once a user has been initialized for PersonaCrypt on the system, their user "
|
||||
"account will no longer be displayed when logging in, **unless** their "
|
||||
@@ -1901,7 +1870,7 @@ msgid ""
|
||||
":numref:`Figure %s <troslogin5>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:997
|
||||
#: ../../sysadmclient.rst:980
|
||||
msgid ": |trueos| Login Screen with PersonaCrypt"
|
||||
msgstr ""
|
||||
|
||||
@@ -1949,7 +1918,7 @@ msgstr ""
|
||||
msgid ": |sysadm| Task Manager"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1103
|
||||
#: ../../sysadmclient.rst:1132
|
||||
msgid ""
|
||||
":numref:`Figure %s <lpreserver1>` shows the :guilabel:`Snapshots` tab on a "
|
||||
"system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"."
|
||||
@@ -2013,6 +1982,134 @@ msgid ""
|
||||
":guilabel:`Save Settings`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:894
|
||||
msgid ""
|
||||
"|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
"PersonaCrypt device is a removable USB media, such as a USB flash drive, "
|
||||
"formatted with ZFS and encrypted with either GELI or PEFS. This device is "
|
||||
"used to hold a specific user's home directory, meaning they can securely "
|
||||
"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 "
|
||||
"or higher system. For example, this can be used to securely access one's "
|
||||
"home directory from a laptop, home computer, and work computer. The device "
|
||||
"is protected by an encryption key and a different (recommended) password "
|
||||
"separate from the user's login password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:916
|
||||
msgid "GELI"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:918
|
||||
msgid ""
|
||||
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
"your passphrase, and the other being a key stored on disk. Without both of "
|
||||
"these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
"the key and manages to get your password, it is still worthless without the "
|
||||
"system it was paired with. GELI is used by default in |trueos| as it is more"
|
||||
" fully featured over PEFS."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:940
|
||||
msgid ""
|
||||
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
"buttons are available in the :guilabel:`PersonaCrypt` tab of "
|
||||
":guilabel:`Advanced Mode`. Note this section is hidden if the currently "
|
||||
"logged in user is selected. Also, if you have just created a user and do not"
|
||||
" see these options, click :guilabel:`Save`, then re-highlight the user to "
|
||||
"display these options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:999
|
||||
msgid "PEFS"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1001
|
||||
msgid ""
|
||||
"`PEFS <http://pefs.io/>`_ stands for Private Encrypted File System. It is "
|
||||
"open source software freely available under the BSD license, and is included"
|
||||
" in |trueos| by default. PEFS runs on top of any existing file system, "
|
||||
"providing an encryption layer independent of the underlying file system. "
|
||||
"PersonaCrypt can be configured to use PEFS in place of GELI, which "
|
||||
"eliminates the need for external media, as the encrypted PEFS database is "
|
||||
"stored on the local disk."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1009
|
||||
msgid ""
|
||||
"While PEFS does not use a USB drive, be sure to print or otherwise backup "
|
||||
"the PEFS generated key fragment stored on the disk."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1012
|
||||
msgid "**Initialize PEFS with the Command Line**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1014
|
||||
msgid ""
|
||||
"Because PEFS does not use a USB drive with its encryption, the user will "
|
||||
"need a password file (pfile) containing the desired password, **before** "
|
||||
"initializing PEFS for a user account. Once this pfile is created, enabling "
|
||||
"PEFS through PersonaCrypt is accomplished in a CLI with "
|
||||
":command:`personacrypt init <username> <pfile> PEFS`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1020
|
||||
msgid ""
|
||||
"For example, the user account **test** has a pfile named "
|
||||
":file:`testpfile.txt`, which contains the single text string of **test's** "
|
||||
"chosen password. Next, the administrator adds PEFS encryption to the "
|
||||
"**test** acount by opening a CLI, logging in as root, and typing:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1029
|
||||
msgid ""
|
||||
"PersonaCrypt will initialize the account **test** with PEFS, using the "
|
||||
"string in :file:`testpfile.txt` as the new password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1032
|
||||
msgid ""
|
||||
"The |sysadm| User Manager can also initialize a user account with PEFS by "
|
||||
"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` "
|
||||
"drop down menu of the :guilabel:`PersonaCrypt` tab."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1036
|
||||
msgid ""
|
||||
"In addition to initializing an account with PEFS, PersonaCrypt also supports"
|
||||
" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt "
|
||||
"export <username>` and :command:`personacrypt import <keyfile>`, "
|
||||
"respectively."
|
||||
msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
|
||||
#~ " with ZFS and encrypted with GELI. This device is used to hold a specific "
|
||||
#~ "user's home directory, meaning they can securely transport and access their "
|
||||
#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
|
||||
#~ "example, this can be used to securely access one's home directory from a "
|
||||
#~ "laptop, home computer, and work computer. The device is protected by an "
|
||||
#~ "encryption key and a password which is, and should be, separate from the "
|
||||
#~ "user's login password."
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
#~ "your passphrase, and the other being a key stored on disk. Without both of "
|
||||
#~ "these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
#~ "the key and manages to get your password, it is still worthless without the "
|
||||
#~ "system it was paired with."
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
|
||||
#~ "Note this section is hidden if the currently logged in user is selected. "
|
||||
#~ "Also, if you have just created a user and do not see these options, click "
|
||||
#~ ":guilabel:`Save` then re-highlight the user to display these options:"
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "**Max Boot Environments:** |trueos| automatically creates a boot environment"
|
||||
#~ " before updating any software, the operating system, or applying a system "
|
||||
|
||||
@@ -482,7 +482,7 @@ msgid ""
|
||||
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <update4>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1326
|
||||
#: ../../sysadmclient.rst:1355
|
||||
msgid "Settings Tab"
|
||||
msgstr ""
|
||||
|
||||
@@ -924,20 +924,7 @@ msgstr ""
|
||||
msgid "PersonaCrypt"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:894
|
||||
msgid ""
|
||||
"|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
"PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
|
||||
" with ZFS and encrypted with GELI. This device is used to hold a specific "
|
||||
"user's home directory, meaning they can securely transport and access their "
|
||||
"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
|
||||
"example, this can be used to securely access one's home directory from a "
|
||||
"laptop, home computer, and work computer. The device is protected by an "
|
||||
"encryption key and a password which is, and should be, separate from the "
|
||||
"user's login password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:904
|
||||
#: ../../sysadmclient.rst:905
|
||||
msgid ""
|
||||
"When a user is configured to use a PersonaCrypt device, that user can not "
|
||||
"login using an unencrypted session on the same system. In other words, the "
|
||||
@@ -946,22 +933,13 @@ msgid ""
|
||||
"different user accounts, one for each type of session."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:911
|
||||
msgid ""
|
||||
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
"your passphrase, and the other being a key stored on disk. Without both of "
|
||||
"these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
"the key and manages to get your password, it is still worthless without the "
|
||||
"system it was paired with."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:917
|
||||
#: ../../sysadmclient.rst:925
|
||||
msgid ""
|
||||
"USB devices do eventually fail. Always backup any important files stored on "
|
||||
"the PersonaCrypt device to another device or system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:920
|
||||
#: ../../sysadmclient.rst:928
|
||||
msgid ""
|
||||
"The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt "
|
||||
"device for any login user, **except** for the currently logged in user. In "
|
||||
@@ -969,13 +947,13 @@ msgid ""
|
||||
"*dlavigne*, has been created and the entry for the user has been clicked."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:939
|
||||
#: ../../sysadmclient.rst:947
|
||||
msgid ""
|
||||
"**Initialize Device:** Used to prepare the USB device which will be used as "
|
||||
"the user's home directory."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:942
|
||||
#: ../../sysadmclient.rst:950
|
||||
msgid ""
|
||||
"**Import Key:** If the user has already created a PersonaCrypt device on "
|
||||
"another |trueos| system, click this button to import a previously saved copy"
|
||||
@@ -983,7 +961,7 @@ msgid ""
|
||||
"can now login to this computer using PersonaCrypt."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:950
|
||||
#: ../../sysadmclient.rst:958
|
||||
msgid ""
|
||||
"Since the USB stick will hold the user's home directory and files, ensure "
|
||||
"the stick is large enough to meet the anticipated storage needs of the home "
|
||||
@@ -993,7 +971,7 @@ msgid ""
|
||||
"logged in."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:999
|
||||
#: ../../sysadmclient.rst:982
|
||||
msgid ""
|
||||
"When stealth sessions have been configured, PersonaCrypt users will still be"
|
||||
" displayed in the login menu, even if their USB device is not inserted. This"
|
||||
@@ -1001,47 +979,47 @@ msgid ""
|
||||
"session."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1004
|
||||
#: ../../sysadmclient.rst:987
|
||||
msgid ""
|
||||
"In the field with the yellow padlock icon, input the password for the user "
|
||||
"account. In the field with the grey USB stick icon, input the password "
|
||||
"associated with the PersonaCrypt device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1008
|
||||
#: ../../sysadmclient.rst:991
|
||||
msgid ""
|
||||
"To prevent data corruption and freezing the system **DO NOT** remove the "
|
||||
"PersonaCrypt device while logged in! Always log out of your session before "
|
||||
"physically removing the device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1016
|
||||
#: ../../sysadmclient.rst:1045
|
||||
msgid "Managing Groups"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1018
|
||||
#: ../../sysadmclient.rst:1047
|
||||
msgid ""
|
||||
"Click the :guilabel:`Groups` tab to view and manage the groups on the "
|
||||
"system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s <user4>`, "
|
||||
"shows the group membership for the *operator* and *wheel* groups:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1029
|
||||
#: ../../sysadmclient.rst:1058
|
||||
msgid "This screen has 2 columns:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1031
|
||||
#: ../../sysadmclient.rst:1060
|
||||
msgid ""
|
||||
"**Members:** Indicates if the highlighted group contains any user accounts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1034
|
||||
#: ../../sysadmclient.rst:1063
|
||||
msgid ""
|
||||
"**Available:** Shows all of the system and user accounts on the system in "
|
||||
"alphabetical order."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1037
|
||||
#: ../../sysadmclient.rst:1066
|
||||
msgid ""
|
||||
"To add an account to a group, highlight the group name, then highlight the "
|
||||
"account name in the :guilabel:`Available` column. Click the left arrow and "
|
||||
@@ -1051,7 +1029,7 @@ msgid ""
|
||||
"added to a group."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1044
|
||||
#: ../../sysadmclient.rst:1073
|
||||
msgid ""
|
||||
"If you add a user to the *operator* group, they will have permission to use "
|
||||
"commands requiring administrative access and will be prompted for their own "
|
||||
@@ -1060,15 +1038,15 @@ msgid ""
|
||||
"will be prompted for the superuser password whenever they use the command."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1051
|
||||
#: ../../sysadmclient.rst:1080
|
||||
msgid "To view all of the groups on the system, click :guilabel:`Advanced`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1057
|
||||
#: ../../sysadmclient.rst:1086
|
||||
msgid "Life Preserver"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1059
|
||||
#: ../../sysadmclient.rst:1088
|
||||
msgid ""
|
||||
"The Life Preserver utility is designed to take full advantage of the "
|
||||
"functionality provided by ZFS snapshots. This utility allows you to schedule"
|
||||
@@ -1077,25 +1055,25 @@ msgid ""
|
||||
"benefits:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1081
|
||||
#: ../../sysadmclient.rst:1110
|
||||
msgid ""
|
||||
"Replication is an efficient way to keep the files on two systems in sync. "
|
||||
"With Life Preserver, the snapshots taken on the |trueos| system will be "
|
||||
"synchronized with their versions stored on the specified backup server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1086
|
||||
#: ../../sysadmclient.rst:1115
|
||||
msgid "Snapshots are sent to the backup server over an encrypted connection."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1088
|
||||
#: ../../sysadmclient.rst:1117
|
||||
msgid ""
|
||||
"Having a copy of the snapshots on another system makes it possible to "
|
||||
"perform an operating system restore should the |trueos| system become "
|
||||
"unusable or to deploy an identical system to different hardware."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1092
|
||||
#: ../../sysadmclient.rst:1121
|
||||
msgid ""
|
||||
"To manage snapshots and replication using the |sysadm| graphical client, go "
|
||||
"to :menuselection:`Utilities --> Life Preserver`. The rest of this section "
|
||||
@@ -1103,16 +1081,16 @@ msgid ""
|
||||
"Preserver."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1101
|
||||
#: ../../sysadmclient.rst:1130
|
||||
msgid "Snapshots Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1112
|
||||
#: ../../sysadmclient.rst:1141
|
||||
msgid ""
|
||||
"This screen will display any created snapshots and provides buttons to:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1114
|
||||
#: ../../sysadmclient.rst:1143
|
||||
msgid ""
|
||||
"**Create:** Used to create a manual snapshot of the specified pool now. For "
|
||||
"example, you could create a snapshot before making changes to an important "
|
||||
@@ -1126,14 +1104,14 @@ msgid ""
|
||||
"snapshot was created."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1125
|
||||
#: ../../sysadmclient.rst:1154
|
||||
msgid ""
|
||||
"**Remove:** Used to delete a highlighted snapshot. **This is a permanent "
|
||||
"change that can not be reversed.** In other words, the versions of files at "
|
||||
"the point in time the snapshot was created will be lost."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1130
|
||||
#: ../../sysadmclient.rst:1159
|
||||
msgid ""
|
||||
"**Revert:** If you highlight a snapshot entry, this button and the drop-down"
|
||||
" menu next to it will activate. You can use the drop-down menu to specify "
|
||||
@@ -1143,11 +1121,11 @@ msgid ""
|
||||
" after the snapshot was taken will be lost."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1142
|
||||
#: ../../sysadmclient.rst:1171
|
||||
msgid "Replication Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1144
|
||||
#: ../../sysadmclient.rst:1173
|
||||
msgid ""
|
||||
"Life Preserver can be configured to replicate snapshots to another system "
|
||||
"over an encrypted SSH connection, though the backup itself is stored in an "
|
||||
@@ -1155,13 +1133,13 @@ msgid ""
|
||||
" another system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1149
|
||||
#: ../../sysadmclient.rst:1178
|
||||
msgid ""
|
||||
"In order to configure replication, the remote system to hold a copy of the "
|
||||
"snapshots must first meet several requirements:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1156
|
||||
#: ../../sysadmclient.rst:1185
|
||||
msgid ""
|
||||
"The backup server **must be formatted with the latest version of ZFS,** also"
|
||||
" known as ZFS feature flags or ZFSv5000. Operating systems that support this"
|
||||
@@ -1169,14 +1147,14 @@ msgid ""
|
||||
"FreeNAS 9.1.x or higher."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1162
|
||||
#: ../../sysadmclient.rst:1191
|
||||
msgid ""
|
||||
"The system must have SSH installed and the SSH service must be running. If "
|
||||
"the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is"
|
||||
" already installed, but you will need to start the SSH service."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1167
|
||||
#: ../../sysadmclient.rst:1196
|
||||
msgid ""
|
||||
"If the backup server is running |trueos| or |pcbsd|, you will need to open "
|
||||
"TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is "
|
||||
@@ -1186,7 +1164,7 @@ msgid ""
|
||||
"backup system, make sure it has a rule to allow SSH."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1175
|
||||
#: ../../sysadmclient.rst:1204
|
||||
msgid ""
|
||||
":numref:`Figure %s <lpreserver2>` shows the initial :guilabel:`Replication` "
|
||||
"tab on a system that has not yet been configured for replication. This "
|
||||
@@ -1194,29 +1172,29 @@ msgid ""
|
||||
"schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1186
|
||||
#: ../../sysadmclient.rst:1215
|
||||
msgid ""
|
||||
"To schedule the replication, click :guilabel:`+` to display the \"Setup "
|
||||
"Replication\" screen shown in :numref:`Figure %s <lpreserver3>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1196
|
||||
#: ../../sysadmclient.rst:1225
|
||||
msgid "Input the following information:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1198
|
||||
#: ../../sysadmclient.rst:1227
|
||||
msgid ""
|
||||
"**Host IP:** The IP address of the remote system to store the replicated "
|
||||
"snapshots."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1201
|
||||
#: ../../sysadmclient.rst:1230
|
||||
msgid ""
|
||||
"**SSH Port:** The port number, if the remote system is running SSH on a port"
|
||||
" other than the default of 22."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1204
|
||||
#: ../../sysadmclient.rst:1233
|
||||
msgid ""
|
||||
"**Dataset:** The name of the ZFS pool and optional dataset on the remote "
|
||||
"system. For example, \"remotetank\" will save the snapshots to a ZFS pool of"
|
||||
@@ -1224,7 +1202,7 @@ msgid ""
|
||||
"existing dataset named \"mybackups\" on the pool named \"remotetank\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1210
|
||||
#: ../../sysadmclient.rst:1239
|
||||
msgid ""
|
||||
"**Frequency:** Use the drop-down menu to select how often to initiate the "
|
||||
"replication. Available choices are :guilabel:`Sync with snapshot` (at the "
|
||||
@@ -1235,87 +1213,87 @@ msgid ""
|
||||
":guilabel:`Start`) in this screen."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1219
|
||||
#: ../../sysadmclient.rst:1248
|
||||
msgid ""
|
||||
"**Username:** The username must already exist on the remote system, have "
|
||||
"write access to the specified \"Dataset\", and have permission to SSH into "
|
||||
"that system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1223
|
||||
#: ../../sysadmclient.rst:1252
|
||||
msgid "**Password:** The password associated with the \"Username\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1225
|
||||
#: ../../sysadmclient.rst:1254
|
||||
msgid ""
|
||||
"**Local DS:** Use the drop-down menu to select the pool or dataset to "
|
||||
"replicate to the remote system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1228
|
||||
#: ../../sysadmclient.rst:1257
|
||||
msgid ""
|
||||
"The buttons at the top of the \"Setup Replication\" screen have several "
|
||||
"uses:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1231
|
||||
#: ../../sysadmclient.rst:1260
|
||||
msgid ""
|
||||
"**+ icon:** Sdd a replication schedule. Multiple schedules are supported, "
|
||||
"meaning you can replicate to multiple systems or replicate different \"Local"
|
||||
" DS\" datasets at different times."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1235
|
||||
#: ../../sysadmclient.rst:1264
|
||||
msgid ""
|
||||
"**- icon:** Remove an already created, and highlighted, replication "
|
||||
"schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1238
|
||||
#: ../../sysadmclient.rst:1267
|
||||
msgid "**gear icon:** Modify the schedule for the highlighted replication."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1240
|
||||
#: ../../sysadmclient.rst:1269
|
||||
msgid ""
|
||||
"**Start:** Manually starts a replication to the system specified in the "
|
||||
"highlighted replication."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1243
|
||||
#: ../../sysadmclient.rst:1272
|
||||
msgid ""
|
||||
"**Initialize:** Deletes the existing replicated snapshots on the remote "
|
||||
"system and starts a new replication. This is useful if a replication gets "
|
||||
"stuck and will not complete."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1251
|
||||
#: ../../sysadmclient.rst:1280
|
||||
msgid "Schedules Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1253
|
||||
#: ../../sysadmclient.rst:1282
|
||||
msgid ""
|
||||
"This tab is used to manage when snapshots of the ZFS pool are created. "
|
||||
"Multiple snapshot schedules are supported if the system has multiple pools."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1257
|
||||
#: ../../sysadmclient.rst:1286
|
||||
msgid ""
|
||||
"Snapshots are created on the entire pool as they are needed when "
|
||||
":ref:`Restoring the Operating System`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1260
|
||||
#: ../../sysadmclient.rst:1289
|
||||
msgid ""
|
||||
"To create a snapshot schedule, click the :guilabel:`camera` icon in the "
|
||||
"lower left corner of this tab. This will activate the \"Setup Snapshot "
|
||||
"Schedule\" pane as seen in :numref:`Figure %s <lpreserver4>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1270
|
||||
#: ../../sysadmclient.rst:1299
|
||||
msgid "This pane contains several options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1275
|
||||
#: ../../sysadmclient.rst:1304
|
||||
msgid ""
|
||||
"**Snapshots to keep:** Snapshots are automatically pruned after the "
|
||||
"specified number of snapshots to prevent snapshots from eventually using up "
|
||||
@@ -1326,7 +1304,7 @@ msgid ""
|
||||
"manually in the :guilabel:`Snapshots` tab."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1284
|
||||
#: ../../sysadmclient.rst:1313
|
||||
msgid ""
|
||||
"**Frequency:** Use the drop-down menu to select how often snapshots occur. "
|
||||
"Options include \"Daily\" (which will allow you to select the time of day), "
|
||||
@@ -1334,37 +1312,37 @@ msgid ""
|
||||
"Minutes\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1289
|
||||
#: ../../sysadmclient.rst:1318
|
||||
msgid ""
|
||||
"Once you have created a snapshot schedule, you can use the \"gear\" icon "
|
||||
"next to the \"camera\" icon to modify the highlighted schedule or the \"X\" "
|
||||
"icon to delete the highlighted schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1300
|
||||
#: ../../sysadmclient.rst:1329
|
||||
msgid ""
|
||||
"To schedule when the scrub occurs, click the third icon from the right which"
|
||||
" will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure "
|
||||
"%s <lpreserver5>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1318
|
||||
#: ../../sysadmclient.rst:1347
|
||||
msgid ""
|
||||
"Once you have created a scrub schedule, you can use the \"gear\" icon next "
|
||||
"to the \"schedule scrub\" icon to modify the highlighted schedule or the "
|
||||
"\"X\" icon to delete the highlighted schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1328
|
||||
#: ../../sysadmclient.rst:1357
|
||||
msgid ""
|
||||
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <lpreserver6>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1337
|
||||
#: ../../sysadmclient.rst:1366
|
||||
msgid "Many settings are configurable:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1339
|
||||
#: ../../sysadmclient.rst:1368
|
||||
msgid ""
|
||||
"**Disk Usage Warning:** Enter a number up to 99 to indicate at which "
|
||||
"percentage of disk space Life Preserver will display an alert in the system "
|
||||
@@ -1372,41 +1350,41 @@ msgid ""
|
||||
"space."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1344
|
||||
#: ../../sysadmclient.rst:1373
|
||||
msgid ""
|
||||
"**Email:** To receive an email when disk usage reaches the percentage "
|
||||
"configured in the \"Disk Usage Warning\", enter an email address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1347
|
||||
#: ../../sysadmclient.rst:1376
|
||||
msgid ""
|
||||
"**Email Trigger:** This setting can be set to \"All\", \"Warn\", or "
|
||||
"\"Error\" and indicates the type of condition which will trigger an email "
|
||||
"message."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1350
|
||||
#: ../../sysadmclient.rst:1379
|
||||
msgid "**Recursive Management:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1352
|
||||
#: ../../sysadmclient.rst:1381
|
||||
msgid ""
|
||||
"If you make any changes in this screen, press :guilabel:`Save Settings` to "
|
||||
"apply them."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1359
|
||||
#: ../../sysadmclient.rst:1388
|
||||
msgid "Using the lpreserver CLI"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1361
|
||||
#: ../../sysadmclient.rst:1390
|
||||
msgid ""
|
||||
"The :command:`lpreserver` command line utility can also be used to manage "
|
||||
"snapshots and replication. This command needs to be run as the superuser. To"
|
||||
" display its usage, type the command without any arguments:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1381
|
||||
#: ../../sysadmclient.rst:1410
|
||||
msgid ""
|
||||
"Each command has its own help text that describes its parameters and "
|
||||
"provides a usage example. For example, to receive help on how to use the "
|
||||
@@ -1417,104 +1395,104 @@ msgstr ""
|
||||
msgid "Command Line and GUI Equivalents"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**Command Line**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**GUI**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**Description**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452
|
||||
#: ../../sysadmclient.rst:1481
|
||||
msgid "**cronsnap**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499
|
||||
msgid "\"Snapshots\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452
|
||||
#: ../../sysadmclient.rst:1481
|
||||
msgid ""
|
||||
"schedule when snapshots occur and how long to keep them; the **stop** option"
|
||||
" can be used to disable snapshot creation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "**cronscrub**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "\"Schedules\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "schedule a ZFS scrub"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459
|
||||
#: ../../sysadmclient.rst:1488
|
||||
msgid "**get**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495
|
||||
msgid "\"Settings\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459
|
||||
#: ../../sysadmclient.rst:1488
|
||||
msgid "list Life Preserver options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid "**replicate**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid "\"Replication\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid ""
|
||||
"used to list, add, and remove backup server; read the **help** for this "
|
||||
"command for examples"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1495
|
||||
msgid "**set**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1495
|
||||
msgid ""
|
||||
"configures Life Preserver options; read **help** for the list of "
|
||||
"configurable options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1499
|
||||
msgid "**snapshot**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1499
|
||||
msgid ""
|
||||
"create and replicate a new ZFS snapshot; by default, snapshots are "
|
||||
"recursive, meaning that a that a snapshot is taken of every dataset within a"
|
||||
" pool"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1476
|
||||
#: ../../sysadmclient.rst:1505
|
||||
msgid "**status**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1476
|
||||
#: ../../sysadmclient.rst:1505
|
||||
msgid "lists the last snapshot name and replication status"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1483
|
||||
#: ../../sysadmclient.rst:1512
|
||||
msgid "Restoring the Operating System"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1485
|
||||
#: ../../sysadmclient.rst:1514
|
||||
msgid ""
|
||||
"If you have replicated the system's snapshots to a remote backup server, you"
|
||||
" can use a |trueos| installation media to perform an operating system "
|
||||
@@ -1522,7 +1500,7 @@ msgid ""
|
||||
"you get to the screen shown in :numref:`Figure %s <restore1>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1497
|
||||
#: ../../sysadmclient.rst:1526
|
||||
msgid ""
|
||||
"Before you can perform a restore, the network interface must be configured. "
|
||||
"Click :guilabel:`Network Connectivity` (second icon from the left) in order "
|
||||
@@ -1533,7 +1511,7 @@ msgid ""
|
||||
"continuing."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1505
|
||||
#: ../../sysadmclient.rst:1534
|
||||
msgid ""
|
||||
"Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and"
|
||||
" :guilabel:`Next`. This will start the Restore Wizard. In the screen shown "
|
||||
@@ -1543,7 +1521,7 @@ msgid ""
|
||||
"number."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1519
|
||||
#: ../../sysadmclient.rst:1548
|
||||
msgid ""
|
||||
"Click :guilabel:`Next` and the wizard will provide a summary of your "
|
||||
"selections. If correct, click :guilabel:`Finish`; otherwise, click "
|
||||
@@ -1626,7 +1604,7 @@ msgid ""
|
||||
"press :guilabel:`Close Ports`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1152
|
||||
#: ../../sysadmclient.rst:1181
|
||||
msgid ""
|
||||
"Snapshots occurring too frequently can introduce errors in replication. To "
|
||||
"avoid errors, ensure snapshots are configured to take place slower than the "
|
||||
@@ -1685,7 +1663,7 @@ msgid ""
|
||||
"accounts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1065
|
||||
#: ../../sysadmclient.rst:1094
|
||||
msgid ""
|
||||
"A snapshot provides a \"point-in-time\" image of the ZFS pool. This is "
|
||||
"similar to a full system backup as the snapshot contains the information for"
|
||||
@@ -1703,26 +1681,26 @@ msgid ""
|
||||
"snapshot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1272
|
||||
#: ../../sysadmclient.rst:1301
|
||||
msgid ""
|
||||
"**Storage Pool:** Select the ZFS storage pool that contains the datasets "
|
||||
"that you wish to snapshot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1293
|
||||
#: ../../sysadmclient.rst:1322
|
||||
msgid ""
|
||||
"This screen can also be used to manage the ZFS scrub schedule. Scrubs are "
|
||||
"recommended as they can provide an early indication of a potential disk "
|
||||
"failure. Scrubs can be scheduled on a per-pool basis."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1297
|
||||
#: ../../sysadmclient.rst:1326
|
||||
msgid ""
|
||||
"If you have multiple pools, be sure to create a scrub schedule for each "
|
||||
"pool."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1310
|
||||
#: ../../sysadmclient.rst:1339
|
||||
msgid ""
|
||||
"Select the pool from the :guilabel:`Storage Pool` drop-down menu, then "
|
||||
"select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", "
|
||||
@@ -1807,26 +1785,17 @@ msgstr ""
|
||||
msgid ": Viewing All Accounts and Their Details"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:930
|
||||
#: ../../sysadmclient.rst:938
|
||||
msgid ": Initialize PersonaCrypt Device"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:932
|
||||
msgid ""
|
||||
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
|
||||
"Note this section is hidden if the currently logged in user is selected. "
|
||||
"Also, if you have just created a user and do not see these options, click "
|
||||
":guilabel:`Save` then re-highlight the user to display these options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:947
|
||||
#: ../../sysadmclient.rst:955
|
||||
msgid ""
|
||||
"To prepare a PersonaCrypt device for this user, insert a USB stick and click"
|
||||
" :guilabel:`Initialize Device`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:957
|
||||
#: ../../sysadmclient.rst:965
|
||||
msgid ""
|
||||
"Type a password to associate with the device. Click :guilabel:`Save` to "
|
||||
"initialize the device. The User Manager may take a moment to prepare the "
|
||||
@@ -1834,49 +1803,49 @@ msgid ""
|
||||
" to allow removal of PersonaCrypt."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1027
|
||||
#: ../../sysadmclient.rst:1056
|
||||
msgid ": Managing Groups Using User Manager"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1110
|
||||
#: ../../sysadmclient.rst:1139
|
||||
msgid ": Snapshot Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1184
|
||||
#: ../../sysadmclient.rst:1213
|
||||
msgid ": Replication Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1194
|
||||
#: ../../sysadmclient.rst:1223
|
||||
msgid ": Scheduling a Replication"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1268
|
||||
#: ../../sysadmclient.rst:1297
|
||||
msgid ": Scheduling a Snapshot"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1308
|
||||
#: ../../sysadmclient.rst:1337
|
||||
msgid ": Scheduling a Scrub"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1335
|
||||
#: ../../sysadmclient.rst:1364
|
||||
msgid ": Life Preserver Settings"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1442
|
||||
#: ../../sysadmclient.rst:1471
|
||||
msgid ""
|
||||
":numref:`Table %s <cmdgui>` shows the command line equivalents to the "
|
||||
"graphical options provided by the Life Preserver GUI."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1495
|
||||
#: ../../sysadmclient.rst:1524
|
||||
msgid ": Selecting to Restore/Clone From Backup"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1517
|
||||
#: ../../sysadmclient.rst:1546
|
||||
msgid ": Input the Information for a SSH Restore"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1523
|
||||
#: ../../sysadmclient.rst:1552
|
||||
msgid ""
|
||||
"Once the connection to the backup server succeeds, you will be able to "
|
||||
"select which host to restore. After making your selection, click "
|
||||
@@ -1892,7 +1861,7 @@ msgid ""
|
||||
":guilabel:`Next` to perform the restore."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:987
|
||||
#: ../../sysadmclient.rst:970
|
||||
msgid ""
|
||||
"Once a user has been initialized for PersonaCrypt on the system, their user "
|
||||
"account will no longer be displayed when logging in, **unless** their "
|
||||
@@ -1901,7 +1870,7 @@ msgid ""
|
||||
":numref:`Figure %s <troslogin5>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:997
|
||||
#: ../../sysadmclient.rst:980
|
||||
msgid ": |trueos| Login Screen with PersonaCrypt"
|
||||
msgstr ""
|
||||
|
||||
@@ -1949,7 +1918,7 @@ msgstr ""
|
||||
msgid ": |sysadm| Task Manager"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1103
|
||||
#: ../../sysadmclient.rst:1132
|
||||
msgid ""
|
||||
":numref:`Figure %s <lpreserver1>` shows the :guilabel:`Snapshots` tab on a "
|
||||
"system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"."
|
||||
@@ -2013,6 +1982,134 @@ msgid ""
|
||||
":guilabel:`Save Settings`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:894
|
||||
msgid ""
|
||||
"|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
"PersonaCrypt device is a removable USB media, such as a USB flash drive, "
|
||||
"formatted with ZFS and encrypted with either GELI or PEFS. This device is "
|
||||
"used to hold a specific user's home directory, meaning they can securely "
|
||||
"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 "
|
||||
"or higher system. For example, this can be used to securely access one's "
|
||||
"home directory from a laptop, home computer, and work computer. The device "
|
||||
"is protected by an encryption key and a different (recommended) password "
|
||||
"separate from the user's login password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:916
|
||||
msgid "GELI"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:918
|
||||
msgid ""
|
||||
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
"your passphrase, and the other being a key stored on disk. Without both of "
|
||||
"these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
"the key and manages to get your password, it is still worthless without the "
|
||||
"system it was paired with. GELI is used by default in |trueos| as it is more"
|
||||
" fully featured over PEFS."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:940
|
||||
msgid ""
|
||||
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
"buttons are available in the :guilabel:`PersonaCrypt` tab of "
|
||||
":guilabel:`Advanced Mode`. Note this section is hidden if the currently "
|
||||
"logged in user is selected. Also, if you have just created a user and do not"
|
||||
" see these options, click :guilabel:`Save`, then re-highlight the user to "
|
||||
"display these options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:999
|
||||
msgid "PEFS"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1001
|
||||
msgid ""
|
||||
"`PEFS <http://pefs.io/>`_ stands for Private Encrypted File System. It is "
|
||||
"open source software freely available under the BSD license, and is included"
|
||||
" in |trueos| by default. PEFS runs on top of any existing file system, "
|
||||
"providing an encryption layer independent of the underlying file system. "
|
||||
"PersonaCrypt can be configured to use PEFS in place of GELI, which "
|
||||
"eliminates the need for external media, as the encrypted PEFS database is "
|
||||
"stored on the local disk."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1009
|
||||
msgid ""
|
||||
"While PEFS does not use a USB drive, be sure to print or otherwise backup "
|
||||
"the PEFS generated key fragment stored on the disk."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1012
|
||||
msgid "**Initialize PEFS with the Command Line**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1014
|
||||
msgid ""
|
||||
"Because PEFS does not use a USB drive with its encryption, the user will "
|
||||
"need a password file (pfile) containing the desired password, **before** "
|
||||
"initializing PEFS for a user account. Once this pfile is created, enabling "
|
||||
"PEFS through PersonaCrypt is accomplished in a CLI with "
|
||||
":command:`personacrypt init <username> <pfile> PEFS`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1020
|
||||
msgid ""
|
||||
"For example, the user account **test** has a pfile named "
|
||||
":file:`testpfile.txt`, which contains the single text string of **test's** "
|
||||
"chosen password. Next, the administrator adds PEFS encryption to the "
|
||||
"**test** acount by opening a CLI, logging in as root, and typing:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1029
|
||||
msgid ""
|
||||
"PersonaCrypt will initialize the account **test** with PEFS, using the "
|
||||
"string in :file:`testpfile.txt` as the new password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1032
|
||||
msgid ""
|
||||
"The |sysadm| User Manager can also initialize a user account with PEFS by "
|
||||
"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` "
|
||||
"drop down menu of the :guilabel:`PersonaCrypt` tab."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1036
|
||||
msgid ""
|
||||
"In addition to initializing an account with PEFS, PersonaCrypt also supports"
|
||||
" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt "
|
||||
"export <username>` and :command:`personacrypt import <keyfile>`, "
|
||||
"respectively."
|
||||
msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
|
||||
#~ " with ZFS and encrypted with GELI. This device is used to hold a specific "
|
||||
#~ "user's home directory, meaning they can securely transport and access their "
|
||||
#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
|
||||
#~ "example, this can be used to securely access one's home directory from a "
|
||||
#~ "laptop, home computer, and work computer. The device is protected by an "
|
||||
#~ "encryption key and a password which is, and should be, separate from the "
|
||||
#~ "user's login password."
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
#~ "your passphrase, and the other being a key stored on disk. Without both of "
|
||||
#~ "these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
#~ "the key and manages to get your password, it is still worthless without the "
|
||||
#~ "system it was paired with."
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
|
||||
#~ "Note this section is hidden if the currently logged in user is selected. "
|
||||
#~ "Also, if you have just created a user and do not see these options, click "
|
||||
#~ ":guilabel:`Save` then re-highlight the user to display these options:"
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "**Max Boot Environments:** |trueos| automatically creates a boot environment"
|
||||
#~ " before updating any software, the operating system, or applying a system "
|
||||
|
||||
@@ -482,7 +482,7 @@ msgid ""
|
||||
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <update4>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1326
|
||||
#: ../../sysadmclient.rst:1355
|
||||
msgid "Settings Tab"
|
||||
msgstr ""
|
||||
|
||||
@@ -924,20 +924,7 @@ msgstr ""
|
||||
msgid "PersonaCrypt"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:894
|
||||
msgid ""
|
||||
"|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
"PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
|
||||
" with ZFS and encrypted with GELI. This device is used to hold a specific "
|
||||
"user's home directory, meaning they can securely transport and access their "
|
||||
"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
|
||||
"example, this can be used to securely access one's home directory from a "
|
||||
"laptop, home computer, and work computer. The device is protected by an "
|
||||
"encryption key and a password which is, and should be, separate from the "
|
||||
"user's login password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:904
|
||||
#: ../../sysadmclient.rst:905
|
||||
msgid ""
|
||||
"When a user is configured to use a PersonaCrypt device, that user can not "
|
||||
"login using an unencrypted session on the same system. In other words, the "
|
||||
@@ -946,22 +933,13 @@ msgid ""
|
||||
"different user accounts, one for each type of session."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:911
|
||||
msgid ""
|
||||
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
"your passphrase, and the other being a key stored on disk. Without both of "
|
||||
"these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
"the key and manages to get your password, it is still worthless without the "
|
||||
"system it was paired with."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:917
|
||||
#: ../../sysadmclient.rst:925
|
||||
msgid ""
|
||||
"USB devices do eventually fail. Always backup any important files stored on "
|
||||
"the PersonaCrypt device to another device or system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:920
|
||||
#: ../../sysadmclient.rst:928
|
||||
msgid ""
|
||||
"The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt "
|
||||
"device for any login user, **except** for the currently logged in user. In "
|
||||
@@ -969,13 +947,13 @@ msgid ""
|
||||
"*dlavigne*, has been created and the entry for the user has been clicked."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:939
|
||||
#: ../../sysadmclient.rst:947
|
||||
msgid ""
|
||||
"**Initialize Device:** Used to prepare the USB device which will be used as "
|
||||
"the user's home directory."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:942
|
||||
#: ../../sysadmclient.rst:950
|
||||
msgid ""
|
||||
"**Import Key:** If the user has already created a PersonaCrypt device on "
|
||||
"another |trueos| system, click this button to import a previously saved copy"
|
||||
@@ -983,7 +961,7 @@ msgid ""
|
||||
"can now login to this computer using PersonaCrypt."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:950
|
||||
#: ../../sysadmclient.rst:958
|
||||
msgid ""
|
||||
"Since the USB stick will hold the user's home directory and files, ensure "
|
||||
"the stick is large enough to meet the anticipated storage needs of the home "
|
||||
@@ -993,7 +971,7 @@ msgid ""
|
||||
"logged in."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:999
|
||||
#: ../../sysadmclient.rst:982
|
||||
msgid ""
|
||||
"When stealth sessions have been configured, PersonaCrypt users will still be"
|
||||
" displayed in the login menu, even if their USB device is not inserted. This"
|
||||
@@ -1001,47 +979,47 @@ msgid ""
|
||||
"session."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1004
|
||||
#: ../../sysadmclient.rst:987
|
||||
msgid ""
|
||||
"In the field with the yellow padlock icon, input the password for the user "
|
||||
"account. In the field with the grey USB stick icon, input the password "
|
||||
"associated with the PersonaCrypt device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1008
|
||||
#: ../../sysadmclient.rst:991
|
||||
msgid ""
|
||||
"To prevent data corruption and freezing the system **DO NOT** remove the "
|
||||
"PersonaCrypt device while logged in! Always log out of your session before "
|
||||
"physically removing the device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1016
|
||||
#: ../../sysadmclient.rst:1045
|
||||
msgid "Managing Groups"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1018
|
||||
#: ../../sysadmclient.rst:1047
|
||||
msgid ""
|
||||
"Click the :guilabel:`Groups` tab to view and manage the groups on the "
|
||||
"system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s <user4>`, "
|
||||
"shows the group membership for the *operator* and *wheel* groups:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1029
|
||||
#: ../../sysadmclient.rst:1058
|
||||
msgid "This screen has 2 columns:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1031
|
||||
#: ../../sysadmclient.rst:1060
|
||||
msgid ""
|
||||
"**Members:** Indicates if the highlighted group contains any user accounts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1034
|
||||
#: ../../sysadmclient.rst:1063
|
||||
msgid ""
|
||||
"**Available:** Shows all of the system and user accounts on the system in "
|
||||
"alphabetical order."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1037
|
||||
#: ../../sysadmclient.rst:1066
|
||||
msgid ""
|
||||
"To add an account to a group, highlight the group name, then highlight the "
|
||||
"account name in the :guilabel:`Available` column. Click the left arrow and "
|
||||
@@ -1051,7 +1029,7 @@ msgid ""
|
||||
"added to a group."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1044
|
||||
#: ../../sysadmclient.rst:1073
|
||||
msgid ""
|
||||
"If you add a user to the *operator* group, they will have permission to use "
|
||||
"commands requiring administrative access and will be prompted for their own "
|
||||
@@ -1060,15 +1038,15 @@ msgid ""
|
||||
"will be prompted for the superuser password whenever they use the command."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1051
|
||||
#: ../../sysadmclient.rst:1080
|
||||
msgid "To view all of the groups on the system, click :guilabel:`Advanced`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1057
|
||||
#: ../../sysadmclient.rst:1086
|
||||
msgid "Life Preserver"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1059
|
||||
#: ../../sysadmclient.rst:1088
|
||||
msgid ""
|
||||
"The Life Preserver utility is designed to take full advantage of the "
|
||||
"functionality provided by ZFS snapshots. This utility allows you to schedule"
|
||||
@@ -1077,25 +1055,25 @@ msgid ""
|
||||
"benefits:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1081
|
||||
#: ../../sysadmclient.rst:1110
|
||||
msgid ""
|
||||
"Replication is an efficient way to keep the files on two systems in sync. "
|
||||
"With Life Preserver, the snapshots taken on the |trueos| system will be "
|
||||
"synchronized with their versions stored on the specified backup server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1086
|
||||
#: ../../sysadmclient.rst:1115
|
||||
msgid "Snapshots are sent to the backup server over an encrypted connection."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1088
|
||||
#: ../../sysadmclient.rst:1117
|
||||
msgid ""
|
||||
"Having a copy of the snapshots on another system makes it possible to "
|
||||
"perform an operating system restore should the |trueos| system become "
|
||||
"unusable or to deploy an identical system to different hardware."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1092
|
||||
#: ../../sysadmclient.rst:1121
|
||||
msgid ""
|
||||
"To manage snapshots and replication using the |sysadm| graphical client, go "
|
||||
"to :menuselection:`Utilities --> Life Preserver`. The rest of this section "
|
||||
@@ -1103,16 +1081,16 @@ msgid ""
|
||||
"Preserver."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1101
|
||||
#: ../../sysadmclient.rst:1130
|
||||
msgid "Snapshots Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1112
|
||||
#: ../../sysadmclient.rst:1141
|
||||
msgid ""
|
||||
"This screen will display any created snapshots and provides buttons to:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1114
|
||||
#: ../../sysadmclient.rst:1143
|
||||
msgid ""
|
||||
"**Create:** Used to create a manual snapshot of the specified pool now. For "
|
||||
"example, you could create a snapshot before making changes to an important "
|
||||
@@ -1126,14 +1104,14 @@ msgid ""
|
||||
"snapshot was created."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1125
|
||||
#: ../../sysadmclient.rst:1154
|
||||
msgid ""
|
||||
"**Remove:** Used to delete a highlighted snapshot. **This is a permanent "
|
||||
"change that can not be reversed.** In other words, the versions of files at "
|
||||
"the point in time the snapshot was created will be lost."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1130
|
||||
#: ../../sysadmclient.rst:1159
|
||||
msgid ""
|
||||
"**Revert:** If you highlight a snapshot entry, this button and the drop-down"
|
||||
" menu next to it will activate. You can use the drop-down menu to specify "
|
||||
@@ -1143,11 +1121,11 @@ msgid ""
|
||||
" after the snapshot was taken will be lost."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1142
|
||||
#: ../../sysadmclient.rst:1171
|
||||
msgid "Replication Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1144
|
||||
#: ../../sysadmclient.rst:1173
|
||||
msgid ""
|
||||
"Life Preserver can be configured to replicate snapshots to another system "
|
||||
"over an encrypted SSH connection, though the backup itself is stored in an "
|
||||
@@ -1155,13 +1133,13 @@ msgid ""
|
||||
" another system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1149
|
||||
#: ../../sysadmclient.rst:1178
|
||||
msgid ""
|
||||
"In order to configure replication, the remote system to hold a copy of the "
|
||||
"snapshots must first meet several requirements:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1156
|
||||
#: ../../sysadmclient.rst:1185
|
||||
msgid ""
|
||||
"The backup server **must be formatted with the latest version of ZFS,** also"
|
||||
" known as ZFS feature flags or ZFSv5000. Operating systems that support this"
|
||||
@@ -1169,14 +1147,14 @@ msgid ""
|
||||
"FreeNAS 9.1.x or higher."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1162
|
||||
#: ../../sysadmclient.rst:1191
|
||||
msgid ""
|
||||
"The system must have SSH installed and the SSH service must be running. If "
|
||||
"the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is"
|
||||
" already installed, but you will need to start the SSH service."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1167
|
||||
#: ../../sysadmclient.rst:1196
|
||||
msgid ""
|
||||
"If the backup server is running |trueos| or |pcbsd|, you will need to open "
|
||||
"TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is "
|
||||
@@ -1186,7 +1164,7 @@ msgid ""
|
||||
"backup system, make sure it has a rule to allow SSH."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1175
|
||||
#: ../../sysadmclient.rst:1204
|
||||
msgid ""
|
||||
":numref:`Figure %s <lpreserver2>` shows the initial :guilabel:`Replication` "
|
||||
"tab on a system that has not yet been configured for replication. This "
|
||||
@@ -1194,29 +1172,29 @@ msgid ""
|
||||
"schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1186
|
||||
#: ../../sysadmclient.rst:1215
|
||||
msgid ""
|
||||
"To schedule the replication, click :guilabel:`+` to display the \"Setup "
|
||||
"Replication\" screen shown in :numref:`Figure %s <lpreserver3>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1196
|
||||
#: ../../sysadmclient.rst:1225
|
||||
msgid "Input the following information:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1198
|
||||
#: ../../sysadmclient.rst:1227
|
||||
msgid ""
|
||||
"**Host IP:** The IP address of the remote system to store the replicated "
|
||||
"snapshots."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1201
|
||||
#: ../../sysadmclient.rst:1230
|
||||
msgid ""
|
||||
"**SSH Port:** The port number, if the remote system is running SSH on a port"
|
||||
" other than the default of 22."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1204
|
||||
#: ../../sysadmclient.rst:1233
|
||||
msgid ""
|
||||
"**Dataset:** The name of the ZFS pool and optional dataset on the remote "
|
||||
"system. For example, \"remotetank\" will save the snapshots to a ZFS pool of"
|
||||
@@ -1224,7 +1202,7 @@ msgid ""
|
||||
"existing dataset named \"mybackups\" on the pool named \"remotetank\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1210
|
||||
#: ../../sysadmclient.rst:1239
|
||||
msgid ""
|
||||
"**Frequency:** Use the drop-down menu to select how often to initiate the "
|
||||
"replication. Available choices are :guilabel:`Sync with snapshot` (at the "
|
||||
@@ -1235,87 +1213,87 @@ msgid ""
|
||||
":guilabel:`Start`) in this screen."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1219
|
||||
#: ../../sysadmclient.rst:1248
|
||||
msgid ""
|
||||
"**Username:** The username must already exist on the remote system, have "
|
||||
"write access to the specified \"Dataset\", and have permission to SSH into "
|
||||
"that system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1223
|
||||
#: ../../sysadmclient.rst:1252
|
||||
msgid "**Password:** The password associated with the \"Username\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1225
|
||||
#: ../../sysadmclient.rst:1254
|
||||
msgid ""
|
||||
"**Local DS:** Use the drop-down menu to select the pool or dataset to "
|
||||
"replicate to the remote system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1228
|
||||
#: ../../sysadmclient.rst:1257
|
||||
msgid ""
|
||||
"The buttons at the top of the \"Setup Replication\" screen have several "
|
||||
"uses:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1231
|
||||
#: ../../sysadmclient.rst:1260
|
||||
msgid ""
|
||||
"**+ icon:** Sdd a replication schedule. Multiple schedules are supported, "
|
||||
"meaning you can replicate to multiple systems or replicate different \"Local"
|
||||
" DS\" datasets at different times."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1235
|
||||
#: ../../sysadmclient.rst:1264
|
||||
msgid ""
|
||||
"**- icon:** Remove an already created, and highlighted, replication "
|
||||
"schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1238
|
||||
#: ../../sysadmclient.rst:1267
|
||||
msgid "**gear icon:** Modify the schedule for the highlighted replication."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1240
|
||||
#: ../../sysadmclient.rst:1269
|
||||
msgid ""
|
||||
"**Start:** Manually starts a replication to the system specified in the "
|
||||
"highlighted replication."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1243
|
||||
#: ../../sysadmclient.rst:1272
|
||||
msgid ""
|
||||
"**Initialize:** Deletes the existing replicated snapshots on the remote "
|
||||
"system and starts a new replication. This is useful if a replication gets "
|
||||
"stuck and will not complete."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1251
|
||||
#: ../../sysadmclient.rst:1280
|
||||
msgid "Schedules Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1253
|
||||
#: ../../sysadmclient.rst:1282
|
||||
msgid ""
|
||||
"This tab is used to manage when snapshots of the ZFS pool are created. "
|
||||
"Multiple snapshot schedules are supported if the system has multiple pools."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1257
|
||||
#: ../../sysadmclient.rst:1286
|
||||
msgid ""
|
||||
"Snapshots are created on the entire pool as they are needed when "
|
||||
":ref:`Restoring the Operating System`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1260
|
||||
#: ../../sysadmclient.rst:1289
|
||||
msgid ""
|
||||
"To create a snapshot schedule, click the :guilabel:`camera` icon in the "
|
||||
"lower left corner of this tab. This will activate the \"Setup Snapshot "
|
||||
"Schedule\" pane as seen in :numref:`Figure %s <lpreserver4>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1270
|
||||
#: ../../sysadmclient.rst:1299
|
||||
msgid "This pane contains several options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1275
|
||||
#: ../../sysadmclient.rst:1304
|
||||
msgid ""
|
||||
"**Snapshots to keep:** Snapshots are automatically pruned after the "
|
||||
"specified number of snapshots to prevent snapshots from eventually using up "
|
||||
@@ -1326,7 +1304,7 @@ msgid ""
|
||||
"manually in the :guilabel:`Snapshots` tab."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1284
|
||||
#: ../../sysadmclient.rst:1313
|
||||
msgid ""
|
||||
"**Frequency:** Use the drop-down menu to select how often snapshots occur. "
|
||||
"Options include \"Daily\" (which will allow you to select the time of day), "
|
||||
@@ -1334,37 +1312,37 @@ msgid ""
|
||||
"Minutes\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1289
|
||||
#: ../../sysadmclient.rst:1318
|
||||
msgid ""
|
||||
"Once you have created a snapshot schedule, you can use the \"gear\" icon "
|
||||
"next to the \"camera\" icon to modify the highlighted schedule or the \"X\" "
|
||||
"icon to delete the highlighted schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1300
|
||||
#: ../../sysadmclient.rst:1329
|
||||
msgid ""
|
||||
"To schedule when the scrub occurs, click the third icon from the right which"
|
||||
" will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure "
|
||||
"%s <lpreserver5>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1318
|
||||
#: ../../sysadmclient.rst:1347
|
||||
msgid ""
|
||||
"Once you have created a scrub schedule, you can use the \"gear\" icon next "
|
||||
"to the \"schedule scrub\" icon to modify the highlighted schedule or the "
|
||||
"\"X\" icon to delete the highlighted schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1328
|
||||
#: ../../sysadmclient.rst:1357
|
||||
msgid ""
|
||||
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <lpreserver6>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1337
|
||||
#: ../../sysadmclient.rst:1366
|
||||
msgid "Many settings are configurable:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1339
|
||||
#: ../../sysadmclient.rst:1368
|
||||
msgid ""
|
||||
"**Disk Usage Warning:** Enter a number up to 99 to indicate at which "
|
||||
"percentage of disk space Life Preserver will display an alert in the system "
|
||||
@@ -1372,41 +1350,41 @@ msgid ""
|
||||
"space."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1344
|
||||
#: ../../sysadmclient.rst:1373
|
||||
msgid ""
|
||||
"**Email:** To receive an email when disk usage reaches the percentage "
|
||||
"configured in the \"Disk Usage Warning\", enter an email address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1347
|
||||
#: ../../sysadmclient.rst:1376
|
||||
msgid ""
|
||||
"**Email Trigger:** This setting can be set to \"All\", \"Warn\", or "
|
||||
"\"Error\" and indicates the type of condition which will trigger an email "
|
||||
"message."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1350
|
||||
#: ../../sysadmclient.rst:1379
|
||||
msgid "**Recursive Management:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1352
|
||||
#: ../../sysadmclient.rst:1381
|
||||
msgid ""
|
||||
"If you make any changes in this screen, press :guilabel:`Save Settings` to "
|
||||
"apply them."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1359
|
||||
#: ../../sysadmclient.rst:1388
|
||||
msgid "Using the lpreserver CLI"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1361
|
||||
#: ../../sysadmclient.rst:1390
|
||||
msgid ""
|
||||
"The :command:`lpreserver` command line utility can also be used to manage "
|
||||
"snapshots and replication. This command needs to be run as the superuser. To"
|
||||
" display its usage, type the command without any arguments:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1381
|
||||
#: ../../sysadmclient.rst:1410
|
||||
msgid ""
|
||||
"Each command has its own help text that describes its parameters and "
|
||||
"provides a usage example. For example, to receive help on how to use the "
|
||||
@@ -1417,104 +1395,104 @@ msgstr ""
|
||||
msgid "Command Line and GUI Equivalents"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**Command Line**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**GUI**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**Description**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452
|
||||
#: ../../sysadmclient.rst:1481
|
||||
msgid "**cronsnap**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499
|
||||
msgid "\"Snapshots\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452
|
||||
#: ../../sysadmclient.rst:1481
|
||||
msgid ""
|
||||
"schedule when snapshots occur and how long to keep them; the **stop** option"
|
||||
" can be used to disable snapshot creation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "**cronscrub**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "\"Schedules\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "schedule a ZFS scrub"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459
|
||||
#: ../../sysadmclient.rst:1488
|
||||
msgid "**get**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495
|
||||
msgid "\"Settings\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459
|
||||
#: ../../sysadmclient.rst:1488
|
||||
msgid "list Life Preserver options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid "**replicate**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid "\"Replication\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid ""
|
||||
"used to list, add, and remove backup server; read the **help** for this "
|
||||
"command for examples"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1495
|
||||
msgid "**set**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1495
|
||||
msgid ""
|
||||
"configures Life Preserver options; read **help** for the list of "
|
||||
"configurable options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1499
|
||||
msgid "**snapshot**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1499
|
||||
msgid ""
|
||||
"create and replicate a new ZFS snapshot; by default, snapshots are "
|
||||
"recursive, meaning that a that a snapshot is taken of every dataset within a"
|
||||
" pool"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1476
|
||||
#: ../../sysadmclient.rst:1505
|
||||
msgid "**status**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1476
|
||||
#: ../../sysadmclient.rst:1505
|
||||
msgid "lists the last snapshot name and replication status"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1483
|
||||
#: ../../sysadmclient.rst:1512
|
||||
msgid "Restoring the Operating System"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1485
|
||||
#: ../../sysadmclient.rst:1514
|
||||
msgid ""
|
||||
"If you have replicated the system's snapshots to a remote backup server, you"
|
||||
" can use a |trueos| installation media to perform an operating system "
|
||||
@@ -1522,7 +1500,7 @@ msgid ""
|
||||
"you get to the screen shown in :numref:`Figure %s <restore1>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1497
|
||||
#: ../../sysadmclient.rst:1526
|
||||
msgid ""
|
||||
"Before you can perform a restore, the network interface must be configured. "
|
||||
"Click :guilabel:`Network Connectivity` (second icon from the left) in order "
|
||||
@@ -1533,7 +1511,7 @@ msgid ""
|
||||
"continuing."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1505
|
||||
#: ../../sysadmclient.rst:1534
|
||||
msgid ""
|
||||
"Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and"
|
||||
" :guilabel:`Next`. This will start the Restore Wizard. In the screen shown "
|
||||
@@ -1543,7 +1521,7 @@ msgid ""
|
||||
"number."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1519
|
||||
#: ../../sysadmclient.rst:1548
|
||||
msgid ""
|
||||
"Click :guilabel:`Next` and the wizard will provide a summary of your "
|
||||
"selections. If correct, click :guilabel:`Finish`; otherwise, click "
|
||||
@@ -1626,7 +1604,7 @@ msgid ""
|
||||
"press :guilabel:`Close Ports`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1152
|
||||
#: ../../sysadmclient.rst:1181
|
||||
msgid ""
|
||||
"Snapshots occurring too frequently can introduce errors in replication. To "
|
||||
"avoid errors, ensure snapshots are configured to take place slower than the "
|
||||
@@ -1685,7 +1663,7 @@ msgid ""
|
||||
"accounts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1065
|
||||
#: ../../sysadmclient.rst:1094
|
||||
msgid ""
|
||||
"A snapshot provides a \"point-in-time\" image of the ZFS pool. This is "
|
||||
"similar to a full system backup as the snapshot contains the information for"
|
||||
@@ -1703,26 +1681,26 @@ msgid ""
|
||||
"snapshot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1272
|
||||
#: ../../sysadmclient.rst:1301
|
||||
msgid ""
|
||||
"**Storage Pool:** Select the ZFS storage pool that contains the datasets "
|
||||
"that you wish to snapshot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1293
|
||||
#: ../../sysadmclient.rst:1322
|
||||
msgid ""
|
||||
"This screen can also be used to manage the ZFS scrub schedule. Scrubs are "
|
||||
"recommended as they can provide an early indication of a potential disk "
|
||||
"failure. Scrubs can be scheduled on a per-pool basis."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1297
|
||||
#: ../../sysadmclient.rst:1326
|
||||
msgid ""
|
||||
"If you have multiple pools, be sure to create a scrub schedule for each "
|
||||
"pool."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1310
|
||||
#: ../../sysadmclient.rst:1339
|
||||
msgid ""
|
||||
"Select the pool from the :guilabel:`Storage Pool` drop-down menu, then "
|
||||
"select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", "
|
||||
@@ -1807,26 +1785,17 @@ msgstr ""
|
||||
msgid ": Viewing All Accounts and Their Details"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:930
|
||||
#: ../../sysadmclient.rst:938
|
||||
msgid ": Initialize PersonaCrypt Device"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:932
|
||||
msgid ""
|
||||
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
|
||||
"Note this section is hidden if the currently logged in user is selected. "
|
||||
"Also, if you have just created a user and do not see these options, click "
|
||||
":guilabel:`Save` then re-highlight the user to display these options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:947
|
||||
#: ../../sysadmclient.rst:955
|
||||
msgid ""
|
||||
"To prepare a PersonaCrypt device for this user, insert a USB stick and click"
|
||||
" :guilabel:`Initialize Device`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:957
|
||||
#: ../../sysadmclient.rst:965
|
||||
msgid ""
|
||||
"Type a password to associate with the device. Click :guilabel:`Save` to "
|
||||
"initialize the device. The User Manager may take a moment to prepare the "
|
||||
@@ -1834,49 +1803,49 @@ msgid ""
|
||||
" to allow removal of PersonaCrypt."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1027
|
||||
#: ../../sysadmclient.rst:1056
|
||||
msgid ": Managing Groups Using User Manager"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1110
|
||||
#: ../../sysadmclient.rst:1139
|
||||
msgid ": Snapshot Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1184
|
||||
#: ../../sysadmclient.rst:1213
|
||||
msgid ": Replication Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1194
|
||||
#: ../../sysadmclient.rst:1223
|
||||
msgid ": Scheduling a Replication"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1268
|
||||
#: ../../sysadmclient.rst:1297
|
||||
msgid ": Scheduling a Snapshot"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1308
|
||||
#: ../../sysadmclient.rst:1337
|
||||
msgid ": Scheduling a Scrub"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1335
|
||||
#: ../../sysadmclient.rst:1364
|
||||
msgid ": Life Preserver Settings"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1442
|
||||
#: ../../sysadmclient.rst:1471
|
||||
msgid ""
|
||||
":numref:`Table %s <cmdgui>` shows the command line equivalents to the "
|
||||
"graphical options provided by the Life Preserver GUI."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1495
|
||||
#: ../../sysadmclient.rst:1524
|
||||
msgid ": Selecting to Restore/Clone From Backup"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1517
|
||||
#: ../../sysadmclient.rst:1546
|
||||
msgid ": Input the Information for a SSH Restore"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1523
|
||||
#: ../../sysadmclient.rst:1552
|
||||
msgid ""
|
||||
"Once the connection to the backup server succeeds, you will be able to "
|
||||
"select which host to restore. After making your selection, click "
|
||||
@@ -1892,7 +1861,7 @@ msgid ""
|
||||
":guilabel:`Next` to perform the restore."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:987
|
||||
#: ../../sysadmclient.rst:970
|
||||
msgid ""
|
||||
"Once a user has been initialized for PersonaCrypt on the system, their user "
|
||||
"account will no longer be displayed when logging in, **unless** their "
|
||||
@@ -1901,7 +1870,7 @@ msgid ""
|
||||
":numref:`Figure %s <troslogin5>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:997
|
||||
#: ../../sysadmclient.rst:980
|
||||
msgid ": |trueos| Login Screen with PersonaCrypt"
|
||||
msgstr ""
|
||||
|
||||
@@ -1949,7 +1918,7 @@ msgstr ""
|
||||
msgid ": |sysadm| Task Manager"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1103
|
||||
#: ../../sysadmclient.rst:1132
|
||||
msgid ""
|
||||
":numref:`Figure %s <lpreserver1>` shows the :guilabel:`Snapshots` tab on a "
|
||||
"system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"."
|
||||
@@ -2013,6 +1982,134 @@ msgid ""
|
||||
":guilabel:`Save Settings`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:894
|
||||
msgid ""
|
||||
"|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
"PersonaCrypt device is a removable USB media, such as a USB flash drive, "
|
||||
"formatted with ZFS and encrypted with either GELI or PEFS. This device is "
|
||||
"used to hold a specific user's home directory, meaning they can securely "
|
||||
"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 "
|
||||
"or higher system. For example, this can be used to securely access one's "
|
||||
"home directory from a laptop, home computer, and work computer. The device "
|
||||
"is protected by an encryption key and a different (recommended) password "
|
||||
"separate from the user's login password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:916
|
||||
msgid "GELI"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:918
|
||||
msgid ""
|
||||
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
"your passphrase, and the other being a key stored on disk. Without both of "
|
||||
"these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
"the key and manages to get your password, it is still worthless without the "
|
||||
"system it was paired with. GELI is used by default in |trueos| as it is more"
|
||||
" fully featured over PEFS."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:940
|
||||
msgid ""
|
||||
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
"buttons are available in the :guilabel:`PersonaCrypt` tab of "
|
||||
":guilabel:`Advanced Mode`. Note this section is hidden if the currently "
|
||||
"logged in user is selected. Also, if you have just created a user and do not"
|
||||
" see these options, click :guilabel:`Save`, then re-highlight the user to "
|
||||
"display these options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:999
|
||||
msgid "PEFS"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1001
|
||||
msgid ""
|
||||
"`PEFS <http://pefs.io/>`_ stands for Private Encrypted File System. It is "
|
||||
"open source software freely available under the BSD license, and is included"
|
||||
" in |trueos| by default. PEFS runs on top of any existing file system, "
|
||||
"providing an encryption layer independent of the underlying file system. "
|
||||
"PersonaCrypt can be configured to use PEFS in place of GELI, which "
|
||||
"eliminates the need for external media, as the encrypted PEFS database is "
|
||||
"stored on the local disk."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1009
|
||||
msgid ""
|
||||
"While PEFS does not use a USB drive, be sure to print or otherwise backup "
|
||||
"the PEFS generated key fragment stored on the disk."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1012
|
||||
msgid "**Initialize PEFS with the Command Line**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1014
|
||||
msgid ""
|
||||
"Because PEFS does not use a USB drive with its encryption, the user will "
|
||||
"need a password file (pfile) containing the desired password, **before** "
|
||||
"initializing PEFS for a user account. Once this pfile is created, enabling "
|
||||
"PEFS through PersonaCrypt is accomplished in a CLI with "
|
||||
":command:`personacrypt init <username> <pfile> PEFS`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1020
|
||||
msgid ""
|
||||
"For example, the user account **test** has a pfile named "
|
||||
":file:`testpfile.txt`, which contains the single text string of **test's** "
|
||||
"chosen password. Next, the administrator adds PEFS encryption to the "
|
||||
"**test** acount by opening a CLI, logging in as root, and typing:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1029
|
||||
msgid ""
|
||||
"PersonaCrypt will initialize the account **test** with PEFS, using the "
|
||||
"string in :file:`testpfile.txt` as the new password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1032
|
||||
msgid ""
|
||||
"The |sysadm| User Manager can also initialize a user account with PEFS by "
|
||||
"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` "
|
||||
"drop down menu of the :guilabel:`PersonaCrypt` tab."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1036
|
||||
msgid ""
|
||||
"In addition to initializing an account with PEFS, PersonaCrypt also supports"
|
||||
" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt "
|
||||
"export <username>` and :command:`personacrypt import <keyfile>`, "
|
||||
"respectively."
|
||||
msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
|
||||
#~ " with ZFS and encrypted with GELI. This device is used to hold a specific "
|
||||
#~ "user's home directory, meaning they can securely transport and access their "
|
||||
#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
|
||||
#~ "example, this can be used to securely access one's home directory from a "
|
||||
#~ "laptop, home computer, and work computer. The device is protected by an "
|
||||
#~ "encryption key and a password which is, and should be, separate from the "
|
||||
#~ "user's login password."
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
#~ "your passphrase, and the other being a key stored on disk. Without both of "
|
||||
#~ "these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
#~ "the key and manages to get your password, it is still worthless without the "
|
||||
#~ "system it was paired with."
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
|
||||
#~ "Note this section is hidden if the currently logged in user is selected. "
|
||||
#~ "Also, if you have just created a user and do not see these options, click "
|
||||
#~ ":guilabel:`Save` then re-highlight the user to display these options:"
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "**Max Boot Environments:** |trueos| automatically creates a boot environment"
|
||||
#~ " before updating any software, the operating system, or applying a system "
|
||||
|
||||
@@ -482,7 +482,7 @@ msgid ""
|
||||
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <update4>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1326
|
||||
#: ../../sysadmclient.rst:1355
|
||||
msgid "Settings Tab"
|
||||
msgstr ""
|
||||
|
||||
@@ -924,20 +924,7 @@ msgstr ""
|
||||
msgid "PersonaCrypt"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:894
|
||||
msgid ""
|
||||
"|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
"PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
|
||||
" with ZFS and encrypted with GELI. This device is used to hold a specific "
|
||||
"user's home directory, meaning they can securely transport and access their "
|
||||
"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
|
||||
"example, this can be used to securely access one's home directory from a "
|
||||
"laptop, home computer, and work computer. The device is protected by an "
|
||||
"encryption key and a password which is, and should be, separate from the "
|
||||
"user's login password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:904
|
||||
#: ../../sysadmclient.rst:905
|
||||
msgid ""
|
||||
"When a user is configured to use a PersonaCrypt device, that user can not "
|
||||
"login using an unencrypted session on the same system. In other words, the "
|
||||
@@ -946,22 +933,13 @@ msgid ""
|
||||
"different user accounts, one for each type of session."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:911
|
||||
msgid ""
|
||||
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
"your passphrase, and the other being a key stored on disk. Without both of "
|
||||
"these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
"the key and manages to get your password, it is still worthless without the "
|
||||
"system it was paired with."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:917
|
||||
#: ../../sysadmclient.rst:925
|
||||
msgid ""
|
||||
"USB devices do eventually fail. Always backup any important files stored on "
|
||||
"the PersonaCrypt device to another device or system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:920
|
||||
#: ../../sysadmclient.rst:928
|
||||
msgid ""
|
||||
"The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt "
|
||||
"device for any login user, **except** for the currently logged in user. In "
|
||||
@@ -969,13 +947,13 @@ msgid ""
|
||||
"*dlavigne*, has been created and the entry for the user has been clicked."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:939
|
||||
#: ../../sysadmclient.rst:947
|
||||
msgid ""
|
||||
"**Initialize Device:** Used to prepare the USB device which will be used as "
|
||||
"the user's home directory."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:942
|
||||
#: ../../sysadmclient.rst:950
|
||||
msgid ""
|
||||
"**Import Key:** If the user has already created a PersonaCrypt device on "
|
||||
"another |trueos| system, click this button to import a previously saved copy"
|
||||
@@ -983,7 +961,7 @@ msgid ""
|
||||
"can now login to this computer using PersonaCrypt."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:950
|
||||
#: ../../sysadmclient.rst:958
|
||||
msgid ""
|
||||
"Since the USB stick will hold the user's home directory and files, ensure "
|
||||
"the stick is large enough to meet the anticipated storage needs of the home "
|
||||
@@ -993,7 +971,7 @@ msgid ""
|
||||
"logged in."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:999
|
||||
#: ../../sysadmclient.rst:982
|
||||
msgid ""
|
||||
"When stealth sessions have been configured, PersonaCrypt users will still be"
|
||||
" displayed in the login menu, even if their USB device is not inserted. This"
|
||||
@@ -1001,47 +979,47 @@ msgid ""
|
||||
"session."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1004
|
||||
#: ../../sysadmclient.rst:987
|
||||
msgid ""
|
||||
"In the field with the yellow padlock icon, input the password for the user "
|
||||
"account. In the field with the grey USB stick icon, input the password "
|
||||
"associated with the PersonaCrypt device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1008
|
||||
#: ../../sysadmclient.rst:991
|
||||
msgid ""
|
||||
"To prevent data corruption and freezing the system **DO NOT** remove the "
|
||||
"PersonaCrypt device while logged in! Always log out of your session before "
|
||||
"physically removing the device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1016
|
||||
#: ../../sysadmclient.rst:1045
|
||||
msgid "Managing Groups"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1018
|
||||
#: ../../sysadmclient.rst:1047
|
||||
msgid ""
|
||||
"Click the :guilabel:`Groups` tab to view and manage the groups on the "
|
||||
"system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s <user4>`, "
|
||||
"shows the group membership for the *operator* and *wheel* groups:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1029
|
||||
#: ../../sysadmclient.rst:1058
|
||||
msgid "This screen has 2 columns:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1031
|
||||
#: ../../sysadmclient.rst:1060
|
||||
msgid ""
|
||||
"**Members:** Indicates if the highlighted group contains any user accounts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1034
|
||||
#: ../../sysadmclient.rst:1063
|
||||
msgid ""
|
||||
"**Available:** Shows all of the system and user accounts on the system in "
|
||||
"alphabetical order."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1037
|
||||
#: ../../sysadmclient.rst:1066
|
||||
msgid ""
|
||||
"To add an account to a group, highlight the group name, then highlight the "
|
||||
"account name in the :guilabel:`Available` column. Click the left arrow and "
|
||||
@@ -1051,7 +1029,7 @@ msgid ""
|
||||
"added to a group."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1044
|
||||
#: ../../sysadmclient.rst:1073
|
||||
msgid ""
|
||||
"If you add a user to the *operator* group, they will have permission to use "
|
||||
"commands requiring administrative access and will be prompted for their own "
|
||||
@@ -1060,15 +1038,15 @@ msgid ""
|
||||
"will be prompted for the superuser password whenever they use the command."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1051
|
||||
#: ../../sysadmclient.rst:1080
|
||||
msgid "To view all of the groups on the system, click :guilabel:`Advanced`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1057
|
||||
#: ../../sysadmclient.rst:1086
|
||||
msgid "Life Preserver"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1059
|
||||
#: ../../sysadmclient.rst:1088
|
||||
msgid ""
|
||||
"The Life Preserver utility is designed to take full advantage of the "
|
||||
"functionality provided by ZFS snapshots. This utility allows you to schedule"
|
||||
@@ -1077,25 +1055,25 @@ msgid ""
|
||||
"benefits:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1081
|
||||
#: ../../sysadmclient.rst:1110
|
||||
msgid ""
|
||||
"Replication is an efficient way to keep the files on two systems in sync. "
|
||||
"With Life Preserver, the snapshots taken on the |trueos| system will be "
|
||||
"synchronized with their versions stored on the specified backup server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1086
|
||||
#: ../../sysadmclient.rst:1115
|
||||
msgid "Snapshots are sent to the backup server over an encrypted connection."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1088
|
||||
#: ../../sysadmclient.rst:1117
|
||||
msgid ""
|
||||
"Having a copy of the snapshots on another system makes it possible to "
|
||||
"perform an operating system restore should the |trueos| system become "
|
||||
"unusable or to deploy an identical system to different hardware."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1092
|
||||
#: ../../sysadmclient.rst:1121
|
||||
msgid ""
|
||||
"To manage snapshots and replication using the |sysadm| graphical client, go "
|
||||
"to :menuselection:`Utilities --> Life Preserver`. The rest of this section "
|
||||
@@ -1103,16 +1081,16 @@ msgid ""
|
||||
"Preserver."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1101
|
||||
#: ../../sysadmclient.rst:1130
|
||||
msgid "Snapshots Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1112
|
||||
#: ../../sysadmclient.rst:1141
|
||||
msgid ""
|
||||
"This screen will display any created snapshots and provides buttons to:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1114
|
||||
#: ../../sysadmclient.rst:1143
|
||||
msgid ""
|
||||
"**Create:** Used to create a manual snapshot of the specified pool now. For "
|
||||
"example, you could create a snapshot before making changes to an important "
|
||||
@@ -1126,14 +1104,14 @@ msgid ""
|
||||
"snapshot was created."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1125
|
||||
#: ../../sysadmclient.rst:1154
|
||||
msgid ""
|
||||
"**Remove:** Used to delete a highlighted snapshot. **This is a permanent "
|
||||
"change that can not be reversed.** In other words, the versions of files at "
|
||||
"the point in time the snapshot was created will be lost."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1130
|
||||
#: ../../sysadmclient.rst:1159
|
||||
msgid ""
|
||||
"**Revert:** If you highlight a snapshot entry, this button and the drop-down"
|
||||
" menu next to it will activate. You can use the drop-down menu to specify "
|
||||
@@ -1143,11 +1121,11 @@ msgid ""
|
||||
" after the snapshot was taken will be lost."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1142
|
||||
#: ../../sysadmclient.rst:1171
|
||||
msgid "Replication Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1144
|
||||
#: ../../sysadmclient.rst:1173
|
||||
msgid ""
|
||||
"Life Preserver can be configured to replicate snapshots to another system "
|
||||
"over an encrypted SSH connection, though the backup itself is stored in an "
|
||||
@@ -1155,13 +1133,13 @@ msgid ""
|
||||
" another system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1149
|
||||
#: ../../sysadmclient.rst:1178
|
||||
msgid ""
|
||||
"In order to configure replication, the remote system to hold a copy of the "
|
||||
"snapshots must first meet several requirements:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1156
|
||||
#: ../../sysadmclient.rst:1185
|
||||
msgid ""
|
||||
"The backup server **must be formatted with the latest version of ZFS,** also"
|
||||
" known as ZFS feature flags or ZFSv5000. Operating systems that support this"
|
||||
@@ -1169,14 +1147,14 @@ msgid ""
|
||||
"FreeNAS 9.1.x or higher."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1162
|
||||
#: ../../sysadmclient.rst:1191
|
||||
msgid ""
|
||||
"The system must have SSH installed and the SSH service must be running. If "
|
||||
"the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is"
|
||||
" already installed, but you will need to start the SSH service."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1167
|
||||
#: ../../sysadmclient.rst:1196
|
||||
msgid ""
|
||||
"If the backup server is running |trueos| or |pcbsd|, you will need to open "
|
||||
"TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is "
|
||||
@@ -1186,7 +1164,7 @@ msgid ""
|
||||
"backup system, make sure it has a rule to allow SSH."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1175
|
||||
#: ../../sysadmclient.rst:1204
|
||||
msgid ""
|
||||
":numref:`Figure %s <lpreserver2>` shows the initial :guilabel:`Replication` "
|
||||
"tab on a system that has not yet been configured for replication. This "
|
||||
@@ -1194,29 +1172,29 @@ msgid ""
|
||||
"schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1186
|
||||
#: ../../sysadmclient.rst:1215
|
||||
msgid ""
|
||||
"To schedule the replication, click :guilabel:`+` to display the \"Setup "
|
||||
"Replication\" screen shown in :numref:`Figure %s <lpreserver3>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1196
|
||||
#: ../../sysadmclient.rst:1225
|
||||
msgid "Input the following information:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1198
|
||||
#: ../../sysadmclient.rst:1227
|
||||
msgid ""
|
||||
"**Host IP:** The IP address of the remote system to store the replicated "
|
||||
"snapshots."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1201
|
||||
#: ../../sysadmclient.rst:1230
|
||||
msgid ""
|
||||
"**SSH Port:** The port number, if the remote system is running SSH on a port"
|
||||
" other than the default of 22."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1204
|
||||
#: ../../sysadmclient.rst:1233
|
||||
msgid ""
|
||||
"**Dataset:** The name of the ZFS pool and optional dataset on the remote "
|
||||
"system. For example, \"remotetank\" will save the snapshots to a ZFS pool of"
|
||||
@@ -1224,7 +1202,7 @@ msgid ""
|
||||
"existing dataset named \"mybackups\" on the pool named \"remotetank\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1210
|
||||
#: ../../sysadmclient.rst:1239
|
||||
msgid ""
|
||||
"**Frequency:** Use the drop-down menu to select how often to initiate the "
|
||||
"replication. Available choices are :guilabel:`Sync with snapshot` (at the "
|
||||
@@ -1235,87 +1213,87 @@ msgid ""
|
||||
":guilabel:`Start`) in this screen."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1219
|
||||
#: ../../sysadmclient.rst:1248
|
||||
msgid ""
|
||||
"**Username:** The username must already exist on the remote system, have "
|
||||
"write access to the specified \"Dataset\", and have permission to SSH into "
|
||||
"that system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1223
|
||||
#: ../../sysadmclient.rst:1252
|
||||
msgid "**Password:** The password associated with the \"Username\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1225
|
||||
#: ../../sysadmclient.rst:1254
|
||||
msgid ""
|
||||
"**Local DS:** Use the drop-down menu to select the pool or dataset to "
|
||||
"replicate to the remote system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1228
|
||||
#: ../../sysadmclient.rst:1257
|
||||
msgid ""
|
||||
"The buttons at the top of the \"Setup Replication\" screen have several "
|
||||
"uses:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1231
|
||||
#: ../../sysadmclient.rst:1260
|
||||
msgid ""
|
||||
"**+ icon:** Sdd a replication schedule. Multiple schedules are supported, "
|
||||
"meaning you can replicate to multiple systems or replicate different \"Local"
|
||||
" DS\" datasets at different times."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1235
|
||||
#: ../../sysadmclient.rst:1264
|
||||
msgid ""
|
||||
"**- icon:** Remove an already created, and highlighted, replication "
|
||||
"schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1238
|
||||
#: ../../sysadmclient.rst:1267
|
||||
msgid "**gear icon:** Modify the schedule for the highlighted replication."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1240
|
||||
#: ../../sysadmclient.rst:1269
|
||||
msgid ""
|
||||
"**Start:** Manually starts a replication to the system specified in the "
|
||||
"highlighted replication."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1243
|
||||
#: ../../sysadmclient.rst:1272
|
||||
msgid ""
|
||||
"**Initialize:** Deletes the existing replicated snapshots on the remote "
|
||||
"system and starts a new replication. This is useful if a replication gets "
|
||||
"stuck and will not complete."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1251
|
||||
#: ../../sysadmclient.rst:1280
|
||||
msgid "Schedules Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1253
|
||||
#: ../../sysadmclient.rst:1282
|
||||
msgid ""
|
||||
"This tab is used to manage when snapshots of the ZFS pool are created. "
|
||||
"Multiple snapshot schedules are supported if the system has multiple pools."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1257
|
||||
#: ../../sysadmclient.rst:1286
|
||||
msgid ""
|
||||
"Snapshots are created on the entire pool as they are needed when "
|
||||
":ref:`Restoring the Operating System`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1260
|
||||
#: ../../sysadmclient.rst:1289
|
||||
msgid ""
|
||||
"To create a snapshot schedule, click the :guilabel:`camera` icon in the "
|
||||
"lower left corner of this tab. This will activate the \"Setup Snapshot "
|
||||
"Schedule\" pane as seen in :numref:`Figure %s <lpreserver4>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1270
|
||||
#: ../../sysadmclient.rst:1299
|
||||
msgid "This pane contains several options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1275
|
||||
#: ../../sysadmclient.rst:1304
|
||||
msgid ""
|
||||
"**Snapshots to keep:** Snapshots are automatically pruned after the "
|
||||
"specified number of snapshots to prevent snapshots from eventually using up "
|
||||
@@ -1326,7 +1304,7 @@ msgid ""
|
||||
"manually in the :guilabel:`Snapshots` tab."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1284
|
||||
#: ../../sysadmclient.rst:1313
|
||||
msgid ""
|
||||
"**Frequency:** Use the drop-down menu to select how often snapshots occur. "
|
||||
"Options include \"Daily\" (which will allow you to select the time of day), "
|
||||
@@ -1334,37 +1312,37 @@ msgid ""
|
||||
"Minutes\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1289
|
||||
#: ../../sysadmclient.rst:1318
|
||||
msgid ""
|
||||
"Once you have created a snapshot schedule, you can use the \"gear\" icon "
|
||||
"next to the \"camera\" icon to modify the highlighted schedule or the \"X\" "
|
||||
"icon to delete the highlighted schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1300
|
||||
#: ../../sysadmclient.rst:1329
|
||||
msgid ""
|
||||
"To schedule when the scrub occurs, click the third icon from the right which"
|
||||
" will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure "
|
||||
"%s <lpreserver5>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1318
|
||||
#: ../../sysadmclient.rst:1347
|
||||
msgid ""
|
||||
"Once you have created a scrub schedule, you can use the \"gear\" icon next "
|
||||
"to the \"schedule scrub\" icon to modify the highlighted schedule or the "
|
||||
"\"X\" icon to delete the highlighted schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1328
|
||||
#: ../../sysadmclient.rst:1357
|
||||
msgid ""
|
||||
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <lpreserver6>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1337
|
||||
#: ../../sysadmclient.rst:1366
|
||||
msgid "Many settings are configurable:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1339
|
||||
#: ../../sysadmclient.rst:1368
|
||||
msgid ""
|
||||
"**Disk Usage Warning:** Enter a number up to 99 to indicate at which "
|
||||
"percentage of disk space Life Preserver will display an alert in the system "
|
||||
@@ -1372,41 +1350,41 @@ msgid ""
|
||||
"space."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1344
|
||||
#: ../../sysadmclient.rst:1373
|
||||
msgid ""
|
||||
"**Email:** To receive an email when disk usage reaches the percentage "
|
||||
"configured in the \"Disk Usage Warning\", enter an email address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1347
|
||||
#: ../../sysadmclient.rst:1376
|
||||
msgid ""
|
||||
"**Email Trigger:** This setting can be set to \"All\", \"Warn\", or "
|
||||
"\"Error\" and indicates the type of condition which will trigger an email "
|
||||
"message."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1350
|
||||
#: ../../sysadmclient.rst:1379
|
||||
msgid "**Recursive Management:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1352
|
||||
#: ../../sysadmclient.rst:1381
|
||||
msgid ""
|
||||
"If you make any changes in this screen, press :guilabel:`Save Settings` to "
|
||||
"apply them."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1359
|
||||
#: ../../sysadmclient.rst:1388
|
||||
msgid "Using the lpreserver CLI"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1361
|
||||
#: ../../sysadmclient.rst:1390
|
||||
msgid ""
|
||||
"The :command:`lpreserver` command line utility can also be used to manage "
|
||||
"snapshots and replication. This command needs to be run as the superuser. To"
|
||||
" display its usage, type the command without any arguments:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1381
|
||||
#: ../../sysadmclient.rst:1410
|
||||
msgid ""
|
||||
"Each command has its own help text that describes its parameters and "
|
||||
"provides a usage example. For example, to receive help on how to use the "
|
||||
@@ -1417,104 +1395,104 @@ msgstr ""
|
||||
msgid "Command Line and GUI Equivalents"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**Command Line**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**GUI**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**Description**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452
|
||||
#: ../../sysadmclient.rst:1481
|
||||
msgid "**cronsnap**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499
|
||||
msgid "\"Snapshots\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452
|
||||
#: ../../sysadmclient.rst:1481
|
||||
msgid ""
|
||||
"schedule when snapshots occur and how long to keep them; the **stop** option"
|
||||
" can be used to disable snapshot creation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "**cronscrub**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "\"Schedules\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "schedule a ZFS scrub"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459
|
||||
#: ../../sysadmclient.rst:1488
|
||||
msgid "**get**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495
|
||||
msgid "\"Settings\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459
|
||||
#: ../../sysadmclient.rst:1488
|
||||
msgid "list Life Preserver options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid "**replicate**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid "\"Replication\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid ""
|
||||
"used to list, add, and remove backup server; read the **help** for this "
|
||||
"command for examples"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1495
|
||||
msgid "**set**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1495
|
||||
msgid ""
|
||||
"configures Life Preserver options; read **help** for the list of "
|
||||
"configurable options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1499
|
||||
msgid "**snapshot**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1499
|
||||
msgid ""
|
||||
"create and replicate a new ZFS snapshot; by default, snapshots are "
|
||||
"recursive, meaning that a that a snapshot is taken of every dataset within a"
|
||||
" pool"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1476
|
||||
#: ../../sysadmclient.rst:1505
|
||||
msgid "**status**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1476
|
||||
#: ../../sysadmclient.rst:1505
|
||||
msgid "lists the last snapshot name and replication status"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1483
|
||||
#: ../../sysadmclient.rst:1512
|
||||
msgid "Restoring the Operating System"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1485
|
||||
#: ../../sysadmclient.rst:1514
|
||||
msgid ""
|
||||
"If you have replicated the system's snapshots to a remote backup server, you"
|
||||
" can use a |trueos| installation media to perform an operating system "
|
||||
@@ -1522,7 +1500,7 @@ msgid ""
|
||||
"you get to the screen shown in :numref:`Figure %s <restore1>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1497
|
||||
#: ../../sysadmclient.rst:1526
|
||||
msgid ""
|
||||
"Before you can perform a restore, the network interface must be configured. "
|
||||
"Click :guilabel:`Network Connectivity` (second icon from the left) in order "
|
||||
@@ -1533,7 +1511,7 @@ msgid ""
|
||||
"continuing."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1505
|
||||
#: ../../sysadmclient.rst:1534
|
||||
msgid ""
|
||||
"Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and"
|
||||
" :guilabel:`Next`. This will start the Restore Wizard. In the screen shown "
|
||||
@@ -1543,7 +1521,7 @@ msgid ""
|
||||
"number."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1519
|
||||
#: ../../sysadmclient.rst:1548
|
||||
msgid ""
|
||||
"Click :guilabel:`Next` and the wizard will provide a summary of your "
|
||||
"selections. If correct, click :guilabel:`Finish`; otherwise, click "
|
||||
@@ -1626,7 +1604,7 @@ msgid ""
|
||||
"press :guilabel:`Close Ports`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1152
|
||||
#: ../../sysadmclient.rst:1181
|
||||
msgid ""
|
||||
"Snapshots occurring too frequently can introduce errors in replication. To "
|
||||
"avoid errors, ensure snapshots are configured to take place slower than the "
|
||||
@@ -1685,7 +1663,7 @@ msgid ""
|
||||
"accounts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1065
|
||||
#: ../../sysadmclient.rst:1094
|
||||
msgid ""
|
||||
"A snapshot provides a \"point-in-time\" image of the ZFS pool. This is "
|
||||
"similar to a full system backup as the snapshot contains the information for"
|
||||
@@ -1703,26 +1681,26 @@ msgid ""
|
||||
"snapshot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1272
|
||||
#: ../../sysadmclient.rst:1301
|
||||
msgid ""
|
||||
"**Storage Pool:** Select the ZFS storage pool that contains the datasets "
|
||||
"that you wish to snapshot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1293
|
||||
#: ../../sysadmclient.rst:1322
|
||||
msgid ""
|
||||
"This screen can also be used to manage the ZFS scrub schedule. Scrubs are "
|
||||
"recommended as they can provide an early indication of a potential disk "
|
||||
"failure. Scrubs can be scheduled on a per-pool basis."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1297
|
||||
#: ../../sysadmclient.rst:1326
|
||||
msgid ""
|
||||
"If you have multiple pools, be sure to create a scrub schedule for each "
|
||||
"pool."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1310
|
||||
#: ../../sysadmclient.rst:1339
|
||||
msgid ""
|
||||
"Select the pool from the :guilabel:`Storage Pool` drop-down menu, then "
|
||||
"select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", "
|
||||
@@ -1807,26 +1785,17 @@ msgstr ""
|
||||
msgid ": Viewing All Accounts and Their Details"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:930
|
||||
#: ../../sysadmclient.rst:938
|
||||
msgid ": Initialize PersonaCrypt Device"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:932
|
||||
msgid ""
|
||||
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
|
||||
"Note this section is hidden if the currently logged in user is selected. "
|
||||
"Also, if you have just created a user and do not see these options, click "
|
||||
":guilabel:`Save` then re-highlight the user to display these options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:947
|
||||
#: ../../sysadmclient.rst:955
|
||||
msgid ""
|
||||
"To prepare a PersonaCrypt device for this user, insert a USB stick and click"
|
||||
" :guilabel:`Initialize Device`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:957
|
||||
#: ../../sysadmclient.rst:965
|
||||
msgid ""
|
||||
"Type a password to associate with the device. Click :guilabel:`Save` to "
|
||||
"initialize the device. The User Manager may take a moment to prepare the "
|
||||
@@ -1834,49 +1803,49 @@ msgid ""
|
||||
" to allow removal of PersonaCrypt."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1027
|
||||
#: ../../sysadmclient.rst:1056
|
||||
msgid ": Managing Groups Using User Manager"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1110
|
||||
#: ../../sysadmclient.rst:1139
|
||||
msgid ": Snapshot Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1184
|
||||
#: ../../sysadmclient.rst:1213
|
||||
msgid ": Replication Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1194
|
||||
#: ../../sysadmclient.rst:1223
|
||||
msgid ": Scheduling a Replication"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1268
|
||||
#: ../../sysadmclient.rst:1297
|
||||
msgid ": Scheduling a Snapshot"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1308
|
||||
#: ../../sysadmclient.rst:1337
|
||||
msgid ": Scheduling a Scrub"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1335
|
||||
#: ../../sysadmclient.rst:1364
|
||||
msgid ": Life Preserver Settings"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1442
|
||||
#: ../../sysadmclient.rst:1471
|
||||
msgid ""
|
||||
":numref:`Table %s <cmdgui>` shows the command line equivalents to the "
|
||||
"graphical options provided by the Life Preserver GUI."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1495
|
||||
#: ../../sysadmclient.rst:1524
|
||||
msgid ": Selecting to Restore/Clone From Backup"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1517
|
||||
#: ../../sysadmclient.rst:1546
|
||||
msgid ": Input the Information for a SSH Restore"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1523
|
||||
#: ../../sysadmclient.rst:1552
|
||||
msgid ""
|
||||
"Once the connection to the backup server succeeds, you will be able to "
|
||||
"select which host to restore. After making your selection, click "
|
||||
@@ -1892,7 +1861,7 @@ msgid ""
|
||||
":guilabel:`Next` to perform the restore."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:987
|
||||
#: ../../sysadmclient.rst:970
|
||||
msgid ""
|
||||
"Once a user has been initialized for PersonaCrypt on the system, their user "
|
||||
"account will no longer be displayed when logging in, **unless** their "
|
||||
@@ -1901,7 +1870,7 @@ msgid ""
|
||||
":numref:`Figure %s <troslogin5>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:997
|
||||
#: ../../sysadmclient.rst:980
|
||||
msgid ": |trueos| Login Screen with PersonaCrypt"
|
||||
msgstr ""
|
||||
|
||||
@@ -1949,7 +1918,7 @@ msgstr ""
|
||||
msgid ": |sysadm| Task Manager"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1103
|
||||
#: ../../sysadmclient.rst:1132
|
||||
msgid ""
|
||||
":numref:`Figure %s <lpreserver1>` shows the :guilabel:`Snapshots` tab on a "
|
||||
"system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"."
|
||||
@@ -2013,6 +1982,134 @@ msgid ""
|
||||
":guilabel:`Save Settings`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:894
|
||||
msgid ""
|
||||
"|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
"PersonaCrypt device is a removable USB media, such as a USB flash drive, "
|
||||
"formatted with ZFS and encrypted with either GELI or PEFS. This device is "
|
||||
"used to hold a specific user's home directory, meaning they can securely "
|
||||
"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 "
|
||||
"or higher system. For example, this can be used to securely access one's "
|
||||
"home directory from a laptop, home computer, and work computer. The device "
|
||||
"is protected by an encryption key and a different (recommended) password "
|
||||
"separate from the user's login password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:916
|
||||
msgid "GELI"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:918
|
||||
msgid ""
|
||||
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
"your passphrase, and the other being a key stored on disk. Without both of "
|
||||
"these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
"the key and manages to get your password, it is still worthless without the "
|
||||
"system it was paired with. GELI is used by default in |trueos| as it is more"
|
||||
" fully featured over PEFS."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:940
|
||||
msgid ""
|
||||
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
"buttons are available in the :guilabel:`PersonaCrypt` tab of "
|
||||
":guilabel:`Advanced Mode`. Note this section is hidden if the currently "
|
||||
"logged in user is selected. Also, if you have just created a user and do not"
|
||||
" see these options, click :guilabel:`Save`, then re-highlight the user to "
|
||||
"display these options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:999
|
||||
msgid "PEFS"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1001
|
||||
msgid ""
|
||||
"`PEFS <http://pefs.io/>`_ stands for Private Encrypted File System. It is "
|
||||
"open source software freely available under the BSD license, and is included"
|
||||
" in |trueos| by default. PEFS runs on top of any existing file system, "
|
||||
"providing an encryption layer independent of the underlying file system. "
|
||||
"PersonaCrypt can be configured to use PEFS in place of GELI, which "
|
||||
"eliminates the need for external media, as the encrypted PEFS database is "
|
||||
"stored on the local disk."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1009
|
||||
msgid ""
|
||||
"While PEFS does not use a USB drive, be sure to print or otherwise backup "
|
||||
"the PEFS generated key fragment stored on the disk."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1012
|
||||
msgid "**Initialize PEFS with the Command Line**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1014
|
||||
msgid ""
|
||||
"Because PEFS does not use a USB drive with its encryption, the user will "
|
||||
"need a password file (pfile) containing the desired password, **before** "
|
||||
"initializing PEFS for a user account. Once this pfile is created, enabling "
|
||||
"PEFS through PersonaCrypt is accomplished in a CLI with "
|
||||
":command:`personacrypt init <username> <pfile> PEFS`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1020
|
||||
msgid ""
|
||||
"For example, the user account **test** has a pfile named "
|
||||
":file:`testpfile.txt`, which contains the single text string of **test's** "
|
||||
"chosen password. Next, the administrator adds PEFS encryption to the "
|
||||
"**test** acount by opening a CLI, logging in as root, and typing:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1029
|
||||
msgid ""
|
||||
"PersonaCrypt will initialize the account **test** with PEFS, using the "
|
||||
"string in :file:`testpfile.txt` as the new password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1032
|
||||
msgid ""
|
||||
"The |sysadm| User Manager can also initialize a user account with PEFS by "
|
||||
"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` "
|
||||
"drop down menu of the :guilabel:`PersonaCrypt` tab."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1036
|
||||
msgid ""
|
||||
"In addition to initializing an account with PEFS, PersonaCrypt also supports"
|
||||
" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt "
|
||||
"export <username>` and :command:`personacrypt import <keyfile>`, "
|
||||
"respectively."
|
||||
msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
|
||||
#~ " with ZFS and encrypted with GELI. This device is used to hold a specific "
|
||||
#~ "user's home directory, meaning they can securely transport and access their "
|
||||
#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
|
||||
#~ "example, this can be used to securely access one's home directory from a "
|
||||
#~ "laptop, home computer, and work computer. The device is protected by an "
|
||||
#~ "encryption key and a password which is, and should be, separate from the "
|
||||
#~ "user's login password."
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
#~ "your passphrase, and the other being a key stored on disk. Without both of "
|
||||
#~ "these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
#~ "the key and manages to get your password, it is still worthless without the "
|
||||
#~ "system it was paired with."
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
|
||||
#~ "Note this section is hidden if the currently logged in user is selected. "
|
||||
#~ "Also, if you have just created a user and do not see these options, click "
|
||||
#~ ":guilabel:`Save` then re-highlight the user to display these options:"
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "**Max Boot Environments:** |trueos| automatically creates a boot environment"
|
||||
#~ " before updating any software, the operating system, or applying a system "
|
||||
|
||||
@@ -482,7 +482,7 @@ msgid ""
|
||||
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <update4>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1326
|
||||
#: ../../sysadmclient.rst:1355
|
||||
msgid "Settings Tab"
|
||||
msgstr ""
|
||||
|
||||
@@ -924,20 +924,7 @@ msgstr ""
|
||||
msgid "PersonaCrypt"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:894
|
||||
msgid ""
|
||||
"|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
"PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
|
||||
" with ZFS and encrypted with GELI. This device is used to hold a specific "
|
||||
"user's home directory, meaning they can securely transport and access their "
|
||||
"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
|
||||
"example, this can be used to securely access one's home directory from a "
|
||||
"laptop, home computer, and work computer. The device is protected by an "
|
||||
"encryption key and a password which is, and should be, separate from the "
|
||||
"user's login password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:904
|
||||
#: ../../sysadmclient.rst:905
|
||||
msgid ""
|
||||
"When a user is configured to use a PersonaCrypt device, that user can not "
|
||||
"login using an unencrypted session on the same system. In other words, the "
|
||||
@@ -946,22 +933,13 @@ msgid ""
|
||||
"different user accounts, one for each type of session."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:911
|
||||
msgid ""
|
||||
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
"your passphrase, and the other being a key stored on disk. Without both of "
|
||||
"these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
"the key and manages to get your password, it is still worthless without the "
|
||||
"system it was paired with."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:917
|
||||
#: ../../sysadmclient.rst:925
|
||||
msgid ""
|
||||
"USB devices do eventually fail. Always backup any important files stored on "
|
||||
"the PersonaCrypt device to another device or system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:920
|
||||
#: ../../sysadmclient.rst:928
|
||||
msgid ""
|
||||
"The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt "
|
||||
"device for any login user, **except** for the currently logged in user. In "
|
||||
@@ -969,13 +947,13 @@ msgid ""
|
||||
"*dlavigne*, has been created and the entry for the user has been clicked."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:939
|
||||
#: ../../sysadmclient.rst:947
|
||||
msgid ""
|
||||
"**Initialize Device:** Used to prepare the USB device which will be used as "
|
||||
"the user's home directory."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:942
|
||||
#: ../../sysadmclient.rst:950
|
||||
msgid ""
|
||||
"**Import Key:** If the user has already created a PersonaCrypt device on "
|
||||
"another |trueos| system, click this button to import a previously saved copy"
|
||||
@@ -983,7 +961,7 @@ msgid ""
|
||||
"can now login to this computer using PersonaCrypt."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:950
|
||||
#: ../../sysadmclient.rst:958
|
||||
msgid ""
|
||||
"Since the USB stick will hold the user's home directory and files, ensure "
|
||||
"the stick is large enough to meet the anticipated storage needs of the home "
|
||||
@@ -993,7 +971,7 @@ msgid ""
|
||||
"logged in."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:999
|
||||
#: ../../sysadmclient.rst:982
|
||||
msgid ""
|
||||
"When stealth sessions have been configured, PersonaCrypt users will still be"
|
||||
" displayed in the login menu, even if their USB device is not inserted. This"
|
||||
@@ -1001,47 +979,47 @@ msgid ""
|
||||
"session."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1004
|
||||
#: ../../sysadmclient.rst:987
|
||||
msgid ""
|
||||
"In the field with the yellow padlock icon, input the password for the user "
|
||||
"account. In the field with the grey USB stick icon, input the password "
|
||||
"associated with the PersonaCrypt device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1008
|
||||
#: ../../sysadmclient.rst:991
|
||||
msgid ""
|
||||
"To prevent data corruption and freezing the system **DO NOT** remove the "
|
||||
"PersonaCrypt device while logged in! Always log out of your session before "
|
||||
"physically removing the device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1016
|
||||
#: ../../sysadmclient.rst:1045
|
||||
msgid "Managing Groups"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1018
|
||||
#: ../../sysadmclient.rst:1047
|
||||
msgid ""
|
||||
"Click the :guilabel:`Groups` tab to view and manage the groups on the "
|
||||
"system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s <user4>`, "
|
||||
"shows the group membership for the *operator* and *wheel* groups:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1029
|
||||
#: ../../sysadmclient.rst:1058
|
||||
msgid "This screen has 2 columns:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1031
|
||||
#: ../../sysadmclient.rst:1060
|
||||
msgid ""
|
||||
"**Members:** Indicates if the highlighted group contains any user accounts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1034
|
||||
#: ../../sysadmclient.rst:1063
|
||||
msgid ""
|
||||
"**Available:** Shows all of the system and user accounts on the system in "
|
||||
"alphabetical order."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1037
|
||||
#: ../../sysadmclient.rst:1066
|
||||
msgid ""
|
||||
"To add an account to a group, highlight the group name, then highlight the "
|
||||
"account name in the :guilabel:`Available` column. Click the left arrow and "
|
||||
@@ -1051,7 +1029,7 @@ msgid ""
|
||||
"added to a group."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1044
|
||||
#: ../../sysadmclient.rst:1073
|
||||
msgid ""
|
||||
"If you add a user to the *operator* group, they will have permission to use "
|
||||
"commands requiring administrative access and will be prompted for their own "
|
||||
@@ -1060,15 +1038,15 @@ msgid ""
|
||||
"will be prompted for the superuser password whenever they use the command."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1051
|
||||
#: ../../sysadmclient.rst:1080
|
||||
msgid "To view all of the groups on the system, click :guilabel:`Advanced`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1057
|
||||
#: ../../sysadmclient.rst:1086
|
||||
msgid "Life Preserver"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1059
|
||||
#: ../../sysadmclient.rst:1088
|
||||
msgid ""
|
||||
"The Life Preserver utility is designed to take full advantage of the "
|
||||
"functionality provided by ZFS snapshots. This utility allows you to schedule"
|
||||
@@ -1077,25 +1055,25 @@ msgid ""
|
||||
"benefits:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1081
|
||||
#: ../../sysadmclient.rst:1110
|
||||
msgid ""
|
||||
"Replication is an efficient way to keep the files on two systems in sync. "
|
||||
"With Life Preserver, the snapshots taken on the |trueos| system will be "
|
||||
"synchronized with their versions stored on the specified backup server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1086
|
||||
#: ../../sysadmclient.rst:1115
|
||||
msgid "Snapshots are sent to the backup server over an encrypted connection."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1088
|
||||
#: ../../sysadmclient.rst:1117
|
||||
msgid ""
|
||||
"Having a copy of the snapshots on another system makes it possible to "
|
||||
"perform an operating system restore should the |trueos| system become "
|
||||
"unusable or to deploy an identical system to different hardware."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1092
|
||||
#: ../../sysadmclient.rst:1121
|
||||
msgid ""
|
||||
"To manage snapshots and replication using the |sysadm| graphical client, go "
|
||||
"to :menuselection:`Utilities --> Life Preserver`. The rest of this section "
|
||||
@@ -1103,16 +1081,16 @@ msgid ""
|
||||
"Preserver."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1101
|
||||
#: ../../sysadmclient.rst:1130
|
||||
msgid "Snapshots Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1112
|
||||
#: ../../sysadmclient.rst:1141
|
||||
msgid ""
|
||||
"This screen will display any created snapshots and provides buttons to:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1114
|
||||
#: ../../sysadmclient.rst:1143
|
||||
msgid ""
|
||||
"**Create:** Used to create a manual snapshot of the specified pool now. For "
|
||||
"example, you could create a snapshot before making changes to an important "
|
||||
@@ -1126,14 +1104,14 @@ msgid ""
|
||||
"snapshot was created."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1125
|
||||
#: ../../sysadmclient.rst:1154
|
||||
msgid ""
|
||||
"**Remove:** Used to delete a highlighted snapshot. **This is a permanent "
|
||||
"change that can not be reversed.** In other words, the versions of files at "
|
||||
"the point in time the snapshot was created will be lost."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1130
|
||||
#: ../../sysadmclient.rst:1159
|
||||
msgid ""
|
||||
"**Revert:** If you highlight a snapshot entry, this button and the drop-down"
|
||||
" menu next to it will activate. You can use the drop-down menu to specify "
|
||||
@@ -1143,11 +1121,11 @@ msgid ""
|
||||
" after the snapshot was taken will be lost."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1142
|
||||
#: ../../sysadmclient.rst:1171
|
||||
msgid "Replication Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1144
|
||||
#: ../../sysadmclient.rst:1173
|
||||
msgid ""
|
||||
"Life Preserver can be configured to replicate snapshots to another system "
|
||||
"over an encrypted SSH connection, though the backup itself is stored in an "
|
||||
@@ -1155,13 +1133,13 @@ msgid ""
|
||||
" another system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1149
|
||||
#: ../../sysadmclient.rst:1178
|
||||
msgid ""
|
||||
"In order to configure replication, the remote system to hold a copy of the "
|
||||
"snapshots must first meet several requirements:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1156
|
||||
#: ../../sysadmclient.rst:1185
|
||||
msgid ""
|
||||
"The backup server **must be formatted with the latest version of ZFS,** also"
|
||||
" known as ZFS feature flags or ZFSv5000. Operating systems that support this"
|
||||
@@ -1169,14 +1147,14 @@ msgid ""
|
||||
"FreeNAS 9.1.x or higher."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1162
|
||||
#: ../../sysadmclient.rst:1191
|
||||
msgid ""
|
||||
"The system must have SSH installed and the SSH service must be running. If "
|
||||
"the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is"
|
||||
" already installed, but you will need to start the SSH service."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1167
|
||||
#: ../../sysadmclient.rst:1196
|
||||
msgid ""
|
||||
"If the backup server is running |trueos| or |pcbsd|, you will need to open "
|
||||
"TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is "
|
||||
@@ -1186,7 +1164,7 @@ msgid ""
|
||||
"backup system, make sure it has a rule to allow SSH."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1175
|
||||
#: ../../sysadmclient.rst:1204
|
||||
msgid ""
|
||||
":numref:`Figure %s <lpreserver2>` shows the initial :guilabel:`Replication` "
|
||||
"tab on a system that has not yet been configured for replication. This "
|
||||
@@ -1194,29 +1172,29 @@ msgid ""
|
||||
"schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1186
|
||||
#: ../../sysadmclient.rst:1215
|
||||
msgid ""
|
||||
"To schedule the replication, click :guilabel:`+` to display the \"Setup "
|
||||
"Replication\" screen shown in :numref:`Figure %s <lpreserver3>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1196
|
||||
#: ../../sysadmclient.rst:1225
|
||||
msgid "Input the following information:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1198
|
||||
#: ../../sysadmclient.rst:1227
|
||||
msgid ""
|
||||
"**Host IP:** The IP address of the remote system to store the replicated "
|
||||
"snapshots."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1201
|
||||
#: ../../sysadmclient.rst:1230
|
||||
msgid ""
|
||||
"**SSH Port:** The port number, if the remote system is running SSH on a port"
|
||||
" other than the default of 22."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1204
|
||||
#: ../../sysadmclient.rst:1233
|
||||
msgid ""
|
||||
"**Dataset:** The name of the ZFS pool and optional dataset on the remote "
|
||||
"system. For example, \"remotetank\" will save the snapshots to a ZFS pool of"
|
||||
@@ -1224,7 +1202,7 @@ msgid ""
|
||||
"existing dataset named \"mybackups\" on the pool named \"remotetank\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1210
|
||||
#: ../../sysadmclient.rst:1239
|
||||
msgid ""
|
||||
"**Frequency:** Use the drop-down menu to select how often to initiate the "
|
||||
"replication. Available choices are :guilabel:`Sync with snapshot` (at the "
|
||||
@@ -1235,87 +1213,87 @@ msgid ""
|
||||
":guilabel:`Start`) in this screen."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1219
|
||||
#: ../../sysadmclient.rst:1248
|
||||
msgid ""
|
||||
"**Username:** The username must already exist on the remote system, have "
|
||||
"write access to the specified \"Dataset\", and have permission to SSH into "
|
||||
"that system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1223
|
||||
#: ../../sysadmclient.rst:1252
|
||||
msgid "**Password:** The password associated with the \"Username\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1225
|
||||
#: ../../sysadmclient.rst:1254
|
||||
msgid ""
|
||||
"**Local DS:** Use the drop-down menu to select the pool or dataset to "
|
||||
"replicate to the remote system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1228
|
||||
#: ../../sysadmclient.rst:1257
|
||||
msgid ""
|
||||
"The buttons at the top of the \"Setup Replication\" screen have several "
|
||||
"uses:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1231
|
||||
#: ../../sysadmclient.rst:1260
|
||||
msgid ""
|
||||
"**+ icon:** Sdd a replication schedule. Multiple schedules are supported, "
|
||||
"meaning you can replicate to multiple systems or replicate different \"Local"
|
||||
" DS\" datasets at different times."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1235
|
||||
#: ../../sysadmclient.rst:1264
|
||||
msgid ""
|
||||
"**- icon:** Remove an already created, and highlighted, replication "
|
||||
"schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1238
|
||||
#: ../../sysadmclient.rst:1267
|
||||
msgid "**gear icon:** Modify the schedule for the highlighted replication."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1240
|
||||
#: ../../sysadmclient.rst:1269
|
||||
msgid ""
|
||||
"**Start:** Manually starts a replication to the system specified in the "
|
||||
"highlighted replication."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1243
|
||||
#: ../../sysadmclient.rst:1272
|
||||
msgid ""
|
||||
"**Initialize:** Deletes the existing replicated snapshots on the remote "
|
||||
"system and starts a new replication. This is useful if a replication gets "
|
||||
"stuck and will not complete."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1251
|
||||
#: ../../sysadmclient.rst:1280
|
||||
msgid "Schedules Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1253
|
||||
#: ../../sysadmclient.rst:1282
|
||||
msgid ""
|
||||
"This tab is used to manage when snapshots of the ZFS pool are created. "
|
||||
"Multiple snapshot schedules are supported if the system has multiple pools."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1257
|
||||
#: ../../sysadmclient.rst:1286
|
||||
msgid ""
|
||||
"Snapshots are created on the entire pool as they are needed when "
|
||||
":ref:`Restoring the Operating System`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1260
|
||||
#: ../../sysadmclient.rst:1289
|
||||
msgid ""
|
||||
"To create a snapshot schedule, click the :guilabel:`camera` icon in the "
|
||||
"lower left corner of this tab. This will activate the \"Setup Snapshot "
|
||||
"Schedule\" pane as seen in :numref:`Figure %s <lpreserver4>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1270
|
||||
#: ../../sysadmclient.rst:1299
|
||||
msgid "This pane contains several options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1275
|
||||
#: ../../sysadmclient.rst:1304
|
||||
msgid ""
|
||||
"**Snapshots to keep:** Snapshots are automatically pruned after the "
|
||||
"specified number of snapshots to prevent snapshots from eventually using up "
|
||||
@@ -1326,7 +1304,7 @@ msgid ""
|
||||
"manually in the :guilabel:`Snapshots` tab."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1284
|
||||
#: ../../sysadmclient.rst:1313
|
||||
msgid ""
|
||||
"**Frequency:** Use the drop-down menu to select how often snapshots occur. "
|
||||
"Options include \"Daily\" (which will allow you to select the time of day), "
|
||||
@@ -1334,37 +1312,37 @@ msgid ""
|
||||
"Minutes\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1289
|
||||
#: ../../sysadmclient.rst:1318
|
||||
msgid ""
|
||||
"Once you have created a snapshot schedule, you can use the \"gear\" icon "
|
||||
"next to the \"camera\" icon to modify the highlighted schedule or the \"X\" "
|
||||
"icon to delete the highlighted schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1300
|
||||
#: ../../sysadmclient.rst:1329
|
||||
msgid ""
|
||||
"To schedule when the scrub occurs, click the third icon from the right which"
|
||||
" will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure "
|
||||
"%s <lpreserver5>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1318
|
||||
#: ../../sysadmclient.rst:1347
|
||||
msgid ""
|
||||
"Once you have created a scrub schedule, you can use the \"gear\" icon next "
|
||||
"to the \"schedule scrub\" icon to modify the highlighted schedule or the "
|
||||
"\"X\" icon to delete the highlighted schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1328
|
||||
#: ../../sysadmclient.rst:1357
|
||||
msgid ""
|
||||
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <lpreserver6>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1337
|
||||
#: ../../sysadmclient.rst:1366
|
||||
msgid "Many settings are configurable:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1339
|
||||
#: ../../sysadmclient.rst:1368
|
||||
msgid ""
|
||||
"**Disk Usage Warning:** Enter a number up to 99 to indicate at which "
|
||||
"percentage of disk space Life Preserver will display an alert in the system "
|
||||
@@ -1372,41 +1350,41 @@ msgid ""
|
||||
"space."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1344
|
||||
#: ../../sysadmclient.rst:1373
|
||||
msgid ""
|
||||
"**Email:** To receive an email when disk usage reaches the percentage "
|
||||
"configured in the \"Disk Usage Warning\", enter an email address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1347
|
||||
#: ../../sysadmclient.rst:1376
|
||||
msgid ""
|
||||
"**Email Trigger:** This setting can be set to \"All\", \"Warn\", or "
|
||||
"\"Error\" and indicates the type of condition which will trigger an email "
|
||||
"message."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1350
|
||||
#: ../../sysadmclient.rst:1379
|
||||
msgid "**Recursive Management:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1352
|
||||
#: ../../sysadmclient.rst:1381
|
||||
msgid ""
|
||||
"If you make any changes in this screen, press :guilabel:`Save Settings` to "
|
||||
"apply them."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1359
|
||||
#: ../../sysadmclient.rst:1388
|
||||
msgid "Using the lpreserver CLI"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1361
|
||||
#: ../../sysadmclient.rst:1390
|
||||
msgid ""
|
||||
"The :command:`lpreserver` command line utility can also be used to manage "
|
||||
"snapshots and replication. This command needs to be run as the superuser. To"
|
||||
" display its usage, type the command without any arguments:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1381
|
||||
#: ../../sysadmclient.rst:1410
|
||||
msgid ""
|
||||
"Each command has its own help text that describes its parameters and "
|
||||
"provides a usage example. For example, to receive help on how to use the "
|
||||
@@ -1417,104 +1395,104 @@ msgstr ""
|
||||
msgid "Command Line and GUI Equivalents"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**Command Line**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**GUI**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**Description**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452
|
||||
#: ../../sysadmclient.rst:1481
|
||||
msgid "**cronsnap**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499
|
||||
msgid "\"Snapshots\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452
|
||||
#: ../../sysadmclient.rst:1481
|
||||
msgid ""
|
||||
"schedule when snapshots occur and how long to keep them; the **stop** option"
|
||||
" can be used to disable snapshot creation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "**cronscrub**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "\"Schedules\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "schedule a ZFS scrub"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459
|
||||
#: ../../sysadmclient.rst:1488
|
||||
msgid "**get**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495
|
||||
msgid "\"Settings\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459
|
||||
#: ../../sysadmclient.rst:1488
|
||||
msgid "list Life Preserver options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid "**replicate**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid "\"Replication\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid ""
|
||||
"used to list, add, and remove backup server; read the **help** for this "
|
||||
"command for examples"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1495
|
||||
msgid "**set**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1495
|
||||
msgid ""
|
||||
"configures Life Preserver options; read **help** for the list of "
|
||||
"configurable options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1499
|
||||
msgid "**snapshot**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1499
|
||||
msgid ""
|
||||
"create and replicate a new ZFS snapshot; by default, snapshots are "
|
||||
"recursive, meaning that a that a snapshot is taken of every dataset within a"
|
||||
" pool"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1476
|
||||
#: ../../sysadmclient.rst:1505
|
||||
msgid "**status**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1476
|
||||
#: ../../sysadmclient.rst:1505
|
||||
msgid "lists the last snapshot name and replication status"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1483
|
||||
#: ../../sysadmclient.rst:1512
|
||||
msgid "Restoring the Operating System"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1485
|
||||
#: ../../sysadmclient.rst:1514
|
||||
msgid ""
|
||||
"If you have replicated the system's snapshots to a remote backup server, you"
|
||||
" can use a |trueos| installation media to perform an operating system "
|
||||
@@ -1522,7 +1500,7 @@ msgid ""
|
||||
"you get to the screen shown in :numref:`Figure %s <restore1>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1497
|
||||
#: ../../sysadmclient.rst:1526
|
||||
msgid ""
|
||||
"Before you can perform a restore, the network interface must be configured. "
|
||||
"Click :guilabel:`Network Connectivity` (second icon from the left) in order "
|
||||
@@ -1533,7 +1511,7 @@ msgid ""
|
||||
"continuing."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1505
|
||||
#: ../../sysadmclient.rst:1534
|
||||
msgid ""
|
||||
"Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and"
|
||||
" :guilabel:`Next`. This will start the Restore Wizard. In the screen shown "
|
||||
@@ -1543,7 +1521,7 @@ msgid ""
|
||||
"number."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1519
|
||||
#: ../../sysadmclient.rst:1548
|
||||
msgid ""
|
||||
"Click :guilabel:`Next` and the wizard will provide a summary of your "
|
||||
"selections. If correct, click :guilabel:`Finish`; otherwise, click "
|
||||
@@ -1626,7 +1604,7 @@ msgid ""
|
||||
"press :guilabel:`Close Ports`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1152
|
||||
#: ../../sysadmclient.rst:1181
|
||||
msgid ""
|
||||
"Snapshots occurring too frequently can introduce errors in replication. To "
|
||||
"avoid errors, ensure snapshots are configured to take place slower than the "
|
||||
@@ -1685,7 +1663,7 @@ msgid ""
|
||||
"accounts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1065
|
||||
#: ../../sysadmclient.rst:1094
|
||||
msgid ""
|
||||
"A snapshot provides a \"point-in-time\" image of the ZFS pool. This is "
|
||||
"similar to a full system backup as the snapshot contains the information for"
|
||||
@@ -1703,26 +1681,26 @@ msgid ""
|
||||
"snapshot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1272
|
||||
#: ../../sysadmclient.rst:1301
|
||||
msgid ""
|
||||
"**Storage Pool:** Select the ZFS storage pool that contains the datasets "
|
||||
"that you wish to snapshot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1293
|
||||
#: ../../sysadmclient.rst:1322
|
||||
msgid ""
|
||||
"This screen can also be used to manage the ZFS scrub schedule. Scrubs are "
|
||||
"recommended as they can provide an early indication of a potential disk "
|
||||
"failure. Scrubs can be scheduled on a per-pool basis."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1297
|
||||
#: ../../sysadmclient.rst:1326
|
||||
msgid ""
|
||||
"If you have multiple pools, be sure to create a scrub schedule for each "
|
||||
"pool."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1310
|
||||
#: ../../sysadmclient.rst:1339
|
||||
msgid ""
|
||||
"Select the pool from the :guilabel:`Storage Pool` drop-down menu, then "
|
||||
"select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", "
|
||||
@@ -1807,26 +1785,17 @@ msgstr ""
|
||||
msgid ": Viewing All Accounts and Their Details"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:930
|
||||
#: ../../sysadmclient.rst:938
|
||||
msgid ": Initialize PersonaCrypt Device"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:932
|
||||
msgid ""
|
||||
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
|
||||
"Note this section is hidden if the currently logged in user is selected. "
|
||||
"Also, if you have just created a user and do not see these options, click "
|
||||
":guilabel:`Save` then re-highlight the user to display these options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:947
|
||||
#: ../../sysadmclient.rst:955
|
||||
msgid ""
|
||||
"To prepare a PersonaCrypt device for this user, insert a USB stick and click"
|
||||
" :guilabel:`Initialize Device`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:957
|
||||
#: ../../sysadmclient.rst:965
|
||||
msgid ""
|
||||
"Type a password to associate with the device. Click :guilabel:`Save` to "
|
||||
"initialize the device. The User Manager may take a moment to prepare the "
|
||||
@@ -1834,49 +1803,49 @@ msgid ""
|
||||
" to allow removal of PersonaCrypt."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1027
|
||||
#: ../../sysadmclient.rst:1056
|
||||
msgid ": Managing Groups Using User Manager"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1110
|
||||
#: ../../sysadmclient.rst:1139
|
||||
msgid ": Snapshot Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1184
|
||||
#: ../../sysadmclient.rst:1213
|
||||
msgid ": Replication Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1194
|
||||
#: ../../sysadmclient.rst:1223
|
||||
msgid ": Scheduling a Replication"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1268
|
||||
#: ../../sysadmclient.rst:1297
|
||||
msgid ": Scheduling a Snapshot"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1308
|
||||
#: ../../sysadmclient.rst:1337
|
||||
msgid ": Scheduling a Scrub"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1335
|
||||
#: ../../sysadmclient.rst:1364
|
||||
msgid ": Life Preserver Settings"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1442
|
||||
#: ../../sysadmclient.rst:1471
|
||||
msgid ""
|
||||
":numref:`Table %s <cmdgui>` shows the command line equivalents to the "
|
||||
"graphical options provided by the Life Preserver GUI."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1495
|
||||
#: ../../sysadmclient.rst:1524
|
||||
msgid ": Selecting to Restore/Clone From Backup"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1517
|
||||
#: ../../sysadmclient.rst:1546
|
||||
msgid ": Input the Information for a SSH Restore"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1523
|
||||
#: ../../sysadmclient.rst:1552
|
||||
msgid ""
|
||||
"Once the connection to the backup server succeeds, you will be able to "
|
||||
"select which host to restore. After making your selection, click "
|
||||
@@ -1892,7 +1861,7 @@ msgid ""
|
||||
":guilabel:`Next` to perform the restore."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:987
|
||||
#: ../../sysadmclient.rst:970
|
||||
msgid ""
|
||||
"Once a user has been initialized for PersonaCrypt on the system, their user "
|
||||
"account will no longer be displayed when logging in, **unless** their "
|
||||
@@ -1901,7 +1870,7 @@ msgid ""
|
||||
":numref:`Figure %s <troslogin5>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:997
|
||||
#: ../../sysadmclient.rst:980
|
||||
msgid ": |trueos| Login Screen with PersonaCrypt"
|
||||
msgstr ""
|
||||
|
||||
@@ -1949,7 +1918,7 @@ msgstr ""
|
||||
msgid ": |sysadm| Task Manager"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1103
|
||||
#: ../../sysadmclient.rst:1132
|
||||
msgid ""
|
||||
":numref:`Figure %s <lpreserver1>` shows the :guilabel:`Snapshots` tab on a "
|
||||
"system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"."
|
||||
@@ -2013,6 +1982,134 @@ msgid ""
|
||||
":guilabel:`Save Settings`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:894
|
||||
msgid ""
|
||||
"|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
"PersonaCrypt device is a removable USB media, such as a USB flash drive, "
|
||||
"formatted with ZFS and encrypted with either GELI or PEFS. This device is "
|
||||
"used to hold a specific user's home directory, meaning they can securely "
|
||||
"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 "
|
||||
"or higher system. For example, this can be used to securely access one's "
|
||||
"home directory from a laptop, home computer, and work computer. The device "
|
||||
"is protected by an encryption key and a different (recommended) password "
|
||||
"separate from the user's login password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:916
|
||||
msgid "GELI"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:918
|
||||
msgid ""
|
||||
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
"your passphrase, and the other being a key stored on disk. Without both of "
|
||||
"these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
"the key and manages to get your password, it is still worthless without the "
|
||||
"system it was paired with. GELI is used by default in |trueos| as it is more"
|
||||
" fully featured over PEFS."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:940
|
||||
msgid ""
|
||||
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
"buttons are available in the :guilabel:`PersonaCrypt` tab of "
|
||||
":guilabel:`Advanced Mode`. Note this section is hidden if the currently "
|
||||
"logged in user is selected. Also, if you have just created a user and do not"
|
||||
" see these options, click :guilabel:`Save`, then re-highlight the user to "
|
||||
"display these options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:999
|
||||
msgid "PEFS"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1001
|
||||
msgid ""
|
||||
"`PEFS <http://pefs.io/>`_ stands for Private Encrypted File System. It is "
|
||||
"open source software freely available under the BSD license, and is included"
|
||||
" in |trueos| by default. PEFS runs on top of any existing file system, "
|
||||
"providing an encryption layer independent of the underlying file system. "
|
||||
"PersonaCrypt can be configured to use PEFS in place of GELI, which "
|
||||
"eliminates the need for external media, as the encrypted PEFS database is "
|
||||
"stored on the local disk."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1009
|
||||
msgid ""
|
||||
"While PEFS does not use a USB drive, be sure to print or otherwise backup "
|
||||
"the PEFS generated key fragment stored on the disk."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1012
|
||||
msgid "**Initialize PEFS with the Command Line**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1014
|
||||
msgid ""
|
||||
"Because PEFS does not use a USB drive with its encryption, the user will "
|
||||
"need a password file (pfile) containing the desired password, **before** "
|
||||
"initializing PEFS for a user account. Once this pfile is created, enabling "
|
||||
"PEFS through PersonaCrypt is accomplished in a CLI with "
|
||||
":command:`personacrypt init <username> <pfile> PEFS`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1020
|
||||
msgid ""
|
||||
"For example, the user account **test** has a pfile named "
|
||||
":file:`testpfile.txt`, which contains the single text string of **test's** "
|
||||
"chosen password. Next, the administrator adds PEFS encryption to the "
|
||||
"**test** acount by opening a CLI, logging in as root, and typing:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1029
|
||||
msgid ""
|
||||
"PersonaCrypt will initialize the account **test** with PEFS, using the "
|
||||
"string in :file:`testpfile.txt` as the new password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1032
|
||||
msgid ""
|
||||
"The |sysadm| User Manager can also initialize a user account with PEFS by "
|
||||
"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` "
|
||||
"drop down menu of the :guilabel:`PersonaCrypt` tab."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1036
|
||||
msgid ""
|
||||
"In addition to initializing an account with PEFS, PersonaCrypt also supports"
|
||||
" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt "
|
||||
"export <username>` and :command:`personacrypt import <keyfile>`, "
|
||||
"respectively."
|
||||
msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
|
||||
#~ " with ZFS and encrypted with GELI. This device is used to hold a specific "
|
||||
#~ "user's home directory, meaning they can securely transport and access their "
|
||||
#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
|
||||
#~ "example, this can be used to securely access one's home directory from a "
|
||||
#~ "laptop, home computer, and work computer. The device is protected by an "
|
||||
#~ "encryption key and a password which is, and should be, separate from the "
|
||||
#~ "user's login password."
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
#~ "your passphrase, and the other being a key stored on disk. Without both of "
|
||||
#~ "these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
#~ "the key and manages to get your password, it is still worthless without the "
|
||||
#~ "system it was paired with."
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
|
||||
#~ "Note this section is hidden if the currently logged in user is selected. "
|
||||
#~ "Also, if you have just created a user and do not see these options, click "
|
||||
#~ ":guilabel:`Save` then re-highlight the user to display these options:"
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "**Max Boot Environments:** |trueos| automatically creates a boot environment"
|
||||
#~ " before updating any software, the operating system, or applying a system "
|
||||
|
||||
@@ -482,7 +482,7 @@ msgid ""
|
||||
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <update4>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1326
|
||||
#: ../../sysadmclient.rst:1355
|
||||
msgid "Settings Tab"
|
||||
msgstr ""
|
||||
|
||||
@@ -924,20 +924,7 @@ msgstr ""
|
||||
msgid "PersonaCrypt"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:894
|
||||
msgid ""
|
||||
"|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
"PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
|
||||
" with ZFS and encrypted with GELI. This device is used to hold a specific "
|
||||
"user's home directory, meaning they can securely transport and access their "
|
||||
"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
|
||||
"example, this can be used to securely access one's home directory from a "
|
||||
"laptop, home computer, and work computer. The device is protected by an "
|
||||
"encryption key and a password which is, and should be, separate from the "
|
||||
"user's login password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:904
|
||||
#: ../../sysadmclient.rst:905
|
||||
msgid ""
|
||||
"When a user is configured to use a PersonaCrypt device, that user can not "
|
||||
"login using an unencrypted session on the same system. In other words, the "
|
||||
@@ -946,22 +933,13 @@ msgid ""
|
||||
"different user accounts, one for each type of session."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:911
|
||||
msgid ""
|
||||
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
"your passphrase, and the other being a key stored on disk. Without both of "
|
||||
"these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
"the key and manages to get your password, it is still worthless without the "
|
||||
"system it was paired with."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:917
|
||||
#: ../../sysadmclient.rst:925
|
||||
msgid ""
|
||||
"USB devices do eventually fail. Always backup any important files stored on "
|
||||
"the PersonaCrypt device to another device or system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:920
|
||||
#: ../../sysadmclient.rst:928
|
||||
msgid ""
|
||||
"The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt "
|
||||
"device for any login user, **except** for the currently logged in user. In "
|
||||
@@ -969,13 +947,13 @@ msgid ""
|
||||
"*dlavigne*, has been created and the entry for the user has been clicked."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:939
|
||||
#: ../../sysadmclient.rst:947
|
||||
msgid ""
|
||||
"**Initialize Device:** Used to prepare the USB device which will be used as "
|
||||
"the user's home directory."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:942
|
||||
#: ../../sysadmclient.rst:950
|
||||
msgid ""
|
||||
"**Import Key:** If the user has already created a PersonaCrypt device on "
|
||||
"another |trueos| system, click this button to import a previously saved copy"
|
||||
@@ -983,7 +961,7 @@ msgid ""
|
||||
"can now login to this computer using PersonaCrypt."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:950
|
||||
#: ../../sysadmclient.rst:958
|
||||
msgid ""
|
||||
"Since the USB stick will hold the user's home directory and files, ensure "
|
||||
"the stick is large enough to meet the anticipated storage needs of the home "
|
||||
@@ -993,7 +971,7 @@ msgid ""
|
||||
"logged in."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:999
|
||||
#: ../../sysadmclient.rst:982
|
||||
msgid ""
|
||||
"When stealth sessions have been configured, PersonaCrypt users will still be"
|
||||
" displayed in the login menu, even if their USB device is not inserted. This"
|
||||
@@ -1001,47 +979,47 @@ msgid ""
|
||||
"session."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1004
|
||||
#: ../../sysadmclient.rst:987
|
||||
msgid ""
|
||||
"In the field with the yellow padlock icon, input the password for the user "
|
||||
"account. In the field with the grey USB stick icon, input the password "
|
||||
"associated with the PersonaCrypt device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1008
|
||||
#: ../../sysadmclient.rst:991
|
||||
msgid ""
|
||||
"To prevent data corruption and freezing the system **DO NOT** remove the "
|
||||
"PersonaCrypt device while logged in! Always log out of your session before "
|
||||
"physically removing the device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1016
|
||||
#: ../../sysadmclient.rst:1045
|
||||
msgid "Managing Groups"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1018
|
||||
#: ../../sysadmclient.rst:1047
|
||||
msgid ""
|
||||
"Click the :guilabel:`Groups` tab to view and manage the groups on the "
|
||||
"system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s <user4>`, "
|
||||
"shows the group membership for the *operator* and *wheel* groups:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1029
|
||||
#: ../../sysadmclient.rst:1058
|
||||
msgid "This screen has 2 columns:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1031
|
||||
#: ../../sysadmclient.rst:1060
|
||||
msgid ""
|
||||
"**Members:** Indicates if the highlighted group contains any user accounts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1034
|
||||
#: ../../sysadmclient.rst:1063
|
||||
msgid ""
|
||||
"**Available:** Shows all of the system and user accounts on the system in "
|
||||
"alphabetical order."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1037
|
||||
#: ../../sysadmclient.rst:1066
|
||||
msgid ""
|
||||
"To add an account to a group, highlight the group name, then highlight the "
|
||||
"account name in the :guilabel:`Available` column. Click the left arrow and "
|
||||
@@ -1051,7 +1029,7 @@ msgid ""
|
||||
"added to a group."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1044
|
||||
#: ../../sysadmclient.rst:1073
|
||||
msgid ""
|
||||
"If you add a user to the *operator* group, they will have permission to use "
|
||||
"commands requiring administrative access and will be prompted for their own "
|
||||
@@ -1060,15 +1038,15 @@ msgid ""
|
||||
"will be prompted for the superuser password whenever they use the command."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1051
|
||||
#: ../../sysadmclient.rst:1080
|
||||
msgid "To view all of the groups on the system, click :guilabel:`Advanced`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1057
|
||||
#: ../../sysadmclient.rst:1086
|
||||
msgid "Life Preserver"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1059
|
||||
#: ../../sysadmclient.rst:1088
|
||||
msgid ""
|
||||
"The Life Preserver utility is designed to take full advantage of the "
|
||||
"functionality provided by ZFS snapshots. This utility allows you to schedule"
|
||||
@@ -1077,25 +1055,25 @@ msgid ""
|
||||
"benefits:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1081
|
||||
#: ../../sysadmclient.rst:1110
|
||||
msgid ""
|
||||
"Replication is an efficient way to keep the files on two systems in sync. "
|
||||
"With Life Preserver, the snapshots taken on the |trueos| system will be "
|
||||
"synchronized with their versions stored on the specified backup server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1086
|
||||
#: ../../sysadmclient.rst:1115
|
||||
msgid "Snapshots are sent to the backup server over an encrypted connection."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1088
|
||||
#: ../../sysadmclient.rst:1117
|
||||
msgid ""
|
||||
"Having a copy of the snapshots on another system makes it possible to "
|
||||
"perform an operating system restore should the |trueos| system become "
|
||||
"unusable or to deploy an identical system to different hardware."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1092
|
||||
#: ../../sysadmclient.rst:1121
|
||||
msgid ""
|
||||
"To manage snapshots and replication using the |sysadm| graphical client, go "
|
||||
"to :menuselection:`Utilities --> Life Preserver`. The rest of this section "
|
||||
@@ -1103,16 +1081,16 @@ msgid ""
|
||||
"Preserver."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1101
|
||||
#: ../../sysadmclient.rst:1130
|
||||
msgid "Snapshots Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1112
|
||||
#: ../../sysadmclient.rst:1141
|
||||
msgid ""
|
||||
"This screen will display any created snapshots and provides buttons to:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1114
|
||||
#: ../../sysadmclient.rst:1143
|
||||
msgid ""
|
||||
"**Create:** Used to create a manual snapshot of the specified pool now. For "
|
||||
"example, you could create a snapshot before making changes to an important "
|
||||
@@ -1126,14 +1104,14 @@ msgid ""
|
||||
"snapshot was created."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1125
|
||||
#: ../../sysadmclient.rst:1154
|
||||
msgid ""
|
||||
"**Remove:** Used to delete a highlighted snapshot. **This is a permanent "
|
||||
"change that can not be reversed.** In other words, the versions of files at "
|
||||
"the point in time the snapshot was created will be lost."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1130
|
||||
#: ../../sysadmclient.rst:1159
|
||||
msgid ""
|
||||
"**Revert:** If you highlight a snapshot entry, this button and the drop-down"
|
||||
" menu next to it will activate. You can use the drop-down menu to specify "
|
||||
@@ -1143,11 +1121,11 @@ msgid ""
|
||||
" after the snapshot was taken will be lost."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1142
|
||||
#: ../../sysadmclient.rst:1171
|
||||
msgid "Replication Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1144
|
||||
#: ../../sysadmclient.rst:1173
|
||||
msgid ""
|
||||
"Life Preserver can be configured to replicate snapshots to another system "
|
||||
"over an encrypted SSH connection, though the backup itself is stored in an "
|
||||
@@ -1155,13 +1133,13 @@ msgid ""
|
||||
" another system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1149
|
||||
#: ../../sysadmclient.rst:1178
|
||||
msgid ""
|
||||
"In order to configure replication, the remote system to hold a copy of the "
|
||||
"snapshots must first meet several requirements:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1156
|
||||
#: ../../sysadmclient.rst:1185
|
||||
msgid ""
|
||||
"The backup server **must be formatted with the latest version of ZFS,** also"
|
||||
" known as ZFS feature flags or ZFSv5000. Operating systems that support this"
|
||||
@@ -1169,14 +1147,14 @@ msgid ""
|
||||
"FreeNAS 9.1.x or higher."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1162
|
||||
#: ../../sysadmclient.rst:1191
|
||||
msgid ""
|
||||
"The system must have SSH installed and the SSH service must be running. If "
|
||||
"the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is"
|
||||
" already installed, but you will need to start the SSH service."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1167
|
||||
#: ../../sysadmclient.rst:1196
|
||||
msgid ""
|
||||
"If the backup server is running |trueos| or |pcbsd|, you will need to open "
|
||||
"TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is "
|
||||
@@ -1186,7 +1164,7 @@ msgid ""
|
||||
"backup system, make sure it has a rule to allow SSH."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1175
|
||||
#: ../../sysadmclient.rst:1204
|
||||
msgid ""
|
||||
":numref:`Figure %s <lpreserver2>` shows the initial :guilabel:`Replication` "
|
||||
"tab on a system that has not yet been configured for replication. This "
|
||||
@@ -1194,29 +1172,29 @@ msgid ""
|
||||
"schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1186
|
||||
#: ../../sysadmclient.rst:1215
|
||||
msgid ""
|
||||
"To schedule the replication, click :guilabel:`+` to display the \"Setup "
|
||||
"Replication\" screen shown in :numref:`Figure %s <lpreserver3>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1196
|
||||
#: ../../sysadmclient.rst:1225
|
||||
msgid "Input the following information:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1198
|
||||
#: ../../sysadmclient.rst:1227
|
||||
msgid ""
|
||||
"**Host IP:** The IP address of the remote system to store the replicated "
|
||||
"snapshots."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1201
|
||||
#: ../../sysadmclient.rst:1230
|
||||
msgid ""
|
||||
"**SSH Port:** The port number, if the remote system is running SSH on a port"
|
||||
" other than the default of 22."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1204
|
||||
#: ../../sysadmclient.rst:1233
|
||||
msgid ""
|
||||
"**Dataset:** The name of the ZFS pool and optional dataset on the remote "
|
||||
"system. For example, \"remotetank\" will save the snapshots to a ZFS pool of"
|
||||
@@ -1224,7 +1202,7 @@ msgid ""
|
||||
"existing dataset named \"mybackups\" on the pool named \"remotetank\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1210
|
||||
#: ../../sysadmclient.rst:1239
|
||||
msgid ""
|
||||
"**Frequency:** Use the drop-down menu to select how often to initiate the "
|
||||
"replication. Available choices are :guilabel:`Sync with snapshot` (at the "
|
||||
@@ -1235,87 +1213,87 @@ msgid ""
|
||||
":guilabel:`Start`) in this screen."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1219
|
||||
#: ../../sysadmclient.rst:1248
|
||||
msgid ""
|
||||
"**Username:** The username must already exist on the remote system, have "
|
||||
"write access to the specified \"Dataset\", and have permission to SSH into "
|
||||
"that system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1223
|
||||
#: ../../sysadmclient.rst:1252
|
||||
msgid "**Password:** The password associated with the \"Username\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1225
|
||||
#: ../../sysadmclient.rst:1254
|
||||
msgid ""
|
||||
"**Local DS:** Use the drop-down menu to select the pool or dataset to "
|
||||
"replicate to the remote system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1228
|
||||
#: ../../sysadmclient.rst:1257
|
||||
msgid ""
|
||||
"The buttons at the top of the \"Setup Replication\" screen have several "
|
||||
"uses:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1231
|
||||
#: ../../sysadmclient.rst:1260
|
||||
msgid ""
|
||||
"**+ icon:** Sdd a replication schedule. Multiple schedules are supported, "
|
||||
"meaning you can replicate to multiple systems or replicate different \"Local"
|
||||
" DS\" datasets at different times."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1235
|
||||
#: ../../sysadmclient.rst:1264
|
||||
msgid ""
|
||||
"**- icon:** Remove an already created, and highlighted, replication "
|
||||
"schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1238
|
||||
#: ../../sysadmclient.rst:1267
|
||||
msgid "**gear icon:** Modify the schedule for the highlighted replication."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1240
|
||||
#: ../../sysadmclient.rst:1269
|
||||
msgid ""
|
||||
"**Start:** Manually starts a replication to the system specified in the "
|
||||
"highlighted replication."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1243
|
||||
#: ../../sysadmclient.rst:1272
|
||||
msgid ""
|
||||
"**Initialize:** Deletes the existing replicated snapshots on the remote "
|
||||
"system and starts a new replication. This is useful if a replication gets "
|
||||
"stuck and will not complete."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1251
|
||||
#: ../../sysadmclient.rst:1280
|
||||
msgid "Schedules Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1253
|
||||
#: ../../sysadmclient.rst:1282
|
||||
msgid ""
|
||||
"This tab is used to manage when snapshots of the ZFS pool are created. "
|
||||
"Multiple snapshot schedules are supported if the system has multiple pools."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1257
|
||||
#: ../../sysadmclient.rst:1286
|
||||
msgid ""
|
||||
"Snapshots are created on the entire pool as they are needed when "
|
||||
":ref:`Restoring the Operating System`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1260
|
||||
#: ../../sysadmclient.rst:1289
|
||||
msgid ""
|
||||
"To create a snapshot schedule, click the :guilabel:`camera` icon in the "
|
||||
"lower left corner of this tab. This will activate the \"Setup Snapshot "
|
||||
"Schedule\" pane as seen in :numref:`Figure %s <lpreserver4>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1270
|
||||
#: ../../sysadmclient.rst:1299
|
||||
msgid "This pane contains several options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1275
|
||||
#: ../../sysadmclient.rst:1304
|
||||
msgid ""
|
||||
"**Snapshots to keep:** Snapshots are automatically pruned after the "
|
||||
"specified number of snapshots to prevent snapshots from eventually using up "
|
||||
@@ -1326,7 +1304,7 @@ msgid ""
|
||||
"manually in the :guilabel:`Snapshots` tab."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1284
|
||||
#: ../../sysadmclient.rst:1313
|
||||
msgid ""
|
||||
"**Frequency:** Use the drop-down menu to select how often snapshots occur. "
|
||||
"Options include \"Daily\" (which will allow you to select the time of day), "
|
||||
@@ -1334,37 +1312,37 @@ msgid ""
|
||||
"Minutes\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1289
|
||||
#: ../../sysadmclient.rst:1318
|
||||
msgid ""
|
||||
"Once you have created a snapshot schedule, you can use the \"gear\" icon "
|
||||
"next to the \"camera\" icon to modify the highlighted schedule or the \"X\" "
|
||||
"icon to delete the highlighted schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1300
|
||||
#: ../../sysadmclient.rst:1329
|
||||
msgid ""
|
||||
"To schedule when the scrub occurs, click the third icon from the right which"
|
||||
" will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure "
|
||||
"%s <lpreserver5>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1318
|
||||
#: ../../sysadmclient.rst:1347
|
||||
msgid ""
|
||||
"Once you have created a scrub schedule, you can use the \"gear\" icon next "
|
||||
"to the \"schedule scrub\" icon to modify the highlighted schedule or the "
|
||||
"\"X\" icon to delete the highlighted schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1328
|
||||
#: ../../sysadmclient.rst:1357
|
||||
msgid ""
|
||||
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <lpreserver6>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1337
|
||||
#: ../../sysadmclient.rst:1366
|
||||
msgid "Many settings are configurable:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1339
|
||||
#: ../../sysadmclient.rst:1368
|
||||
msgid ""
|
||||
"**Disk Usage Warning:** Enter a number up to 99 to indicate at which "
|
||||
"percentage of disk space Life Preserver will display an alert in the system "
|
||||
@@ -1372,41 +1350,41 @@ msgid ""
|
||||
"space."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1344
|
||||
#: ../../sysadmclient.rst:1373
|
||||
msgid ""
|
||||
"**Email:** To receive an email when disk usage reaches the percentage "
|
||||
"configured in the \"Disk Usage Warning\", enter an email address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1347
|
||||
#: ../../sysadmclient.rst:1376
|
||||
msgid ""
|
||||
"**Email Trigger:** This setting can be set to \"All\", \"Warn\", or "
|
||||
"\"Error\" and indicates the type of condition which will trigger an email "
|
||||
"message."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1350
|
||||
#: ../../sysadmclient.rst:1379
|
||||
msgid "**Recursive Management:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1352
|
||||
#: ../../sysadmclient.rst:1381
|
||||
msgid ""
|
||||
"If you make any changes in this screen, press :guilabel:`Save Settings` to "
|
||||
"apply them."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1359
|
||||
#: ../../sysadmclient.rst:1388
|
||||
msgid "Using the lpreserver CLI"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1361
|
||||
#: ../../sysadmclient.rst:1390
|
||||
msgid ""
|
||||
"The :command:`lpreserver` command line utility can also be used to manage "
|
||||
"snapshots and replication. This command needs to be run as the superuser. To"
|
||||
" display its usage, type the command without any arguments:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1381
|
||||
#: ../../sysadmclient.rst:1410
|
||||
msgid ""
|
||||
"Each command has its own help text that describes its parameters and "
|
||||
"provides a usage example. For example, to receive help on how to use the "
|
||||
@@ -1417,104 +1395,104 @@ msgstr ""
|
||||
msgid "Command Line and GUI Equivalents"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**Command Line**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**GUI**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**Description**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452
|
||||
#: ../../sysadmclient.rst:1481
|
||||
msgid "**cronsnap**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499
|
||||
msgid "\"Snapshots\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452
|
||||
#: ../../sysadmclient.rst:1481
|
||||
msgid ""
|
||||
"schedule when snapshots occur and how long to keep them; the **stop** option"
|
||||
" can be used to disable snapshot creation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "**cronscrub**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "\"Schedules\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "schedule a ZFS scrub"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459
|
||||
#: ../../sysadmclient.rst:1488
|
||||
msgid "**get**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495
|
||||
msgid "\"Settings\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459
|
||||
#: ../../sysadmclient.rst:1488
|
||||
msgid "list Life Preserver options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid "**replicate**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid "\"Replication\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid ""
|
||||
"used to list, add, and remove backup server; read the **help** for this "
|
||||
"command for examples"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1495
|
||||
msgid "**set**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1495
|
||||
msgid ""
|
||||
"configures Life Preserver options; read **help** for the list of "
|
||||
"configurable options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1499
|
||||
msgid "**snapshot**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1499
|
||||
msgid ""
|
||||
"create and replicate a new ZFS snapshot; by default, snapshots are "
|
||||
"recursive, meaning that a that a snapshot is taken of every dataset within a"
|
||||
" pool"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1476
|
||||
#: ../../sysadmclient.rst:1505
|
||||
msgid "**status**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1476
|
||||
#: ../../sysadmclient.rst:1505
|
||||
msgid "lists the last snapshot name and replication status"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1483
|
||||
#: ../../sysadmclient.rst:1512
|
||||
msgid "Restoring the Operating System"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1485
|
||||
#: ../../sysadmclient.rst:1514
|
||||
msgid ""
|
||||
"If you have replicated the system's snapshots to a remote backup server, you"
|
||||
" can use a |trueos| installation media to perform an operating system "
|
||||
@@ -1522,7 +1500,7 @@ msgid ""
|
||||
"you get to the screen shown in :numref:`Figure %s <restore1>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1497
|
||||
#: ../../sysadmclient.rst:1526
|
||||
msgid ""
|
||||
"Before you can perform a restore, the network interface must be configured. "
|
||||
"Click :guilabel:`Network Connectivity` (second icon from the left) in order "
|
||||
@@ -1533,7 +1511,7 @@ msgid ""
|
||||
"continuing."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1505
|
||||
#: ../../sysadmclient.rst:1534
|
||||
msgid ""
|
||||
"Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and"
|
||||
" :guilabel:`Next`. This will start the Restore Wizard. In the screen shown "
|
||||
@@ -1543,7 +1521,7 @@ msgid ""
|
||||
"number."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1519
|
||||
#: ../../sysadmclient.rst:1548
|
||||
msgid ""
|
||||
"Click :guilabel:`Next` and the wizard will provide a summary of your "
|
||||
"selections. If correct, click :guilabel:`Finish`; otherwise, click "
|
||||
@@ -1626,7 +1604,7 @@ msgid ""
|
||||
"press :guilabel:`Close Ports`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1152
|
||||
#: ../../sysadmclient.rst:1181
|
||||
msgid ""
|
||||
"Snapshots occurring too frequently can introduce errors in replication. To "
|
||||
"avoid errors, ensure snapshots are configured to take place slower than the "
|
||||
@@ -1685,7 +1663,7 @@ msgid ""
|
||||
"accounts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1065
|
||||
#: ../../sysadmclient.rst:1094
|
||||
msgid ""
|
||||
"A snapshot provides a \"point-in-time\" image of the ZFS pool. This is "
|
||||
"similar to a full system backup as the snapshot contains the information for"
|
||||
@@ -1703,26 +1681,26 @@ msgid ""
|
||||
"snapshot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1272
|
||||
#: ../../sysadmclient.rst:1301
|
||||
msgid ""
|
||||
"**Storage Pool:** Select the ZFS storage pool that contains the datasets "
|
||||
"that you wish to snapshot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1293
|
||||
#: ../../sysadmclient.rst:1322
|
||||
msgid ""
|
||||
"This screen can also be used to manage the ZFS scrub schedule. Scrubs are "
|
||||
"recommended as they can provide an early indication of a potential disk "
|
||||
"failure. Scrubs can be scheduled on a per-pool basis."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1297
|
||||
#: ../../sysadmclient.rst:1326
|
||||
msgid ""
|
||||
"If you have multiple pools, be sure to create a scrub schedule for each "
|
||||
"pool."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1310
|
||||
#: ../../sysadmclient.rst:1339
|
||||
msgid ""
|
||||
"Select the pool from the :guilabel:`Storage Pool` drop-down menu, then "
|
||||
"select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", "
|
||||
@@ -1807,26 +1785,17 @@ msgstr ""
|
||||
msgid ": Viewing All Accounts and Their Details"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:930
|
||||
#: ../../sysadmclient.rst:938
|
||||
msgid ": Initialize PersonaCrypt Device"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:932
|
||||
msgid ""
|
||||
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
|
||||
"Note this section is hidden if the currently logged in user is selected. "
|
||||
"Also, if you have just created a user and do not see these options, click "
|
||||
":guilabel:`Save` then re-highlight the user to display these options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:947
|
||||
#: ../../sysadmclient.rst:955
|
||||
msgid ""
|
||||
"To prepare a PersonaCrypt device for this user, insert a USB stick and click"
|
||||
" :guilabel:`Initialize Device`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:957
|
||||
#: ../../sysadmclient.rst:965
|
||||
msgid ""
|
||||
"Type a password to associate with the device. Click :guilabel:`Save` to "
|
||||
"initialize the device. The User Manager may take a moment to prepare the "
|
||||
@@ -1834,49 +1803,49 @@ msgid ""
|
||||
" to allow removal of PersonaCrypt."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1027
|
||||
#: ../../sysadmclient.rst:1056
|
||||
msgid ": Managing Groups Using User Manager"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1110
|
||||
#: ../../sysadmclient.rst:1139
|
||||
msgid ": Snapshot Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1184
|
||||
#: ../../sysadmclient.rst:1213
|
||||
msgid ": Replication Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1194
|
||||
#: ../../sysadmclient.rst:1223
|
||||
msgid ": Scheduling a Replication"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1268
|
||||
#: ../../sysadmclient.rst:1297
|
||||
msgid ": Scheduling a Snapshot"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1308
|
||||
#: ../../sysadmclient.rst:1337
|
||||
msgid ": Scheduling a Scrub"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1335
|
||||
#: ../../sysadmclient.rst:1364
|
||||
msgid ": Life Preserver Settings"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1442
|
||||
#: ../../sysadmclient.rst:1471
|
||||
msgid ""
|
||||
":numref:`Table %s <cmdgui>` shows the command line equivalents to the "
|
||||
"graphical options provided by the Life Preserver GUI."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1495
|
||||
#: ../../sysadmclient.rst:1524
|
||||
msgid ": Selecting to Restore/Clone From Backup"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1517
|
||||
#: ../../sysadmclient.rst:1546
|
||||
msgid ": Input the Information for a SSH Restore"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1523
|
||||
#: ../../sysadmclient.rst:1552
|
||||
msgid ""
|
||||
"Once the connection to the backup server succeeds, you will be able to "
|
||||
"select which host to restore. After making your selection, click "
|
||||
@@ -1892,7 +1861,7 @@ msgid ""
|
||||
":guilabel:`Next` to perform the restore."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:987
|
||||
#: ../../sysadmclient.rst:970
|
||||
msgid ""
|
||||
"Once a user has been initialized for PersonaCrypt on the system, their user "
|
||||
"account will no longer be displayed when logging in, **unless** their "
|
||||
@@ -1901,7 +1870,7 @@ msgid ""
|
||||
":numref:`Figure %s <troslogin5>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:997
|
||||
#: ../../sysadmclient.rst:980
|
||||
msgid ": |trueos| Login Screen with PersonaCrypt"
|
||||
msgstr ""
|
||||
|
||||
@@ -1949,7 +1918,7 @@ msgstr ""
|
||||
msgid ": |sysadm| Task Manager"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1103
|
||||
#: ../../sysadmclient.rst:1132
|
||||
msgid ""
|
||||
":numref:`Figure %s <lpreserver1>` shows the :guilabel:`Snapshots` tab on a "
|
||||
"system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"."
|
||||
@@ -2013,6 +1982,134 @@ msgid ""
|
||||
":guilabel:`Save Settings`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:894
|
||||
msgid ""
|
||||
"|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
"PersonaCrypt device is a removable USB media, such as a USB flash drive, "
|
||||
"formatted with ZFS and encrypted with either GELI or PEFS. This device is "
|
||||
"used to hold a specific user's home directory, meaning they can securely "
|
||||
"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 "
|
||||
"or higher system. For example, this can be used to securely access one's "
|
||||
"home directory from a laptop, home computer, and work computer. The device "
|
||||
"is protected by an encryption key and a different (recommended) password "
|
||||
"separate from the user's login password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:916
|
||||
msgid "GELI"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:918
|
||||
msgid ""
|
||||
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
"your passphrase, and the other being a key stored on disk. Without both of "
|
||||
"these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
"the key and manages to get your password, it is still worthless without the "
|
||||
"system it was paired with. GELI is used by default in |trueos| as it is more"
|
||||
" fully featured over PEFS."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:940
|
||||
msgid ""
|
||||
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
"buttons are available in the :guilabel:`PersonaCrypt` tab of "
|
||||
":guilabel:`Advanced Mode`. Note this section is hidden if the currently "
|
||||
"logged in user is selected. Also, if you have just created a user and do not"
|
||||
" see these options, click :guilabel:`Save`, then re-highlight the user to "
|
||||
"display these options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:999
|
||||
msgid "PEFS"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1001
|
||||
msgid ""
|
||||
"`PEFS <http://pefs.io/>`_ stands for Private Encrypted File System. It is "
|
||||
"open source software freely available under the BSD license, and is included"
|
||||
" in |trueos| by default. PEFS runs on top of any existing file system, "
|
||||
"providing an encryption layer independent of the underlying file system. "
|
||||
"PersonaCrypt can be configured to use PEFS in place of GELI, which "
|
||||
"eliminates the need for external media, as the encrypted PEFS database is "
|
||||
"stored on the local disk."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1009
|
||||
msgid ""
|
||||
"While PEFS does not use a USB drive, be sure to print or otherwise backup "
|
||||
"the PEFS generated key fragment stored on the disk."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1012
|
||||
msgid "**Initialize PEFS with the Command Line**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1014
|
||||
msgid ""
|
||||
"Because PEFS does not use a USB drive with its encryption, the user will "
|
||||
"need a password file (pfile) containing the desired password, **before** "
|
||||
"initializing PEFS for a user account. Once this pfile is created, enabling "
|
||||
"PEFS through PersonaCrypt is accomplished in a CLI with "
|
||||
":command:`personacrypt init <username> <pfile> PEFS`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1020
|
||||
msgid ""
|
||||
"For example, the user account **test** has a pfile named "
|
||||
":file:`testpfile.txt`, which contains the single text string of **test's** "
|
||||
"chosen password. Next, the administrator adds PEFS encryption to the "
|
||||
"**test** acount by opening a CLI, logging in as root, and typing:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1029
|
||||
msgid ""
|
||||
"PersonaCrypt will initialize the account **test** with PEFS, using the "
|
||||
"string in :file:`testpfile.txt` as the new password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1032
|
||||
msgid ""
|
||||
"The |sysadm| User Manager can also initialize a user account with PEFS by "
|
||||
"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` "
|
||||
"drop down menu of the :guilabel:`PersonaCrypt` tab."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1036
|
||||
msgid ""
|
||||
"In addition to initializing an account with PEFS, PersonaCrypt also supports"
|
||||
" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt "
|
||||
"export <username>` and :command:`personacrypt import <keyfile>`, "
|
||||
"respectively."
|
||||
msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
|
||||
#~ " with ZFS and encrypted with GELI. This device is used to hold a specific "
|
||||
#~ "user's home directory, meaning they can securely transport and access their "
|
||||
#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
|
||||
#~ "example, this can be used to securely access one's home directory from a "
|
||||
#~ "laptop, home computer, and work computer. The device is protected by an "
|
||||
#~ "encryption key and a password which is, and should be, separate from the "
|
||||
#~ "user's login password."
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
#~ "your passphrase, and the other being a key stored on disk. Without both of "
|
||||
#~ "these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
#~ "the key and manages to get your password, it is still worthless without the "
|
||||
#~ "system it was paired with."
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
|
||||
#~ "Note this section is hidden if the currently logged in user is selected. "
|
||||
#~ "Also, if you have just created a user and do not see these options, click "
|
||||
#~ ":guilabel:`Save` then re-highlight the user to display these options:"
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "**Max Boot Environments:** |trueos| automatically creates a boot environment"
|
||||
#~ " before updating any software, the operating system, or applying a system "
|
||||
|
||||
@@ -482,7 +482,7 @@ msgid ""
|
||||
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <update4>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1326
|
||||
#: ../../sysadmclient.rst:1355
|
||||
msgid "Settings Tab"
|
||||
msgstr ""
|
||||
|
||||
@@ -924,20 +924,7 @@ msgstr ""
|
||||
msgid "PersonaCrypt"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:894
|
||||
msgid ""
|
||||
"|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
"PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
|
||||
" with ZFS and encrypted with GELI. This device is used to hold a specific "
|
||||
"user's home directory, meaning they can securely transport and access their "
|
||||
"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
|
||||
"example, this can be used to securely access one's home directory from a "
|
||||
"laptop, home computer, and work computer. The device is protected by an "
|
||||
"encryption key and a password which is, and should be, separate from the "
|
||||
"user's login password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:904
|
||||
#: ../../sysadmclient.rst:905
|
||||
msgid ""
|
||||
"When a user is configured to use a PersonaCrypt device, that user can not "
|
||||
"login using an unencrypted session on the same system. In other words, the "
|
||||
@@ -946,22 +933,13 @@ msgid ""
|
||||
"different user accounts, one for each type of session."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:911
|
||||
msgid ""
|
||||
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
"your passphrase, and the other being a key stored on disk. Without both of "
|
||||
"these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
"the key and manages to get your password, it is still worthless without the "
|
||||
"system it was paired with."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:917
|
||||
#: ../../sysadmclient.rst:925
|
||||
msgid ""
|
||||
"USB devices do eventually fail. Always backup any important files stored on "
|
||||
"the PersonaCrypt device to another device or system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:920
|
||||
#: ../../sysadmclient.rst:928
|
||||
msgid ""
|
||||
"The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt "
|
||||
"device for any login user, **except** for the currently logged in user. In "
|
||||
@@ -969,13 +947,13 @@ msgid ""
|
||||
"*dlavigne*, has been created and the entry for the user has been clicked."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:939
|
||||
#: ../../sysadmclient.rst:947
|
||||
msgid ""
|
||||
"**Initialize Device:** Used to prepare the USB device which will be used as "
|
||||
"the user's home directory."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:942
|
||||
#: ../../sysadmclient.rst:950
|
||||
msgid ""
|
||||
"**Import Key:** If the user has already created a PersonaCrypt device on "
|
||||
"another |trueos| system, click this button to import a previously saved copy"
|
||||
@@ -983,7 +961,7 @@ msgid ""
|
||||
"can now login to this computer using PersonaCrypt."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:950
|
||||
#: ../../sysadmclient.rst:958
|
||||
msgid ""
|
||||
"Since the USB stick will hold the user's home directory and files, ensure "
|
||||
"the stick is large enough to meet the anticipated storage needs of the home "
|
||||
@@ -993,7 +971,7 @@ msgid ""
|
||||
"logged in."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:999
|
||||
#: ../../sysadmclient.rst:982
|
||||
msgid ""
|
||||
"When stealth sessions have been configured, PersonaCrypt users will still be"
|
||||
" displayed in the login menu, even if their USB device is not inserted. This"
|
||||
@@ -1001,47 +979,47 @@ msgid ""
|
||||
"session."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1004
|
||||
#: ../../sysadmclient.rst:987
|
||||
msgid ""
|
||||
"In the field with the yellow padlock icon, input the password for the user "
|
||||
"account. In the field with the grey USB stick icon, input the password "
|
||||
"associated with the PersonaCrypt device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1008
|
||||
#: ../../sysadmclient.rst:991
|
||||
msgid ""
|
||||
"To prevent data corruption and freezing the system **DO NOT** remove the "
|
||||
"PersonaCrypt device while logged in! Always log out of your session before "
|
||||
"physically removing the device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1016
|
||||
#: ../../sysadmclient.rst:1045
|
||||
msgid "Managing Groups"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1018
|
||||
#: ../../sysadmclient.rst:1047
|
||||
msgid ""
|
||||
"Click the :guilabel:`Groups` tab to view and manage the groups on the "
|
||||
"system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s <user4>`, "
|
||||
"shows the group membership for the *operator* and *wheel* groups:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1029
|
||||
#: ../../sysadmclient.rst:1058
|
||||
msgid "This screen has 2 columns:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1031
|
||||
#: ../../sysadmclient.rst:1060
|
||||
msgid ""
|
||||
"**Members:** Indicates if the highlighted group contains any user accounts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1034
|
||||
#: ../../sysadmclient.rst:1063
|
||||
msgid ""
|
||||
"**Available:** Shows all of the system and user accounts on the system in "
|
||||
"alphabetical order."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1037
|
||||
#: ../../sysadmclient.rst:1066
|
||||
msgid ""
|
||||
"To add an account to a group, highlight the group name, then highlight the "
|
||||
"account name in the :guilabel:`Available` column. Click the left arrow and "
|
||||
@@ -1051,7 +1029,7 @@ msgid ""
|
||||
"added to a group."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1044
|
||||
#: ../../sysadmclient.rst:1073
|
||||
msgid ""
|
||||
"If you add a user to the *operator* group, they will have permission to use "
|
||||
"commands requiring administrative access and will be prompted for their own "
|
||||
@@ -1060,15 +1038,15 @@ msgid ""
|
||||
"will be prompted for the superuser password whenever they use the command."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1051
|
||||
#: ../../sysadmclient.rst:1080
|
||||
msgid "To view all of the groups on the system, click :guilabel:`Advanced`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1057
|
||||
#: ../../sysadmclient.rst:1086
|
||||
msgid "Life Preserver"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1059
|
||||
#: ../../sysadmclient.rst:1088
|
||||
msgid ""
|
||||
"The Life Preserver utility is designed to take full advantage of the "
|
||||
"functionality provided by ZFS snapshots. This utility allows you to schedule"
|
||||
@@ -1077,25 +1055,25 @@ msgid ""
|
||||
"benefits:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1081
|
||||
#: ../../sysadmclient.rst:1110
|
||||
msgid ""
|
||||
"Replication is an efficient way to keep the files on two systems in sync. "
|
||||
"With Life Preserver, the snapshots taken on the |trueos| system will be "
|
||||
"synchronized with their versions stored on the specified backup server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1086
|
||||
#: ../../sysadmclient.rst:1115
|
||||
msgid "Snapshots are sent to the backup server over an encrypted connection."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1088
|
||||
#: ../../sysadmclient.rst:1117
|
||||
msgid ""
|
||||
"Having a copy of the snapshots on another system makes it possible to "
|
||||
"perform an operating system restore should the |trueos| system become "
|
||||
"unusable or to deploy an identical system to different hardware."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1092
|
||||
#: ../../sysadmclient.rst:1121
|
||||
msgid ""
|
||||
"To manage snapshots and replication using the |sysadm| graphical client, go "
|
||||
"to :menuselection:`Utilities --> Life Preserver`. The rest of this section "
|
||||
@@ -1103,16 +1081,16 @@ msgid ""
|
||||
"Preserver."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1101
|
||||
#: ../../sysadmclient.rst:1130
|
||||
msgid "Snapshots Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1112
|
||||
#: ../../sysadmclient.rst:1141
|
||||
msgid ""
|
||||
"This screen will display any created snapshots and provides buttons to:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1114
|
||||
#: ../../sysadmclient.rst:1143
|
||||
msgid ""
|
||||
"**Create:** Used to create a manual snapshot of the specified pool now. For "
|
||||
"example, you could create a snapshot before making changes to an important "
|
||||
@@ -1126,14 +1104,14 @@ msgid ""
|
||||
"snapshot was created."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1125
|
||||
#: ../../sysadmclient.rst:1154
|
||||
msgid ""
|
||||
"**Remove:** Used to delete a highlighted snapshot. **This is a permanent "
|
||||
"change that can not be reversed.** In other words, the versions of files at "
|
||||
"the point in time the snapshot was created will be lost."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1130
|
||||
#: ../../sysadmclient.rst:1159
|
||||
msgid ""
|
||||
"**Revert:** If you highlight a snapshot entry, this button and the drop-down"
|
||||
" menu next to it will activate. You can use the drop-down menu to specify "
|
||||
@@ -1143,11 +1121,11 @@ msgid ""
|
||||
" after the snapshot was taken will be lost."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1142
|
||||
#: ../../sysadmclient.rst:1171
|
||||
msgid "Replication Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1144
|
||||
#: ../../sysadmclient.rst:1173
|
||||
msgid ""
|
||||
"Life Preserver can be configured to replicate snapshots to another system "
|
||||
"over an encrypted SSH connection, though the backup itself is stored in an "
|
||||
@@ -1155,13 +1133,13 @@ msgid ""
|
||||
" another system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1149
|
||||
#: ../../sysadmclient.rst:1178
|
||||
msgid ""
|
||||
"In order to configure replication, the remote system to hold a copy of the "
|
||||
"snapshots must first meet several requirements:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1156
|
||||
#: ../../sysadmclient.rst:1185
|
||||
msgid ""
|
||||
"The backup server **must be formatted with the latest version of ZFS,** also"
|
||||
" known as ZFS feature flags or ZFSv5000. Operating systems that support this"
|
||||
@@ -1169,14 +1147,14 @@ msgid ""
|
||||
"FreeNAS 9.1.x or higher."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1162
|
||||
#: ../../sysadmclient.rst:1191
|
||||
msgid ""
|
||||
"The system must have SSH installed and the SSH service must be running. If "
|
||||
"the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is"
|
||||
" already installed, but you will need to start the SSH service."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1167
|
||||
#: ../../sysadmclient.rst:1196
|
||||
msgid ""
|
||||
"If the backup server is running |trueos| or |pcbsd|, you will need to open "
|
||||
"TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is "
|
||||
@@ -1186,7 +1164,7 @@ msgid ""
|
||||
"backup system, make sure it has a rule to allow SSH."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1175
|
||||
#: ../../sysadmclient.rst:1204
|
||||
msgid ""
|
||||
":numref:`Figure %s <lpreserver2>` shows the initial :guilabel:`Replication` "
|
||||
"tab on a system that has not yet been configured for replication. This "
|
||||
@@ -1194,29 +1172,29 @@ msgid ""
|
||||
"schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1186
|
||||
#: ../../sysadmclient.rst:1215
|
||||
msgid ""
|
||||
"To schedule the replication, click :guilabel:`+` to display the \"Setup "
|
||||
"Replication\" screen shown in :numref:`Figure %s <lpreserver3>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1196
|
||||
#: ../../sysadmclient.rst:1225
|
||||
msgid "Input the following information:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1198
|
||||
#: ../../sysadmclient.rst:1227
|
||||
msgid ""
|
||||
"**Host IP:** The IP address of the remote system to store the replicated "
|
||||
"snapshots."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1201
|
||||
#: ../../sysadmclient.rst:1230
|
||||
msgid ""
|
||||
"**SSH Port:** The port number, if the remote system is running SSH on a port"
|
||||
" other than the default of 22."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1204
|
||||
#: ../../sysadmclient.rst:1233
|
||||
msgid ""
|
||||
"**Dataset:** The name of the ZFS pool and optional dataset on the remote "
|
||||
"system. For example, \"remotetank\" will save the snapshots to a ZFS pool of"
|
||||
@@ -1224,7 +1202,7 @@ msgid ""
|
||||
"existing dataset named \"mybackups\" on the pool named \"remotetank\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1210
|
||||
#: ../../sysadmclient.rst:1239
|
||||
msgid ""
|
||||
"**Frequency:** Use the drop-down menu to select how often to initiate the "
|
||||
"replication. Available choices are :guilabel:`Sync with snapshot` (at the "
|
||||
@@ -1235,87 +1213,87 @@ msgid ""
|
||||
":guilabel:`Start`) in this screen."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1219
|
||||
#: ../../sysadmclient.rst:1248
|
||||
msgid ""
|
||||
"**Username:** The username must already exist on the remote system, have "
|
||||
"write access to the specified \"Dataset\", and have permission to SSH into "
|
||||
"that system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1223
|
||||
#: ../../sysadmclient.rst:1252
|
||||
msgid "**Password:** The password associated with the \"Username\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1225
|
||||
#: ../../sysadmclient.rst:1254
|
||||
msgid ""
|
||||
"**Local DS:** Use the drop-down menu to select the pool or dataset to "
|
||||
"replicate to the remote system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1228
|
||||
#: ../../sysadmclient.rst:1257
|
||||
msgid ""
|
||||
"The buttons at the top of the \"Setup Replication\" screen have several "
|
||||
"uses:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1231
|
||||
#: ../../sysadmclient.rst:1260
|
||||
msgid ""
|
||||
"**+ icon:** Sdd a replication schedule. Multiple schedules are supported, "
|
||||
"meaning you can replicate to multiple systems or replicate different \"Local"
|
||||
" DS\" datasets at different times."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1235
|
||||
#: ../../sysadmclient.rst:1264
|
||||
msgid ""
|
||||
"**- icon:** Remove an already created, and highlighted, replication "
|
||||
"schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1238
|
||||
#: ../../sysadmclient.rst:1267
|
||||
msgid "**gear icon:** Modify the schedule for the highlighted replication."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1240
|
||||
#: ../../sysadmclient.rst:1269
|
||||
msgid ""
|
||||
"**Start:** Manually starts a replication to the system specified in the "
|
||||
"highlighted replication."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1243
|
||||
#: ../../sysadmclient.rst:1272
|
||||
msgid ""
|
||||
"**Initialize:** Deletes the existing replicated snapshots on the remote "
|
||||
"system and starts a new replication. This is useful if a replication gets "
|
||||
"stuck and will not complete."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1251
|
||||
#: ../../sysadmclient.rst:1280
|
||||
msgid "Schedules Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1253
|
||||
#: ../../sysadmclient.rst:1282
|
||||
msgid ""
|
||||
"This tab is used to manage when snapshots of the ZFS pool are created. "
|
||||
"Multiple snapshot schedules are supported if the system has multiple pools."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1257
|
||||
#: ../../sysadmclient.rst:1286
|
||||
msgid ""
|
||||
"Snapshots are created on the entire pool as they are needed when "
|
||||
":ref:`Restoring the Operating System`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1260
|
||||
#: ../../sysadmclient.rst:1289
|
||||
msgid ""
|
||||
"To create a snapshot schedule, click the :guilabel:`camera` icon in the "
|
||||
"lower left corner of this tab. This will activate the \"Setup Snapshot "
|
||||
"Schedule\" pane as seen in :numref:`Figure %s <lpreserver4>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1270
|
||||
#: ../../sysadmclient.rst:1299
|
||||
msgid "This pane contains several options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1275
|
||||
#: ../../sysadmclient.rst:1304
|
||||
msgid ""
|
||||
"**Snapshots to keep:** Snapshots are automatically pruned after the "
|
||||
"specified number of snapshots to prevent snapshots from eventually using up "
|
||||
@@ -1326,7 +1304,7 @@ msgid ""
|
||||
"manually in the :guilabel:`Snapshots` tab."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1284
|
||||
#: ../../sysadmclient.rst:1313
|
||||
msgid ""
|
||||
"**Frequency:** Use the drop-down menu to select how often snapshots occur. "
|
||||
"Options include \"Daily\" (which will allow you to select the time of day), "
|
||||
@@ -1334,37 +1312,37 @@ msgid ""
|
||||
"Minutes\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1289
|
||||
#: ../../sysadmclient.rst:1318
|
||||
msgid ""
|
||||
"Once you have created a snapshot schedule, you can use the \"gear\" icon "
|
||||
"next to the \"camera\" icon to modify the highlighted schedule or the \"X\" "
|
||||
"icon to delete the highlighted schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1300
|
||||
#: ../../sysadmclient.rst:1329
|
||||
msgid ""
|
||||
"To schedule when the scrub occurs, click the third icon from the right which"
|
||||
" will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure "
|
||||
"%s <lpreserver5>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1318
|
||||
#: ../../sysadmclient.rst:1347
|
||||
msgid ""
|
||||
"Once you have created a scrub schedule, you can use the \"gear\" icon next "
|
||||
"to the \"schedule scrub\" icon to modify the highlighted schedule or the "
|
||||
"\"X\" icon to delete the highlighted schedule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1328
|
||||
#: ../../sysadmclient.rst:1357
|
||||
msgid ""
|
||||
"The :guilabel:`Settings` tab is shown in :numref:`Figure %s <lpreserver6>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1337
|
||||
#: ../../sysadmclient.rst:1366
|
||||
msgid "Many settings are configurable:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1339
|
||||
#: ../../sysadmclient.rst:1368
|
||||
msgid ""
|
||||
"**Disk Usage Warning:** Enter a number up to 99 to indicate at which "
|
||||
"percentage of disk space Life Preserver will display an alert in the system "
|
||||
@@ -1372,41 +1350,41 @@ msgid ""
|
||||
"space."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1344
|
||||
#: ../../sysadmclient.rst:1373
|
||||
msgid ""
|
||||
"**Email:** To receive an email when disk usage reaches the percentage "
|
||||
"configured in the \"Disk Usage Warning\", enter an email address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1347
|
||||
#: ../../sysadmclient.rst:1376
|
||||
msgid ""
|
||||
"**Email Trigger:** This setting can be set to \"All\", \"Warn\", or "
|
||||
"\"Error\" and indicates the type of condition which will trigger an email "
|
||||
"message."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1350
|
||||
#: ../../sysadmclient.rst:1379
|
||||
msgid "**Recursive Management:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1352
|
||||
#: ../../sysadmclient.rst:1381
|
||||
msgid ""
|
||||
"If you make any changes in this screen, press :guilabel:`Save Settings` to "
|
||||
"apply them."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1359
|
||||
#: ../../sysadmclient.rst:1388
|
||||
msgid "Using the lpreserver CLI"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1361
|
||||
#: ../../sysadmclient.rst:1390
|
||||
msgid ""
|
||||
"The :command:`lpreserver` command line utility can also be used to manage "
|
||||
"snapshots and replication. This command needs to be run as the superuser. To"
|
||||
" display its usage, type the command without any arguments:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1381
|
||||
#: ../../sysadmclient.rst:1410
|
||||
msgid ""
|
||||
"Each command has its own help text that describes its parameters and "
|
||||
"provides a usage example. For example, to receive help on how to use the "
|
||||
@@ -1417,104 +1395,104 @@ msgstr ""
|
||||
msgid "Command Line and GUI Equivalents"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**Command Line**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**GUI**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1450
|
||||
#: ../../sysadmclient.rst:1479
|
||||
msgid "**Description**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452
|
||||
#: ../../sysadmclient.rst:1481
|
||||
msgid "**cronsnap**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499
|
||||
msgid "\"Snapshots\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1452
|
||||
#: ../../sysadmclient.rst:1481
|
||||
msgid ""
|
||||
"schedule when snapshots occur and how long to keep them; the **stop** option"
|
||||
" can be used to disable snapshot creation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "**cronscrub**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "\"Schedules\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1457
|
||||
#: ../../sysadmclient.rst:1486
|
||||
msgid "schedule a ZFS scrub"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459
|
||||
#: ../../sysadmclient.rst:1488
|
||||
msgid "**get**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495
|
||||
msgid "\"Settings\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1459
|
||||
#: ../../sysadmclient.rst:1488
|
||||
msgid "list Life Preserver options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid "**replicate**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid "\"Replication\" tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1461
|
||||
#: ../../sysadmclient.rst:1490
|
||||
msgid ""
|
||||
"used to list, add, and remove backup server; read the **help** for this "
|
||||
"command for examples"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1495
|
||||
msgid "**set**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1466
|
||||
#: ../../sysadmclient.rst:1495
|
||||
msgid ""
|
||||
"configures Life Preserver options; read **help** for the list of "
|
||||
"configurable options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1499
|
||||
msgid "**snapshot**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1470
|
||||
#: ../../sysadmclient.rst:1499
|
||||
msgid ""
|
||||
"create and replicate a new ZFS snapshot; by default, snapshots are "
|
||||
"recursive, meaning that a that a snapshot is taken of every dataset within a"
|
||||
" pool"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1476
|
||||
#: ../../sysadmclient.rst:1505
|
||||
msgid "**status**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1476
|
||||
#: ../../sysadmclient.rst:1505
|
||||
msgid "lists the last snapshot name and replication status"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1483
|
||||
#: ../../sysadmclient.rst:1512
|
||||
msgid "Restoring the Operating System"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1485
|
||||
#: ../../sysadmclient.rst:1514
|
||||
msgid ""
|
||||
"If you have replicated the system's snapshots to a remote backup server, you"
|
||||
" can use a |trueos| installation media to perform an operating system "
|
||||
@@ -1522,7 +1500,7 @@ msgid ""
|
||||
"you get to the screen shown in :numref:`Figure %s <restore1>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1497
|
||||
#: ../../sysadmclient.rst:1526
|
||||
msgid ""
|
||||
"Before you can perform a restore, the network interface must be configured. "
|
||||
"Click :guilabel:`Network Connectivity` (second icon from the left) in order "
|
||||
@@ -1533,7 +1511,7 @@ msgid ""
|
||||
"continuing."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1505
|
||||
#: ../../sysadmclient.rst:1534
|
||||
msgid ""
|
||||
"Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and"
|
||||
" :guilabel:`Next`. This will start the Restore Wizard. In the screen shown "
|
||||
@@ -1543,7 +1521,7 @@ msgid ""
|
||||
"number."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1519
|
||||
#: ../../sysadmclient.rst:1548
|
||||
msgid ""
|
||||
"Click :guilabel:`Next` and the wizard will provide a summary of your "
|
||||
"selections. If correct, click :guilabel:`Finish`; otherwise, click "
|
||||
@@ -1626,7 +1604,7 @@ msgid ""
|
||||
"press :guilabel:`Close Ports`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1152
|
||||
#: ../../sysadmclient.rst:1181
|
||||
msgid ""
|
||||
"Snapshots occurring too frequently can introduce errors in replication. To "
|
||||
"avoid errors, ensure snapshots are configured to take place slower than the "
|
||||
@@ -1685,7 +1663,7 @@ msgid ""
|
||||
"accounts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1065
|
||||
#: ../../sysadmclient.rst:1094
|
||||
msgid ""
|
||||
"A snapshot provides a \"point-in-time\" image of the ZFS pool. This is "
|
||||
"similar to a full system backup as the snapshot contains the information for"
|
||||
@@ -1703,26 +1681,26 @@ msgid ""
|
||||
"snapshot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1272
|
||||
#: ../../sysadmclient.rst:1301
|
||||
msgid ""
|
||||
"**Storage Pool:** Select the ZFS storage pool that contains the datasets "
|
||||
"that you wish to snapshot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1293
|
||||
#: ../../sysadmclient.rst:1322
|
||||
msgid ""
|
||||
"This screen can also be used to manage the ZFS scrub schedule. Scrubs are "
|
||||
"recommended as they can provide an early indication of a potential disk "
|
||||
"failure. Scrubs can be scheduled on a per-pool basis."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1297
|
||||
#: ../../sysadmclient.rst:1326
|
||||
msgid ""
|
||||
"If you have multiple pools, be sure to create a scrub schedule for each "
|
||||
"pool."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1310
|
||||
#: ../../sysadmclient.rst:1339
|
||||
msgid ""
|
||||
"Select the pool from the :guilabel:`Storage Pool` drop-down menu, then "
|
||||
"select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", "
|
||||
@@ -1807,26 +1785,17 @@ msgstr ""
|
||||
msgid ": Viewing All Accounts and Their Details"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:930
|
||||
#: ../../sysadmclient.rst:938
|
||||
msgid ": Initialize PersonaCrypt Device"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:932
|
||||
msgid ""
|
||||
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
|
||||
"Note this section is hidden if the currently logged in user is selected. "
|
||||
"Also, if you have just created a user and do not see these options, click "
|
||||
":guilabel:`Save` then re-highlight the user to display these options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:947
|
||||
#: ../../sysadmclient.rst:955
|
||||
msgid ""
|
||||
"To prepare a PersonaCrypt device for this user, insert a USB stick and click"
|
||||
" :guilabel:`Initialize Device`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:957
|
||||
#: ../../sysadmclient.rst:965
|
||||
msgid ""
|
||||
"Type a password to associate with the device. Click :guilabel:`Save` to "
|
||||
"initialize the device. The User Manager may take a moment to prepare the "
|
||||
@@ -1834,49 +1803,49 @@ msgid ""
|
||||
" to allow removal of PersonaCrypt."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1027
|
||||
#: ../../sysadmclient.rst:1056
|
||||
msgid ": Managing Groups Using User Manager"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1110
|
||||
#: ../../sysadmclient.rst:1139
|
||||
msgid ": Snapshot Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1184
|
||||
#: ../../sysadmclient.rst:1213
|
||||
msgid ": Replication Tab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1194
|
||||
#: ../../sysadmclient.rst:1223
|
||||
msgid ": Scheduling a Replication"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1268
|
||||
#: ../../sysadmclient.rst:1297
|
||||
msgid ": Scheduling a Snapshot"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1308
|
||||
#: ../../sysadmclient.rst:1337
|
||||
msgid ": Scheduling a Scrub"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1335
|
||||
#: ../../sysadmclient.rst:1364
|
||||
msgid ": Life Preserver Settings"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1442
|
||||
#: ../../sysadmclient.rst:1471
|
||||
msgid ""
|
||||
":numref:`Table %s <cmdgui>` shows the command line equivalents to the "
|
||||
"graphical options provided by the Life Preserver GUI."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1495
|
||||
#: ../../sysadmclient.rst:1524
|
||||
msgid ": Selecting to Restore/Clone From Backup"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1517
|
||||
#: ../../sysadmclient.rst:1546
|
||||
msgid ": Input the Information for a SSH Restore"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1523
|
||||
#: ../../sysadmclient.rst:1552
|
||||
msgid ""
|
||||
"Once the connection to the backup server succeeds, you will be able to "
|
||||
"select which host to restore. After making your selection, click "
|
||||
@@ -1892,7 +1861,7 @@ msgid ""
|
||||
":guilabel:`Next` to perform the restore."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:987
|
||||
#: ../../sysadmclient.rst:970
|
||||
msgid ""
|
||||
"Once a user has been initialized for PersonaCrypt on the system, their user "
|
||||
"account will no longer be displayed when logging in, **unless** their "
|
||||
@@ -1901,7 +1870,7 @@ msgid ""
|
||||
":numref:`Figure %s <troslogin5>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:997
|
||||
#: ../../sysadmclient.rst:980
|
||||
msgid ": |trueos| Login Screen with PersonaCrypt"
|
||||
msgstr ""
|
||||
|
||||
@@ -1949,7 +1918,7 @@ msgstr ""
|
||||
msgid ": |sysadm| Task Manager"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1103
|
||||
#: ../../sysadmclient.rst:1132
|
||||
msgid ""
|
||||
":numref:`Figure %s <lpreserver1>` shows the :guilabel:`Snapshots` tab on a "
|
||||
"system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"."
|
||||
@@ -2013,6 +1982,134 @@ msgid ""
|
||||
":guilabel:`Save Settings`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:894
|
||||
msgid ""
|
||||
"|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
"PersonaCrypt device is a removable USB media, such as a USB flash drive, "
|
||||
"formatted with ZFS and encrypted with either GELI or PEFS. This device is "
|
||||
"used to hold a specific user's home directory, meaning they can securely "
|
||||
"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 "
|
||||
"or higher system. For example, this can be used to securely access one's "
|
||||
"home directory from a laptop, home computer, and work computer. The device "
|
||||
"is protected by an encryption key and a different (recommended) password "
|
||||
"separate from the user's login password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:916
|
||||
msgid "GELI"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:918
|
||||
msgid ""
|
||||
"PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
"your passphrase, and the other being a key stored on disk. Without both of "
|
||||
"these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
"the key and manages to get your password, it is still worthless without the "
|
||||
"system it was paired with. GELI is used by default in |trueos| as it is more"
|
||||
" fully featured over PEFS."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:940
|
||||
msgid ""
|
||||
"Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
"buttons are available in the :guilabel:`PersonaCrypt` tab of "
|
||||
":guilabel:`Advanced Mode`. Note this section is hidden if the currently "
|
||||
"logged in user is selected. Also, if you have just created a user and do not"
|
||||
" see these options, click :guilabel:`Save`, then re-highlight the user to "
|
||||
"display these options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:999
|
||||
msgid "PEFS"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1001
|
||||
msgid ""
|
||||
"`PEFS <http://pefs.io/>`_ stands for Private Encrypted File System. It is "
|
||||
"open source software freely available under the BSD license, and is included"
|
||||
" in |trueos| by default. PEFS runs on top of any existing file system, "
|
||||
"providing an encryption layer independent of the underlying file system. "
|
||||
"PersonaCrypt can be configured to use PEFS in place of GELI, which "
|
||||
"eliminates the need for external media, as the encrypted PEFS database is "
|
||||
"stored on the local disk."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1009
|
||||
msgid ""
|
||||
"While PEFS does not use a USB drive, be sure to print or otherwise backup "
|
||||
"the PEFS generated key fragment stored on the disk."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1012
|
||||
msgid "**Initialize PEFS with the Command Line**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1014
|
||||
msgid ""
|
||||
"Because PEFS does not use a USB drive with its encryption, the user will "
|
||||
"need a password file (pfile) containing the desired password, **before** "
|
||||
"initializing PEFS for a user account. Once this pfile is created, enabling "
|
||||
"PEFS through PersonaCrypt is accomplished in a CLI with "
|
||||
":command:`personacrypt init <username> <pfile> PEFS`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1020
|
||||
msgid ""
|
||||
"For example, the user account **test** has a pfile named "
|
||||
":file:`testpfile.txt`, which contains the single text string of **test's** "
|
||||
"chosen password. Next, the administrator adds PEFS encryption to the "
|
||||
"**test** acount by opening a CLI, logging in as root, and typing:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1029
|
||||
msgid ""
|
||||
"PersonaCrypt will initialize the account **test** with PEFS, using the "
|
||||
"string in :file:`testpfile.txt` as the new password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1032
|
||||
msgid ""
|
||||
"The |sysadm| User Manager can also initialize a user account with PEFS by "
|
||||
"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` "
|
||||
"drop down menu of the :guilabel:`PersonaCrypt` tab."
|
||||
msgstr ""
|
||||
|
||||
#: ../../sysadmclient.rst:1036
|
||||
msgid ""
|
||||
"In addition to initializing an account with PEFS, PersonaCrypt also supports"
|
||||
" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt "
|
||||
"export <username>` and :command:`personacrypt import <keyfile>`, "
|
||||
"respectively."
|
||||
msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "|trueos| provides support for a security feature known as PersonaCrypt. A "
|
||||
#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted"
|
||||
#~ " with ZFS and encrypted with GELI. This device is used to hold a specific "
|
||||
#~ "user's home directory, meaning they can securely transport and access their "
|
||||
#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For "
|
||||
#~ "example, this can be used to securely access one's home directory from a "
|
||||
#~ "laptop, home computer, and work computer. The device is protected by an "
|
||||
#~ "encryption key and a password which is, and should be, separate from the "
|
||||
#~ "user's login password."
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being "
|
||||
#~ "your passphrase, and the other being a key stored on disk. Without both of "
|
||||
#~ "these parts, the media cannot be decrypted. This means if somebody steals "
|
||||
#~ "the key and manages to get your password, it is still worthless without the "
|
||||
#~ "system it was paired with."
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two "
|
||||
#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". "
|
||||
#~ "Note this section is hidden if the currently logged in user is selected. "
|
||||
#~ "Also, if you have just created a user and do not see these options, click "
|
||||
#~ ":guilabel:`Save` then re-highlight the user to display these options:"
|
||||
#~ msgstr ""
|
||||
|
||||
#~ msgid ""
|
||||
#~ "**Max Boot Environments:** |trueos| automatically creates a boot environment"
|
||||
#~ " before updating any software, the operating system, or applying a system "
|
||||
|
||||
Reference in New Issue
Block a user