From 79a32b50096de3382366a5fb36ee4658677008e8 Mon Sep 17 00:00:00 2001 From: Mrt134 Date: Fri, 9 Dec 2016 14:38:17 -0500 Subject: [PATCH] Personacrypt and PEFS: TRANSLATIONS - Update translation files. --- .../po/ar/LC_MESSAGES/sysadmclient.po | 399 +++++++++++------- .../po/bg/LC_MESSAGES/sysadmclient.po | 399 +++++++++++------- .../po/da/LC_MESSAGES/sysadmclient.po | 399 +++++++++++------- .../po/de/LC_MESSAGES/sysadmclient.po | 399 +++++++++++------- .../po/es/LC_MESSAGES/sysadmclient.po | 399 +++++++++++------- .../po/fr/LC_MESSAGES/sysadmclient.po | 399 +++++++++++------- .../po/id/LC_MESSAGES/sysadmclient.po | 399 +++++++++++------- .../po/it/LC_MESSAGES/sysadmclient.po | 399 +++++++++++------- .../po/pt_BR/LC_MESSAGES/sysadmclient.po | 399 +++++++++++------- .../po/tr/LC_MESSAGES/sysadmclient.po | 399 +++++++++++------- .../po/uk/LC_MESSAGES/sysadmclient.po | 399 +++++++++++------- .../po/zh_CN/LC_MESSAGES/sysadmclient.po | 399 +++++++++++------- .../po/zh_HK/LC_MESSAGES/sysadmclient.po | 399 +++++++++++------- 13 files changed, 3224 insertions(+), 1963 deletions(-) diff --git a/docs/client_handbook/po/ar/LC_MESSAGES/sysadmclient.po b/docs/client_handbook/po/ar/LC_MESSAGES/sysadmclient.po index 25c5ac5..e4a2632 100644 --- a/docs/client_handbook/po/ar/LC_MESSAGES/sysadmclient.po +++ b/docs/client_handbook/po/ar/LC_MESSAGES/sysadmclient.po @@ -482,7 +482,7 @@ msgid "" "The :guilabel:`Settings` tab is shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1326 +#: ../../sysadmclient.rst:1355 msgid "Settings Tab" msgstr "" @@ -924,20 +924,7 @@ msgstr "" msgid "PersonaCrypt" msgstr "" -#: ../../sysadmclient.rst:894 -msgid "" -"|trueos| provides support for a security feature known as PersonaCrypt. A " -"PersonaCrypt device is a removable USB media, such as a USB stick, formatted" -" with ZFS and encrypted with GELI. This device is used to hold a specific " -"user's home directory, meaning they can securely transport and access their " -"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For " -"example, this can be used to securely access one's home directory from a " -"laptop, home computer, and work computer. The device is protected by an " -"encryption key and a password which is, and should be, separate from the " -"user's login password." -msgstr "" - -#: ../../sysadmclient.rst:904 +#: ../../sysadmclient.rst:905 msgid "" "When a user is configured to use a PersonaCrypt device, that user can not " "login using an unencrypted session on the same system. In other words, the " @@ -946,22 +933,13 @@ msgid "" "different user accounts, one for each type of session." msgstr "" -#: ../../sysadmclient.rst:911 -msgid "" -"PersonaCrypt uses GELI's ability to split the key into two parts: one being " -"your passphrase, and the other being a key stored on disk. Without both of " -"these parts, the media cannot be decrypted. This means if somebody steals " -"the key and manages to get your password, it is still worthless without the " -"system it was paired with." -msgstr "" - -#: ../../sysadmclient.rst:917 +#: ../../sysadmclient.rst:925 msgid "" "USB devices do eventually fail. Always backup any important files stored on " "the PersonaCrypt device to another device or system." msgstr "" -#: ../../sysadmclient.rst:920 +#: ../../sysadmclient.rst:928 msgid "" "The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt " "device for any login user, **except** for the currently logged in user. In " @@ -969,13 +947,13 @@ msgid "" "*dlavigne*, has been created and the entry for the user has been clicked." msgstr "" -#: ../../sysadmclient.rst:939 +#: ../../sysadmclient.rst:947 msgid "" "**Initialize Device:** Used to prepare the USB device which will be used as " "the user's home directory." msgstr "" -#: ../../sysadmclient.rst:942 +#: ../../sysadmclient.rst:950 msgid "" "**Import Key:** If the user has already created a PersonaCrypt device on " "another |trueos| system, click this button to import a previously saved copy" @@ -983,7 +961,7 @@ msgid "" "can now login to this computer using PersonaCrypt." msgstr "" -#: ../../sysadmclient.rst:950 +#: ../../sysadmclient.rst:958 msgid "" "Since the USB stick will hold the user's home directory and files, ensure " "the stick is large enough to meet the anticipated storage needs of the home " @@ -993,7 +971,7 @@ msgid "" "logged in." msgstr "" -#: ../../sysadmclient.rst:999 +#: ../../sysadmclient.rst:982 msgid "" "When stealth sessions have been configured, PersonaCrypt users will still be" " displayed in the login menu, even if their USB device is not inserted. This" @@ -1001,47 +979,47 @@ msgid "" "session." msgstr "" -#: ../../sysadmclient.rst:1004 +#: ../../sysadmclient.rst:987 msgid "" "In the field with the yellow padlock icon, input the password for the user " "account. In the field with the grey USB stick icon, input the password " "associated with the PersonaCrypt device." msgstr "" -#: ../../sysadmclient.rst:1008 +#: ../../sysadmclient.rst:991 msgid "" "To prevent data corruption and freezing the system **DO NOT** remove the " "PersonaCrypt device while logged in! Always log out of your session before " "physically removing the device." msgstr "" -#: ../../sysadmclient.rst:1016 +#: ../../sysadmclient.rst:1045 msgid "Managing Groups" msgstr "" -#: ../../sysadmclient.rst:1018 +#: ../../sysadmclient.rst:1047 msgid "" "Click the :guilabel:`Groups` tab to view and manage the groups on the " "system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s `, " "shows the group membership for the *operator* and *wheel* groups:" msgstr "" -#: ../../sysadmclient.rst:1029 +#: ../../sysadmclient.rst:1058 msgid "This screen has 2 columns:" msgstr "" -#: ../../sysadmclient.rst:1031 +#: ../../sysadmclient.rst:1060 msgid "" "**Members:** Indicates if the highlighted group contains any user accounts." msgstr "" -#: ../../sysadmclient.rst:1034 +#: ../../sysadmclient.rst:1063 msgid "" "**Available:** Shows all of the system and user accounts on the system in " "alphabetical order." msgstr "" -#: ../../sysadmclient.rst:1037 +#: ../../sysadmclient.rst:1066 msgid "" "To add an account to a group, highlight the group name, then highlight the " "account name in the :guilabel:`Available` column. Click the left arrow and " @@ -1051,7 +1029,7 @@ msgid "" "added to a group." msgstr "" -#: ../../sysadmclient.rst:1044 +#: ../../sysadmclient.rst:1073 msgid "" "If you add a user to the *operator* group, they will have permission to use " "commands requiring administrative access and will be prompted for their own " @@ -1060,15 +1038,15 @@ msgid "" "will be prompted for the superuser password whenever they use the command." msgstr "" -#: ../../sysadmclient.rst:1051 +#: ../../sysadmclient.rst:1080 msgid "To view all of the groups on the system, click :guilabel:`Advanced`." msgstr "" -#: ../../sysadmclient.rst:1057 +#: ../../sysadmclient.rst:1086 msgid "Life Preserver" msgstr "" -#: ../../sysadmclient.rst:1059 +#: ../../sysadmclient.rst:1088 msgid "" "The Life Preserver utility is designed to take full advantage of the " "functionality provided by ZFS snapshots. This utility allows you to schedule" @@ -1077,25 +1055,25 @@ msgid "" "benefits:" msgstr "" -#: ../../sysadmclient.rst:1081 +#: ../../sysadmclient.rst:1110 msgid "" "Replication is an efficient way to keep the files on two systems in sync. " "With Life Preserver, the snapshots taken on the |trueos| system will be " "synchronized with their versions stored on the specified backup server." msgstr "" -#: ../../sysadmclient.rst:1086 +#: ../../sysadmclient.rst:1115 msgid "Snapshots are sent to the backup server over an encrypted connection." msgstr "" -#: ../../sysadmclient.rst:1088 +#: ../../sysadmclient.rst:1117 msgid "" "Having a copy of the snapshots on another system makes it possible to " "perform an operating system restore should the |trueos| system become " "unusable or to deploy an identical system to different hardware." msgstr "" -#: ../../sysadmclient.rst:1092 +#: ../../sysadmclient.rst:1121 msgid "" "To manage snapshots and replication using the |sysadm| graphical client, go " "to :menuselection:`Utilities --> Life Preserver`. The rest of this section " @@ -1103,16 +1081,16 @@ msgid "" "Preserver." msgstr "" -#: ../../sysadmclient.rst:1101 +#: ../../sysadmclient.rst:1130 msgid "Snapshots Tab" msgstr "" -#: ../../sysadmclient.rst:1112 +#: ../../sysadmclient.rst:1141 msgid "" "This screen will display any created snapshots and provides buttons to:" msgstr "" -#: ../../sysadmclient.rst:1114 +#: ../../sysadmclient.rst:1143 msgid "" "**Create:** Used to create a manual snapshot of the specified pool now. For " "example, you could create a snapshot before making changes to an important " @@ -1126,14 +1104,14 @@ msgid "" "snapshot was created." msgstr "" -#: ../../sysadmclient.rst:1125 +#: ../../sysadmclient.rst:1154 msgid "" "**Remove:** Used to delete a highlighted snapshot. **This is a permanent " "change that can not be reversed.** In other words, the versions of files at " "the point in time the snapshot was created will be lost." msgstr "" -#: ../../sysadmclient.rst:1130 +#: ../../sysadmclient.rst:1159 msgid "" "**Revert:** If you highlight a snapshot entry, this button and the drop-down" " menu next to it will activate. You can use the drop-down menu to specify " @@ -1143,11 +1121,11 @@ msgid "" " after the snapshot was taken will be lost." msgstr "" -#: ../../sysadmclient.rst:1142 +#: ../../sysadmclient.rst:1171 msgid "Replication Tab" msgstr "" -#: ../../sysadmclient.rst:1144 +#: ../../sysadmclient.rst:1173 msgid "" "Life Preserver can be configured to replicate snapshots to another system " "over an encrypted SSH connection, though the backup itself is stored in an " @@ -1155,13 +1133,13 @@ msgid "" " another system." msgstr "" -#: ../../sysadmclient.rst:1149 +#: ../../sysadmclient.rst:1178 msgid "" "In order to configure replication, the remote system to hold a copy of the " "snapshots must first meet several requirements:" msgstr "" -#: ../../sysadmclient.rst:1156 +#: ../../sysadmclient.rst:1185 msgid "" "The backup server **must be formatted with the latest version of ZFS,** also" " known as ZFS feature flags or ZFSv5000. Operating systems that support this" @@ -1169,14 +1147,14 @@ msgid "" "FreeNAS 9.1.x or higher." msgstr "" -#: ../../sysadmclient.rst:1162 +#: ../../sysadmclient.rst:1191 msgid "" "The system must have SSH installed and the SSH service must be running. If " "the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is" " already installed, but you will need to start the SSH service." msgstr "" -#: ../../sysadmclient.rst:1167 +#: ../../sysadmclient.rst:1196 msgid "" "If the backup server is running |trueos| or |pcbsd|, you will need to open " "TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is " @@ -1186,7 +1164,7 @@ msgid "" "backup system, make sure it has a rule to allow SSH." msgstr "" -#: ../../sysadmclient.rst:1175 +#: ../../sysadmclient.rst:1204 msgid "" ":numref:`Figure %s ` shows the initial :guilabel:`Replication` " "tab on a system that has not yet been configured for replication. This " @@ -1194,29 +1172,29 @@ msgid "" "schedule." msgstr "" -#: ../../sysadmclient.rst:1186 +#: ../../sysadmclient.rst:1215 msgid "" "To schedule the replication, click :guilabel:`+` to display the \"Setup " "Replication\" screen shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1196 +#: ../../sysadmclient.rst:1225 msgid "Input the following information:" msgstr "" -#: ../../sysadmclient.rst:1198 +#: ../../sysadmclient.rst:1227 msgid "" "**Host IP:** The IP address of the remote system to store the replicated " "snapshots." msgstr "" -#: ../../sysadmclient.rst:1201 +#: ../../sysadmclient.rst:1230 msgid "" "**SSH Port:** The port number, if the remote system is running SSH on a port" " other than the default of 22." msgstr "" -#: ../../sysadmclient.rst:1204 +#: ../../sysadmclient.rst:1233 msgid "" "**Dataset:** The name of the ZFS pool and optional dataset on the remote " "system. For example, \"remotetank\" will save the snapshots to a ZFS pool of" @@ -1224,7 +1202,7 @@ msgid "" "existing dataset named \"mybackups\" on the pool named \"remotetank\"." msgstr "" -#: ../../sysadmclient.rst:1210 +#: ../../sysadmclient.rst:1239 msgid "" "**Frequency:** Use the drop-down menu to select how often to initiate the " "replication. Available choices are :guilabel:`Sync with snapshot` (at the " @@ -1235,87 +1213,87 @@ msgid "" ":guilabel:`Start`) in this screen." msgstr "" -#: ../../sysadmclient.rst:1219 +#: ../../sysadmclient.rst:1248 msgid "" "**Username:** The username must already exist on the remote system, have " "write access to the specified \"Dataset\", and have permission to SSH into " "that system." msgstr "" -#: ../../sysadmclient.rst:1223 +#: ../../sysadmclient.rst:1252 msgid "**Password:** The password associated with the \"Username\"." msgstr "" -#: ../../sysadmclient.rst:1225 +#: ../../sysadmclient.rst:1254 msgid "" "**Local DS:** Use the drop-down menu to select the pool or dataset to " "replicate to the remote system." msgstr "" -#: ../../sysadmclient.rst:1228 +#: ../../sysadmclient.rst:1257 msgid "" "The buttons at the top of the \"Setup Replication\" screen have several " "uses:" msgstr "" -#: ../../sysadmclient.rst:1231 +#: ../../sysadmclient.rst:1260 msgid "" "**+ icon:** Sdd a replication schedule. Multiple schedules are supported, " "meaning you can replicate to multiple systems or replicate different \"Local" " DS\" datasets at different times." msgstr "" -#: ../../sysadmclient.rst:1235 +#: ../../sysadmclient.rst:1264 msgid "" "**- icon:** Remove an already created, and highlighted, replication " "schedule." msgstr "" -#: ../../sysadmclient.rst:1238 +#: ../../sysadmclient.rst:1267 msgid "**gear icon:** Modify the schedule for the highlighted replication." msgstr "" -#: ../../sysadmclient.rst:1240 +#: ../../sysadmclient.rst:1269 msgid "" "**Start:** Manually starts a replication to the system specified in the " "highlighted replication." msgstr "" -#: ../../sysadmclient.rst:1243 +#: ../../sysadmclient.rst:1272 msgid "" "**Initialize:** Deletes the existing replicated snapshots on the remote " "system and starts a new replication. This is useful if a replication gets " "stuck and will not complete." msgstr "" -#: ../../sysadmclient.rst:1251 +#: ../../sysadmclient.rst:1280 msgid "Schedules Tab" msgstr "" -#: ../../sysadmclient.rst:1253 +#: ../../sysadmclient.rst:1282 msgid "" "This tab is used to manage when snapshots of the ZFS pool are created. " "Multiple snapshot schedules are supported if the system has multiple pools." msgstr "" -#: ../../sysadmclient.rst:1257 +#: ../../sysadmclient.rst:1286 msgid "" "Snapshots are created on the entire pool as they are needed when " ":ref:`Restoring the Operating System`." msgstr "" -#: ../../sysadmclient.rst:1260 +#: ../../sysadmclient.rst:1289 msgid "" "To create a snapshot schedule, click the :guilabel:`camera` icon in the " "lower left corner of this tab. This will activate the \"Setup Snapshot " "Schedule\" pane as seen in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1270 +#: ../../sysadmclient.rst:1299 msgid "This pane contains several options:" msgstr "" -#: ../../sysadmclient.rst:1275 +#: ../../sysadmclient.rst:1304 msgid "" "**Snapshots to keep:** Snapshots are automatically pruned after the " "specified number of snapshots to prevent snapshots from eventually using up " @@ -1326,7 +1304,7 @@ msgid "" "manually in the :guilabel:`Snapshots` tab." msgstr "" -#: ../../sysadmclient.rst:1284 +#: ../../sysadmclient.rst:1313 msgid "" "**Frequency:** Use the drop-down menu to select how often snapshots occur. " "Options include \"Daily\" (which will allow you to select the time of day), " @@ -1334,37 +1312,37 @@ msgid "" "Minutes\"." msgstr "" -#: ../../sysadmclient.rst:1289 +#: ../../sysadmclient.rst:1318 msgid "" "Once you have created a snapshot schedule, you can use the \"gear\" icon " "next to the \"camera\" icon to modify the highlighted schedule or the \"X\" " "icon to delete the highlighted schedule." msgstr "" -#: ../../sysadmclient.rst:1300 +#: ../../sysadmclient.rst:1329 msgid "" "To schedule when the scrub occurs, click the third icon from the right which" " will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure " "%s `." msgstr "" -#: ../../sysadmclient.rst:1318 +#: ../../sysadmclient.rst:1347 msgid "" "Once you have created a scrub schedule, you can use the \"gear\" icon next " "to the \"schedule scrub\" icon to modify the highlighted schedule or the " "\"X\" icon to delete the highlighted schedule." msgstr "" -#: ../../sysadmclient.rst:1328 +#: ../../sysadmclient.rst:1357 msgid "" "The :guilabel:`Settings` tab is shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1337 +#: ../../sysadmclient.rst:1366 msgid "Many settings are configurable:" msgstr "" -#: ../../sysadmclient.rst:1339 +#: ../../sysadmclient.rst:1368 msgid "" "**Disk Usage Warning:** Enter a number up to 99 to indicate at which " "percentage of disk space Life Preserver will display an alert in the system " @@ -1372,41 +1350,41 @@ msgid "" "space." msgstr "" -#: ../../sysadmclient.rst:1344 +#: ../../sysadmclient.rst:1373 msgid "" "**Email:** To receive an email when disk usage reaches the percentage " "configured in the \"Disk Usage Warning\", enter an email address." msgstr "" -#: ../../sysadmclient.rst:1347 +#: ../../sysadmclient.rst:1376 msgid "" "**Email Trigger:** This setting can be set to \"All\", \"Warn\", or " "\"Error\" and indicates the type of condition which will trigger an email " "message." msgstr "" -#: ../../sysadmclient.rst:1350 +#: ../../sysadmclient.rst:1379 msgid "**Recursive Management:**" msgstr "" -#: ../../sysadmclient.rst:1352 +#: ../../sysadmclient.rst:1381 msgid "" "If you make any changes in this screen, press :guilabel:`Save Settings` to " "apply them." msgstr "" -#: ../../sysadmclient.rst:1359 +#: ../../sysadmclient.rst:1388 msgid "Using the lpreserver CLI" msgstr "" -#: ../../sysadmclient.rst:1361 +#: ../../sysadmclient.rst:1390 msgid "" "The :command:`lpreserver` command line utility can also be used to manage " "snapshots and replication. This command needs to be run as the superuser. To" " display its usage, type the command without any arguments:" msgstr "" -#: ../../sysadmclient.rst:1381 +#: ../../sysadmclient.rst:1410 msgid "" "Each command has its own help text that describes its parameters and " "provides a usage example. For example, to receive help on how to use the " @@ -1417,104 +1395,104 @@ msgstr "" msgid "Command Line and GUI Equivalents" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**Command Line**" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**GUI**" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**Description**" msgstr "" -#: ../../sysadmclient.rst:1452 +#: ../../sysadmclient.rst:1481 msgid "**cronsnap**" msgstr "" -#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499 msgid "\"Snapshots\" tab" msgstr "" -#: ../../sysadmclient.rst:1452 +#: ../../sysadmclient.rst:1481 msgid "" "schedule when snapshots occur and how long to keep them; the **stop** option" " can be used to disable snapshot creation" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "**cronscrub**" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "\"Schedules\" tab" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "schedule a ZFS scrub" msgstr "" -#: ../../sysadmclient.rst:1459 +#: ../../sysadmclient.rst:1488 msgid "**get**" msgstr "" -#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495 msgid "\"Settings\" tab" msgstr "" -#: ../../sysadmclient.rst:1459 +#: ../../sysadmclient.rst:1488 msgid "list Life Preserver options" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "**replicate**" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "\"Replication\" tab" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "" "used to list, add, and remove backup server; read the **help** for this " "command for examples" msgstr "" -#: ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1495 msgid "**set**" msgstr "" -#: ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1495 msgid "" "configures Life Preserver options; read **help** for the list of " "configurable options" msgstr "" -#: ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1499 msgid "**snapshot**" msgstr "" -#: ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1499 msgid "" "create and replicate a new ZFS snapshot; by default, snapshots are " "recursive, meaning that a that a snapshot is taken of every dataset within a" " pool" msgstr "" -#: ../../sysadmclient.rst:1476 +#: ../../sysadmclient.rst:1505 msgid "**status**" msgstr "" -#: ../../sysadmclient.rst:1476 +#: ../../sysadmclient.rst:1505 msgid "lists the last snapshot name and replication status" msgstr "" -#: ../../sysadmclient.rst:1483 +#: ../../sysadmclient.rst:1512 msgid "Restoring the Operating System" msgstr "" -#: ../../sysadmclient.rst:1485 +#: ../../sysadmclient.rst:1514 msgid "" "If you have replicated the system's snapshots to a remote backup server, you" " can use a |trueos| installation media to perform an operating system " @@ -1522,7 +1500,7 @@ msgid "" "you get to the screen shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1497 +#: ../../sysadmclient.rst:1526 msgid "" "Before you can perform a restore, the network interface must be configured. " "Click :guilabel:`Network Connectivity` (second icon from the left) in order " @@ -1533,7 +1511,7 @@ msgid "" "continuing." msgstr "" -#: ../../sysadmclient.rst:1505 +#: ../../sysadmclient.rst:1534 msgid "" "Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and" " :guilabel:`Next`. This will start the Restore Wizard. In the screen shown " @@ -1543,7 +1521,7 @@ msgid "" "number." msgstr "" -#: ../../sysadmclient.rst:1519 +#: ../../sysadmclient.rst:1548 msgid "" "Click :guilabel:`Next` and the wizard will provide a summary of your " "selections. If correct, click :guilabel:`Finish`; otherwise, click " @@ -1626,7 +1604,7 @@ msgid "" "press :guilabel:`Close Ports`." msgstr "" -#: ../../sysadmclient.rst:1152 +#: ../../sysadmclient.rst:1181 msgid "" "Snapshots occurring too frequently can introduce errors in replication. To " "avoid errors, ensure snapshots are configured to take place slower than the " @@ -1685,7 +1663,7 @@ msgid "" "accounts." msgstr "" -#: ../../sysadmclient.rst:1065 +#: ../../sysadmclient.rst:1094 msgid "" "A snapshot provides a \"point-in-time\" image of the ZFS pool. This is " "similar to a full system backup as the snapshot contains the information for" @@ -1703,26 +1681,26 @@ msgid "" "snapshot." msgstr "" -#: ../../sysadmclient.rst:1272 +#: ../../sysadmclient.rst:1301 msgid "" "**Storage Pool:** Select the ZFS storage pool that contains the datasets " "that you wish to snapshot." msgstr "" -#: ../../sysadmclient.rst:1293 +#: ../../sysadmclient.rst:1322 msgid "" "This screen can also be used to manage the ZFS scrub schedule. Scrubs are " "recommended as they can provide an early indication of a potential disk " "failure. Scrubs can be scheduled on a per-pool basis." msgstr "" -#: ../../sysadmclient.rst:1297 +#: ../../sysadmclient.rst:1326 msgid "" "If you have multiple pools, be sure to create a scrub schedule for each " "pool." msgstr "" -#: ../../sysadmclient.rst:1310 +#: ../../sysadmclient.rst:1339 msgid "" "Select the pool from the :guilabel:`Storage Pool` drop-down menu, then " "select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", " @@ -1807,26 +1785,17 @@ msgstr "" msgid ": Viewing All Accounts and Their Details" msgstr "" -#: ../../sysadmclient.rst:930 +#: ../../sysadmclient.rst:938 msgid ": Initialize PersonaCrypt Device" msgstr "" -#: ../../sysadmclient.rst:932 -msgid "" -"Before a user is configured to use PersonaCrypt on a |trueos| system, two " -"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". " -"Note this section is hidden if the currently logged in user is selected. " -"Also, if you have just created a user and do not see these options, click " -":guilabel:`Save` then re-highlight the user to display these options:" -msgstr "" - -#: ../../sysadmclient.rst:947 +#: ../../sysadmclient.rst:955 msgid "" "To prepare a PersonaCrypt device for this user, insert a USB stick and click" " :guilabel:`Initialize Device`." msgstr "" -#: ../../sysadmclient.rst:957 +#: ../../sysadmclient.rst:965 msgid "" "Type a password to associate with the device. Click :guilabel:`Save` to " "initialize the device. The User Manager may take a moment to prepare the " @@ -1834,49 +1803,49 @@ msgid "" " to allow removal of PersonaCrypt." msgstr "" -#: ../../sysadmclient.rst:1027 +#: ../../sysadmclient.rst:1056 msgid ": Managing Groups Using User Manager" msgstr "" -#: ../../sysadmclient.rst:1110 +#: ../../sysadmclient.rst:1139 msgid ": Snapshot Tab" msgstr "" -#: ../../sysadmclient.rst:1184 +#: ../../sysadmclient.rst:1213 msgid ": Replication Tab" msgstr "" -#: ../../sysadmclient.rst:1194 +#: ../../sysadmclient.rst:1223 msgid ": Scheduling a Replication" msgstr "" -#: ../../sysadmclient.rst:1268 +#: ../../sysadmclient.rst:1297 msgid ": Scheduling a Snapshot" msgstr "" -#: ../../sysadmclient.rst:1308 +#: ../../sysadmclient.rst:1337 msgid ": Scheduling a Scrub" msgstr "" -#: ../../sysadmclient.rst:1335 +#: ../../sysadmclient.rst:1364 msgid ": Life Preserver Settings" msgstr "" -#: ../../sysadmclient.rst:1442 +#: ../../sysadmclient.rst:1471 msgid "" ":numref:`Table %s ` shows the command line equivalents to the " "graphical options provided by the Life Preserver GUI." msgstr "" -#: ../../sysadmclient.rst:1495 +#: ../../sysadmclient.rst:1524 msgid ": Selecting to Restore/Clone From Backup" msgstr "" -#: ../../sysadmclient.rst:1517 +#: ../../sysadmclient.rst:1546 msgid ": Input the Information for a SSH Restore" msgstr "" -#: ../../sysadmclient.rst:1523 +#: ../../sysadmclient.rst:1552 msgid "" "Once the connection to the backup server succeeds, you will be able to " "select which host to restore. After making your selection, click " @@ -1892,7 +1861,7 @@ msgid "" ":guilabel:`Next` to perform the restore." msgstr "" -#: ../../sysadmclient.rst:987 +#: ../../sysadmclient.rst:970 msgid "" "Once a user has been initialized for PersonaCrypt on the system, their user " "account will no longer be displayed when logging in, **unless** their " @@ -1901,7 +1870,7 @@ msgid "" ":numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:997 +#: ../../sysadmclient.rst:980 msgid ": |trueos| Login Screen with PersonaCrypt" msgstr "" @@ -1949,7 +1918,7 @@ msgstr "" msgid ": |sysadm| Task Manager" msgstr "" -#: ../../sysadmclient.rst:1103 +#: ../../sysadmclient.rst:1132 msgid "" ":numref:`Figure %s ` shows the :guilabel:`Snapshots` tab on a " "system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"." @@ -2013,6 +1982,134 @@ msgid "" ":guilabel:`Save Settings`." msgstr "" +#: ../../sysadmclient.rst:894 +msgid "" +"|trueos| provides support for a security feature known as PersonaCrypt. A " +"PersonaCrypt device is a removable USB media, such as a USB flash drive, " +"formatted with ZFS and encrypted with either GELI or PEFS. This device is " +"used to hold a specific user's home directory, meaning they can securely " +"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 " +"or higher system. For example, this can be used to securely access one's " +"home directory from a laptop, home computer, and work computer. The device " +"is protected by an encryption key and a different (recommended) password " +"separate from the user's login password." +msgstr "" + +#: ../../sysadmclient.rst:916 +msgid "GELI" +msgstr "" + +#: ../../sysadmclient.rst:918 +msgid "" +"PersonaCrypt uses GELI's ability to split the key into two parts: one being " +"your passphrase, and the other being a key stored on disk. Without both of " +"these parts, the media cannot be decrypted. This means if somebody steals " +"the key and manages to get your password, it is still worthless without the " +"system it was paired with. GELI is used by default in |trueos| as it is more" +" fully featured over PEFS." +msgstr "" + +#: ../../sysadmclient.rst:940 +msgid "" +"Before a user is configured to use PersonaCrypt on a |trueos| system, two " +"buttons are available in the :guilabel:`PersonaCrypt` tab of " +":guilabel:`Advanced Mode`. Note this section is hidden if the currently " +"logged in user is selected. Also, if you have just created a user and do not" +" see these options, click :guilabel:`Save`, then re-highlight the user to " +"display these options:" +msgstr "" + +#: ../../sysadmclient.rst:999 +msgid "PEFS" +msgstr "" + +#: ../../sysadmclient.rst:1001 +msgid "" +"`PEFS `_ stands for Private Encrypted File System. It is " +"open source software freely available under the BSD license, and is included" +" in |trueos| by default. PEFS runs on top of any existing file system, " +"providing an encryption layer independent of the underlying file system. " +"PersonaCrypt can be configured to use PEFS in place of GELI, which " +"eliminates the need for external media, as the encrypted PEFS database is " +"stored on the local disk." +msgstr "" + +#: ../../sysadmclient.rst:1009 +msgid "" +"While PEFS does not use a USB drive, be sure to print or otherwise backup " +"the PEFS generated key fragment stored on the disk." +msgstr "" + +#: ../../sysadmclient.rst:1012 +msgid "**Initialize PEFS with the Command Line**" +msgstr "" + +#: ../../sysadmclient.rst:1014 +msgid "" +"Because PEFS does not use a USB drive with its encryption, the user will " +"need a password file (pfile) containing the desired password, **before** " +"initializing PEFS for a user account. Once this pfile is created, enabling " +"PEFS through PersonaCrypt is accomplished in a CLI with " +":command:`personacrypt init PEFS`." +msgstr "" + +#: ../../sysadmclient.rst:1020 +msgid "" +"For example, the user account **test** has a pfile named " +":file:`testpfile.txt`, which contains the single text string of **test's** " +"chosen password. Next, the administrator adds PEFS encryption to the " +"**test** acount by opening a CLI, logging in as root, and typing:" +msgstr "" + +#: ../../sysadmclient.rst:1029 +msgid "" +"PersonaCrypt will initialize the account **test** with PEFS, using the " +"string in :file:`testpfile.txt` as the new password." +msgstr "" + +#: ../../sysadmclient.rst:1032 +msgid "" +"The |sysadm| User Manager can also initialize a user account with PEFS by " +"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` " +"drop down menu of the :guilabel:`PersonaCrypt` tab." +msgstr "" + +#: ../../sysadmclient.rst:1036 +msgid "" +"In addition to initializing an account with PEFS, PersonaCrypt also supports" +" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt " +"export ` and :command:`personacrypt import `, " +"respectively." +msgstr "" + +#~ msgid "" +#~ "|trueos| provides support for a security feature known as PersonaCrypt. A " +#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted" +#~ " with ZFS and encrypted with GELI. This device is used to hold a specific " +#~ "user's home directory, meaning they can securely transport and access their " +#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For " +#~ "example, this can be used to securely access one's home directory from a " +#~ "laptop, home computer, and work computer. The device is protected by an " +#~ "encryption key and a password which is, and should be, separate from the " +#~ "user's login password." +#~ msgstr "" + +#~ msgid "" +#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being " +#~ "your passphrase, and the other being a key stored on disk. Without both of " +#~ "these parts, the media cannot be decrypted. This means if somebody steals " +#~ "the key and manages to get your password, it is still worthless without the " +#~ "system it was paired with." +#~ msgstr "" + +#~ msgid "" +#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two " +#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". " +#~ "Note this section is hidden if the currently logged in user is selected. " +#~ "Also, if you have just created a user and do not see these options, click " +#~ ":guilabel:`Save` then re-highlight the user to display these options:" +#~ msgstr "" + #~ msgid "" #~ "**Max Boot Environments:** |trueos| automatically creates a boot environment" #~ " before updating any software, the operating system, or applying a system " diff --git a/docs/client_handbook/po/bg/LC_MESSAGES/sysadmclient.po b/docs/client_handbook/po/bg/LC_MESSAGES/sysadmclient.po index 25c5ac5..e4a2632 100644 --- a/docs/client_handbook/po/bg/LC_MESSAGES/sysadmclient.po +++ b/docs/client_handbook/po/bg/LC_MESSAGES/sysadmclient.po @@ -482,7 +482,7 @@ msgid "" "The :guilabel:`Settings` tab is shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1326 +#: ../../sysadmclient.rst:1355 msgid "Settings Tab" msgstr "" @@ -924,20 +924,7 @@ msgstr "" msgid "PersonaCrypt" msgstr "" -#: ../../sysadmclient.rst:894 -msgid "" -"|trueos| provides support for a security feature known as PersonaCrypt. A " -"PersonaCrypt device is a removable USB media, such as a USB stick, formatted" -" with ZFS and encrypted with GELI. This device is used to hold a specific " -"user's home directory, meaning they can securely transport and access their " -"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For " -"example, this can be used to securely access one's home directory from a " -"laptop, home computer, and work computer. The device is protected by an " -"encryption key and a password which is, and should be, separate from the " -"user's login password." -msgstr "" - -#: ../../sysadmclient.rst:904 +#: ../../sysadmclient.rst:905 msgid "" "When a user is configured to use a PersonaCrypt device, that user can not " "login using an unencrypted session on the same system. In other words, the " @@ -946,22 +933,13 @@ msgid "" "different user accounts, one for each type of session." msgstr "" -#: ../../sysadmclient.rst:911 -msgid "" -"PersonaCrypt uses GELI's ability to split the key into two parts: one being " -"your passphrase, and the other being a key stored on disk. Without both of " -"these parts, the media cannot be decrypted. This means if somebody steals " -"the key and manages to get your password, it is still worthless without the " -"system it was paired with." -msgstr "" - -#: ../../sysadmclient.rst:917 +#: ../../sysadmclient.rst:925 msgid "" "USB devices do eventually fail. Always backup any important files stored on " "the PersonaCrypt device to another device or system." msgstr "" -#: ../../sysadmclient.rst:920 +#: ../../sysadmclient.rst:928 msgid "" "The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt " "device for any login user, **except** for the currently logged in user. In " @@ -969,13 +947,13 @@ msgid "" "*dlavigne*, has been created and the entry for the user has been clicked." msgstr "" -#: ../../sysadmclient.rst:939 +#: ../../sysadmclient.rst:947 msgid "" "**Initialize Device:** Used to prepare the USB device which will be used as " "the user's home directory." msgstr "" -#: ../../sysadmclient.rst:942 +#: ../../sysadmclient.rst:950 msgid "" "**Import Key:** If the user has already created a PersonaCrypt device on " "another |trueos| system, click this button to import a previously saved copy" @@ -983,7 +961,7 @@ msgid "" "can now login to this computer using PersonaCrypt." msgstr "" -#: ../../sysadmclient.rst:950 +#: ../../sysadmclient.rst:958 msgid "" "Since the USB stick will hold the user's home directory and files, ensure " "the stick is large enough to meet the anticipated storage needs of the home " @@ -993,7 +971,7 @@ msgid "" "logged in." msgstr "" -#: ../../sysadmclient.rst:999 +#: ../../sysadmclient.rst:982 msgid "" "When stealth sessions have been configured, PersonaCrypt users will still be" " displayed in the login menu, even if their USB device is not inserted. This" @@ -1001,47 +979,47 @@ msgid "" "session." msgstr "" -#: ../../sysadmclient.rst:1004 +#: ../../sysadmclient.rst:987 msgid "" "In the field with the yellow padlock icon, input the password for the user " "account. In the field with the grey USB stick icon, input the password " "associated with the PersonaCrypt device." msgstr "" -#: ../../sysadmclient.rst:1008 +#: ../../sysadmclient.rst:991 msgid "" "To prevent data corruption and freezing the system **DO NOT** remove the " "PersonaCrypt device while logged in! Always log out of your session before " "physically removing the device." msgstr "" -#: ../../sysadmclient.rst:1016 +#: ../../sysadmclient.rst:1045 msgid "Managing Groups" msgstr "" -#: ../../sysadmclient.rst:1018 +#: ../../sysadmclient.rst:1047 msgid "" "Click the :guilabel:`Groups` tab to view and manage the groups on the " "system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s `, " "shows the group membership for the *operator* and *wheel* groups:" msgstr "" -#: ../../sysadmclient.rst:1029 +#: ../../sysadmclient.rst:1058 msgid "This screen has 2 columns:" msgstr "" -#: ../../sysadmclient.rst:1031 +#: ../../sysadmclient.rst:1060 msgid "" "**Members:** Indicates if the highlighted group contains any user accounts." msgstr "" -#: ../../sysadmclient.rst:1034 +#: ../../sysadmclient.rst:1063 msgid "" "**Available:** Shows all of the system and user accounts on the system in " "alphabetical order." msgstr "" -#: ../../sysadmclient.rst:1037 +#: ../../sysadmclient.rst:1066 msgid "" "To add an account to a group, highlight the group name, then highlight the " "account name in the :guilabel:`Available` column. Click the left arrow and " @@ -1051,7 +1029,7 @@ msgid "" "added to a group." msgstr "" -#: ../../sysadmclient.rst:1044 +#: ../../sysadmclient.rst:1073 msgid "" "If you add a user to the *operator* group, they will have permission to use " "commands requiring administrative access and will be prompted for their own " @@ -1060,15 +1038,15 @@ msgid "" "will be prompted for the superuser password whenever they use the command." msgstr "" -#: ../../sysadmclient.rst:1051 +#: ../../sysadmclient.rst:1080 msgid "To view all of the groups on the system, click :guilabel:`Advanced`." msgstr "" -#: ../../sysadmclient.rst:1057 +#: ../../sysadmclient.rst:1086 msgid "Life Preserver" msgstr "" -#: ../../sysadmclient.rst:1059 +#: ../../sysadmclient.rst:1088 msgid "" "The Life Preserver utility is designed to take full advantage of the " "functionality provided by ZFS snapshots. This utility allows you to schedule" @@ -1077,25 +1055,25 @@ msgid "" "benefits:" msgstr "" -#: ../../sysadmclient.rst:1081 +#: ../../sysadmclient.rst:1110 msgid "" "Replication is an efficient way to keep the files on two systems in sync. " "With Life Preserver, the snapshots taken on the |trueos| system will be " "synchronized with their versions stored on the specified backup server." msgstr "" -#: ../../sysadmclient.rst:1086 +#: ../../sysadmclient.rst:1115 msgid "Snapshots are sent to the backup server over an encrypted connection." msgstr "" -#: ../../sysadmclient.rst:1088 +#: ../../sysadmclient.rst:1117 msgid "" "Having a copy of the snapshots on another system makes it possible to " "perform an operating system restore should the |trueos| system become " "unusable or to deploy an identical system to different hardware." msgstr "" -#: ../../sysadmclient.rst:1092 +#: ../../sysadmclient.rst:1121 msgid "" "To manage snapshots and replication using the |sysadm| graphical client, go " "to :menuselection:`Utilities --> Life Preserver`. The rest of this section " @@ -1103,16 +1081,16 @@ msgid "" "Preserver." msgstr "" -#: ../../sysadmclient.rst:1101 +#: ../../sysadmclient.rst:1130 msgid "Snapshots Tab" msgstr "" -#: ../../sysadmclient.rst:1112 +#: ../../sysadmclient.rst:1141 msgid "" "This screen will display any created snapshots and provides buttons to:" msgstr "" -#: ../../sysadmclient.rst:1114 +#: ../../sysadmclient.rst:1143 msgid "" "**Create:** Used to create a manual snapshot of the specified pool now. For " "example, you could create a snapshot before making changes to an important " @@ -1126,14 +1104,14 @@ msgid "" "snapshot was created." msgstr "" -#: ../../sysadmclient.rst:1125 +#: ../../sysadmclient.rst:1154 msgid "" "**Remove:** Used to delete a highlighted snapshot. **This is a permanent " "change that can not be reversed.** In other words, the versions of files at " "the point in time the snapshot was created will be lost." msgstr "" -#: ../../sysadmclient.rst:1130 +#: ../../sysadmclient.rst:1159 msgid "" "**Revert:** If you highlight a snapshot entry, this button and the drop-down" " menu next to it will activate. You can use the drop-down menu to specify " @@ -1143,11 +1121,11 @@ msgid "" " after the snapshot was taken will be lost." msgstr "" -#: ../../sysadmclient.rst:1142 +#: ../../sysadmclient.rst:1171 msgid "Replication Tab" msgstr "" -#: ../../sysadmclient.rst:1144 +#: ../../sysadmclient.rst:1173 msgid "" "Life Preserver can be configured to replicate snapshots to another system " "over an encrypted SSH connection, though the backup itself is stored in an " @@ -1155,13 +1133,13 @@ msgid "" " another system." msgstr "" -#: ../../sysadmclient.rst:1149 +#: ../../sysadmclient.rst:1178 msgid "" "In order to configure replication, the remote system to hold a copy of the " "snapshots must first meet several requirements:" msgstr "" -#: ../../sysadmclient.rst:1156 +#: ../../sysadmclient.rst:1185 msgid "" "The backup server **must be formatted with the latest version of ZFS,** also" " known as ZFS feature flags or ZFSv5000. Operating systems that support this" @@ -1169,14 +1147,14 @@ msgid "" "FreeNAS 9.1.x or higher." msgstr "" -#: ../../sysadmclient.rst:1162 +#: ../../sysadmclient.rst:1191 msgid "" "The system must have SSH installed and the SSH service must be running. If " "the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is" " already installed, but you will need to start the SSH service." msgstr "" -#: ../../sysadmclient.rst:1167 +#: ../../sysadmclient.rst:1196 msgid "" "If the backup server is running |trueos| or |pcbsd|, you will need to open " "TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is " @@ -1186,7 +1164,7 @@ msgid "" "backup system, make sure it has a rule to allow SSH." msgstr "" -#: ../../sysadmclient.rst:1175 +#: ../../sysadmclient.rst:1204 msgid "" ":numref:`Figure %s ` shows the initial :guilabel:`Replication` " "tab on a system that has not yet been configured for replication. This " @@ -1194,29 +1172,29 @@ msgid "" "schedule." msgstr "" -#: ../../sysadmclient.rst:1186 +#: ../../sysadmclient.rst:1215 msgid "" "To schedule the replication, click :guilabel:`+` to display the \"Setup " "Replication\" screen shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1196 +#: ../../sysadmclient.rst:1225 msgid "Input the following information:" msgstr "" -#: ../../sysadmclient.rst:1198 +#: ../../sysadmclient.rst:1227 msgid "" "**Host IP:** The IP address of the remote system to store the replicated " "snapshots." msgstr "" -#: ../../sysadmclient.rst:1201 +#: ../../sysadmclient.rst:1230 msgid "" "**SSH Port:** The port number, if the remote system is running SSH on a port" " other than the default of 22." msgstr "" -#: ../../sysadmclient.rst:1204 +#: ../../sysadmclient.rst:1233 msgid "" "**Dataset:** The name of the ZFS pool and optional dataset on the remote " "system. For example, \"remotetank\" will save the snapshots to a ZFS pool of" @@ -1224,7 +1202,7 @@ msgid "" "existing dataset named \"mybackups\" on the pool named \"remotetank\"." msgstr "" -#: ../../sysadmclient.rst:1210 +#: ../../sysadmclient.rst:1239 msgid "" "**Frequency:** Use the drop-down menu to select how often to initiate the " "replication. Available choices are :guilabel:`Sync with snapshot` (at the " @@ -1235,87 +1213,87 @@ msgid "" ":guilabel:`Start`) in this screen." msgstr "" -#: ../../sysadmclient.rst:1219 +#: ../../sysadmclient.rst:1248 msgid "" "**Username:** The username must already exist on the remote system, have " "write access to the specified \"Dataset\", and have permission to SSH into " "that system." msgstr "" -#: ../../sysadmclient.rst:1223 +#: ../../sysadmclient.rst:1252 msgid "**Password:** The password associated with the \"Username\"." msgstr "" -#: ../../sysadmclient.rst:1225 +#: ../../sysadmclient.rst:1254 msgid "" "**Local DS:** Use the drop-down menu to select the pool or dataset to " "replicate to the remote system." msgstr "" -#: ../../sysadmclient.rst:1228 +#: ../../sysadmclient.rst:1257 msgid "" "The buttons at the top of the \"Setup Replication\" screen have several " "uses:" msgstr "" -#: ../../sysadmclient.rst:1231 +#: ../../sysadmclient.rst:1260 msgid "" "**+ icon:** Sdd a replication schedule. Multiple schedules are supported, " "meaning you can replicate to multiple systems or replicate different \"Local" " DS\" datasets at different times." msgstr "" -#: ../../sysadmclient.rst:1235 +#: ../../sysadmclient.rst:1264 msgid "" "**- icon:** Remove an already created, and highlighted, replication " "schedule." msgstr "" -#: ../../sysadmclient.rst:1238 +#: ../../sysadmclient.rst:1267 msgid "**gear icon:** Modify the schedule for the highlighted replication." msgstr "" -#: ../../sysadmclient.rst:1240 +#: ../../sysadmclient.rst:1269 msgid "" "**Start:** Manually starts a replication to the system specified in the " "highlighted replication." msgstr "" -#: ../../sysadmclient.rst:1243 +#: ../../sysadmclient.rst:1272 msgid "" "**Initialize:** Deletes the existing replicated snapshots on the remote " "system and starts a new replication. This is useful if a replication gets " "stuck and will not complete." msgstr "" -#: ../../sysadmclient.rst:1251 +#: ../../sysadmclient.rst:1280 msgid "Schedules Tab" msgstr "" -#: ../../sysadmclient.rst:1253 +#: ../../sysadmclient.rst:1282 msgid "" "This tab is used to manage when snapshots of the ZFS pool are created. " "Multiple snapshot schedules are supported if the system has multiple pools." msgstr "" -#: ../../sysadmclient.rst:1257 +#: ../../sysadmclient.rst:1286 msgid "" "Snapshots are created on the entire pool as they are needed when " ":ref:`Restoring the Operating System`." msgstr "" -#: ../../sysadmclient.rst:1260 +#: ../../sysadmclient.rst:1289 msgid "" "To create a snapshot schedule, click the :guilabel:`camera` icon in the " "lower left corner of this tab. This will activate the \"Setup Snapshot " "Schedule\" pane as seen in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1270 +#: ../../sysadmclient.rst:1299 msgid "This pane contains several options:" msgstr "" -#: ../../sysadmclient.rst:1275 +#: ../../sysadmclient.rst:1304 msgid "" "**Snapshots to keep:** Snapshots are automatically pruned after the " "specified number of snapshots to prevent snapshots from eventually using up " @@ -1326,7 +1304,7 @@ msgid "" "manually in the :guilabel:`Snapshots` tab." msgstr "" -#: ../../sysadmclient.rst:1284 +#: ../../sysadmclient.rst:1313 msgid "" "**Frequency:** Use the drop-down menu to select how often snapshots occur. " "Options include \"Daily\" (which will allow you to select the time of day), " @@ -1334,37 +1312,37 @@ msgid "" "Minutes\"." msgstr "" -#: ../../sysadmclient.rst:1289 +#: ../../sysadmclient.rst:1318 msgid "" "Once you have created a snapshot schedule, you can use the \"gear\" icon " "next to the \"camera\" icon to modify the highlighted schedule or the \"X\" " "icon to delete the highlighted schedule." msgstr "" -#: ../../sysadmclient.rst:1300 +#: ../../sysadmclient.rst:1329 msgid "" "To schedule when the scrub occurs, click the third icon from the right which" " will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure " "%s `." msgstr "" -#: ../../sysadmclient.rst:1318 +#: ../../sysadmclient.rst:1347 msgid "" "Once you have created a scrub schedule, you can use the \"gear\" icon next " "to the \"schedule scrub\" icon to modify the highlighted schedule or the " "\"X\" icon to delete the highlighted schedule." msgstr "" -#: ../../sysadmclient.rst:1328 +#: ../../sysadmclient.rst:1357 msgid "" "The :guilabel:`Settings` tab is shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1337 +#: ../../sysadmclient.rst:1366 msgid "Many settings are configurable:" msgstr "" -#: ../../sysadmclient.rst:1339 +#: ../../sysadmclient.rst:1368 msgid "" "**Disk Usage Warning:** Enter a number up to 99 to indicate at which " "percentage of disk space Life Preserver will display an alert in the system " @@ -1372,41 +1350,41 @@ msgid "" "space." msgstr "" -#: ../../sysadmclient.rst:1344 +#: ../../sysadmclient.rst:1373 msgid "" "**Email:** To receive an email when disk usage reaches the percentage " "configured in the \"Disk Usage Warning\", enter an email address." msgstr "" -#: ../../sysadmclient.rst:1347 +#: ../../sysadmclient.rst:1376 msgid "" "**Email Trigger:** This setting can be set to \"All\", \"Warn\", or " "\"Error\" and indicates the type of condition which will trigger an email " "message." msgstr "" -#: ../../sysadmclient.rst:1350 +#: ../../sysadmclient.rst:1379 msgid "**Recursive Management:**" msgstr "" -#: ../../sysadmclient.rst:1352 +#: ../../sysadmclient.rst:1381 msgid "" "If you make any changes in this screen, press :guilabel:`Save Settings` to " "apply them." msgstr "" -#: ../../sysadmclient.rst:1359 +#: ../../sysadmclient.rst:1388 msgid "Using the lpreserver CLI" msgstr "" -#: ../../sysadmclient.rst:1361 +#: ../../sysadmclient.rst:1390 msgid "" "The :command:`lpreserver` command line utility can also be used to manage " "snapshots and replication. This command needs to be run as the superuser. To" " display its usage, type the command without any arguments:" msgstr "" -#: ../../sysadmclient.rst:1381 +#: ../../sysadmclient.rst:1410 msgid "" "Each command has its own help text that describes its parameters and " "provides a usage example. For example, to receive help on how to use the " @@ -1417,104 +1395,104 @@ msgstr "" msgid "Command Line and GUI Equivalents" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**Command Line**" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**GUI**" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**Description**" msgstr "" -#: ../../sysadmclient.rst:1452 +#: ../../sysadmclient.rst:1481 msgid "**cronsnap**" msgstr "" -#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499 msgid "\"Snapshots\" tab" msgstr "" -#: ../../sysadmclient.rst:1452 +#: ../../sysadmclient.rst:1481 msgid "" "schedule when snapshots occur and how long to keep them; the **stop** option" " can be used to disable snapshot creation" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "**cronscrub**" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "\"Schedules\" tab" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "schedule a ZFS scrub" msgstr "" -#: ../../sysadmclient.rst:1459 +#: ../../sysadmclient.rst:1488 msgid "**get**" msgstr "" -#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495 msgid "\"Settings\" tab" msgstr "" -#: ../../sysadmclient.rst:1459 +#: ../../sysadmclient.rst:1488 msgid "list Life Preserver options" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "**replicate**" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "\"Replication\" tab" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "" "used to list, add, and remove backup server; read the **help** for this " "command for examples" msgstr "" -#: ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1495 msgid "**set**" msgstr "" -#: ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1495 msgid "" "configures Life Preserver options; read **help** for the list of " "configurable options" msgstr "" -#: ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1499 msgid "**snapshot**" msgstr "" -#: ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1499 msgid "" "create and replicate a new ZFS snapshot; by default, snapshots are " "recursive, meaning that a that a snapshot is taken of every dataset within a" " pool" msgstr "" -#: ../../sysadmclient.rst:1476 +#: ../../sysadmclient.rst:1505 msgid "**status**" msgstr "" -#: ../../sysadmclient.rst:1476 +#: ../../sysadmclient.rst:1505 msgid "lists the last snapshot name and replication status" msgstr "" -#: ../../sysadmclient.rst:1483 +#: ../../sysadmclient.rst:1512 msgid "Restoring the Operating System" msgstr "" -#: ../../sysadmclient.rst:1485 +#: ../../sysadmclient.rst:1514 msgid "" "If you have replicated the system's snapshots to a remote backup server, you" " can use a |trueos| installation media to perform an operating system " @@ -1522,7 +1500,7 @@ msgid "" "you get to the screen shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1497 +#: ../../sysadmclient.rst:1526 msgid "" "Before you can perform a restore, the network interface must be configured. " "Click :guilabel:`Network Connectivity` (second icon from the left) in order " @@ -1533,7 +1511,7 @@ msgid "" "continuing." msgstr "" -#: ../../sysadmclient.rst:1505 +#: ../../sysadmclient.rst:1534 msgid "" "Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and" " :guilabel:`Next`. This will start the Restore Wizard. In the screen shown " @@ -1543,7 +1521,7 @@ msgid "" "number." msgstr "" -#: ../../sysadmclient.rst:1519 +#: ../../sysadmclient.rst:1548 msgid "" "Click :guilabel:`Next` and the wizard will provide a summary of your " "selections. If correct, click :guilabel:`Finish`; otherwise, click " @@ -1626,7 +1604,7 @@ msgid "" "press :guilabel:`Close Ports`." msgstr "" -#: ../../sysadmclient.rst:1152 +#: ../../sysadmclient.rst:1181 msgid "" "Snapshots occurring too frequently can introduce errors in replication. To " "avoid errors, ensure snapshots are configured to take place slower than the " @@ -1685,7 +1663,7 @@ msgid "" "accounts." msgstr "" -#: ../../sysadmclient.rst:1065 +#: ../../sysadmclient.rst:1094 msgid "" "A snapshot provides a \"point-in-time\" image of the ZFS pool. This is " "similar to a full system backup as the snapshot contains the information for" @@ -1703,26 +1681,26 @@ msgid "" "snapshot." msgstr "" -#: ../../sysadmclient.rst:1272 +#: ../../sysadmclient.rst:1301 msgid "" "**Storage Pool:** Select the ZFS storage pool that contains the datasets " "that you wish to snapshot." msgstr "" -#: ../../sysadmclient.rst:1293 +#: ../../sysadmclient.rst:1322 msgid "" "This screen can also be used to manage the ZFS scrub schedule. Scrubs are " "recommended as they can provide an early indication of a potential disk " "failure. Scrubs can be scheduled on a per-pool basis." msgstr "" -#: ../../sysadmclient.rst:1297 +#: ../../sysadmclient.rst:1326 msgid "" "If you have multiple pools, be sure to create a scrub schedule for each " "pool." msgstr "" -#: ../../sysadmclient.rst:1310 +#: ../../sysadmclient.rst:1339 msgid "" "Select the pool from the :guilabel:`Storage Pool` drop-down menu, then " "select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", " @@ -1807,26 +1785,17 @@ msgstr "" msgid ": Viewing All Accounts and Their Details" msgstr "" -#: ../../sysadmclient.rst:930 +#: ../../sysadmclient.rst:938 msgid ": Initialize PersonaCrypt Device" msgstr "" -#: ../../sysadmclient.rst:932 -msgid "" -"Before a user is configured to use PersonaCrypt on a |trueos| system, two " -"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". " -"Note this section is hidden if the currently logged in user is selected. " -"Also, if you have just created a user and do not see these options, click " -":guilabel:`Save` then re-highlight the user to display these options:" -msgstr "" - -#: ../../sysadmclient.rst:947 +#: ../../sysadmclient.rst:955 msgid "" "To prepare a PersonaCrypt device for this user, insert a USB stick and click" " :guilabel:`Initialize Device`." msgstr "" -#: ../../sysadmclient.rst:957 +#: ../../sysadmclient.rst:965 msgid "" "Type a password to associate with the device. Click :guilabel:`Save` to " "initialize the device. The User Manager may take a moment to prepare the " @@ -1834,49 +1803,49 @@ msgid "" " to allow removal of PersonaCrypt." msgstr "" -#: ../../sysadmclient.rst:1027 +#: ../../sysadmclient.rst:1056 msgid ": Managing Groups Using User Manager" msgstr "" -#: ../../sysadmclient.rst:1110 +#: ../../sysadmclient.rst:1139 msgid ": Snapshot Tab" msgstr "" -#: ../../sysadmclient.rst:1184 +#: ../../sysadmclient.rst:1213 msgid ": Replication Tab" msgstr "" -#: ../../sysadmclient.rst:1194 +#: ../../sysadmclient.rst:1223 msgid ": Scheduling a Replication" msgstr "" -#: ../../sysadmclient.rst:1268 +#: ../../sysadmclient.rst:1297 msgid ": Scheduling a Snapshot" msgstr "" -#: ../../sysadmclient.rst:1308 +#: ../../sysadmclient.rst:1337 msgid ": Scheduling a Scrub" msgstr "" -#: ../../sysadmclient.rst:1335 +#: ../../sysadmclient.rst:1364 msgid ": Life Preserver Settings" msgstr "" -#: ../../sysadmclient.rst:1442 +#: ../../sysadmclient.rst:1471 msgid "" ":numref:`Table %s ` shows the command line equivalents to the " "graphical options provided by the Life Preserver GUI." msgstr "" -#: ../../sysadmclient.rst:1495 +#: ../../sysadmclient.rst:1524 msgid ": Selecting to Restore/Clone From Backup" msgstr "" -#: ../../sysadmclient.rst:1517 +#: ../../sysadmclient.rst:1546 msgid ": Input the Information for a SSH Restore" msgstr "" -#: ../../sysadmclient.rst:1523 +#: ../../sysadmclient.rst:1552 msgid "" "Once the connection to the backup server succeeds, you will be able to " "select which host to restore. After making your selection, click " @@ -1892,7 +1861,7 @@ msgid "" ":guilabel:`Next` to perform the restore." msgstr "" -#: ../../sysadmclient.rst:987 +#: ../../sysadmclient.rst:970 msgid "" "Once a user has been initialized for PersonaCrypt on the system, their user " "account will no longer be displayed when logging in, **unless** their " @@ -1901,7 +1870,7 @@ msgid "" ":numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:997 +#: ../../sysadmclient.rst:980 msgid ": |trueos| Login Screen with PersonaCrypt" msgstr "" @@ -1949,7 +1918,7 @@ msgstr "" msgid ": |sysadm| Task Manager" msgstr "" -#: ../../sysadmclient.rst:1103 +#: ../../sysadmclient.rst:1132 msgid "" ":numref:`Figure %s ` shows the :guilabel:`Snapshots` tab on a " "system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"." @@ -2013,6 +1982,134 @@ msgid "" ":guilabel:`Save Settings`." msgstr "" +#: ../../sysadmclient.rst:894 +msgid "" +"|trueos| provides support for a security feature known as PersonaCrypt. A " +"PersonaCrypt device is a removable USB media, such as a USB flash drive, " +"formatted with ZFS and encrypted with either GELI or PEFS. This device is " +"used to hold a specific user's home directory, meaning they can securely " +"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 " +"or higher system. For example, this can be used to securely access one's " +"home directory from a laptop, home computer, and work computer. The device " +"is protected by an encryption key and a different (recommended) password " +"separate from the user's login password." +msgstr "" + +#: ../../sysadmclient.rst:916 +msgid "GELI" +msgstr "" + +#: ../../sysadmclient.rst:918 +msgid "" +"PersonaCrypt uses GELI's ability to split the key into two parts: one being " +"your passphrase, and the other being a key stored on disk. Without both of " +"these parts, the media cannot be decrypted. This means if somebody steals " +"the key and manages to get your password, it is still worthless without the " +"system it was paired with. GELI is used by default in |trueos| as it is more" +" fully featured over PEFS." +msgstr "" + +#: ../../sysadmclient.rst:940 +msgid "" +"Before a user is configured to use PersonaCrypt on a |trueos| system, two " +"buttons are available in the :guilabel:`PersonaCrypt` tab of " +":guilabel:`Advanced Mode`. Note this section is hidden if the currently " +"logged in user is selected. Also, if you have just created a user and do not" +" see these options, click :guilabel:`Save`, then re-highlight the user to " +"display these options:" +msgstr "" + +#: ../../sysadmclient.rst:999 +msgid "PEFS" +msgstr "" + +#: ../../sysadmclient.rst:1001 +msgid "" +"`PEFS `_ stands for Private Encrypted File System. It is " +"open source software freely available under the BSD license, and is included" +" in |trueos| by default. PEFS runs on top of any existing file system, " +"providing an encryption layer independent of the underlying file system. " +"PersonaCrypt can be configured to use PEFS in place of GELI, which " +"eliminates the need for external media, as the encrypted PEFS database is " +"stored on the local disk." +msgstr "" + +#: ../../sysadmclient.rst:1009 +msgid "" +"While PEFS does not use a USB drive, be sure to print or otherwise backup " +"the PEFS generated key fragment stored on the disk." +msgstr "" + +#: ../../sysadmclient.rst:1012 +msgid "**Initialize PEFS with the Command Line**" +msgstr "" + +#: ../../sysadmclient.rst:1014 +msgid "" +"Because PEFS does not use a USB drive with its encryption, the user will " +"need a password file (pfile) containing the desired password, **before** " +"initializing PEFS for a user account. Once this pfile is created, enabling " +"PEFS through PersonaCrypt is accomplished in a CLI with " +":command:`personacrypt init PEFS`." +msgstr "" + +#: ../../sysadmclient.rst:1020 +msgid "" +"For example, the user account **test** has a pfile named " +":file:`testpfile.txt`, which contains the single text string of **test's** " +"chosen password. Next, the administrator adds PEFS encryption to the " +"**test** acount by opening a CLI, logging in as root, and typing:" +msgstr "" + +#: ../../sysadmclient.rst:1029 +msgid "" +"PersonaCrypt will initialize the account **test** with PEFS, using the " +"string in :file:`testpfile.txt` as the new password." +msgstr "" + +#: ../../sysadmclient.rst:1032 +msgid "" +"The |sysadm| User Manager can also initialize a user account with PEFS by " +"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` " +"drop down menu of the :guilabel:`PersonaCrypt` tab." +msgstr "" + +#: ../../sysadmclient.rst:1036 +msgid "" +"In addition to initializing an account with PEFS, PersonaCrypt also supports" +" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt " +"export ` and :command:`personacrypt import `, " +"respectively." +msgstr "" + +#~ msgid "" +#~ "|trueos| provides support for a security feature known as PersonaCrypt. A " +#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted" +#~ " with ZFS and encrypted with GELI. This device is used to hold a specific " +#~ "user's home directory, meaning they can securely transport and access their " +#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For " +#~ "example, this can be used to securely access one's home directory from a " +#~ "laptop, home computer, and work computer. The device is protected by an " +#~ "encryption key and a password which is, and should be, separate from the " +#~ "user's login password." +#~ msgstr "" + +#~ msgid "" +#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being " +#~ "your passphrase, and the other being a key stored on disk. Without both of " +#~ "these parts, the media cannot be decrypted. This means if somebody steals " +#~ "the key and manages to get your password, it is still worthless without the " +#~ "system it was paired with." +#~ msgstr "" + +#~ msgid "" +#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two " +#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". " +#~ "Note this section is hidden if the currently logged in user is selected. " +#~ "Also, if you have just created a user and do not see these options, click " +#~ ":guilabel:`Save` then re-highlight the user to display these options:" +#~ msgstr "" + #~ msgid "" #~ "**Max Boot Environments:** |trueos| automatically creates a boot environment" #~ " before updating any software, the operating system, or applying a system " diff --git a/docs/client_handbook/po/da/LC_MESSAGES/sysadmclient.po b/docs/client_handbook/po/da/LC_MESSAGES/sysadmclient.po index 25c5ac5..e4a2632 100644 --- a/docs/client_handbook/po/da/LC_MESSAGES/sysadmclient.po +++ b/docs/client_handbook/po/da/LC_MESSAGES/sysadmclient.po @@ -482,7 +482,7 @@ msgid "" "The :guilabel:`Settings` tab is shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1326 +#: ../../sysadmclient.rst:1355 msgid "Settings Tab" msgstr "" @@ -924,20 +924,7 @@ msgstr "" msgid "PersonaCrypt" msgstr "" -#: ../../sysadmclient.rst:894 -msgid "" -"|trueos| provides support for a security feature known as PersonaCrypt. A " -"PersonaCrypt device is a removable USB media, such as a USB stick, formatted" -" with ZFS and encrypted with GELI. This device is used to hold a specific " -"user's home directory, meaning they can securely transport and access their " -"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For " -"example, this can be used to securely access one's home directory from a " -"laptop, home computer, and work computer. The device is protected by an " -"encryption key and a password which is, and should be, separate from the " -"user's login password." -msgstr "" - -#: ../../sysadmclient.rst:904 +#: ../../sysadmclient.rst:905 msgid "" "When a user is configured to use a PersonaCrypt device, that user can not " "login using an unencrypted session on the same system. In other words, the " @@ -946,22 +933,13 @@ msgid "" "different user accounts, one for each type of session." msgstr "" -#: ../../sysadmclient.rst:911 -msgid "" -"PersonaCrypt uses GELI's ability to split the key into two parts: one being " -"your passphrase, and the other being a key stored on disk. Without both of " -"these parts, the media cannot be decrypted. This means if somebody steals " -"the key and manages to get your password, it is still worthless without the " -"system it was paired with." -msgstr "" - -#: ../../sysadmclient.rst:917 +#: ../../sysadmclient.rst:925 msgid "" "USB devices do eventually fail. Always backup any important files stored on " "the PersonaCrypt device to another device or system." msgstr "" -#: ../../sysadmclient.rst:920 +#: ../../sysadmclient.rst:928 msgid "" "The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt " "device for any login user, **except** for the currently logged in user. In " @@ -969,13 +947,13 @@ msgid "" "*dlavigne*, has been created and the entry for the user has been clicked." msgstr "" -#: ../../sysadmclient.rst:939 +#: ../../sysadmclient.rst:947 msgid "" "**Initialize Device:** Used to prepare the USB device which will be used as " "the user's home directory." msgstr "" -#: ../../sysadmclient.rst:942 +#: ../../sysadmclient.rst:950 msgid "" "**Import Key:** If the user has already created a PersonaCrypt device on " "another |trueos| system, click this button to import a previously saved copy" @@ -983,7 +961,7 @@ msgid "" "can now login to this computer using PersonaCrypt." msgstr "" -#: ../../sysadmclient.rst:950 +#: ../../sysadmclient.rst:958 msgid "" "Since the USB stick will hold the user's home directory and files, ensure " "the stick is large enough to meet the anticipated storage needs of the home " @@ -993,7 +971,7 @@ msgid "" "logged in." msgstr "" -#: ../../sysadmclient.rst:999 +#: ../../sysadmclient.rst:982 msgid "" "When stealth sessions have been configured, PersonaCrypt users will still be" " displayed in the login menu, even if their USB device is not inserted. This" @@ -1001,47 +979,47 @@ msgid "" "session." msgstr "" -#: ../../sysadmclient.rst:1004 +#: ../../sysadmclient.rst:987 msgid "" "In the field with the yellow padlock icon, input the password for the user " "account. In the field with the grey USB stick icon, input the password " "associated with the PersonaCrypt device." msgstr "" -#: ../../sysadmclient.rst:1008 +#: ../../sysadmclient.rst:991 msgid "" "To prevent data corruption and freezing the system **DO NOT** remove the " "PersonaCrypt device while logged in! Always log out of your session before " "physically removing the device." msgstr "" -#: ../../sysadmclient.rst:1016 +#: ../../sysadmclient.rst:1045 msgid "Managing Groups" msgstr "" -#: ../../sysadmclient.rst:1018 +#: ../../sysadmclient.rst:1047 msgid "" "Click the :guilabel:`Groups` tab to view and manage the groups on the " "system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s `, " "shows the group membership for the *operator* and *wheel* groups:" msgstr "" -#: ../../sysadmclient.rst:1029 +#: ../../sysadmclient.rst:1058 msgid "This screen has 2 columns:" msgstr "" -#: ../../sysadmclient.rst:1031 +#: ../../sysadmclient.rst:1060 msgid "" "**Members:** Indicates if the highlighted group contains any user accounts." msgstr "" -#: ../../sysadmclient.rst:1034 +#: ../../sysadmclient.rst:1063 msgid "" "**Available:** Shows all of the system and user accounts on the system in " "alphabetical order." msgstr "" -#: ../../sysadmclient.rst:1037 +#: ../../sysadmclient.rst:1066 msgid "" "To add an account to a group, highlight the group name, then highlight the " "account name in the :guilabel:`Available` column. Click the left arrow and " @@ -1051,7 +1029,7 @@ msgid "" "added to a group." msgstr "" -#: ../../sysadmclient.rst:1044 +#: ../../sysadmclient.rst:1073 msgid "" "If you add a user to the *operator* group, they will have permission to use " "commands requiring administrative access and will be prompted for their own " @@ -1060,15 +1038,15 @@ msgid "" "will be prompted for the superuser password whenever they use the command." msgstr "" -#: ../../sysadmclient.rst:1051 +#: ../../sysadmclient.rst:1080 msgid "To view all of the groups on the system, click :guilabel:`Advanced`." msgstr "" -#: ../../sysadmclient.rst:1057 +#: ../../sysadmclient.rst:1086 msgid "Life Preserver" msgstr "" -#: ../../sysadmclient.rst:1059 +#: ../../sysadmclient.rst:1088 msgid "" "The Life Preserver utility is designed to take full advantage of the " "functionality provided by ZFS snapshots. This utility allows you to schedule" @@ -1077,25 +1055,25 @@ msgid "" "benefits:" msgstr "" -#: ../../sysadmclient.rst:1081 +#: ../../sysadmclient.rst:1110 msgid "" "Replication is an efficient way to keep the files on two systems in sync. " "With Life Preserver, the snapshots taken on the |trueos| system will be " "synchronized with their versions stored on the specified backup server." msgstr "" -#: ../../sysadmclient.rst:1086 +#: ../../sysadmclient.rst:1115 msgid "Snapshots are sent to the backup server over an encrypted connection." msgstr "" -#: ../../sysadmclient.rst:1088 +#: ../../sysadmclient.rst:1117 msgid "" "Having a copy of the snapshots on another system makes it possible to " "perform an operating system restore should the |trueos| system become " "unusable or to deploy an identical system to different hardware." msgstr "" -#: ../../sysadmclient.rst:1092 +#: ../../sysadmclient.rst:1121 msgid "" "To manage snapshots and replication using the |sysadm| graphical client, go " "to :menuselection:`Utilities --> Life Preserver`. The rest of this section " @@ -1103,16 +1081,16 @@ msgid "" "Preserver." msgstr "" -#: ../../sysadmclient.rst:1101 +#: ../../sysadmclient.rst:1130 msgid "Snapshots Tab" msgstr "" -#: ../../sysadmclient.rst:1112 +#: ../../sysadmclient.rst:1141 msgid "" "This screen will display any created snapshots and provides buttons to:" msgstr "" -#: ../../sysadmclient.rst:1114 +#: ../../sysadmclient.rst:1143 msgid "" "**Create:** Used to create a manual snapshot of the specified pool now. For " "example, you could create a snapshot before making changes to an important " @@ -1126,14 +1104,14 @@ msgid "" "snapshot was created." msgstr "" -#: ../../sysadmclient.rst:1125 +#: ../../sysadmclient.rst:1154 msgid "" "**Remove:** Used to delete a highlighted snapshot. **This is a permanent " "change that can not be reversed.** In other words, the versions of files at " "the point in time the snapshot was created will be lost." msgstr "" -#: ../../sysadmclient.rst:1130 +#: ../../sysadmclient.rst:1159 msgid "" "**Revert:** If you highlight a snapshot entry, this button and the drop-down" " menu next to it will activate. You can use the drop-down menu to specify " @@ -1143,11 +1121,11 @@ msgid "" " after the snapshot was taken will be lost." msgstr "" -#: ../../sysadmclient.rst:1142 +#: ../../sysadmclient.rst:1171 msgid "Replication Tab" msgstr "" -#: ../../sysadmclient.rst:1144 +#: ../../sysadmclient.rst:1173 msgid "" "Life Preserver can be configured to replicate snapshots to another system " "over an encrypted SSH connection, though the backup itself is stored in an " @@ -1155,13 +1133,13 @@ msgid "" " another system." msgstr "" -#: ../../sysadmclient.rst:1149 +#: ../../sysadmclient.rst:1178 msgid "" "In order to configure replication, the remote system to hold a copy of the " "snapshots must first meet several requirements:" msgstr "" -#: ../../sysadmclient.rst:1156 +#: ../../sysadmclient.rst:1185 msgid "" "The backup server **must be formatted with the latest version of ZFS,** also" " known as ZFS feature flags or ZFSv5000. Operating systems that support this" @@ -1169,14 +1147,14 @@ msgid "" "FreeNAS 9.1.x or higher." msgstr "" -#: ../../sysadmclient.rst:1162 +#: ../../sysadmclient.rst:1191 msgid "" "The system must have SSH installed and the SSH service must be running. If " "the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is" " already installed, but you will need to start the SSH service." msgstr "" -#: ../../sysadmclient.rst:1167 +#: ../../sysadmclient.rst:1196 msgid "" "If the backup server is running |trueos| or |pcbsd|, you will need to open " "TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is " @@ -1186,7 +1164,7 @@ msgid "" "backup system, make sure it has a rule to allow SSH." msgstr "" -#: ../../sysadmclient.rst:1175 +#: ../../sysadmclient.rst:1204 msgid "" ":numref:`Figure %s ` shows the initial :guilabel:`Replication` " "tab on a system that has not yet been configured for replication. This " @@ -1194,29 +1172,29 @@ msgid "" "schedule." msgstr "" -#: ../../sysadmclient.rst:1186 +#: ../../sysadmclient.rst:1215 msgid "" "To schedule the replication, click :guilabel:`+` to display the \"Setup " "Replication\" screen shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1196 +#: ../../sysadmclient.rst:1225 msgid "Input the following information:" msgstr "" -#: ../../sysadmclient.rst:1198 +#: ../../sysadmclient.rst:1227 msgid "" "**Host IP:** The IP address of the remote system to store the replicated " "snapshots." msgstr "" -#: ../../sysadmclient.rst:1201 +#: ../../sysadmclient.rst:1230 msgid "" "**SSH Port:** The port number, if the remote system is running SSH on a port" " other than the default of 22." msgstr "" -#: ../../sysadmclient.rst:1204 +#: ../../sysadmclient.rst:1233 msgid "" "**Dataset:** The name of the ZFS pool and optional dataset on the remote " "system. For example, \"remotetank\" will save the snapshots to a ZFS pool of" @@ -1224,7 +1202,7 @@ msgid "" "existing dataset named \"mybackups\" on the pool named \"remotetank\"." msgstr "" -#: ../../sysadmclient.rst:1210 +#: ../../sysadmclient.rst:1239 msgid "" "**Frequency:** Use the drop-down menu to select how often to initiate the " "replication. Available choices are :guilabel:`Sync with snapshot` (at the " @@ -1235,87 +1213,87 @@ msgid "" ":guilabel:`Start`) in this screen." msgstr "" -#: ../../sysadmclient.rst:1219 +#: ../../sysadmclient.rst:1248 msgid "" "**Username:** The username must already exist on the remote system, have " "write access to the specified \"Dataset\", and have permission to SSH into " "that system." msgstr "" -#: ../../sysadmclient.rst:1223 +#: ../../sysadmclient.rst:1252 msgid "**Password:** The password associated with the \"Username\"." msgstr "" -#: ../../sysadmclient.rst:1225 +#: ../../sysadmclient.rst:1254 msgid "" "**Local DS:** Use the drop-down menu to select the pool or dataset to " "replicate to the remote system." msgstr "" -#: ../../sysadmclient.rst:1228 +#: ../../sysadmclient.rst:1257 msgid "" "The buttons at the top of the \"Setup Replication\" screen have several " "uses:" msgstr "" -#: ../../sysadmclient.rst:1231 +#: ../../sysadmclient.rst:1260 msgid "" "**+ icon:** Sdd a replication schedule. Multiple schedules are supported, " "meaning you can replicate to multiple systems or replicate different \"Local" " DS\" datasets at different times." msgstr "" -#: ../../sysadmclient.rst:1235 +#: ../../sysadmclient.rst:1264 msgid "" "**- icon:** Remove an already created, and highlighted, replication " "schedule." msgstr "" -#: ../../sysadmclient.rst:1238 +#: ../../sysadmclient.rst:1267 msgid "**gear icon:** Modify the schedule for the highlighted replication." msgstr "" -#: ../../sysadmclient.rst:1240 +#: ../../sysadmclient.rst:1269 msgid "" "**Start:** Manually starts a replication to the system specified in the " "highlighted replication." msgstr "" -#: ../../sysadmclient.rst:1243 +#: ../../sysadmclient.rst:1272 msgid "" "**Initialize:** Deletes the existing replicated snapshots on the remote " "system and starts a new replication. This is useful if a replication gets " "stuck and will not complete." msgstr "" -#: ../../sysadmclient.rst:1251 +#: ../../sysadmclient.rst:1280 msgid "Schedules Tab" msgstr "" -#: ../../sysadmclient.rst:1253 +#: ../../sysadmclient.rst:1282 msgid "" "This tab is used to manage when snapshots of the ZFS pool are created. " "Multiple snapshot schedules are supported if the system has multiple pools." msgstr "" -#: ../../sysadmclient.rst:1257 +#: ../../sysadmclient.rst:1286 msgid "" "Snapshots are created on the entire pool as they are needed when " ":ref:`Restoring the Operating System`." msgstr "" -#: ../../sysadmclient.rst:1260 +#: ../../sysadmclient.rst:1289 msgid "" "To create a snapshot schedule, click the :guilabel:`camera` icon in the " "lower left corner of this tab. This will activate the \"Setup Snapshot " "Schedule\" pane as seen in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1270 +#: ../../sysadmclient.rst:1299 msgid "This pane contains several options:" msgstr "" -#: ../../sysadmclient.rst:1275 +#: ../../sysadmclient.rst:1304 msgid "" "**Snapshots to keep:** Snapshots are automatically pruned after the " "specified number of snapshots to prevent snapshots from eventually using up " @@ -1326,7 +1304,7 @@ msgid "" "manually in the :guilabel:`Snapshots` tab." msgstr "" -#: ../../sysadmclient.rst:1284 +#: ../../sysadmclient.rst:1313 msgid "" "**Frequency:** Use the drop-down menu to select how often snapshots occur. " "Options include \"Daily\" (which will allow you to select the time of day), " @@ -1334,37 +1312,37 @@ msgid "" "Minutes\"." msgstr "" -#: ../../sysadmclient.rst:1289 +#: ../../sysadmclient.rst:1318 msgid "" "Once you have created a snapshot schedule, you can use the \"gear\" icon " "next to the \"camera\" icon to modify the highlighted schedule or the \"X\" " "icon to delete the highlighted schedule." msgstr "" -#: ../../sysadmclient.rst:1300 +#: ../../sysadmclient.rst:1329 msgid "" "To schedule when the scrub occurs, click the third icon from the right which" " will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure " "%s `." msgstr "" -#: ../../sysadmclient.rst:1318 +#: ../../sysadmclient.rst:1347 msgid "" "Once you have created a scrub schedule, you can use the \"gear\" icon next " "to the \"schedule scrub\" icon to modify the highlighted schedule or the " "\"X\" icon to delete the highlighted schedule." msgstr "" -#: ../../sysadmclient.rst:1328 +#: ../../sysadmclient.rst:1357 msgid "" "The :guilabel:`Settings` tab is shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1337 +#: ../../sysadmclient.rst:1366 msgid "Many settings are configurable:" msgstr "" -#: ../../sysadmclient.rst:1339 +#: ../../sysadmclient.rst:1368 msgid "" "**Disk Usage Warning:** Enter a number up to 99 to indicate at which " "percentage of disk space Life Preserver will display an alert in the system " @@ -1372,41 +1350,41 @@ msgid "" "space." msgstr "" -#: ../../sysadmclient.rst:1344 +#: ../../sysadmclient.rst:1373 msgid "" "**Email:** To receive an email when disk usage reaches the percentage " "configured in the \"Disk Usage Warning\", enter an email address." msgstr "" -#: ../../sysadmclient.rst:1347 +#: ../../sysadmclient.rst:1376 msgid "" "**Email Trigger:** This setting can be set to \"All\", \"Warn\", or " "\"Error\" and indicates the type of condition which will trigger an email " "message." msgstr "" -#: ../../sysadmclient.rst:1350 +#: ../../sysadmclient.rst:1379 msgid "**Recursive Management:**" msgstr "" -#: ../../sysadmclient.rst:1352 +#: ../../sysadmclient.rst:1381 msgid "" "If you make any changes in this screen, press :guilabel:`Save Settings` to " "apply them." msgstr "" -#: ../../sysadmclient.rst:1359 +#: ../../sysadmclient.rst:1388 msgid "Using the lpreserver CLI" msgstr "" -#: ../../sysadmclient.rst:1361 +#: ../../sysadmclient.rst:1390 msgid "" "The :command:`lpreserver` command line utility can also be used to manage " "snapshots and replication. This command needs to be run as the superuser. To" " display its usage, type the command without any arguments:" msgstr "" -#: ../../sysadmclient.rst:1381 +#: ../../sysadmclient.rst:1410 msgid "" "Each command has its own help text that describes its parameters and " "provides a usage example. For example, to receive help on how to use the " @@ -1417,104 +1395,104 @@ msgstr "" msgid "Command Line and GUI Equivalents" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**Command Line**" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**GUI**" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**Description**" msgstr "" -#: ../../sysadmclient.rst:1452 +#: ../../sysadmclient.rst:1481 msgid "**cronsnap**" msgstr "" -#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499 msgid "\"Snapshots\" tab" msgstr "" -#: ../../sysadmclient.rst:1452 +#: ../../sysadmclient.rst:1481 msgid "" "schedule when snapshots occur and how long to keep them; the **stop** option" " can be used to disable snapshot creation" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "**cronscrub**" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "\"Schedules\" tab" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "schedule a ZFS scrub" msgstr "" -#: ../../sysadmclient.rst:1459 +#: ../../sysadmclient.rst:1488 msgid "**get**" msgstr "" -#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495 msgid "\"Settings\" tab" msgstr "" -#: ../../sysadmclient.rst:1459 +#: ../../sysadmclient.rst:1488 msgid "list Life Preserver options" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "**replicate**" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "\"Replication\" tab" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "" "used to list, add, and remove backup server; read the **help** for this " "command for examples" msgstr "" -#: ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1495 msgid "**set**" msgstr "" -#: ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1495 msgid "" "configures Life Preserver options; read **help** for the list of " "configurable options" msgstr "" -#: ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1499 msgid "**snapshot**" msgstr "" -#: ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1499 msgid "" "create and replicate a new ZFS snapshot; by default, snapshots are " "recursive, meaning that a that a snapshot is taken of every dataset within a" " pool" msgstr "" -#: ../../sysadmclient.rst:1476 +#: ../../sysadmclient.rst:1505 msgid "**status**" msgstr "" -#: ../../sysadmclient.rst:1476 +#: ../../sysadmclient.rst:1505 msgid "lists the last snapshot name and replication status" msgstr "" -#: ../../sysadmclient.rst:1483 +#: ../../sysadmclient.rst:1512 msgid "Restoring the Operating System" msgstr "" -#: ../../sysadmclient.rst:1485 +#: ../../sysadmclient.rst:1514 msgid "" "If you have replicated the system's snapshots to a remote backup server, you" " can use a |trueos| installation media to perform an operating system " @@ -1522,7 +1500,7 @@ msgid "" "you get to the screen shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1497 +#: ../../sysadmclient.rst:1526 msgid "" "Before you can perform a restore, the network interface must be configured. " "Click :guilabel:`Network Connectivity` (second icon from the left) in order " @@ -1533,7 +1511,7 @@ msgid "" "continuing." msgstr "" -#: ../../sysadmclient.rst:1505 +#: ../../sysadmclient.rst:1534 msgid "" "Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and" " :guilabel:`Next`. This will start the Restore Wizard. In the screen shown " @@ -1543,7 +1521,7 @@ msgid "" "number." msgstr "" -#: ../../sysadmclient.rst:1519 +#: ../../sysadmclient.rst:1548 msgid "" "Click :guilabel:`Next` and the wizard will provide a summary of your " "selections. If correct, click :guilabel:`Finish`; otherwise, click " @@ -1626,7 +1604,7 @@ msgid "" "press :guilabel:`Close Ports`." msgstr "" -#: ../../sysadmclient.rst:1152 +#: ../../sysadmclient.rst:1181 msgid "" "Snapshots occurring too frequently can introduce errors in replication. To " "avoid errors, ensure snapshots are configured to take place slower than the " @@ -1685,7 +1663,7 @@ msgid "" "accounts." msgstr "" -#: ../../sysadmclient.rst:1065 +#: ../../sysadmclient.rst:1094 msgid "" "A snapshot provides a \"point-in-time\" image of the ZFS pool. This is " "similar to a full system backup as the snapshot contains the information for" @@ -1703,26 +1681,26 @@ msgid "" "snapshot." msgstr "" -#: ../../sysadmclient.rst:1272 +#: ../../sysadmclient.rst:1301 msgid "" "**Storage Pool:** Select the ZFS storage pool that contains the datasets " "that you wish to snapshot." msgstr "" -#: ../../sysadmclient.rst:1293 +#: ../../sysadmclient.rst:1322 msgid "" "This screen can also be used to manage the ZFS scrub schedule. Scrubs are " "recommended as they can provide an early indication of a potential disk " "failure. Scrubs can be scheduled on a per-pool basis." msgstr "" -#: ../../sysadmclient.rst:1297 +#: ../../sysadmclient.rst:1326 msgid "" "If you have multiple pools, be sure to create a scrub schedule for each " "pool." msgstr "" -#: ../../sysadmclient.rst:1310 +#: ../../sysadmclient.rst:1339 msgid "" "Select the pool from the :guilabel:`Storage Pool` drop-down menu, then " "select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", " @@ -1807,26 +1785,17 @@ msgstr "" msgid ": Viewing All Accounts and Their Details" msgstr "" -#: ../../sysadmclient.rst:930 +#: ../../sysadmclient.rst:938 msgid ": Initialize PersonaCrypt Device" msgstr "" -#: ../../sysadmclient.rst:932 -msgid "" -"Before a user is configured to use PersonaCrypt on a |trueos| system, two " -"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". " -"Note this section is hidden if the currently logged in user is selected. " -"Also, if you have just created a user and do not see these options, click " -":guilabel:`Save` then re-highlight the user to display these options:" -msgstr "" - -#: ../../sysadmclient.rst:947 +#: ../../sysadmclient.rst:955 msgid "" "To prepare a PersonaCrypt device for this user, insert a USB stick and click" " :guilabel:`Initialize Device`." msgstr "" -#: ../../sysadmclient.rst:957 +#: ../../sysadmclient.rst:965 msgid "" "Type a password to associate with the device. Click :guilabel:`Save` to " "initialize the device. The User Manager may take a moment to prepare the " @@ -1834,49 +1803,49 @@ msgid "" " to allow removal of PersonaCrypt." msgstr "" -#: ../../sysadmclient.rst:1027 +#: ../../sysadmclient.rst:1056 msgid ": Managing Groups Using User Manager" msgstr "" -#: ../../sysadmclient.rst:1110 +#: ../../sysadmclient.rst:1139 msgid ": Snapshot Tab" msgstr "" -#: ../../sysadmclient.rst:1184 +#: ../../sysadmclient.rst:1213 msgid ": Replication Tab" msgstr "" -#: ../../sysadmclient.rst:1194 +#: ../../sysadmclient.rst:1223 msgid ": Scheduling a Replication" msgstr "" -#: ../../sysadmclient.rst:1268 +#: ../../sysadmclient.rst:1297 msgid ": Scheduling a Snapshot" msgstr "" -#: ../../sysadmclient.rst:1308 +#: ../../sysadmclient.rst:1337 msgid ": Scheduling a Scrub" msgstr "" -#: ../../sysadmclient.rst:1335 +#: ../../sysadmclient.rst:1364 msgid ": Life Preserver Settings" msgstr "" -#: ../../sysadmclient.rst:1442 +#: ../../sysadmclient.rst:1471 msgid "" ":numref:`Table %s ` shows the command line equivalents to the " "graphical options provided by the Life Preserver GUI." msgstr "" -#: ../../sysadmclient.rst:1495 +#: ../../sysadmclient.rst:1524 msgid ": Selecting to Restore/Clone From Backup" msgstr "" -#: ../../sysadmclient.rst:1517 +#: ../../sysadmclient.rst:1546 msgid ": Input the Information for a SSH Restore" msgstr "" -#: ../../sysadmclient.rst:1523 +#: ../../sysadmclient.rst:1552 msgid "" "Once the connection to the backup server succeeds, you will be able to " "select which host to restore. After making your selection, click " @@ -1892,7 +1861,7 @@ msgid "" ":guilabel:`Next` to perform the restore." msgstr "" -#: ../../sysadmclient.rst:987 +#: ../../sysadmclient.rst:970 msgid "" "Once a user has been initialized for PersonaCrypt on the system, their user " "account will no longer be displayed when logging in, **unless** their " @@ -1901,7 +1870,7 @@ msgid "" ":numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:997 +#: ../../sysadmclient.rst:980 msgid ": |trueos| Login Screen with PersonaCrypt" msgstr "" @@ -1949,7 +1918,7 @@ msgstr "" msgid ": |sysadm| Task Manager" msgstr "" -#: ../../sysadmclient.rst:1103 +#: ../../sysadmclient.rst:1132 msgid "" ":numref:`Figure %s ` shows the :guilabel:`Snapshots` tab on a " "system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"." @@ -2013,6 +1982,134 @@ msgid "" ":guilabel:`Save Settings`." msgstr "" +#: ../../sysadmclient.rst:894 +msgid "" +"|trueos| provides support for a security feature known as PersonaCrypt. A " +"PersonaCrypt device is a removable USB media, such as a USB flash drive, " +"formatted with ZFS and encrypted with either GELI or PEFS. This device is " +"used to hold a specific user's home directory, meaning they can securely " +"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 " +"or higher system. For example, this can be used to securely access one's " +"home directory from a laptop, home computer, and work computer. The device " +"is protected by an encryption key and a different (recommended) password " +"separate from the user's login password." +msgstr "" + +#: ../../sysadmclient.rst:916 +msgid "GELI" +msgstr "" + +#: ../../sysadmclient.rst:918 +msgid "" +"PersonaCrypt uses GELI's ability to split the key into two parts: one being " +"your passphrase, and the other being a key stored on disk. Without both of " +"these parts, the media cannot be decrypted. This means if somebody steals " +"the key and manages to get your password, it is still worthless without the " +"system it was paired with. GELI is used by default in |trueos| as it is more" +" fully featured over PEFS." +msgstr "" + +#: ../../sysadmclient.rst:940 +msgid "" +"Before a user is configured to use PersonaCrypt on a |trueos| system, two " +"buttons are available in the :guilabel:`PersonaCrypt` tab of " +":guilabel:`Advanced Mode`. Note this section is hidden if the currently " +"logged in user is selected. Also, if you have just created a user and do not" +" see these options, click :guilabel:`Save`, then re-highlight the user to " +"display these options:" +msgstr "" + +#: ../../sysadmclient.rst:999 +msgid "PEFS" +msgstr "" + +#: ../../sysadmclient.rst:1001 +msgid "" +"`PEFS `_ stands for Private Encrypted File System. It is " +"open source software freely available under the BSD license, and is included" +" in |trueos| by default. PEFS runs on top of any existing file system, " +"providing an encryption layer independent of the underlying file system. " +"PersonaCrypt can be configured to use PEFS in place of GELI, which " +"eliminates the need for external media, as the encrypted PEFS database is " +"stored on the local disk." +msgstr "" + +#: ../../sysadmclient.rst:1009 +msgid "" +"While PEFS does not use a USB drive, be sure to print or otherwise backup " +"the PEFS generated key fragment stored on the disk." +msgstr "" + +#: ../../sysadmclient.rst:1012 +msgid "**Initialize PEFS with the Command Line**" +msgstr "" + +#: ../../sysadmclient.rst:1014 +msgid "" +"Because PEFS does not use a USB drive with its encryption, the user will " +"need a password file (pfile) containing the desired password, **before** " +"initializing PEFS for a user account. Once this pfile is created, enabling " +"PEFS through PersonaCrypt is accomplished in a CLI with " +":command:`personacrypt init PEFS`." +msgstr "" + +#: ../../sysadmclient.rst:1020 +msgid "" +"For example, the user account **test** has a pfile named " +":file:`testpfile.txt`, which contains the single text string of **test's** " +"chosen password. Next, the administrator adds PEFS encryption to the " +"**test** acount by opening a CLI, logging in as root, and typing:" +msgstr "" + +#: ../../sysadmclient.rst:1029 +msgid "" +"PersonaCrypt will initialize the account **test** with PEFS, using the " +"string in :file:`testpfile.txt` as the new password." +msgstr "" + +#: ../../sysadmclient.rst:1032 +msgid "" +"The |sysadm| User Manager can also initialize a user account with PEFS by " +"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` " +"drop down menu of the :guilabel:`PersonaCrypt` tab." +msgstr "" + +#: ../../sysadmclient.rst:1036 +msgid "" +"In addition to initializing an account with PEFS, PersonaCrypt also supports" +" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt " +"export ` and :command:`personacrypt import `, " +"respectively." +msgstr "" + +#~ msgid "" +#~ "|trueos| provides support for a security feature known as PersonaCrypt. A " +#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted" +#~ " with ZFS and encrypted with GELI. This device is used to hold a specific " +#~ "user's home directory, meaning they can securely transport and access their " +#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For " +#~ "example, this can be used to securely access one's home directory from a " +#~ "laptop, home computer, and work computer. The device is protected by an " +#~ "encryption key and a password which is, and should be, separate from the " +#~ "user's login password." +#~ msgstr "" + +#~ msgid "" +#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being " +#~ "your passphrase, and the other being a key stored on disk. Without both of " +#~ "these parts, the media cannot be decrypted. This means if somebody steals " +#~ "the key and manages to get your password, it is still worthless without the " +#~ "system it was paired with." +#~ msgstr "" + +#~ msgid "" +#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two " +#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". " +#~ "Note this section is hidden if the currently logged in user is selected. " +#~ "Also, if you have just created a user and do not see these options, click " +#~ ":guilabel:`Save` then re-highlight the user to display these options:" +#~ msgstr "" + #~ msgid "" #~ "**Max Boot Environments:** |trueos| automatically creates a boot environment" #~ " before updating any software, the operating system, or applying a system " diff --git a/docs/client_handbook/po/de/LC_MESSAGES/sysadmclient.po b/docs/client_handbook/po/de/LC_MESSAGES/sysadmclient.po index 25c5ac5..e4a2632 100644 --- a/docs/client_handbook/po/de/LC_MESSAGES/sysadmclient.po +++ b/docs/client_handbook/po/de/LC_MESSAGES/sysadmclient.po @@ -482,7 +482,7 @@ msgid "" "The :guilabel:`Settings` tab is shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1326 +#: ../../sysadmclient.rst:1355 msgid "Settings Tab" msgstr "" @@ -924,20 +924,7 @@ msgstr "" msgid "PersonaCrypt" msgstr "" -#: ../../sysadmclient.rst:894 -msgid "" -"|trueos| provides support for a security feature known as PersonaCrypt. A " -"PersonaCrypt device is a removable USB media, such as a USB stick, formatted" -" with ZFS and encrypted with GELI. This device is used to hold a specific " -"user's home directory, meaning they can securely transport and access their " -"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For " -"example, this can be used to securely access one's home directory from a " -"laptop, home computer, and work computer. The device is protected by an " -"encryption key and a password which is, and should be, separate from the " -"user's login password." -msgstr "" - -#: ../../sysadmclient.rst:904 +#: ../../sysadmclient.rst:905 msgid "" "When a user is configured to use a PersonaCrypt device, that user can not " "login using an unencrypted session on the same system. In other words, the " @@ -946,22 +933,13 @@ msgid "" "different user accounts, one for each type of session." msgstr "" -#: ../../sysadmclient.rst:911 -msgid "" -"PersonaCrypt uses GELI's ability to split the key into two parts: one being " -"your passphrase, and the other being a key stored on disk. Without both of " -"these parts, the media cannot be decrypted. This means if somebody steals " -"the key and manages to get your password, it is still worthless without the " -"system it was paired with." -msgstr "" - -#: ../../sysadmclient.rst:917 +#: ../../sysadmclient.rst:925 msgid "" "USB devices do eventually fail. Always backup any important files stored on " "the PersonaCrypt device to another device or system." msgstr "" -#: ../../sysadmclient.rst:920 +#: ../../sysadmclient.rst:928 msgid "" "The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt " "device for any login user, **except** for the currently logged in user. In " @@ -969,13 +947,13 @@ msgid "" "*dlavigne*, has been created and the entry for the user has been clicked." msgstr "" -#: ../../sysadmclient.rst:939 +#: ../../sysadmclient.rst:947 msgid "" "**Initialize Device:** Used to prepare the USB device which will be used as " "the user's home directory." msgstr "" -#: ../../sysadmclient.rst:942 +#: ../../sysadmclient.rst:950 msgid "" "**Import Key:** If the user has already created a PersonaCrypt device on " "another |trueos| system, click this button to import a previously saved copy" @@ -983,7 +961,7 @@ msgid "" "can now login to this computer using PersonaCrypt." msgstr "" -#: ../../sysadmclient.rst:950 +#: ../../sysadmclient.rst:958 msgid "" "Since the USB stick will hold the user's home directory and files, ensure " "the stick is large enough to meet the anticipated storage needs of the home " @@ -993,7 +971,7 @@ msgid "" "logged in." msgstr "" -#: ../../sysadmclient.rst:999 +#: ../../sysadmclient.rst:982 msgid "" "When stealth sessions have been configured, PersonaCrypt users will still be" " displayed in the login menu, even if their USB device is not inserted. This" @@ -1001,47 +979,47 @@ msgid "" "session." msgstr "" -#: ../../sysadmclient.rst:1004 +#: ../../sysadmclient.rst:987 msgid "" "In the field with the yellow padlock icon, input the password for the user " "account. In the field with the grey USB stick icon, input the password " "associated with the PersonaCrypt device." msgstr "" -#: ../../sysadmclient.rst:1008 +#: ../../sysadmclient.rst:991 msgid "" "To prevent data corruption and freezing the system **DO NOT** remove the " "PersonaCrypt device while logged in! Always log out of your session before " "physically removing the device." msgstr "" -#: ../../sysadmclient.rst:1016 +#: ../../sysadmclient.rst:1045 msgid "Managing Groups" msgstr "" -#: ../../sysadmclient.rst:1018 +#: ../../sysadmclient.rst:1047 msgid "" "Click the :guilabel:`Groups` tab to view and manage the groups on the " "system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s `, " "shows the group membership for the *operator* and *wheel* groups:" msgstr "" -#: ../../sysadmclient.rst:1029 +#: ../../sysadmclient.rst:1058 msgid "This screen has 2 columns:" msgstr "" -#: ../../sysadmclient.rst:1031 +#: ../../sysadmclient.rst:1060 msgid "" "**Members:** Indicates if the highlighted group contains any user accounts." msgstr "" -#: ../../sysadmclient.rst:1034 +#: ../../sysadmclient.rst:1063 msgid "" "**Available:** Shows all of the system and user accounts on the system in " "alphabetical order." msgstr "" -#: ../../sysadmclient.rst:1037 +#: ../../sysadmclient.rst:1066 msgid "" "To add an account to a group, highlight the group name, then highlight the " "account name in the :guilabel:`Available` column. Click the left arrow and " @@ -1051,7 +1029,7 @@ msgid "" "added to a group." msgstr "" -#: ../../sysadmclient.rst:1044 +#: ../../sysadmclient.rst:1073 msgid "" "If you add a user to the *operator* group, they will have permission to use " "commands requiring administrative access and will be prompted for their own " @@ -1060,15 +1038,15 @@ msgid "" "will be prompted for the superuser password whenever they use the command." msgstr "" -#: ../../sysadmclient.rst:1051 +#: ../../sysadmclient.rst:1080 msgid "To view all of the groups on the system, click :guilabel:`Advanced`." msgstr "" -#: ../../sysadmclient.rst:1057 +#: ../../sysadmclient.rst:1086 msgid "Life Preserver" msgstr "" -#: ../../sysadmclient.rst:1059 +#: ../../sysadmclient.rst:1088 msgid "" "The Life Preserver utility is designed to take full advantage of the " "functionality provided by ZFS snapshots. This utility allows you to schedule" @@ -1077,25 +1055,25 @@ msgid "" "benefits:" msgstr "" -#: ../../sysadmclient.rst:1081 +#: ../../sysadmclient.rst:1110 msgid "" "Replication is an efficient way to keep the files on two systems in sync. " "With Life Preserver, the snapshots taken on the |trueos| system will be " "synchronized with their versions stored on the specified backup server." msgstr "" -#: ../../sysadmclient.rst:1086 +#: ../../sysadmclient.rst:1115 msgid "Snapshots are sent to the backup server over an encrypted connection." msgstr "" -#: ../../sysadmclient.rst:1088 +#: ../../sysadmclient.rst:1117 msgid "" "Having a copy of the snapshots on another system makes it possible to " "perform an operating system restore should the |trueos| system become " "unusable or to deploy an identical system to different hardware." msgstr "" -#: ../../sysadmclient.rst:1092 +#: ../../sysadmclient.rst:1121 msgid "" "To manage snapshots and replication using the |sysadm| graphical client, go " "to :menuselection:`Utilities --> Life Preserver`. The rest of this section " @@ -1103,16 +1081,16 @@ msgid "" "Preserver." msgstr "" -#: ../../sysadmclient.rst:1101 +#: ../../sysadmclient.rst:1130 msgid "Snapshots Tab" msgstr "" -#: ../../sysadmclient.rst:1112 +#: ../../sysadmclient.rst:1141 msgid "" "This screen will display any created snapshots and provides buttons to:" msgstr "" -#: ../../sysadmclient.rst:1114 +#: ../../sysadmclient.rst:1143 msgid "" "**Create:** Used to create a manual snapshot of the specified pool now. For " "example, you could create a snapshot before making changes to an important " @@ -1126,14 +1104,14 @@ msgid "" "snapshot was created." msgstr "" -#: ../../sysadmclient.rst:1125 +#: ../../sysadmclient.rst:1154 msgid "" "**Remove:** Used to delete a highlighted snapshot. **This is a permanent " "change that can not be reversed.** In other words, the versions of files at " "the point in time the snapshot was created will be lost." msgstr "" -#: ../../sysadmclient.rst:1130 +#: ../../sysadmclient.rst:1159 msgid "" "**Revert:** If you highlight a snapshot entry, this button and the drop-down" " menu next to it will activate. You can use the drop-down menu to specify " @@ -1143,11 +1121,11 @@ msgid "" " after the snapshot was taken will be lost." msgstr "" -#: ../../sysadmclient.rst:1142 +#: ../../sysadmclient.rst:1171 msgid "Replication Tab" msgstr "" -#: ../../sysadmclient.rst:1144 +#: ../../sysadmclient.rst:1173 msgid "" "Life Preserver can be configured to replicate snapshots to another system " "over an encrypted SSH connection, though the backup itself is stored in an " @@ -1155,13 +1133,13 @@ msgid "" " another system." msgstr "" -#: ../../sysadmclient.rst:1149 +#: ../../sysadmclient.rst:1178 msgid "" "In order to configure replication, the remote system to hold a copy of the " "snapshots must first meet several requirements:" msgstr "" -#: ../../sysadmclient.rst:1156 +#: ../../sysadmclient.rst:1185 msgid "" "The backup server **must be formatted with the latest version of ZFS,** also" " known as ZFS feature flags or ZFSv5000. Operating systems that support this" @@ -1169,14 +1147,14 @@ msgid "" "FreeNAS 9.1.x or higher." msgstr "" -#: ../../sysadmclient.rst:1162 +#: ../../sysadmclient.rst:1191 msgid "" "The system must have SSH installed and the SSH service must be running. If " "the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is" " already installed, but you will need to start the SSH service." msgstr "" -#: ../../sysadmclient.rst:1167 +#: ../../sysadmclient.rst:1196 msgid "" "If the backup server is running |trueos| or |pcbsd|, you will need to open " "TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is " @@ -1186,7 +1164,7 @@ msgid "" "backup system, make sure it has a rule to allow SSH." msgstr "" -#: ../../sysadmclient.rst:1175 +#: ../../sysadmclient.rst:1204 msgid "" ":numref:`Figure %s ` shows the initial :guilabel:`Replication` " "tab on a system that has not yet been configured for replication. This " @@ -1194,29 +1172,29 @@ msgid "" "schedule." msgstr "" -#: ../../sysadmclient.rst:1186 +#: ../../sysadmclient.rst:1215 msgid "" "To schedule the replication, click :guilabel:`+` to display the \"Setup " "Replication\" screen shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1196 +#: ../../sysadmclient.rst:1225 msgid "Input the following information:" msgstr "" -#: ../../sysadmclient.rst:1198 +#: ../../sysadmclient.rst:1227 msgid "" "**Host IP:** The IP address of the remote system to store the replicated " "snapshots." msgstr "" -#: ../../sysadmclient.rst:1201 +#: ../../sysadmclient.rst:1230 msgid "" "**SSH Port:** The port number, if the remote system is running SSH on a port" " other than the default of 22." msgstr "" -#: ../../sysadmclient.rst:1204 +#: ../../sysadmclient.rst:1233 msgid "" "**Dataset:** The name of the ZFS pool and optional dataset on the remote " "system. For example, \"remotetank\" will save the snapshots to a ZFS pool of" @@ -1224,7 +1202,7 @@ msgid "" "existing dataset named \"mybackups\" on the pool named \"remotetank\"." msgstr "" -#: ../../sysadmclient.rst:1210 +#: ../../sysadmclient.rst:1239 msgid "" "**Frequency:** Use the drop-down menu to select how often to initiate the " "replication. Available choices are :guilabel:`Sync with snapshot` (at the " @@ -1235,87 +1213,87 @@ msgid "" ":guilabel:`Start`) in this screen." msgstr "" -#: ../../sysadmclient.rst:1219 +#: ../../sysadmclient.rst:1248 msgid "" "**Username:** The username must already exist on the remote system, have " "write access to the specified \"Dataset\", and have permission to SSH into " "that system." msgstr "" -#: ../../sysadmclient.rst:1223 +#: ../../sysadmclient.rst:1252 msgid "**Password:** The password associated with the \"Username\"." msgstr "" -#: ../../sysadmclient.rst:1225 +#: ../../sysadmclient.rst:1254 msgid "" "**Local DS:** Use the drop-down menu to select the pool or dataset to " "replicate to the remote system." msgstr "" -#: ../../sysadmclient.rst:1228 +#: ../../sysadmclient.rst:1257 msgid "" "The buttons at the top of the \"Setup Replication\" screen have several " "uses:" msgstr "" -#: ../../sysadmclient.rst:1231 +#: ../../sysadmclient.rst:1260 msgid "" "**+ icon:** Sdd a replication schedule. Multiple schedules are supported, " "meaning you can replicate to multiple systems or replicate different \"Local" " DS\" datasets at different times." msgstr "" -#: ../../sysadmclient.rst:1235 +#: ../../sysadmclient.rst:1264 msgid "" "**- icon:** Remove an already created, and highlighted, replication " "schedule." msgstr "" -#: ../../sysadmclient.rst:1238 +#: ../../sysadmclient.rst:1267 msgid "**gear icon:** Modify the schedule for the highlighted replication." msgstr "" -#: ../../sysadmclient.rst:1240 +#: ../../sysadmclient.rst:1269 msgid "" "**Start:** Manually starts a replication to the system specified in the " "highlighted replication." msgstr "" -#: ../../sysadmclient.rst:1243 +#: ../../sysadmclient.rst:1272 msgid "" "**Initialize:** Deletes the existing replicated snapshots on the remote " "system and starts a new replication. This is useful if a replication gets " "stuck and will not complete." msgstr "" -#: ../../sysadmclient.rst:1251 +#: ../../sysadmclient.rst:1280 msgid "Schedules Tab" msgstr "" -#: ../../sysadmclient.rst:1253 +#: ../../sysadmclient.rst:1282 msgid "" "This tab is used to manage when snapshots of the ZFS pool are created. " "Multiple snapshot schedules are supported if the system has multiple pools." msgstr "" -#: ../../sysadmclient.rst:1257 +#: ../../sysadmclient.rst:1286 msgid "" "Snapshots are created on the entire pool as they are needed when " ":ref:`Restoring the Operating System`." msgstr "" -#: ../../sysadmclient.rst:1260 +#: ../../sysadmclient.rst:1289 msgid "" "To create a snapshot schedule, click the :guilabel:`camera` icon in the " "lower left corner of this tab. This will activate the \"Setup Snapshot " "Schedule\" pane as seen in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1270 +#: ../../sysadmclient.rst:1299 msgid "This pane contains several options:" msgstr "" -#: ../../sysadmclient.rst:1275 +#: ../../sysadmclient.rst:1304 msgid "" "**Snapshots to keep:** Snapshots are automatically pruned after the " "specified number of snapshots to prevent snapshots from eventually using up " @@ -1326,7 +1304,7 @@ msgid "" "manually in the :guilabel:`Snapshots` tab." msgstr "" -#: ../../sysadmclient.rst:1284 +#: ../../sysadmclient.rst:1313 msgid "" "**Frequency:** Use the drop-down menu to select how often snapshots occur. " "Options include \"Daily\" (which will allow you to select the time of day), " @@ -1334,37 +1312,37 @@ msgid "" "Minutes\"." msgstr "" -#: ../../sysadmclient.rst:1289 +#: ../../sysadmclient.rst:1318 msgid "" "Once you have created a snapshot schedule, you can use the \"gear\" icon " "next to the \"camera\" icon to modify the highlighted schedule or the \"X\" " "icon to delete the highlighted schedule." msgstr "" -#: ../../sysadmclient.rst:1300 +#: ../../sysadmclient.rst:1329 msgid "" "To schedule when the scrub occurs, click the third icon from the right which" " will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure " "%s `." msgstr "" -#: ../../sysadmclient.rst:1318 +#: ../../sysadmclient.rst:1347 msgid "" "Once you have created a scrub schedule, you can use the \"gear\" icon next " "to the \"schedule scrub\" icon to modify the highlighted schedule or the " "\"X\" icon to delete the highlighted schedule." msgstr "" -#: ../../sysadmclient.rst:1328 +#: ../../sysadmclient.rst:1357 msgid "" "The :guilabel:`Settings` tab is shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1337 +#: ../../sysadmclient.rst:1366 msgid "Many settings are configurable:" msgstr "" -#: ../../sysadmclient.rst:1339 +#: ../../sysadmclient.rst:1368 msgid "" "**Disk Usage Warning:** Enter a number up to 99 to indicate at which " "percentage of disk space Life Preserver will display an alert in the system " @@ -1372,41 +1350,41 @@ msgid "" "space." msgstr "" -#: ../../sysadmclient.rst:1344 +#: ../../sysadmclient.rst:1373 msgid "" "**Email:** To receive an email when disk usage reaches the percentage " "configured in the \"Disk Usage Warning\", enter an email address." msgstr "" -#: ../../sysadmclient.rst:1347 +#: ../../sysadmclient.rst:1376 msgid "" "**Email Trigger:** This setting can be set to \"All\", \"Warn\", or " "\"Error\" and indicates the type of condition which will trigger an email " "message." msgstr "" -#: ../../sysadmclient.rst:1350 +#: ../../sysadmclient.rst:1379 msgid "**Recursive Management:**" msgstr "" -#: ../../sysadmclient.rst:1352 +#: ../../sysadmclient.rst:1381 msgid "" "If you make any changes in this screen, press :guilabel:`Save Settings` to " "apply them." msgstr "" -#: ../../sysadmclient.rst:1359 +#: ../../sysadmclient.rst:1388 msgid "Using the lpreserver CLI" msgstr "" -#: ../../sysadmclient.rst:1361 +#: ../../sysadmclient.rst:1390 msgid "" "The :command:`lpreserver` command line utility can also be used to manage " "snapshots and replication. This command needs to be run as the superuser. To" " display its usage, type the command without any arguments:" msgstr "" -#: ../../sysadmclient.rst:1381 +#: ../../sysadmclient.rst:1410 msgid "" "Each command has its own help text that describes its parameters and " "provides a usage example. For example, to receive help on how to use the " @@ -1417,104 +1395,104 @@ msgstr "" msgid "Command Line and GUI Equivalents" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**Command Line**" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**GUI**" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**Description**" msgstr "" -#: ../../sysadmclient.rst:1452 +#: ../../sysadmclient.rst:1481 msgid "**cronsnap**" msgstr "" -#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499 msgid "\"Snapshots\" tab" msgstr "" -#: ../../sysadmclient.rst:1452 +#: ../../sysadmclient.rst:1481 msgid "" "schedule when snapshots occur and how long to keep them; the **stop** option" " can be used to disable snapshot creation" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "**cronscrub**" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "\"Schedules\" tab" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "schedule a ZFS scrub" msgstr "" -#: ../../sysadmclient.rst:1459 +#: ../../sysadmclient.rst:1488 msgid "**get**" msgstr "" -#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495 msgid "\"Settings\" tab" msgstr "" -#: ../../sysadmclient.rst:1459 +#: ../../sysadmclient.rst:1488 msgid "list Life Preserver options" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "**replicate**" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "\"Replication\" tab" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "" "used to list, add, and remove backup server; read the **help** for this " "command for examples" msgstr "" -#: ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1495 msgid "**set**" msgstr "" -#: ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1495 msgid "" "configures Life Preserver options; read **help** for the list of " "configurable options" msgstr "" -#: ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1499 msgid "**snapshot**" msgstr "" -#: ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1499 msgid "" "create and replicate a new ZFS snapshot; by default, snapshots are " "recursive, meaning that a that a snapshot is taken of every dataset within a" " pool" msgstr "" -#: ../../sysadmclient.rst:1476 +#: ../../sysadmclient.rst:1505 msgid "**status**" msgstr "" -#: ../../sysadmclient.rst:1476 +#: ../../sysadmclient.rst:1505 msgid "lists the last snapshot name and replication status" msgstr "" -#: ../../sysadmclient.rst:1483 +#: ../../sysadmclient.rst:1512 msgid "Restoring the Operating System" msgstr "" -#: ../../sysadmclient.rst:1485 +#: ../../sysadmclient.rst:1514 msgid "" "If you have replicated the system's snapshots to a remote backup server, you" " can use a |trueos| installation media to perform an operating system " @@ -1522,7 +1500,7 @@ msgid "" "you get to the screen shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1497 +#: ../../sysadmclient.rst:1526 msgid "" "Before you can perform a restore, the network interface must be configured. " "Click :guilabel:`Network Connectivity` (second icon from the left) in order " @@ -1533,7 +1511,7 @@ msgid "" "continuing." msgstr "" -#: ../../sysadmclient.rst:1505 +#: ../../sysadmclient.rst:1534 msgid "" "Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and" " :guilabel:`Next`. This will start the Restore Wizard. In the screen shown " @@ -1543,7 +1521,7 @@ msgid "" "number." msgstr "" -#: ../../sysadmclient.rst:1519 +#: ../../sysadmclient.rst:1548 msgid "" "Click :guilabel:`Next` and the wizard will provide a summary of your " "selections. If correct, click :guilabel:`Finish`; otherwise, click " @@ -1626,7 +1604,7 @@ msgid "" "press :guilabel:`Close Ports`." msgstr "" -#: ../../sysadmclient.rst:1152 +#: ../../sysadmclient.rst:1181 msgid "" "Snapshots occurring too frequently can introduce errors in replication. To " "avoid errors, ensure snapshots are configured to take place slower than the " @@ -1685,7 +1663,7 @@ msgid "" "accounts." msgstr "" -#: ../../sysadmclient.rst:1065 +#: ../../sysadmclient.rst:1094 msgid "" "A snapshot provides a \"point-in-time\" image of the ZFS pool. This is " "similar to a full system backup as the snapshot contains the information for" @@ -1703,26 +1681,26 @@ msgid "" "snapshot." msgstr "" -#: ../../sysadmclient.rst:1272 +#: ../../sysadmclient.rst:1301 msgid "" "**Storage Pool:** Select the ZFS storage pool that contains the datasets " "that you wish to snapshot." msgstr "" -#: ../../sysadmclient.rst:1293 +#: ../../sysadmclient.rst:1322 msgid "" "This screen can also be used to manage the ZFS scrub schedule. Scrubs are " "recommended as they can provide an early indication of a potential disk " "failure. Scrubs can be scheduled on a per-pool basis." msgstr "" -#: ../../sysadmclient.rst:1297 +#: ../../sysadmclient.rst:1326 msgid "" "If you have multiple pools, be sure to create a scrub schedule for each " "pool." msgstr "" -#: ../../sysadmclient.rst:1310 +#: ../../sysadmclient.rst:1339 msgid "" "Select the pool from the :guilabel:`Storage Pool` drop-down menu, then " "select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", " @@ -1807,26 +1785,17 @@ msgstr "" msgid ": Viewing All Accounts and Their Details" msgstr "" -#: ../../sysadmclient.rst:930 +#: ../../sysadmclient.rst:938 msgid ": Initialize PersonaCrypt Device" msgstr "" -#: ../../sysadmclient.rst:932 -msgid "" -"Before a user is configured to use PersonaCrypt on a |trueos| system, two " -"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". " -"Note this section is hidden if the currently logged in user is selected. " -"Also, if you have just created a user and do not see these options, click " -":guilabel:`Save` then re-highlight the user to display these options:" -msgstr "" - -#: ../../sysadmclient.rst:947 +#: ../../sysadmclient.rst:955 msgid "" "To prepare a PersonaCrypt device for this user, insert a USB stick and click" " :guilabel:`Initialize Device`." msgstr "" -#: ../../sysadmclient.rst:957 +#: ../../sysadmclient.rst:965 msgid "" "Type a password to associate with the device. Click :guilabel:`Save` to " "initialize the device. The User Manager may take a moment to prepare the " @@ -1834,49 +1803,49 @@ msgid "" " to allow removal of PersonaCrypt." msgstr "" -#: ../../sysadmclient.rst:1027 +#: ../../sysadmclient.rst:1056 msgid ": Managing Groups Using User Manager" msgstr "" -#: ../../sysadmclient.rst:1110 +#: ../../sysadmclient.rst:1139 msgid ": Snapshot Tab" msgstr "" -#: ../../sysadmclient.rst:1184 +#: ../../sysadmclient.rst:1213 msgid ": Replication Tab" msgstr "" -#: ../../sysadmclient.rst:1194 +#: ../../sysadmclient.rst:1223 msgid ": Scheduling a Replication" msgstr "" -#: ../../sysadmclient.rst:1268 +#: ../../sysadmclient.rst:1297 msgid ": Scheduling a Snapshot" msgstr "" -#: ../../sysadmclient.rst:1308 +#: ../../sysadmclient.rst:1337 msgid ": Scheduling a Scrub" msgstr "" -#: ../../sysadmclient.rst:1335 +#: ../../sysadmclient.rst:1364 msgid ": Life Preserver Settings" msgstr "" -#: ../../sysadmclient.rst:1442 +#: ../../sysadmclient.rst:1471 msgid "" ":numref:`Table %s ` shows the command line equivalents to the " "graphical options provided by the Life Preserver GUI." msgstr "" -#: ../../sysadmclient.rst:1495 +#: ../../sysadmclient.rst:1524 msgid ": Selecting to Restore/Clone From Backup" msgstr "" -#: ../../sysadmclient.rst:1517 +#: ../../sysadmclient.rst:1546 msgid ": Input the Information for a SSH Restore" msgstr "" -#: ../../sysadmclient.rst:1523 +#: ../../sysadmclient.rst:1552 msgid "" "Once the connection to the backup server succeeds, you will be able to " "select which host to restore. After making your selection, click " @@ -1892,7 +1861,7 @@ msgid "" ":guilabel:`Next` to perform the restore." msgstr "" -#: ../../sysadmclient.rst:987 +#: ../../sysadmclient.rst:970 msgid "" "Once a user has been initialized for PersonaCrypt on the system, their user " "account will no longer be displayed when logging in, **unless** their " @@ -1901,7 +1870,7 @@ msgid "" ":numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:997 +#: ../../sysadmclient.rst:980 msgid ": |trueos| Login Screen with PersonaCrypt" msgstr "" @@ -1949,7 +1918,7 @@ msgstr "" msgid ": |sysadm| Task Manager" msgstr "" -#: ../../sysadmclient.rst:1103 +#: ../../sysadmclient.rst:1132 msgid "" ":numref:`Figure %s ` shows the :guilabel:`Snapshots` tab on a " "system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"." @@ -2013,6 +1982,134 @@ msgid "" ":guilabel:`Save Settings`." msgstr "" +#: ../../sysadmclient.rst:894 +msgid "" +"|trueos| provides support for a security feature known as PersonaCrypt. A " +"PersonaCrypt device is a removable USB media, such as a USB flash drive, " +"formatted with ZFS and encrypted with either GELI or PEFS. This device is " +"used to hold a specific user's home directory, meaning they can securely " +"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 " +"or higher system. For example, this can be used to securely access one's " +"home directory from a laptop, home computer, and work computer. The device " +"is protected by an encryption key and a different (recommended) password " +"separate from the user's login password." +msgstr "" + +#: ../../sysadmclient.rst:916 +msgid "GELI" +msgstr "" + +#: ../../sysadmclient.rst:918 +msgid "" +"PersonaCrypt uses GELI's ability to split the key into two parts: one being " +"your passphrase, and the other being a key stored on disk. Without both of " +"these parts, the media cannot be decrypted. This means if somebody steals " +"the key and manages to get your password, it is still worthless without the " +"system it was paired with. GELI is used by default in |trueos| as it is more" +" fully featured over PEFS." +msgstr "" + +#: ../../sysadmclient.rst:940 +msgid "" +"Before a user is configured to use PersonaCrypt on a |trueos| system, two " +"buttons are available in the :guilabel:`PersonaCrypt` tab of " +":guilabel:`Advanced Mode`. Note this section is hidden if the currently " +"logged in user is selected. Also, if you have just created a user and do not" +" see these options, click :guilabel:`Save`, then re-highlight the user to " +"display these options:" +msgstr "" + +#: ../../sysadmclient.rst:999 +msgid "PEFS" +msgstr "" + +#: ../../sysadmclient.rst:1001 +msgid "" +"`PEFS `_ stands for Private Encrypted File System. It is " +"open source software freely available under the BSD license, and is included" +" in |trueos| by default. PEFS runs on top of any existing file system, " +"providing an encryption layer independent of the underlying file system. " +"PersonaCrypt can be configured to use PEFS in place of GELI, which " +"eliminates the need for external media, as the encrypted PEFS database is " +"stored on the local disk." +msgstr "" + +#: ../../sysadmclient.rst:1009 +msgid "" +"While PEFS does not use a USB drive, be sure to print or otherwise backup " +"the PEFS generated key fragment stored on the disk." +msgstr "" + +#: ../../sysadmclient.rst:1012 +msgid "**Initialize PEFS with the Command Line**" +msgstr "" + +#: ../../sysadmclient.rst:1014 +msgid "" +"Because PEFS does not use a USB drive with its encryption, the user will " +"need a password file (pfile) containing the desired password, **before** " +"initializing PEFS for a user account. Once this pfile is created, enabling " +"PEFS through PersonaCrypt is accomplished in a CLI with " +":command:`personacrypt init PEFS`." +msgstr "" + +#: ../../sysadmclient.rst:1020 +msgid "" +"For example, the user account **test** has a pfile named " +":file:`testpfile.txt`, which contains the single text string of **test's** " +"chosen password. Next, the administrator adds PEFS encryption to the " +"**test** acount by opening a CLI, logging in as root, and typing:" +msgstr "" + +#: ../../sysadmclient.rst:1029 +msgid "" +"PersonaCrypt will initialize the account **test** with PEFS, using the " +"string in :file:`testpfile.txt` as the new password." +msgstr "" + +#: ../../sysadmclient.rst:1032 +msgid "" +"The |sysadm| User Manager can also initialize a user account with PEFS by " +"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` " +"drop down menu of the :guilabel:`PersonaCrypt` tab." +msgstr "" + +#: ../../sysadmclient.rst:1036 +msgid "" +"In addition to initializing an account with PEFS, PersonaCrypt also supports" +" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt " +"export ` and :command:`personacrypt import `, " +"respectively." +msgstr "" + +#~ msgid "" +#~ "|trueos| provides support for a security feature known as PersonaCrypt. A " +#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted" +#~ " with ZFS and encrypted with GELI. This device is used to hold a specific " +#~ "user's home directory, meaning they can securely transport and access their " +#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For " +#~ "example, this can be used to securely access one's home directory from a " +#~ "laptop, home computer, and work computer. The device is protected by an " +#~ "encryption key and a password which is, and should be, separate from the " +#~ "user's login password." +#~ msgstr "" + +#~ msgid "" +#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being " +#~ "your passphrase, and the other being a key stored on disk. Without both of " +#~ "these parts, the media cannot be decrypted. This means if somebody steals " +#~ "the key and manages to get your password, it is still worthless without the " +#~ "system it was paired with." +#~ msgstr "" + +#~ msgid "" +#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two " +#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". " +#~ "Note this section is hidden if the currently logged in user is selected. " +#~ "Also, if you have just created a user and do not see these options, click " +#~ ":guilabel:`Save` then re-highlight the user to display these options:" +#~ msgstr "" + #~ msgid "" #~ "**Max Boot Environments:** |trueos| automatically creates a boot environment" #~ " before updating any software, the operating system, or applying a system " diff --git a/docs/client_handbook/po/es/LC_MESSAGES/sysadmclient.po b/docs/client_handbook/po/es/LC_MESSAGES/sysadmclient.po index 25c5ac5..e4a2632 100644 --- a/docs/client_handbook/po/es/LC_MESSAGES/sysadmclient.po +++ b/docs/client_handbook/po/es/LC_MESSAGES/sysadmclient.po @@ -482,7 +482,7 @@ msgid "" "The :guilabel:`Settings` tab is shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1326 +#: ../../sysadmclient.rst:1355 msgid "Settings Tab" msgstr "" @@ -924,20 +924,7 @@ msgstr "" msgid "PersonaCrypt" msgstr "" -#: ../../sysadmclient.rst:894 -msgid "" -"|trueos| provides support for a security feature known as PersonaCrypt. A " -"PersonaCrypt device is a removable USB media, such as a USB stick, formatted" -" with ZFS and encrypted with GELI. This device is used to hold a specific " -"user's home directory, meaning they can securely transport and access their " -"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For " -"example, this can be used to securely access one's home directory from a " -"laptop, home computer, and work computer. The device is protected by an " -"encryption key and a password which is, and should be, separate from the " -"user's login password." -msgstr "" - -#: ../../sysadmclient.rst:904 +#: ../../sysadmclient.rst:905 msgid "" "When a user is configured to use a PersonaCrypt device, that user can not " "login using an unencrypted session on the same system. In other words, the " @@ -946,22 +933,13 @@ msgid "" "different user accounts, one for each type of session." msgstr "" -#: ../../sysadmclient.rst:911 -msgid "" -"PersonaCrypt uses GELI's ability to split the key into two parts: one being " -"your passphrase, and the other being a key stored on disk. Without both of " -"these parts, the media cannot be decrypted. This means if somebody steals " -"the key and manages to get your password, it is still worthless without the " -"system it was paired with." -msgstr "" - -#: ../../sysadmclient.rst:917 +#: ../../sysadmclient.rst:925 msgid "" "USB devices do eventually fail. Always backup any important files stored on " "the PersonaCrypt device to another device or system." msgstr "" -#: ../../sysadmclient.rst:920 +#: ../../sysadmclient.rst:928 msgid "" "The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt " "device for any login user, **except** for the currently logged in user. In " @@ -969,13 +947,13 @@ msgid "" "*dlavigne*, has been created and the entry for the user has been clicked." msgstr "" -#: ../../sysadmclient.rst:939 +#: ../../sysadmclient.rst:947 msgid "" "**Initialize Device:** Used to prepare the USB device which will be used as " "the user's home directory." msgstr "" -#: ../../sysadmclient.rst:942 +#: ../../sysadmclient.rst:950 msgid "" "**Import Key:** If the user has already created a PersonaCrypt device on " "another |trueos| system, click this button to import a previously saved copy" @@ -983,7 +961,7 @@ msgid "" "can now login to this computer using PersonaCrypt." msgstr "" -#: ../../sysadmclient.rst:950 +#: ../../sysadmclient.rst:958 msgid "" "Since the USB stick will hold the user's home directory and files, ensure " "the stick is large enough to meet the anticipated storage needs of the home " @@ -993,7 +971,7 @@ msgid "" "logged in." msgstr "" -#: ../../sysadmclient.rst:999 +#: ../../sysadmclient.rst:982 msgid "" "When stealth sessions have been configured, PersonaCrypt users will still be" " displayed in the login menu, even if their USB device is not inserted. This" @@ -1001,47 +979,47 @@ msgid "" "session." msgstr "" -#: ../../sysadmclient.rst:1004 +#: ../../sysadmclient.rst:987 msgid "" "In the field with the yellow padlock icon, input the password for the user " "account. In the field with the grey USB stick icon, input the password " "associated with the PersonaCrypt device." msgstr "" -#: ../../sysadmclient.rst:1008 +#: ../../sysadmclient.rst:991 msgid "" "To prevent data corruption and freezing the system **DO NOT** remove the " "PersonaCrypt device while logged in! Always log out of your session before " "physically removing the device." msgstr "" -#: ../../sysadmclient.rst:1016 +#: ../../sysadmclient.rst:1045 msgid "Managing Groups" msgstr "" -#: ../../sysadmclient.rst:1018 +#: ../../sysadmclient.rst:1047 msgid "" "Click the :guilabel:`Groups` tab to view and manage the groups on the " "system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s `, " "shows the group membership for the *operator* and *wheel* groups:" msgstr "" -#: ../../sysadmclient.rst:1029 +#: ../../sysadmclient.rst:1058 msgid "This screen has 2 columns:" msgstr "" -#: ../../sysadmclient.rst:1031 +#: ../../sysadmclient.rst:1060 msgid "" "**Members:** Indicates if the highlighted group contains any user accounts." msgstr "" -#: ../../sysadmclient.rst:1034 +#: ../../sysadmclient.rst:1063 msgid "" "**Available:** Shows all of the system and user accounts on the system in " "alphabetical order." msgstr "" -#: ../../sysadmclient.rst:1037 +#: ../../sysadmclient.rst:1066 msgid "" "To add an account to a group, highlight the group name, then highlight the " "account name in the :guilabel:`Available` column. Click the left arrow and " @@ -1051,7 +1029,7 @@ msgid "" "added to a group." msgstr "" -#: ../../sysadmclient.rst:1044 +#: ../../sysadmclient.rst:1073 msgid "" "If you add a user to the *operator* group, they will have permission to use " "commands requiring administrative access and will be prompted for their own " @@ -1060,15 +1038,15 @@ msgid "" "will be prompted for the superuser password whenever they use the command." msgstr "" -#: ../../sysadmclient.rst:1051 +#: ../../sysadmclient.rst:1080 msgid "To view all of the groups on the system, click :guilabel:`Advanced`." msgstr "" -#: ../../sysadmclient.rst:1057 +#: ../../sysadmclient.rst:1086 msgid "Life Preserver" msgstr "" -#: ../../sysadmclient.rst:1059 +#: ../../sysadmclient.rst:1088 msgid "" "The Life Preserver utility is designed to take full advantage of the " "functionality provided by ZFS snapshots. This utility allows you to schedule" @@ -1077,25 +1055,25 @@ msgid "" "benefits:" msgstr "" -#: ../../sysadmclient.rst:1081 +#: ../../sysadmclient.rst:1110 msgid "" "Replication is an efficient way to keep the files on two systems in sync. " "With Life Preserver, the snapshots taken on the |trueos| system will be " "synchronized with their versions stored on the specified backup server." msgstr "" -#: ../../sysadmclient.rst:1086 +#: ../../sysadmclient.rst:1115 msgid "Snapshots are sent to the backup server over an encrypted connection." msgstr "" -#: ../../sysadmclient.rst:1088 +#: ../../sysadmclient.rst:1117 msgid "" "Having a copy of the snapshots on another system makes it possible to " "perform an operating system restore should the |trueos| system become " "unusable or to deploy an identical system to different hardware." msgstr "" -#: ../../sysadmclient.rst:1092 +#: ../../sysadmclient.rst:1121 msgid "" "To manage snapshots and replication using the |sysadm| graphical client, go " "to :menuselection:`Utilities --> Life Preserver`. The rest of this section " @@ -1103,16 +1081,16 @@ msgid "" "Preserver." msgstr "" -#: ../../sysadmclient.rst:1101 +#: ../../sysadmclient.rst:1130 msgid "Snapshots Tab" msgstr "" -#: ../../sysadmclient.rst:1112 +#: ../../sysadmclient.rst:1141 msgid "" "This screen will display any created snapshots and provides buttons to:" msgstr "" -#: ../../sysadmclient.rst:1114 +#: ../../sysadmclient.rst:1143 msgid "" "**Create:** Used to create a manual snapshot of the specified pool now. For " "example, you could create a snapshot before making changes to an important " @@ -1126,14 +1104,14 @@ msgid "" "snapshot was created." msgstr "" -#: ../../sysadmclient.rst:1125 +#: ../../sysadmclient.rst:1154 msgid "" "**Remove:** Used to delete a highlighted snapshot. **This is a permanent " "change that can not be reversed.** In other words, the versions of files at " "the point in time the snapshot was created will be lost." msgstr "" -#: ../../sysadmclient.rst:1130 +#: ../../sysadmclient.rst:1159 msgid "" "**Revert:** If you highlight a snapshot entry, this button and the drop-down" " menu next to it will activate. You can use the drop-down menu to specify " @@ -1143,11 +1121,11 @@ msgid "" " after the snapshot was taken will be lost." msgstr "" -#: ../../sysadmclient.rst:1142 +#: ../../sysadmclient.rst:1171 msgid "Replication Tab" msgstr "" -#: ../../sysadmclient.rst:1144 +#: ../../sysadmclient.rst:1173 msgid "" "Life Preserver can be configured to replicate snapshots to another system " "over an encrypted SSH connection, though the backup itself is stored in an " @@ -1155,13 +1133,13 @@ msgid "" " another system." msgstr "" -#: ../../sysadmclient.rst:1149 +#: ../../sysadmclient.rst:1178 msgid "" "In order to configure replication, the remote system to hold a copy of the " "snapshots must first meet several requirements:" msgstr "" -#: ../../sysadmclient.rst:1156 +#: ../../sysadmclient.rst:1185 msgid "" "The backup server **must be formatted with the latest version of ZFS,** also" " known as ZFS feature flags or ZFSv5000. Operating systems that support this" @@ -1169,14 +1147,14 @@ msgid "" "FreeNAS 9.1.x or higher." msgstr "" -#: ../../sysadmclient.rst:1162 +#: ../../sysadmclient.rst:1191 msgid "" "The system must have SSH installed and the SSH service must be running. If " "the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is" " already installed, but you will need to start the SSH service." msgstr "" -#: ../../sysadmclient.rst:1167 +#: ../../sysadmclient.rst:1196 msgid "" "If the backup server is running |trueos| or |pcbsd|, you will need to open " "TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is " @@ -1186,7 +1164,7 @@ msgid "" "backup system, make sure it has a rule to allow SSH." msgstr "" -#: ../../sysadmclient.rst:1175 +#: ../../sysadmclient.rst:1204 msgid "" ":numref:`Figure %s ` shows the initial :guilabel:`Replication` " "tab on a system that has not yet been configured for replication. This " @@ -1194,29 +1172,29 @@ msgid "" "schedule." msgstr "" -#: ../../sysadmclient.rst:1186 +#: ../../sysadmclient.rst:1215 msgid "" "To schedule the replication, click :guilabel:`+` to display the \"Setup " "Replication\" screen shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1196 +#: ../../sysadmclient.rst:1225 msgid "Input the following information:" msgstr "" -#: ../../sysadmclient.rst:1198 +#: ../../sysadmclient.rst:1227 msgid "" "**Host IP:** The IP address of the remote system to store the replicated " "snapshots." msgstr "" -#: ../../sysadmclient.rst:1201 +#: ../../sysadmclient.rst:1230 msgid "" "**SSH Port:** The port number, if the remote system is running SSH on a port" " other than the default of 22." msgstr "" -#: ../../sysadmclient.rst:1204 +#: ../../sysadmclient.rst:1233 msgid "" "**Dataset:** The name of the ZFS pool and optional dataset on the remote " "system. For example, \"remotetank\" will save the snapshots to a ZFS pool of" @@ -1224,7 +1202,7 @@ msgid "" "existing dataset named \"mybackups\" on the pool named \"remotetank\"." msgstr "" -#: ../../sysadmclient.rst:1210 +#: ../../sysadmclient.rst:1239 msgid "" "**Frequency:** Use the drop-down menu to select how often to initiate the " "replication. Available choices are :guilabel:`Sync with snapshot` (at the " @@ -1235,87 +1213,87 @@ msgid "" ":guilabel:`Start`) in this screen." msgstr "" -#: ../../sysadmclient.rst:1219 +#: ../../sysadmclient.rst:1248 msgid "" "**Username:** The username must already exist on the remote system, have " "write access to the specified \"Dataset\", and have permission to SSH into " "that system." msgstr "" -#: ../../sysadmclient.rst:1223 +#: ../../sysadmclient.rst:1252 msgid "**Password:** The password associated with the \"Username\"." msgstr "" -#: ../../sysadmclient.rst:1225 +#: ../../sysadmclient.rst:1254 msgid "" "**Local DS:** Use the drop-down menu to select the pool or dataset to " "replicate to the remote system." msgstr "" -#: ../../sysadmclient.rst:1228 +#: ../../sysadmclient.rst:1257 msgid "" "The buttons at the top of the \"Setup Replication\" screen have several " "uses:" msgstr "" -#: ../../sysadmclient.rst:1231 +#: ../../sysadmclient.rst:1260 msgid "" "**+ icon:** Sdd a replication schedule. Multiple schedules are supported, " "meaning you can replicate to multiple systems or replicate different \"Local" " DS\" datasets at different times." msgstr "" -#: ../../sysadmclient.rst:1235 +#: ../../sysadmclient.rst:1264 msgid "" "**- icon:** Remove an already created, and highlighted, replication " "schedule." msgstr "" -#: ../../sysadmclient.rst:1238 +#: ../../sysadmclient.rst:1267 msgid "**gear icon:** Modify the schedule for the highlighted replication." msgstr "" -#: ../../sysadmclient.rst:1240 +#: ../../sysadmclient.rst:1269 msgid "" "**Start:** Manually starts a replication to the system specified in the " "highlighted replication." msgstr "" -#: ../../sysadmclient.rst:1243 +#: ../../sysadmclient.rst:1272 msgid "" "**Initialize:** Deletes the existing replicated snapshots on the remote " "system and starts a new replication. This is useful if a replication gets " "stuck and will not complete." msgstr "" -#: ../../sysadmclient.rst:1251 +#: ../../sysadmclient.rst:1280 msgid "Schedules Tab" msgstr "" -#: ../../sysadmclient.rst:1253 +#: ../../sysadmclient.rst:1282 msgid "" "This tab is used to manage when snapshots of the ZFS pool are created. " "Multiple snapshot schedules are supported if the system has multiple pools." msgstr "" -#: ../../sysadmclient.rst:1257 +#: ../../sysadmclient.rst:1286 msgid "" "Snapshots are created on the entire pool as they are needed when " ":ref:`Restoring the Operating System`." msgstr "" -#: ../../sysadmclient.rst:1260 +#: ../../sysadmclient.rst:1289 msgid "" "To create a snapshot schedule, click the :guilabel:`camera` icon in the " "lower left corner of this tab. This will activate the \"Setup Snapshot " "Schedule\" pane as seen in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1270 +#: ../../sysadmclient.rst:1299 msgid "This pane contains several options:" msgstr "" -#: ../../sysadmclient.rst:1275 +#: ../../sysadmclient.rst:1304 msgid "" "**Snapshots to keep:** Snapshots are automatically pruned after the " "specified number of snapshots to prevent snapshots from eventually using up " @@ -1326,7 +1304,7 @@ msgid "" "manually in the :guilabel:`Snapshots` tab." msgstr "" -#: ../../sysadmclient.rst:1284 +#: ../../sysadmclient.rst:1313 msgid "" "**Frequency:** Use the drop-down menu to select how often snapshots occur. " "Options include \"Daily\" (which will allow you to select the time of day), " @@ -1334,37 +1312,37 @@ msgid "" "Minutes\"." msgstr "" -#: ../../sysadmclient.rst:1289 +#: ../../sysadmclient.rst:1318 msgid "" "Once you have created a snapshot schedule, you can use the \"gear\" icon " "next to the \"camera\" icon to modify the highlighted schedule or the \"X\" " "icon to delete the highlighted schedule." msgstr "" -#: ../../sysadmclient.rst:1300 +#: ../../sysadmclient.rst:1329 msgid "" "To schedule when the scrub occurs, click the third icon from the right which" " will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure " "%s `." msgstr "" -#: ../../sysadmclient.rst:1318 +#: ../../sysadmclient.rst:1347 msgid "" "Once you have created a scrub schedule, you can use the \"gear\" icon next " "to the \"schedule scrub\" icon to modify the highlighted schedule or the " "\"X\" icon to delete the highlighted schedule." msgstr "" -#: ../../sysadmclient.rst:1328 +#: ../../sysadmclient.rst:1357 msgid "" "The :guilabel:`Settings` tab is shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1337 +#: ../../sysadmclient.rst:1366 msgid "Many settings are configurable:" msgstr "" -#: ../../sysadmclient.rst:1339 +#: ../../sysadmclient.rst:1368 msgid "" "**Disk Usage Warning:** Enter a number up to 99 to indicate at which " "percentage of disk space Life Preserver will display an alert in the system " @@ -1372,41 +1350,41 @@ msgid "" "space." msgstr "" -#: ../../sysadmclient.rst:1344 +#: ../../sysadmclient.rst:1373 msgid "" "**Email:** To receive an email when disk usage reaches the percentage " "configured in the \"Disk Usage Warning\", enter an email address." msgstr "" -#: ../../sysadmclient.rst:1347 +#: ../../sysadmclient.rst:1376 msgid "" "**Email Trigger:** This setting can be set to \"All\", \"Warn\", or " "\"Error\" and indicates the type of condition which will trigger an email " "message." msgstr "" -#: ../../sysadmclient.rst:1350 +#: ../../sysadmclient.rst:1379 msgid "**Recursive Management:**" msgstr "" -#: ../../sysadmclient.rst:1352 +#: ../../sysadmclient.rst:1381 msgid "" "If you make any changes in this screen, press :guilabel:`Save Settings` to " "apply them." msgstr "" -#: ../../sysadmclient.rst:1359 +#: ../../sysadmclient.rst:1388 msgid "Using the lpreserver CLI" msgstr "" -#: ../../sysadmclient.rst:1361 +#: ../../sysadmclient.rst:1390 msgid "" "The :command:`lpreserver` command line utility can also be used to manage " "snapshots and replication. This command needs to be run as the superuser. To" " display its usage, type the command without any arguments:" msgstr "" -#: ../../sysadmclient.rst:1381 +#: ../../sysadmclient.rst:1410 msgid "" "Each command has its own help text that describes its parameters and " "provides a usage example. For example, to receive help on how to use the " @@ -1417,104 +1395,104 @@ msgstr "" msgid "Command Line and GUI Equivalents" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**Command Line**" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**GUI**" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**Description**" msgstr "" -#: ../../sysadmclient.rst:1452 +#: ../../sysadmclient.rst:1481 msgid "**cronsnap**" msgstr "" -#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499 msgid "\"Snapshots\" tab" msgstr "" -#: ../../sysadmclient.rst:1452 +#: ../../sysadmclient.rst:1481 msgid "" "schedule when snapshots occur and how long to keep them; the **stop** option" " can be used to disable snapshot creation" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "**cronscrub**" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "\"Schedules\" tab" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "schedule a ZFS scrub" msgstr "" -#: ../../sysadmclient.rst:1459 +#: ../../sysadmclient.rst:1488 msgid "**get**" msgstr "" -#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495 msgid "\"Settings\" tab" msgstr "" -#: ../../sysadmclient.rst:1459 +#: ../../sysadmclient.rst:1488 msgid "list Life Preserver options" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "**replicate**" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "\"Replication\" tab" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "" "used to list, add, and remove backup server; read the **help** for this " "command for examples" msgstr "" -#: ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1495 msgid "**set**" msgstr "" -#: ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1495 msgid "" "configures Life Preserver options; read **help** for the list of " "configurable options" msgstr "" -#: ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1499 msgid "**snapshot**" msgstr "" -#: ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1499 msgid "" "create and replicate a new ZFS snapshot; by default, snapshots are " "recursive, meaning that a that a snapshot is taken of every dataset within a" " pool" msgstr "" -#: ../../sysadmclient.rst:1476 +#: ../../sysadmclient.rst:1505 msgid "**status**" msgstr "" -#: ../../sysadmclient.rst:1476 +#: ../../sysadmclient.rst:1505 msgid "lists the last snapshot name and replication status" msgstr "" -#: ../../sysadmclient.rst:1483 +#: ../../sysadmclient.rst:1512 msgid "Restoring the Operating System" msgstr "" -#: ../../sysadmclient.rst:1485 +#: ../../sysadmclient.rst:1514 msgid "" "If you have replicated the system's snapshots to a remote backup server, you" " can use a |trueos| installation media to perform an operating system " @@ -1522,7 +1500,7 @@ msgid "" "you get to the screen shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1497 +#: ../../sysadmclient.rst:1526 msgid "" "Before you can perform a restore, the network interface must be configured. " "Click :guilabel:`Network Connectivity` (second icon from the left) in order " @@ -1533,7 +1511,7 @@ msgid "" "continuing." msgstr "" -#: ../../sysadmclient.rst:1505 +#: ../../sysadmclient.rst:1534 msgid "" "Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and" " :guilabel:`Next`. This will start the Restore Wizard. In the screen shown " @@ -1543,7 +1521,7 @@ msgid "" "number." msgstr "" -#: ../../sysadmclient.rst:1519 +#: ../../sysadmclient.rst:1548 msgid "" "Click :guilabel:`Next` and the wizard will provide a summary of your " "selections. If correct, click :guilabel:`Finish`; otherwise, click " @@ -1626,7 +1604,7 @@ msgid "" "press :guilabel:`Close Ports`." msgstr "" -#: ../../sysadmclient.rst:1152 +#: ../../sysadmclient.rst:1181 msgid "" "Snapshots occurring too frequently can introduce errors in replication. To " "avoid errors, ensure snapshots are configured to take place slower than the " @@ -1685,7 +1663,7 @@ msgid "" "accounts." msgstr "" -#: ../../sysadmclient.rst:1065 +#: ../../sysadmclient.rst:1094 msgid "" "A snapshot provides a \"point-in-time\" image of the ZFS pool. This is " "similar to a full system backup as the snapshot contains the information for" @@ -1703,26 +1681,26 @@ msgid "" "snapshot." msgstr "" -#: ../../sysadmclient.rst:1272 +#: ../../sysadmclient.rst:1301 msgid "" "**Storage Pool:** Select the ZFS storage pool that contains the datasets " "that you wish to snapshot." msgstr "" -#: ../../sysadmclient.rst:1293 +#: ../../sysadmclient.rst:1322 msgid "" "This screen can also be used to manage the ZFS scrub schedule. Scrubs are " "recommended as they can provide an early indication of a potential disk " "failure. Scrubs can be scheduled on a per-pool basis." msgstr "" -#: ../../sysadmclient.rst:1297 +#: ../../sysadmclient.rst:1326 msgid "" "If you have multiple pools, be sure to create a scrub schedule for each " "pool." msgstr "" -#: ../../sysadmclient.rst:1310 +#: ../../sysadmclient.rst:1339 msgid "" "Select the pool from the :guilabel:`Storage Pool` drop-down menu, then " "select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", " @@ -1807,26 +1785,17 @@ msgstr "" msgid ": Viewing All Accounts and Their Details" msgstr "" -#: ../../sysadmclient.rst:930 +#: ../../sysadmclient.rst:938 msgid ": Initialize PersonaCrypt Device" msgstr "" -#: ../../sysadmclient.rst:932 -msgid "" -"Before a user is configured to use PersonaCrypt on a |trueos| system, two " -"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". " -"Note this section is hidden if the currently logged in user is selected. " -"Also, if you have just created a user and do not see these options, click " -":guilabel:`Save` then re-highlight the user to display these options:" -msgstr "" - -#: ../../sysadmclient.rst:947 +#: ../../sysadmclient.rst:955 msgid "" "To prepare a PersonaCrypt device for this user, insert a USB stick and click" " :guilabel:`Initialize Device`." msgstr "" -#: ../../sysadmclient.rst:957 +#: ../../sysadmclient.rst:965 msgid "" "Type a password to associate with the device. Click :guilabel:`Save` to " "initialize the device. The User Manager may take a moment to prepare the " @@ -1834,49 +1803,49 @@ msgid "" " to allow removal of PersonaCrypt." msgstr "" -#: ../../sysadmclient.rst:1027 +#: ../../sysadmclient.rst:1056 msgid ": Managing Groups Using User Manager" msgstr "" -#: ../../sysadmclient.rst:1110 +#: ../../sysadmclient.rst:1139 msgid ": Snapshot Tab" msgstr "" -#: ../../sysadmclient.rst:1184 +#: ../../sysadmclient.rst:1213 msgid ": Replication Tab" msgstr "" -#: ../../sysadmclient.rst:1194 +#: ../../sysadmclient.rst:1223 msgid ": Scheduling a Replication" msgstr "" -#: ../../sysadmclient.rst:1268 +#: ../../sysadmclient.rst:1297 msgid ": Scheduling a Snapshot" msgstr "" -#: ../../sysadmclient.rst:1308 +#: ../../sysadmclient.rst:1337 msgid ": Scheduling a Scrub" msgstr "" -#: ../../sysadmclient.rst:1335 +#: ../../sysadmclient.rst:1364 msgid ": Life Preserver Settings" msgstr "" -#: ../../sysadmclient.rst:1442 +#: ../../sysadmclient.rst:1471 msgid "" ":numref:`Table %s ` shows the command line equivalents to the " "graphical options provided by the Life Preserver GUI." msgstr "" -#: ../../sysadmclient.rst:1495 +#: ../../sysadmclient.rst:1524 msgid ": Selecting to Restore/Clone From Backup" msgstr "" -#: ../../sysadmclient.rst:1517 +#: ../../sysadmclient.rst:1546 msgid ": Input the Information for a SSH Restore" msgstr "" -#: ../../sysadmclient.rst:1523 +#: ../../sysadmclient.rst:1552 msgid "" "Once the connection to the backup server succeeds, you will be able to " "select which host to restore. After making your selection, click " @@ -1892,7 +1861,7 @@ msgid "" ":guilabel:`Next` to perform the restore." msgstr "" -#: ../../sysadmclient.rst:987 +#: ../../sysadmclient.rst:970 msgid "" "Once a user has been initialized for PersonaCrypt on the system, their user " "account will no longer be displayed when logging in, **unless** their " @@ -1901,7 +1870,7 @@ msgid "" ":numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:997 +#: ../../sysadmclient.rst:980 msgid ": |trueos| Login Screen with PersonaCrypt" msgstr "" @@ -1949,7 +1918,7 @@ msgstr "" msgid ": |sysadm| Task Manager" msgstr "" -#: ../../sysadmclient.rst:1103 +#: ../../sysadmclient.rst:1132 msgid "" ":numref:`Figure %s ` shows the :guilabel:`Snapshots` tab on a " "system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"." @@ -2013,6 +1982,134 @@ msgid "" ":guilabel:`Save Settings`." msgstr "" +#: ../../sysadmclient.rst:894 +msgid "" +"|trueos| provides support for a security feature known as PersonaCrypt. A " +"PersonaCrypt device is a removable USB media, such as a USB flash drive, " +"formatted with ZFS and encrypted with either GELI or PEFS. This device is " +"used to hold a specific user's home directory, meaning they can securely " +"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 " +"or higher system. For example, this can be used to securely access one's " +"home directory from a laptop, home computer, and work computer. The device " +"is protected by an encryption key and a different (recommended) password " +"separate from the user's login password." +msgstr "" + +#: ../../sysadmclient.rst:916 +msgid "GELI" +msgstr "" + +#: ../../sysadmclient.rst:918 +msgid "" +"PersonaCrypt uses GELI's ability to split the key into two parts: one being " +"your passphrase, and the other being a key stored on disk. Without both of " +"these parts, the media cannot be decrypted. This means if somebody steals " +"the key and manages to get your password, it is still worthless without the " +"system it was paired with. GELI is used by default in |trueos| as it is more" +" fully featured over PEFS." +msgstr "" + +#: ../../sysadmclient.rst:940 +msgid "" +"Before a user is configured to use PersonaCrypt on a |trueos| system, two " +"buttons are available in the :guilabel:`PersonaCrypt` tab of " +":guilabel:`Advanced Mode`. Note this section is hidden if the currently " +"logged in user is selected. Also, if you have just created a user and do not" +" see these options, click :guilabel:`Save`, then re-highlight the user to " +"display these options:" +msgstr "" + +#: ../../sysadmclient.rst:999 +msgid "PEFS" +msgstr "" + +#: ../../sysadmclient.rst:1001 +msgid "" +"`PEFS `_ stands for Private Encrypted File System. It is " +"open source software freely available under the BSD license, and is included" +" in |trueos| by default. PEFS runs on top of any existing file system, " +"providing an encryption layer independent of the underlying file system. " +"PersonaCrypt can be configured to use PEFS in place of GELI, which " +"eliminates the need for external media, as the encrypted PEFS database is " +"stored on the local disk." +msgstr "" + +#: ../../sysadmclient.rst:1009 +msgid "" +"While PEFS does not use a USB drive, be sure to print or otherwise backup " +"the PEFS generated key fragment stored on the disk." +msgstr "" + +#: ../../sysadmclient.rst:1012 +msgid "**Initialize PEFS with the Command Line**" +msgstr "" + +#: ../../sysadmclient.rst:1014 +msgid "" +"Because PEFS does not use a USB drive with its encryption, the user will " +"need a password file (pfile) containing the desired password, **before** " +"initializing PEFS for a user account. Once this pfile is created, enabling " +"PEFS through PersonaCrypt is accomplished in a CLI with " +":command:`personacrypt init PEFS`." +msgstr "" + +#: ../../sysadmclient.rst:1020 +msgid "" +"For example, the user account **test** has a pfile named " +":file:`testpfile.txt`, which contains the single text string of **test's** " +"chosen password. Next, the administrator adds PEFS encryption to the " +"**test** acount by opening a CLI, logging in as root, and typing:" +msgstr "" + +#: ../../sysadmclient.rst:1029 +msgid "" +"PersonaCrypt will initialize the account **test** with PEFS, using the " +"string in :file:`testpfile.txt` as the new password." +msgstr "" + +#: ../../sysadmclient.rst:1032 +msgid "" +"The |sysadm| User Manager can also initialize a user account with PEFS by " +"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` " +"drop down menu of the :guilabel:`PersonaCrypt` tab." +msgstr "" + +#: ../../sysadmclient.rst:1036 +msgid "" +"In addition to initializing an account with PEFS, PersonaCrypt also supports" +" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt " +"export ` and :command:`personacrypt import `, " +"respectively." +msgstr "" + +#~ msgid "" +#~ "|trueos| provides support for a security feature known as PersonaCrypt. A " +#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted" +#~ " with ZFS and encrypted with GELI. This device is used to hold a specific " +#~ "user's home directory, meaning they can securely transport and access their " +#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For " +#~ "example, this can be used to securely access one's home directory from a " +#~ "laptop, home computer, and work computer. The device is protected by an " +#~ "encryption key and a password which is, and should be, separate from the " +#~ "user's login password." +#~ msgstr "" + +#~ msgid "" +#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being " +#~ "your passphrase, and the other being a key stored on disk. Without both of " +#~ "these parts, the media cannot be decrypted. This means if somebody steals " +#~ "the key and manages to get your password, it is still worthless without the " +#~ "system it was paired with." +#~ msgstr "" + +#~ msgid "" +#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two " +#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". " +#~ "Note this section is hidden if the currently logged in user is selected. " +#~ "Also, if you have just created a user and do not see these options, click " +#~ ":guilabel:`Save` then re-highlight the user to display these options:" +#~ msgstr "" + #~ msgid "" #~ "**Max Boot Environments:** |trueos| automatically creates a boot environment" #~ " before updating any software, the operating system, or applying a system " diff --git a/docs/client_handbook/po/fr/LC_MESSAGES/sysadmclient.po b/docs/client_handbook/po/fr/LC_MESSAGES/sysadmclient.po index 25c5ac5..e4a2632 100644 --- a/docs/client_handbook/po/fr/LC_MESSAGES/sysadmclient.po +++ b/docs/client_handbook/po/fr/LC_MESSAGES/sysadmclient.po @@ -482,7 +482,7 @@ msgid "" "The :guilabel:`Settings` tab is shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1326 +#: ../../sysadmclient.rst:1355 msgid "Settings Tab" msgstr "" @@ -924,20 +924,7 @@ msgstr "" msgid "PersonaCrypt" msgstr "" -#: ../../sysadmclient.rst:894 -msgid "" -"|trueos| provides support for a security feature known as PersonaCrypt. A " -"PersonaCrypt device is a removable USB media, such as a USB stick, formatted" -" with ZFS and encrypted with GELI. This device is used to hold a specific " -"user's home directory, meaning they can securely transport and access their " -"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For " -"example, this can be used to securely access one's home directory from a " -"laptop, home computer, and work computer. The device is protected by an " -"encryption key and a password which is, and should be, separate from the " -"user's login password." -msgstr "" - -#: ../../sysadmclient.rst:904 +#: ../../sysadmclient.rst:905 msgid "" "When a user is configured to use a PersonaCrypt device, that user can not " "login using an unencrypted session on the same system. In other words, the " @@ -946,22 +933,13 @@ msgid "" "different user accounts, one for each type of session." msgstr "" -#: ../../sysadmclient.rst:911 -msgid "" -"PersonaCrypt uses GELI's ability to split the key into two parts: one being " -"your passphrase, and the other being a key stored on disk. Without both of " -"these parts, the media cannot be decrypted. This means if somebody steals " -"the key and manages to get your password, it is still worthless without the " -"system it was paired with." -msgstr "" - -#: ../../sysadmclient.rst:917 +#: ../../sysadmclient.rst:925 msgid "" "USB devices do eventually fail. Always backup any important files stored on " "the PersonaCrypt device to another device or system." msgstr "" -#: ../../sysadmclient.rst:920 +#: ../../sysadmclient.rst:928 msgid "" "The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt " "device for any login user, **except** for the currently logged in user. In " @@ -969,13 +947,13 @@ msgid "" "*dlavigne*, has been created and the entry for the user has been clicked." msgstr "" -#: ../../sysadmclient.rst:939 +#: ../../sysadmclient.rst:947 msgid "" "**Initialize Device:** Used to prepare the USB device which will be used as " "the user's home directory." msgstr "" -#: ../../sysadmclient.rst:942 +#: ../../sysadmclient.rst:950 msgid "" "**Import Key:** If the user has already created a PersonaCrypt device on " "another |trueos| system, click this button to import a previously saved copy" @@ -983,7 +961,7 @@ msgid "" "can now login to this computer using PersonaCrypt." msgstr "" -#: ../../sysadmclient.rst:950 +#: ../../sysadmclient.rst:958 msgid "" "Since the USB stick will hold the user's home directory and files, ensure " "the stick is large enough to meet the anticipated storage needs of the home " @@ -993,7 +971,7 @@ msgid "" "logged in." msgstr "" -#: ../../sysadmclient.rst:999 +#: ../../sysadmclient.rst:982 msgid "" "When stealth sessions have been configured, PersonaCrypt users will still be" " displayed in the login menu, even if their USB device is not inserted. This" @@ -1001,47 +979,47 @@ msgid "" "session." msgstr "" -#: ../../sysadmclient.rst:1004 +#: ../../sysadmclient.rst:987 msgid "" "In the field with the yellow padlock icon, input the password for the user " "account. In the field with the grey USB stick icon, input the password " "associated with the PersonaCrypt device." msgstr "" -#: ../../sysadmclient.rst:1008 +#: ../../sysadmclient.rst:991 msgid "" "To prevent data corruption and freezing the system **DO NOT** remove the " "PersonaCrypt device while logged in! Always log out of your session before " "physically removing the device." msgstr "" -#: ../../sysadmclient.rst:1016 +#: ../../sysadmclient.rst:1045 msgid "Managing Groups" msgstr "" -#: ../../sysadmclient.rst:1018 +#: ../../sysadmclient.rst:1047 msgid "" "Click the :guilabel:`Groups` tab to view and manage the groups on the " "system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s `, " "shows the group membership for the *operator* and *wheel* groups:" msgstr "" -#: ../../sysadmclient.rst:1029 +#: ../../sysadmclient.rst:1058 msgid "This screen has 2 columns:" msgstr "" -#: ../../sysadmclient.rst:1031 +#: ../../sysadmclient.rst:1060 msgid "" "**Members:** Indicates if the highlighted group contains any user accounts." msgstr "" -#: ../../sysadmclient.rst:1034 +#: ../../sysadmclient.rst:1063 msgid "" "**Available:** Shows all of the system and user accounts on the system in " "alphabetical order." msgstr "" -#: ../../sysadmclient.rst:1037 +#: ../../sysadmclient.rst:1066 msgid "" "To add an account to a group, highlight the group name, then highlight the " "account name in the :guilabel:`Available` column. Click the left arrow and " @@ -1051,7 +1029,7 @@ msgid "" "added to a group." msgstr "" -#: ../../sysadmclient.rst:1044 +#: ../../sysadmclient.rst:1073 msgid "" "If you add a user to the *operator* group, they will have permission to use " "commands requiring administrative access and will be prompted for their own " @@ -1060,15 +1038,15 @@ msgid "" "will be prompted for the superuser password whenever they use the command." msgstr "" -#: ../../sysadmclient.rst:1051 +#: ../../sysadmclient.rst:1080 msgid "To view all of the groups on the system, click :guilabel:`Advanced`." msgstr "" -#: ../../sysadmclient.rst:1057 +#: ../../sysadmclient.rst:1086 msgid "Life Preserver" msgstr "" -#: ../../sysadmclient.rst:1059 +#: ../../sysadmclient.rst:1088 msgid "" "The Life Preserver utility is designed to take full advantage of the " "functionality provided by ZFS snapshots. This utility allows you to schedule" @@ -1077,25 +1055,25 @@ msgid "" "benefits:" msgstr "" -#: ../../sysadmclient.rst:1081 +#: ../../sysadmclient.rst:1110 msgid "" "Replication is an efficient way to keep the files on two systems in sync. " "With Life Preserver, the snapshots taken on the |trueos| system will be " "synchronized with their versions stored on the specified backup server." msgstr "" -#: ../../sysadmclient.rst:1086 +#: ../../sysadmclient.rst:1115 msgid "Snapshots are sent to the backup server over an encrypted connection." msgstr "" -#: ../../sysadmclient.rst:1088 +#: ../../sysadmclient.rst:1117 msgid "" "Having a copy of the snapshots on another system makes it possible to " "perform an operating system restore should the |trueos| system become " "unusable or to deploy an identical system to different hardware." msgstr "" -#: ../../sysadmclient.rst:1092 +#: ../../sysadmclient.rst:1121 msgid "" "To manage snapshots and replication using the |sysadm| graphical client, go " "to :menuselection:`Utilities --> Life Preserver`. The rest of this section " @@ -1103,16 +1081,16 @@ msgid "" "Preserver." msgstr "" -#: ../../sysadmclient.rst:1101 +#: ../../sysadmclient.rst:1130 msgid "Snapshots Tab" msgstr "" -#: ../../sysadmclient.rst:1112 +#: ../../sysadmclient.rst:1141 msgid "" "This screen will display any created snapshots and provides buttons to:" msgstr "" -#: ../../sysadmclient.rst:1114 +#: ../../sysadmclient.rst:1143 msgid "" "**Create:** Used to create a manual snapshot of the specified pool now. For " "example, you could create a snapshot before making changes to an important " @@ -1126,14 +1104,14 @@ msgid "" "snapshot was created." msgstr "" -#: ../../sysadmclient.rst:1125 +#: ../../sysadmclient.rst:1154 msgid "" "**Remove:** Used to delete a highlighted snapshot. **This is a permanent " "change that can not be reversed.** In other words, the versions of files at " "the point in time the snapshot was created will be lost." msgstr "" -#: ../../sysadmclient.rst:1130 +#: ../../sysadmclient.rst:1159 msgid "" "**Revert:** If you highlight a snapshot entry, this button and the drop-down" " menu next to it will activate. You can use the drop-down menu to specify " @@ -1143,11 +1121,11 @@ msgid "" " after the snapshot was taken will be lost." msgstr "" -#: ../../sysadmclient.rst:1142 +#: ../../sysadmclient.rst:1171 msgid "Replication Tab" msgstr "" -#: ../../sysadmclient.rst:1144 +#: ../../sysadmclient.rst:1173 msgid "" "Life Preserver can be configured to replicate snapshots to another system " "over an encrypted SSH connection, though the backup itself is stored in an " @@ -1155,13 +1133,13 @@ msgid "" " another system." msgstr "" -#: ../../sysadmclient.rst:1149 +#: ../../sysadmclient.rst:1178 msgid "" "In order to configure replication, the remote system to hold a copy of the " "snapshots must first meet several requirements:" msgstr "" -#: ../../sysadmclient.rst:1156 +#: ../../sysadmclient.rst:1185 msgid "" "The backup server **must be formatted with the latest version of ZFS,** also" " known as ZFS feature flags or ZFSv5000. Operating systems that support this" @@ -1169,14 +1147,14 @@ msgid "" "FreeNAS 9.1.x or higher." msgstr "" -#: ../../sysadmclient.rst:1162 +#: ../../sysadmclient.rst:1191 msgid "" "The system must have SSH installed and the SSH service must be running. If " "the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is" " already installed, but you will need to start the SSH service." msgstr "" -#: ../../sysadmclient.rst:1167 +#: ../../sysadmclient.rst:1196 msgid "" "If the backup server is running |trueos| or |pcbsd|, you will need to open " "TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is " @@ -1186,7 +1164,7 @@ msgid "" "backup system, make sure it has a rule to allow SSH." msgstr "" -#: ../../sysadmclient.rst:1175 +#: ../../sysadmclient.rst:1204 msgid "" ":numref:`Figure %s ` shows the initial :guilabel:`Replication` " "tab on a system that has not yet been configured for replication. This " @@ -1194,29 +1172,29 @@ msgid "" "schedule." msgstr "" -#: ../../sysadmclient.rst:1186 +#: ../../sysadmclient.rst:1215 msgid "" "To schedule the replication, click :guilabel:`+` to display the \"Setup " "Replication\" screen shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1196 +#: ../../sysadmclient.rst:1225 msgid "Input the following information:" msgstr "" -#: ../../sysadmclient.rst:1198 +#: ../../sysadmclient.rst:1227 msgid "" "**Host IP:** The IP address of the remote system to store the replicated " "snapshots." msgstr "" -#: ../../sysadmclient.rst:1201 +#: ../../sysadmclient.rst:1230 msgid "" "**SSH Port:** The port number, if the remote system is running SSH on a port" " other than the default of 22." msgstr "" -#: ../../sysadmclient.rst:1204 +#: ../../sysadmclient.rst:1233 msgid "" "**Dataset:** The name of the ZFS pool and optional dataset on the remote " "system. For example, \"remotetank\" will save the snapshots to a ZFS pool of" @@ -1224,7 +1202,7 @@ msgid "" "existing dataset named \"mybackups\" on the pool named \"remotetank\"." msgstr "" -#: ../../sysadmclient.rst:1210 +#: ../../sysadmclient.rst:1239 msgid "" "**Frequency:** Use the drop-down menu to select how often to initiate the " "replication. Available choices are :guilabel:`Sync with snapshot` (at the " @@ -1235,87 +1213,87 @@ msgid "" ":guilabel:`Start`) in this screen." msgstr "" -#: ../../sysadmclient.rst:1219 +#: ../../sysadmclient.rst:1248 msgid "" "**Username:** The username must already exist on the remote system, have " "write access to the specified \"Dataset\", and have permission to SSH into " "that system." msgstr "" -#: ../../sysadmclient.rst:1223 +#: ../../sysadmclient.rst:1252 msgid "**Password:** The password associated with the \"Username\"." msgstr "" -#: ../../sysadmclient.rst:1225 +#: ../../sysadmclient.rst:1254 msgid "" "**Local DS:** Use the drop-down menu to select the pool or dataset to " "replicate to the remote system." msgstr "" -#: ../../sysadmclient.rst:1228 +#: ../../sysadmclient.rst:1257 msgid "" "The buttons at the top of the \"Setup Replication\" screen have several " "uses:" msgstr "" -#: ../../sysadmclient.rst:1231 +#: ../../sysadmclient.rst:1260 msgid "" "**+ icon:** Sdd a replication schedule. Multiple schedules are supported, " "meaning you can replicate to multiple systems or replicate different \"Local" " DS\" datasets at different times." msgstr "" -#: ../../sysadmclient.rst:1235 +#: ../../sysadmclient.rst:1264 msgid "" "**- icon:** Remove an already created, and highlighted, replication " "schedule." msgstr "" -#: ../../sysadmclient.rst:1238 +#: ../../sysadmclient.rst:1267 msgid "**gear icon:** Modify the schedule for the highlighted replication." msgstr "" -#: ../../sysadmclient.rst:1240 +#: ../../sysadmclient.rst:1269 msgid "" "**Start:** Manually starts a replication to the system specified in the " "highlighted replication." msgstr "" -#: ../../sysadmclient.rst:1243 +#: ../../sysadmclient.rst:1272 msgid "" "**Initialize:** Deletes the existing replicated snapshots on the remote " "system and starts a new replication. This is useful if a replication gets " "stuck and will not complete." msgstr "" -#: ../../sysadmclient.rst:1251 +#: ../../sysadmclient.rst:1280 msgid "Schedules Tab" msgstr "" -#: ../../sysadmclient.rst:1253 +#: ../../sysadmclient.rst:1282 msgid "" "This tab is used to manage when snapshots of the ZFS pool are created. " "Multiple snapshot schedules are supported if the system has multiple pools." msgstr "" -#: ../../sysadmclient.rst:1257 +#: ../../sysadmclient.rst:1286 msgid "" "Snapshots are created on the entire pool as they are needed when " ":ref:`Restoring the Operating System`." msgstr "" -#: ../../sysadmclient.rst:1260 +#: ../../sysadmclient.rst:1289 msgid "" "To create a snapshot schedule, click the :guilabel:`camera` icon in the " "lower left corner of this tab. This will activate the \"Setup Snapshot " "Schedule\" pane as seen in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1270 +#: ../../sysadmclient.rst:1299 msgid "This pane contains several options:" msgstr "" -#: ../../sysadmclient.rst:1275 +#: ../../sysadmclient.rst:1304 msgid "" "**Snapshots to keep:** Snapshots are automatically pruned after the " "specified number of snapshots to prevent snapshots from eventually using up " @@ -1326,7 +1304,7 @@ msgid "" "manually in the :guilabel:`Snapshots` tab." msgstr "" -#: ../../sysadmclient.rst:1284 +#: ../../sysadmclient.rst:1313 msgid "" "**Frequency:** Use the drop-down menu to select how often snapshots occur. " "Options include \"Daily\" (which will allow you to select the time of day), " @@ -1334,37 +1312,37 @@ msgid "" "Minutes\"." msgstr "" -#: ../../sysadmclient.rst:1289 +#: ../../sysadmclient.rst:1318 msgid "" "Once you have created a snapshot schedule, you can use the \"gear\" icon " "next to the \"camera\" icon to modify the highlighted schedule or the \"X\" " "icon to delete the highlighted schedule." msgstr "" -#: ../../sysadmclient.rst:1300 +#: ../../sysadmclient.rst:1329 msgid "" "To schedule when the scrub occurs, click the third icon from the right which" " will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure " "%s `." msgstr "" -#: ../../sysadmclient.rst:1318 +#: ../../sysadmclient.rst:1347 msgid "" "Once you have created a scrub schedule, you can use the \"gear\" icon next " "to the \"schedule scrub\" icon to modify the highlighted schedule or the " "\"X\" icon to delete the highlighted schedule." msgstr "" -#: ../../sysadmclient.rst:1328 +#: ../../sysadmclient.rst:1357 msgid "" "The :guilabel:`Settings` tab is shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1337 +#: ../../sysadmclient.rst:1366 msgid "Many settings are configurable:" msgstr "" -#: ../../sysadmclient.rst:1339 +#: ../../sysadmclient.rst:1368 msgid "" "**Disk Usage Warning:** Enter a number up to 99 to indicate at which " "percentage of disk space Life Preserver will display an alert in the system " @@ -1372,41 +1350,41 @@ msgid "" "space." msgstr "" -#: ../../sysadmclient.rst:1344 +#: ../../sysadmclient.rst:1373 msgid "" "**Email:** To receive an email when disk usage reaches the percentage " "configured in the \"Disk Usage Warning\", enter an email address." msgstr "" -#: ../../sysadmclient.rst:1347 +#: ../../sysadmclient.rst:1376 msgid "" "**Email Trigger:** This setting can be set to \"All\", \"Warn\", or " "\"Error\" and indicates the type of condition which will trigger an email " "message." msgstr "" -#: ../../sysadmclient.rst:1350 +#: ../../sysadmclient.rst:1379 msgid "**Recursive Management:**" msgstr "" -#: ../../sysadmclient.rst:1352 +#: ../../sysadmclient.rst:1381 msgid "" "If you make any changes in this screen, press :guilabel:`Save Settings` to " "apply them." msgstr "" -#: ../../sysadmclient.rst:1359 +#: ../../sysadmclient.rst:1388 msgid "Using the lpreserver CLI" msgstr "" -#: ../../sysadmclient.rst:1361 +#: ../../sysadmclient.rst:1390 msgid "" "The :command:`lpreserver` command line utility can also be used to manage " "snapshots and replication. This command needs to be run as the superuser. To" " display its usage, type the command without any arguments:" msgstr "" -#: ../../sysadmclient.rst:1381 +#: ../../sysadmclient.rst:1410 msgid "" "Each command has its own help text that describes its parameters and " "provides a usage example. For example, to receive help on how to use the " @@ -1417,104 +1395,104 @@ msgstr "" msgid "Command Line and GUI Equivalents" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**Command Line**" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**GUI**" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**Description**" msgstr "" -#: ../../sysadmclient.rst:1452 +#: ../../sysadmclient.rst:1481 msgid "**cronsnap**" msgstr "" -#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499 msgid "\"Snapshots\" tab" msgstr "" -#: ../../sysadmclient.rst:1452 +#: ../../sysadmclient.rst:1481 msgid "" "schedule when snapshots occur and how long to keep them; the **stop** option" " can be used to disable snapshot creation" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "**cronscrub**" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "\"Schedules\" tab" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "schedule a ZFS scrub" msgstr "" -#: ../../sysadmclient.rst:1459 +#: ../../sysadmclient.rst:1488 msgid "**get**" msgstr "" -#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495 msgid "\"Settings\" tab" msgstr "" -#: ../../sysadmclient.rst:1459 +#: ../../sysadmclient.rst:1488 msgid "list Life Preserver options" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "**replicate**" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "\"Replication\" tab" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "" "used to list, add, and remove backup server; read the **help** for this " "command for examples" msgstr "" -#: ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1495 msgid "**set**" msgstr "" -#: ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1495 msgid "" "configures Life Preserver options; read **help** for the list of " "configurable options" msgstr "" -#: ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1499 msgid "**snapshot**" msgstr "" -#: ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1499 msgid "" "create and replicate a new ZFS snapshot; by default, snapshots are " "recursive, meaning that a that a snapshot is taken of every dataset within a" " pool" msgstr "" -#: ../../sysadmclient.rst:1476 +#: ../../sysadmclient.rst:1505 msgid "**status**" msgstr "" -#: ../../sysadmclient.rst:1476 +#: ../../sysadmclient.rst:1505 msgid "lists the last snapshot name and replication status" msgstr "" -#: ../../sysadmclient.rst:1483 +#: ../../sysadmclient.rst:1512 msgid "Restoring the Operating System" msgstr "" -#: ../../sysadmclient.rst:1485 +#: ../../sysadmclient.rst:1514 msgid "" "If you have replicated the system's snapshots to a remote backup server, you" " can use a |trueos| installation media to perform an operating system " @@ -1522,7 +1500,7 @@ msgid "" "you get to the screen shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1497 +#: ../../sysadmclient.rst:1526 msgid "" "Before you can perform a restore, the network interface must be configured. " "Click :guilabel:`Network Connectivity` (second icon from the left) in order " @@ -1533,7 +1511,7 @@ msgid "" "continuing." msgstr "" -#: ../../sysadmclient.rst:1505 +#: ../../sysadmclient.rst:1534 msgid "" "Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and" " :guilabel:`Next`. This will start the Restore Wizard. In the screen shown " @@ -1543,7 +1521,7 @@ msgid "" "number." msgstr "" -#: ../../sysadmclient.rst:1519 +#: ../../sysadmclient.rst:1548 msgid "" "Click :guilabel:`Next` and the wizard will provide a summary of your " "selections. If correct, click :guilabel:`Finish`; otherwise, click " @@ -1626,7 +1604,7 @@ msgid "" "press :guilabel:`Close Ports`." msgstr "" -#: ../../sysadmclient.rst:1152 +#: ../../sysadmclient.rst:1181 msgid "" "Snapshots occurring too frequently can introduce errors in replication. To " "avoid errors, ensure snapshots are configured to take place slower than the " @@ -1685,7 +1663,7 @@ msgid "" "accounts." msgstr "" -#: ../../sysadmclient.rst:1065 +#: ../../sysadmclient.rst:1094 msgid "" "A snapshot provides a \"point-in-time\" image of the ZFS pool. This is " "similar to a full system backup as the snapshot contains the information for" @@ -1703,26 +1681,26 @@ msgid "" "snapshot." msgstr "" -#: ../../sysadmclient.rst:1272 +#: ../../sysadmclient.rst:1301 msgid "" "**Storage Pool:** Select the ZFS storage pool that contains the datasets " "that you wish to snapshot." msgstr "" -#: ../../sysadmclient.rst:1293 +#: ../../sysadmclient.rst:1322 msgid "" "This screen can also be used to manage the ZFS scrub schedule. Scrubs are " "recommended as they can provide an early indication of a potential disk " "failure. Scrubs can be scheduled on a per-pool basis." msgstr "" -#: ../../sysadmclient.rst:1297 +#: ../../sysadmclient.rst:1326 msgid "" "If you have multiple pools, be sure to create a scrub schedule for each " "pool." msgstr "" -#: ../../sysadmclient.rst:1310 +#: ../../sysadmclient.rst:1339 msgid "" "Select the pool from the :guilabel:`Storage Pool` drop-down menu, then " "select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", " @@ -1807,26 +1785,17 @@ msgstr "" msgid ": Viewing All Accounts and Their Details" msgstr "" -#: ../../sysadmclient.rst:930 +#: ../../sysadmclient.rst:938 msgid ": Initialize PersonaCrypt Device" msgstr "" -#: ../../sysadmclient.rst:932 -msgid "" -"Before a user is configured to use PersonaCrypt on a |trueos| system, two " -"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". " -"Note this section is hidden if the currently logged in user is selected. " -"Also, if you have just created a user and do not see these options, click " -":guilabel:`Save` then re-highlight the user to display these options:" -msgstr "" - -#: ../../sysadmclient.rst:947 +#: ../../sysadmclient.rst:955 msgid "" "To prepare a PersonaCrypt device for this user, insert a USB stick and click" " :guilabel:`Initialize Device`." msgstr "" -#: ../../sysadmclient.rst:957 +#: ../../sysadmclient.rst:965 msgid "" "Type a password to associate with the device. Click :guilabel:`Save` to " "initialize the device. The User Manager may take a moment to prepare the " @@ -1834,49 +1803,49 @@ msgid "" " to allow removal of PersonaCrypt." msgstr "" -#: ../../sysadmclient.rst:1027 +#: ../../sysadmclient.rst:1056 msgid ": Managing Groups Using User Manager" msgstr "" -#: ../../sysadmclient.rst:1110 +#: ../../sysadmclient.rst:1139 msgid ": Snapshot Tab" msgstr "" -#: ../../sysadmclient.rst:1184 +#: ../../sysadmclient.rst:1213 msgid ": Replication Tab" msgstr "" -#: ../../sysadmclient.rst:1194 +#: ../../sysadmclient.rst:1223 msgid ": Scheduling a Replication" msgstr "" -#: ../../sysadmclient.rst:1268 +#: ../../sysadmclient.rst:1297 msgid ": Scheduling a Snapshot" msgstr "" -#: ../../sysadmclient.rst:1308 +#: ../../sysadmclient.rst:1337 msgid ": Scheduling a Scrub" msgstr "" -#: ../../sysadmclient.rst:1335 +#: ../../sysadmclient.rst:1364 msgid ": Life Preserver Settings" msgstr "" -#: ../../sysadmclient.rst:1442 +#: ../../sysadmclient.rst:1471 msgid "" ":numref:`Table %s ` shows the command line equivalents to the " "graphical options provided by the Life Preserver GUI." msgstr "" -#: ../../sysadmclient.rst:1495 +#: ../../sysadmclient.rst:1524 msgid ": Selecting to Restore/Clone From Backup" msgstr "" -#: ../../sysadmclient.rst:1517 +#: ../../sysadmclient.rst:1546 msgid ": Input the Information for a SSH Restore" msgstr "" -#: ../../sysadmclient.rst:1523 +#: ../../sysadmclient.rst:1552 msgid "" "Once the connection to the backup server succeeds, you will be able to " "select which host to restore. After making your selection, click " @@ -1892,7 +1861,7 @@ msgid "" ":guilabel:`Next` to perform the restore." msgstr "" -#: ../../sysadmclient.rst:987 +#: ../../sysadmclient.rst:970 msgid "" "Once a user has been initialized for PersonaCrypt on the system, their user " "account will no longer be displayed when logging in, **unless** their " @@ -1901,7 +1870,7 @@ msgid "" ":numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:997 +#: ../../sysadmclient.rst:980 msgid ": |trueos| Login Screen with PersonaCrypt" msgstr "" @@ -1949,7 +1918,7 @@ msgstr "" msgid ": |sysadm| Task Manager" msgstr "" -#: ../../sysadmclient.rst:1103 +#: ../../sysadmclient.rst:1132 msgid "" ":numref:`Figure %s ` shows the :guilabel:`Snapshots` tab on a " "system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"." @@ -2013,6 +1982,134 @@ msgid "" ":guilabel:`Save Settings`." msgstr "" +#: ../../sysadmclient.rst:894 +msgid "" +"|trueos| provides support for a security feature known as PersonaCrypt. A " +"PersonaCrypt device is a removable USB media, such as a USB flash drive, " +"formatted with ZFS and encrypted with either GELI or PEFS. This device is " +"used to hold a specific user's home directory, meaning they can securely " +"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 " +"or higher system. For example, this can be used to securely access one's " +"home directory from a laptop, home computer, and work computer. The device " +"is protected by an encryption key and a different (recommended) password " +"separate from the user's login password." +msgstr "" + +#: ../../sysadmclient.rst:916 +msgid "GELI" +msgstr "" + +#: ../../sysadmclient.rst:918 +msgid "" +"PersonaCrypt uses GELI's ability to split the key into two parts: one being " +"your passphrase, and the other being a key stored on disk. Without both of " +"these parts, the media cannot be decrypted. This means if somebody steals " +"the key and manages to get your password, it is still worthless without the " +"system it was paired with. GELI is used by default in |trueos| as it is more" +" fully featured over PEFS." +msgstr "" + +#: ../../sysadmclient.rst:940 +msgid "" +"Before a user is configured to use PersonaCrypt on a |trueos| system, two " +"buttons are available in the :guilabel:`PersonaCrypt` tab of " +":guilabel:`Advanced Mode`. Note this section is hidden if the currently " +"logged in user is selected. Also, if you have just created a user and do not" +" see these options, click :guilabel:`Save`, then re-highlight the user to " +"display these options:" +msgstr "" + +#: ../../sysadmclient.rst:999 +msgid "PEFS" +msgstr "" + +#: ../../sysadmclient.rst:1001 +msgid "" +"`PEFS `_ stands for Private Encrypted File System. It is " +"open source software freely available under the BSD license, and is included" +" in |trueos| by default. PEFS runs on top of any existing file system, " +"providing an encryption layer independent of the underlying file system. " +"PersonaCrypt can be configured to use PEFS in place of GELI, which " +"eliminates the need for external media, as the encrypted PEFS database is " +"stored on the local disk." +msgstr "" + +#: ../../sysadmclient.rst:1009 +msgid "" +"While PEFS does not use a USB drive, be sure to print or otherwise backup " +"the PEFS generated key fragment stored on the disk." +msgstr "" + +#: ../../sysadmclient.rst:1012 +msgid "**Initialize PEFS with the Command Line**" +msgstr "" + +#: ../../sysadmclient.rst:1014 +msgid "" +"Because PEFS does not use a USB drive with its encryption, the user will " +"need a password file (pfile) containing the desired password, **before** " +"initializing PEFS for a user account. Once this pfile is created, enabling " +"PEFS through PersonaCrypt is accomplished in a CLI with " +":command:`personacrypt init PEFS`." +msgstr "" + +#: ../../sysadmclient.rst:1020 +msgid "" +"For example, the user account **test** has a pfile named " +":file:`testpfile.txt`, which contains the single text string of **test's** " +"chosen password. Next, the administrator adds PEFS encryption to the " +"**test** acount by opening a CLI, logging in as root, and typing:" +msgstr "" + +#: ../../sysadmclient.rst:1029 +msgid "" +"PersonaCrypt will initialize the account **test** with PEFS, using the " +"string in :file:`testpfile.txt` as the new password." +msgstr "" + +#: ../../sysadmclient.rst:1032 +msgid "" +"The |sysadm| User Manager can also initialize a user account with PEFS by " +"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` " +"drop down menu of the :guilabel:`PersonaCrypt` tab." +msgstr "" + +#: ../../sysadmclient.rst:1036 +msgid "" +"In addition to initializing an account with PEFS, PersonaCrypt also supports" +" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt " +"export ` and :command:`personacrypt import `, " +"respectively." +msgstr "" + +#~ msgid "" +#~ "|trueos| provides support for a security feature known as PersonaCrypt. A " +#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted" +#~ " with ZFS and encrypted with GELI. This device is used to hold a specific " +#~ "user's home directory, meaning they can securely transport and access their " +#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For " +#~ "example, this can be used to securely access one's home directory from a " +#~ "laptop, home computer, and work computer. The device is protected by an " +#~ "encryption key and a password which is, and should be, separate from the " +#~ "user's login password." +#~ msgstr "" + +#~ msgid "" +#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being " +#~ "your passphrase, and the other being a key stored on disk. Without both of " +#~ "these parts, the media cannot be decrypted. This means if somebody steals " +#~ "the key and manages to get your password, it is still worthless without the " +#~ "system it was paired with." +#~ msgstr "" + +#~ msgid "" +#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two " +#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". " +#~ "Note this section is hidden if the currently logged in user is selected. " +#~ "Also, if you have just created a user and do not see these options, click " +#~ ":guilabel:`Save` then re-highlight the user to display these options:" +#~ msgstr "" + #~ msgid "" #~ "**Max Boot Environments:** |trueos| automatically creates a boot environment" #~ " before updating any software, the operating system, or applying a system " diff --git a/docs/client_handbook/po/id/LC_MESSAGES/sysadmclient.po b/docs/client_handbook/po/id/LC_MESSAGES/sysadmclient.po index 25c5ac5..e4a2632 100644 --- a/docs/client_handbook/po/id/LC_MESSAGES/sysadmclient.po +++ b/docs/client_handbook/po/id/LC_MESSAGES/sysadmclient.po @@ -482,7 +482,7 @@ msgid "" "The :guilabel:`Settings` tab is shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1326 +#: ../../sysadmclient.rst:1355 msgid "Settings Tab" msgstr "" @@ -924,20 +924,7 @@ msgstr "" msgid "PersonaCrypt" msgstr "" -#: ../../sysadmclient.rst:894 -msgid "" -"|trueos| provides support for a security feature known as PersonaCrypt. A " -"PersonaCrypt device is a removable USB media, such as a USB stick, formatted" -" with ZFS and encrypted with GELI. This device is used to hold a specific " -"user's home directory, meaning they can securely transport and access their " -"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For " -"example, this can be used to securely access one's home directory from a " -"laptop, home computer, and work computer. The device is protected by an " -"encryption key and a password which is, and should be, separate from the " -"user's login password." -msgstr "" - -#: ../../sysadmclient.rst:904 +#: ../../sysadmclient.rst:905 msgid "" "When a user is configured to use a PersonaCrypt device, that user can not " "login using an unencrypted session on the same system. In other words, the " @@ -946,22 +933,13 @@ msgid "" "different user accounts, one for each type of session." msgstr "" -#: ../../sysadmclient.rst:911 -msgid "" -"PersonaCrypt uses GELI's ability to split the key into two parts: one being " -"your passphrase, and the other being a key stored on disk. Without both of " -"these parts, the media cannot be decrypted. This means if somebody steals " -"the key and manages to get your password, it is still worthless without the " -"system it was paired with." -msgstr "" - -#: ../../sysadmclient.rst:917 +#: ../../sysadmclient.rst:925 msgid "" "USB devices do eventually fail. Always backup any important files stored on " "the PersonaCrypt device to another device or system." msgstr "" -#: ../../sysadmclient.rst:920 +#: ../../sysadmclient.rst:928 msgid "" "The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt " "device for any login user, **except** for the currently logged in user. In " @@ -969,13 +947,13 @@ msgid "" "*dlavigne*, has been created and the entry for the user has been clicked." msgstr "" -#: ../../sysadmclient.rst:939 +#: ../../sysadmclient.rst:947 msgid "" "**Initialize Device:** Used to prepare the USB device which will be used as " "the user's home directory." msgstr "" -#: ../../sysadmclient.rst:942 +#: ../../sysadmclient.rst:950 msgid "" "**Import Key:** If the user has already created a PersonaCrypt device on " "another |trueos| system, click this button to import a previously saved copy" @@ -983,7 +961,7 @@ msgid "" "can now login to this computer using PersonaCrypt." msgstr "" -#: ../../sysadmclient.rst:950 +#: ../../sysadmclient.rst:958 msgid "" "Since the USB stick will hold the user's home directory and files, ensure " "the stick is large enough to meet the anticipated storage needs of the home " @@ -993,7 +971,7 @@ msgid "" "logged in." msgstr "" -#: ../../sysadmclient.rst:999 +#: ../../sysadmclient.rst:982 msgid "" "When stealth sessions have been configured, PersonaCrypt users will still be" " displayed in the login menu, even if their USB device is not inserted. This" @@ -1001,47 +979,47 @@ msgid "" "session." msgstr "" -#: ../../sysadmclient.rst:1004 +#: ../../sysadmclient.rst:987 msgid "" "In the field with the yellow padlock icon, input the password for the user " "account. In the field with the grey USB stick icon, input the password " "associated with the PersonaCrypt device." msgstr "" -#: ../../sysadmclient.rst:1008 +#: ../../sysadmclient.rst:991 msgid "" "To prevent data corruption and freezing the system **DO NOT** remove the " "PersonaCrypt device while logged in! Always log out of your session before " "physically removing the device." msgstr "" -#: ../../sysadmclient.rst:1016 +#: ../../sysadmclient.rst:1045 msgid "Managing Groups" msgstr "" -#: ../../sysadmclient.rst:1018 +#: ../../sysadmclient.rst:1047 msgid "" "Click the :guilabel:`Groups` tab to view and manage the groups on the " "system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s `, " "shows the group membership for the *operator* and *wheel* groups:" msgstr "" -#: ../../sysadmclient.rst:1029 +#: ../../sysadmclient.rst:1058 msgid "This screen has 2 columns:" msgstr "" -#: ../../sysadmclient.rst:1031 +#: ../../sysadmclient.rst:1060 msgid "" "**Members:** Indicates if the highlighted group contains any user accounts." msgstr "" -#: ../../sysadmclient.rst:1034 +#: ../../sysadmclient.rst:1063 msgid "" "**Available:** Shows all of the system and user accounts on the system in " "alphabetical order." msgstr "" -#: ../../sysadmclient.rst:1037 +#: ../../sysadmclient.rst:1066 msgid "" "To add an account to a group, highlight the group name, then highlight the " "account name in the :guilabel:`Available` column. Click the left arrow and " @@ -1051,7 +1029,7 @@ msgid "" "added to a group." msgstr "" -#: ../../sysadmclient.rst:1044 +#: ../../sysadmclient.rst:1073 msgid "" "If you add a user to the *operator* group, they will have permission to use " "commands requiring administrative access and will be prompted for their own " @@ -1060,15 +1038,15 @@ msgid "" "will be prompted for the superuser password whenever they use the command." msgstr "" -#: ../../sysadmclient.rst:1051 +#: ../../sysadmclient.rst:1080 msgid "To view all of the groups on the system, click :guilabel:`Advanced`." msgstr "" -#: ../../sysadmclient.rst:1057 +#: ../../sysadmclient.rst:1086 msgid "Life Preserver" msgstr "" -#: ../../sysadmclient.rst:1059 +#: ../../sysadmclient.rst:1088 msgid "" "The Life Preserver utility is designed to take full advantage of the " "functionality provided by ZFS snapshots. This utility allows you to schedule" @@ -1077,25 +1055,25 @@ msgid "" "benefits:" msgstr "" -#: ../../sysadmclient.rst:1081 +#: ../../sysadmclient.rst:1110 msgid "" "Replication is an efficient way to keep the files on two systems in sync. " "With Life Preserver, the snapshots taken on the |trueos| system will be " "synchronized with their versions stored on the specified backup server." msgstr "" -#: ../../sysadmclient.rst:1086 +#: ../../sysadmclient.rst:1115 msgid "Snapshots are sent to the backup server over an encrypted connection." msgstr "" -#: ../../sysadmclient.rst:1088 +#: ../../sysadmclient.rst:1117 msgid "" "Having a copy of the snapshots on another system makes it possible to " "perform an operating system restore should the |trueos| system become " "unusable or to deploy an identical system to different hardware." msgstr "" -#: ../../sysadmclient.rst:1092 +#: ../../sysadmclient.rst:1121 msgid "" "To manage snapshots and replication using the |sysadm| graphical client, go " "to :menuselection:`Utilities --> Life Preserver`. The rest of this section " @@ -1103,16 +1081,16 @@ msgid "" "Preserver." msgstr "" -#: ../../sysadmclient.rst:1101 +#: ../../sysadmclient.rst:1130 msgid "Snapshots Tab" msgstr "" -#: ../../sysadmclient.rst:1112 +#: ../../sysadmclient.rst:1141 msgid "" "This screen will display any created snapshots and provides buttons to:" msgstr "" -#: ../../sysadmclient.rst:1114 +#: ../../sysadmclient.rst:1143 msgid "" "**Create:** Used to create a manual snapshot of the specified pool now. For " "example, you could create a snapshot before making changes to an important " @@ -1126,14 +1104,14 @@ msgid "" "snapshot was created." msgstr "" -#: ../../sysadmclient.rst:1125 +#: ../../sysadmclient.rst:1154 msgid "" "**Remove:** Used to delete a highlighted snapshot. **This is a permanent " "change that can not be reversed.** In other words, the versions of files at " "the point in time the snapshot was created will be lost." msgstr "" -#: ../../sysadmclient.rst:1130 +#: ../../sysadmclient.rst:1159 msgid "" "**Revert:** If you highlight a snapshot entry, this button and the drop-down" " menu next to it will activate. You can use the drop-down menu to specify " @@ -1143,11 +1121,11 @@ msgid "" " after the snapshot was taken will be lost." msgstr "" -#: ../../sysadmclient.rst:1142 +#: ../../sysadmclient.rst:1171 msgid "Replication Tab" msgstr "" -#: ../../sysadmclient.rst:1144 +#: ../../sysadmclient.rst:1173 msgid "" "Life Preserver can be configured to replicate snapshots to another system " "over an encrypted SSH connection, though the backup itself is stored in an " @@ -1155,13 +1133,13 @@ msgid "" " another system." msgstr "" -#: ../../sysadmclient.rst:1149 +#: ../../sysadmclient.rst:1178 msgid "" "In order to configure replication, the remote system to hold a copy of the " "snapshots must first meet several requirements:" msgstr "" -#: ../../sysadmclient.rst:1156 +#: ../../sysadmclient.rst:1185 msgid "" "The backup server **must be formatted with the latest version of ZFS,** also" " known as ZFS feature flags or ZFSv5000. Operating systems that support this" @@ -1169,14 +1147,14 @@ msgid "" "FreeNAS 9.1.x or higher." msgstr "" -#: ../../sysadmclient.rst:1162 +#: ../../sysadmclient.rst:1191 msgid "" "The system must have SSH installed and the SSH service must be running. If " "the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is" " already installed, but you will need to start the SSH service." msgstr "" -#: ../../sysadmclient.rst:1167 +#: ../../sysadmclient.rst:1196 msgid "" "If the backup server is running |trueos| or |pcbsd|, you will need to open " "TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is " @@ -1186,7 +1164,7 @@ msgid "" "backup system, make sure it has a rule to allow SSH." msgstr "" -#: ../../sysadmclient.rst:1175 +#: ../../sysadmclient.rst:1204 msgid "" ":numref:`Figure %s ` shows the initial :guilabel:`Replication` " "tab on a system that has not yet been configured for replication. This " @@ -1194,29 +1172,29 @@ msgid "" "schedule." msgstr "" -#: ../../sysadmclient.rst:1186 +#: ../../sysadmclient.rst:1215 msgid "" "To schedule the replication, click :guilabel:`+` to display the \"Setup " "Replication\" screen shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1196 +#: ../../sysadmclient.rst:1225 msgid "Input the following information:" msgstr "" -#: ../../sysadmclient.rst:1198 +#: ../../sysadmclient.rst:1227 msgid "" "**Host IP:** The IP address of the remote system to store the replicated " "snapshots." msgstr "" -#: ../../sysadmclient.rst:1201 +#: ../../sysadmclient.rst:1230 msgid "" "**SSH Port:** The port number, if the remote system is running SSH on a port" " other than the default of 22." msgstr "" -#: ../../sysadmclient.rst:1204 +#: ../../sysadmclient.rst:1233 msgid "" "**Dataset:** The name of the ZFS pool and optional dataset on the remote " "system. For example, \"remotetank\" will save the snapshots to a ZFS pool of" @@ -1224,7 +1202,7 @@ msgid "" "existing dataset named \"mybackups\" on the pool named \"remotetank\"." msgstr "" -#: ../../sysadmclient.rst:1210 +#: ../../sysadmclient.rst:1239 msgid "" "**Frequency:** Use the drop-down menu to select how often to initiate the " "replication. Available choices are :guilabel:`Sync with snapshot` (at the " @@ -1235,87 +1213,87 @@ msgid "" ":guilabel:`Start`) in this screen." msgstr "" -#: ../../sysadmclient.rst:1219 +#: ../../sysadmclient.rst:1248 msgid "" "**Username:** The username must already exist on the remote system, have " "write access to the specified \"Dataset\", and have permission to SSH into " "that system." msgstr "" -#: ../../sysadmclient.rst:1223 +#: ../../sysadmclient.rst:1252 msgid "**Password:** The password associated with the \"Username\"." msgstr "" -#: ../../sysadmclient.rst:1225 +#: ../../sysadmclient.rst:1254 msgid "" "**Local DS:** Use the drop-down menu to select the pool or dataset to " "replicate to the remote system." msgstr "" -#: ../../sysadmclient.rst:1228 +#: ../../sysadmclient.rst:1257 msgid "" "The buttons at the top of the \"Setup Replication\" screen have several " "uses:" msgstr "" -#: ../../sysadmclient.rst:1231 +#: ../../sysadmclient.rst:1260 msgid "" "**+ icon:** Sdd a replication schedule. Multiple schedules are supported, " "meaning you can replicate to multiple systems or replicate different \"Local" " DS\" datasets at different times." msgstr "" -#: ../../sysadmclient.rst:1235 +#: ../../sysadmclient.rst:1264 msgid "" "**- icon:** Remove an already created, and highlighted, replication " "schedule." msgstr "" -#: ../../sysadmclient.rst:1238 +#: ../../sysadmclient.rst:1267 msgid "**gear icon:** Modify the schedule for the highlighted replication." msgstr "" -#: ../../sysadmclient.rst:1240 +#: ../../sysadmclient.rst:1269 msgid "" "**Start:** Manually starts a replication to the system specified in the " "highlighted replication." msgstr "" -#: ../../sysadmclient.rst:1243 +#: ../../sysadmclient.rst:1272 msgid "" "**Initialize:** Deletes the existing replicated snapshots on the remote " "system and starts a new replication. This is useful if a replication gets " "stuck and will not complete." msgstr "" -#: ../../sysadmclient.rst:1251 +#: ../../sysadmclient.rst:1280 msgid "Schedules Tab" msgstr "" -#: ../../sysadmclient.rst:1253 +#: ../../sysadmclient.rst:1282 msgid "" "This tab is used to manage when snapshots of the ZFS pool are created. " "Multiple snapshot schedules are supported if the system has multiple pools." msgstr "" -#: ../../sysadmclient.rst:1257 +#: ../../sysadmclient.rst:1286 msgid "" "Snapshots are created on the entire pool as they are needed when " ":ref:`Restoring the Operating System`." msgstr "" -#: ../../sysadmclient.rst:1260 +#: ../../sysadmclient.rst:1289 msgid "" "To create a snapshot schedule, click the :guilabel:`camera` icon in the " "lower left corner of this tab. This will activate the \"Setup Snapshot " "Schedule\" pane as seen in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1270 +#: ../../sysadmclient.rst:1299 msgid "This pane contains several options:" msgstr "" -#: ../../sysadmclient.rst:1275 +#: ../../sysadmclient.rst:1304 msgid "" "**Snapshots to keep:** Snapshots are automatically pruned after the " "specified number of snapshots to prevent snapshots from eventually using up " @@ -1326,7 +1304,7 @@ msgid "" "manually in the :guilabel:`Snapshots` tab." msgstr "" -#: ../../sysadmclient.rst:1284 +#: ../../sysadmclient.rst:1313 msgid "" "**Frequency:** Use the drop-down menu to select how often snapshots occur. " "Options include \"Daily\" (which will allow you to select the time of day), " @@ -1334,37 +1312,37 @@ msgid "" "Minutes\"." msgstr "" -#: ../../sysadmclient.rst:1289 +#: ../../sysadmclient.rst:1318 msgid "" "Once you have created a snapshot schedule, you can use the \"gear\" icon " "next to the \"camera\" icon to modify the highlighted schedule or the \"X\" " "icon to delete the highlighted schedule." msgstr "" -#: ../../sysadmclient.rst:1300 +#: ../../sysadmclient.rst:1329 msgid "" "To schedule when the scrub occurs, click the third icon from the right which" " will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure " "%s `." msgstr "" -#: ../../sysadmclient.rst:1318 +#: ../../sysadmclient.rst:1347 msgid "" "Once you have created a scrub schedule, you can use the \"gear\" icon next " "to the \"schedule scrub\" icon to modify the highlighted schedule or the " "\"X\" icon to delete the highlighted schedule." msgstr "" -#: ../../sysadmclient.rst:1328 +#: ../../sysadmclient.rst:1357 msgid "" "The :guilabel:`Settings` tab is shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1337 +#: ../../sysadmclient.rst:1366 msgid "Many settings are configurable:" msgstr "" -#: ../../sysadmclient.rst:1339 +#: ../../sysadmclient.rst:1368 msgid "" "**Disk Usage Warning:** Enter a number up to 99 to indicate at which " "percentage of disk space Life Preserver will display an alert in the system " @@ -1372,41 +1350,41 @@ msgid "" "space." msgstr "" -#: ../../sysadmclient.rst:1344 +#: ../../sysadmclient.rst:1373 msgid "" "**Email:** To receive an email when disk usage reaches the percentage " "configured in the \"Disk Usage Warning\", enter an email address." msgstr "" -#: ../../sysadmclient.rst:1347 +#: ../../sysadmclient.rst:1376 msgid "" "**Email Trigger:** This setting can be set to \"All\", \"Warn\", or " "\"Error\" and indicates the type of condition which will trigger an email " "message." msgstr "" -#: ../../sysadmclient.rst:1350 +#: ../../sysadmclient.rst:1379 msgid "**Recursive Management:**" msgstr "" -#: ../../sysadmclient.rst:1352 +#: ../../sysadmclient.rst:1381 msgid "" "If you make any changes in this screen, press :guilabel:`Save Settings` to " "apply them." msgstr "" -#: ../../sysadmclient.rst:1359 +#: ../../sysadmclient.rst:1388 msgid "Using the lpreserver CLI" msgstr "" -#: ../../sysadmclient.rst:1361 +#: ../../sysadmclient.rst:1390 msgid "" "The :command:`lpreserver` command line utility can also be used to manage " "snapshots and replication. This command needs to be run as the superuser. To" " display its usage, type the command without any arguments:" msgstr "" -#: ../../sysadmclient.rst:1381 +#: ../../sysadmclient.rst:1410 msgid "" "Each command has its own help text that describes its parameters and " "provides a usage example. For example, to receive help on how to use the " @@ -1417,104 +1395,104 @@ msgstr "" msgid "Command Line and GUI Equivalents" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**Command Line**" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**GUI**" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**Description**" msgstr "" -#: ../../sysadmclient.rst:1452 +#: ../../sysadmclient.rst:1481 msgid "**cronsnap**" msgstr "" -#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499 msgid "\"Snapshots\" tab" msgstr "" -#: ../../sysadmclient.rst:1452 +#: ../../sysadmclient.rst:1481 msgid "" "schedule when snapshots occur and how long to keep them; the **stop** option" " can be used to disable snapshot creation" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "**cronscrub**" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "\"Schedules\" tab" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "schedule a ZFS scrub" msgstr "" -#: ../../sysadmclient.rst:1459 +#: ../../sysadmclient.rst:1488 msgid "**get**" msgstr "" -#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495 msgid "\"Settings\" tab" msgstr "" -#: ../../sysadmclient.rst:1459 +#: ../../sysadmclient.rst:1488 msgid "list Life Preserver options" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "**replicate**" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "\"Replication\" tab" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "" "used to list, add, and remove backup server; read the **help** for this " "command for examples" msgstr "" -#: ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1495 msgid "**set**" msgstr "" -#: ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1495 msgid "" "configures Life Preserver options; read **help** for the list of " "configurable options" msgstr "" -#: ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1499 msgid "**snapshot**" msgstr "" -#: ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1499 msgid "" "create and replicate a new ZFS snapshot; by default, snapshots are " "recursive, meaning that a that a snapshot is taken of every dataset within a" " pool" msgstr "" -#: ../../sysadmclient.rst:1476 +#: ../../sysadmclient.rst:1505 msgid "**status**" msgstr "" -#: ../../sysadmclient.rst:1476 +#: ../../sysadmclient.rst:1505 msgid "lists the last snapshot name and replication status" msgstr "" -#: ../../sysadmclient.rst:1483 +#: ../../sysadmclient.rst:1512 msgid "Restoring the Operating System" msgstr "" -#: ../../sysadmclient.rst:1485 +#: ../../sysadmclient.rst:1514 msgid "" "If you have replicated the system's snapshots to a remote backup server, you" " can use a |trueos| installation media to perform an operating system " @@ -1522,7 +1500,7 @@ msgid "" "you get to the screen shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1497 +#: ../../sysadmclient.rst:1526 msgid "" "Before you can perform a restore, the network interface must be configured. " "Click :guilabel:`Network Connectivity` (second icon from the left) in order " @@ -1533,7 +1511,7 @@ msgid "" "continuing." msgstr "" -#: ../../sysadmclient.rst:1505 +#: ../../sysadmclient.rst:1534 msgid "" "Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and" " :guilabel:`Next`. This will start the Restore Wizard. In the screen shown " @@ -1543,7 +1521,7 @@ msgid "" "number." msgstr "" -#: ../../sysadmclient.rst:1519 +#: ../../sysadmclient.rst:1548 msgid "" "Click :guilabel:`Next` and the wizard will provide a summary of your " "selections. If correct, click :guilabel:`Finish`; otherwise, click " @@ -1626,7 +1604,7 @@ msgid "" "press :guilabel:`Close Ports`." msgstr "" -#: ../../sysadmclient.rst:1152 +#: ../../sysadmclient.rst:1181 msgid "" "Snapshots occurring too frequently can introduce errors in replication. To " "avoid errors, ensure snapshots are configured to take place slower than the " @@ -1685,7 +1663,7 @@ msgid "" "accounts." msgstr "" -#: ../../sysadmclient.rst:1065 +#: ../../sysadmclient.rst:1094 msgid "" "A snapshot provides a \"point-in-time\" image of the ZFS pool. This is " "similar to a full system backup as the snapshot contains the information for" @@ -1703,26 +1681,26 @@ msgid "" "snapshot." msgstr "" -#: ../../sysadmclient.rst:1272 +#: ../../sysadmclient.rst:1301 msgid "" "**Storage Pool:** Select the ZFS storage pool that contains the datasets " "that you wish to snapshot." msgstr "" -#: ../../sysadmclient.rst:1293 +#: ../../sysadmclient.rst:1322 msgid "" "This screen can also be used to manage the ZFS scrub schedule. Scrubs are " "recommended as they can provide an early indication of a potential disk " "failure. Scrubs can be scheduled on a per-pool basis." msgstr "" -#: ../../sysadmclient.rst:1297 +#: ../../sysadmclient.rst:1326 msgid "" "If you have multiple pools, be sure to create a scrub schedule for each " "pool." msgstr "" -#: ../../sysadmclient.rst:1310 +#: ../../sysadmclient.rst:1339 msgid "" "Select the pool from the :guilabel:`Storage Pool` drop-down menu, then " "select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", " @@ -1807,26 +1785,17 @@ msgstr "" msgid ": Viewing All Accounts and Their Details" msgstr "" -#: ../../sysadmclient.rst:930 +#: ../../sysadmclient.rst:938 msgid ": Initialize PersonaCrypt Device" msgstr "" -#: ../../sysadmclient.rst:932 -msgid "" -"Before a user is configured to use PersonaCrypt on a |trueos| system, two " -"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". " -"Note this section is hidden if the currently logged in user is selected. " -"Also, if you have just created a user and do not see these options, click " -":guilabel:`Save` then re-highlight the user to display these options:" -msgstr "" - -#: ../../sysadmclient.rst:947 +#: ../../sysadmclient.rst:955 msgid "" "To prepare a PersonaCrypt device for this user, insert a USB stick and click" " :guilabel:`Initialize Device`." msgstr "" -#: ../../sysadmclient.rst:957 +#: ../../sysadmclient.rst:965 msgid "" "Type a password to associate with the device. Click :guilabel:`Save` to " "initialize the device. The User Manager may take a moment to prepare the " @@ -1834,49 +1803,49 @@ msgid "" " to allow removal of PersonaCrypt." msgstr "" -#: ../../sysadmclient.rst:1027 +#: ../../sysadmclient.rst:1056 msgid ": Managing Groups Using User Manager" msgstr "" -#: ../../sysadmclient.rst:1110 +#: ../../sysadmclient.rst:1139 msgid ": Snapshot Tab" msgstr "" -#: ../../sysadmclient.rst:1184 +#: ../../sysadmclient.rst:1213 msgid ": Replication Tab" msgstr "" -#: ../../sysadmclient.rst:1194 +#: ../../sysadmclient.rst:1223 msgid ": Scheduling a Replication" msgstr "" -#: ../../sysadmclient.rst:1268 +#: ../../sysadmclient.rst:1297 msgid ": Scheduling a Snapshot" msgstr "" -#: ../../sysadmclient.rst:1308 +#: ../../sysadmclient.rst:1337 msgid ": Scheduling a Scrub" msgstr "" -#: ../../sysadmclient.rst:1335 +#: ../../sysadmclient.rst:1364 msgid ": Life Preserver Settings" msgstr "" -#: ../../sysadmclient.rst:1442 +#: ../../sysadmclient.rst:1471 msgid "" ":numref:`Table %s ` shows the command line equivalents to the " "graphical options provided by the Life Preserver GUI." msgstr "" -#: ../../sysadmclient.rst:1495 +#: ../../sysadmclient.rst:1524 msgid ": Selecting to Restore/Clone From Backup" msgstr "" -#: ../../sysadmclient.rst:1517 +#: ../../sysadmclient.rst:1546 msgid ": Input the Information for a SSH Restore" msgstr "" -#: ../../sysadmclient.rst:1523 +#: ../../sysadmclient.rst:1552 msgid "" "Once the connection to the backup server succeeds, you will be able to " "select which host to restore. After making your selection, click " @@ -1892,7 +1861,7 @@ msgid "" ":guilabel:`Next` to perform the restore." msgstr "" -#: ../../sysadmclient.rst:987 +#: ../../sysadmclient.rst:970 msgid "" "Once a user has been initialized for PersonaCrypt on the system, their user " "account will no longer be displayed when logging in, **unless** their " @@ -1901,7 +1870,7 @@ msgid "" ":numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:997 +#: ../../sysadmclient.rst:980 msgid ": |trueos| Login Screen with PersonaCrypt" msgstr "" @@ -1949,7 +1918,7 @@ msgstr "" msgid ": |sysadm| Task Manager" msgstr "" -#: ../../sysadmclient.rst:1103 +#: ../../sysadmclient.rst:1132 msgid "" ":numref:`Figure %s ` shows the :guilabel:`Snapshots` tab on a " "system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"." @@ -2013,6 +1982,134 @@ msgid "" ":guilabel:`Save Settings`." msgstr "" +#: ../../sysadmclient.rst:894 +msgid "" +"|trueos| provides support for a security feature known as PersonaCrypt. A " +"PersonaCrypt device is a removable USB media, such as a USB flash drive, " +"formatted with ZFS and encrypted with either GELI or PEFS. This device is " +"used to hold a specific user's home directory, meaning they can securely " +"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 " +"or higher system. For example, this can be used to securely access one's " +"home directory from a laptop, home computer, and work computer. The device " +"is protected by an encryption key and a different (recommended) password " +"separate from the user's login password." +msgstr "" + +#: ../../sysadmclient.rst:916 +msgid "GELI" +msgstr "" + +#: ../../sysadmclient.rst:918 +msgid "" +"PersonaCrypt uses GELI's ability to split the key into two parts: one being " +"your passphrase, and the other being a key stored on disk. Without both of " +"these parts, the media cannot be decrypted. This means if somebody steals " +"the key and manages to get your password, it is still worthless without the " +"system it was paired with. GELI is used by default in |trueos| as it is more" +" fully featured over PEFS." +msgstr "" + +#: ../../sysadmclient.rst:940 +msgid "" +"Before a user is configured to use PersonaCrypt on a |trueos| system, two " +"buttons are available in the :guilabel:`PersonaCrypt` tab of " +":guilabel:`Advanced Mode`. Note this section is hidden if the currently " +"logged in user is selected. Also, if you have just created a user and do not" +" see these options, click :guilabel:`Save`, then re-highlight the user to " +"display these options:" +msgstr "" + +#: ../../sysadmclient.rst:999 +msgid "PEFS" +msgstr "" + +#: ../../sysadmclient.rst:1001 +msgid "" +"`PEFS `_ stands for Private Encrypted File System. It is " +"open source software freely available under the BSD license, and is included" +" in |trueos| by default. PEFS runs on top of any existing file system, " +"providing an encryption layer independent of the underlying file system. " +"PersonaCrypt can be configured to use PEFS in place of GELI, which " +"eliminates the need for external media, as the encrypted PEFS database is " +"stored on the local disk." +msgstr "" + +#: ../../sysadmclient.rst:1009 +msgid "" +"While PEFS does not use a USB drive, be sure to print or otherwise backup " +"the PEFS generated key fragment stored on the disk." +msgstr "" + +#: ../../sysadmclient.rst:1012 +msgid "**Initialize PEFS with the Command Line**" +msgstr "" + +#: ../../sysadmclient.rst:1014 +msgid "" +"Because PEFS does not use a USB drive with its encryption, the user will " +"need a password file (pfile) containing the desired password, **before** " +"initializing PEFS for a user account. Once this pfile is created, enabling " +"PEFS through PersonaCrypt is accomplished in a CLI with " +":command:`personacrypt init PEFS`." +msgstr "" + +#: ../../sysadmclient.rst:1020 +msgid "" +"For example, the user account **test** has a pfile named " +":file:`testpfile.txt`, which contains the single text string of **test's** " +"chosen password. Next, the administrator adds PEFS encryption to the " +"**test** acount by opening a CLI, logging in as root, and typing:" +msgstr "" + +#: ../../sysadmclient.rst:1029 +msgid "" +"PersonaCrypt will initialize the account **test** with PEFS, using the " +"string in :file:`testpfile.txt` as the new password." +msgstr "" + +#: ../../sysadmclient.rst:1032 +msgid "" +"The |sysadm| User Manager can also initialize a user account with PEFS by " +"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` " +"drop down menu of the :guilabel:`PersonaCrypt` tab." +msgstr "" + +#: ../../sysadmclient.rst:1036 +msgid "" +"In addition to initializing an account with PEFS, PersonaCrypt also supports" +" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt " +"export ` and :command:`personacrypt import `, " +"respectively." +msgstr "" + +#~ msgid "" +#~ "|trueos| provides support for a security feature known as PersonaCrypt. A " +#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted" +#~ " with ZFS and encrypted with GELI. This device is used to hold a specific " +#~ "user's home directory, meaning they can securely transport and access their " +#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For " +#~ "example, this can be used to securely access one's home directory from a " +#~ "laptop, home computer, and work computer. The device is protected by an " +#~ "encryption key and a password which is, and should be, separate from the " +#~ "user's login password." +#~ msgstr "" + +#~ msgid "" +#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being " +#~ "your passphrase, and the other being a key stored on disk. Without both of " +#~ "these parts, the media cannot be decrypted. This means if somebody steals " +#~ "the key and manages to get your password, it is still worthless without the " +#~ "system it was paired with." +#~ msgstr "" + +#~ msgid "" +#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two " +#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". " +#~ "Note this section is hidden if the currently logged in user is selected. " +#~ "Also, if you have just created a user and do not see these options, click " +#~ ":guilabel:`Save` then re-highlight the user to display these options:" +#~ msgstr "" + #~ msgid "" #~ "**Max Boot Environments:** |trueos| automatically creates a boot environment" #~ " before updating any software, the operating system, or applying a system " diff --git a/docs/client_handbook/po/it/LC_MESSAGES/sysadmclient.po b/docs/client_handbook/po/it/LC_MESSAGES/sysadmclient.po index 25c5ac5..e4a2632 100644 --- a/docs/client_handbook/po/it/LC_MESSAGES/sysadmclient.po +++ b/docs/client_handbook/po/it/LC_MESSAGES/sysadmclient.po @@ -482,7 +482,7 @@ msgid "" "The :guilabel:`Settings` tab is shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1326 +#: ../../sysadmclient.rst:1355 msgid "Settings Tab" msgstr "" @@ -924,20 +924,7 @@ msgstr "" msgid "PersonaCrypt" msgstr "" -#: ../../sysadmclient.rst:894 -msgid "" -"|trueos| provides support for a security feature known as PersonaCrypt. A " -"PersonaCrypt device is a removable USB media, such as a USB stick, formatted" -" with ZFS and encrypted with GELI. This device is used to hold a specific " -"user's home directory, meaning they can securely transport and access their " -"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For " -"example, this can be used to securely access one's home directory from a " -"laptop, home computer, and work computer. The device is protected by an " -"encryption key and a password which is, and should be, separate from the " -"user's login password." -msgstr "" - -#: ../../sysadmclient.rst:904 +#: ../../sysadmclient.rst:905 msgid "" "When a user is configured to use a PersonaCrypt device, that user can not " "login using an unencrypted session on the same system. In other words, the " @@ -946,22 +933,13 @@ msgid "" "different user accounts, one for each type of session." msgstr "" -#: ../../sysadmclient.rst:911 -msgid "" -"PersonaCrypt uses GELI's ability to split the key into two parts: one being " -"your passphrase, and the other being a key stored on disk. Without both of " -"these parts, the media cannot be decrypted. This means if somebody steals " -"the key and manages to get your password, it is still worthless without the " -"system it was paired with." -msgstr "" - -#: ../../sysadmclient.rst:917 +#: ../../sysadmclient.rst:925 msgid "" "USB devices do eventually fail. Always backup any important files stored on " "the PersonaCrypt device to another device or system." msgstr "" -#: ../../sysadmclient.rst:920 +#: ../../sysadmclient.rst:928 msgid "" "The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt " "device for any login user, **except** for the currently logged in user. In " @@ -969,13 +947,13 @@ msgid "" "*dlavigne*, has been created and the entry for the user has been clicked." msgstr "" -#: ../../sysadmclient.rst:939 +#: ../../sysadmclient.rst:947 msgid "" "**Initialize Device:** Used to prepare the USB device which will be used as " "the user's home directory." msgstr "" -#: ../../sysadmclient.rst:942 +#: ../../sysadmclient.rst:950 msgid "" "**Import Key:** If the user has already created a PersonaCrypt device on " "another |trueos| system, click this button to import a previously saved copy" @@ -983,7 +961,7 @@ msgid "" "can now login to this computer using PersonaCrypt." msgstr "" -#: ../../sysadmclient.rst:950 +#: ../../sysadmclient.rst:958 msgid "" "Since the USB stick will hold the user's home directory and files, ensure " "the stick is large enough to meet the anticipated storage needs of the home " @@ -993,7 +971,7 @@ msgid "" "logged in." msgstr "" -#: ../../sysadmclient.rst:999 +#: ../../sysadmclient.rst:982 msgid "" "When stealth sessions have been configured, PersonaCrypt users will still be" " displayed in the login menu, even if their USB device is not inserted. This" @@ -1001,47 +979,47 @@ msgid "" "session." msgstr "" -#: ../../sysadmclient.rst:1004 +#: ../../sysadmclient.rst:987 msgid "" "In the field with the yellow padlock icon, input the password for the user " "account. In the field with the grey USB stick icon, input the password " "associated with the PersonaCrypt device." msgstr "" -#: ../../sysadmclient.rst:1008 +#: ../../sysadmclient.rst:991 msgid "" "To prevent data corruption and freezing the system **DO NOT** remove the " "PersonaCrypt device while logged in! Always log out of your session before " "physically removing the device." msgstr "" -#: ../../sysadmclient.rst:1016 +#: ../../sysadmclient.rst:1045 msgid "Managing Groups" msgstr "" -#: ../../sysadmclient.rst:1018 +#: ../../sysadmclient.rst:1047 msgid "" "Click the :guilabel:`Groups` tab to view and manage the groups on the " "system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s `, " "shows the group membership for the *operator* and *wheel* groups:" msgstr "" -#: ../../sysadmclient.rst:1029 +#: ../../sysadmclient.rst:1058 msgid "This screen has 2 columns:" msgstr "" -#: ../../sysadmclient.rst:1031 +#: ../../sysadmclient.rst:1060 msgid "" "**Members:** Indicates if the highlighted group contains any user accounts." msgstr "" -#: ../../sysadmclient.rst:1034 +#: ../../sysadmclient.rst:1063 msgid "" "**Available:** Shows all of the system and user accounts on the system in " "alphabetical order." msgstr "" -#: ../../sysadmclient.rst:1037 +#: ../../sysadmclient.rst:1066 msgid "" "To add an account to a group, highlight the group name, then highlight the " "account name in the :guilabel:`Available` column. Click the left arrow and " @@ -1051,7 +1029,7 @@ msgid "" "added to a group." msgstr "" -#: ../../sysadmclient.rst:1044 +#: ../../sysadmclient.rst:1073 msgid "" "If you add a user to the *operator* group, they will have permission to use " "commands requiring administrative access and will be prompted for their own " @@ -1060,15 +1038,15 @@ msgid "" "will be prompted for the superuser password whenever they use the command." msgstr "" -#: ../../sysadmclient.rst:1051 +#: ../../sysadmclient.rst:1080 msgid "To view all of the groups on the system, click :guilabel:`Advanced`." msgstr "" -#: ../../sysadmclient.rst:1057 +#: ../../sysadmclient.rst:1086 msgid "Life Preserver" msgstr "" -#: ../../sysadmclient.rst:1059 +#: ../../sysadmclient.rst:1088 msgid "" "The Life Preserver utility is designed to take full advantage of the " "functionality provided by ZFS snapshots. This utility allows you to schedule" @@ -1077,25 +1055,25 @@ msgid "" "benefits:" msgstr "" -#: ../../sysadmclient.rst:1081 +#: ../../sysadmclient.rst:1110 msgid "" "Replication is an efficient way to keep the files on two systems in sync. " "With Life Preserver, the snapshots taken on the |trueos| system will be " "synchronized with their versions stored on the specified backup server." msgstr "" -#: ../../sysadmclient.rst:1086 +#: ../../sysadmclient.rst:1115 msgid "Snapshots are sent to the backup server over an encrypted connection." msgstr "" -#: ../../sysadmclient.rst:1088 +#: ../../sysadmclient.rst:1117 msgid "" "Having a copy of the snapshots on another system makes it possible to " "perform an operating system restore should the |trueos| system become " "unusable or to deploy an identical system to different hardware." msgstr "" -#: ../../sysadmclient.rst:1092 +#: ../../sysadmclient.rst:1121 msgid "" "To manage snapshots and replication using the |sysadm| graphical client, go " "to :menuselection:`Utilities --> Life Preserver`. The rest of this section " @@ -1103,16 +1081,16 @@ msgid "" "Preserver." msgstr "" -#: ../../sysadmclient.rst:1101 +#: ../../sysadmclient.rst:1130 msgid "Snapshots Tab" msgstr "" -#: ../../sysadmclient.rst:1112 +#: ../../sysadmclient.rst:1141 msgid "" "This screen will display any created snapshots and provides buttons to:" msgstr "" -#: ../../sysadmclient.rst:1114 +#: ../../sysadmclient.rst:1143 msgid "" "**Create:** Used to create a manual snapshot of the specified pool now. For " "example, you could create a snapshot before making changes to an important " @@ -1126,14 +1104,14 @@ msgid "" "snapshot was created." msgstr "" -#: ../../sysadmclient.rst:1125 +#: ../../sysadmclient.rst:1154 msgid "" "**Remove:** Used to delete a highlighted snapshot. **This is a permanent " "change that can not be reversed.** In other words, the versions of files at " "the point in time the snapshot was created will be lost." msgstr "" -#: ../../sysadmclient.rst:1130 +#: ../../sysadmclient.rst:1159 msgid "" "**Revert:** If you highlight a snapshot entry, this button and the drop-down" " menu next to it will activate. You can use the drop-down menu to specify " @@ -1143,11 +1121,11 @@ msgid "" " after the snapshot was taken will be lost." msgstr "" -#: ../../sysadmclient.rst:1142 +#: ../../sysadmclient.rst:1171 msgid "Replication Tab" msgstr "" -#: ../../sysadmclient.rst:1144 +#: ../../sysadmclient.rst:1173 msgid "" "Life Preserver can be configured to replicate snapshots to another system " "over an encrypted SSH connection, though the backup itself is stored in an " @@ -1155,13 +1133,13 @@ msgid "" " another system." msgstr "" -#: ../../sysadmclient.rst:1149 +#: ../../sysadmclient.rst:1178 msgid "" "In order to configure replication, the remote system to hold a copy of the " "snapshots must first meet several requirements:" msgstr "" -#: ../../sysadmclient.rst:1156 +#: ../../sysadmclient.rst:1185 msgid "" "The backup server **must be formatted with the latest version of ZFS,** also" " known as ZFS feature flags or ZFSv5000. Operating systems that support this" @@ -1169,14 +1147,14 @@ msgid "" "FreeNAS 9.1.x or higher." msgstr "" -#: ../../sysadmclient.rst:1162 +#: ../../sysadmclient.rst:1191 msgid "" "The system must have SSH installed and the SSH service must be running. If " "the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is" " already installed, but you will need to start the SSH service." msgstr "" -#: ../../sysadmclient.rst:1167 +#: ../../sysadmclient.rst:1196 msgid "" "If the backup server is running |trueos| or |pcbsd|, you will need to open " "TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is " @@ -1186,7 +1164,7 @@ msgid "" "backup system, make sure it has a rule to allow SSH." msgstr "" -#: ../../sysadmclient.rst:1175 +#: ../../sysadmclient.rst:1204 msgid "" ":numref:`Figure %s ` shows the initial :guilabel:`Replication` " "tab on a system that has not yet been configured for replication. This " @@ -1194,29 +1172,29 @@ msgid "" "schedule." msgstr "" -#: ../../sysadmclient.rst:1186 +#: ../../sysadmclient.rst:1215 msgid "" "To schedule the replication, click :guilabel:`+` to display the \"Setup " "Replication\" screen shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1196 +#: ../../sysadmclient.rst:1225 msgid "Input the following information:" msgstr "" -#: ../../sysadmclient.rst:1198 +#: ../../sysadmclient.rst:1227 msgid "" "**Host IP:** The IP address of the remote system to store the replicated " "snapshots." msgstr "" -#: ../../sysadmclient.rst:1201 +#: ../../sysadmclient.rst:1230 msgid "" "**SSH Port:** The port number, if the remote system is running SSH on a port" " other than the default of 22." msgstr "" -#: ../../sysadmclient.rst:1204 +#: ../../sysadmclient.rst:1233 msgid "" "**Dataset:** The name of the ZFS pool and optional dataset on the remote " "system. For example, \"remotetank\" will save the snapshots to a ZFS pool of" @@ -1224,7 +1202,7 @@ msgid "" "existing dataset named \"mybackups\" on the pool named \"remotetank\"." msgstr "" -#: ../../sysadmclient.rst:1210 +#: ../../sysadmclient.rst:1239 msgid "" "**Frequency:** Use the drop-down menu to select how often to initiate the " "replication. Available choices are :guilabel:`Sync with snapshot` (at the " @@ -1235,87 +1213,87 @@ msgid "" ":guilabel:`Start`) in this screen." msgstr "" -#: ../../sysadmclient.rst:1219 +#: ../../sysadmclient.rst:1248 msgid "" "**Username:** The username must already exist on the remote system, have " "write access to the specified \"Dataset\", and have permission to SSH into " "that system." msgstr "" -#: ../../sysadmclient.rst:1223 +#: ../../sysadmclient.rst:1252 msgid "**Password:** The password associated with the \"Username\"." msgstr "" -#: ../../sysadmclient.rst:1225 +#: ../../sysadmclient.rst:1254 msgid "" "**Local DS:** Use the drop-down menu to select the pool or dataset to " "replicate to the remote system." msgstr "" -#: ../../sysadmclient.rst:1228 +#: ../../sysadmclient.rst:1257 msgid "" "The buttons at the top of the \"Setup Replication\" screen have several " "uses:" msgstr "" -#: ../../sysadmclient.rst:1231 +#: ../../sysadmclient.rst:1260 msgid "" "**+ icon:** Sdd a replication schedule. Multiple schedules are supported, " "meaning you can replicate to multiple systems or replicate different \"Local" " DS\" datasets at different times." msgstr "" -#: ../../sysadmclient.rst:1235 +#: ../../sysadmclient.rst:1264 msgid "" "**- icon:** Remove an already created, and highlighted, replication " "schedule." msgstr "" -#: ../../sysadmclient.rst:1238 +#: ../../sysadmclient.rst:1267 msgid "**gear icon:** Modify the schedule for the highlighted replication." msgstr "" -#: ../../sysadmclient.rst:1240 +#: ../../sysadmclient.rst:1269 msgid "" "**Start:** Manually starts a replication to the system specified in the " "highlighted replication." msgstr "" -#: ../../sysadmclient.rst:1243 +#: ../../sysadmclient.rst:1272 msgid "" "**Initialize:** Deletes the existing replicated snapshots on the remote " "system and starts a new replication. This is useful if a replication gets " "stuck and will not complete." msgstr "" -#: ../../sysadmclient.rst:1251 +#: ../../sysadmclient.rst:1280 msgid "Schedules Tab" msgstr "" -#: ../../sysadmclient.rst:1253 +#: ../../sysadmclient.rst:1282 msgid "" "This tab is used to manage when snapshots of the ZFS pool are created. " "Multiple snapshot schedules are supported if the system has multiple pools." msgstr "" -#: ../../sysadmclient.rst:1257 +#: ../../sysadmclient.rst:1286 msgid "" "Snapshots are created on the entire pool as they are needed when " ":ref:`Restoring the Operating System`." msgstr "" -#: ../../sysadmclient.rst:1260 +#: ../../sysadmclient.rst:1289 msgid "" "To create a snapshot schedule, click the :guilabel:`camera` icon in the " "lower left corner of this tab. This will activate the \"Setup Snapshot " "Schedule\" pane as seen in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1270 +#: ../../sysadmclient.rst:1299 msgid "This pane contains several options:" msgstr "" -#: ../../sysadmclient.rst:1275 +#: ../../sysadmclient.rst:1304 msgid "" "**Snapshots to keep:** Snapshots are automatically pruned after the " "specified number of snapshots to prevent snapshots from eventually using up " @@ -1326,7 +1304,7 @@ msgid "" "manually in the :guilabel:`Snapshots` tab." msgstr "" -#: ../../sysadmclient.rst:1284 +#: ../../sysadmclient.rst:1313 msgid "" "**Frequency:** Use the drop-down menu to select how often snapshots occur. " "Options include \"Daily\" (which will allow you to select the time of day), " @@ -1334,37 +1312,37 @@ msgid "" "Minutes\"." msgstr "" -#: ../../sysadmclient.rst:1289 +#: ../../sysadmclient.rst:1318 msgid "" "Once you have created a snapshot schedule, you can use the \"gear\" icon " "next to the \"camera\" icon to modify the highlighted schedule or the \"X\" " "icon to delete the highlighted schedule." msgstr "" -#: ../../sysadmclient.rst:1300 +#: ../../sysadmclient.rst:1329 msgid "" "To schedule when the scrub occurs, click the third icon from the right which" " will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure " "%s `." msgstr "" -#: ../../sysadmclient.rst:1318 +#: ../../sysadmclient.rst:1347 msgid "" "Once you have created a scrub schedule, you can use the \"gear\" icon next " "to the \"schedule scrub\" icon to modify the highlighted schedule or the " "\"X\" icon to delete the highlighted schedule." msgstr "" -#: ../../sysadmclient.rst:1328 +#: ../../sysadmclient.rst:1357 msgid "" "The :guilabel:`Settings` tab is shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1337 +#: ../../sysadmclient.rst:1366 msgid "Many settings are configurable:" msgstr "" -#: ../../sysadmclient.rst:1339 +#: ../../sysadmclient.rst:1368 msgid "" "**Disk Usage Warning:** Enter a number up to 99 to indicate at which " "percentage of disk space Life Preserver will display an alert in the system " @@ -1372,41 +1350,41 @@ msgid "" "space." msgstr "" -#: ../../sysadmclient.rst:1344 +#: ../../sysadmclient.rst:1373 msgid "" "**Email:** To receive an email when disk usage reaches the percentage " "configured in the \"Disk Usage Warning\", enter an email address." msgstr "" -#: ../../sysadmclient.rst:1347 +#: ../../sysadmclient.rst:1376 msgid "" "**Email Trigger:** This setting can be set to \"All\", \"Warn\", or " "\"Error\" and indicates the type of condition which will trigger an email " "message." msgstr "" -#: ../../sysadmclient.rst:1350 +#: ../../sysadmclient.rst:1379 msgid "**Recursive Management:**" msgstr "" -#: ../../sysadmclient.rst:1352 +#: ../../sysadmclient.rst:1381 msgid "" "If you make any changes in this screen, press :guilabel:`Save Settings` to " "apply them." msgstr "" -#: ../../sysadmclient.rst:1359 +#: ../../sysadmclient.rst:1388 msgid "Using the lpreserver CLI" msgstr "" -#: ../../sysadmclient.rst:1361 +#: ../../sysadmclient.rst:1390 msgid "" "The :command:`lpreserver` command line utility can also be used to manage " "snapshots and replication. This command needs to be run as the superuser. To" " display its usage, type the command without any arguments:" msgstr "" -#: ../../sysadmclient.rst:1381 +#: ../../sysadmclient.rst:1410 msgid "" "Each command has its own help text that describes its parameters and " "provides a usage example. For example, to receive help on how to use the " @@ -1417,104 +1395,104 @@ msgstr "" msgid "Command Line and GUI Equivalents" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**Command Line**" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**GUI**" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**Description**" msgstr "" -#: ../../sysadmclient.rst:1452 +#: ../../sysadmclient.rst:1481 msgid "**cronsnap**" msgstr "" -#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499 msgid "\"Snapshots\" tab" msgstr "" -#: ../../sysadmclient.rst:1452 +#: ../../sysadmclient.rst:1481 msgid "" "schedule when snapshots occur and how long to keep them; the **stop** option" " can be used to disable snapshot creation" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "**cronscrub**" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "\"Schedules\" tab" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "schedule a ZFS scrub" msgstr "" -#: ../../sysadmclient.rst:1459 +#: ../../sysadmclient.rst:1488 msgid "**get**" msgstr "" -#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495 msgid "\"Settings\" tab" msgstr "" -#: ../../sysadmclient.rst:1459 +#: ../../sysadmclient.rst:1488 msgid "list Life Preserver options" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "**replicate**" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "\"Replication\" tab" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "" "used to list, add, and remove backup server; read the **help** for this " "command for examples" msgstr "" -#: ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1495 msgid "**set**" msgstr "" -#: ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1495 msgid "" "configures Life Preserver options; read **help** for the list of " "configurable options" msgstr "" -#: ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1499 msgid "**snapshot**" msgstr "" -#: ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1499 msgid "" "create and replicate a new ZFS snapshot; by default, snapshots are " "recursive, meaning that a that a snapshot is taken of every dataset within a" " pool" msgstr "" -#: ../../sysadmclient.rst:1476 +#: ../../sysadmclient.rst:1505 msgid "**status**" msgstr "" -#: ../../sysadmclient.rst:1476 +#: ../../sysadmclient.rst:1505 msgid "lists the last snapshot name and replication status" msgstr "" -#: ../../sysadmclient.rst:1483 +#: ../../sysadmclient.rst:1512 msgid "Restoring the Operating System" msgstr "" -#: ../../sysadmclient.rst:1485 +#: ../../sysadmclient.rst:1514 msgid "" "If you have replicated the system's snapshots to a remote backup server, you" " can use a |trueos| installation media to perform an operating system " @@ -1522,7 +1500,7 @@ msgid "" "you get to the screen shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1497 +#: ../../sysadmclient.rst:1526 msgid "" "Before you can perform a restore, the network interface must be configured. " "Click :guilabel:`Network Connectivity` (second icon from the left) in order " @@ -1533,7 +1511,7 @@ msgid "" "continuing." msgstr "" -#: ../../sysadmclient.rst:1505 +#: ../../sysadmclient.rst:1534 msgid "" "Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and" " :guilabel:`Next`. This will start the Restore Wizard. In the screen shown " @@ -1543,7 +1521,7 @@ msgid "" "number." msgstr "" -#: ../../sysadmclient.rst:1519 +#: ../../sysadmclient.rst:1548 msgid "" "Click :guilabel:`Next` and the wizard will provide a summary of your " "selections. If correct, click :guilabel:`Finish`; otherwise, click " @@ -1626,7 +1604,7 @@ msgid "" "press :guilabel:`Close Ports`." msgstr "" -#: ../../sysadmclient.rst:1152 +#: ../../sysadmclient.rst:1181 msgid "" "Snapshots occurring too frequently can introduce errors in replication. To " "avoid errors, ensure snapshots are configured to take place slower than the " @@ -1685,7 +1663,7 @@ msgid "" "accounts." msgstr "" -#: ../../sysadmclient.rst:1065 +#: ../../sysadmclient.rst:1094 msgid "" "A snapshot provides a \"point-in-time\" image of the ZFS pool. This is " "similar to a full system backup as the snapshot contains the information for" @@ -1703,26 +1681,26 @@ msgid "" "snapshot." msgstr "" -#: ../../sysadmclient.rst:1272 +#: ../../sysadmclient.rst:1301 msgid "" "**Storage Pool:** Select the ZFS storage pool that contains the datasets " "that you wish to snapshot." msgstr "" -#: ../../sysadmclient.rst:1293 +#: ../../sysadmclient.rst:1322 msgid "" "This screen can also be used to manage the ZFS scrub schedule. Scrubs are " "recommended as they can provide an early indication of a potential disk " "failure. Scrubs can be scheduled on a per-pool basis." msgstr "" -#: ../../sysadmclient.rst:1297 +#: ../../sysadmclient.rst:1326 msgid "" "If you have multiple pools, be sure to create a scrub schedule for each " "pool." msgstr "" -#: ../../sysadmclient.rst:1310 +#: ../../sysadmclient.rst:1339 msgid "" "Select the pool from the :guilabel:`Storage Pool` drop-down menu, then " "select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", " @@ -1807,26 +1785,17 @@ msgstr "" msgid ": Viewing All Accounts and Their Details" msgstr "" -#: ../../sysadmclient.rst:930 +#: ../../sysadmclient.rst:938 msgid ": Initialize PersonaCrypt Device" msgstr "" -#: ../../sysadmclient.rst:932 -msgid "" -"Before a user is configured to use PersonaCrypt on a |trueos| system, two " -"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". " -"Note this section is hidden if the currently logged in user is selected. " -"Also, if you have just created a user and do not see these options, click " -":guilabel:`Save` then re-highlight the user to display these options:" -msgstr "" - -#: ../../sysadmclient.rst:947 +#: ../../sysadmclient.rst:955 msgid "" "To prepare a PersonaCrypt device for this user, insert a USB stick and click" " :guilabel:`Initialize Device`." msgstr "" -#: ../../sysadmclient.rst:957 +#: ../../sysadmclient.rst:965 msgid "" "Type a password to associate with the device. Click :guilabel:`Save` to " "initialize the device. The User Manager may take a moment to prepare the " @@ -1834,49 +1803,49 @@ msgid "" " to allow removal of PersonaCrypt." msgstr "" -#: ../../sysadmclient.rst:1027 +#: ../../sysadmclient.rst:1056 msgid ": Managing Groups Using User Manager" msgstr "" -#: ../../sysadmclient.rst:1110 +#: ../../sysadmclient.rst:1139 msgid ": Snapshot Tab" msgstr "" -#: ../../sysadmclient.rst:1184 +#: ../../sysadmclient.rst:1213 msgid ": Replication Tab" msgstr "" -#: ../../sysadmclient.rst:1194 +#: ../../sysadmclient.rst:1223 msgid ": Scheduling a Replication" msgstr "" -#: ../../sysadmclient.rst:1268 +#: ../../sysadmclient.rst:1297 msgid ": Scheduling a Snapshot" msgstr "" -#: ../../sysadmclient.rst:1308 +#: ../../sysadmclient.rst:1337 msgid ": Scheduling a Scrub" msgstr "" -#: ../../sysadmclient.rst:1335 +#: ../../sysadmclient.rst:1364 msgid ": Life Preserver Settings" msgstr "" -#: ../../sysadmclient.rst:1442 +#: ../../sysadmclient.rst:1471 msgid "" ":numref:`Table %s ` shows the command line equivalents to the " "graphical options provided by the Life Preserver GUI." msgstr "" -#: ../../sysadmclient.rst:1495 +#: ../../sysadmclient.rst:1524 msgid ": Selecting to Restore/Clone From Backup" msgstr "" -#: ../../sysadmclient.rst:1517 +#: ../../sysadmclient.rst:1546 msgid ": Input the Information for a SSH Restore" msgstr "" -#: ../../sysadmclient.rst:1523 +#: ../../sysadmclient.rst:1552 msgid "" "Once the connection to the backup server succeeds, you will be able to " "select which host to restore. After making your selection, click " @@ -1892,7 +1861,7 @@ msgid "" ":guilabel:`Next` to perform the restore." msgstr "" -#: ../../sysadmclient.rst:987 +#: ../../sysadmclient.rst:970 msgid "" "Once a user has been initialized for PersonaCrypt on the system, their user " "account will no longer be displayed when logging in, **unless** their " @@ -1901,7 +1870,7 @@ msgid "" ":numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:997 +#: ../../sysadmclient.rst:980 msgid ": |trueos| Login Screen with PersonaCrypt" msgstr "" @@ -1949,7 +1918,7 @@ msgstr "" msgid ": |sysadm| Task Manager" msgstr "" -#: ../../sysadmclient.rst:1103 +#: ../../sysadmclient.rst:1132 msgid "" ":numref:`Figure %s ` shows the :guilabel:`Snapshots` tab on a " "system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"." @@ -2013,6 +1982,134 @@ msgid "" ":guilabel:`Save Settings`." msgstr "" +#: ../../sysadmclient.rst:894 +msgid "" +"|trueos| provides support for a security feature known as PersonaCrypt. A " +"PersonaCrypt device is a removable USB media, such as a USB flash drive, " +"formatted with ZFS and encrypted with either GELI or PEFS. This device is " +"used to hold a specific user's home directory, meaning they can securely " +"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 " +"or higher system. For example, this can be used to securely access one's " +"home directory from a laptop, home computer, and work computer. The device " +"is protected by an encryption key and a different (recommended) password " +"separate from the user's login password." +msgstr "" + +#: ../../sysadmclient.rst:916 +msgid "GELI" +msgstr "" + +#: ../../sysadmclient.rst:918 +msgid "" +"PersonaCrypt uses GELI's ability to split the key into two parts: one being " +"your passphrase, and the other being a key stored on disk. Without both of " +"these parts, the media cannot be decrypted. This means if somebody steals " +"the key and manages to get your password, it is still worthless without the " +"system it was paired with. GELI is used by default in |trueos| as it is more" +" fully featured over PEFS." +msgstr "" + +#: ../../sysadmclient.rst:940 +msgid "" +"Before a user is configured to use PersonaCrypt on a |trueos| system, two " +"buttons are available in the :guilabel:`PersonaCrypt` tab of " +":guilabel:`Advanced Mode`. Note this section is hidden if the currently " +"logged in user is selected. Also, if you have just created a user and do not" +" see these options, click :guilabel:`Save`, then re-highlight the user to " +"display these options:" +msgstr "" + +#: ../../sysadmclient.rst:999 +msgid "PEFS" +msgstr "" + +#: ../../sysadmclient.rst:1001 +msgid "" +"`PEFS `_ stands for Private Encrypted File System. It is " +"open source software freely available under the BSD license, and is included" +" in |trueos| by default. PEFS runs on top of any existing file system, " +"providing an encryption layer independent of the underlying file system. " +"PersonaCrypt can be configured to use PEFS in place of GELI, which " +"eliminates the need for external media, as the encrypted PEFS database is " +"stored on the local disk." +msgstr "" + +#: ../../sysadmclient.rst:1009 +msgid "" +"While PEFS does not use a USB drive, be sure to print or otherwise backup " +"the PEFS generated key fragment stored on the disk." +msgstr "" + +#: ../../sysadmclient.rst:1012 +msgid "**Initialize PEFS with the Command Line**" +msgstr "" + +#: ../../sysadmclient.rst:1014 +msgid "" +"Because PEFS does not use a USB drive with its encryption, the user will " +"need a password file (pfile) containing the desired password, **before** " +"initializing PEFS for a user account. Once this pfile is created, enabling " +"PEFS through PersonaCrypt is accomplished in a CLI with " +":command:`personacrypt init PEFS`." +msgstr "" + +#: ../../sysadmclient.rst:1020 +msgid "" +"For example, the user account **test** has a pfile named " +":file:`testpfile.txt`, which contains the single text string of **test's** " +"chosen password. Next, the administrator adds PEFS encryption to the " +"**test** acount by opening a CLI, logging in as root, and typing:" +msgstr "" + +#: ../../sysadmclient.rst:1029 +msgid "" +"PersonaCrypt will initialize the account **test** with PEFS, using the " +"string in :file:`testpfile.txt` as the new password." +msgstr "" + +#: ../../sysadmclient.rst:1032 +msgid "" +"The |sysadm| User Manager can also initialize a user account with PEFS by " +"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` " +"drop down menu of the :guilabel:`PersonaCrypt` tab." +msgstr "" + +#: ../../sysadmclient.rst:1036 +msgid "" +"In addition to initializing an account with PEFS, PersonaCrypt also supports" +" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt " +"export ` and :command:`personacrypt import `, " +"respectively." +msgstr "" + +#~ msgid "" +#~ "|trueos| provides support for a security feature known as PersonaCrypt. A " +#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted" +#~ " with ZFS and encrypted with GELI. This device is used to hold a specific " +#~ "user's home directory, meaning they can securely transport and access their " +#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For " +#~ "example, this can be used to securely access one's home directory from a " +#~ "laptop, home computer, and work computer. The device is protected by an " +#~ "encryption key and a password which is, and should be, separate from the " +#~ "user's login password." +#~ msgstr "" + +#~ msgid "" +#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being " +#~ "your passphrase, and the other being a key stored on disk. Without both of " +#~ "these parts, the media cannot be decrypted. This means if somebody steals " +#~ "the key and manages to get your password, it is still worthless without the " +#~ "system it was paired with." +#~ msgstr "" + +#~ msgid "" +#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two " +#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". " +#~ "Note this section is hidden if the currently logged in user is selected. " +#~ "Also, if you have just created a user and do not see these options, click " +#~ ":guilabel:`Save` then re-highlight the user to display these options:" +#~ msgstr "" + #~ msgid "" #~ "**Max Boot Environments:** |trueos| automatically creates a boot environment" #~ " before updating any software, the operating system, or applying a system " diff --git a/docs/client_handbook/po/pt_BR/LC_MESSAGES/sysadmclient.po b/docs/client_handbook/po/pt_BR/LC_MESSAGES/sysadmclient.po index 25c5ac5..e4a2632 100644 --- a/docs/client_handbook/po/pt_BR/LC_MESSAGES/sysadmclient.po +++ b/docs/client_handbook/po/pt_BR/LC_MESSAGES/sysadmclient.po @@ -482,7 +482,7 @@ msgid "" "The :guilabel:`Settings` tab is shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1326 +#: ../../sysadmclient.rst:1355 msgid "Settings Tab" msgstr "" @@ -924,20 +924,7 @@ msgstr "" msgid "PersonaCrypt" msgstr "" -#: ../../sysadmclient.rst:894 -msgid "" -"|trueos| provides support for a security feature known as PersonaCrypt. A " -"PersonaCrypt device is a removable USB media, such as a USB stick, formatted" -" with ZFS and encrypted with GELI. This device is used to hold a specific " -"user's home directory, meaning they can securely transport and access their " -"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For " -"example, this can be used to securely access one's home directory from a " -"laptop, home computer, and work computer. The device is protected by an " -"encryption key and a password which is, and should be, separate from the " -"user's login password." -msgstr "" - -#: ../../sysadmclient.rst:904 +#: ../../sysadmclient.rst:905 msgid "" "When a user is configured to use a PersonaCrypt device, that user can not " "login using an unencrypted session on the same system. In other words, the " @@ -946,22 +933,13 @@ msgid "" "different user accounts, one for each type of session." msgstr "" -#: ../../sysadmclient.rst:911 -msgid "" -"PersonaCrypt uses GELI's ability to split the key into two parts: one being " -"your passphrase, and the other being a key stored on disk. Without both of " -"these parts, the media cannot be decrypted. This means if somebody steals " -"the key and manages to get your password, it is still worthless without the " -"system it was paired with." -msgstr "" - -#: ../../sysadmclient.rst:917 +#: ../../sysadmclient.rst:925 msgid "" "USB devices do eventually fail. Always backup any important files stored on " "the PersonaCrypt device to another device or system." msgstr "" -#: ../../sysadmclient.rst:920 +#: ../../sysadmclient.rst:928 msgid "" "The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt " "device for any login user, **except** for the currently logged in user. In " @@ -969,13 +947,13 @@ msgid "" "*dlavigne*, has been created and the entry for the user has been clicked." msgstr "" -#: ../../sysadmclient.rst:939 +#: ../../sysadmclient.rst:947 msgid "" "**Initialize Device:** Used to prepare the USB device which will be used as " "the user's home directory." msgstr "" -#: ../../sysadmclient.rst:942 +#: ../../sysadmclient.rst:950 msgid "" "**Import Key:** If the user has already created a PersonaCrypt device on " "another |trueos| system, click this button to import a previously saved copy" @@ -983,7 +961,7 @@ msgid "" "can now login to this computer using PersonaCrypt." msgstr "" -#: ../../sysadmclient.rst:950 +#: ../../sysadmclient.rst:958 msgid "" "Since the USB stick will hold the user's home directory and files, ensure " "the stick is large enough to meet the anticipated storage needs of the home " @@ -993,7 +971,7 @@ msgid "" "logged in." msgstr "" -#: ../../sysadmclient.rst:999 +#: ../../sysadmclient.rst:982 msgid "" "When stealth sessions have been configured, PersonaCrypt users will still be" " displayed in the login menu, even if their USB device is not inserted. This" @@ -1001,47 +979,47 @@ msgid "" "session." msgstr "" -#: ../../sysadmclient.rst:1004 +#: ../../sysadmclient.rst:987 msgid "" "In the field with the yellow padlock icon, input the password for the user " "account. In the field with the grey USB stick icon, input the password " "associated with the PersonaCrypt device." msgstr "" -#: ../../sysadmclient.rst:1008 +#: ../../sysadmclient.rst:991 msgid "" "To prevent data corruption and freezing the system **DO NOT** remove the " "PersonaCrypt device while logged in! Always log out of your session before " "physically removing the device." msgstr "" -#: ../../sysadmclient.rst:1016 +#: ../../sysadmclient.rst:1045 msgid "Managing Groups" msgstr "" -#: ../../sysadmclient.rst:1018 +#: ../../sysadmclient.rst:1047 msgid "" "Click the :guilabel:`Groups` tab to view and manage the groups on the " "system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s `, " "shows the group membership for the *operator* and *wheel* groups:" msgstr "" -#: ../../sysadmclient.rst:1029 +#: ../../sysadmclient.rst:1058 msgid "This screen has 2 columns:" msgstr "" -#: ../../sysadmclient.rst:1031 +#: ../../sysadmclient.rst:1060 msgid "" "**Members:** Indicates if the highlighted group contains any user accounts." msgstr "" -#: ../../sysadmclient.rst:1034 +#: ../../sysadmclient.rst:1063 msgid "" "**Available:** Shows all of the system and user accounts on the system in " "alphabetical order." msgstr "" -#: ../../sysadmclient.rst:1037 +#: ../../sysadmclient.rst:1066 msgid "" "To add an account to a group, highlight the group name, then highlight the " "account name in the :guilabel:`Available` column. Click the left arrow and " @@ -1051,7 +1029,7 @@ msgid "" "added to a group." msgstr "" -#: ../../sysadmclient.rst:1044 +#: ../../sysadmclient.rst:1073 msgid "" "If you add a user to the *operator* group, they will have permission to use " "commands requiring administrative access and will be prompted for their own " @@ -1060,15 +1038,15 @@ msgid "" "will be prompted for the superuser password whenever they use the command." msgstr "" -#: ../../sysadmclient.rst:1051 +#: ../../sysadmclient.rst:1080 msgid "To view all of the groups on the system, click :guilabel:`Advanced`." msgstr "" -#: ../../sysadmclient.rst:1057 +#: ../../sysadmclient.rst:1086 msgid "Life Preserver" msgstr "" -#: ../../sysadmclient.rst:1059 +#: ../../sysadmclient.rst:1088 msgid "" "The Life Preserver utility is designed to take full advantage of the " "functionality provided by ZFS snapshots. This utility allows you to schedule" @@ -1077,25 +1055,25 @@ msgid "" "benefits:" msgstr "" -#: ../../sysadmclient.rst:1081 +#: ../../sysadmclient.rst:1110 msgid "" "Replication is an efficient way to keep the files on two systems in sync. " "With Life Preserver, the snapshots taken on the |trueos| system will be " "synchronized with their versions stored on the specified backup server." msgstr "" -#: ../../sysadmclient.rst:1086 +#: ../../sysadmclient.rst:1115 msgid "Snapshots are sent to the backup server over an encrypted connection." msgstr "" -#: ../../sysadmclient.rst:1088 +#: ../../sysadmclient.rst:1117 msgid "" "Having a copy of the snapshots on another system makes it possible to " "perform an operating system restore should the |trueos| system become " "unusable or to deploy an identical system to different hardware." msgstr "" -#: ../../sysadmclient.rst:1092 +#: ../../sysadmclient.rst:1121 msgid "" "To manage snapshots and replication using the |sysadm| graphical client, go " "to :menuselection:`Utilities --> Life Preserver`. The rest of this section " @@ -1103,16 +1081,16 @@ msgid "" "Preserver." msgstr "" -#: ../../sysadmclient.rst:1101 +#: ../../sysadmclient.rst:1130 msgid "Snapshots Tab" msgstr "" -#: ../../sysadmclient.rst:1112 +#: ../../sysadmclient.rst:1141 msgid "" "This screen will display any created snapshots and provides buttons to:" msgstr "" -#: ../../sysadmclient.rst:1114 +#: ../../sysadmclient.rst:1143 msgid "" "**Create:** Used to create a manual snapshot of the specified pool now. For " "example, you could create a snapshot before making changes to an important " @@ -1126,14 +1104,14 @@ msgid "" "snapshot was created." msgstr "" -#: ../../sysadmclient.rst:1125 +#: ../../sysadmclient.rst:1154 msgid "" "**Remove:** Used to delete a highlighted snapshot. **This is a permanent " "change that can not be reversed.** In other words, the versions of files at " "the point in time the snapshot was created will be lost." msgstr "" -#: ../../sysadmclient.rst:1130 +#: ../../sysadmclient.rst:1159 msgid "" "**Revert:** If you highlight a snapshot entry, this button and the drop-down" " menu next to it will activate. You can use the drop-down menu to specify " @@ -1143,11 +1121,11 @@ msgid "" " after the snapshot was taken will be lost." msgstr "" -#: ../../sysadmclient.rst:1142 +#: ../../sysadmclient.rst:1171 msgid "Replication Tab" msgstr "" -#: ../../sysadmclient.rst:1144 +#: ../../sysadmclient.rst:1173 msgid "" "Life Preserver can be configured to replicate snapshots to another system " "over an encrypted SSH connection, though the backup itself is stored in an " @@ -1155,13 +1133,13 @@ msgid "" " another system." msgstr "" -#: ../../sysadmclient.rst:1149 +#: ../../sysadmclient.rst:1178 msgid "" "In order to configure replication, the remote system to hold a copy of the " "snapshots must first meet several requirements:" msgstr "" -#: ../../sysadmclient.rst:1156 +#: ../../sysadmclient.rst:1185 msgid "" "The backup server **must be formatted with the latest version of ZFS,** also" " known as ZFS feature flags or ZFSv5000. Operating systems that support this" @@ -1169,14 +1147,14 @@ msgid "" "FreeNAS 9.1.x or higher." msgstr "" -#: ../../sysadmclient.rst:1162 +#: ../../sysadmclient.rst:1191 msgid "" "The system must have SSH installed and the SSH service must be running. If " "the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is" " already installed, but you will need to start the SSH service." msgstr "" -#: ../../sysadmclient.rst:1167 +#: ../../sysadmclient.rst:1196 msgid "" "If the backup server is running |trueos| or |pcbsd|, you will need to open " "TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is " @@ -1186,7 +1164,7 @@ msgid "" "backup system, make sure it has a rule to allow SSH." msgstr "" -#: ../../sysadmclient.rst:1175 +#: ../../sysadmclient.rst:1204 msgid "" ":numref:`Figure %s ` shows the initial :guilabel:`Replication` " "tab on a system that has not yet been configured for replication. This " @@ -1194,29 +1172,29 @@ msgid "" "schedule." msgstr "" -#: ../../sysadmclient.rst:1186 +#: ../../sysadmclient.rst:1215 msgid "" "To schedule the replication, click :guilabel:`+` to display the \"Setup " "Replication\" screen shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1196 +#: ../../sysadmclient.rst:1225 msgid "Input the following information:" msgstr "" -#: ../../sysadmclient.rst:1198 +#: ../../sysadmclient.rst:1227 msgid "" "**Host IP:** The IP address of the remote system to store the replicated " "snapshots." msgstr "" -#: ../../sysadmclient.rst:1201 +#: ../../sysadmclient.rst:1230 msgid "" "**SSH Port:** The port number, if the remote system is running SSH on a port" " other than the default of 22." msgstr "" -#: ../../sysadmclient.rst:1204 +#: ../../sysadmclient.rst:1233 msgid "" "**Dataset:** The name of the ZFS pool and optional dataset on the remote " "system. For example, \"remotetank\" will save the snapshots to a ZFS pool of" @@ -1224,7 +1202,7 @@ msgid "" "existing dataset named \"mybackups\" on the pool named \"remotetank\"." msgstr "" -#: ../../sysadmclient.rst:1210 +#: ../../sysadmclient.rst:1239 msgid "" "**Frequency:** Use the drop-down menu to select how often to initiate the " "replication. Available choices are :guilabel:`Sync with snapshot` (at the " @@ -1235,87 +1213,87 @@ msgid "" ":guilabel:`Start`) in this screen." msgstr "" -#: ../../sysadmclient.rst:1219 +#: ../../sysadmclient.rst:1248 msgid "" "**Username:** The username must already exist on the remote system, have " "write access to the specified \"Dataset\", and have permission to SSH into " "that system." msgstr "" -#: ../../sysadmclient.rst:1223 +#: ../../sysadmclient.rst:1252 msgid "**Password:** The password associated with the \"Username\"." msgstr "" -#: ../../sysadmclient.rst:1225 +#: ../../sysadmclient.rst:1254 msgid "" "**Local DS:** Use the drop-down menu to select the pool or dataset to " "replicate to the remote system." msgstr "" -#: ../../sysadmclient.rst:1228 +#: ../../sysadmclient.rst:1257 msgid "" "The buttons at the top of the \"Setup Replication\" screen have several " "uses:" msgstr "" -#: ../../sysadmclient.rst:1231 +#: ../../sysadmclient.rst:1260 msgid "" "**+ icon:** Sdd a replication schedule. Multiple schedules are supported, " "meaning you can replicate to multiple systems or replicate different \"Local" " DS\" datasets at different times." msgstr "" -#: ../../sysadmclient.rst:1235 +#: ../../sysadmclient.rst:1264 msgid "" "**- icon:** Remove an already created, and highlighted, replication " "schedule." msgstr "" -#: ../../sysadmclient.rst:1238 +#: ../../sysadmclient.rst:1267 msgid "**gear icon:** Modify the schedule for the highlighted replication." msgstr "" -#: ../../sysadmclient.rst:1240 +#: ../../sysadmclient.rst:1269 msgid "" "**Start:** Manually starts a replication to the system specified in the " "highlighted replication." msgstr "" -#: ../../sysadmclient.rst:1243 +#: ../../sysadmclient.rst:1272 msgid "" "**Initialize:** Deletes the existing replicated snapshots on the remote " "system and starts a new replication. This is useful if a replication gets " "stuck and will not complete." msgstr "" -#: ../../sysadmclient.rst:1251 +#: ../../sysadmclient.rst:1280 msgid "Schedules Tab" msgstr "" -#: ../../sysadmclient.rst:1253 +#: ../../sysadmclient.rst:1282 msgid "" "This tab is used to manage when snapshots of the ZFS pool are created. " "Multiple snapshot schedules are supported if the system has multiple pools." msgstr "" -#: ../../sysadmclient.rst:1257 +#: ../../sysadmclient.rst:1286 msgid "" "Snapshots are created on the entire pool as they are needed when " ":ref:`Restoring the Operating System`." msgstr "" -#: ../../sysadmclient.rst:1260 +#: ../../sysadmclient.rst:1289 msgid "" "To create a snapshot schedule, click the :guilabel:`camera` icon in the " "lower left corner of this tab. This will activate the \"Setup Snapshot " "Schedule\" pane as seen in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1270 +#: ../../sysadmclient.rst:1299 msgid "This pane contains several options:" msgstr "" -#: ../../sysadmclient.rst:1275 +#: ../../sysadmclient.rst:1304 msgid "" "**Snapshots to keep:** Snapshots are automatically pruned after the " "specified number of snapshots to prevent snapshots from eventually using up " @@ -1326,7 +1304,7 @@ msgid "" "manually in the :guilabel:`Snapshots` tab." msgstr "" -#: ../../sysadmclient.rst:1284 +#: ../../sysadmclient.rst:1313 msgid "" "**Frequency:** Use the drop-down menu to select how often snapshots occur. " "Options include \"Daily\" (which will allow you to select the time of day), " @@ -1334,37 +1312,37 @@ msgid "" "Minutes\"." msgstr "" -#: ../../sysadmclient.rst:1289 +#: ../../sysadmclient.rst:1318 msgid "" "Once you have created a snapshot schedule, you can use the \"gear\" icon " "next to the \"camera\" icon to modify the highlighted schedule or the \"X\" " "icon to delete the highlighted schedule." msgstr "" -#: ../../sysadmclient.rst:1300 +#: ../../sysadmclient.rst:1329 msgid "" "To schedule when the scrub occurs, click the third icon from the right which" " will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure " "%s `." msgstr "" -#: ../../sysadmclient.rst:1318 +#: ../../sysadmclient.rst:1347 msgid "" "Once you have created a scrub schedule, you can use the \"gear\" icon next " "to the \"schedule scrub\" icon to modify the highlighted schedule or the " "\"X\" icon to delete the highlighted schedule." msgstr "" -#: ../../sysadmclient.rst:1328 +#: ../../sysadmclient.rst:1357 msgid "" "The :guilabel:`Settings` tab is shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1337 +#: ../../sysadmclient.rst:1366 msgid "Many settings are configurable:" msgstr "" -#: ../../sysadmclient.rst:1339 +#: ../../sysadmclient.rst:1368 msgid "" "**Disk Usage Warning:** Enter a number up to 99 to indicate at which " "percentage of disk space Life Preserver will display an alert in the system " @@ -1372,41 +1350,41 @@ msgid "" "space." msgstr "" -#: ../../sysadmclient.rst:1344 +#: ../../sysadmclient.rst:1373 msgid "" "**Email:** To receive an email when disk usage reaches the percentage " "configured in the \"Disk Usage Warning\", enter an email address." msgstr "" -#: ../../sysadmclient.rst:1347 +#: ../../sysadmclient.rst:1376 msgid "" "**Email Trigger:** This setting can be set to \"All\", \"Warn\", or " "\"Error\" and indicates the type of condition which will trigger an email " "message." msgstr "" -#: ../../sysadmclient.rst:1350 +#: ../../sysadmclient.rst:1379 msgid "**Recursive Management:**" msgstr "" -#: ../../sysadmclient.rst:1352 +#: ../../sysadmclient.rst:1381 msgid "" "If you make any changes in this screen, press :guilabel:`Save Settings` to " "apply them." msgstr "" -#: ../../sysadmclient.rst:1359 +#: ../../sysadmclient.rst:1388 msgid "Using the lpreserver CLI" msgstr "" -#: ../../sysadmclient.rst:1361 +#: ../../sysadmclient.rst:1390 msgid "" "The :command:`lpreserver` command line utility can also be used to manage " "snapshots and replication. This command needs to be run as the superuser. To" " display its usage, type the command without any arguments:" msgstr "" -#: ../../sysadmclient.rst:1381 +#: ../../sysadmclient.rst:1410 msgid "" "Each command has its own help text that describes its parameters and " "provides a usage example. For example, to receive help on how to use the " @@ -1417,104 +1395,104 @@ msgstr "" msgid "Command Line and GUI Equivalents" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**Command Line**" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**GUI**" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**Description**" msgstr "" -#: ../../sysadmclient.rst:1452 +#: ../../sysadmclient.rst:1481 msgid "**cronsnap**" msgstr "" -#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499 msgid "\"Snapshots\" tab" msgstr "" -#: ../../sysadmclient.rst:1452 +#: ../../sysadmclient.rst:1481 msgid "" "schedule when snapshots occur and how long to keep them; the **stop** option" " can be used to disable snapshot creation" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "**cronscrub**" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "\"Schedules\" tab" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "schedule a ZFS scrub" msgstr "" -#: ../../sysadmclient.rst:1459 +#: ../../sysadmclient.rst:1488 msgid "**get**" msgstr "" -#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495 msgid "\"Settings\" tab" msgstr "" -#: ../../sysadmclient.rst:1459 +#: ../../sysadmclient.rst:1488 msgid "list Life Preserver options" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "**replicate**" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "\"Replication\" tab" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "" "used to list, add, and remove backup server; read the **help** for this " "command for examples" msgstr "" -#: ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1495 msgid "**set**" msgstr "" -#: ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1495 msgid "" "configures Life Preserver options; read **help** for the list of " "configurable options" msgstr "" -#: ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1499 msgid "**snapshot**" msgstr "" -#: ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1499 msgid "" "create and replicate a new ZFS snapshot; by default, snapshots are " "recursive, meaning that a that a snapshot is taken of every dataset within a" " pool" msgstr "" -#: ../../sysadmclient.rst:1476 +#: ../../sysadmclient.rst:1505 msgid "**status**" msgstr "" -#: ../../sysadmclient.rst:1476 +#: ../../sysadmclient.rst:1505 msgid "lists the last snapshot name and replication status" msgstr "" -#: ../../sysadmclient.rst:1483 +#: ../../sysadmclient.rst:1512 msgid "Restoring the Operating System" msgstr "" -#: ../../sysadmclient.rst:1485 +#: ../../sysadmclient.rst:1514 msgid "" "If you have replicated the system's snapshots to a remote backup server, you" " can use a |trueos| installation media to perform an operating system " @@ -1522,7 +1500,7 @@ msgid "" "you get to the screen shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1497 +#: ../../sysadmclient.rst:1526 msgid "" "Before you can perform a restore, the network interface must be configured. " "Click :guilabel:`Network Connectivity` (second icon from the left) in order " @@ -1533,7 +1511,7 @@ msgid "" "continuing." msgstr "" -#: ../../sysadmclient.rst:1505 +#: ../../sysadmclient.rst:1534 msgid "" "Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and" " :guilabel:`Next`. This will start the Restore Wizard. In the screen shown " @@ -1543,7 +1521,7 @@ msgid "" "number." msgstr "" -#: ../../sysadmclient.rst:1519 +#: ../../sysadmclient.rst:1548 msgid "" "Click :guilabel:`Next` and the wizard will provide a summary of your " "selections. If correct, click :guilabel:`Finish`; otherwise, click " @@ -1626,7 +1604,7 @@ msgid "" "press :guilabel:`Close Ports`." msgstr "" -#: ../../sysadmclient.rst:1152 +#: ../../sysadmclient.rst:1181 msgid "" "Snapshots occurring too frequently can introduce errors in replication. To " "avoid errors, ensure snapshots are configured to take place slower than the " @@ -1685,7 +1663,7 @@ msgid "" "accounts." msgstr "" -#: ../../sysadmclient.rst:1065 +#: ../../sysadmclient.rst:1094 msgid "" "A snapshot provides a \"point-in-time\" image of the ZFS pool. This is " "similar to a full system backup as the snapshot contains the information for" @@ -1703,26 +1681,26 @@ msgid "" "snapshot." msgstr "" -#: ../../sysadmclient.rst:1272 +#: ../../sysadmclient.rst:1301 msgid "" "**Storage Pool:** Select the ZFS storage pool that contains the datasets " "that you wish to snapshot." msgstr "" -#: ../../sysadmclient.rst:1293 +#: ../../sysadmclient.rst:1322 msgid "" "This screen can also be used to manage the ZFS scrub schedule. Scrubs are " "recommended as they can provide an early indication of a potential disk " "failure. Scrubs can be scheduled on a per-pool basis." msgstr "" -#: ../../sysadmclient.rst:1297 +#: ../../sysadmclient.rst:1326 msgid "" "If you have multiple pools, be sure to create a scrub schedule for each " "pool." msgstr "" -#: ../../sysadmclient.rst:1310 +#: ../../sysadmclient.rst:1339 msgid "" "Select the pool from the :guilabel:`Storage Pool` drop-down menu, then " "select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", " @@ -1807,26 +1785,17 @@ msgstr "" msgid ": Viewing All Accounts and Their Details" msgstr "" -#: ../../sysadmclient.rst:930 +#: ../../sysadmclient.rst:938 msgid ": Initialize PersonaCrypt Device" msgstr "" -#: ../../sysadmclient.rst:932 -msgid "" -"Before a user is configured to use PersonaCrypt on a |trueos| system, two " -"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". " -"Note this section is hidden if the currently logged in user is selected. " -"Also, if you have just created a user and do not see these options, click " -":guilabel:`Save` then re-highlight the user to display these options:" -msgstr "" - -#: ../../sysadmclient.rst:947 +#: ../../sysadmclient.rst:955 msgid "" "To prepare a PersonaCrypt device for this user, insert a USB stick and click" " :guilabel:`Initialize Device`." msgstr "" -#: ../../sysadmclient.rst:957 +#: ../../sysadmclient.rst:965 msgid "" "Type a password to associate with the device. Click :guilabel:`Save` to " "initialize the device. The User Manager may take a moment to prepare the " @@ -1834,49 +1803,49 @@ msgid "" " to allow removal of PersonaCrypt." msgstr "" -#: ../../sysadmclient.rst:1027 +#: ../../sysadmclient.rst:1056 msgid ": Managing Groups Using User Manager" msgstr "" -#: ../../sysadmclient.rst:1110 +#: ../../sysadmclient.rst:1139 msgid ": Snapshot Tab" msgstr "" -#: ../../sysadmclient.rst:1184 +#: ../../sysadmclient.rst:1213 msgid ": Replication Tab" msgstr "" -#: ../../sysadmclient.rst:1194 +#: ../../sysadmclient.rst:1223 msgid ": Scheduling a Replication" msgstr "" -#: ../../sysadmclient.rst:1268 +#: ../../sysadmclient.rst:1297 msgid ": Scheduling a Snapshot" msgstr "" -#: ../../sysadmclient.rst:1308 +#: ../../sysadmclient.rst:1337 msgid ": Scheduling a Scrub" msgstr "" -#: ../../sysadmclient.rst:1335 +#: ../../sysadmclient.rst:1364 msgid ": Life Preserver Settings" msgstr "" -#: ../../sysadmclient.rst:1442 +#: ../../sysadmclient.rst:1471 msgid "" ":numref:`Table %s ` shows the command line equivalents to the " "graphical options provided by the Life Preserver GUI." msgstr "" -#: ../../sysadmclient.rst:1495 +#: ../../sysadmclient.rst:1524 msgid ": Selecting to Restore/Clone From Backup" msgstr "" -#: ../../sysadmclient.rst:1517 +#: ../../sysadmclient.rst:1546 msgid ": Input the Information for a SSH Restore" msgstr "" -#: ../../sysadmclient.rst:1523 +#: ../../sysadmclient.rst:1552 msgid "" "Once the connection to the backup server succeeds, you will be able to " "select which host to restore. After making your selection, click " @@ -1892,7 +1861,7 @@ msgid "" ":guilabel:`Next` to perform the restore." msgstr "" -#: ../../sysadmclient.rst:987 +#: ../../sysadmclient.rst:970 msgid "" "Once a user has been initialized for PersonaCrypt on the system, their user " "account will no longer be displayed when logging in, **unless** their " @@ -1901,7 +1870,7 @@ msgid "" ":numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:997 +#: ../../sysadmclient.rst:980 msgid ": |trueos| Login Screen with PersonaCrypt" msgstr "" @@ -1949,7 +1918,7 @@ msgstr "" msgid ": |sysadm| Task Manager" msgstr "" -#: ../../sysadmclient.rst:1103 +#: ../../sysadmclient.rst:1132 msgid "" ":numref:`Figure %s ` shows the :guilabel:`Snapshots` tab on a " "system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"." @@ -2013,6 +1982,134 @@ msgid "" ":guilabel:`Save Settings`." msgstr "" +#: ../../sysadmclient.rst:894 +msgid "" +"|trueos| provides support for a security feature known as PersonaCrypt. A " +"PersonaCrypt device is a removable USB media, such as a USB flash drive, " +"formatted with ZFS and encrypted with either GELI or PEFS. This device is " +"used to hold a specific user's home directory, meaning they can securely " +"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 " +"or higher system. For example, this can be used to securely access one's " +"home directory from a laptop, home computer, and work computer. The device " +"is protected by an encryption key and a different (recommended) password " +"separate from the user's login password." +msgstr "" + +#: ../../sysadmclient.rst:916 +msgid "GELI" +msgstr "" + +#: ../../sysadmclient.rst:918 +msgid "" +"PersonaCrypt uses GELI's ability to split the key into two parts: one being " +"your passphrase, and the other being a key stored on disk. Without both of " +"these parts, the media cannot be decrypted. This means if somebody steals " +"the key and manages to get your password, it is still worthless without the " +"system it was paired with. GELI is used by default in |trueos| as it is more" +" fully featured over PEFS." +msgstr "" + +#: ../../sysadmclient.rst:940 +msgid "" +"Before a user is configured to use PersonaCrypt on a |trueos| system, two " +"buttons are available in the :guilabel:`PersonaCrypt` tab of " +":guilabel:`Advanced Mode`. Note this section is hidden if the currently " +"logged in user is selected. Also, if you have just created a user and do not" +" see these options, click :guilabel:`Save`, then re-highlight the user to " +"display these options:" +msgstr "" + +#: ../../sysadmclient.rst:999 +msgid "PEFS" +msgstr "" + +#: ../../sysadmclient.rst:1001 +msgid "" +"`PEFS `_ stands for Private Encrypted File System. It is " +"open source software freely available under the BSD license, and is included" +" in |trueos| by default. PEFS runs on top of any existing file system, " +"providing an encryption layer independent of the underlying file system. " +"PersonaCrypt can be configured to use PEFS in place of GELI, which " +"eliminates the need for external media, as the encrypted PEFS database is " +"stored on the local disk." +msgstr "" + +#: ../../sysadmclient.rst:1009 +msgid "" +"While PEFS does not use a USB drive, be sure to print or otherwise backup " +"the PEFS generated key fragment stored on the disk." +msgstr "" + +#: ../../sysadmclient.rst:1012 +msgid "**Initialize PEFS with the Command Line**" +msgstr "" + +#: ../../sysadmclient.rst:1014 +msgid "" +"Because PEFS does not use a USB drive with its encryption, the user will " +"need a password file (pfile) containing the desired password, **before** " +"initializing PEFS for a user account. Once this pfile is created, enabling " +"PEFS through PersonaCrypt is accomplished in a CLI with " +":command:`personacrypt init PEFS`." +msgstr "" + +#: ../../sysadmclient.rst:1020 +msgid "" +"For example, the user account **test** has a pfile named " +":file:`testpfile.txt`, which contains the single text string of **test's** " +"chosen password. Next, the administrator adds PEFS encryption to the " +"**test** acount by opening a CLI, logging in as root, and typing:" +msgstr "" + +#: ../../sysadmclient.rst:1029 +msgid "" +"PersonaCrypt will initialize the account **test** with PEFS, using the " +"string in :file:`testpfile.txt` as the new password." +msgstr "" + +#: ../../sysadmclient.rst:1032 +msgid "" +"The |sysadm| User Manager can also initialize a user account with PEFS by " +"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` " +"drop down menu of the :guilabel:`PersonaCrypt` tab." +msgstr "" + +#: ../../sysadmclient.rst:1036 +msgid "" +"In addition to initializing an account with PEFS, PersonaCrypt also supports" +" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt " +"export ` and :command:`personacrypt import `, " +"respectively." +msgstr "" + +#~ msgid "" +#~ "|trueos| provides support for a security feature known as PersonaCrypt. A " +#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted" +#~ " with ZFS and encrypted with GELI. This device is used to hold a specific " +#~ "user's home directory, meaning they can securely transport and access their " +#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For " +#~ "example, this can be used to securely access one's home directory from a " +#~ "laptop, home computer, and work computer. The device is protected by an " +#~ "encryption key and a password which is, and should be, separate from the " +#~ "user's login password." +#~ msgstr "" + +#~ msgid "" +#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being " +#~ "your passphrase, and the other being a key stored on disk. Without both of " +#~ "these parts, the media cannot be decrypted. This means if somebody steals " +#~ "the key and manages to get your password, it is still worthless without the " +#~ "system it was paired with." +#~ msgstr "" + +#~ msgid "" +#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two " +#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". " +#~ "Note this section is hidden if the currently logged in user is selected. " +#~ "Also, if you have just created a user and do not see these options, click " +#~ ":guilabel:`Save` then re-highlight the user to display these options:" +#~ msgstr "" + #~ msgid "" #~ "**Max Boot Environments:** |trueos| automatically creates a boot environment" #~ " before updating any software, the operating system, or applying a system " diff --git a/docs/client_handbook/po/tr/LC_MESSAGES/sysadmclient.po b/docs/client_handbook/po/tr/LC_MESSAGES/sysadmclient.po index 25c5ac5..e4a2632 100644 --- a/docs/client_handbook/po/tr/LC_MESSAGES/sysadmclient.po +++ b/docs/client_handbook/po/tr/LC_MESSAGES/sysadmclient.po @@ -482,7 +482,7 @@ msgid "" "The :guilabel:`Settings` tab is shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1326 +#: ../../sysadmclient.rst:1355 msgid "Settings Tab" msgstr "" @@ -924,20 +924,7 @@ msgstr "" msgid "PersonaCrypt" msgstr "" -#: ../../sysadmclient.rst:894 -msgid "" -"|trueos| provides support for a security feature known as PersonaCrypt. A " -"PersonaCrypt device is a removable USB media, such as a USB stick, formatted" -" with ZFS and encrypted with GELI. This device is used to hold a specific " -"user's home directory, meaning they can securely transport and access their " -"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For " -"example, this can be used to securely access one's home directory from a " -"laptop, home computer, and work computer. The device is protected by an " -"encryption key and a password which is, and should be, separate from the " -"user's login password." -msgstr "" - -#: ../../sysadmclient.rst:904 +#: ../../sysadmclient.rst:905 msgid "" "When a user is configured to use a PersonaCrypt device, that user can not " "login using an unencrypted session on the same system. In other words, the " @@ -946,22 +933,13 @@ msgid "" "different user accounts, one for each type of session." msgstr "" -#: ../../sysadmclient.rst:911 -msgid "" -"PersonaCrypt uses GELI's ability to split the key into two parts: one being " -"your passphrase, and the other being a key stored on disk. Without both of " -"these parts, the media cannot be decrypted. This means if somebody steals " -"the key and manages to get your password, it is still worthless without the " -"system it was paired with." -msgstr "" - -#: ../../sysadmclient.rst:917 +#: ../../sysadmclient.rst:925 msgid "" "USB devices do eventually fail. Always backup any important files stored on " "the PersonaCrypt device to another device or system." msgstr "" -#: ../../sysadmclient.rst:920 +#: ../../sysadmclient.rst:928 msgid "" "The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt " "device for any login user, **except** for the currently logged in user. In " @@ -969,13 +947,13 @@ msgid "" "*dlavigne*, has been created and the entry for the user has been clicked." msgstr "" -#: ../../sysadmclient.rst:939 +#: ../../sysadmclient.rst:947 msgid "" "**Initialize Device:** Used to prepare the USB device which will be used as " "the user's home directory." msgstr "" -#: ../../sysadmclient.rst:942 +#: ../../sysadmclient.rst:950 msgid "" "**Import Key:** If the user has already created a PersonaCrypt device on " "another |trueos| system, click this button to import a previously saved copy" @@ -983,7 +961,7 @@ msgid "" "can now login to this computer using PersonaCrypt." msgstr "" -#: ../../sysadmclient.rst:950 +#: ../../sysadmclient.rst:958 msgid "" "Since the USB stick will hold the user's home directory and files, ensure " "the stick is large enough to meet the anticipated storage needs of the home " @@ -993,7 +971,7 @@ msgid "" "logged in." msgstr "" -#: ../../sysadmclient.rst:999 +#: ../../sysadmclient.rst:982 msgid "" "When stealth sessions have been configured, PersonaCrypt users will still be" " displayed in the login menu, even if their USB device is not inserted. This" @@ -1001,47 +979,47 @@ msgid "" "session." msgstr "" -#: ../../sysadmclient.rst:1004 +#: ../../sysadmclient.rst:987 msgid "" "In the field with the yellow padlock icon, input the password for the user " "account. In the field with the grey USB stick icon, input the password " "associated with the PersonaCrypt device." msgstr "" -#: ../../sysadmclient.rst:1008 +#: ../../sysadmclient.rst:991 msgid "" "To prevent data corruption and freezing the system **DO NOT** remove the " "PersonaCrypt device while logged in! Always log out of your session before " "physically removing the device." msgstr "" -#: ../../sysadmclient.rst:1016 +#: ../../sysadmclient.rst:1045 msgid "Managing Groups" msgstr "" -#: ../../sysadmclient.rst:1018 +#: ../../sysadmclient.rst:1047 msgid "" "Click the :guilabel:`Groups` tab to view and manage the groups on the " "system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s `, " "shows the group membership for the *operator* and *wheel* groups:" msgstr "" -#: ../../sysadmclient.rst:1029 +#: ../../sysadmclient.rst:1058 msgid "This screen has 2 columns:" msgstr "" -#: ../../sysadmclient.rst:1031 +#: ../../sysadmclient.rst:1060 msgid "" "**Members:** Indicates if the highlighted group contains any user accounts." msgstr "" -#: ../../sysadmclient.rst:1034 +#: ../../sysadmclient.rst:1063 msgid "" "**Available:** Shows all of the system and user accounts on the system in " "alphabetical order." msgstr "" -#: ../../sysadmclient.rst:1037 +#: ../../sysadmclient.rst:1066 msgid "" "To add an account to a group, highlight the group name, then highlight the " "account name in the :guilabel:`Available` column. Click the left arrow and " @@ -1051,7 +1029,7 @@ msgid "" "added to a group." msgstr "" -#: ../../sysadmclient.rst:1044 +#: ../../sysadmclient.rst:1073 msgid "" "If you add a user to the *operator* group, they will have permission to use " "commands requiring administrative access and will be prompted for their own " @@ -1060,15 +1038,15 @@ msgid "" "will be prompted for the superuser password whenever they use the command." msgstr "" -#: ../../sysadmclient.rst:1051 +#: ../../sysadmclient.rst:1080 msgid "To view all of the groups on the system, click :guilabel:`Advanced`." msgstr "" -#: ../../sysadmclient.rst:1057 +#: ../../sysadmclient.rst:1086 msgid "Life Preserver" msgstr "" -#: ../../sysadmclient.rst:1059 +#: ../../sysadmclient.rst:1088 msgid "" "The Life Preserver utility is designed to take full advantage of the " "functionality provided by ZFS snapshots. This utility allows you to schedule" @@ -1077,25 +1055,25 @@ msgid "" "benefits:" msgstr "" -#: ../../sysadmclient.rst:1081 +#: ../../sysadmclient.rst:1110 msgid "" "Replication is an efficient way to keep the files on two systems in sync. " "With Life Preserver, the snapshots taken on the |trueos| system will be " "synchronized with their versions stored on the specified backup server." msgstr "" -#: ../../sysadmclient.rst:1086 +#: ../../sysadmclient.rst:1115 msgid "Snapshots are sent to the backup server over an encrypted connection." msgstr "" -#: ../../sysadmclient.rst:1088 +#: ../../sysadmclient.rst:1117 msgid "" "Having a copy of the snapshots on another system makes it possible to " "perform an operating system restore should the |trueos| system become " "unusable or to deploy an identical system to different hardware." msgstr "" -#: ../../sysadmclient.rst:1092 +#: ../../sysadmclient.rst:1121 msgid "" "To manage snapshots and replication using the |sysadm| graphical client, go " "to :menuselection:`Utilities --> Life Preserver`. The rest of this section " @@ -1103,16 +1081,16 @@ msgid "" "Preserver." msgstr "" -#: ../../sysadmclient.rst:1101 +#: ../../sysadmclient.rst:1130 msgid "Snapshots Tab" msgstr "" -#: ../../sysadmclient.rst:1112 +#: ../../sysadmclient.rst:1141 msgid "" "This screen will display any created snapshots and provides buttons to:" msgstr "" -#: ../../sysadmclient.rst:1114 +#: ../../sysadmclient.rst:1143 msgid "" "**Create:** Used to create a manual snapshot of the specified pool now. For " "example, you could create a snapshot before making changes to an important " @@ -1126,14 +1104,14 @@ msgid "" "snapshot was created." msgstr "" -#: ../../sysadmclient.rst:1125 +#: ../../sysadmclient.rst:1154 msgid "" "**Remove:** Used to delete a highlighted snapshot. **This is a permanent " "change that can not be reversed.** In other words, the versions of files at " "the point in time the snapshot was created will be lost." msgstr "" -#: ../../sysadmclient.rst:1130 +#: ../../sysadmclient.rst:1159 msgid "" "**Revert:** If you highlight a snapshot entry, this button and the drop-down" " menu next to it will activate. You can use the drop-down menu to specify " @@ -1143,11 +1121,11 @@ msgid "" " after the snapshot was taken will be lost." msgstr "" -#: ../../sysadmclient.rst:1142 +#: ../../sysadmclient.rst:1171 msgid "Replication Tab" msgstr "" -#: ../../sysadmclient.rst:1144 +#: ../../sysadmclient.rst:1173 msgid "" "Life Preserver can be configured to replicate snapshots to another system " "over an encrypted SSH connection, though the backup itself is stored in an " @@ -1155,13 +1133,13 @@ msgid "" " another system." msgstr "" -#: ../../sysadmclient.rst:1149 +#: ../../sysadmclient.rst:1178 msgid "" "In order to configure replication, the remote system to hold a copy of the " "snapshots must first meet several requirements:" msgstr "" -#: ../../sysadmclient.rst:1156 +#: ../../sysadmclient.rst:1185 msgid "" "The backup server **must be formatted with the latest version of ZFS,** also" " known as ZFS feature flags or ZFSv5000. Operating systems that support this" @@ -1169,14 +1147,14 @@ msgid "" "FreeNAS 9.1.x or higher." msgstr "" -#: ../../sysadmclient.rst:1162 +#: ../../sysadmclient.rst:1191 msgid "" "The system must have SSH installed and the SSH service must be running. If " "the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is" " already installed, but you will need to start the SSH service." msgstr "" -#: ../../sysadmclient.rst:1167 +#: ../../sysadmclient.rst:1196 msgid "" "If the backup server is running |trueos| or |pcbsd|, you will need to open " "TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is " @@ -1186,7 +1164,7 @@ msgid "" "backup system, make sure it has a rule to allow SSH." msgstr "" -#: ../../sysadmclient.rst:1175 +#: ../../sysadmclient.rst:1204 msgid "" ":numref:`Figure %s ` shows the initial :guilabel:`Replication` " "tab on a system that has not yet been configured for replication. This " @@ -1194,29 +1172,29 @@ msgid "" "schedule." msgstr "" -#: ../../sysadmclient.rst:1186 +#: ../../sysadmclient.rst:1215 msgid "" "To schedule the replication, click :guilabel:`+` to display the \"Setup " "Replication\" screen shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1196 +#: ../../sysadmclient.rst:1225 msgid "Input the following information:" msgstr "" -#: ../../sysadmclient.rst:1198 +#: ../../sysadmclient.rst:1227 msgid "" "**Host IP:** The IP address of the remote system to store the replicated " "snapshots." msgstr "" -#: ../../sysadmclient.rst:1201 +#: ../../sysadmclient.rst:1230 msgid "" "**SSH Port:** The port number, if the remote system is running SSH on a port" " other than the default of 22." msgstr "" -#: ../../sysadmclient.rst:1204 +#: ../../sysadmclient.rst:1233 msgid "" "**Dataset:** The name of the ZFS pool and optional dataset on the remote " "system. For example, \"remotetank\" will save the snapshots to a ZFS pool of" @@ -1224,7 +1202,7 @@ msgid "" "existing dataset named \"mybackups\" on the pool named \"remotetank\"." msgstr "" -#: ../../sysadmclient.rst:1210 +#: ../../sysadmclient.rst:1239 msgid "" "**Frequency:** Use the drop-down menu to select how often to initiate the " "replication. Available choices are :guilabel:`Sync with snapshot` (at the " @@ -1235,87 +1213,87 @@ msgid "" ":guilabel:`Start`) in this screen." msgstr "" -#: ../../sysadmclient.rst:1219 +#: ../../sysadmclient.rst:1248 msgid "" "**Username:** The username must already exist on the remote system, have " "write access to the specified \"Dataset\", and have permission to SSH into " "that system." msgstr "" -#: ../../sysadmclient.rst:1223 +#: ../../sysadmclient.rst:1252 msgid "**Password:** The password associated with the \"Username\"." msgstr "" -#: ../../sysadmclient.rst:1225 +#: ../../sysadmclient.rst:1254 msgid "" "**Local DS:** Use the drop-down menu to select the pool or dataset to " "replicate to the remote system." msgstr "" -#: ../../sysadmclient.rst:1228 +#: ../../sysadmclient.rst:1257 msgid "" "The buttons at the top of the \"Setup Replication\" screen have several " "uses:" msgstr "" -#: ../../sysadmclient.rst:1231 +#: ../../sysadmclient.rst:1260 msgid "" "**+ icon:** Sdd a replication schedule. Multiple schedules are supported, " "meaning you can replicate to multiple systems or replicate different \"Local" " DS\" datasets at different times." msgstr "" -#: ../../sysadmclient.rst:1235 +#: ../../sysadmclient.rst:1264 msgid "" "**- icon:** Remove an already created, and highlighted, replication " "schedule." msgstr "" -#: ../../sysadmclient.rst:1238 +#: ../../sysadmclient.rst:1267 msgid "**gear icon:** Modify the schedule for the highlighted replication." msgstr "" -#: ../../sysadmclient.rst:1240 +#: ../../sysadmclient.rst:1269 msgid "" "**Start:** Manually starts a replication to the system specified in the " "highlighted replication." msgstr "" -#: ../../sysadmclient.rst:1243 +#: ../../sysadmclient.rst:1272 msgid "" "**Initialize:** Deletes the existing replicated snapshots on the remote " "system and starts a new replication. This is useful if a replication gets " "stuck and will not complete." msgstr "" -#: ../../sysadmclient.rst:1251 +#: ../../sysadmclient.rst:1280 msgid "Schedules Tab" msgstr "" -#: ../../sysadmclient.rst:1253 +#: ../../sysadmclient.rst:1282 msgid "" "This tab is used to manage when snapshots of the ZFS pool are created. " "Multiple snapshot schedules are supported if the system has multiple pools." msgstr "" -#: ../../sysadmclient.rst:1257 +#: ../../sysadmclient.rst:1286 msgid "" "Snapshots are created on the entire pool as they are needed when " ":ref:`Restoring the Operating System`." msgstr "" -#: ../../sysadmclient.rst:1260 +#: ../../sysadmclient.rst:1289 msgid "" "To create a snapshot schedule, click the :guilabel:`camera` icon in the " "lower left corner of this tab. This will activate the \"Setup Snapshot " "Schedule\" pane as seen in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1270 +#: ../../sysadmclient.rst:1299 msgid "This pane contains several options:" msgstr "" -#: ../../sysadmclient.rst:1275 +#: ../../sysadmclient.rst:1304 msgid "" "**Snapshots to keep:** Snapshots are automatically pruned after the " "specified number of snapshots to prevent snapshots from eventually using up " @@ -1326,7 +1304,7 @@ msgid "" "manually in the :guilabel:`Snapshots` tab." msgstr "" -#: ../../sysadmclient.rst:1284 +#: ../../sysadmclient.rst:1313 msgid "" "**Frequency:** Use the drop-down menu to select how often snapshots occur. " "Options include \"Daily\" (which will allow you to select the time of day), " @@ -1334,37 +1312,37 @@ msgid "" "Minutes\"." msgstr "" -#: ../../sysadmclient.rst:1289 +#: ../../sysadmclient.rst:1318 msgid "" "Once you have created a snapshot schedule, you can use the \"gear\" icon " "next to the \"camera\" icon to modify the highlighted schedule or the \"X\" " "icon to delete the highlighted schedule." msgstr "" -#: ../../sysadmclient.rst:1300 +#: ../../sysadmclient.rst:1329 msgid "" "To schedule when the scrub occurs, click the third icon from the right which" " will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure " "%s `." msgstr "" -#: ../../sysadmclient.rst:1318 +#: ../../sysadmclient.rst:1347 msgid "" "Once you have created a scrub schedule, you can use the \"gear\" icon next " "to the \"schedule scrub\" icon to modify the highlighted schedule or the " "\"X\" icon to delete the highlighted schedule." msgstr "" -#: ../../sysadmclient.rst:1328 +#: ../../sysadmclient.rst:1357 msgid "" "The :guilabel:`Settings` tab is shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1337 +#: ../../sysadmclient.rst:1366 msgid "Many settings are configurable:" msgstr "" -#: ../../sysadmclient.rst:1339 +#: ../../sysadmclient.rst:1368 msgid "" "**Disk Usage Warning:** Enter a number up to 99 to indicate at which " "percentage of disk space Life Preserver will display an alert in the system " @@ -1372,41 +1350,41 @@ msgid "" "space." msgstr "" -#: ../../sysadmclient.rst:1344 +#: ../../sysadmclient.rst:1373 msgid "" "**Email:** To receive an email when disk usage reaches the percentage " "configured in the \"Disk Usage Warning\", enter an email address." msgstr "" -#: ../../sysadmclient.rst:1347 +#: ../../sysadmclient.rst:1376 msgid "" "**Email Trigger:** This setting can be set to \"All\", \"Warn\", or " "\"Error\" and indicates the type of condition which will trigger an email " "message." msgstr "" -#: ../../sysadmclient.rst:1350 +#: ../../sysadmclient.rst:1379 msgid "**Recursive Management:**" msgstr "" -#: ../../sysadmclient.rst:1352 +#: ../../sysadmclient.rst:1381 msgid "" "If you make any changes in this screen, press :guilabel:`Save Settings` to " "apply them." msgstr "" -#: ../../sysadmclient.rst:1359 +#: ../../sysadmclient.rst:1388 msgid "Using the lpreserver CLI" msgstr "" -#: ../../sysadmclient.rst:1361 +#: ../../sysadmclient.rst:1390 msgid "" "The :command:`lpreserver` command line utility can also be used to manage " "snapshots and replication. This command needs to be run as the superuser. To" " display its usage, type the command without any arguments:" msgstr "" -#: ../../sysadmclient.rst:1381 +#: ../../sysadmclient.rst:1410 msgid "" "Each command has its own help text that describes its parameters and " "provides a usage example. For example, to receive help on how to use the " @@ -1417,104 +1395,104 @@ msgstr "" msgid "Command Line and GUI Equivalents" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**Command Line**" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**GUI**" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**Description**" msgstr "" -#: ../../sysadmclient.rst:1452 +#: ../../sysadmclient.rst:1481 msgid "**cronsnap**" msgstr "" -#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499 msgid "\"Snapshots\" tab" msgstr "" -#: ../../sysadmclient.rst:1452 +#: ../../sysadmclient.rst:1481 msgid "" "schedule when snapshots occur and how long to keep them; the **stop** option" " can be used to disable snapshot creation" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "**cronscrub**" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "\"Schedules\" tab" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "schedule a ZFS scrub" msgstr "" -#: ../../sysadmclient.rst:1459 +#: ../../sysadmclient.rst:1488 msgid "**get**" msgstr "" -#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495 msgid "\"Settings\" tab" msgstr "" -#: ../../sysadmclient.rst:1459 +#: ../../sysadmclient.rst:1488 msgid "list Life Preserver options" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "**replicate**" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "\"Replication\" tab" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "" "used to list, add, and remove backup server; read the **help** for this " "command for examples" msgstr "" -#: ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1495 msgid "**set**" msgstr "" -#: ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1495 msgid "" "configures Life Preserver options; read **help** for the list of " "configurable options" msgstr "" -#: ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1499 msgid "**snapshot**" msgstr "" -#: ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1499 msgid "" "create and replicate a new ZFS snapshot; by default, snapshots are " "recursive, meaning that a that a snapshot is taken of every dataset within a" " pool" msgstr "" -#: ../../sysadmclient.rst:1476 +#: ../../sysadmclient.rst:1505 msgid "**status**" msgstr "" -#: ../../sysadmclient.rst:1476 +#: ../../sysadmclient.rst:1505 msgid "lists the last snapshot name and replication status" msgstr "" -#: ../../sysadmclient.rst:1483 +#: ../../sysadmclient.rst:1512 msgid "Restoring the Operating System" msgstr "" -#: ../../sysadmclient.rst:1485 +#: ../../sysadmclient.rst:1514 msgid "" "If you have replicated the system's snapshots to a remote backup server, you" " can use a |trueos| installation media to perform an operating system " @@ -1522,7 +1500,7 @@ msgid "" "you get to the screen shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1497 +#: ../../sysadmclient.rst:1526 msgid "" "Before you can perform a restore, the network interface must be configured. " "Click :guilabel:`Network Connectivity` (second icon from the left) in order " @@ -1533,7 +1511,7 @@ msgid "" "continuing." msgstr "" -#: ../../sysadmclient.rst:1505 +#: ../../sysadmclient.rst:1534 msgid "" "Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and" " :guilabel:`Next`. This will start the Restore Wizard. In the screen shown " @@ -1543,7 +1521,7 @@ msgid "" "number." msgstr "" -#: ../../sysadmclient.rst:1519 +#: ../../sysadmclient.rst:1548 msgid "" "Click :guilabel:`Next` and the wizard will provide a summary of your " "selections. If correct, click :guilabel:`Finish`; otherwise, click " @@ -1626,7 +1604,7 @@ msgid "" "press :guilabel:`Close Ports`." msgstr "" -#: ../../sysadmclient.rst:1152 +#: ../../sysadmclient.rst:1181 msgid "" "Snapshots occurring too frequently can introduce errors in replication. To " "avoid errors, ensure snapshots are configured to take place slower than the " @@ -1685,7 +1663,7 @@ msgid "" "accounts." msgstr "" -#: ../../sysadmclient.rst:1065 +#: ../../sysadmclient.rst:1094 msgid "" "A snapshot provides a \"point-in-time\" image of the ZFS pool. This is " "similar to a full system backup as the snapshot contains the information for" @@ -1703,26 +1681,26 @@ msgid "" "snapshot." msgstr "" -#: ../../sysadmclient.rst:1272 +#: ../../sysadmclient.rst:1301 msgid "" "**Storage Pool:** Select the ZFS storage pool that contains the datasets " "that you wish to snapshot." msgstr "" -#: ../../sysadmclient.rst:1293 +#: ../../sysadmclient.rst:1322 msgid "" "This screen can also be used to manage the ZFS scrub schedule. Scrubs are " "recommended as they can provide an early indication of a potential disk " "failure. Scrubs can be scheduled on a per-pool basis." msgstr "" -#: ../../sysadmclient.rst:1297 +#: ../../sysadmclient.rst:1326 msgid "" "If you have multiple pools, be sure to create a scrub schedule for each " "pool." msgstr "" -#: ../../sysadmclient.rst:1310 +#: ../../sysadmclient.rst:1339 msgid "" "Select the pool from the :guilabel:`Storage Pool` drop-down menu, then " "select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", " @@ -1807,26 +1785,17 @@ msgstr "" msgid ": Viewing All Accounts and Their Details" msgstr "" -#: ../../sysadmclient.rst:930 +#: ../../sysadmclient.rst:938 msgid ": Initialize PersonaCrypt Device" msgstr "" -#: ../../sysadmclient.rst:932 -msgid "" -"Before a user is configured to use PersonaCrypt on a |trueos| system, two " -"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". " -"Note this section is hidden if the currently logged in user is selected. " -"Also, if you have just created a user and do not see these options, click " -":guilabel:`Save` then re-highlight the user to display these options:" -msgstr "" - -#: ../../sysadmclient.rst:947 +#: ../../sysadmclient.rst:955 msgid "" "To prepare a PersonaCrypt device for this user, insert a USB stick and click" " :guilabel:`Initialize Device`." msgstr "" -#: ../../sysadmclient.rst:957 +#: ../../sysadmclient.rst:965 msgid "" "Type a password to associate with the device. Click :guilabel:`Save` to " "initialize the device. The User Manager may take a moment to prepare the " @@ -1834,49 +1803,49 @@ msgid "" " to allow removal of PersonaCrypt." msgstr "" -#: ../../sysadmclient.rst:1027 +#: ../../sysadmclient.rst:1056 msgid ": Managing Groups Using User Manager" msgstr "" -#: ../../sysadmclient.rst:1110 +#: ../../sysadmclient.rst:1139 msgid ": Snapshot Tab" msgstr "" -#: ../../sysadmclient.rst:1184 +#: ../../sysadmclient.rst:1213 msgid ": Replication Tab" msgstr "" -#: ../../sysadmclient.rst:1194 +#: ../../sysadmclient.rst:1223 msgid ": Scheduling a Replication" msgstr "" -#: ../../sysadmclient.rst:1268 +#: ../../sysadmclient.rst:1297 msgid ": Scheduling a Snapshot" msgstr "" -#: ../../sysadmclient.rst:1308 +#: ../../sysadmclient.rst:1337 msgid ": Scheduling a Scrub" msgstr "" -#: ../../sysadmclient.rst:1335 +#: ../../sysadmclient.rst:1364 msgid ": Life Preserver Settings" msgstr "" -#: ../../sysadmclient.rst:1442 +#: ../../sysadmclient.rst:1471 msgid "" ":numref:`Table %s ` shows the command line equivalents to the " "graphical options provided by the Life Preserver GUI." msgstr "" -#: ../../sysadmclient.rst:1495 +#: ../../sysadmclient.rst:1524 msgid ": Selecting to Restore/Clone From Backup" msgstr "" -#: ../../sysadmclient.rst:1517 +#: ../../sysadmclient.rst:1546 msgid ": Input the Information for a SSH Restore" msgstr "" -#: ../../sysadmclient.rst:1523 +#: ../../sysadmclient.rst:1552 msgid "" "Once the connection to the backup server succeeds, you will be able to " "select which host to restore. After making your selection, click " @@ -1892,7 +1861,7 @@ msgid "" ":guilabel:`Next` to perform the restore." msgstr "" -#: ../../sysadmclient.rst:987 +#: ../../sysadmclient.rst:970 msgid "" "Once a user has been initialized for PersonaCrypt on the system, their user " "account will no longer be displayed when logging in, **unless** their " @@ -1901,7 +1870,7 @@ msgid "" ":numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:997 +#: ../../sysadmclient.rst:980 msgid ": |trueos| Login Screen with PersonaCrypt" msgstr "" @@ -1949,7 +1918,7 @@ msgstr "" msgid ": |sysadm| Task Manager" msgstr "" -#: ../../sysadmclient.rst:1103 +#: ../../sysadmclient.rst:1132 msgid "" ":numref:`Figure %s ` shows the :guilabel:`Snapshots` tab on a " "system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"." @@ -2013,6 +1982,134 @@ msgid "" ":guilabel:`Save Settings`." msgstr "" +#: ../../sysadmclient.rst:894 +msgid "" +"|trueos| provides support for a security feature known as PersonaCrypt. A " +"PersonaCrypt device is a removable USB media, such as a USB flash drive, " +"formatted with ZFS and encrypted with either GELI or PEFS. This device is " +"used to hold a specific user's home directory, meaning they can securely " +"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 " +"or higher system. For example, this can be used to securely access one's " +"home directory from a laptop, home computer, and work computer. The device " +"is protected by an encryption key and a different (recommended) password " +"separate from the user's login password." +msgstr "" + +#: ../../sysadmclient.rst:916 +msgid "GELI" +msgstr "" + +#: ../../sysadmclient.rst:918 +msgid "" +"PersonaCrypt uses GELI's ability to split the key into two parts: one being " +"your passphrase, and the other being a key stored on disk. Without both of " +"these parts, the media cannot be decrypted. This means if somebody steals " +"the key and manages to get your password, it is still worthless without the " +"system it was paired with. GELI is used by default in |trueos| as it is more" +" fully featured over PEFS." +msgstr "" + +#: ../../sysadmclient.rst:940 +msgid "" +"Before a user is configured to use PersonaCrypt on a |trueos| system, two " +"buttons are available in the :guilabel:`PersonaCrypt` tab of " +":guilabel:`Advanced Mode`. Note this section is hidden if the currently " +"logged in user is selected. Also, if you have just created a user and do not" +" see these options, click :guilabel:`Save`, then re-highlight the user to " +"display these options:" +msgstr "" + +#: ../../sysadmclient.rst:999 +msgid "PEFS" +msgstr "" + +#: ../../sysadmclient.rst:1001 +msgid "" +"`PEFS `_ stands for Private Encrypted File System. It is " +"open source software freely available under the BSD license, and is included" +" in |trueos| by default. PEFS runs on top of any existing file system, " +"providing an encryption layer independent of the underlying file system. " +"PersonaCrypt can be configured to use PEFS in place of GELI, which " +"eliminates the need for external media, as the encrypted PEFS database is " +"stored on the local disk." +msgstr "" + +#: ../../sysadmclient.rst:1009 +msgid "" +"While PEFS does not use a USB drive, be sure to print or otherwise backup " +"the PEFS generated key fragment stored on the disk." +msgstr "" + +#: ../../sysadmclient.rst:1012 +msgid "**Initialize PEFS with the Command Line**" +msgstr "" + +#: ../../sysadmclient.rst:1014 +msgid "" +"Because PEFS does not use a USB drive with its encryption, the user will " +"need a password file (pfile) containing the desired password, **before** " +"initializing PEFS for a user account. Once this pfile is created, enabling " +"PEFS through PersonaCrypt is accomplished in a CLI with " +":command:`personacrypt init PEFS`." +msgstr "" + +#: ../../sysadmclient.rst:1020 +msgid "" +"For example, the user account **test** has a pfile named " +":file:`testpfile.txt`, which contains the single text string of **test's** " +"chosen password. Next, the administrator adds PEFS encryption to the " +"**test** acount by opening a CLI, logging in as root, and typing:" +msgstr "" + +#: ../../sysadmclient.rst:1029 +msgid "" +"PersonaCrypt will initialize the account **test** with PEFS, using the " +"string in :file:`testpfile.txt` as the new password." +msgstr "" + +#: ../../sysadmclient.rst:1032 +msgid "" +"The |sysadm| User Manager can also initialize a user account with PEFS by " +"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` " +"drop down menu of the :guilabel:`PersonaCrypt` tab." +msgstr "" + +#: ../../sysadmclient.rst:1036 +msgid "" +"In addition to initializing an account with PEFS, PersonaCrypt also supports" +" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt " +"export ` and :command:`personacrypt import `, " +"respectively." +msgstr "" + +#~ msgid "" +#~ "|trueos| provides support for a security feature known as PersonaCrypt. A " +#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted" +#~ " with ZFS and encrypted with GELI. This device is used to hold a specific " +#~ "user's home directory, meaning they can securely transport and access their " +#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For " +#~ "example, this can be used to securely access one's home directory from a " +#~ "laptop, home computer, and work computer. The device is protected by an " +#~ "encryption key and a password which is, and should be, separate from the " +#~ "user's login password." +#~ msgstr "" + +#~ msgid "" +#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being " +#~ "your passphrase, and the other being a key stored on disk. Without both of " +#~ "these parts, the media cannot be decrypted. This means if somebody steals " +#~ "the key and manages to get your password, it is still worthless without the " +#~ "system it was paired with." +#~ msgstr "" + +#~ msgid "" +#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two " +#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". " +#~ "Note this section is hidden if the currently logged in user is selected. " +#~ "Also, if you have just created a user and do not see these options, click " +#~ ":guilabel:`Save` then re-highlight the user to display these options:" +#~ msgstr "" + #~ msgid "" #~ "**Max Boot Environments:** |trueos| automatically creates a boot environment" #~ " before updating any software, the operating system, or applying a system " diff --git a/docs/client_handbook/po/uk/LC_MESSAGES/sysadmclient.po b/docs/client_handbook/po/uk/LC_MESSAGES/sysadmclient.po index 25c5ac5..e4a2632 100644 --- a/docs/client_handbook/po/uk/LC_MESSAGES/sysadmclient.po +++ b/docs/client_handbook/po/uk/LC_MESSAGES/sysadmclient.po @@ -482,7 +482,7 @@ msgid "" "The :guilabel:`Settings` tab is shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1326 +#: ../../sysadmclient.rst:1355 msgid "Settings Tab" msgstr "" @@ -924,20 +924,7 @@ msgstr "" msgid "PersonaCrypt" msgstr "" -#: ../../sysadmclient.rst:894 -msgid "" -"|trueos| provides support for a security feature known as PersonaCrypt. A " -"PersonaCrypt device is a removable USB media, such as a USB stick, formatted" -" with ZFS and encrypted with GELI. This device is used to hold a specific " -"user's home directory, meaning they can securely transport and access their " -"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For " -"example, this can be used to securely access one's home directory from a " -"laptop, home computer, and work computer. The device is protected by an " -"encryption key and a password which is, and should be, separate from the " -"user's login password." -msgstr "" - -#: ../../sysadmclient.rst:904 +#: ../../sysadmclient.rst:905 msgid "" "When a user is configured to use a PersonaCrypt device, that user can not " "login using an unencrypted session on the same system. In other words, the " @@ -946,22 +933,13 @@ msgid "" "different user accounts, one for each type of session." msgstr "" -#: ../../sysadmclient.rst:911 -msgid "" -"PersonaCrypt uses GELI's ability to split the key into two parts: one being " -"your passphrase, and the other being a key stored on disk. Without both of " -"these parts, the media cannot be decrypted. This means if somebody steals " -"the key and manages to get your password, it is still worthless without the " -"system it was paired with." -msgstr "" - -#: ../../sysadmclient.rst:917 +#: ../../sysadmclient.rst:925 msgid "" "USB devices do eventually fail. Always backup any important files stored on " "the PersonaCrypt device to another device or system." msgstr "" -#: ../../sysadmclient.rst:920 +#: ../../sysadmclient.rst:928 msgid "" "The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt " "device for any login user, **except** for the currently logged in user. In " @@ -969,13 +947,13 @@ msgid "" "*dlavigne*, has been created and the entry for the user has been clicked." msgstr "" -#: ../../sysadmclient.rst:939 +#: ../../sysadmclient.rst:947 msgid "" "**Initialize Device:** Used to prepare the USB device which will be used as " "the user's home directory." msgstr "" -#: ../../sysadmclient.rst:942 +#: ../../sysadmclient.rst:950 msgid "" "**Import Key:** If the user has already created a PersonaCrypt device on " "another |trueos| system, click this button to import a previously saved copy" @@ -983,7 +961,7 @@ msgid "" "can now login to this computer using PersonaCrypt." msgstr "" -#: ../../sysadmclient.rst:950 +#: ../../sysadmclient.rst:958 msgid "" "Since the USB stick will hold the user's home directory and files, ensure " "the stick is large enough to meet the anticipated storage needs of the home " @@ -993,7 +971,7 @@ msgid "" "logged in." msgstr "" -#: ../../sysadmclient.rst:999 +#: ../../sysadmclient.rst:982 msgid "" "When stealth sessions have been configured, PersonaCrypt users will still be" " displayed in the login menu, even if their USB device is not inserted. This" @@ -1001,47 +979,47 @@ msgid "" "session." msgstr "" -#: ../../sysadmclient.rst:1004 +#: ../../sysadmclient.rst:987 msgid "" "In the field with the yellow padlock icon, input the password for the user " "account. In the field with the grey USB stick icon, input the password " "associated with the PersonaCrypt device." msgstr "" -#: ../../sysadmclient.rst:1008 +#: ../../sysadmclient.rst:991 msgid "" "To prevent data corruption and freezing the system **DO NOT** remove the " "PersonaCrypt device while logged in! Always log out of your session before " "physically removing the device." msgstr "" -#: ../../sysadmclient.rst:1016 +#: ../../sysadmclient.rst:1045 msgid "Managing Groups" msgstr "" -#: ../../sysadmclient.rst:1018 +#: ../../sysadmclient.rst:1047 msgid "" "Click the :guilabel:`Groups` tab to view and manage the groups on the " "system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s `, " "shows the group membership for the *operator* and *wheel* groups:" msgstr "" -#: ../../sysadmclient.rst:1029 +#: ../../sysadmclient.rst:1058 msgid "This screen has 2 columns:" msgstr "" -#: ../../sysadmclient.rst:1031 +#: ../../sysadmclient.rst:1060 msgid "" "**Members:** Indicates if the highlighted group contains any user accounts." msgstr "" -#: ../../sysadmclient.rst:1034 +#: ../../sysadmclient.rst:1063 msgid "" "**Available:** Shows all of the system and user accounts on the system in " "alphabetical order." msgstr "" -#: ../../sysadmclient.rst:1037 +#: ../../sysadmclient.rst:1066 msgid "" "To add an account to a group, highlight the group name, then highlight the " "account name in the :guilabel:`Available` column. Click the left arrow and " @@ -1051,7 +1029,7 @@ msgid "" "added to a group." msgstr "" -#: ../../sysadmclient.rst:1044 +#: ../../sysadmclient.rst:1073 msgid "" "If you add a user to the *operator* group, they will have permission to use " "commands requiring administrative access and will be prompted for their own " @@ -1060,15 +1038,15 @@ msgid "" "will be prompted for the superuser password whenever they use the command." msgstr "" -#: ../../sysadmclient.rst:1051 +#: ../../sysadmclient.rst:1080 msgid "To view all of the groups on the system, click :guilabel:`Advanced`." msgstr "" -#: ../../sysadmclient.rst:1057 +#: ../../sysadmclient.rst:1086 msgid "Life Preserver" msgstr "" -#: ../../sysadmclient.rst:1059 +#: ../../sysadmclient.rst:1088 msgid "" "The Life Preserver utility is designed to take full advantage of the " "functionality provided by ZFS snapshots. This utility allows you to schedule" @@ -1077,25 +1055,25 @@ msgid "" "benefits:" msgstr "" -#: ../../sysadmclient.rst:1081 +#: ../../sysadmclient.rst:1110 msgid "" "Replication is an efficient way to keep the files on two systems in sync. " "With Life Preserver, the snapshots taken on the |trueos| system will be " "synchronized with their versions stored on the specified backup server." msgstr "" -#: ../../sysadmclient.rst:1086 +#: ../../sysadmclient.rst:1115 msgid "Snapshots are sent to the backup server over an encrypted connection." msgstr "" -#: ../../sysadmclient.rst:1088 +#: ../../sysadmclient.rst:1117 msgid "" "Having a copy of the snapshots on another system makes it possible to " "perform an operating system restore should the |trueos| system become " "unusable or to deploy an identical system to different hardware." msgstr "" -#: ../../sysadmclient.rst:1092 +#: ../../sysadmclient.rst:1121 msgid "" "To manage snapshots and replication using the |sysadm| graphical client, go " "to :menuselection:`Utilities --> Life Preserver`. The rest of this section " @@ -1103,16 +1081,16 @@ msgid "" "Preserver." msgstr "" -#: ../../sysadmclient.rst:1101 +#: ../../sysadmclient.rst:1130 msgid "Snapshots Tab" msgstr "" -#: ../../sysadmclient.rst:1112 +#: ../../sysadmclient.rst:1141 msgid "" "This screen will display any created snapshots and provides buttons to:" msgstr "" -#: ../../sysadmclient.rst:1114 +#: ../../sysadmclient.rst:1143 msgid "" "**Create:** Used to create a manual snapshot of the specified pool now. For " "example, you could create a snapshot before making changes to an important " @@ -1126,14 +1104,14 @@ msgid "" "snapshot was created." msgstr "" -#: ../../sysadmclient.rst:1125 +#: ../../sysadmclient.rst:1154 msgid "" "**Remove:** Used to delete a highlighted snapshot. **This is a permanent " "change that can not be reversed.** In other words, the versions of files at " "the point in time the snapshot was created will be lost." msgstr "" -#: ../../sysadmclient.rst:1130 +#: ../../sysadmclient.rst:1159 msgid "" "**Revert:** If you highlight a snapshot entry, this button and the drop-down" " menu next to it will activate. You can use the drop-down menu to specify " @@ -1143,11 +1121,11 @@ msgid "" " after the snapshot was taken will be lost." msgstr "" -#: ../../sysadmclient.rst:1142 +#: ../../sysadmclient.rst:1171 msgid "Replication Tab" msgstr "" -#: ../../sysadmclient.rst:1144 +#: ../../sysadmclient.rst:1173 msgid "" "Life Preserver can be configured to replicate snapshots to another system " "over an encrypted SSH connection, though the backup itself is stored in an " @@ -1155,13 +1133,13 @@ msgid "" " another system." msgstr "" -#: ../../sysadmclient.rst:1149 +#: ../../sysadmclient.rst:1178 msgid "" "In order to configure replication, the remote system to hold a copy of the " "snapshots must first meet several requirements:" msgstr "" -#: ../../sysadmclient.rst:1156 +#: ../../sysadmclient.rst:1185 msgid "" "The backup server **must be formatted with the latest version of ZFS,** also" " known as ZFS feature flags or ZFSv5000. Operating systems that support this" @@ -1169,14 +1147,14 @@ msgid "" "FreeNAS 9.1.x or higher." msgstr "" -#: ../../sysadmclient.rst:1162 +#: ../../sysadmclient.rst:1191 msgid "" "The system must have SSH installed and the SSH service must be running. If " "the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is" " already installed, but you will need to start the SSH service." msgstr "" -#: ../../sysadmclient.rst:1167 +#: ../../sysadmclient.rst:1196 msgid "" "If the backup server is running |trueos| or |pcbsd|, you will need to open " "TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is " @@ -1186,7 +1164,7 @@ msgid "" "backup system, make sure it has a rule to allow SSH." msgstr "" -#: ../../sysadmclient.rst:1175 +#: ../../sysadmclient.rst:1204 msgid "" ":numref:`Figure %s ` shows the initial :guilabel:`Replication` " "tab on a system that has not yet been configured for replication. This " @@ -1194,29 +1172,29 @@ msgid "" "schedule." msgstr "" -#: ../../sysadmclient.rst:1186 +#: ../../sysadmclient.rst:1215 msgid "" "To schedule the replication, click :guilabel:`+` to display the \"Setup " "Replication\" screen shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1196 +#: ../../sysadmclient.rst:1225 msgid "Input the following information:" msgstr "" -#: ../../sysadmclient.rst:1198 +#: ../../sysadmclient.rst:1227 msgid "" "**Host IP:** The IP address of the remote system to store the replicated " "snapshots." msgstr "" -#: ../../sysadmclient.rst:1201 +#: ../../sysadmclient.rst:1230 msgid "" "**SSH Port:** The port number, if the remote system is running SSH on a port" " other than the default of 22." msgstr "" -#: ../../sysadmclient.rst:1204 +#: ../../sysadmclient.rst:1233 msgid "" "**Dataset:** The name of the ZFS pool and optional dataset on the remote " "system. For example, \"remotetank\" will save the snapshots to a ZFS pool of" @@ -1224,7 +1202,7 @@ msgid "" "existing dataset named \"mybackups\" on the pool named \"remotetank\"." msgstr "" -#: ../../sysadmclient.rst:1210 +#: ../../sysadmclient.rst:1239 msgid "" "**Frequency:** Use the drop-down menu to select how often to initiate the " "replication. Available choices are :guilabel:`Sync with snapshot` (at the " @@ -1235,87 +1213,87 @@ msgid "" ":guilabel:`Start`) in this screen." msgstr "" -#: ../../sysadmclient.rst:1219 +#: ../../sysadmclient.rst:1248 msgid "" "**Username:** The username must already exist on the remote system, have " "write access to the specified \"Dataset\", and have permission to SSH into " "that system." msgstr "" -#: ../../sysadmclient.rst:1223 +#: ../../sysadmclient.rst:1252 msgid "**Password:** The password associated with the \"Username\"." msgstr "" -#: ../../sysadmclient.rst:1225 +#: ../../sysadmclient.rst:1254 msgid "" "**Local DS:** Use the drop-down menu to select the pool or dataset to " "replicate to the remote system." msgstr "" -#: ../../sysadmclient.rst:1228 +#: ../../sysadmclient.rst:1257 msgid "" "The buttons at the top of the \"Setup Replication\" screen have several " "uses:" msgstr "" -#: ../../sysadmclient.rst:1231 +#: ../../sysadmclient.rst:1260 msgid "" "**+ icon:** Sdd a replication schedule. Multiple schedules are supported, " "meaning you can replicate to multiple systems or replicate different \"Local" " DS\" datasets at different times." msgstr "" -#: ../../sysadmclient.rst:1235 +#: ../../sysadmclient.rst:1264 msgid "" "**- icon:** Remove an already created, and highlighted, replication " "schedule." msgstr "" -#: ../../sysadmclient.rst:1238 +#: ../../sysadmclient.rst:1267 msgid "**gear icon:** Modify the schedule for the highlighted replication." msgstr "" -#: ../../sysadmclient.rst:1240 +#: ../../sysadmclient.rst:1269 msgid "" "**Start:** Manually starts a replication to the system specified in the " "highlighted replication." msgstr "" -#: ../../sysadmclient.rst:1243 +#: ../../sysadmclient.rst:1272 msgid "" "**Initialize:** Deletes the existing replicated snapshots on the remote " "system and starts a new replication. This is useful if a replication gets " "stuck and will not complete." msgstr "" -#: ../../sysadmclient.rst:1251 +#: ../../sysadmclient.rst:1280 msgid "Schedules Tab" msgstr "" -#: ../../sysadmclient.rst:1253 +#: ../../sysadmclient.rst:1282 msgid "" "This tab is used to manage when snapshots of the ZFS pool are created. " "Multiple snapshot schedules are supported if the system has multiple pools." msgstr "" -#: ../../sysadmclient.rst:1257 +#: ../../sysadmclient.rst:1286 msgid "" "Snapshots are created on the entire pool as they are needed when " ":ref:`Restoring the Operating System`." msgstr "" -#: ../../sysadmclient.rst:1260 +#: ../../sysadmclient.rst:1289 msgid "" "To create a snapshot schedule, click the :guilabel:`camera` icon in the " "lower left corner of this tab. This will activate the \"Setup Snapshot " "Schedule\" pane as seen in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1270 +#: ../../sysadmclient.rst:1299 msgid "This pane contains several options:" msgstr "" -#: ../../sysadmclient.rst:1275 +#: ../../sysadmclient.rst:1304 msgid "" "**Snapshots to keep:** Snapshots are automatically pruned after the " "specified number of snapshots to prevent snapshots from eventually using up " @@ -1326,7 +1304,7 @@ msgid "" "manually in the :guilabel:`Snapshots` tab." msgstr "" -#: ../../sysadmclient.rst:1284 +#: ../../sysadmclient.rst:1313 msgid "" "**Frequency:** Use the drop-down menu to select how often snapshots occur. " "Options include \"Daily\" (which will allow you to select the time of day), " @@ -1334,37 +1312,37 @@ msgid "" "Minutes\"." msgstr "" -#: ../../sysadmclient.rst:1289 +#: ../../sysadmclient.rst:1318 msgid "" "Once you have created a snapshot schedule, you can use the \"gear\" icon " "next to the \"camera\" icon to modify the highlighted schedule or the \"X\" " "icon to delete the highlighted schedule." msgstr "" -#: ../../sysadmclient.rst:1300 +#: ../../sysadmclient.rst:1329 msgid "" "To schedule when the scrub occurs, click the third icon from the right which" " will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure " "%s `." msgstr "" -#: ../../sysadmclient.rst:1318 +#: ../../sysadmclient.rst:1347 msgid "" "Once you have created a scrub schedule, you can use the \"gear\" icon next " "to the \"schedule scrub\" icon to modify the highlighted schedule or the " "\"X\" icon to delete the highlighted schedule." msgstr "" -#: ../../sysadmclient.rst:1328 +#: ../../sysadmclient.rst:1357 msgid "" "The :guilabel:`Settings` tab is shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1337 +#: ../../sysadmclient.rst:1366 msgid "Many settings are configurable:" msgstr "" -#: ../../sysadmclient.rst:1339 +#: ../../sysadmclient.rst:1368 msgid "" "**Disk Usage Warning:** Enter a number up to 99 to indicate at which " "percentage of disk space Life Preserver will display an alert in the system " @@ -1372,41 +1350,41 @@ msgid "" "space." msgstr "" -#: ../../sysadmclient.rst:1344 +#: ../../sysadmclient.rst:1373 msgid "" "**Email:** To receive an email when disk usage reaches the percentage " "configured in the \"Disk Usage Warning\", enter an email address." msgstr "" -#: ../../sysadmclient.rst:1347 +#: ../../sysadmclient.rst:1376 msgid "" "**Email Trigger:** This setting can be set to \"All\", \"Warn\", or " "\"Error\" and indicates the type of condition which will trigger an email " "message." msgstr "" -#: ../../sysadmclient.rst:1350 +#: ../../sysadmclient.rst:1379 msgid "**Recursive Management:**" msgstr "" -#: ../../sysadmclient.rst:1352 +#: ../../sysadmclient.rst:1381 msgid "" "If you make any changes in this screen, press :guilabel:`Save Settings` to " "apply them." msgstr "" -#: ../../sysadmclient.rst:1359 +#: ../../sysadmclient.rst:1388 msgid "Using the lpreserver CLI" msgstr "" -#: ../../sysadmclient.rst:1361 +#: ../../sysadmclient.rst:1390 msgid "" "The :command:`lpreserver` command line utility can also be used to manage " "snapshots and replication. This command needs to be run as the superuser. To" " display its usage, type the command without any arguments:" msgstr "" -#: ../../sysadmclient.rst:1381 +#: ../../sysadmclient.rst:1410 msgid "" "Each command has its own help text that describes its parameters and " "provides a usage example. For example, to receive help on how to use the " @@ -1417,104 +1395,104 @@ msgstr "" msgid "Command Line and GUI Equivalents" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**Command Line**" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**GUI**" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**Description**" msgstr "" -#: ../../sysadmclient.rst:1452 +#: ../../sysadmclient.rst:1481 msgid "**cronsnap**" msgstr "" -#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499 msgid "\"Snapshots\" tab" msgstr "" -#: ../../sysadmclient.rst:1452 +#: ../../sysadmclient.rst:1481 msgid "" "schedule when snapshots occur and how long to keep them; the **stop** option" " can be used to disable snapshot creation" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "**cronscrub**" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "\"Schedules\" tab" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "schedule a ZFS scrub" msgstr "" -#: ../../sysadmclient.rst:1459 +#: ../../sysadmclient.rst:1488 msgid "**get**" msgstr "" -#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495 msgid "\"Settings\" tab" msgstr "" -#: ../../sysadmclient.rst:1459 +#: ../../sysadmclient.rst:1488 msgid "list Life Preserver options" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "**replicate**" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "\"Replication\" tab" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "" "used to list, add, and remove backup server; read the **help** for this " "command for examples" msgstr "" -#: ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1495 msgid "**set**" msgstr "" -#: ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1495 msgid "" "configures Life Preserver options; read **help** for the list of " "configurable options" msgstr "" -#: ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1499 msgid "**snapshot**" msgstr "" -#: ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1499 msgid "" "create and replicate a new ZFS snapshot; by default, snapshots are " "recursive, meaning that a that a snapshot is taken of every dataset within a" " pool" msgstr "" -#: ../../sysadmclient.rst:1476 +#: ../../sysadmclient.rst:1505 msgid "**status**" msgstr "" -#: ../../sysadmclient.rst:1476 +#: ../../sysadmclient.rst:1505 msgid "lists the last snapshot name and replication status" msgstr "" -#: ../../sysadmclient.rst:1483 +#: ../../sysadmclient.rst:1512 msgid "Restoring the Operating System" msgstr "" -#: ../../sysadmclient.rst:1485 +#: ../../sysadmclient.rst:1514 msgid "" "If you have replicated the system's snapshots to a remote backup server, you" " can use a |trueos| installation media to perform an operating system " @@ -1522,7 +1500,7 @@ msgid "" "you get to the screen shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1497 +#: ../../sysadmclient.rst:1526 msgid "" "Before you can perform a restore, the network interface must be configured. " "Click :guilabel:`Network Connectivity` (second icon from the left) in order " @@ -1533,7 +1511,7 @@ msgid "" "continuing." msgstr "" -#: ../../sysadmclient.rst:1505 +#: ../../sysadmclient.rst:1534 msgid "" "Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and" " :guilabel:`Next`. This will start the Restore Wizard. In the screen shown " @@ -1543,7 +1521,7 @@ msgid "" "number." msgstr "" -#: ../../sysadmclient.rst:1519 +#: ../../sysadmclient.rst:1548 msgid "" "Click :guilabel:`Next` and the wizard will provide a summary of your " "selections. If correct, click :guilabel:`Finish`; otherwise, click " @@ -1626,7 +1604,7 @@ msgid "" "press :guilabel:`Close Ports`." msgstr "" -#: ../../sysadmclient.rst:1152 +#: ../../sysadmclient.rst:1181 msgid "" "Snapshots occurring too frequently can introduce errors in replication. To " "avoid errors, ensure snapshots are configured to take place slower than the " @@ -1685,7 +1663,7 @@ msgid "" "accounts." msgstr "" -#: ../../sysadmclient.rst:1065 +#: ../../sysadmclient.rst:1094 msgid "" "A snapshot provides a \"point-in-time\" image of the ZFS pool. This is " "similar to a full system backup as the snapshot contains the information for" @@ -1703,26 +1681,26 @@ msgid "" "snapshot." msgstr "" -#: ../../sysadmclient.rst:1272 +#: ../../sysadmclient.rst:1301 msgid "" "**Storage Pool:** Select the ZFS storage pool that contains the datasets " "that you wish to snapshot." msgstr "" -#: ../../sysadmclient.rst:1293 +#: ../../sysadmclient.rst:1322 msgid "" "This screen can also be used to manage the ZFS scrub schedule. Scrubs are " "recommended as they can provide an early indication of a potential disk " "failure. Scrubs can be scheduled on a per-pool basis." msgstr "" -#: ../../sysadmclient.rst:1297 +#: ../../sysadmclient.rst:1326 msgid "" "If you have multiple pools, be sure to create a scrub schedule for each " "pool." msgstr "" -#: ../../sysadmclient.rst:1310 +#: ../../sysadmclient.rst:1339 msgid "" "Select the pool from the :guilabel:`Storage Pool` drop-down menu, then " "select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", " @@ -1807,26 +1785,17 @@ msgstr "" msgid ": Viewing All Accounts and Their Details" msgstr "" -#: ../../sysadmclient.rst:930 +#: ../../sysadmclient.rst:938 msgid ": Initialize PersonaCrypt Device" msgstr "" -#: ../../sysadmclient.rst:932 -msgid "" -"Before a user is configured to use PersonaCrypt on a |trueos| system, two " -"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". " -"Note this section is hidden if the currently logged in user is selected. " -"Also, if you have just created a user and do not see these options, click " -":guilabel:`Save` then re-highlight the user to display these options:" -msgstr "" - -#: ../../sysadmclient.rst:947 +#: ../../sysadmclient.rst:955 msgid "" "To prepare a PersonaCrypt device for this user, insert a USB stick and click" " :guilabel:`Initialize Device`." msgstr "" -#: ../../sysadmclient.rst:957 +#: ../../sysadmclient.rst:965 msgid "" "Type a password to associate with the device. Click :guilabel:`Save` to " "initialize the device. The User Manager may take a moment to prepare the " @@ -1834,49 +1803,49 @@ msgid "" " to allow removal of PersonaCrypt." msgstr "" -#: ../../sysadmclient.rst:1027 +#: ../../sysadmclient.rst:1056 msgid ": Managing Groups Using User Manager" msgstr "" -#: ../../sysadmclient.rst:1110 +#: ../../sysadmclient.rst:1139 msgid ": Snapshot Tab" msgstr "" -#: ../../sysadmclient.rst:1184 +#: ../../sysadmclient.rst:1213 msgid ": Replication Tab" msgstr "" -#: ../../sysadmclient.rst:1194 +#: ../../sysadmclient.rst:1223 msgid ": Scheduling a Replication" msgstr "" -#: ../../sysadmclient.rst:1268 +#: ../../sysadmclient.rst:1297 msgid ": Scheduling a Snapshot" msgstr "" -#: ../../sysadmclient.rst:1308 +#: ../../sysadmclient.rst:1337 msgid ": Scheduling a Scrub" msgstr "" -#: ../../sysadmclient.rst:1335 +#: ../../sysadmclient.rst:1364 msgid ": Life Preserver Settings" msgstr "" -#: ../../sysadmclient.rst:1442 +#: ../../sysadmclient.rst:1471 msgid "" ":numref:`Table %s ` shows the command line equivalents to the " "graphical options provided by the Life Preserver GUI." msgstr "" -#: ../../sysadmclient.rst:1495 +#: ../../sysadmclient.rst:1524 msgid ": Selecting to Restore/Clone From Backup" msgstr "" -#: ../../sysadmclient.rst:1517 +#: ../../sysadmclient.rst:1546 msgid ": Input the Information for a SSH Restore" msgstr "" -#: ../../sysadmclient.rst:1523 +#: ../../sysadmclient.rst:1552 msgid "" "Once the connection to the backup server succeeds, you will be able to " "select which host to restore. After making your selection, click " @@ -1892,7 +1861,7 @@ msgid "" ":guilabel:`Next` to perform the restore." msgstr "" -#: ../../sysadmclient.rst:987 +#: ../../sysadmclient.rst:970 msgid "" "Once a user has been initialized for PersonaCrypt on the system, their user " "account will no longer be displayed when logging in, **unless** their " @@ -1901,7 +1870,7 @@ msgid "" ":numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:997 +#: ../../sysadmclient.rst:980 msgid ": |trueos| Login Screen with PersonaCrypt" msgstr "" @@ -1949,7 +1918,7 @@ msgstr "" msgid ": |sysadm| Task Manager" msgstr "" -#: ../../sysadmclient.rst:1103 +#: ../../sysadmclient.rst:1132 msgid "" ":numref:`Figure %s ` shows the :guilabel:`Snapshots` tab on a " "system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"." @@ -2013,6 +1982,134 @@ msgid "" ":guilabel:`Save Settings`." msgstr "" +#: ../../sysadmclient.rst:894 +msgid "" +"|trueos| provides support for a security feature known as PersonaCrypt. A " +"PersonaCrypt device is a removable USB media, such as a USB flash drive, " +"formatted with ZFS and encrypted with either GELI or PEFS. This device is " +"used to hold a specific user's home directory, meaning they can securely " +"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 " +"or higher system. For example, this can be used to securely access one's " +"home directory from a laptop, home computer, and work computer. The device " +"is protected by an encryption key and a different (recommended) password " +"separate from the user's login password." +msgstr "" + +#: ../../sysadmclient.rst:916 +msgid "GELI" +msgstr "" + +#: ../../sysadmclient.rst:918 +msgid "" +"PersonaCrypt uses GELI's ability to split the key into two parts: one being " +"your passphrase, and the other being a key stored on disk. Without both of " +"these parts, the media cannot be decrypted. This means if somebody steals " +"the key and manages to get your password, it is still worthless without the " +"system it was paired with. GELI is used by default in |trueos| as it is more" +" fully featured over PEFS." +msgstr "" + +#: ../../sysadmclient.rst:940 +msgid "" +"Before a user is configured to use PersonaCrypt on a |trueos| system, two " +"buttons are available in the :guilabel:`PersonaCrypt` tab of " +":guilabel:`Advanced Mode`. Note this section is hidden if the currently " +"logged in user is selected. Also, if you have just created a user and do not" +" see these options, click :guilabel:`Save`, then re-highlight the user to " +"display these options:" +msgstr "" + +#: ../../sysadmclient.rst:999 +msgid "PEFS" +msgstr "" + +#: ../../sysadmclient.rst:1001 +msgid "" +"`PEFS `_ stands for Private Encrypted File System. It is " +"open source software freely available under the BSD license, and is included" +" in |trueos| by default. PEFS runs on top of any existing file system, " +"providing an encryption layer independent of the underlying file system. " +"PersonaCrypt can be configured to use PEFS in place of GELI, which " +"eliminates the need for external media, as the encrypted PEFS database is " +"stored on the local disk." +msgstr "" + +#: ../../sysadmclient.rst:1009 +msgid "" +"While PEFS does not use a USB drive, be sure to print or otherwise backup " +"the PEFS generated key fragment stored on the disk." +msgstr "" + +#: ../../sysadmclient.rst:1012 +msgid "**Initialize PEFS with the Command Line**" +msgstr "" + +#: ../../sysadmclient.rst:1014 +msgid "" +"Because PEFS does not use a USB drive with its encryption, the user will " +"need a password file (pfile) containing the desired password, **before** " +"initializing PEFS for a user account. Once this pfile is created, enabling " +"PEFS through PersonaCrypt is accomplished in a CLI with " +":command:`personacrypt init PEFS`." +msgstr "" + +#: ../../sysadmclient.rst:1020 +msgid "" +"For example, the user account **test** has a pfile named " +":file:`testpfile.txt`, which contains the single text string of **test's** " +"chosen password. Next, the administrator adds PEFS encryption to the " +"**test** acount by opening a CLI, logging in as root, and typing:" +msgstr "" + +#: ../../sysadmclient.rst:1029 +msgid "" +"PersonaCrypt will initialize the account **test** with PEFS, using the " +"string in :file:`testpfile.txt` as the new password." +msgstr "" + +#: ../../sysadmclient.rst:1032 +msgid "" +"The |sysadm| User Manager can also initialize a user account with PEFS by " +"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` " +"drop down menu of the :guilabel:`PersonaCrypt` tab." +msgstr "" + +#: ../../sysadmclient.rst:1036 +msgid "" +"In addition to initializing an account with PEFS, PersonaCrypt also supports" +" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt " +"export ` and :command:`personacrypt import `, " +"respectively." +msgstr "" + +#~ msgid "" +#~ "|trueos| provides support for a security feature known as PersonaCrypt. A " +#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted" +#~ " with ZFS and encrypted with GELI. This device is used to hold a specific " +#~ "user's home directory, meaning they can securely transport and access their " +#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For " +#~ "example, this can be used to securely access one's home directory from a " +#~ "laptop, home computer, and work computer. The device is protected by an " +#~ "encryption key and a password which is, and should be, separate from the " +#~ "user's login password." +#~ msgstr "" + +#~ msgid "" +#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being " +#~ "your passphrase, and the other being a key stored on disk. Without both of " +#~ "these parts, the media cannot be decrypted. This means if somebody steals " +#~ "the key and manages to get your password, it is still worthless without the " +#~ "system it was paired with." +#~ msgstr "" + +#~ msgid "" +#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two " +#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". " +#~ "Note this section is hidden if the currently logged in user is selected. " +#~ "Also, if you have just created a user and do not see these options, click " +#~ ":guilabel:`Save` then re-highlight the user to display these options:" +#~ msgstr "" + #~ msgid "" #~ "**Max Boot Environments:** |trueos| automatically creates a boot environment" #~ " before updating any software, the operating system, or applying a system " diff --git a/docs/client_handbook/po/zh_CN/LC_MESSAGES/sysadmclient.po b/docs/client_handbook/po/zh_CN/LC_MESSAGES/sysadmclient.po index 25c5ac5..e4a2632 100644 --- a/docs/client_handbook/po/zh_CN/LC_MESSAGES/sysadmclient.po +++ b/docs/client_handbook/po/zh_CN/LC_MESSAGES/sysadmclient.po @@ -482,7 +482,7 @@ msgid "" "The :guilabel:`Settings` tab is shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1326 +#: ../../sysadmclient.rst:1355 msgid "Settings Tab" msgstr "" @@ -924,20 +924,7 @@ msgstr "" msgid "PersonaCrypt" msgstr "" -#: ../../sysadmclient.rst:894 -msgid "" -"|trueos| provides support for a security feature known as PersonaCrypt. A " -"PersonaCrypt device is a removable USB media, such as a USB stick, formatted" -" with ZFS and encrypted with GELI. This device is used to hold a specific " -"user's home directory, meaning they can securely transport and access their " -"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For " -"example, this can be used to securely access one's home directory from a " -"laptop, home computer, and work computer. The device is protected by an " -"encryption key and a password which is, and should be, separate from the " -"user's login password." -msgstr "" - -#: ../../sysadmclient.rst:904 +#: ../../sysadmclient.rst:905 msgid "" "When a user is configured to use a PersonaCrypt device, that user can not " "login using an unencrypted session on the same system. In other words, the " @@ -946,22 +933,13 @@ msgid "" "different user accounts, one for each type of session." msgstr "" -#: ../../sysadmclient.rst:911 -msgid "" -"PersonaCrypt uses GELI's ability to split the key into two parts: one being " -"your passphrase, and the other being a key stored on disk. Without both of " -"these parts, the media cannot be decrypted. This means if somebody steals " -"the key and manages to get your password, it is still worthless without the " -"system it was paired with." -msgstr "" - -#: ../../sysadmclient.rst:917 +#: ../../sysadmclient.rst:925 msgid "" "USB devices do eventually fail. Always backup any important files stored on " "the PersonaCrypt device to another device or system." msgstr "" -#: ../../sysadmclient.rst:920 +#: ../../sysadmclient.rst:928 msgid "" "The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt " "device for any login user, **except** for the currently logged in user. In " @@ -969,13 +947,13 @@ msgid "" "*dlavigne*, has been created and the entry for the user has been clicked." msgstr "" -#: ../../sysadmclient.rst:939 +#: ../../sysadmclient.rst:947 msgid "" "**Initialize Device:** Used to prepare the USB device which will be used as " "the user's home directory." msgstr "" -#: ../../sysadmclient.rst:942 +#: ../../sysadmclient.rst:950 msgid "" "**Import Key:** If the user has already created a PersonaCrypt device on " "another |trueos| system, click this button to import a previously saved copy" @@ -983,7 +961,7 @@ msgid "" "can now login to this computer using PersonaCrypt." msgstr "" -#: ../../sysadmclient.rst:950 +#: ../../sysadmclient.rst:958 msgid "" "Since the USB stick will hold the user's home directory and files, ensure " "the stick is large enough to meet the anticipated storage needs of the home " @@ -993,7 +971,7 @@ msgid "" "logged in." msgstr "" -#: ../../sysadmclient.rst:999 +#: ../../sysadmclient.rst:982 msgid "" "When stealth sessions have been configured, PersonaCrypt users will still be" " displayed in the login menu, even if their USB device is not inserted. This" @@ -1001,47 +979,47 @@ msgid "" "session." msgstr "" -#: ../../sysadmclient.rst:1004 +#: ../../sysadmclient.rst:987 msgid "" "In the field with the yellow padlock icon, input the password for the user " "account. In the field with the grey USB stick icon, input the password " "associated with the PersonaCrypt device." msgstr "" -#: ../../sysadmclient.rst:1008 +#: ../../sysadmclient.rst:991 msgid "" "To prevent data corruption and freezing the system **DO NOT** remove the " "PersonaCrypt device while logged in! Always log out of your session before " "physically removing the device." msgstr "" -#: ../../sysadmclient.rst:1016 +#: ../../sysadmclient.rst:1045 msgid "Managing Groups" msgstr "" -#: ../../sysadmclient.rst:1018 +#: ../../sysadmclient.rst:1047 msgid "" "Click the :guilabel:`Groups` tab to view and manage the groups on the " "system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s `, " "shows the group membership for the *operator* and *wheel* groups:" msgstr "" -#: ../../sysadmclient.rst:1029 +#: ../../sysadmclient.rst:1058 msgid "This screen has 2 columns:" msgstr "" -#: ../../sysadmclient.rst:1031 +#: ../../sysadmclient.rst:1060 msgid "" "**Members:** Indicates if the highlighted group contains any user accounts." msgstr "" -#: ../../sysadmclient.rst:1034 +#: ../../sysadmclient.rst:1063 msgid "" "**Available:** Shows all of the system and user accounts on the system in " "alphabetical order." msgstr "" -#: ../../sysadmclient.rst:1037 +#: ../../sysadmclient.rst:1066 msgid "" "To add an account to a group, highlight the group name, then highlight the " "account name in the :guilabel:`Available` column. Click the left arrow and " @@ -1051,7 +1029,7 @@ msgid "" "added to a group." msgstr "" -#: ../../sysadmclient.rst:1044 +#: ../../sysadmclient.rst:1073 msgid "" "If you add a user to the *operator* group, they will have permission to use " "commands requiring administrative access and will be prompted for their own " @@ -1060,15 +1038,15 @@ msgid "" "will be prompted for the superuser password whenever they use the command." msgstr "" -#: ../../sysadmclient.rst:1051 +#: ../../sysadmclient.rst:1080 msgid "To view all of the groups on the system, click :guilabel:`Advanced`." msgstr "" -#: ../../sysadmclient.rst:1057 +#: ../../sysadmclient.rst:1086 msgid "Life Preserver" msgstr "" -#: ../../sysadmclient.rst:1059 +#: ../../sysadmclient.rst:1088 msgid "" "The Life Preserver utility is designed to take full advantage of the " "functionality provided by ZFS snapshots. This utility allows you to schedule" @@ -1077,25 +1055,25 @@ msgid "" "benefits:" msgstr "" -#: ../../sysadmclient.rst:1081 +#: ../../sysadmclient.rst:1110 msgid "" "Replication is an efficient way to keep the files on two systems in sync. " "With Life Preserver, the snapshots taken on the |trueos| system will be " "synchronized with their versions stored on the specified backup server." msgstr "" -#: ../../sysadmclient.rst:1086 +#: ../../sysadmclient.rst:1115 msgid "Snapshots are sent to the backup server over an encrypted connection." msgstr "" -#: ../../sysadmclient.rst:1088 +#: ../../sysadmclient.rst:1117 msgid "" "Having a copy of the snapshots on another system makes it possible to " "perform an operating system restore should the |trueos| system become " "unusable or to deploy an identical system to different hardware." msgstr "" -#: ../../sysadmclient.rst:1092 +#: ../../sysadmclient.rst:1121 msgid "" "To manage snapshots and replication using the |sysadm| graphical client, go " "to :menuselection:`Utilities --> Life Preserver`. The rest of this section " @@ -1103,16 +1081,16 @@ msgid "" "Preserver." msgstr "" -#: ../../sysadmclient.rst:1101 +#: ../../sysadmclient.rst:1130 msgid "Snapshots Tab" msgstr "" -#: ../../sysadmclient.rst:1112 +#: ../../sysadmclient.rst:1141 msgid "" "This screen will display any created snapshots and provides buttons to:" msgstr "" -#: ../../sysadmclient.rst:1114 +#: ../../sysadmclient.rst:1143 msgid "" "**Create:** Used to create a manual snapshot of the specified pool now. For " "example, you could create a snapshot before making changes to an important " @@ -1126,14 +1104,14 @@ msgid "" "snapshot was created." msgstr "" -#: ../../sysadmclient.rst:1125 +#: ../../sysadmclient.rst:1154 msgid "" "**Remove:** Used to delete a highlighted snapshot. **This is a permanent " "change that can not be reversed.** In other words, the versions of files at " "the point in time the snapshot was created will be lost." msgstr "" -#: ../../sysadmclient.rst:1130 +#: ../../sysadmclient.rst:1159 msgid "" "**Revert:** If you highlight a snapshot entry, this button and the drop-down" " menu next to it will activate. You can use the drop-down menu to specify " @@ -1143,11 +1121,11 @@ msgid "" " after the snapshot was taken will be lost." msgstr "" -#: ../../sysadmclient.rst:1142 +#: ../../sysadmclient.rst:1171 msgid "Replication Tab" msgstr "" -#: ../../sysadmclient.rst:1144 +#: ../../sysadmclient.rst:1173 msgid "" "Life Preserver can be configured to replicate snapshots to another system " "over an encrypted SSH connection, though the backup itself is stored in an " @@ -1155,13 +1133,13 @@ msgid "" " another system." msgstr "" -#: ../../sysadmclient.rst:1149 +#: ../../sysadmclient.rst:1178 msgid "" "In order to configure replication, the remote system to hold a copy of the " "snapshots must first meet several requirements:" msgstr "" -#: ../../sysadmclient.rst:1156 +#: ../../sysadmclient.rst:1185 msgid "" "The backup server **must be formatted with the latest version of ZFS,** also" " known as ZFS feature flags or ZFSv5000. Operating systems that support this" @@ -1169,14 +1147,14 @@ msgid "" "FreeNAS 9.1.x or higher." msgstr "" -#: ../../sysadmclient.rst:1162 +#: ../../sysadmclient.rst:1191 msgid "" "The system must have SSH installed and the SSH service must be running. If " "the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is" " already installed, but you will need to start the SSH service." msgstr "" -#: ../../sysadmclient.rst:1167 +#: ../../sysadmclient.rst:1196 msgid "" "If the backup server is running |trueos| or |pcbsd|, you will need to open " "TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is " @@ -1186,7 +1164,7 @@ msgid "" "backup system, make sure it has a rule to allow SSH." msgstr "" -#: ../../sysadmclient.rst:1175 +#: ../../sysadmclient.rst:1204 msgid "" ":numref:`Figure %s ` shows the initial :guilabel:`Replication` " "tab on a system that has not yet been configured for replication. This " @@ -1194,29 +1172,29 @@ msgid "" "schedule." msgstr "" -#: ../../sysadmclient.rst:1186 +#: ../../sysadmclient.rst:1215 msgid "" "To schedule the replication, click :guilabel:`+` to display the \"Setup " "Replication\" screen shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1196 +#: ../../sysadmclient.rst:1225 msgid "Input the following information:" msgstr "" -#: ../../sysadmclient.rst:1198 +#: ../../sysadmclient.rst:1227 msgid "" "**Host IP:** The IP address of the remote system to store the replicated " "snapshots." msgstr "" -#: ../../sysadmclient.rst:1201 +#: ../../sysadmclient.rst:1230 msgid "" "**SSH Port:** The port number, if the remote system is running SSH on a port" " other than the default of 22." msgstr "" -#: ../../sysadmclient.rst:1204 +#: ../../sysadmclient.rst:1233 msgid "" "**Dataset:** The name of the ZFS pool and optional dataset on the remote " "system. For example, \"remotetank\" will save the snapshots to a ZFS pool of" @@ -1224,7 +1202,7 @@ msgid "" "existing dataset named \"mybackups\" on the pool named \"remotetank\"." msgstr "" -#: ../../sysadmclient.rst:1210 +#: ../../sysadmclient.rst:1239 msgid "" "**Frequency:** Use the drop-down menu to select how often to initiate the " "replication. Available choices are :guilabel:`Sync with snapshot` (at the " @@ -1235,87 +1213,87 @@ msgid "" ":guilabel:`Start`) in this screen." msgstr "" -#: ../../sysadmclient.rst:1219 +#: ../../sysadmclient.rst:1248 msgid "" "**Username:** The username must already exist on the remote system, have " "write access to the specified \"Dataset\", and have permission to SSH into " "that system." msgstr "" -#: ../../sysadmclient.rst:1223 +#: ../../sysadmclient.rst:1252 msgid "**Password:** The password associated with the \"Username\"." msgstr "" -#: ../../sysadmclient.rst:1225 +#: ../../sysadmclient.rst:1254 msgid "" "**Local DS:** Use the drop-down menu to select the pool or dataset to " "replicate to the remote system." msgstr "" -#: ../../sysadmclient.rst:1228 +#: ../../sysadmclient.rst:1257 msgid "" "The buttons at the top of the \"Setup Replication\" screen have several " "uses:" msgstr "" -#: ../../sysadmclient.rst:1231 +#: ../../sysadmclient.rst:1260 msgid "" "**+ icon:** Sdd a replication schedule. Multiple schedules are supported, " "meaning you can replicate to multiple systems or replicate different \"Local" " DS\" datasets at different times." msgstr "" -#: ../../sysadmclient.rst:1235 +#: ../../sysadmclient.rst:1264 msgid "" "**- icon:** Remove an already created, and highlighted, replication " "schedule." msgstr "" -#: ../../sysadmclient.rst:1238 +#: ../../sysadmclient.rst:1267 msgid "**gear icon:** Modify the schedule for the highlighted replication." msgstr "" -#: ../../sysadmclient.rst:1240 +#: ../../sysadmclient.rst:1269 msgid "" "**Start:** Manually starts a replication to the system specified in the " "highlighted replication." msgstr "" -#: ../../sysadmclient.rst:1243 +#: ../../sysadmclient.rst:1272 msgid "" "**Initialize:** Deletes the existing replicated snapshots on the remote " "system and starts a new replication. This is useful if a replication gets " "stuck and will not complete." msgstr "" -#: ../../sysadmclient.rst:1251 +#: ../../sysadmclient.rst:1280 msgid "Schedules Tab" msgstr "" -#: ../../sysadmclient.rst:1253 +#: ../../sysadmclient.rst:1282 msgid "" "This tab is used to manage when snapshots of the ZFS pool are created. " "Multiple snapshot schedules are supported if the system has multiple pools." msgstr "" -#: ../../sysadmclient.rst:1257 +#: ../../sysadmclient.rst:1286 msgid "" "Snapshots are created on the entire pool as they are needed when " ":ref:`Restoring the Operating System`." msgstr "" -#: ../../sysadmclient.rst:1260 +#: ../../sysadmclient.rst:1289 msgid "" "To create a snapshot schedule, click the :guilabel:`camera` icon in the " "lower left corner of this tab. This will activate the \"Setup Snapshot " "Schedule\" pane as seen in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1270 +#: ../../sysadmclient.rst:1299 msgid "This pane contains several options:" msgstr "" -#: ../../sysadmclient.rst:1275 +#: ../../sysadmclient.rst:1304 msgid "" "**Snapshots to keep:** Snapshots are automatically pruned after the " "specified number of snapshots to prevent snapshots from eventually using up " @@ -1326,7 +1304,7 @@ msgid "" "manually in the :guilabel:`Snapshots` tab." msgstr "" -#: ../../sysadmclient.rst:1284 +#: ../../sysadmclient.rst:1313 msgid "" "**Frequency:** Use the drop-down menu to select how often snapshots occur. " "Options include \"Daily\" (which will allow you to select the time of day), " @@ -1334,37 +1312,37 @@ msgid "" "Minutes\"." msgstr "" -#: ../../sysadmclient.rst:1289 +#: ../../sysadmclient.rst:1318 msgid "" "Once you have created a snapshot schedule, you can use the \"gear\" icon " "next to the \"camera\" icon to modify the highlighted schedule or the \"X\" " "icon to delete the highlighted schedule." msgstr "" -#: ../../sysadmclient.rst:1300 +#: ../../sysadmclient.rst:1329 msgid "" "To schedule when the scrub occurs, click the third icon from the right which" " will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure " "%s `." msgstr "" -#: ../../sysadmclient.rst:1318 +#: ../../sysadmclient.rst:1347 msgid "" "Once you have created a scrub schedule, you can use the \"gear\" icon next " "to the \"schedule scrub\" icon to modify the highlighted schedule or the " "\"X\" icon to delete the highlighted schedule." msgstr "" -#: ../../sysadmclient.rst:1328 +#: ../../sysadmclient.rst:1357 msgid "" "The :guilabel:`Settings` tab is shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1337 +#: ../../sysadmclient.rst:1366 msgid "Many settings are configurable:" msgstr "" -#: ../../sysadmclient.rst:1339 +#: ../../sysadmclient.rst:1368 msgid "" "**Disk Usage Warning:** Enter a number up to 99 to indicate at which " "percentage of disk space Life Preserver will display an alert in the system " @@ -1372,41 +1350,41 @@ msgid "" "space." msgstr "" -#: ../../sysadmclient.rst:1344 +#: ../../sysadmclient.rst:1373 msgid "" "**Email:** To receive an email when disk usage reaches the percentage " "configured in the \"Disk Usage Warning\", enter an email address." msgstr "" -#: ../../sysadmclient.rst:1347 +#: ../../sysadmclient.rst:1376 msgid "" "**Email Trigger:** This setting can be set to \"All\", \"Warn\", or " "\"Error\" and indicates the type of condition which will trigger an email " "message." msgstr "" -#: ../../sysadmclient.rst:1350 +#: ../../sysadmclient.rst:1379 msgid "**Recursive Management:**" msgstr "" -#: ../../sysadmclient.rst:1352 +#: ../../sysadmclient.rst:1381 msgid "" "If you make any changes in this screen, press :guilabel:`Save Settings` to " "apply them." msgstr "" -#: ../../sysadmclient.rst:1359 +#: ../../sysadmclient.rst:1388 msgid "Using the lpreserver CLI" msgstr "" -#: ../../sysadmclient.rst:1361 +#: ../../sysadmclient.rst:1390 msgid "" "The :command:`lpreserver` command line utility can also be used to manage " "snapshots and replication. This command needs to be run as the superuser. To" " display its usage, type the command without any arguments:" msgstr "" -#: ../../sysadmclient.rst:1381 +#: ../../sysadmclient.rst:1410 msgid "" "Each command has its own help text that describes its parameters and " "provides a usage example. For example, to receive help on how to use the " @@ -1417,104 +1395,104 @@ msgstr "" msgid "Command Line and GUI Equivalents" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**Command Line**" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**GUI**" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**Description**" msgstr "" -#: ../../sysadmclient.rst:1452 +#: ../../sysadmclient.rst:1481 msgid "**cronsnap**" msgstr "" -#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499 msgid "\"Snapshots\" tab" msgstr "" -#: ../../sysadmclient.rst:1452 +#: ../../sysadmclient.rst:1481 msgid "" "schedule when snapshots occur and how long to keep them; the **stop** option" " can be used to disable snapshot creation" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "**cronscrub**" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "\"Schedules\" tab" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "schedule a ZFS scrub" msgstr "" -#: ../../sysadmclient.rst:1459 +#: ../../sysadmclient.rst:1488 msgid "**get**" msgstr "" -#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495 msgid "\"Settings\" tab" msgstr "" -#: ../../sysadmclient.rst:1459 +#: ../../sysadmclient.rst:1488 msgid "list Life Preserver options" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "**replicate**" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "\"Replication\" tab" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "" "used to list, add, and remove backup server; read the **help** for this " "command for examples" msgstr "" -#: ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1495 msgid "**set**" msgstr "" -#: ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1495 msgid "" "configures Life Preserver options; read **help** for the list of " "configurable options" msgstr "" -#: ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1499 msgid "**snapshot**" msgstr "" -#: ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1499 msgid "" "create and replicate a new ZFS snapshot; by default, snapshots are " "recursive, meaning that a that a snapshot is taken of every dataset within a" " pool" msgstr "" -#: ../../sysadmclient.rst:1476 +#: ../../sysadmclient.rst:1505 msgid "**status**" msgstr "" -#: ../../sysadmclient.rst:1476 +#: ../../sysadmclient.rst:1505 msgid "lists the last snapshot name and replication status" msgstr "" -#: ../../sysadmclient.rst:1483 +#: ../../sysadmclient.rst:1512 msgid "Restoring the Operating System" msgstr "" -#: ../../sysadmclient.rst:1485 +#: ../../sysadmclient.rst:1514 msgid "" "If you have replicated the system's snapshots to a remote backup server, you" " can use a |trueos| installation media to perform an operating system " @@ -1522,7 +1500,7 @@ msgid "" "you get to the screen shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1497 +#: ../../sysadmclient.rst:1526 msgid "" "Before you can perform a restore, the network interface must be configured. " "Click :guilabel:`Network Connectivity` (second icon from the left) in order " @@ -1533,7 +1511,7 @@ msgid "" "continuing." msgstr "" -#: ../../sysadmclient.rst:1505 +#: ../../sysadmclient.rst:1534 msgid "" "Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and" " :guilabel:`Next`. This will start the Restore Wizard. In the screen shown " @@ -1543,7 +1521,7 @@ msgid "" "number." msgstr "" -#: ../../sysadmclient.rst:1519 +#: ../../sysadmclient.rst:1548 msgid "" "Click :guilabel:`Next` and the wizard will provide a summary of your " "selections. If correct, click :guilabel:`Finish`; otherwise, click " @@ -1626,7 +1604,7 @@ msgid "" "press :guilabel:`Close Ports`." msgstr "" -#: ../../sysadmclient.rst:1152 +#: ../../sysadmclient.rst:1181 msgid "" "Snapshots occurring too frequently can introduce errors in replication. To " "avoid errors, ensure snapshots are configured to take place slower than the " @@ -1685,7 +1663,7 @@ msgid "" "accounts." msgstr "" -#: ../../sysadmclient.rst:1065 +#: ../../sysadmclient.rst:1094 msgid "" "A snapshot provides a \"point-in-time\" image of the ZFS pool. This is " "similar to a full system backup as the snapshot contains the information for" @@ -1703,26 +1681,26 @@ msgid "" "snapshot." msgstr "" -#: ../../sysadmclient.rst:1272 +#: ../../sysadmclient.rst:1301 msgid "" "**Storage Pool:** Select the ZFS storage pool that contains the datasets " "that you wish to snapshot." msgstr "" -#: ../../sysadmclient.rst:1293 +#: ../../sysadmclient.rst:1322 msgid "" "This screen can also be used to manage the ZFS scrub schedule. Scrubs are " "recommended as they can provide an early indication of a potential disk " "failure. Scrubs can be scheduled on a per-pool basis." msgstr "" -#: ../../sysadmclient.rst:1297 +#: ../../sysadmclient.rst:1326 msgid "" "If you have multiple pools, be sure to create a scrub schedule for each " "pool." msgstr "" -#: ../../sysadmclient.rst:1310 +#: ../../sysadmclient.rst:1339 msgid "" "Select the pool from the :guilabel:`Storage Pool` drop-down menu, then " "select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", " @@ -1807,26 +1785,17 @@ msgstr "" msgid ": Viewing All Accounts and Their Details" msgstr "" -#: ../../sysadmclient.rst:930 +#: ../../sysadmclient.rst:938 msgid ": Initialize PersonaCrypt Device" msgstr "" -#: ../../sysadmclient.rst:932 -msgid "" -"Before a user is configured to use PersonaCrypt on a |trueos| system, two " -"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". " -"Note this section is hidden if the currently logged in user is selected. " -"Also, if you have just created a user and do not see these options, click " -":guilabel:`Save` then re-highlight the user to display these options:" -msgstr "" - -#: ../../sysadmclient.rst:947 +#: ../../sysadmclient.rst:955 msgid "" "To prepare a PersonaCrypt device for this user, insert a USB stick and click" " :guilabel:`Initialize Device`." msgstr "" -#: ../../sysadmclient.rst:957 +#: ../../sysadmclient.rst:965 msgid "" "Type a password to associate with the device. Click :guilabel:`Save` to " "initialize the device. The User Manager may take a moment to prepare the " @@ -1834,49 +1803,49 @@ msgid "" " to allow removal of PersonaCrypt." msgstr "" -#: ../../sysadmclient.rst:1027 +#: ../../sysadmclient.rst:1056 msgid ": Managing Groups Using User Manager" msgstr "" -#: ../../sysadmclient.rst:1110 +#: ../../sysadmclient.rst:1139 msgid ": Snapshot Tab" msgstr "" -#: ../../sysadmclient.rst:1184 +#: ../../sysadmclient.rst:1213 msgid ": Replication Tab" msgstr "" -#: ../../sysadmclient.rst:1194 +#: ../../sysadmclient.rst:1223 msgid ": Scheduling a Replication" msgstr "" -#: ../../sysadmclient.rst:1268 +#: ../../sysadmclient.rst:1297 msgid ": Scheduling a Snapshot" msgstr "" -#: ../../sysadmclient.rst:1308 +#: ../../sysadmclient.rst:1337 msgid ": Scheduling a Scrub" msgstr "" -#: ../../sysadmclient.rst:1335 +#: ../../sysadmclient.rst:1364 msgid ": Life Preserver Settings" msgstr "" -#: ../../sysadmclient.rst:1442 +#: ../../sysadmclient.rst:1471 msgid "" ":numref:`Table %s ` shows the command line equivalents to the " "graphical options provided by the Life Preserver GUI." msgstr "" -#: ../../sysadmclient.rst:1495 +#: ../../sysadmclient.rst:1524 msgid ": Selecting to Restore/Clone From Backup" msgstr "" -#: ../../sysadmclient.rst:1517 +#: ../../sysadmclient.rst:1546 msgid ": Input the Information for a SSH Restore" msgstr "" -#: ../../sysadmclient.rst:1523 +#: ../../sysadmclient.rst:1552 msgid "" "Once the connection to the backup server succeeds, you will be able to " "select which host to restore. After making your selection, click " @@ -1892,7 +1861,7 @@ msgid "" ":guilabel:`Next` to perform the restore." msgstr "" -#: ../../sysadmclient.rst:987 +#: ../../sysadmclient.rst:970 msgid "" "Once a user has been initialized for PersonaCrypt on the system, their user " "account will no longer be displayed when logging in, **unless** their " @@ -1901,7 +1870,7 @@ msgid "" ":numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:997 +#: ../../sysadmclient.rst:980 msgid ": |trueos| Login Screen with PersonaCrypt" msgstr "" @@ -1949,7 +1918,7 @@ msgstr "" msgid ": |sysadm| Task Manager" msgstr "" -#: ../../sysadmclient.rst:1103 +#: ../../sysadmclient.rst:1132 msgid "" ":numref:`Figure %s ` shows the :guilabel:`Snapshots` tab on a " "system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"." @@ -2013,6 +1982,134 @@ msgid "" ":guilabel:`Save Settings`." msgstr "" +#: ../../sysadmclient.rst:894 +msgid "" +"|trueos| provides support for a security feature known as PersonaCrypt. A " +"PersonaCrypt device is a removable USB media, such as a USB flash drive, " +"formatted with ZFS and encrypted with either GELI or PEFS. This device is " +"used to hold a specific user's home directory, meaning they can securely " +"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 " +"or higher system. For example, this can be used to securely access one's " +"home directory from a laptop, home computer, and work computer. The device " +"is protected by an encryption key and a different (recommended) password " +"separate from the user's login password." +msgstr "" + +#: ../../sysadmclient.rst:916 +msgid "GELI" +msgstr "" + +#: ../../sysadmclient.rst:918 +msgid "" +"PersonaCrypt uses GELI's ability to split the key into two parts: one being " +"your passphrase, and the other being a key stored on disk. Without both of " +"these parts, the media cannot be decrypted. This means if somebody steals " +"the key and manages to get your password, it is still worthless without the " +"system it was paired with. GELI is used by default in |trueos| as it is more" +" fully featured over PEFS." +msgstr "" + +#: ../../sysadmclient.rst:940 +msgid "" +"Before a user is configured to use PersonaCrypt on a |trueos| system, two " +"buttons are available in the :guilabel:`PersonaCrypt` tab of " +":guilabel:`Advanced Mode`. Note this section is hidden if the currently " +"logged in user is selected. Also, if you have just created a user and do not" +" see these options, click :guilabel:`Save`, then re-highlight the user to " +"display these options:" +msgstr "" + +#: ../../sysadmclient.rst:999 +msgid "PEFS" +msgstr "" + +#: ../../sysadmclient.rst:1001 +msgid "" +"`PEFS `_ stands for Private Encrypted File System. It is " +"open source software freely available under the BSD license, and is included" +" in |trueos| by default. PEFS runs on top of any existing file system, " +"providing an encryption layer independent of the underlying file system. " +"PersonaCrypt can be configured to use PEFS in place of GELI, which " +"eliminates the need for external media, as the encrypted PEFS database is " +"stored on the local disk." +msgstr "" + +#: ../../sysadmclient.rst:1009 +msgid "" +"While PEFS does not use a USB drive, be sure to print or otherwise backup " +"the PEFS generated key fragment stored on the disk." +msgstr "" + +#: ../../sysadmclient.rst:1012 +msgid "**Initialize PEFS with the Command Line**" +msgstr "" + +#: ../../sysadmclient.rst:1014 +msgid "" +"Because PEFS does not use a USB drive with its encryption, the user will " +"need a password file (pfile) containing the desired password, **before** " +"initializing PEFS for a user account. Once this pfile is created, enabling " +"PEFS through PersonaCrypt is accomplished in a CLI with " +":command:`personacrypt init PEFS`." +msgstr "" + +#: ../../sysadmclient.rst:1020 +msgid "" +"For example, the user account **test** has a pfile named " +":file:`testpfile.txt`, which contains the single text string of **test's** " +"chosen password. Next, the administrator adds PEFS encryption to the " +"**test** acount by opening a CLI, logging in as root, and typing:" +msgstr "" + +#: ../../sysadmclient.rst:1029 +msgid "" +"PersonaCrypt will initialize the account **test** with PEFS, using the " +"string in :file:`testpfile.txt` as the new password." +msgstr "" + +#: ../../sysadmclient.rst:1032 +msgid "" +"The |sysadm| User Manager can also initialize a user account with PEFS by " +"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` " +"drop down menu of the :guilabel:`PersonaCrypt` tab." +msgstr "" + +#: ../../sysadmclient.rst:1036 +msgid "" +"In addition to initializing an account with PEFS, PersonaCrypt also supports" +" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt " +"export ` and :command:`personacrypt import `, " +"respectively." +msgstr "" + +#~ msgid "" +#~ "|trueos| provides support for a security feature known as PersonaCrypt. A " +#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted" +#~ " with ZFS and encrypted with GELI. This device is used to hold a specific " +#~ "user's home directory, meaning they can securely transport and access their " +#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For " +#~ "example, this can be used to securely access one's home directory from a " +#~ "laptop, home computer, and work computer. The device is protected by an " +#~ "encryption key and a password which is, and should be, separate from the " +#~ "user's login password." +#~ msgstr "" + +#~ msgid "" +#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being " +#~ "your passphrase, and the other being a key stored on disk. Without both of " +#~ "these parts, the media cannot be decrypted. This means if somebody steals " +#~ "the key and manages to get your password, it is still worthless without the " +#~ "system it was paired with." +#~ msgstr "" + +#~ msgid "" +#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two " +#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". " +#~ "Note this section is hidden if the currently logged in user is selected. " +#~ "Also, if you have just created a user and do not see these options, click " +#~ ":guilabel:`Save` then re-highlight the user to display these options:" +#~ msgstr "" + #~ msgid "" #~ "**Max Boot Environments:** |trueos| automatically creates a boot environment" #~ " before updating any software, the operating system, or applying a system " diff --git a/docs/client_handbook/po/zh_HK/LC_MESSAGES/sysadmclient.po b/docs/client_handbook/po/zh_HK/LC_MESSAGES/sysadmclient.po index 25c5ac5..e4a2632 100644 --- a/docs/client_handbook/po/zh_HK/LC_MESSAGES/sysadmclient.po +++ b/docs/client_handbook/po/zh_HK/LC_MESSAGES/sysadmclient.po @@ -482,7 +482,7 @@ msgid "" "The :guilabel:`Settings` tab is shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1326 +#: ../../sysadmclient.rst:1355 msgid "Settings Tab" msgstr "" @@ -924,20 +924,7 @@ msgstr "" msgid "PersonaCrypt" msgstr "" -#: ../../sysadmclient.rst:894 -msgid "" -"|trueos| provides support for a security feature known as PersonaCrypt. A " -"PersonaCrypt device is a removable USB media, such as a USB stick, formatted" -" with ZFS and encrypted with GELI. This device is used to hold a specific " -"user's home directory, meaning they can securely transport and access their " -"personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For " -"example, this can be used to securely access one's home directory from a " -"laptop, home computer, and work computer. The device is protected by an " -"encryption key and a password which is, and should be, separate from the " -"user's login password." -msgstr "" - -#: ../../sysadmclient.rst:904 +#: ../../sysadmclient.rst:905 msgid "" "When a user is configured to use a PersonaCrypt device, that user can not " "login using an unencrypted session on the same system. In other words, the " @@ -946,22 +933,13 @@ msgid "" "different user accounts, one for each type of session." msgstr "" -#: ../../sysadmclient.rst:911 -msgid "" -"PersonaCrypt uses GELI's ability to split the key into two parts: one being " -"your passphrase, and the other being a key stored on disk. Without both of " -"these parts, the media cannot be decrypted. This means if somebody steals " -"the key and manages to get your password, it is still worthless without the " -"system it was paired with." -msgstr "" - -#: ../../sysadmclient.rst:917 +#: ../../sysadmclient.rst:925 msgid "" "USB devices do eventually fail. Always backup any important files stored on " "the PersonaCrypt device to another device or system." msgstr "" -#: ../../sysadmclient.rst:920 +#: ../../sysadmclient.rst:928 msgid "" "The :guilabel:`PersonaCrypt` tab can be used to initialize a PersonaCrypt " "device for any login user, **except** for the currently logged in user. In " @@ -969,13 +947,13 @@ msgid "" "*dlavigne*, has been created and the entry for the user has been clicked." msgstr "" -#: ../../sysadmclient.rst:939 +#: ../../sysadmclient.rst:947 msgid "" "**Initialize Device:** Used to prepare the USB device which will be used as " "the user's home directory." msgstr "" -#: ../../sysadmclient.rst:942 +#: ../../sysadmclient.rst:950 msgid "" "**Import Key:** If the user has already created a PersonaCrypt device on " "another |trueos| system, click this button to import a previously saved copy" @@ -983,7 +961,7 @@ msgid "" "can now login to this computer using PersonaCrypt." msgstr "" -#: ../../sysadmclient.rst:950 +#: ../../sysadmclient.rst:958 msgid "" "Since the USB stick will hold the user's home directory and files, ensure " "the stick is large enough to meet the anticipated storage needs of the home " @@ -993,7 +971,7 @@ msgid "" "logged in." msgstr "" -#: ../../sysadmclient.rst:999 +#: ../../sysadmclient.rst:982 msgid "" "When stealth sessions have been configured, PersonaCrypt users will still be" " displayed in the login menu, even if their USB device is not inserted. This" @@ -1001,47 +979,47 @@ msgid "" "session." msgstr "" -#: ../../sysadmclient.rst:1004 +#: ../../sysadmclient.rst:987 msgid "" "In the field with the yellow padlock icon, input the password for the user " "account. In the field with the grey USB stick icon, input the password " "associated with the PersonaCrypt device." msgstr "" -#: ../../sysadmclient.rst:1008 +#: ../../sysadmclient.rst:991 msgid "" "To prevent data corruption and freezing the system **DO NOT** remove the " "PersonaCrypt device while logged in! Always log out of your session before " "physically removing the device." msgstr "" -#: ../../sysadmclient.rst:1016 +#: ../../sysadmclient.rst:1045 msgid "Managing Groups" msgstr "" -#: ../../sysadmclient.rst:1018 +#: ../../sysadmclient.rst:1047 msgid "" "Click the :guilabel:`Groups` tab to view and manage the groups on the " "system. The :guilabel:`Standard` tab, seen in :numref:`Figure %s `, " "shows the group membership for the *operator* and *wheel* groups:" msgstr "" -#: ../../sysadmclient.rst:1029 +#: ../../sysadmclient.rst:1058 msgid "This screen has 2 columns:" msgstr "" -#: ../../sysadmclient.rst:1031 +#: ../../sysadmclient.rst:1060 msgid "" "**Members:** Indicates if the highlighted group contains any user accounts." msgstr "" -#: ../../sysadmclient.rst:1034 +#: ../../sysadmclient.rst:1063 msgid "" "**Available:** Shows all of the system and user accounts on the system in " "alphabetical order." msgstr "" -#: ../../sysadmclient.rst:1037 +#: ../../sysadmclient.rst:1066 msgid "" "To add an account to a group, highlight the group name, then highlight the " "account name in the :guilabel:`Available` column. Click the left arrow and " @@ -1051,7 +1029,7 @@ msgid "" "added to a group." msgstr "" -#: ../../sysadmclient.rst:1044 +#: ../../sysadmclient.rst:1073 msgid "" "If you add a user to the *operator* group, they will have permission to use " "commands requiring administrative access and will be prompted for their own " @@ -1060,15 +1038,15 @@ msgid "" "will be prompted for the superuser password whenever they use the command." msgstr "" -#: ../../sysadmclient.rst:1051 +#: ../../sysadmclient.rst:1080 msgid "To view all of the groups on the system, click :guilabel:`Advanced`." msgstr "" -#: ../../sysadmclient.rst:1057 +#: ../../sysadmclient.rst:1086 msgid "Life Preserver" msgstr "" -#: ../../sysadmclient.rst:1059 +#: ../../sysadmclient.rst:1088 msgid "" "The Life Preserver utility is designed to take full advantage of the " "functionality provided by ZFS snapshots. This utility allows you to schedule" @@ -1077,25 +1055,25 @@ msgid "" "benefits:" msgstr "" -#: ../../sysadmclient.rst:1081 +#: ../../sysadmclient.rst:1110 msgid "" "Replication is an efficient way to keep the files on two systems in sync. " "With Life Preserver, the snapshots taken on the |trueos| system will be " "synchronized with their versions stored on the specified backup server." msgstr "" -#: ../../sysadmclient.rst:1086 +#: ../../sysadmclient.rst:1115 msgid "Snapshots are sent to the backup server over an encrypted connection." msgstr "" -#: ../../sysadmclient.rst:1088 +#: ../../sysadmclient.rst:1117 msgid "" "Having a copy of the snapshots on another system makes it possible to " "perform an operating system restore should the |trueos| system become " "unusable or to deploy an identical system to different hardware." msgstr "" -#: ../../sysadmclient.rst:1092 +#: ../../sysadmclient.rst:1121 msgid "" "To manage snapshots and replication using the |sysadm| graphical client, go " "to :menuselection:`Utilities --> Life Preserver`. The rest of this section " @@ -1103,16 +1081,16 @@ msgid "" "Preserver." msgstr "" -#: ../../sysadmclient.rst:1101 +#: ../../sysadmclient.rst:1130 msgid "Snapshots Tab" msgstr "" -#: ../../sysadmclient.rst:1112 +#: ../../sysadmclient.rst:1141 msgid "" "This screen will display any created snapshots and provides buttons to:" msgstr "" -#: ../../sysadmclient.rst:1114 +#: ../../sysadmclient.rst:1143 msgid "" "**Create:** Used to create a manual snapshot of the specified pool now. For " "example, you could create a snapshot before making changes to an important " @@ -1126,14 +1104,14 @@ msgid "" "snapshot was created." msgstr "" -#: ../../sysadmclient.rst:1125 +#: ../../sysadmclient.rst:1154 msgid "" "**Remove:** Used to delete a highlighted snapshot. **This is a permanent " "change that can not be reversed.** In other words, the versions of files at " "the point in time the snapshot was created will be lost." msgstr "" -#: ../../sysadmclient.rst:1130 +#: ../../sysadmclient.rst:1159 msgid "" "**Revert:** If you highlight a snapshot entry, this button and the drop-down" " menu next to it will activate. You can use the drop-down menu to specify " @@ -1143,11 +1121,11 @@ msgid "" " after the snapshot was taken will be lost." msgstr "" -#: ../../sysadmclient.rst:1142 +#: ../../sysadmclient.rst:1171 msgid "Replication Tab" msgstr "" -#: ../../sysadmclient.rst:1144 +#: ../../sysadmclient.rst:1173 msgid "" "Life Preserver can be configured to replicate snapshots to another system " "over an encrypted SSH connection, though the backup itself is stored in an " @@ -1155,13 +1133,13 @@ msgid "" " another system." msgstr "" -#: ../../sysadmclient.rst:1149 +#: ../../sysadmclient.rst:1178 msgid "" "In order to configure replication, the remote system to hold a copy of the " "snapshots must first meet several requirements:" msgstr "" -#: ../../sysadmclient.rst:1156 +#: ../../sysadmclient.rst:1185 msgid "" "The backup server **must be formatted with the latest version of ZFS,** also" " known as ZFS feature flags or ZFSv5000. Operating systems that support this" @@ -1169,14 +1147,14 @@ msgid "" "FreeNAS 9.1.x or higher." msgstr "" -#: ../../sysadmclient.rst:1162 +#: ../../sysadmclient.rst:1191 msgid "" "The system must have SSH installed and the SSH service must be running. If " "the backup server is running |trueos|, |pcbsd|, |freenas| or FreeBSD, SSH is" " already installed, but you will need to start the SSH service." msgstr "" -#: ../../sysadmclient.rst:1167 +#: ../../sysadmclient.rst:1196 msgid "" "If the backup server is running |trueos| or |pcbsd|, you will need to open " "TCP port 22 (SSH) using the :guilabel:`Firewall Manager`. If the server is " @@ -1186,7 +1164,7 @@ msgid "" "backup system, make sure it has a rule to allow SSH." msgstr "" -#: ../../sysadmclient.rst:1175 +#: ../../sysadmclient.rst:1204 msgid "" ":numref:`Figure %s ` shows the initial :guilabel:`Replication` " "tab on a system that has not yet been configured for replication. This " @@ -1194,29 +1172,29 @@ msgid "" "schedule." msgstr "" -#: ../../sysadmclient.rst:1186 +#: ../../sysadmclient.rst:1215 msgid "" "To schedule the replication, click :guilabel:`+` to display the \"Setup " "Replication\" screen shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1196 +#: ../../sysadmclient.rst:1225 msgid "Input the following information:" msgstr "" -#: ../../sysadmclient.rst:1198 +#: ../../sysadmclient.rst:1227 msgid "" "**Host IP:** The IP address of the remote system to store the replicated " "snapshots." msgstr "" -#: ../../sysadmclient.rst:1201 +#: ../../sysadmclient.rst:1230 msgid "" "**SSH Port:** The port number, if the remote system is running SSH on a port" " other than the default of 22." msgstr "" -#: ../../sysadmclient.rst:1204 +#: ../../sysadmclient.rst:1233 msgid "" "**Dataset:** The name of the ZFS pool and optional dataset on the remote " "system. For example, \"remotetank\" will save the snapshots to a ZFS pool of" @@ -1224,7 +1202,7 @@ msgid "" "existing dataset named \"mybackups\" on the pool named \"remotetank\"." msgstr "" -#: ../../sysadmclient.rst:1210 +#: ../../sysadmclient.rst:1239 msgid "" "**Frequency:** Use the drop-down menu to select how often to initiate the " "replication. Available choices are :guilabel:`Sync with snapshot` (at the " @@ -1235,87 +1213,87 @@ msgid "" ":guilabel:`Start`) in this screen." msgstr "" -#: ../../sysadmclient.rst:1219 +#: ../../sysadmclient.rst:1248 msgid "" "**Username:** The username must already exist on the remote system, have " "write access to the specified \"Dataset\", and have permission to SSH into " "that system." msgstr "" -#: ../../sysadmclient.rst:1223 +#: ../../sysadmclient.rst:1252 msgid "**Password:** The password associated with the \"Username\"." msgstr "" -#: ../../sysadmclient.rst:1225 +#: ../../sysadmclient.rst:1254 msgid "" "**Local DS:** Use the drop-down menu to select the pool or dataset to " "replicate to the remote system." msgstr "" -#: ../../sysadmclient.rst:1228 +#: ../../sysadmclient.rst:1257 msgid "" "The buttons at the top of the \"Setup Replication\" screen have several " "uses:" msgstr "" -#: ../../sysadmclient.rst:1231 +#: ../../sysadmclient.rst:1260 msgid "" "**+ icon:** Sdd a replication schedule. Multiple schedules are supported, " "meaning you can replicate to multiple systems or replicate different \"Local" " DS\" datasets at different times." msgstr "" -#: ../../sysadmclient.rst:1235 +#: ../../sysadmclient.rst:1264 msgid "" "**- icon:** Remove an already created, and highlighted, replication " "schedule." msgstr "" -#: ../../sysadmclient.rst:1238 +#: ../../sysadmclient.rst:1267 msgid "**gear icon:** Modify the schedule for the highlighted replication." msgstr "" -#: ../../sysadmclient.rst:1240 +#: ../../sysadmclient.rst:1269 msgid "" "**Start:** Manually starts a replication to the system specified in the " "highlighted replication." msgstr "" -#: ../../sysadmclient.rst:1243 +#: ../../sysadmclient.rst:1272 msgid "" "**Initialize:** Deletes the existing replicated snapshots on the remote " "system and starts a new replication. This is useful if a replication gets " "stuck and will not complete." msgstr "" -#: ../../sysadmclient.rst:1251 +#: ../../sysadmclient.rst:1280 msgid "Schedules Tab" msgstr "" -#: ../../sysadmclient.rst:1253 +#: ../../sysadmclient.rst:1282 msgid "" "This tab is used to manage when snapshots of the ZFS pool are created. " "Multiple snapshot schedules are supported if the system has multiple pools." msgstr "" -#: ../../sysadmclient.rst:1257 +#: ../../sysadmclient.rst:1286 msgid "" "Snapshots are created on the entire pool as they are needed when " ":ref:`Restoring the Operating System`." msgstr "" -#: ../../sysadmclient.rst:1260 +#: ../../sysadmclient.rst:1289 msgid "" "To create a snapshot schedule, click the :guilabel:`camera` icon in the " "lower left corner of this tab. This will activate the \"Setup Snapshot " "Schedule\" pane as seen in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1270 +#: ../../sysadmclient.rst:1299 msgid "This pane contains several options:" msgstr "" -#: ../../sysadmclient.rst:1275 +#: ../../sysadmclient.rst:1304 msgid "" "**Snapshots to keep:** Snapshots are automatically pruned after the " "specified number of snapshots to prevent snapshots from eventually using up " @@ -1326,7 +1304,7 @@ msgid "" "manually in the :guilabel:`Snapshots` tab." msgstr "" -#: ../../sysadmclient.rst:1284 +#: ../../sysadmclient.rst:1313 msgid "" "**Frequency:** Use the drop-down menu to select how often snapshots occur. " "Options include \"Daily\" (which will allow you to select the time of day), " @@ -1334,37 +1312,37 @@ msgid "" "Minutes\"." msgstr "" -#: ../../sysadmclient.rst:1289 +#: ../../sysadmclient.rst:1318 msgid "" "Once you have created a snapshot schedule, you can use the \"gear\" icon " "next to the \"camera\" icon to modify the highlighted schedule or the \"X\" " "icon to delete the highlighted schedule." msgstr "" -#: ../../sysadmclient.rst:1300 +#: ../../sysadmclient.rst:1329 msgid "" "To schedule when the scrub occurs, click the third icon from the right which" " will activate the \"Setup Scrub Schedule\" screen shown in :numref:`Figure " "%s `." msgstr "" -#: ../../sysadmclient.rst:1318 +#: ../../sysadmclient.rst:1347 msgid "" "Once you have created a scrub schedule, you can use the \"gear\" icon next " "to the \"schedule scrub\" icon to modify the highlighted schedule or the " "\"X\" icon to delete the highlighted schedule." msgstr "" -#: ../../sysadmclient.rst:1328 +#: ../../sysadmclient.rst:1357 msgid "" "The :guilabel:`Settings` tab is shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1337 +#: ../../sysadmclient.rst:1366 msgid "Many settings are configurable:" msgstr "" -#: ../../sysadmclient.rst:1339 +#: ../../sysadmclient.rst:1368 msgid "" "**Disk Usage Warning:** Enter a number up to 99 to indicate at which " "percentage of disk space Life Preserver will display an alert in the system " @@ -1372,41 +1350,41 @@ msgid "" "space." msgstr "" -#: ../../sysadmclient.rst:1344 +#: ../../sysadmclient.rst:1373 msgid "" "**Email:** To receive an email when disk usage reaches the percentage " "configured in the \"Disk Usage Warning\", enter an email address." msgstr "" -#: ../../sysadmclient.rst:1347 +#: ../../sysadmclient.rst:1376 msgid "" "**Email Trigger:** This setting can be set to \"All\", \"Warn\", or " "\"Error\" and indicates the type of condition which will trigger an email " "message." msgstr "" -#: ../../sysadmclient.rst:1350 +#: ../../sysadmclient.rst:1379 msgid "**Recursive Management:**" msgstr "" -#: ../../sysadmclient.rst:1352 +#: ../../sysadmclient.rst:1381 msgid "" "If you make any changes in this screen, press :guilabel:`Save Settings` to " "apply them." msgstr "" -#: ../../sysadmclient.rst:1359 +#: ../../sysadmclient.rst:1388 msgid "Using the lpreserver CLI" msgstr "" -#: ../../sysadmclient.rst:1361 +#: ../../sysadmclient.rst:1390 msgid "" "The :command:`lpreserver` command line utility can also be used to manage " "snapshots and replication. This command needs to be run as the superuser. To" " display its usage, type the command without any arguments:" msgstr "" -#: ../../sysadmclient.rst:1381 +#: ../../sysadmclient.rst:1410 msgid "" "Each command has its own help text that describes its parameters and " "provides a usage example. For example, to receive help on how to use the " @@ -1417,104 +1395,104 @@ msgstr "" msgid "Command Line and GUI Equivalents" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**Command Line**" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**GUI**" msgstr "" -#: ../../sysadmclient.rst:1450 +#: ../../sysadmclient.rst:1479 msgid "**Description**" msgstr "" -#: ../../sysadmclient.rst:1452 +#: ../../sysadmclient.rst:1481 msgid "**cronsnap**" msgstr "" -#: ../../sysadmclient.rst:1452 ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1481 ../../sysadmclient.rst:1499 msgid "\"Snapshots\" tab" msgstr "" -#: ../../sysadmclient.rst:1452 +#: ../../sysadmclient.rst:1481 msgid "" "schedule when snapshots occur and how long to keep them; the **stop** option" " can be used to disable snapshot creation" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "**cronscrub**" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "\"Schedules\" tab" msgstr "" -#: ../../sysadmclient.rst:1457 +#: ../../sysadmclient.rst:1486 msgid "schedule a ZFS scrub" msgstr "" -#: ../../sysadmclient.rst:1459 +#: ../../sysadmclient.rst:1488 msgid "**get**" msgstr "" -#: ../../sysadmclient.rst:1459 ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1488 ../../sysadmclient.rst:1495 msgid "\"Settings\" tab" msgstr "" -#: ../../sysadmclient.rst:1459 +#: ../../sysadmclient.rst:1488 msgid "list Life Preserver options" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "**replicate**" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "\"Replication\" tab" msgstr "" -#: ../../sysadmclient.rst:1461 +#: ../../sysadmclient.rst:1490 msgid "" "used to list, add, and remove backup server; read the **help** for this " "command for examples" msgstr "" -#: ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1495 msgid "**set**" msgstr "" -#: ../../sysadmclient.rst:1466 +#: ../../sysadmclient.rst:1495 msgid "" "configures Life Preserver options; read **help** for the list of " "configurable options" msgstr "" -#: ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1499 msgid "**snapshot**" msgstr "" -#: ../../sysadmclient.rst:1470 +#: ../../sysadmclient.rst:1499 msgid "" "create and replicate a new ZFS snapshot; by default, snapshots are " "recursive, meaning that a that a snapshot is taken of every dataset within a" " pool" msgstr "" -#: ../../sysadmclient.rst:1476 +#: ../../sysadmclient.rst:1505 msgid "**status**" msgstr "" -#: ../../sysadmclient.rst:1476 +#: ../../sysadmclient.rst:1505 msgid "lists the last snapshot name and replication status" msgstr "" -#: ../../sysadmclient.rst:1483 +#: ../../sysadmclient.rst:1512 msgid "Restoring the Operating System" msgstr "" -#: ../../sysadmclient.rst:1485 +#: ../../sysadmclient.rst:1514 msgid "" "If you have replicated the system's snapshots to a remote backup server, you" " can use a |trueos| installation media to perform an operating system " @@ -1522,7 +1500,7 @@ msgid "" "you get to the screen shown in :numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:1497 +#: ../../sysadmclient.rst:1526 msgid "" "Before you can perform a restore, the network interface must be configured. " "Click :guilabel:`Network Connectivity` (second icon from the left) in order " @@ -1533,7 +1511,7 @@ msgid "" "continuing." msgstr "" -#: ../../sysadmclient.rst:1505 +#: ../../sysadmclient.rst:1534 msgid "" "Once you are ready, click :guilabel:`Restore from Life-Preserver backup` and" " :guilabel:`Next`. This will start the Restore Wizard. In the screen shown " @@ -1543,7 +1521,7 @@ msgid "" "number." msgstr "" -#: ../../sysadmclient.rst:1519 +#: ../../sysadmclient.rst:1548 msgid "" "Click :guilabel:`Next` and the wizard will provide a summary of your " "selections. If correct, click :guilabel:`Finish`; otherwise, click " @@ -1626,7 +1604,7 @@ msgid "" "press :guilabel:`Close Ports`." msgstr "" -#: ../../sysadmclient.rst:1152 +#: ../../sysadmclient.rst:1181 msgid "" "Snapshots occurring too frequently can introduce errors in replication. To " "avoid errors, ensure snapshots are configured to take place slower than the " @@ -1685,7 +1663,7 @@ msgid "" "accounts." msgstr "" -#: ../../sysadmclient.rst:1065 +#: ../../sysadmclient.rst:1094 msgid "" "A snapshot provides a \"point-in-time\" image of the ZFS pool. This is " "similar to a full system backup as the snapshot contains the information for" @@ -1703,26 +1681,26 @@ msgid "" "snapshot." msgstr "" -#: ../../sysadmclient.rst:1272 +#: ../../sysadmclient.rst:1301 msgid "" "**Storage Pool:** Select the ZFS storage pool that contains the datasets " "that you wish to snapshot." msgstr "" -#: ../../sysadmclient.rst:1293 +#: ../../sysadmclient.rst:1322 msgid "" "This screen can also be used to manage the ZFS scrub schedule. Scrubs are " "recommended as they can provide an early indication of a potential disk " "failure. Scrubs can be scheduled on a per-pool basis." msgstr "" -#: ../../sysadmclient.rst:1297 +#: ../../sysadmclient.rst:1326 msgid "" "If you have multiple pools, be sure to create a scrub schedule for each " "pool." msgstr "" -#: ../../sysadmclient.rst:1310 +#: ../../sysadmclient.rst:1339 msgid "" "Select the pool from the :guilabel:`Storage Pool` drop-down menu, then " "select the :guilabel:`Frequency`. Supported frequencies are \"Daily\", " @@ -1807,26 +1785,17 @@ msgstr "" msgid ": Viewing All Accounts and Their Details" msgstr "" -#: ../../sysadmclient.rst:930 +#: ../../sysadmclient.rst:938 msgid ": Initialize PersonaCrypt Device" msgstr "" -#: ../../sysadmclient.rst:932 -msgid "" -"Before a user is configured to use PersonaCrypt on a |trueos| system, two " -"buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". " -"Note this section is hidden if the currently logged in user is selected. " -"Also, if you have just created a user and do not see these options, click " -":guilabel:`Save` then re-highlight the user to display these options:" -msgstr "" - -#: ../../sysadmclient.rst:947 +#: ../../sysadmclient.rst:955 msgid "" "To prepare a PersonaCrypt device for this user, insert a USB stick and click" " :guilabel:`Initialize Device`." msgstr "" -#: ../../sysadmclient.rst:957 +#: ../../sysadmclient.rst:965 msgid "" "Type a password to associate with the device. Click :guilabel:`Save` to " "initialize the device. The User Manager may take a moment to prepare the " @@ -1834,49 +1803,49 @@ msgid "" " to allow removal of PersonaCrypt." msgstr "" -#: ../../sysadmclient.rst:1027 +#: ../../sysadmclient.rst:1056 msgid ": Managing Groups Using User Manager" msgstr "" -#: ../../sysadmclient.rst:1110 +#: ../../sysadmclient.rst:1139 msgid ": Snapshot Tab" msgstr "" -#: ../../sysadmclient.rst:1184 +#: ../../sysadmclient.rst:1213 msgid ": Replication Tab" msgstr "" -#: ../../sysadmclient.rst:1194 +#: ../../sysadmclient.rst:1223 msgid ": Scheduling a Replication" msgstr "" -#: ../../sysadmclient.rst:1268 +#: ../../sysadmclient.rst:1297 msgid ": Scheduling a Snapshot" msgstr "" -#: ../../sysadmclient.rst:1308 +#: ../../sysadmclient.rst:1337 msgid ": Scheduling a Scrub" msgstr "" -#: ../../sysadmclient.rst:1335 +#: ../../sysadmclient.rst:1364 msgid ": Life Preserver Settings" msgstr "" -#: ../../sysadmclient.rst:1442 +#: ../../sysadmclient.rst:1471 msgid "" ":numref:`Table %s ` shows the command line equivalents to the " "graphical options provided by the Life Preserver GUI." msgstr "" -#: ../../sysadmclient.rst:1495 +#: ../../sysadmclient.rst:1524 msgid ": Selecting to Restore/Clone From Backup" msgstr "" -#: ../../sysadmclient.rst:1517 +#: ../../sysadmclient.rst:1546 msgid ": Input the Information for a SSH Restore" msgstr "" -#: ../../sysadmclient.rst:1523 +#: ../../sysadmclient.rst:1552 msgid "" "Once the connection to the backup server succeeds, you will be able to " "select which host to restore. After making your selection, click " @@ -1892,7 +1861,7 @@ msgid "" ":guilabel:`Next` to perform the restore." msgstr "" -#: ../../sysadmclient.rst:987 +#: ../../sysadmclient.rst:970 msgid "" "Once a user has been initialized for PersonaCrypt on the system, their user " "account will no longer be displayed when logging in, **unless** their " @@ -1901,7 +1870,7 @@ msgid "" ":numref:`Figure %s `." msgstr "" -#: ../../sysadmclient.rst:997 +#: ../../sysadmclient.rst:980 msgid ": |trueos| Login Screen with PersonaCrypt" msgstr "" @@ -1949,7 +1918,7 @@ msgstr "" msgid ": |sysadm| Task Manager" msgstr "" -#: ../../sysadmclient.rst:1103 +#: ../../sysadmclient.rst:1132 msgid "" ":numref:`Figure %s ` shows the :guilabel:`Snapshots` tab on a " "system not yet configured. This system has a \"ZFS Pool\" named \"tank1\"." @@ -2013,6 +1982,134 @@ msgid "" ":guilabel:`Save Settings`." msgstr "" +#: ../../sysadmclient.rst:894 +msgid "" +"|trueos| provides support for a security feature known as PersonaCrypt. A " +"PersonaCrypt device is a removable USB media, such as a USB flash drive, " +"formatted with ZFS and encrypted with either GELI or PEFS. This device is " +"used to hold a specific user's home directory, meaning they can securely " +"transport and access their personal files on any |trueos| or |pcbsd| 10.1.2 " +"or higher system. For example, this can be used to securely access one's " +"home directory from a laptop, home computer, and work computer. The device " +"is protected by an encryption key and a different (recommended) password " +"separate from the user's login password." +msgstr "" + +#: ../../sysadmclient.rst:916 +msgid "GELI" +msgstr "" + +#: ../../sysadmclient.rst:918 +msgid "" +"PersonaCrypt uses GELI's ability to split the key into two parts: one being " +"your passphrase, and the other being a key stored on disk. Without both of " +"these parts, the media cannot be decrypted. This means if somebody steals " +"the key and manages to get your password, it is still worthless without the " +"system it was paired with. GELI is used by default in |trueos| as it is more" +" fully featured over PEFS." +msgstr "" + +#: ../../sysadmclient.rst:940 +msgid "" +"Before a user is configured to use PersonaCrypt on a |trueos| system, two " +"buttons are available in the :guilabel:`PersonaCrypt` tab of " +":guilabel:`Advanced Mode`. Note this section is hidden if the currently " +"logged in user is selected. Also, if you have just created a user and do not" +" see these options, click :guilabel:`Save`, then re-highlight the user to " +"display these options:" +msgstr "" + +#: ../../sysadmclient.rst:999 +msgid "PEFS" +msgstr "" + +#: ../../sysadmclient.rst:1001 +msgid "" +"`PEFS `_ stands for Private Encrypted File System. It is " +"open source software freely available under the BSD license, and is included" +" in |trueos| by default. PEFS runs on top of any existing file system, " +"providing an encryption layer independent of the underlying file system. " +"PersonaCrypt can be configured to use PEFS in place of GELI, which " +"eliminates the need for external media, as the encrypted PEFS database is " +"stored on the local disk." +msgstr "" + +#: ../../sysadmclient.rst:1009 +msgid "" +"While PEFS does not use a USB drive, be sure to print or otherwise backup " +"the PEFS generated key fragment stored on the disk." +msgstr "" + +#: ../../sysadmclient.rst:1012 +msgid "**Initialize PEFS with the Command Line**" +msgstr "" + +#: ../../sysadmclient.rst:1014 +msgid "" +"Because PEFS does not use a USB drive with its encryption, the user will " +"need a password file (pfile) containing the desired password, **before** " +"initializing PEFS for a user account. Once this pfile is created, enabling " +"PEFS through PersonaCrypt is accomplished in a CLI with " +":command:`personacrypt init PEFS`." +msgstr "" + +#: ../../sysadmclient.rst:1020 +msgid "" +"For example, the user account **test** has a pfile named " +":file:`testpfile.txt`, which contains the single text string of **test's** " +"chosen password. Next, the administrator adds PEFS encryption to the " +"**test** acount by opening a CLI, logging in as root, and typing:" +msgstr "" + +#: ../../sysadmclient.rst:1029 +msgid "" +"PersonaCrypt will initialize the account **test** with PEFS, using the " +"string in :file:`testpfile.txt` as the new password." +msgstr "" + +#: ../../sysadmclient.rst:1032 +msgid "" +"The |sysadm| User Manager can also initialize a user account with PEFS by " +"choosing :guilabel:`on-disk encryption (PEFS)` in the :guilabel:`Device` " +"drop down menu of the :guilabel:`PersonaCrypt` tab." +msgstr "" + +#: ../../sysadmclient.rst:1036 +msgid "" +"In addition to initializing an account with PEFS, PersonaCrypt also supports" +" importing and exporting PEFS on-disk keyfiles with :command:`personacrypt " +"export ` and :command:`personacrypt import `, " +"respectively." +msgstr "" + +#~ msgid "" +#~ "|trueos| provides support for a security feature known as PersonaCrypt. A " +#~ "PersonaCrypt device is a removable USB media, such as a USB stick, formatted" +#~ " with ZFS and encrypted with GELI. This device is used to hold a specific " +#~ "user's home directory, meaning they can securely transport and access their " +#~ "personal files on any |trueos| or |pcbsd| 10.1.2 or higher system. For " +#~ "example, this can be used to securely access one's home directory from a " +#~ "laptop, home computer, and work computer. The device is protected by an " +#~ "encryption key and a password which is, and should be, separate from the " +#~ "user's login password." +#~ msgstr "" + +#~ msgid "" +#~ "PersonaCrypt uses GELI's ability to split the key into two parts: one being " +#~ "your passphrase, and the other being a key stored on disk. Without both of " +#~ "these parts, the media cannot be decrypted. This means if somebody steals " +#~ "the key and manages to get your password, it is still worthless without the " +#~ "system it was paired with." +#~ msgstr "" + +#~ msgid "" +#~ "Before a user is configured to use PersonaCrypt on a |trueos| system, two " +#~ "buttons are available in the \"PersonaCrypt\" section of \"Advanced Mode\". " +#~ "Note this section is hidden if the currently logged in user is selected. " +#~ "Also, if you have just created a user and do not see these options, click " +#~ ":guilabel:`Save` then re-highlight the user to display these options:" +#~ msgstr "" + #~ msgid "" #~ "**Max Boot Environments:** |trueos| automatically creates a boot environment" #~ " before updating any software, the operating system, or applying a system "