From: Allison Karlitskaya <allison.karlitskaya@redhat.com>
Date: Wed, 3 Sep 2025 08:29:39 +0000 (+0200)
Subject: man: add docs for ssh.ephemeral-authorized_keys-all
X-Git-Tag: v258-rc4~23
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=5a1b64fee04933f74eae3ca65e79fa92872ae353;p=thirdparty%2Fsystemd.git

man: add docs for ssh.ephemeral-authorized_keys-all

This was added in 071155a1fbac ("ssh-generator: support
ssh.ephemeral-key.all-users") without corresponding documentation.  Add
the missing docs now.
---

diff --git a/man/systemd-ssh-generator.xml b/man/systemd-ssh-generator.xml
index 65d3c03f6dc..0129202327c 100644
--- a/man/systemd-ssh-generator.xml
+++ b/man/systemd-ssh-generator.xml
@@ -129,6 +129,22 @@
 
         <xi:include href="version-info.xml" xpointer="v256"/></listitem>
       </varlistentry>
+
+      <varlistentry>
+        <term><varname>ssh.ephemeral-authorized_keys-all</varname></term>
+
+        <listitem>
+          <para>Provides additional public keys, given in the customary <filename>authorized_keys</filename>
+            format, for all users, for incoming connections via the generated <constant>AF_VSOCK</constant>
+            and <constant>AF_UNIX</constant> socket units.</para>
+
+          <para>The intended use of this is for a host system (in either VM or container configurations) to
+            generate a keypair and inject the public key into the guest, using the private key to connect to
+            any user account on the guest via ssh, without further authentication.</para>
+
+          <xi:include href="version-info.xml" xpointer="v256"/>
+        </listitem>
+      </varlistentry>
     </variablelist>
   </refsect1>
 
diff --git a/man/systemd.system-credentials.xml b/man/systemd.system-credentials.xml
index 8b9cec6d44a..e3e28872077 100644
--- a/man/systemd.system-credentials.xml
+++ b/man/systemd.system-credentials.xml
@@ -205,6 +205,25 @@
         </listitem>
       </varlistentry>
 
+      <varlistentry>
+        <term><varname>ssh.ephemeral-authorized_keys-all</varname></term>
+
+        <listitem>
+          <para>Provides additional public keys, given in the customary <filename>authorized_keys</filename>
+            format, for all users, for incoming connections via the generated <constant>AF_VSOCK</constant>
+            and <constant>AF_UNIX</constant> socket units.</para>
+
+          <para>The intended use of this is for a host system (in either VM or container configurations) to
+            generate a keypair and inject the public key into the guest, using the private key to connect to
+            any user account on the guest via ssh, without further authentication.</para>
+
+          <para>Consumed by
+            <citerefentry><refentrytitle>systemd-ssh-generator</refentrytitle><manvolnum>8</manvolnum></citerefentry>.</para>
+
+          <xi:include href="version-info.xml" xpointer="v256"/>
+        </listitem>
+      </varlistentry>
+
       <varlistentry>
         <term><varname>ssh.authorized_keys.root</varname></term>
         <listitem>