REQUEST-KEY(8)

๐Ÿ“ฆ
version 1.6.3 ยท 2 versions
, in alpine 3.22, alpine 3.23, alpine 3.24, arch rolling, centos-stream 10, centos-stream 9, fedora 43, fedora 44, nixpkgs unstable, opensuse-leap 16.0

๐Ÿ’… REQUEST-KEY ๐Ÿ’…

okay so bestie, this is the request-key page from the Linux Key Management Utilities section 8 (admin/system commands, iykyk). it's a kernel-callback situation and honestly it's giving backstage-pass energy โ€” let's get into it ๐ŸŽ€


โœจ NAME โœจ

request-key โ€” the lil program that handles key instantiation callback requests from the kernel ๐Ÿซถ


๐ŸŒธ SYNOPSIS ๐ŸŒธ

/sbin/request-key <op> <key> <uid> <gid> <threadring> <processring>
     <sessionring> [<info>]

๐Ÿ’– DESCRIPTION ๐Ÿ’–

so the kernel calls this program when someone asks it for a key and the kernel literally doesn't have it on hand. the kernel whips up a partially set up key, then calls out to this program to instantiate it. that's the whole vibe. it is not intended to be called directly โ€” no cap, this is not a "you, personally, typing in a terminal" situation ๐Ÿ™ˆ

however โ€” and this is the fun part โ€” for debugging purposes, it can be given some options on the command line:

  • -d โ€” turns on debugging mode. in this mode, no attempts are made to access any keys and, if a handler program is selected, it won't be executed; instead, this program will print a message and exit 0. so it's all talk, zero action, iconic honestly ๐Ÿ’…
  • -D โ€” in debugging mode, use the proposed key description specified with this rather than the sample ("user;0;0;1f0000;debug:1234") built into the program. like, use your fake key description instead of the built-in fake one โœจ
  • -l โ€” use configuration from the current directory. the program will use request-key.d/* and request-key.conf from the current directory rather than from /etc. stay local, stay cozy ๐Ÿ 
  • -n โ€” don't log to the system log. ordinarily, error messages and debugging messages will be copied to the system log โ€” this will prevent that. shy mode activated ๐Ÿคซ
  • -v โ€” turn on debugging output. this may be specified multiple times to produce increasing levels of verbosity. stack it, girl, get as loud as you want ๐Ÿ”ฅ
  • --version โ€” print the program version and exit. just a quick "hi, who am I" moment ๐Ÿ‘‘

๐Ÿ’€ ERRORS ๐Ÿ’€

all errors will be logged to the syslog. every single one. the syslog knows everything ๐Ÿ˜ญ


๐Ÿฆ‹ FILES ๐Ÿฆ‹

  • /etc/request-key.d/*.conf โ€” individual configuration files ๐ŸŒธ
  • /etc/request-key.conf โ€” fallback configuration file ๐Ÿ’œ

โญ SEE ALSO โญ

go read those next, bestie, the lore runs deep ๐Ÿงš


ngl, -d and -D are your besties if you're poking at this โ€” they let you see what would happen without actually touching any keys. use them, don't raw-dog a kernel callback ๐Ÿ™ˆ

mwah ๐Ÿ’‹ this page is from the Linux Key Management Utilities, dated 15 Nov 2011, and it's REQUEST-KEY(8) in the man pages โ€” old but iconic, periodt ๐Ÿ‘‘

๐Ÿ“ฆ where this page comes from