SYSTEMD-REPORT-SIGN-PLAIN(8)

💖 SYSTEMD-REPORT-SIGN-PLAIN 💖

okay bestie, gather round, because we're talking about systemd-report-sign-plain@.service, systemd-report-sign-plain.socket, and plain ol' systemd-report-sign-plain — the little squad that signs system reports with a local software key. yes, from the SYSTEMD-....SERVICE(8) manual, she's iconic, she's niche, she's here. 💅

---

✨ NAME ✨

systemd-report-sign-plain@.service, systemd-report-sign-plain.socket, systemd-report-sign-plain — sign system reports with a local software key 🔑

---

🌸 SYNOPSIS 🌸

systemd-report-sign-plain@.service

systemd-report-sign-plain.socket

/usr/lib/systemd/systemd-report-sign-plain

---

🦋 DESCRIPTION 🦋

So systemd-report-sign-plain@.service is a system service that signs the system reports made by systemd-report(1). Think of her as the signing backend for the --sign= logic of that tool: she's the one implementing the io.systemd.Report.Signer.Sign() Varlink method, and you reach her through a socket that's linked into the /run/systemd/report.sign/ directory, named plain. cute name, huge responsibility, no cap. 💖

She's socket-activated — one instance per connection, every single time — via systemd-report-sign-plain.socket, and she signs whatever digest you hand her using a local software key. The signatures? Made with the Ed25519 (EdDSA) algorithm. fancy. ate. 👑

And the way she just handles the key situation on first use?? Obsessed. A key pair gets generated automatically and stored below /var/lib/systemd/report.sign.plain/:

• the private key lives in local.private (that's PKCS#8 PEM, and it's readable only by the root user — as it should be, protect her at all costs 🙈)
• the public key lives in local.public (PEM, and it's world readable 🌍)

Also? The public key is also exported as a system report metric. she's giving main character energy in more ways than one. ✨

ngl bestie, keep an eye on local.private — root-only means root-only, don't be the one who loosens that. 💀

---

🎀 SEE ALSO 🎀

• systemd(1)
• systemd-report(1)

---

k that's the whole vibe, bestie — go sign something iconic 💜

signing off from the SYSTEMD-....SERVICE(8) corner of the universe, this was systemd 262.1 🦋✨💖