Introduction to keyutils

Keyutils is a set of utilities for managing the key retention facility in the kernel, which can be used by filesystems, block devices and more to gain and retain the authorization and encryption keys required to perform secure operations.

This package is known to build and work properly using an LFS 7.8-systemd platform.

Package Information

User Notes:

Installation of keyutils

Install keyutils by running the following commands:


This package does not come with a test suite.

Now, as the root user:

make NO_ARLIB=1 install

Command Explanations

NO_ARLIB=1: This make flag disables installing the static library.

Configuring keyutils

Config Files

/etc/request-key.conf and /etc/request-key.d/*


Installed Programs: keyctl, key.dns_resolver, and request-key
Installed Library:
Installed Directory: /etc/request-key.d and /usr/share/keyutils

Short Descriptions


is to control the key management facility in various ways using a variety of subcommands.


is invoked by request-key on behalf of the kernel when kernel services (such as NFS, CIFS and AFS) need to perform a hostname lookup and the kernel does not have the key cached. It is not ordinarily intended to be called directly.


is invoked by the kernel when the kernel is asked for a key that it doesn't have immediately available. The kernel creates a temporary key and then calls out to this program to instantiate it. It is not intended to be called directly.

contains the keyutils library API instantiation.

Last updated on 2016-01-24 02:01:02 -0600