Bandie
/
grub2-se-verifyserv
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
Check whether the GRUB2 is signed and create a file (an i3status implementation idea).
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
17 Commits
1 Branch
0 Tags
53 KiB
 
 
Tag: Branch: Tree: master
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'master'
${ noResults }
Go to file
Bandie e585369041
The program's name has changed. 		3 years ago
src The program's name has changed. 3 years ago
systemd Initial commit 4 years ago
.travis.yml Travis CI 4 years ago
LICENSE Initial commit 4 years ago
Makefile Travis CI² 4 years ago
README.md Travis CI 4 years ago
configure Travis CI² 4 years ago

README.md

grub2-se-verifyserv Build Status

Purpose

After a kernel upgrade you may forgot to sign your kernel using the grub2-signing-extension scripts again. This is why I wanted an integration with i3status. I wrote a service in C which touches a file if GRUB2 is signed. If GRUB2 is not signed the file will be deleted.

Installation

You need gcc or something similar. There is a systemd servicefile included. To compile, install and start it you may want to do the following within this project directory:

make
sudo make install
sudo systemctl enable grub2-se-verifyserv
sudo systemctl start grub2-se-verifyserv

i3status integration

To let it integrate with i3status, add the following to your i3status config:

order += "path_exists GRUB2_signed"
[...]
[...]
path_exists GRUB2_signed {
  path = "/verified"
}

grub2-se-verifyserv --help will tell you the same btw.