Check whether the GRUB2 is signed and create a file (an i3status implementation idea).
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

34 lines
1.0 KiB

3 years ago
3 years ago
  1. # grub2-se-verifyserv [![Build Status](https://travis-ci.org/Bandie/grub2-se-verifyserv.svg?branch=master)](https://travis-ci.org/Bandie/grub2-se-verifyserv)
  2. ## Purpose
  3. After a kernel upgrade you may forgot to sign your kernel using the [grub2-signing-extension scripts](https://github.com/Bandie/grub2-signing-extension) again.
  4. This is why I wanted an integration with i3status. I wrote a service in C which touches a file if GRUB2 is signed. If GRUB2 is not signed the file will be deleted.
  5. ## Installation
  6. You need gcc or something similar. There is a systemd servicefile included.
  7. To compile, install and start it you may want to do the following within this project directory:
  8. ```
  9. make
  10. sudo make install
  11. sudo systemctl enable grub2-se-verifyserv
  12. sudo systemctl start grub2-se-verifyserv
  13. ```
  14. ## i3status integration
  15. To let it integrate with i3status, add the following to your i3status config:
  16. ```
  17. order += "path_exists GRUB2_signed"
  18. [...]
  19. [...]
  20. path_exists GRUB2_signed {
  21. path = "/verified"
  22. }
  23. ```
  24. `grub2-se-verifyserv --help` will tell you the same btw.