Check whether the GRUB2 is signed and create a file (an i3status implementation idea).
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Bandie e585369041
The program's name has changed.
hace 11 meses
src The program's name has changed. hace 11 meses
systemd Initial commit hace 2 años
.travis.yml Travis CI hace 2 años
LICENSE Initial commit hace 2 años
Makefile Travis CI² hace 2 años
README.md Travis CI hace 2 años
configure Travis CI² hace 2 años

README.md

grub2-se-verifyserv Build Status

Purpose

After a kernel upgrade you may forgot to sign your kernel using the grub2-signing-extension scripts again. This is why I wanted an integration with i3status. I wrote a service in C which touches a file if GRUB2 is signed. If GRUB2 is not signed the file will be deleted.

Installation

You need gcc or something similar. There is a systemd servicefile included. To compile, install and start it you may want to do the following within this project directory:

make
sudo make install
sudo systemctl enable grub2-se-verifyserv
sudo systemctl start grub2-se-verifyserv

i3status integration

To let it integrate with i3status, add the following to your i3status config:

order += "path_exists GRUB2_signed"
[...]
[...]
path_exists GRUB2_signed {
  path = "/verified"
}

grub2-se-verifyserv --help will tell you the same btw.