hashboot/README.md

32 lines
1.3 KiB
Markdown
Raw Normal View History

2019-02-24 04:18:41 -05:00
**hashboot** hashes all files in `/boot` to check them during early boot. It is
intended for when you have encrypted the root partition but not the boot
partition. The checksums are stored in `/var/lib/hashboot.digest` and a backup
of the contents of `/boot` is stored in `/var/cache/boot-backup.tar`. If a
checksum doesn't match, you have the option to restore the file from backup.
2015-10-17 17:23:50 -04:00
# License
2015-10-17 17:50:20 -04:00
"THE HUG-WARE LICENSE" (Revision 1):
xo <xo@rotce.de> and tastytea <tastytea@tastytea.de> wrote these files. As long
as you retain this notice you can do whatever you want with this stuff. If we
meet some day, and you think this stuff is worth it, you can give us a hug.
2015-10-17 17:23:50 -04:00
2015-10-17 17:45:49 -04:00
2015-10-17 17:23:50 -04:00
# Install
2015-10-17 18:03:22 -04:00
* Make hashboot executable
* Place hashboot anywhere in $PATH
2015-10-17 17:23:50 -04:00
* Install the appropriate init script
* If applicable, copy kernel-hook to /etc/kernel/post{inst,rm}.d/zzz-hashboot (make sure it is called after all other hooks)
Also see [INSTALL](https://git.tastytea.de/?p=hashboot.git;a=blob_plain;f=INSTALL).
2015-10-17 17:45:49 -04:00
2015-10-17 17:23:50 -04:00
# Usage
2015-10-17 18:03:22 -04:00
* Run "hashboot index" to generate checksums and a backup for /boot and MBR
* Run "hashboot check" to check /boot and MBR
* Run "hashboot recover" to replace corrupted files with the backup
2015-10-17 17:23:50 -04:00
2015-10-17 17:45:49 -04:00
2015-10-17 17:23:50 -04:00
# Notes
2015-10-17 17:57:38 -04:00
* A backup is per default stored in /var/cache/bootbackup.tar.gz
* You can't use the openrc/sysv init scripts with parallel boot.