2019-02-24 10:18:41 +01:00
|
|
|
**hashboot** hashes all files in `/boot` to check them during early boot. It is
|
|
|
|
|
intended for when you have encrypted the root partition but not the boot
|
2019-02-24 12:29:59 +01:00
|
|
|
partition. The checksums and a backup of the contents of `/boot` are stored in
|
|
|
|
|
`/var/lib/hashboot` by default. If a checksum doesn't match, you have the option
|
|
|
|
|
to restore the file from backup.
|
2015-10-17 23:45:49 +02:00
|
|
|
|
2015-10-17 23:23:50 +02:00
|
|
|
# Install
|
2019-02-24 12:29:59 +01:00
|
|
|
|
2015-10-18 00:03:22 +02:00
|
|
|
* Make hashboot executable
|
|
|
|
|
* Place hashboot anywhere in $PATH
|
2015-10-17 23:23:50 +02:00
|
|
|
* Install the appropriate init script
|
|
|
|
|
* If applicable, copy kernel-hook to /etc/kernel/post{inst,rm}.d/zzz-hashboot (make sure it is called after all other hooks)
|
|
|
|
|
|
|
|
|
|
# Usage
|
2019-02-24 12:29:59 +01:00
|
|
|
|
2015-10-18 00:03:22 +02:00
|
|
|
* Run "hashboot index" to generate checksums and a backup for /boot and MBR
|
|
|
|
|
* Run "hashboot check" to check /boot and MBR
|
|
|
|
|
* Run "hashboot recover" to replace corrupted files with the backup
|
2015-10-17 23:23:50 +02:00
|
|
|
|
|
|
|
|
# Notes
|
2019-02-24 12:29:59 +01:00
|
|
|
|
2015-10-17 23:57:38 +02:00
|
|
|
* You can't use the openrc/sysv init scripts with parallel boot.
|
2019-02-24 12:29:59 +01:00
|
|
|
|
|
|
|
|
# License
|
|
|
|
|
|
|
|
|
|
```PLAIN
|
|
|
|
|
"THE HUG-WARE LICENSE" (Revision 1):
|
|
|
|
|
xo <xo@rotce.de> and tastytea <tastytea@tastytea.de> wrote these files. As long
|
|
|
|
|
as you retain this notice you can do whatever you want with this stuff. If we
|
|
|
|
|
meet some day, and you think this stuff is worth it, you can give us a hug.
|
|
|
|
|
```
|
