hashboot/hashboot.1.adoc

hashboot(1)

NAME

hashboot - generate checksums and a backup for /boot, MBR and BIOS.

SYNOPSIS

hashboot index|check|recover

DESCRIPTION

hashboot hashes all files in /boot and the MBR to check them during early boot. It is intended for when you have encrypted the root partition but not the boot partition. The checksums and a backup of the contents of /boot are stored in /var/lib/hashboot by default. If a checksum doesn’t match, you have the option to restore the file from backup.

If there is a core- or libreboot bios and flashrom installed, hashboot can check bios for modifications too.

OPTIONS

index

generate checksums and a backup for /boot, MBR and BIOS.

check

check /boot, MBR and BIOS.

recover

replace corrupted files with the backup.

CONFIGURATION

The configuration file is in /etc/hashboot.conf.

Possible options

SAVEDIR	The checksums and the backup are stored here.
CKMODES	001=mbr, 010=files, 100=bios.
MBR_DEVICE	Device with the MBR on it.
PROGRAMMER	Use this programmer instead of "internal". Will be passed to flashrom.

REPORTING BUGS

Bugtracker: https://github.com/tastytea/hashboot/issues