| 1 |
On Sat, Sep 25, 2021 at 4:30 PM Canek Peláez Valdés <caneko@×××××.com> wrote: |
| 2 |
> |
| 3 |
> the simplest solution is to put your integrity logic in the initrd (with the added benefit that you can mount it in emergencies if something goes wrong with root). |
| 4 |
> |
| 5 |
|
| 6 |
If you want to try this, consider this article I wrote ages ago. I no |
| 7 |
longer use this but it is a quick recipe for how to create your own |
| 8 |
dracut module: |
| 9 |
https://rich0gentoo.wordpress.com/2012/01/21/a-quick-dracut-module/ |
| 10 |
|
| 11 |
It is really easy to tweak dracut, and it has a lot of automagic |
| 12 |
functionality which means you mostly only need to worry about whatever |
| 13 |
is particular with your setup. You can also have your module grab any |
| 14 |
config files and binaries/libraries needed off of your filesystem so |
| 15 |
that they are available when it runs. |
| 16 |
|
| 17 |
-- |
| 18 |
Rich |
Archives