Subject: [bug#72457] A question about this.

From: "amano.kenji" <[email-masked]>
Date: Fri, 18 Oct 2024 10:36:40 +0000

Does this allow me to run some services whenever there are changes to /boot?

For example, I want to record file size and modification time for each file in /boot whenever there are changes to /boot. Or, I can record hashes of /boot files.

During boot, guix can check whether /boot hasn't changed from the record.

Combined with encrypted root, it can detect tampering attempts.