rootsign(8)

📦 version 1.11, in ubuntu jammy

💖 rootsign — the bootmail era 💖

rootsign(8) · part of the bootmail squad 🎀

✨ NAME ✨

rootsign — cryptographically sign standard input with a private/public keypair unique to the local root user 🔐👑

🌸 DESCRIPTION 🌸

okay so bestie, rootsign is a program that operates on standard input, and it cryptographically signs that input with a private/public keypair that only the local root user can even touch. then it outputs the result on standard out, all pretty and ready for piping to mail(1). it's giving "sealed with a signature only root could make" 💅

A brand new key will be generated on first use, and it's written to /var/lib/rootsign/$KEYID.rsa.pub so other users can import it into their keyring, in order to verify signatures. yes, that's the whole point — verify the vibes ✨

This tool is used by bootmail(8) to sign messages, but it could easily be used by others. it's not gatekeeping, it's just root-gated 🙈

rootsign can optionally encrypt the message as well, by setting the recipient's gpg(1) key id in the RECIPIENT_KEYID variable in /etc/bootmail/gpg.conf. sign and encrypt? main character energy fr fr 👑

🎀 FILES 🎀

  • /etc/bootmail/gpg.conf
  • /var/lib/rootsign/*.rsa.pub

🦋 SEE ALSO 🦋

http://launchpad.net/bootmail — go peek, iykyk 🌈

👑 AUTHOR 👑

This manpage and the utility were written by Dustin Kirkland <kirkland@ubuntu.com> for Ubuntu systems (but may be used by others). Permission is granted to copy, distribute and/or modify this document and the utility under the terms of the GNU General Public License, Version 3 published by the Free Software Foundation. slay, and also legally binding 💜

The complete text of the GNU General Public License can be found in /usr/share/common-licenses/GPL on Debian/Ubuntu systems, or on the web at http://www.gnu.org/licenses/gpl.txt.

🫶 okay that's the whole page, bestie — go sign something, drink water, and remember: root only, no cap 💖

bootmail · 19 July 2011 · rootsign(8) 🌸✨

📦 where this page comes from