SYSTEMD-I....SERVICE(8)

💖 SYSTEMD-I....SERVICE(8) — the manual, but make it make sense 💖

okay bestie, gather round, because today we're talking about systemd-integritysetup@.service and its little command-line bestie systemd-integritysetup. this is your disk integrity protection logic era and honestly? iconic. ✨

---

🎀 NAME 🎀

systemd-integritysetup@.service, systemd-integritysetup — literally just Disk integrity protection logic. that's the whole vibe. that's the job. 🛡️

---

🌸 SYNOPSIS 🌸

systemd-integritysetup@.service

/usr/lib/systemd/systemd-integritysetup

so there's the unit, and there's the binary that does the actual work. two names, one mission, no cap. 💅

---

✨ DESCRIPTION ✨

okay so systemd-integritysetup@.service is a service that is responsible for setting up integrity protected block devices. that's its whole main character arc. it's not a one-size-fits-all situation either — it should be instantiated for each device that requires integrity protection. one device, one instance, one little unit doing its thing. 🦋

and here's the glow-up moment: at early boot, and also whenever the system manager configuration is reloaded, entries from integritytab(5) get converted into systemd-integritysetup@.service units by systemd-integritysetup-generator(8). automatic. effortless. slay. 🔥

and then systemd-integritysetup@.service calls systemd-integritysetup. that's it, that's the chain. the service is the messenger, the binary is the doer. 🫶

---

💅 COMMANDS 💅

these are the commands that systemd-integritysetup actually understands. no guessing, no improvising, these are the ones:

• attach volume device [key-file|-] [option(s)|-] — creates a block device volume using device. if you wanna go deeper (and you know you do), go peek at integritytab(5) and the Kernel dm-integrity documentation for the details. 📚

Added in version 250.

• detach volume — detaches (a.k.a. destroys) the block device volume. it's giving breakup energy. bye bestie 👋

Added in version 250.

• help — prints short information about command syntax. your little pocket cheat sheet. 🎀

Added in version 250.

---

🔍 SEE ALSO 🔍

go read these next, they're the extended universe:

• systemd(1)
• integritytab(5)
• systemd-integritysetup-generator(8)
• integritysetup(8)

---

📝 NOTES 📝

1. Kernel dm-integrity — https://docs.kernel.org/admin-guide/device-mapper/dm-integrity.html

---

lowkey important reminder: attach, detach, and help all landed in version 250, so if you're on something ancient, that's a you problem bestie 💀

---

and that's the whole page!! this one came from systemd 262.1, and yeah the header on the original literally says SYSTEMD-I....SERVICE(8) — the abbreviation is doing its own thing, we respect it. 🌈 stay encrypted, stay protected, and remember: your integrity is non-negotiable. mwah 💖🦋✨