| # Copyright 2018 The Chromium OS Authors. All rights reserved. |
| # Use of this source code is governed by a BSD-style license that can be |
| # found in the LICENSE file. |
| # |
| # This service maintains /mnt/stateful_partition/.secure_boot. We want this file |
| # to exist if the system has *ever* been booted in secure boot mode, so it is |
| # intentional that we do not remove /mnt/stateful_partition/.secure_boot when |
| # the system boots in non-secure boot mode. |
| |
| [Unit] |
| Description=Check if secure boot is enabled |
| |
| [Service] |
| Type=oneshot |
| RemainAfterExit=yes |
| ExecStart=/bin/bash -c "if /usr/share/cloud/is-secure-boot; then \ |
| touch /mnt/stateful_partition/.secure_boot; fi" |
| |
| [Install] |
| WantedBy=multi-user.target |
