// install · linux + systemd
One static binary and a systemd timer. Pick the path you trust — the fast one-liner, or verify every byte first.
$ curl -fsSL https://syscert.tfindley.dev/install.sh | sudo sh It's a security tool — read the script, then run it. Nothing to hide.
# read it first curl -fsSL https://syscert.tfindley.dev/install.sh | less # …or download, review, then run curl -fsSL https://syscert.tfindley.dev/install.sh -o install.sh less install.sh sudo sh install.sh
Pre-built static binaries on every release, checked against published sums.
# amd64 — for arm64 use syscert-linux-arm64 curl -fsSL https://github.com/tfindley/syscert/releases/latest/download/syscert-linux-amd64 -o syscert curl -fsSL https://github.com/tfindley/syscert/releases/latest/download/sha256sums.txt -o sha256sums.txt sha256sum --check --ignore-missing sha256sums.txt # syscert: OK chmod +x syscert sudo packaging/install.sh ./syscert
sha256 latest v0.4.0 — verify your download against:
Requires Go ≥ 1.26. The packaging files come with the clone.
git clone https://github.com/tfindley/syscert.git cd syscert go build -o syscert ./cmd/syscert sudo packaging/install.sh ./syscert
Installed with the one-liner? Remove it the same way — no clone needed:
curl -fsSL https://syscert.tfindley.dev/install.sh | sudo sh -s -- --uninstall # keep data curl -fsSL https://syscert.tfindley.dev/install.sh | sudo sh -s -- --uninstall --purge # + data, config, user
From a source checkout, use the script directly:
sudo packaging/install.sh --uninstall # keep data sudo packaging/install.sh --uninstall --purge # + data, config, user
--purge is irreversible, so it asks you to confirm; set SYSCERT_ASSUME_YES=1 to skip the prompt.
Supported & tested on Debian/Ubuntu and the RHEL family; other systemd hosts may work. Full details in the Quick start · all releases ↗.