// install · linux + systemd

Install syscert

One static binary and a systemd timer. Pick the path you trust — the fast one-liner, or verify every byte first.

$ curl -fsSL https://syscert.tfindley.dev/install.sh | sudo sh

early · pre-1.0 Runs as root to create the service user, units & timer. amd64 · arm64.

Inspect before you pipe

It's a security tool — read the script, then run it. Nothing to hide.

# read it first
curl -fsSL https://syscert.tfindley.dev/install.sh | less

# …or download, review, then run
curl -fsSL https://syscert.tfindley.dev/install.sh -o install.sh
less install.sh
sudo sh install.sh

Download a release binary & verify

Pre-built static binaries on every release, checked against published sums.

# amd64 — for arm64 use syscert-linux-arm64
curl -fsSL https://github.com/tfindley/syscert/releases/latest/download/syscert-linux-amd64 -o syscert
curl -fsSL https://github.com/tfindley/syscert/releases/latest/download/sha256sums.txt -o sha256sums.txt
sha256sum --check --ignore-missing sha256sums.txt   # syscert: OK
chmod +x syscert
sudo packaging/install.sh ./syscert

sha256 latest v0.1.0 — verify your download against:

amd64: 0863999b988096d47ec653bbeb0481fb1d0e4569812acc2aa87a74ee898953f4
arm64: d72076e76ab926664515783baf9e1a375e1901231494f21d8838458ad84ff281

sha256sums.txt ↗

Build from source

Requires Go ≥ 1.26. The packaging files come with the clone.

git clone https://github.com/tfindley/syscert.git
cd syscert
go build -o syscert ./cmd/syscert
sudo packaging/install.sh ./syscert

↺

Uninstall

sudo packaging/install.sh --uninstall            # remove units + binary, keep data
sudo packaging/install.sh --uninstall --purge    # also remove /var/lib/syscert, /etc/syscert

Supported & tested on Debian/Ubuntu and the RHEL family; other systemd hosts may work. Full details in the Quick start · all releases ↗.