feat: add fsguard module

.github/workflows/vib-build.yml

@@ -18,7 +18,10 @@ jobs:
     steps:
     - uses: actions/checkout@v4
 
-    - uses: vanilla-os/[email protected]
+    - uses: vanilla-os/[email protected]
+      with:
+        recipe: 'recipe.yml'
+        plugins: 'Vanilla-OS/vib-fsguard:v1.0-3'
 
     - name: Build the Docker image
       run: docker image build -f Containerfile --tag ghcr.io/vanilla-os/desktop:main .

.github/workflows/vib-pr.yml

@@ -13,7 +13,10 @@ jobs:
     steps:
     - uses: actions/checkout@v4
 
-    - uses: vanilla-os/[email protected]
+    - uses: vanilla-os/[email protected]
+      with:
+        recipe: 'recipe.yml'
+        plugins: 'Vanilla-OS/vib-fsguard:v1.0-3'
 
     - name: Build the Docker image
       run: docker image build -f Containerfile --tag vanillaos/desktop .

recipe.yml

@@ -18,6 +18,7 @@ modules:
   - apt upgrade -y
   - apt clean
   - apt-mark hold snapd gnome-software-plugin-snap
+  - apt install minisign
 
 - name: vanilla-tools
   type: shell
@@ -79,3 +80,9 @@ modules:
   - apt autoremove -y
   - apt clean
   - lpkg --lock
+
+- name: fsguard
+  type: fsguard
+  FsGuardLocation: "/usr/sbin/init"
+  GenerateKey: true
+  FilelistPaths: ["/usr/bin"]