chore: import upstream snapshot with attribution

grub2/help/background.html

@@ -0,0 +1,4 @@
+<header>Background image</header>
+<p>Sets the image used as the GRUB menu background. Select a PNG, JPEG, or TGA
+file. Webmin copies it under the configured GRUB background directory in
+<tt>/boot</tt> so GRUB can read it at boot time.</p>

grub2/help/bls_dir.html

@@ -0,0 +1,6 @@
+<header>BLS entries directory</header>
+<p>Directory containing Boot Loader Specification entry files, usually
+<tt>/boot/loader/entries</tt> on Enterprise Linux style systems.</p>
+<p>Each <tt>.conf</tt> file describes one boot entry. Kernel options may be
+stored directly in these files or read from <tt>kernelopts</tt> in the GRUB
+environment.</p>

grub2/help/boot_mode.html

@@ -0,0 +1,6 @@
+<header>Boot mode</header>
+<p>Shows whether the running system appears to have booted through UEFI
+firmware or legacy BIOS firmware.</p>
+<p>This matters because GRUB is installed differently in each mode. UEFI
+systems normally use an EFI system partition and a boot loader ID, while BIOS
+systems normally install GRUB boot code to a disk device.</p>

grub2/help/cmdline.html

@@ -0,0 +1,12 @@
+<header>Kernel options for all Linux entries</header>
+<p>Edits <tt>GRUB_CMDLINE_LINUX</tt>. GRUB menu generators normally add this
+value to every generated Linux menu entry, including recovery or rescue
+entries.</p>
+<p>Use this for options that must be present whenever Linux boots, such as
+storage, root filesystem, LVM, filesystem flag, security, mitigation, or
+<tt>crashkernel</tt> options.</p>
+<p>On BLS-based systems, existing boot entries may store options directly in
+BLS entry files, or reference <tt>$kernelopts</tt>, a GRUB environment value
+stored in <tt>grubenv</tt>. Webmin does not edit <tt>grubenv</tt> directly;
+when <tt>grubby</tt> is available, Webmin asks it to apply changes here to all
+existing BLS entries.</p>

grub2/help/cmdline_default.html

@@ -0,0 +1,12 @@
+<header>Kernel options for regular Linux entries</header>
+<p>Edits <tt>GRUB_CMDLINE_LINUX_DEFAULT</tt>. GRUB menu generators normally add
+this value to regular Linux menu entries, but not to generated recovery or
+rescue entries.</p>
+<p>Use this for options that make normal boots quieter or more convenient, such
+as <tt>quiet</tt>, <tt>splash</tt>, or console and graphics workarounds that
+are not needed for recovery boots.</p>
+<p>On BLS-based systems, existing boot entries may store options directly in
+BLS entry files, or reference <tt>$kernelopts</tt>, a GRUB environment value
+stored in <tt>grubenv</tt>. Webmin does not edit <tt>grubenv</tt> directly;
+when <tt>grubby</tt> is available, Webmin asks it to apply changes here to
+existing non-rescue BLS entries.</p>

grub2/help/color_highlight.html

@@ -0,0 +1,3 @@
+<header>Selected menu colors</header>
+<p>Sets the foreground and background colors for the currently selected GRUB
+menu entry. Leave both values unset to remove this setting.</p>

grub2/help/color_normal.html

@@ -0,0 +1,3 @@
+<header>Normal menu colors</header>
+<p>Sets the foreground and background colors for normal GRUB menu entries.
+Leave both values unset to remove this setting.</p>

grub2/help/custom_body.html

@@ -0,0 +1,3 @@
+<header>GRUB commands</header>
+<p>Commands to run inside the custom menu entry. Do not include the outer
+menuentry line; Webmin writes that from the title and ID fields.</p>

grub2/help/custom_id.html

@@ -0,0 +1,4 @@
+<header>Entry ID</header>
+<p>An optional stable identifier used by GRUB commands such as
+grub-set-default and grub-reboot. Leave this blank if the entry does not need a
+stable ID.</p>

grub2/help/custom_title.html

@@ -0,0 +1,2 @@
+<header>Menu title</header>
+<p>The title shown in the GRUB boot menu for this custom entry.</p>

grub2/help/default.html

@@ -0,0 +1,5 @@
+<header>Default menu entry</header>
+<p>Edits <tt>GRUB_DEFAULT</tt>, the GRUB menu entry booted automatically.
+Choose a detected entry, or choose <tt>Saved environment entry</tt> to use the
+entry stored in the GRUB environment. Webmin's Set as default action updates
+that saved environment entry.</p>

grub2/help/default_file.html

@@ -0,0 +1,7 @@
+<header>Default settings file</header>
+<p>Path to the GRUB defaults file, usually <tt>/etc/default/grub</tt>. This
+file contains shell-style assignments such as <tt>GRUB_DEFAULT</tt>,
+<tt>GRUB_TIMEOUT</tt>, and kernel command-line settings.</p>
+<p>Changes here normally affect the generated menu after the GRUB menu is
+regenerated. On BLS-based systems, some existing entries may also be updated
+with <tt>grubby</tt>.</p>

grub2/help/disable_os_prober.html

@@ -0,0 +1,3 @@
+<header>Disable OS prober</header>
+<p>When enabled, GRUB does not run OS prober while generating the menu. This
+prevents automatic entries for other installed operating systems.</p>

grub2/help/disable_recovery.html

@@ -0,0 +1,9 @@
+<header>Disable recovery and rescue entries</header>
+<p>When enabled, Webmin sets <tt>GRUB_DISABLE_RECOVERY=true</tt>, which tells
+GRUB generator scripts to omit recovery-mode entries on distributions that
+support this option.</p>
+<p>On BLS-based systems such as Rocky, AlmaLinux, and RHEL, rescue entries are
+separate files under <tt>/boot/loader/entries</tt>. Webmin hides existing BLS
+rescue entries by renaming their entry files, and restores only entries hidden
+by Webmin when this option is disabled again. Future kernel or rescue-image
+updates may create new BLS rescue entries.</p>

grub2/help/entries.html

@@ -0,0 +1,5 @@
+<header>Boot menu entries</header>
+<p>Number of boot entries detected from the generated GRUB menu and, when
+present, from BLS entry files referenced by that menu.</p>
+<p>This count is read-only status. Use the generated menu tab to inspect the
+entries and use the custom entries tab for entries managed by this module.</p>

grub2/help/gfxmode.html

@@ -0,0 +1,9 @@
+<header>Graphics mode</header>
+<p>Sets the GRUB graphical screen mode used by themes and the graphical
+terminal. The theme provides layout and images, but this setting chooses the
+resolution GRUB renders them at.</p>
+
+<p>Use <tt>auto</tt> to let GRUB choose, or enter one or more modes such as
+<tt>1024x768</tt> or <tt>1280x1024x32</tt>, separated by commas. If a theme is
+cropped or shifted, try a resolution closer to the one the theme was designed
+for.</p>

grub2/help/grub_cfg.html

@@ -0,0 +1,6 @@
+<header>Generated menu file</header>
+<p>Path to the generated GRUB menu file, commonly <tt>/boot/grub2/grub.cfg</tt>
+or <tt>/boot/grub/grub.cfg</tt>. GRUB reads this file at boot to build the boot
+menu and run boot commands.</p>
+<p>On BLS-based systems this file may contain loader code that reads separate
+BLS entry files instead of listing every kernel entry directly.</p>

grub2/help/grub_dir.html

@@ -0,0 +1,6 @@
+<header>Script directory</header>
+<p>Directory containing GRUB menu generator scripts, usually
+<tt>/etc/grub.d</tt>. These scripts are run by <tt>grub-mkconfig</tt> or
+<tt>grub2-mkconfig</tt> to build the generated menu file.</p>
+<p>Distribution scripts should usually be left alone. Custom menu entries are
+normally placed in the configured custom script instead.</p>

grub2/help/grubenv.html

@@ -0,0 +1,7 @@
+<header>Environment file</header>
+<p>Path to the GRUB environment file, commonly <tt>/boot/grub2/grubenv</tt> or
+<tt>/boot/grub/grubenv</tt>. GRUB uses this file for persistent runtime state
+such as <tt>saved_entry</tt>, <tt>next_entry</tt>, and sometimes
+<tt>kernelopts</tt>.</p>
+<p>This module reads the file for status and uses GRUB tools for runtime boot
+selection changes.</p>

grub2/help/install_boot_directory.html

@@ -0,0 +1,6 @@
+<header>Boot directory</header>
+<p>When enabled, this path is passed to <tt>grub-install</tt> as
+<tt>--boot-directory</tt>. Leave it disabled for normal installs, where GRUB
+uses its default boot directory, usually <tt>/boot</tt>.</p>
+<p>Use this only for custom layouts, chroots, rescue installs, or systems where
+the GRUB boot files must be installed under a non-default boot directory.</p>

grub2/help/install_bootloader_id.html

@@ -0,0 +1,3 @@
+<header>Boot loader ID</header>
+
+<p>Optional name for the EFI boot loader entry, such as <tt>GRUB</tt> or a distribution name. Leave it blank to let grub-install use its default.</p>

grub2/help/install_cmd.html

@@ -0,0 +1,6 @@
+<header>Boot loader install command</header>
+<p>Command used to install GRUB boot loader files to a disk or EFI system
+partition, usually <tt>grub2-install</tt> or <tt>grub-install</tt>.</p>
+<p>This is separate from regenerating the menu. Installing GRUB changes boot
+loader data on disk or in firmware and should be done only when the target is
+known to be correct.</p>

grub2/help/install_confirm.html

@@ -0,0 +1,3 @@
+<header>Confirmation</header>
+
+<p>Installing GRUB changes boot loader data on disk or in EFI firmware. Confirm this only after checking that the target and EFI directory match the system you intend to boot.</p>

grub2/help/install_directory.html

@@ -0,0 +1,3 @@
+<header>GRUB module directory</header>
+
+<p>Optional directory containing GRUB platform files and <tt>modinfo.sh</tt>. This is normally detected automatically from the platform target, but can be set when the distribution keeps GRUB modules in a non-standard location.</p>

grub2/help/install_efi_dir.html

@@ -0,0 +1,3 @@
+<header>EFI system directory</header>
+
+<p>For UEFI systems, enter the mounted EFI system partition directory, usually <tt>/boot/efi</tt>. Webmin passes this to grub-install as the EFI directory.</p>

grub2/help/install_force.html

@@ -0,0 +1,3 @@
+<header>Force EFI install</header>
+
+<p>Some distributions refuse to run <tt>grub-install</tt> for EFI platforms because the result may not support UEFI Secure Boot. Enable this only when Secure Boot is disabled or when you intentionally need grub-install to proceed anyway.</p>

grub2/help/install_platform.html

@@ -0,0 +1,3 @@
+<header>Platform target</header>
+
+<p>The GRUB platform to install, such as <tt>x86_64-efi</tt>, <tt>arm64-efi</tt>, or <tt>i386-pc</tt>. Webmin detects this from the current boot mode and CPU architecture when possible.</p>

grub2/help/install_target.html

@@ -0,0 +1,3 @@
+<header>Install target</header>
+
+<p>Enter the device that GRUB should install to, such as <tt>/dev/sda</tt>, <tt>/dev/nvme0n1</tt>, or a stable path below <tt>/dev/disk/by-id</tt>. For EFI-only installs this may be left blank when an EFI system directory is supplied.</p>

grub2/help/kernelopts_source.html

@@ -0,0 +1,11 @@
+<header>Detected kernel options source</header>
+<p>Shows where the currently detected Linux boot entries get their kernel
+command-line options.</p>
+<p>Generated menu entries usually come from the GRUB defaults file when the
+menu is regenerated. BLS entries may instead store options in
+<tt>/boot/loader/entries</tt> files, or reference <tt>$kernelopts</tt>.</p>
+<p><tt>kernelopts</tt> is not a setting in <tt>/etc/default/grub</tt>. It is a
+GRUB environment value stored in <tt>grubenv</tt> and commonly managed with
+<tt>grubby</tt>. Webmin does not edit <tt>grubenv</tt> directly; when
+<tt>grubby</tt> is available, Webmin asks it to apply changed kernel options to
+existing BLS entries.</p>

grub2/help/mkconfig.html

@@ -0,0 +1,5 @@
+<header>Menu generation command</header>
+<p>Command used to rebuild the generated GRUB menu file, such as
+<tt>grub2-mkconfig</tt> or <tt>grub-mkconfig</tt>.</p>
+<p>When regenerating the menu, Webmin writes to a temporary file first, checks
+that generated file, and replaces the live menu only after the checks pass.</p>

grub2/help/next_entry.html

@@ -0,0 +1,5 @@
+<header>Next boot entry</header>
+<p>Shows the <tt>next_entry</tt> value from the GRUB environment file. When set,
+GRUB uses this entry for the next boot only and then clears it.</p>
+<p>The Boot Once action sets this value with the configured GRUB runtime
+command.</p>

grub2/help/saved_entry.html

@@ -0,0 +1,6 @@
+<header>Environment default entry</header>
+<p>Shows the <tt>saved_entry</tt> value from the GRUB environment file. When
+<tt>GRUB_DEFAULT=saved</tt>, GRUB uses this saved value as the default boot
+entry.</p>
+<p>The Set as default action updates this value with the configured GRUB
+runtime command.</p>

grub2/help/secure_boot.html

@@ -0,0 +1,6 @@
+<header>Secure Boot</header>
+<p>Shows the detected UEFI Secure Boot state. Secure Boot is only meaningful on
+UEFI systems; on legacy BIOS systems it is not applicable.</p>
+<p>Some distributions restrict or discourage direct <tt>grub-install</tt> use
+when Secure Boot is enabled because an incorrectly installed boot loader may no
+longer satisfy firmware signature checks.</p>

grub2/help/security_current.html

@@ -0,0 +1,15 @@
+<header>Current protection</header>
+<p>GRUB password protection adds a GRUB superuser account to the generated boot
+menu. GRUB asks for this password when someone tries to use the GRUB command
+line or edit boot menu entries. Depending on how menu entries are generated, it
+may also be required to boot entries that are not marked as unrestricted.</p>
+
+<p>This is useful on kiosks, lab systems, shared consoles, and other systems
+where an untrusted person may reach the boot menu. It helps stop simple boot
+menu attacks such as editing kernel parameters, starting a GRUB shell, or
+booting an unrestricted recovery entry.</p>
+
+<p>It does not protect against someone who can change firmware boot settings,
+boot from other media, remove the disk, modify an unencrypted boot partition, or
+log in as root. Use it with firmware security, Secure Boot, encrypted storage,
+and normal operating system access controls when those threats matter.</p>

grub2/help/security_enable.html

@@ -0,0 +1,7 @@
+<header>Enable password protection</header>
+<p>When enabled, GRUB is configured with a superuser and a
+<tt>password_pbkdf2</tt> hash. This protects interactive editing and command
+line access at the boot menu.</p>
+<p>Boot entries that are marked <tt>--unrestricted</tt> can still be started
+without a password. The original password is not stored; only the GRUB PBKDF2
+hash is saved in the configured password script.</p>

grub2/help/security_file.html

@@ -0,0 +1,6 @@
+<header>Password script</header>
+<p>Path to the GRUB generator script that defines the Webmin-managed GRUB
+superuser and password hash.</p>
+<p>The script is included when the generated menu is rebuilt. If the file
+exists but is not recognized as managed by this module, the password status is
+shown as unmanaged.</p>

grub2/help/security_hash.html

@@ -0,0 +1,4 @@
+<header>PBKDF2 hash</header>
+<p>This is the stored GRUB password hash, not the original password. Leave it
+unchanged to keep the current password, or replace it with a hash produced by
+GRUB's password hash command.</p>

grub2/help/security_mkpasswd.html

@@ -0,0 +1,5 @@
+<header>Password hash command</header>
+<p>Command used to generate GRUB PBKDF2 password hashes, usually
+<tt>grub2-mkpasswd-pbkdf2</tt> or <tt>grub-mkpasswd-pbkdf2</tt>.</p>
+<p>GRUB stores the hash, not the original password. This command is needed when
+setting or replacing password protection from this module.</p>

grub2/help/security_password.html

@@ -0,0 +1,4 @@
+<header>New password</header>
+<p>Enter and confirm a new password to replace the stored GRUB PBKDF2 hash.
+GRUB does not store the original password, so existing passwords cannot be
+displayed.</p>

grub2/help/security_user.html

@@ -0,0 +1,3 @@
+<header>Superuser name</header>
+<p>The GRUB user allowed to unlock protected boot menu editing and command-line
+access.</p>

grub2/help/terminal_output.html

@@ -0,0 +1,4 @@
+<header>Terminal output</header>
+<p>Controls the GRUB terminal used for the boot menu. Console output shows the
+plain text menu. Graphical terminal output is required for GRUB themes and
+background images to appear.</p>

grub2/help/theme.html

@@ -0,0 +1,5 @@
+<header>Theme file</header>
+<p>Shows the extracted GRUB theme definition file currently saved in the GRUB
+defaults file. Webmin installs new themes under the configured GRUB theme
+directory in <tt>/boot</tt> and saves the installed theme.txt path here.</p>
+<p>The boot menu must use graphical terminal output for themes to appear.</p>

grub2/help/theme_mode.html

@@ -0,0 +1,6 @@
+<header>Theme action</header>
+<p>Choose whether to keep the current theme setting, remove the theme setting,
+or install a new theme from the source below.</p>
+<p>Installing a theme copies or extracts it into the configured GRUB theme
+directory below <tt>/boot</tt>, then saves the installed theme.txt path in the GRUB
+defaults file.</p>

grub2/help/theme_source.html

@@ -0,0 +1,7 @@
+<header>Theme source</header>
+<p>Enter a local theme.txt file, a local directory containing theme.txt, a local
+<tt>.tar.gz</tt>, <tt>.tar</tt>, or <tt>.zip</tt> theme archive, or an HTTP,
+HTTPS, or FTP URL to one of those files.</p>
+<p>Archives are validated before extraction and installed under the configured
+GRUB theme directory in <tt>/boot</tt> so the boot loader can read the theme
+before the root filesystem is mounted.</p>

grub2/help/timeout.html

@@ -0,0 +1,4 @@
+<header>Timeout</header>
+<p>Number of seconds GRUB waits before booting the default entry. Use 0 for
+immediate boot or -1 to wait indefinitely when supported by the local GRUB
+version.</p>

grub2/help/timeout_style.html

@@ -0,0 +1,4 @@
+<header>Timeout style</header>
+<p>Controls how GRUB behaves while waiting for the timeout. Menu shows the boot
+menu, hidden suppresses it unless interrupted, and countdown displays a compact
+countdown when supported.</p>