chkboot is a tool to help detect changes to an unencrypted /boot partition.