diff options
| author | Daan De Meyer <daan.j.demeyer@gmail.com> | 2023-05-08 16:06:41 +0200 |
|---|---|---|
| committer | Daan De Meyer <daan.j.demeyer@gmail.com> | 2023-05-13 10:49:17 +0200 |
| commit | 47e5e12866af14112452aeb8bc43a66191c6fbc1 (patch) | |
| tree | f1f38524a56a3e7a5a3957ed638ba493bbb48650 /docs | |
| parent | 724683c27fd35e4828e35320ccfc62f885ca20bc (diff) | |
| download | systemd-47e5e12866af14112452aeb8bc43a66191c6fbc1.tar.gz | |
mkosi: Package a erofs usr partition with signed verity
Let's start moving towards a more involved partitioning setup to
test our stuff more when using mkosi.
The root partition is generated on boot with systemd-repart.
CentOS supports neither erofs nor btrfs so we use squashfs and xfs
instead.
We also enable SecureBoot= locally for additional coverage. This
and the use of verity means users need to run `mkosi genkey` once
to generate the keys necessary to do secure boot and verity.
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/HACKING.md | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/docs/HACKING.md b/docs/HACKING.md index 3af58f6b27..0aa9233345 100644 --- a/docs/HACKING.md +++ b/docs/HACKING.md @@ -40,9 +40,11 @@ the [GitHub repository](https://github.com/systemd/mkosi). `mkosi` will build an image for the host distro by default. Currently, the latest github commit is required. `mkosi` also requires systemd v253 (unreleased) or newer. If systemd v253 is not available, `mkosi` will automatically use executables from the systemd build -directory if it's executed from the systemd repository root directory. It is -sufficient to type `mkosi` in the systemd project directory to generate a disk image -you can boot either in `systemd-nspawn` or in a UEFI-capable VM: +directory if it's executed from the systemd repository root directory. First, run +`mkosi genkey` to generate a key and certificate to be used for secure boot and +verity signing. After that is done, it is sufficient to type `mkosi` in the systemd +project directory to generate a disk image you can boot either in `systemd-nspawn` +or in a UEFI-capable VM: ```sh $ sudo mkosi boot # nspawn still needs sudo for now |