diff options
| author | Gaël PORTAY <gael.portay@collabora.com> | 2020-11-14 09:21:39 -0500 |
|---|---|---|
| committer | Gaël PORTAY <gael.portay@collabora.com> | 2021-01-15 11:06:11 -0500 |
| commit | 08b04ec7e72b7327b4803809732b1b8fce8dd069 (patch) | |
| tree | 178f69b3a8fcd6b85604ac1f92fe2add48be1fed /man/bootup.xml | |
| parent | 0141102f104cbb2e469b0e8b946681887e2495f2 (diff) | |
| download | systemd-08b04ec7e72b7327b4803809732b1b8fce8dd069.tar.gz | |
veritysetup-generator: add support for veritytab
This adds the support for veritytab.
The veritytab file contains at most five fields, the first four are
mandatory, the last one is optional:
- The first field contains the name of the resulting verity volume; its
block device is set up /dev/mapper/</filename>.
- The second field contains a path to the underlying block data device,
or a specification of a block device via UUID= followed by the UUID.
- The third field contains a path to the underlying block hash device,
or a specification of a block device via UUID= followed by the UUID.
- The fourth field is the roothash in hexadecimal.
- The fifth field, if present, is a comma-delimited list of options.
The following options are recognized only: ignore-corruption,
restart-on-corruption, panic-on-corruption, ignore-zero-blocks,
check-at-most-once and root-hash-signature. The others options will
be implemented later.
Also, this adds support for the new kernel verity command line boolean
option "veritytab" which enables the read for veritytab, and the new
environment variable SYSTEMD_VERITYTAB which sets the path to the file
veritytab to read.
Diffstat (limited to 'man/bootup.xml')
| -rw-r--r-- | man/bootup.xml | 9 |
1 files changed, 5 insertions, 4 deletions
diff --git a/man/bootup.xml b/man/bootup.xml index 781e539191..431d19a48e 100644 --- a/man/bootup.xml +++ b/man/bootup.xml @@ -92,10 +92,10 @@ <!-- note: do not use unicode ellipsis here, because docbook will replace that with three dots anyway, messing up alignment --> -<programlisting> cryptsetup-pre.target +<programlisting> cryptsetup-pre.target veritysetup-pre.target | (various low-level v - API VFS mounts: (various cryptsetup devices...) + API VFS mounts: (various cryptsetup/veritysetup devices...) mqueue, configfs, | | debugfs, ...) v | | cryptsetup.target | @@ -105,7 +105,7 @@ | v local-fs-pre.target | | | (network file systems) | swap.target | | v v | | | v | remote-cryptsetup.target | - | | (various low-level (various mounts and | | | + | | (various low-level (various mounts and | remote-veritysetup.target | | | services: udevd, fsck services...) | | remote-fs.target | | tmpfiles, random | | | / | | seed, sysctl, ...) v | | / @@ -303,7 +303,8 @@ emergency.service | | | <programlisting> (conflicts with (conflicts with all system all file system services) mounts, swaps, - | cryptsetup + | cryptsetup/ + | veritysetup | devices, ...) | | v v |