]> git.ipfire.org Git - thirdparty/util-linux.git/commit
libmount: add support for verity devices via libcryptsetup
authorLuca Boccassi <luca.boccassi@microsoft.com>
Fri, 8 Nov 2019 17:02:09 +0000 (17:02 +0000)
committerLuca Boccassi <luca.boccassi@microsoft.com>
Thu, 5 Dec 2019 10:39:21 +0000 (10:39 +0000)
commite6a498877cf83fddd837b8f22c936f4f9b61b2d7
tree8f8d5536682b91f6009ad28a8829ec49d6d865d5
parent21c97651f4179148afc4a9896fa4c2cae27a34fe
libmount: add support for verity devices via libcryptsetup

The following new options are added:

verity.hashdevice
verity.roothash
verity.hashoffset

The source path will be used as a dm-verity object, and will be
opened using libcryptsetup APIs.

A new --with-cryptsetup build-time option is added, which adds a
dependency on libcryptsetup. To ease bootstrapping, given libcryptsetup
build-depends on util-linux for libuuid, if --with-cryptsetup=yes but
libcryptsetup is not installed only a warning will be printed at
configure time rather than an error. This way stage0/first stage/ring0
builds can use the same configure options but avoid installing
cryptsetup to get a working base set, and then rebuild util-linux in
the next step of the boostrapping process.

If verity options are selected but cannot be fullfilled due to lack of
dependencies, mounting a volume will fail even if using a loop device
would work as a fallback, to avoid silently skipping integrity checks.
14 files changed:
Makefile.am
configure.ac
libmount/docs/libmount-sections.txt
libmount/mount.pc.in
libmount/python/pylibmount.c
libmount/src/Makemodule.am
libmount/src/context.c
libmount/src/context_mount.c
libmount/src/context_veritydev.c [new file with mode: 0644]
libmount/src/init.c
libmount/src/libmount.h.in
libmount/src/mountP.h
libmount/src/optmap.c
sys-utils/mount.8