]> git.ipfire.org Git - thirdparty/systemd.git/commit
dissect/nspawn: add support for dm-verity root hash signature
authorLuca Boccassi <luca.boccassi@microsoft.com>
Tue, 2 Jun 2020 14:35:58 +0000 (15:35 +0100)
committerLuca Boccassi <luca.boccassi@microsoft.com>
Thu, 25 Jun 2020 07:45:21 +0000 (08:45 +0100)
commitc2923fdcd771e1e6470a6c67c23d4b21f536e7f6
tree01a93f97d2aa6f5ac510876b4c322d4c3927b767
parent035e8e50d73a0e5427149bbe50a426dd84ece178
dissect/nspawn: add support for dm-verity root hash signature

Since cryptsetup 2.3.0 a new API to verify dm-verity volumes by a
pkcs7 signature, with the public key in the kernel keyring,
is available. Use it if libcryptsetup supports it.
README
man/systemd-nspawn.xml
meson.build
shell-completion/bash/systemd-nspawn
src/core/namespace.c
src/dissect/dissect.c
src/nspawn/nspawn.c
src/shared/dissect-image.c
src/shared/dissect-image.h