]> git.ipfire.org Git - thirdparty/systemd.git/commit
dissect: support single-filesystem verity images with external verity hash 16046/head
authorLuca Boccassi <luca.boccassi@microsoft.com>
Fri, 29 May 2020 16:51:20 +0000 (17:51 +0100)
committerLuca Boccassi <luca.boccassi@microsoft.com>
Tue, 9 Jun 2020 11:19:21 +0000 (12:19 +0100)
commite7cbe5cb9e7d246474dcee1d8e759ed3c8786913
tree79db422f24c020d05f224a86af620321d47ad4d9
parentb1806441bbf72fb227f41767ceaf2d6330701f51
dissect: support single-filesystem verity images with external verity hash

dm-verity support in dissect-image at the moment is restricted to GPT
volumes.
If the image a single-filesystem type without a partition table (eg: squashfs)
and a roothash/verity file are passed, set the verity flag and mark as
read-only.
14 files changed:
man/systemd-nspawn.xml
src/core/namespace.c
src/dissect/dissect.c
src/gpt-auto-generator/gpt-auto-generator.c
src/nspawn/nspawn.c
src/portable/portable.c
src/shared/dissect-image.c
src/shared/dissect-image.h
src/shared/machine-image.c
src/test/test-dissect-image.c
test/TEST-50-DISSECT/Makefile [new symlink]
test/TEST-50-DISSECT/test.sh [new file with mode: 0755]
test/units/testsuite-50.service [new file with mode: 0644]
test/units/testsuite-50.sh [new file with mode: 0755]