From: Antonio Alvarez Feijoo <antonio.feijoo@suse.com>
Date: Wed, 22 Apr 2026 09:38:11 +0000 (+0200)
Subject: fix(systemd-sysext): add dependency to systemd-veritysetup
X-Git-Tag: 111~8
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=87f4ffd2f153b3cf026804bf483e5c13dcb54752;p=thirdparty%2Fdracut-ng.git

fix(systemd-sysext): add dependency to systemd-veritysetup

The common use case is a bootloader or a UEFI boot stub (e.g. systemd-stub(7))
that follows the BLS adding extensions found in the ESP to the /.extra directory
in the initrd. In this case, it's used by default a strict
"root=signed+absent:usr=signed+absent" image policy (see
systemd.image-policy(7)). This means, Verity authentication and a PKCS#7
signature of the Verity root hash.
---

diff --git a/modules.d/11systemd-sysext/module-setup.sh b/modules.d/11systemd-sysext/module-setup.sh
index 79216f3ce..d08e20cfc 100755
--- a/modules.d/11systemd-sysext/module-setup.sh
+++ b/modules.d/11systemd-sysext/module-setup.sh
@@ -17,7 +17,7 @@ check() {
 depends() {
 
     # This module has external dependency on other module(s).
-    echo systemd
+    echo systemd systemd-veritysetup
     # Return 0 to include the dependent module(s) in the initramfs.
     return 0