From: Lennart Poettering Date: Thu, 23 Apr 2026 15:28:16 +0000 (+0200) Subject: man: clarify that /etc/verity.d only parses certificates with the .crt extension... X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=add93be96015addf05b2a39f44ab9f2003574dce;p=thirdparty%2Fsystemd.git man: clarify that /etc/verity.d only parses certificates with the .crt extension (#41790) Exposed in the dracut testsuite while adding tests for sysexts: ``` [ 2.972948] localhost (sd-merge)[510]: Validation of dm-verity signature failed via the kernel, trying userspace validation instead: Required key not available [ 2.972993] localhost (sd-merge)[510]: Skipping file '/etc/verity.d/dracut.pem', suffix is not '.crt'. [ 2.973045] localhost (sd-merge)[510]: No userspace dm-verity certificates found. ``` https://github.com/systemd/systemd/blob/658e5ac06f80ee2078b034f7cc483204d7f91c5e/src/shared/dissect-image.c#L3093 --- add93be96015addf05b2a39f44ab9f2003574dce