From d5fcc5b0532269d2450ed15a2bddca937f123ea9 Mon Sep 17 00:00:00 2001
From: Lennart Poettering <lennart@poettering.net>
Date: Thu, 9 Sep 2021 16:04:00 +0200
Subject: [PATCH] dissect-image: add env var for disabling "sidecar" loading of
 verity params

Just to make debugging easier.
---
 src/shared/dissect-image.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/src/shared/dissect-image.c b/src/shared/dissect-image.c
index af65d15306a..157ef262f17 100644
--- a/src/shared/dissect-image.c
+++ b/src/shared/dissect-image.c
@@ -2609,6 +2609,12 @@ int verity_settings_load(
         if (is_device_path(image))
                 return 0;
 
+        r = getenv_bool_secure("SYSTEMD_DISSECT_VERITY_SIDECAR");
+        if (r < 0 && r != -ENXIO)
+                log_debug_errno(r, "Failed to parse $SYSTEMD_DISSECT_VERITY_SIDECAR, ignoring: %m");
+        if (r == 0)
+                return 0;
+
         designator = verity->designator;
 
         /* We only fill in what isn't already filled in */
-- 
2.47.3