From: Lennart Poettering <lennart@poettering.net>
Date: Thu, 9 Sep 2021 14:04:00 +0000 (+0200)
Subject: dissect-image: add env var for disabling "sidecar" loading of verity params
X-Git-Tag: v250-rc1~606^2~5
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=d5fcc5b0532269d2450ed15a2bddca937f123ea9;p=thirdparty%2Fsystemd.git

dissect-image: add env var for disabling "sidecar" loading of verity params

Just to make debugging easier.
---

diff --git a/src/shared/dissect-image.c b/src/shared/dissect-image.c
index af65d15306a..157ef262f17 100644
--- a/src/shared/dissect-image.c
+++ b/src/shared/dissect-image.c
@@ -2609,6 +2609,12 @@ int verity_settings_load(
         if (is_device_path(image))
                 return 0;
 
+        r = getenv_bool_secure("SYSTEMD_DISSECT_VERITY_SIDECAR");
+        if (r < 0 && r != -ENXIO)
+                log_debug_errno(r, "Failed to parse $SYSTEMD_DISSECT_VERITY_SIDECAR, ignoring: %m");
+        if (r == 0)
+                return 0;
+
         designator = verity->designator;
 
         /* We only fill in what isn't already filled in */