fix(systemd-sysext): add dependency to systemd-veritysetup

The common use case is a bootloader or a UEFI boot stub (e.g. systemd-stub(7))
that follows the BLS adding extensions found in the ESP to the /.extra directory
in the initrd. In this case, it's used by default a strict
"root=signed+absent:usr=signed+absent" image policy (see
systemd.image-policy(7)). This means, Verity authentication and a PKCS#7
signature of the Verity root hash.

diff --git a/modules.d/11systemd-sysext/module-setup.sh b/modules.d/11systemd-sysext/module-setup.sh
index 79216f3ce2f87f5ac1617a5057593ae677d7e2ef..d08e20cfc6c93761c4542efd87f9af9c4dbb9339 100755 (executable)
--- a/modules.d/11systemd-sysext/module-setup.sh
+++ b/modules.d/11systemd-sysext/module-setup.sh
@@ -17,7 +17,7 @@ check() {
 depends() {
 
     # This module has external dependency on other module(s).
-    echo systemd
+    echo systemd systemd-veritysetup
     # Return 0 to include the dependent module(s) in the initramfs.
     return 0