From 799cd3100b306abde6864b896006d0c75c57fb90 Mon Sep 17 00:00:00 2001 From: Daan De Meyer Date: Wed, 23 Aug 2023 21:53:40 +0200 Subject: [PATCH] repart: Make verity example more useful Add Minimize= so the size gets calculated correctly and add a verity signature partition as well for completeness. --- man/repart.d.xml | 13 +++++++++++-- 1 file changed, 11 insertions(+), 2 deletions(-) diff --git a/man/repart.d.xml b/man/repart.d.xml index 2fe723673ea..411070bdc4d 100644 --- a/man/repart.d.xml +++ b/man/repart.d.xml @@ -831,10 +831,10 @@ SizeMaxBytes=64M - Create a data and verity partition from a OS tree + Create a data partition and corresponding verity partitions from a OS tree Assuming we have an OS tree at /var/tmp/os-tree that we want to package in a root partition - together with a matching verity partition, we can do so as follows: + together with matching verity partitions, we can do so as follows: # 50-root.conf [Partition] @@ -842,6 +842,7 @@ Type=root CopyFiles=/var/tmp/os-tree Verity=data VerityMatchKey=root +Minimize=guess # 60-root-verity.conf @@ -852,6 +853,14 @@ VerityMatchKey=root # Explicitly set the hash and data block size to 4K VerityDataBlockSizeBytes=4096 VerityHashBlockSizeBytes=4096 +Minimize=best + + +# 70-root-verity-sig.conf +[Partition] +Type=root-verity-sig +Verity=signature +VerityMatchKey=root