shaba/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2025-01-03 05:18:09 +03:00
Code

repart: Make verity example more useful

Browse Source 
Add Minimize= so the size gets calculated correctly and add a verity
signature partition as well for completeness.
This commit is contained in:
Daan De Meyer 2023-08-23 21:53:40 +02:00 committed by Zbigniew Jędrzejewski-Szmek
parent 9541addff0
commit 799cd3100b
1 changed files with 11 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
man/repart.d.xml
View File

@ -831,10 +831,10 @@ SizeMaxBytes=64M
</example> </example>
<example> <example>
<title>Create a data and verity partition from a OS tree</title> <title>Create a data partition and corresponding verity partitions from a OS tree</title>
<para>Assuming we have an OS tree at /var/tmp/os-tree that we want to package in a root partition <para>Assuming we have an OS tree at /var/tmp/os-tree that we want to package in a root partition
together with a matching verity partition, we can do so as follows:</para> together with matching verity partitions, we can do so as follows:</para>
<para><programlisting># 50-root.conf <para><programlisting># 50-root.conf
[Partition] [Partition]
@ -842,6 +842,7 @@ Type=root
CopyFiles=/var/tmp/os-tree CopyFiles=/var/tmp/os-tree
Verity=data Verity=data
VerityMatchKey=root VerityMatchKey=root
Minimize=guess
</programlisting></para> </programlisting></para>
<para><programlisting># 60-root-verity.conf <para><programlisting># 60-root-verity.conf
@ -852,6 +853,14 @@ VerityMatchKey=root
# Explicitly set the hash and data block size to 4K # Explicitly set the hash and data block size to 4K
VerityDataBlockSizeBytes=4096 VerityDataBlockSizeBytes=4096
VerityHashBlockSizeBytes=4096 VerityHashBlockSizeBytes=4096
Minimize=best
</programlisting></para>
<para><programlisting># 70-root-verity-sig.conf
[Partition]
Type=root-verity-sig
Verity=signature
VerityMatchKey=root
</programlisting></para> </programlisting></para>
</example> </example>