1
0
mirror of https://github.com/systemd/systemd.git synced 2025-03-25 18:50:18 +03:00

repart: do not fail if no key/cert provided and verity-sig is deferred

This commit is contained in:
Luca Boccassi 2025-02-03 10:38:00 +01:00
parent ed8063d143
commit 92d2206534

View File

@ -2487,11 +2487,11 @@ static int partition_read_definition(Partition *p, const char *path, const char
return log_syntax(NULL, LOG_ERR, path, 1, SYNTHETIC_ERRNO(EINVAL),
"Encrypting verity hash/data partitions is not supported.");
if (p->verity == VERITY_SIG && !arg_private_key)
if (p->verity == VERITY_SIG && !arg_private_key && !partition_type_defer(&p->type))
return log_syntax(NULL, LOG_ERR, path, 1, SYNTHETIC_ERRNO(EINVAL),
"Verity signature partition requested but no private key provided (--private-key=).");
if (p->verity == VERITY_SIG && !arg_certificate)
if (p->verity == VERITY_SIG && !arg_certificate && !partition_type_defer(&p->type))
return log_syntax(NULL, LOG_ERR, path, 1, SYNTHETIC_ERRNO(EINVAL),
"Verity signature partition requested but no PEM certificate provided (--certificate=).");