1
0
mirror of https://github.com/systemd/systemd.git synced 2024-12-25 01:34:28 +03:00
systemd/mkosi.presets/20-final/mkosi.repart/11-usr-verity.conf
Daan De Meyer 47e5e12866 mkosi: Package a erofs usr partition with signed verity
Let's start moving towards a more involved partitioning setup to
test our stuff more when using mkosi.

The root partition is generated on boot with systemd-repart.

CentOS supports neither erofs nor btrfs so we use squashfs and xfs
instead.

We also enable SecureBoot= locally for additional coverage. This
and the use of verity means users need to run `mkosi genkey` once
to generate the keys necessary to do secure boot and verity.
2023-05-13 10:49:17 +02:00

8 lines
118 B
Plaintext

# SPDX-License-Identifier: LGPL-2.1-or-later
[Partition]
Type=usr-verity
Verity=hash
VerityMatchKey=usr
Minimize=yes