diff options
| author | Mark Boudreau <mboudreaudalton@gmail.com> | 2021-11-13 13:15:17 -0500 |
|---|---|---|
| committer | Mark Boudreau <mboudreaudalton@gmail.com> | 2021-11-19 15:54:26 -0500 |
| commit | e5196eeec2cebf871302b9abb47d0e4ccd76a46b (patch) | |
| tree | dd754138db02c53c22500c224e564eb7701bfc51 /man/systemd-veritysetup-generator.xml | |
| parent | c1b9e3dffe960322c1649c37416366fc8dc2d941 (diff) | |
| download | systemd-e5196eeec2cebf871302b9abb47d0e4ccd76a46b.tar.gz | |
Document usr-specific verity parameters
Mention 'usrhash' and 'systemd.verity_usr_*' kernel command line
parameters in the man pages for veritysetup-generator and
kernel-command-line
Diffstat (limited to 'man/systemd-veritysetup-generator.xml')
| -rw-r--r-- | man/systemd-veritysetup-generator.xml | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/man/systemd-veritysetup-generator.xml b/man/systemd-veritysetup-generator.xml index 3c9ee6788f..e1528107d2 100644 --- a/man/systemd-veritysetup-generator.xml +++ b/man/systemd-veritysetup-generator.xml @@ -33,7 +33,7 @@ <citerefentry><refentrytitle>systemd-veritysetup@.service</refentrytitle><manvolnum>8</manvolnum></citerefentry> units as necessary.</para> - <para>Currently, only a single verity device may be set up with this generator, backing the root file system of the + <para>Currently, only two verity devices may be set up with this generator, backing the root and <filename>/usr</filename> file systems of the OS.</para> <para><filename>systemd-veritysetup-generator</filename> implements @@ -92,6 +92,14 @@ details.</para></listitem> </varlistentry> + <varlistentry> + <term><varname>usrhash=</varname></term> + <term><varname>systemd.verity_usr_data=</varname></term> + <term><varname>systemd.verity_usr_hash=</varname></term> + <term><varname>systemd.verity_usr_options=</varname></term> + + <listitem><para>Equivalent to their counterparts for the root file system as described above, but apply to the <filename>/usr/</filename> file system instead.</para></listitem> + </varlistentry> </variablelist> </refsect1> |