diff options
author | Gaël PORTAY <gael.portay@collabora.com> | 2020-11-13 06:00:25 -0500 |
---|---|---|
committer | Gaël PORTAY <gael.portay@collabora.com> | 2021-01-14 19:41:41 -0500 |
commit | 0141102f104cbb2e469b0e8b946681887e2495f2 (patch) | |
tree | 5771cb8a644de89fe2853a80bfe87c504fbf54d8 /man | |
parent | cb0198a13c26fe990ffc9f3e6a471036fdb43d1d (diff) | |
download | systemd-0141102f104cbb2e469b0e8b946681887e2495f2.tar.gz |
veritysetup-generator: add support for verity root options
This adds support for a new kernel root verity command line option
"verity_root_options=" which controls the behaviour of dm-verity by
forwarding options directly to systemd-veritysetup.
See `veritysetup(8)` for more details.
Diffstat (limited to 'man')
-rw-r--r-- | man/kernel-command-line.xml | 1 | ||||
-rw-r--r-- | man/systemd-veritysetup-generator.xml | 11 |
2 files changed, 12 insertions, 0 deletions
diff --git a/man/kernel-command-line.xml b/man/kernel-command-line.xml index 7a4109916c..c55b4b17ab 100644 --- a/man/kernel-command-line.xml +++ b/man/kernel-command-line.xml @@ -361,6 +361,7 @@ <term><varname>rd.systemd.verity=</varname></term> <term><varname>systemd.verity_root_data=</varname></term> <term><varname>systemd.verity_root_hash=</varname></term> + <term><varname>systemd.verity.root_options=</varname></term> <listitem> <para>Configures the integrity protection root hash for the root file system, and other related parameters. For details, see diff --git a/man/systemd-veritysetup-generator.xml b/man/systemd-veritysetup-generator.xml index d2736a7fd5..86171ed005 100644 --- a/man/systemd-veritysetup-generator.xml +++ b/man/systemd-veritysetup-generator.xml @@ -81,6 +81,17 @@ (see above).</para></listitem> </varlistentry> + <varlistentry> + <term><varname>systemd.verity_root_options=</varname></term> + + <listitem><para>Takes a comma-separated list of dm-verity options. Expects the following options + <option>ignore-corruption</option>, <option>restart-on-corruption</option>, <option>ignore-zero-blocks</option>, + <option>check-at-most-once</option>, <option>panic-on-corruption</option> and + <option>root-hash-signature</option>. See + <citerefentry><refentrytitle>veritysetup</refentrytitle><manvolnum>8</manvolnum></citerefentry> for more + details.</para></listitem> + </varlistentry> + </variablelist> </refsect1> |