[Buildroot] [PATCH 2/2] fs/squashfs: enable squashfs to generate a verity hashtable
Yann E. MORIN
yann.morin.1998 at free.fr
Fri Mar 23 17:22:08 UTC 2018
Ben, All,
On 2018-03-23 09:32 +0000, Ben Whitten spake thusly:
> On Thu, 22 Mar 2018 at 22:32 Peter Korsgaard <peter at korsgaard.com> wrote:
> > >>>>> "Yann" == Yann E MORIN <yann.morin.1998 at free.fr> writes:
> > > On 2018-03-22 21:06 +0000, Ben Whitten spake thusly:
> > >> For those times that you want to verify that your readonly filesystem
> > >> hasn't been tampered we can generate a dm-verity hash table.
> > >> The root hash is enclosed in .table file and must be secured else where.
> >
> > Strange, I don't seem to have received the original patch?
> I think the mailing list ate it as I was not a subscriber at the time.
> Only the CC went to Yann.
Did you subscribe now? ;-)
> > > My position is that this should be done in a post-image script.
> > I agree!
[--SNIP--]
> Thats fair enough, here is possibly not the right place for it.
> I guess its a question of how much should be put into post processing.
> Generating this after the image means that I'd need to roll ubinize manually
> per device instead of using the settings in KConfig, which seems a bit messy.
So, you meant that ubinize can use that .table output from verifysetup
generates?
> The other patch that was eaten decoupled ubi from ubifs to allow this.
Yeah, I still need to have a look at that patch. I already have a few
comments about it, but please, repost both to the list so that everyone
can see them and understand the replies...
Regards,
Yann E. MORIN.
--
.-----------------.--------------------.------------------.--------------------.
| Yann E. MORIN | Real-Time Embedded | /"\ ASCII RIBBON | Erics' conspiracy: |
| +33 662 376 056 | Software Designer | \ / CAMPAIGN | ___ |
| +33 223 225 172 `------------.-------: X AGAINST | \e/ There is no |
| http://ymorin.is-a-geek.org/ | _/*\_ | / \ HTML MAIL | v conspiracy. |
'------------------------------^-------^------------------^--------------------'
More information about the buildroot
mailing list