systemd-veritysetup@.service8
Disk verity protection logic
Usage
/usr/lib/systemd/systemd-veritysetup
Overview
[email protected] is a service responsible for setting up verity protection block devices. It should be instantiated for each device that requires verity protection.
At early boot and when the system manager configuration is reloaded kernel command line configuration for verity protected block devices is translated into [email protected] units by systemd-veritysetup-generator(8).
[email protected] calls systemd-veritysetup.
Commands
The following commands are understood by systemd-veritysetup:
attach volume datadevice hashdevice roothash [option...]
Create a block device volume using datadevice and hashdevice as the backing devices. roothash forms the root of the tree of hashes stored on hashdevice. See Kernel dm-verity[1] documentation for details.
Added in version 250.
detach volume
Detach (destroy) the block device volume.
Added in version 250.
help
Print short information about command syntax.
Added in version 250.
Notes
- 1.
-
Kernel dm-verity
https://docs.kernel.org/admin-guide/device-mapper/verity.html
Releases
5 releases since Debian 10 (Buster); the text changed 4 times.