summaryrefslogtreecommitdiffstats
path: root/man/repart.d.xml
diff options
context:
space:
mode:
authorMichael A Cassaniti <michael@cassaniti.id.au>2023-08-11 11:30:11 +0200
committerLuca Boccassi <luca.boccassi@gmail.com>2023-08-15 16:32:09 +0200
commitc380047bf401093295d5b21d72611c85431cfbdc (patch)
treefd93b6b773b93877cc3bb64f473cf278565dfe77 /man/repart.d.xml
parentMerge pull request #28838 from DaanDeMeyer/repart-subvolume (diff)
downloadsystemd-c380047bf401093295d5b21d72611c85431cfbdc.tar.xz
systemd-c380047bf401093295d5b21d72611c85431cfbdc.zip
repart: Add verity configuration section and options
Diffstat (limited to 'man/repart.d.xml')
-rw-r--r--man/repart.d.xml21
1 files changed, 21 insertions, 0 deletions
diff --git a/man/repart.d.xml b/man/repart.d.xml
index 261c673249..2fe723673e 100644
--- a/man/repart.d.xml
+++ b/man/repart.d.xml
@@ -577,6 +577,24 @@
</varlistentry>
<varlistentry>
+ <term><varname>VerityDataBlockSizeBytes=</varname></term>
+
+ <listitem><para>Configures the data block size of the generated verity hash partition. Must be between 512 and
+ 4096 bytes and must be a power of 2. Defaults to the sector size if configured explicitly, or the underlying
+ block device sector size, or 4K if systemd-repart is not operating on a block device.
+ </para></listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><varname>VerityHashBlockSizeBytes=</varname></term>
+
+ <listitem><para>Configures the hash block size of the generated verity hash partition. Must be between 512 and
+ 4096 bytes and must be a power of 2. Defaults to the sector size if configured explicitly, or the underlying
+ block device sector size, or 4K if systemd-repart is not operating on a block device.
+ </para></listitem>
+ </varlistentry>
+
+ <varlistentry>
<term><varname>FactoryReset=</varname></term>
<listitem><para>Takes a boolean argument. If specified the partition is marked for removal during a
@@ -831,6 +849,9 @@ VerityMatchKey=root
Type=root-verity
Verity=hash
VerityMatchKey=root
+# Explicitly set the hash and data block size to 4K
+VerityDataBlockSizeBytes=4096
+VerityHashBlockSizeBytes=4096
</programlisting></para>
</example>