mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-26 12:00:48 -09:00
Code Issues Packages Projects Releases Wiki Activity

fs/squashfs: add options to build verity tree

Browse Source 
Signed-off-by: Fiona Klute (othermo GmbH) <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
This commit is contained in:
Fiona Klute (othermo GmbH)
2026-09-19 23:35:41 +02:00
committed by Julien Olivain
parent 7198cea534
commit 036f8558c4
2 changed files with 27 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
fs/squashfs/Config.in
View File

@@ -121,4 +121,27 @@ config BR2_TARGET_ROOTFS_SQUASHFS_COMP_OPTS
default "-Xcompression-level 22" if BR2_TARGET_ROOTFS_SQUASHFS4_ZSTD
depends on BR2_TARGET_ROOTFS_SQUASHFS_EXTREME_COMP
config BR2_TARGET_ROOTFS_SQUASHFS_VERITY
bool "create verity hash data for root filesystem"
select BR2_PACKAGE_HOST_CRYPTSETUP
help
Create verity hash tree for the root filesystem. This allows
setting up a dm-verity device for the root filesystem, to
ensure data integrity. The root hash must be provided from a
trusted source, or with a kernel-verifiable signature.
The verity hash image will be called rootfs.squashfs.verity,
with the root hash in rootfs.squashfs.verity.root-hash.
if BR2_TARGET_ROOTFS_SQUASHFS_VERITY
config BR2_TARGET_ROOTFS_SQUASHFS_VERITY_EXTRA_ARGS
string "Additional arguments for veritysetup"
help
Additional arguments for the "veritysetup format" call. Use
this if you want to set options, e.g. the hash algorithm,
instead of using defaults.
endif # BR2_TARGET_ROOTFS_SQUASHFS_VERITY
endif

4
fs/squashfs/squashfs.mk
View File

@@ -32,6 +32,10 @@ else
ROOTFS_SQUASHFS_ARGS += -comp gzip
endif
ifeq ($(BR2_TARGET_ROOTFS_SQUASHFS_VERITY),y)
ROOTFS_SQUASHFS_VERITY_EXTRA_ARGS = $(call qstrip,$(BR2_TARGET_ROOTFS_SQUASHFS_VERITY_EXTRA_ARGS))
endif
define ROOTFS_SQUASHFS_CMD
$(HOST_DIR)/bin/mksquashfs $(TARGET_DIR) $@ $(ROOTFS_SQUASHFS_ARGS)
endef