mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-10-01 06:21:56 -09:00
fs/squashfs: add options to build verity tree
Signed-off-by: Fiona Klute (othermo GmbH) <fiona.klute@gmx.de> Signed-off-by: Julien Olivain <ju.o@free.fr>
This commit is contained in:
committed by
Julien Olivain
parent
7198cea534
commit
036f8558c4
@@ -121,4 +121,27 @@ config BR2_TARGET_ROOTFS_SQUASHFS_COMP_OPTS
|
|||||||
default "-Xcompression-level 22" if BR2_TARGET_ROOTFS_SQUASHFS4_ZSTD
|
default "-Xcompression-level 22" if BR2_TARGET_ROOTFS_SQUASHFS4_ZSTD
|
||||||
depends on BR2_TARGET_ROOTFS_SQUASHFS_EXTREME_COMP
|
depends on BR2_TARGET_ROOTFS_SQUASHFS_EXTREME_COMP
|
||||||
|
|
||||||
|
config BR2_TARGET_ROOTFS_SQUASHFS_VERITY
|
||||||
|
bool "create verity hash data for root filesystem"
|
||||||
|
select BR2_PACKAGE_HOST_CRYPTSETUP
|
||||||
|
help
|
||||||
|
Create verity hash tree for the root filesystem. This allows
|
||||||
|
setting up a dm-verity device for the root filesystem, to
|
||||||
|
ensure data integrity. The root hash must be provided from a
|
||||||
|
trusted source, or with a kernel-verifiable signature.
|
||||||
|
|
||||||
|
The verity hash image will be called rootfs.squashfs.verity,
|
||||||
|
with the root hash in rootfs.squashfs.verity.root-hash.
|
||||||
|
|
||||||
|
if BR2_TARGET_ROOTFS_SQUASHFS_VERITY
|
||||||
|
|
||||||
|
config BR2_TARGET_ROOTFS_SQUASHFS_VERITY_EXTRA_ARGS
|
||||||
|
string "Additional arguments for veritysetup"
|
||||||
|
help
|
||||||
|
Additional arguments for the "veritysetup format" call. Use
|
||||||
|
this if you want to set options, e.g. the hash algorithm,
|
||||||
|
instead of using defaults.
|
||||||
|
|
||||||
|
endif # BR2_TARGET_ROOTFS_SQUASHFS_VERITY
|
||||||
|
|
||||||
endif
|
endif
|
||||||
|
|||||||
@@ -32,6 +32,10 @@ else
|
|||||||
ROOTFS_SQUASHFS_ARGS += -comp gzip
|
ROOTFS_SQUASHFS_ARGS += -comp gzip
|
||||||
endif
|
endif
|
||||||
|
|
||||||
|
ifeq ($(BR2_TARGET_ROOTFS_SQUASHFS_VERITY),y)
|
||||||
|
ROOTFS_SQUASHFS_VERITY_EXTRA_ARGS = $(call qstrip,$(BR2_TARGET_ROOTFS_SQUASHFS_VERITY_EXTRA_ARGS))
|
||||||
|
endif
|
||||||
|
|
||||||
define ROOTFS_SQUASHFS_CMD
|
define ROOTFS_SQUASHFS_CMD
|
||||||
$(HOST_DIR)/bin/mksquashfs $(TARGET_DIR) $@ $(ROOTFS_SQUASHFS_ARGS)
|
$(HOST_DIR)/bin/mksquashfs $(TARGET_DIR) $@ $(ROOTFS_SQUASHFS_ARGS)
|
||||||
endef
|
endef
|
||||||
|
|||||||
Reference in New Issue
Block a user