Skip to content

Conversation

@aale24
Copy link
Contributor

@aale24 aale24 commented Jun 27, 2025

Implement rd.kiwi.verity_options= parameter to allow runtime customization of veritysetup options

Fixes #2837 .

Changes proposed in this pull request:

Add kernel command line parsing to kiwi-veritytab-setup.sh. The script already sources dracut-lib.sh, which provides access to getarg function.

Supported Options:

panic-on-corruption - System panics on corruption detection
restart-on-corruption - System restarts on corruption (default)
ignore-corruption - Ignore corruption (debugging only)
ignore-zero-blocks - Ignore zero blocks
check-at-most-once - Verify blocks only once
Veritysetup options as documented in veritysetup(8)

Usage Example:

rd.kiwi.verity_options=panic-on-corruption,check-at-most-once

Adding rd.kiwi.verity_options=panic-on-corruption

[63.380164] dracut-initqueue[893]: ///lib/dracut/hooks/initqueue/settled/71-kiwi-veritytab-setup.sh@50(): veritysetup open /dev/disk/by-uuid/**** verityroot /dev/disk/by-uuid/**** **** --hash-offset=**** --hash-block-size=4096 --panic-on-corruption

Implement rd.kiwi.verity_options= parameter to allow runtime customization of veritysetup options

Closes OSInside#2837
Copy link
Collaborator

@schaefi schaefi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks great 👍 Thanks much

@schaefi schaefi merged commit ae1328d into OSInside:main Jun 27, 2025
14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add support for custom veritysetup corruption handling flags in XML configuration

2 participants