Skip to content

Commit e1cd63b

Browse files
committed
Merge: redhat/dracut-virt.conf: add systemd-veritysetup module
MR: https://gitlab.com/redhat/centos-stream/src/kernel/centos-stream-9/-/merge_requests/4604 ``` JIRA: https://issues.redhat.com/browse/RHEL-45168 Upstream Status: RHEL-Only This module, together with a specific kernel cmdline and separate partition containing the verification hash produced by veritysetup, enables root disk integrity protection for UKIs. Signed-off-by: Emanuele Giuseppe Esposito <eesposit@redhat.com> ``` Approved-by: Snir <ssheribe@redhat.com> Approved-by: Vitaly Kuznetsov <vkuznets@redhat.com> Approved-by: Jarod Wilson <jarod@redhat.com> Approved-by: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> Merged-by: Scott Weaver <scweaver@redhat.com>
2 parents d8b06b6 + 1dd8a46 commit e1cd63b

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

redhat/dracut-virt.conf

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -17,6 +17,9 @@ dracutmodules+=" crypt crypt-loop tpm2-tss "
1717
# WALinuxagent-cvm with CVM specific udev rules
1818
dracutmodules+=" walinuxagentcvm "
1919

20+
# modules: root disk integrity protection
21+
dracutmodules+=" systemd-veritysetup "
22+
2023
# drivers: virtual buses, pci
2124
drivers+=" virtio-pci virtio-mmio " # qemu-kvm
2225
drivers+=" hv-vmbus pci-hyperv " # hyperv
@@ -31,6 +34,9 @@ drivers+=" xen-blkfront " # xen
3134
# root encryption
3235
drivers+=" dm_crypt "
3336

37+
# root disk integrity protection
38+
drivers+=" dm_verity overlay "
39+
3440
# filesystems
3541
filesystems+=" vfat ext4 xfs overlay "
3642

0 commit comments

Comments
 (0)