blob: f12ba36fe3eb6b09891b582ca4ff907b0ab7f8e3 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
|
'\" t
.TH "SYSTEMD\-VERITYSETUP@\&.SERVICE" "8" "" "systemd 255" "systemd-veritysetup@.service"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.\" http://bugs.debian.org/507673
.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.ie \n(.g .ds Aq \(aq
.el .ds Aq '
.\" -----------------------------------------------------------------
.\" * set default formatting
.\" -----------------------------------------------------------------
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
.ad l
.\" -----------------------------------------------------------------
.\" * MAIN CONTENT STARTS HERE *
.\" -----------------------------------------------------------------
.SH "NAME"
systemd-veritysetup@.service, systemd-veritysetup \- Disk verity protection logic
.SH "SYNOPSIS"
.PP
systemd\-veritysetup@\&.service
.PP
/usr/lib/systemd/systemd\-veritysetup
.SH "DESCRIPTION"
.PP
systemd\-veritysetup@\&.service
is a service responsible for setting up verity protection block devices\&. It should be instantiated for each device that requires verity protection\&.
.PP
At early boot and when the system manager configuration is reloaded kernel command line configuration for verity protected block devices is translated into
systemd\-veritysetup@\&.service
units by
\fBsystemd-veritysetup-generator\fR(8)\&.
.PP
systemd\-veritysetup@\&.service
calls
\fBsystemd\-veritysetup\fR\&.
.SH "COMMANDS"
.PP
The following commands are understood by
\fBsystemd\-veritysetup\fR:
.PP
\fBattach\fR \fIvolume\fR \fIdatadevice\fR \fIhashdevice\fR \fIroothash\fR [\fIoption\fR\&.\&.\&.]
.RS 4
Create a block device
\fIvolume\fR
using
\fIdatadevice\fR
and
\fIhashdevice\fR
as the backing devices\&.
\fIroothash\fR
forms the root of the tree of hashes stored on
\fIhashdevice\fR\&. See
\m[blue]\fBKernel dm\-verity\fR\m[]\&\s-2\u[1]\d\s+2
documentation for details\&.
.sp
Added in version 250\&.
.RE
.PP
\fBdetach\fR \fIvolume\fR
.RS 4
Detach (destroy) the block device
\fIvolume\fR\&.
.sp
Added in version 250\&.
.RE
.PP
\fBhelp\fR
.RS 4
Print short information about command syntax\&.
.sp
Added in version 250\&.
.RE
.SH "SEE ALSO"
.PP
\fBsystemd\fR(1),
\fBsystemd-veritysetup-generator\fR(8),
\fBveritysetup\fR(8)
.SH "NOTES"
.IP " 1." 4
Kernel dm-verity
.RS 4
\%https://docs.kernel.org/admin-guide/device-mapper/verity.html
.RE
|
