Lennart Poettering 96386bb5a7 veritysetup: when we fail to unlock a disk with the root hash signature logic, retry without ...

Currently, there's no nice way to get a key into the dm-verity kernel
keyring unless recompiling the kernel, or enabling SB or buying into
shim. Neither sounds particularly attractive.

hence provide a reasonable fallback: if unlocking with signed roothash
doesn#t work, just try without. maybe the kernel policy allows this,
maybe not. It's worth a try.

2025-04-03 11:08:57 +02:00

..

meson.build

various: check meson feature flag early

2024-11-13 08:21:33 +09:00

veritysetup-generator.c

veritysetup-generator: repeat format string arguments a bit less

2025-03-19 16:32:02 +01:00

veritysetup.c

veritysetup: when we fail to unlock a disk with the root hash signature logic, retry without

2025-04-03 11:08:57 +02:00