| commit | 9db041cd0943f6a93b3fad743fe2357347eb0db0 | [log] [tgz] |
|---|---|---|
| author | Amin Hassani <ahassani@chromium.org> | Thu Aug 13 10:05:43 2020 -0700 |
| committer | Mike Frysinger <vapier@chromium.org> | Tue Aug 18 06:06:15 2020 +0000 |
| tree | 411cd936435e87e745db7997d342629059bdef90 | |
| parent | 3f01ced55942f7b48d880c5b95f5692b92afaf43 [diff] |
Run clang-format Use platform2 clang-format config to run all over the code. No manual change is done. Temporarily added these two statements in platform2/.clang-format to reformat the tabs too: UseTab: Never IndentWidth: 2 Also turn on a few other options in presubmit checks. BUG=chromium:886953 TEST=repo upload passes TEST=CQ passes Change-Id: Ib499f7db3f2023340134aa311122d0c26869dffa Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/dm-verity/+/2354977 Tested-by: Amin Hassani <ahassani@chromium.org> Reviewed-by: Jorge Lucangeli Obes <jorgelo@chromium.org> Reviewed-by: Mike Frysinger <vapier@chromium.org>
Verity is the userspace tool for creating integrity hashes for a device image.
This tool is a frontend for dm-bht, a device-mapper friendly block hash table structure. `verity' produces dm-bht-based images for use with dm-verity. The dm-verity module provides a transparent, integrity-checking layer over a given block device. This expects a backing device and a secondary device which provides cryptographic digests of the blocks on the primary device
Note, the secondary device image can be appended to the primary device or used as a standalone device.
This tool creates an image of the format:
Upon completion, the hash of the root hash will be printed to standard out. The root hash, tree depth, number of hashed blocks, and cryptographic hash algorithm used must be supplied to the dm-verity when configuring a device.
To build outside of Chromium OS:
make
To use:
./verity mode depth alg image hash_image [root_hexdigest]
For example:
dd if=/dev/zero of=/tmp/image bs=4k count=512 ./verity create 2 sha256 /tmp/image /tmp/hash | tee table # ... cat table ls -la /tmp/hash
All the source code is licensed GPLv2 to be completely kernel compatible. The Makefiles are from the parent project and are licensed under a BSD-style license.