diff mbox series

[next,2/3] fs/squashfs: add option to build verity tree

Message ID 20260831125103.841338-2-fiona.klute@gmx.de
State New
Headers show
Series [next,1/3] fs/common.mk: add optional hook to build a verity hash tree | expand

Commit Message

Fiona Klute Aug. 31, 2026, 12:51 p.m. UTC 
From: "Fiona Klute (othermo GmbH)" <fiona.klute@gmx.de>

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
---
 fs/squashfs/Config.in | 12 ++++++++++++
 1 file changed, 12 insertions(+)
diff mbox series

Patch

diff --git a/fs/squashfs/Config.in b/fs/squashfs/Config.in
index cb2f5ec969..c267640401 100644
--- a/fs/squashfs/Config.in
+++ b/fs/squashfs/Config.in
@@ -121,4 +121,16 @@  config BR2_TARGET_ROOTFS_SQUASHFS_COMP_OPTS
 	default "-Xcompression-level 22" if BR2_TARGET_ROOTFS_SQUASHFS4_ZSTD
 	depends on BR2_TARGET_ROOTFS_SQUASHFS_EXTREME_COMP
 
+config BR2_TARGET_ROOTFS_SQUASHFS_VERITY
+	bool "create verity hash data for root filesystem"
+	select BR2_PACKAGE_HOST_CRYPTSETUP
+	help
+	  Create verity hash tree for the root filesystem. This allows
+	  setting up a dm-verity device for the root filesystem, to
+	  ensure data integrity. The root hash must be provided from a
+	  trusted source, or with a kernel-verifiable signature.
+
+	  The verity hash image will be called rootfs.squashfs.verity,
+	  with the root hash in rootfs.squashfs.verity.root-hash.
+
 endif