systemd-veritysetup@.service, systemd-veritysetup - Disk verity protection logic
Contents
Commands
The following commands are understood by systemd-veritysetup:
attachvolumedatadevicehashdeviceroothash [option...]
Create a block device volume using datadevice and hashdevice as the backing devices. roothash forms
the root of the tree of hashes stored on hashdevice. See Kerneldm-verity[1] documentation for
details.
Added in version 250.
detachvolume
Detach (destroy) the block device volume.
Added in version 250.
help
Print short information about command syntax.
Added in version 250.
Description
systemd-veritysetup@.service is a service responsible for setting up verity protection block devices. It
should be instantiated for each device that requires verity protection.
At early boot and when the system manager configuration is reloaded kernel command line configuration for
verity protected block devices is translated into systemd-veritysetup@.service units by systemd-veritysetup-generator(8).
systemd-veritysetup@.service calls systemd-veritysetup.
Name
systemd-veritysetup@.service, systemd-veritysetup - Disk verity protection logic
Notes
1. Kernel dm-verity
https://docs.kernel.org/admin-guide/device-mapper/verity.html
systemd 257.7 SYSTEMD-VERITYSETUP@.SERVICE(8)
See Also
systemd(1), systemd-veritysetup-generator(8), veritysetup(8)
Synopsis
systemd-veritysetup@.service
/usr/lib/systemd/systemd-veritysetup