mirrors/meta-security
1
0
Fork 0
mirror of https://git.yoctoproject.org/meta-security synced 2026-07-16 15:57:21 +00:00
Code Issues Projects Releases Wiki Activity

dm-verity-img.bbclass: Expose --data-block-size for configuration

Browse Source 
Add DM_VERITY_IMAGE_DATA_BLOCK_SIZE to be able to set the
--data-block-size used in veritysetup. Tuning this value effects the
performance and size of the resulting image.

Signed-off-by: Christer Fletcher <christer.fletcher@inter.ikea.com>
Signed-off-by: Paulo Neves <paulo.neves1@inter.ikea.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
This commit is contained in:
Christer Fletcher
2021-09-01 16:18:01 +02:00
committed by Armin Kuster
parent 1f18c623e9
commit e0fca90835
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
classes/dm-verity-img.bbclass
+4 -1
View File
@@ -22,6 +22,9 @@
# is stored where it can be installed into associated initramfs rootfs. # is stored where it can be installed into associated initramfs rootfs.
STAGING_VERITY_DIR ?= "${TMPDIR}/work-shared/${MACHINE}/dm-verity" STAGING_VERITY_DIR ?= "${TMPDIR}/work-shared/${MACHINE}/dm-verity"
# Define the data block size to use in veritysetup.
DM_VERITY_IMAGE_DATA_BLOCK_SIZE ?= "1024"
# Process the output from veritysetup and generate the corresponding .env # Process the output from veritysetup and generate the corresponding .env
# file. The output from veritysetup is not very machine-friendly so we need to # file. The output from veritysetup is not very machine-friendly so we need to
# convert it to some better format. Let's drop the first line (doesn't contain # convert it to some better format. Let's drop the first line (doesn't contain
@@ -57,7 +60,7 @@ verity_setup() {
# Let's drop the first line of output (doesn't contain any useful info) # Let's drop the first line of output (doesn't contain any useful info)
# and feed the rest to another function. # and feed the rest to another function.
veritysetup --data-block-size=1024 --hash-offset=$SIZE format $OUTPUT $OUTPUT | tail -n +2 | process_verity veritysetup --data-block-size=${DM_VERITY_IMAGE_DATA_BLOCK_SIZE} --hash-offset=$SIZE format $OUTPUT $OUTPUT | tail -n +2 | process_verity
} }
VERITY_TYPES = "ext2.verity ext3.verity ext4.verity btrfs.verity" VERITY_TYPES = "ext2.verity ext3.verity ext4.verity btrfs.verity"