systemd-veritysetup@.service

systemd

systemd-veritysetup

Disk verity protection logic

systemd-veritysetup@.service

/usr/lib/systemd/systemd-veritysetup

Description

systemd-veritysetup@.service is a service responsible for setting up verity protection block devices. It should be instantiated for each device that requires verity protection.

At early boot and when the system manager configuration is reloaded kernel command line configuration for verity protected block devices is translated into systemd-veritysetup@.service units by systemd-veritysetup-generator(8).

systemd-veritysetup@.service calls systemd-veritysetup.

Commands

The following commands are understood by systemd-veritysetup:

attach <volume> <datadevice> <hashdevice> <roothash> [<option>...]
Create a block device <volume> using <datadevice> and <hashdevice> as the backing devices. <roothash> forms the root of the tree of hashes stored on <hashdevice>. See Kernel dm-verity documentation for details.

detach <volume>
Detach (destroy) the block device <volume>.

help
Print short information about command syntax.