Re: [yocto] Verity hash in kernel bootscript

2024-05-06 Thread f . louveau
Hi everyone, I continue exploring the capability of yocto to make what I want for dm-verity, without succes until now :( As I understand, for a dedicated image, yocto/bitbake will identify packages to compile and package. And during do_rootfs, relevant packages (in PACKAGE_INSTALL) will be ins

Re: [yocto] Verity hash in kernel bootscript

2024-05-02 Thread f . louveau
Thanks for the advice. In my trial using 2 images, I have the following: * first image generates a rootfs + other partitions (/var) in wanted format (squashfs+verity & ext4). I delete content of /boot as it will be generated by the second image * second image is a really simplified version to j

Re: [yocto] Verity hash in kernel bootscript

2024-05-02 Thread Mikko Rapeli
Hi, On Thu, May 02, 2024 at 02:28:03AM -0700, f.louveau via lists.yoctoproject.org wrote: > Hello, > > I have a project where I want to implement dm-verity on my rootfs (no > initramfs here). > > I modify image recipe to split rootfs in multiple partition (weird this is > not supported upstre

[yocto] Verity hash in kernel bootscript

2024-05-02 Thread f . louveau
Hello, I have a project where I want to implement dm-verity on my rootfs (no initramfs here). I modify image recipe to split rootfs in multiple partition (weird this is not supported upstream). I generate rootfs as a squashfs with verity has table at the end. I also obtain a verity.env file as