FSVERITY(1) User Commands FSVERITY(1) (NAME) fsverity - fs-verity (SYNOPSIS) fsverity digest [OPTION...] FILE... fsverity dump_metadata [OPTION...] TYPE FILE fsverity enable [OPTION...] FILE fsverity measure FILE... fsverity sign [OPTION...] FILE OUT_SIGFILE (DESCRIPTION) fsverity fs-verity . fs-verity (Merkle trees) . fsverity fs-verity (digests) fs- verity fs-verity ( ). fsverity . fsverity . fs-verity . (OPTIONS) fsverity : --help . --version fsverity-utils. (SUBCOMMANDS) fsverity digest [OPTION...] FILE... fs-verity . . fsverity sign . fsverity digest: --block-size=BLOCK_SIZE ( ) . . fs-verity . 6.2 . . 6.3 . . --compact . --for-builtin-sig fs-verity . struct fsverity_formatted_digest . fsverity sign . --hash-alg=HASH_ALG . sha256 sha512 . sha256 . --out-merkle-tree=FILE . FS_IOC_READ_VERITY_METADATA . fs-verity . . --out-descriptor=FILE (descriptor) fs-verity . fs-verity . . --salt=SALT (salt) . . . fsverity dump_metadata [OPTION...] TYPE FILE (dump) fs-verity . fs-verity FS_IOC_READ_VERITY_METADATA ( 5.12 ). verity fs-verity . TYPE "merkle_tree" "descriptor" "signature" . "signature" ( ) . fsverity dump_metadata: --length=LENGTH . --offset . --offset=offset . --length . fsverity enable [OPTION...] FILE fs-verity . fs-verity . fsverity enable: --block-size=BLOCK_SIZE fsverity digest. --hash-alg=HASH_ALG fsverity digest. --salt=SALT fsverity digest. --signature=SIGFILE . SIGFILE PKCS#7 DER fsverity sign . fs-verity . . fsverity measure FILE... fs-verity . fs-verity . fsverity digest fsverity measure . fsverity measure . fsverity sign [OPTION...] FILE OUT_SIGFILE fs- verity fs-verity . PKCS#7 DER OUT_SIGFILE . PKCS#11 . --key --cert . PKCS#11 --pkcs11-engine --pkcs11-module --cert --pkcs11-keyid . fsverity-utils OpenSSL PKCS#11 PKCS#11 . fsverity sign fs- verity . fs- verity . README fsverity- utils . fsverity sign: --block-size=BLOCK_SIZE fsverity digest. --cert=CERTFILE (certificate) PEM . KEYFILE PKCS#11 . --hash-alg=HASH_ALG fsverity digest. --key=KEYFILE PEM . PKCS#11 . --out-descriptor=FILE fsverity digest. --out-merkle-tree=FILE fsverity digest. --pkcs11-engine=SOFILE PKCS#11 OpenSSL . .so libp11 . PKCS#11 . --pkcs11-keyid=KEYID PKCS#11 URI . . PKCS#11 . --pkcs11-module=SOFILE PKCS#11 . PKCS#11 . --salt=SALT fsverity digest. (SEE ALSO) README fsverity-utils . fs-verity . fsverity-utils v1.7 November 2025 FSVERITY(1)