VERITYTAB(5) veritytab VERITYTAB(5) veritytab - verity /etc/veritytab /etc/veritytab verity . "#". verity. . volume-name data-device hash-device roothash [options] . verity /dev/mapper/. UUID= UUID. UUID= UUID. - . udev "ID_DISSECT_PART_ROOTHASH=" ( ) . . : superblock=BOOL dm-verity . 254. format= . "0" Chrome OS . "1" . 254. data-block-size= . ( 512 .) 254. hash-block-size= . ( 512 .) 254. data-blocks= . . 254. hash-offset= / " ". ( 512 .) 254. salt= . 256 "-" . 254. uuid=UUID UUID . UUID UUID "12345678-1234-1234-1234-123456789abc". 254. ignore-corruption restart-on-corruption panic-on-corruption ( ). / I/O. --ignore-corruption . --restart-on-corruption --panic-on-corruption () . ( .) 248. ignore-zero-blocks . . 4.5. 248. check-at-most-once . . 4.17. 248. hash= dm-verity. "sha1". veritysetup --help. 254. fec-device= (FEC) . . fec . fec . : . verity fec . 254. fec-offset= FEC . ( 512 .) 254. fec-roots= . . RS(M, N) M-N. M 255 M-N 2 24 (). 254. root-hash-signature=PATH|base64:BASE64|auto Base64 "base64:" ( ). "auto" udev "ID_DISSECT_PART_ROOTHASH_SIG=" ( Base64) . 5.4 . 248. _netdev veritysetup . systemd.mount(5) _netdev. remote-fs-pre.target remote-veritysetup.target veritysetup-pre.target veritysetup.target. : fstab(5) _netdev . local-fs.target . 248. noauto veritysetup.target. . noauto. 248. nofail veritysetup.target. . . nofail . 248. x-initrd.attach verity initrd systemd.mount(5) x-initrd.mount. x-initrd.mount x-initrd.attach verity systemd . . verity initrd . 248. tpm2-measure-nvpcr= NvPCR . Verity ( ) . false . true NvPCR "verity". NvPCR . 260. systemd systemd-veritysetup-generator(8). 1. /etc/veritytab verity. . usr PARTUUID=783e45ae-7aa3-484a-beef-a80ff9c19cbb PARTUUID=21dc1dfe-4c33-8b48-98a9-918a22eb3e37 36e3f740ad502e2c25e2a23d9c7c17bf0fdad2300b7580842d4b7ec1fb0fa263 auto data /etc/data /etc/hash a5ee4b42f70ae1f46a08a7c92c2e0a20672ad2f514792730f5d49d7606ab8fdf auto systemd(1), systemd-veritysetup@.service(8), systemd-veritysetup-generator(8), fstab(5), veritysetup(8) 3 . . : . systemd 260.2 VERITYTAB(5)