aboutsummaryrefslogtreecommitdiffstats
path: root/recipes-core/initrdscripts/initramfs-framework-dm/dmverity
blob: 1923490a064bfc0a82eccba97f83c8c95f1f3074 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
#!/bin/sh

dmverity_enabled() {
    return 0
}

dmverity_run() {
    DATA_SIZE="__not_set__"
    DATA_BLOCK_SIZE="__not_set__"
    ROOT_HASH="__not_set__"
    SEPARATE_HASH="__not_set__"

    . /usr/share/misc/dm-verity.env

    C=0
    delay=${bootparam_rootdelay:-1}
    timeout=${bootparam_roottimeout:-5}

    # we know exactly what we are looking for; don't need the wide hunt below
    if [ "${SEPARATE_HASH}" -eq "1" ]; then
        while [ ! -b "/dev/disk/by-partuuid/${ROOT_UUID}" ]; do
            if [ $(( $C * $delay )) -gt $timeout ]; then
                fatal "Root device (data) resolution failed"
                exit 1
            fi
            debug "Sleeping for $delay second(s) to wait for root data to settle..."
            sleep $delay
            C=$(( $C + 1 ))
        done

        veritysetup \
            --data-block-size=${DATA_BLOCK_SIZE} \
            create rootfs \
            /dev/disk/by-partuuid/${ROOT_UUID} \
            /dev/disk/by-partuuid/${RHASH_UUID} \
            ${ROOT_HASH}

            mount \
                 -o ro \
                /dev/mapper/rootfs \
                ${ROOTFS_DIR} || exit 2

	    return
    fi

    RDEV="$(realpath /dev/disk/by-partuuid/${bootparam_root#PARTUUID=} 2>/dev/null)"
    while [ ! -b "${RDEV}" ]; do
        if [ $(( $C * $delay )) -gt $timeout ]; then
            fatal "Root device resolution failed"
            exit 1
        fi

        case "${bootparam_root}" in
            ID=*)
                RDEV="$(realpath /dev/disk/by-id/${bootparam_root#ID=} 2>/dev/null)"
                ;;
            LABEL=*)
                RDEV="$(realpath /dev/disk/by-label/${bootparam_root#LABEL=} 2>/dev/null)"
                ;;
            PARTLABEL=*)
                RDEV="$(realpath /dev/disk/by-partlabel/${bootparam_root#PARTLABEL=} 2>/dev/null)"
                ;;
            PARTUUID=*)
                RDEV="$(realpath /dev/disk/by-partuuid/${bootparam_root#PARTUUID=} 2>/dev/null)"
                ;;
            PATH=*)
                RDEV="$(realpath /dev/disk/by-path/${bootparam_root#PATH=} 2>/dev/null)"
                ;;
            UUID=*)
                RDEV="$(realpath /dev/disk/by-uuid/${bootparam_root#UUID=} 2>/dev/null)"
                ;;
            *)
                RDEV="${bootparam_root}"
        esac
        debug "Sleeping for $delay second(s) to wait root to settle..."
        sleep $delay
        C=$(( $C + 1 ))

    done

    veritysetup \
        --data-block-size=${DATA_BLOCK_SIZE} \
        --hash-offset=${DATA_SIZE} \
        create rootfs \
        ${RDEV} \
        ${RDEV} \
        ${ROOT_HASH}

    mount \
        -o ro \
        /dev/mapper/rootfs \
        ${ROOTFS_DIR} || exit 2
}