{
  "slug": "dm-integrity-recovery-mode",
  "term": "dm-integrity recovery mode",
  "aliases": [
    "dm-integrity R mode"
  ],
  "definition": "dm-integrity recovery mode is a Linux device-mapper access mode that bypasses integrity checks and journal replay while disallowing writes through the mapping.",
  "note": "Linux v6.12 documents this mode for recovery when ordinary activation fails; obtaining bytes does not authenticate them. [dm-integrity-source] The v6.12 sync_rw_sb implementation also skips superblock MAC checking in this mode. [integrity-code] It is distinct from normal verified read-only access and from recalculation, which generates replacement tags. [hesela-recovery]",
  "status": "shipping",
  "advantages": [],
  "limitations": [
    {
      "text": "The mode does not establish freshness, repair content or prove that all other paths to the underlying storage are write-blocked.",
      "citationIds": [
        "hesela-recovery"
      ]
    }
  ],
  "related": [
    "dm-integrity",
    "block-device-read-only",
    "read-only-mount",
    "authenticated-encryption"
  ],
  "supersedes": [],
  "supersededBy": [],
  "firstSeen": null,
  "lastSeen": null,
  "citations": [
    {
      "id": "dm-integrity-source",
      "title": "Linux v6.12 documentation: dm-integrity, integrity-tag ownership and journal/direct modes",
      "url": "https://docs.kernel.org/6.12/admin-guide/device-mapper/dm-integrity.html",
      "accessed": "2026-10-15"
    },
    {
      "id": "integrity-code",
      "title": "Linux v6.12 dm-integrity.c: dm_integrity_disable_recalculate and sync_rw_sb",
      "url": "https://github.com/torvalds/linux/blob/v6.12/drivers/md/dm-integrity.c",
      "accessed": "2026-10-15"
    },
    {
      "id": "hesela-recovery",
      "title": "Hesela: Recovery can stop checking the evidence",
      "url": "https://hesela.com/analyses/checksums-identity-and-lost-writes/#integrity-recovery",
      "accessed": "2026-10-15"
    }
  ],
  "updated": "2026-10-15"
}