hesela.devdm-verity
dm-verity is a Linux device-mapper target that verifies a read-only block mapping against a trusted cryptographic root hash.
Authentication of the root is external to ordinary block checking. Optional FEC repairs are checked against the hashes. [1]
Relations
- related
- merkle-tree, fs-verity, dm-integrity
Limitations
- ignore_corruption permits reads after detected corruption; check_at_most_once reduces protection against online changes. [1]