Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add dependencies for dm-verity and some dm-crypt #270

Open
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

lawik
Copy link

@lawik lawik commented Feb 12, 2025

This change adds the crypto parts required by dm-verity (and some of dm-crypt) to the kernel, compiled in.

This includes various algorithms (mainly SHA256/512 and CRC32C) but also the device mapper and more related pieces.

This change adds the crypto parts required by dm-verity (and some of
dm-crypt) to the kernel, compiled in.

This includes various algorithms (mainly SHA256/512 and CRC32C) but also
the device mapper and more related pieces.
@lawik
Copy link
Author

lawik commented Feb 12, 2025

Happy to trim back and try again if you know things that shouldn't be necessary. I tried to both be restrictive and select what I believe I'll need for dm-verity and shortly dm-crypt.

@lawik
Copy link
Author

lawik commented Feb 12, 2025

Oh, btw I'm not assuming this should live in nerves_system_rpi4. If need be it is a separate system. But figured I'd PR since I'd done the effort.

@fhunleth
Copy link
Member

My feeling is that if there's an open source way of using all of this that we should definitely include here.

@lawik
Copy link
Author

lawik commented Feb 12, 2025

Yeah, this PR could hang out for a bit until I have wrapped up the library and the related initramfs so that the end-to-end tooling and documentation is fully there. Would definitely be awesome to have this in the system by default as far as I'm concerned.

I was mostly concerned with the swelling. So no worries if it becomes too much. It is not kiosk-level big but I don't know what yardstick we use to measure what goes in and not :)

@lawik
Copy link
Author

lawik commented Feb 18, 2025

This seems to be all I need for dm-verity and dm-crypt.

This should keep me from needing to run a custom system to get a CM4 Secure Boot setup and all that going. Lots of fun over in the initramfs and library side as well as some customization of the specific project. But I'll try to package that up nicely on the library end.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants