summaryrefslogtreecommitdiffstats
path: root/man/systemd-veritysetup-generator.xml
diff options
context:
space:
mode:
authorMark Boudreau <mboudreaudalton@gmail.com>2021-11-13 19:15:17 +0100
committerMark Boudreau <mboudreaudalton@gmail.com>2021-11-19 21:54:26 +0100
commite5196eeec2cebf871302b9abb47d0e4ccd76a46b (patch)
treedd754138db02c53c22500c224e564eb7701bfc51 /man/systemd-veritysetup-generator.xml
parentfstab-generator: use 'usr' mapper device when 'usrhash' is present (diff)
downloadsystemd-e5196eeec2cebf871302b9abb47d0e4ccd76a46b.tar.xz
systemd-e5196eeec2cebf871302b9abb47d0e4ccd76a46b.zip
Document usr-specific verity parameters
Mention 'usrhash' and 'systemd.verity_usr_*' kernel command line parameters in the man pages for veritysetup-generator and kernel-command-line
Diffstat (limited to 'man/systemd-veritysetup-generator.xml')
-rw-r--r--man/systemd-veritysetup-generator.xml10
1 files changed, 9 insertions, 1 deletions
diff --git a/man/systemd-veritysetup-generator.xml b/man/systemd-veritysetup-generator.xml
index 3c9ee6788f..e1528107d2 100644
--- a/man/systemd-veritysetup-generator.xml
+++ b/man/systemd-veritysetup-generator.xml
@@ -33,7 +33,7 @@
<citerefentry><refentrytitle>systemd-veritysetup@.service</refentrytitle><manvolnum>8</manvolnum></citerefentry>
units as necessary.</para>
- <para>Currently, only a single verity device may be set up with this generator, backing the root file system of the
+ <para>Currently, only two verity devices may be set up with this generator, backing the root and <filename>/usr</filename> file systems of the
OS.</para>
<para><filename>systemd-veritysetup-generator</filename> implements
@@ -92,6 +92,14 @@
details.</para></listitem>
</varlistentry>
+ <varlistentry>
+ <term><varname>usrhash=</varname></term>
+ <term><varname>systemd.verity_usr_data=</varname></term>
+ <term><varname>systemd.verity_usr_hash=</varname></term>
+ <term><varname>systemd.verity_usr_options=</varname></term>
+
+ <listitem><para>Equivalent to their counterparts for the root file system as described above, but apply to the <filename>/usr/</filename> file system instead.</para></listitem>
+ </varlistentry>
</variablelist>
</refsect1>