summaryrefslogtreecommitdiffstats
path: root/src/shared/dissect-image.c
diff options
context:
space:
mode:
authorLennart Poettering <lennart@poettering.net>2021-09-09 16:04:00 +0200
committerLennart Poettering <lennart@poettering.net>2021-09-28 17:03:26 +0200
commitd5fcc5b0532269d2450ed15a2bddca937f123ea9 (patch)
treeb846eb48ecd4d05ce312d9ed671680816f922c7b /src/shared/dissect-image.c
parentdissect-image: load embedded verity signature info from image (diff)
downloadsystemd-d5fcc5b0532269d2450ed15a2bddca937f123ea9.tar.xz
systemd-d5fcc5b0532269d2450ed15a2bddca937f123ea9.zip
dissect-image: add env var for disabling "sidecar" loading of verity params
Just to make debugging easier.
Diffstat (limited to 'src/shared/dissect-image.c')
-rw-r--r--src/shared/dissect-image.c6
1 files changed, 6 insertions, 0 deletions
diff --git a/src/shared/dissect-image.c b/src/shared/dissect-image.c
index af65d15306..157ef262f1 100644
--- a/src/shared/dissect-image.c
+++ b/src/shared/dissect-image.c
@@ -2609,6 +2609,12 @@ int verity_settings_load(
if (is_device_path(image))
return 0;
+ r = getenv_bool_secure("SYSTEMD_DISSECT_VERITY_SIDECAR");
+ if (r < 0 && r != -ENXIO)
+ log_debug_errno(r, "Failed to parse $SYSTEMD_DISSECT_VERITY_SIDECAR, ignoring: %m");
+ if (r == 0)
+ return 0;
+
designator = verity->designator;
/* We only fill in what isn't already filled in */