- update to 1.6:
  * Eliminated the dependency on `pandoc` for installing the
    manual page.
  * Updated the documentation to reflect recent kernel changes,
    including the kernel adding support for more Merkle tree
    block sizes, IMA adding support for fs-verity, and btrfs
    adding support for fs-verity.
  * Updated the documentation to refer to the new fsverity
    mailing list.
  * Fixed a C++ compatibility issue in `libfsverity.h`.
  * `fsverity measure` now follows standard command line syntax
    for arguments beginning with hyphens.  I.e.,
    `fsverity measure --foo` now treats `--foo` as
  * an (unsupported) option, not a filename.  To operate on a
    file actually named `--foo`, use `fsverity measure -- --foo`.

• Files Changed
• Browse Source

• Files Changed
• Browse Source

fs-verity is a Linux kernel filesystem feature that does transparent
on-demand verification of the contents of read-only files using Merkle
trees.

openSUSE Tumbleweed (ext4 + btrfs) and Leap (15.[45] ext4 only) ship
with kernel support, but until now the corresponding user-space tools
(fsverity-utils) have not been provided. These tools can be used to
enable fs-verity on files, retrieve the digests of fs-verity files, and
sign files for use with fs-verity (among other things).

Links:
https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/message/EM5HFHAYDOJ554OAPXLP27Z57AW27HBX/
https://git.kernel.org/pub/scm/fs/fsverity/fsverity-utils.git
https://www.kernel.org/doc/html/latest/filesystems/fsverity.html 

• Browse Source