You are not logged in.
Just looking for some clarity - a sanity check if anything - on creating a dm-verity partition per this wiki: https://wiki.archlinux.org/title/Dm-verity#Partitioning.
Per this wiki the size of the verity partition should be roughly 10% of the root partition. For a 500G root partition, the verity partition would be 50G. Really? Sounds excessive.
Last edited by componentscience (2024-12-05 15:17:56)
Offline
You need to have enough to store a set of hashes of every single block of your device, if you don't have many you can size it lower
In this and your other thread you're asking very vague questions that smell like a XY Problem
What is your end goal, what benefit do you think a verity partition gives you, what exactly is it you're ultimately trying to solve?
Last edited by V1del (2024-12-04 16:49:44)
Offline
Understood thank you. Initially we are exploring dm-verity on external devices for educational purposes. Long term the goal is to utilize dm-verity with cryptographically signed disk images. For example a public facing server that is mostly read-only, and gets thrown away or replaced when upgraded.
Last edited by componentscience (2024-12-05 15:23:19)
Offline