Yet another try for fs-verity (2019)

Should probably include "[2019]" in title as I thought there was some recent update.

The dm-verity feature was merged to the mainline kernel for the 5.4 release which was tagged on Nov 24, 2019.

Typo. dm-verity is in since at least 4.1, fs-verity since 5.4

Oops, good catch.

This is in since Linux 5.4 already, and btrfs also added support for it. https://www.kernel.org/doc/html/latest/filesystems/fsverity....

This could be a great tool to verify that none of the files in a /nix/store have been manipulated offline since they are read only anyways.

fs-verity - integrity by a file.

dm-verity - integrity by file system image.

Both have its uses.

Both are covered by IMA.

(2019)