From: Ahmad Fatoum <a.fatoum@pengutronix.de>
To: distrokit@pengutronix.de
Cc: Ahmad Fatoum <a.fatoum@pengutronix.de>
Subject: [DistroKit] [PATCH 5/8] barebox: enable bootloader dm-verity support
Date: Wed, 21 Jan 2026 09:06:58 +0100 [thread overview]
Message-ID: <20260121080813.4099332-6-a.fatoum@pengutronix.de> (raw)
In-Reply-To: <20260121080813.4099332-1-a.fatoum@pengutronix.de>
To make it easier to evaluate this new feature, enable it in in the
barebox config, even if we do not make use of it yet.
Compared to FIT images, the benefit of dm-verity directly in barebox
would be that we do not need to change our current partitioning and can
continue to place the kernel, device tree and initrd into a file system
and arguable reducing the attack surface at the same time, because the
block-sized hashing is simpler than the FIT image parsing.
It would also be more straight forward to optimize for boot time, as
barebox could do better prefetching, albeit that's not yet implemented.
Signed-off-by: Ahmad Fatoum <a.fatoum@pengutronix.de>
---
configs/platform-v7a/barebox.config | 6 +++++-
configs/platform-v8a/barebox.config | 6 +++++-
2 files changed, 10 insertions(+), 2 deletions(-)
diff --git a/configs/platform-v7a/barebox.config b/configs/platform-v7a/barebox.config
index 7aea542738bc..9a1e6aa1383e 100644
--- a/configs/platform-v7a/barebox.config
+++ b/configs/platform-v7a/barebox.config
@@ -518,9 +518,11 @@ CONFIG_CMD_AUTOMOUNT=y
CONFIG_CMD_MOUNT=y
# CONFIG_CMD_FINDMNT is not set
CONFIG_CMD_PARTED=y
+CONFIG_CMD_DMSETUP=y
CONFIG_CMD_UBI=y
CONFIG_CMD_UBIFORMAT=y
CONFIG_CMD_UMOUNT=y
+CONFIG_CMD_VERITYSETUP=y
# end of Partition
#
@@ -906,7 +908,9 @@ CONFIG_MTD_UBI_FASTMAP=y
CONFIG_DISK=y
CONFIG_DISK_IDE_SFF=y
CONFIG_DISK_WRITE=y
-# CONFIG_DM_BLK is not set
+CONFIG_DM_BLK=y
+CONFIG_DM_BLK_LINEAR=y
+CONFIG_DM_BLK_VERITY=y
#
# drive types
diff --git a/configs/platform-v8a/barebox.config b/configs/platform-v8a/barebox.config
index 8478c7991138..efe1d73c6dc7 100644
--- a/configs/platform-v8a/barebox.config
+++ b/configs/platform-v8a/barebox.config
@@ -442,7 +442,9 @@ CONFIG_CMD_AUTOMOUNT=y
CONFIG_CMD_MOUNT=y
# CONFIG_CMD_FINDMNT is not set
CONFIG_CMD_PARTED=y
+CONFIG_CMD_DMSETUP=y
CONFIG_CMD_UMOUNT=y
+CONFIG_CMD_VERITYSETUP=y
# end of Partition
#
@@ -791,7 +793,9 @@ CONFIG_MTD_SPI_NOR_USE_4K_SECTORS=y
# CONFIG_MTD_UBI is not set
CONFIG_DISK=y
CONFIG_DISK_WRITE=y
-# CONFIG_DM_BLK is not set
+CONFIG_DM_BLK=y
+CONFIG_DM_BLK_LINEAR=y
+CONFIG_DM_BLK_VERITY=y
#
# drive types
--
2.47.3
next prev parent reply other threads:[~2026-01-21 8:08 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-01-21 8:06 [DistroKit] [PATCH 0/8] barebox: update to v2026.01.0 and extend config Ahmad Fatoum
2026-01-21 8:06 ` [DistroKit] [PATCH 1/8] barebox: set CONFIG_NAME across all platforms Ahmad Fatoum
2026-01-21 8:06 ` [DistroKit] [PATCH 2/8] barebox: update barebox v2025.11.0 -> v2026.01.0 Ahmad Fatoum
2026-01-21 8:06 ` [DistroKit] [PATCH 3/8] barebox: enable some useful interactive tools Ahmad Fatoum
2026-01-21 8:06 ` [DistroKit] [PATCH 4/8] v8a: barebox: enable Rockchip power domain driver Ahmad Fatoum
2026-01-21 8:06 ` Ahmad Fatoum [this message]
2026-01-21 8:06 ` [DistroKit] [PATCH 6/8] barebox: enable oftree fallback Ahmad Fatoum
2026-01-21 8:07 ` [DistroKit] [PATCH 7/8] barebox: r5: disable CONFIG_DEBUG_PROBES Ahmad Fatoum
2026-01-21 8:07 ` [DistroKit] [PATCH 8/8] v8a: barebox: patch in support for BeaglePlay RTL8211F-VD Ethernet PHY Ahmad Fatoum
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260121080813.4099332-6-a.fatoum@pengutronix.de \
--to=a.fatoum@pengutronix.de \
--cc=distrokit@pengutronix.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox