Bug 1223544

Summary:	kernel config: enable CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG
Product:	[openSUSE] openSUSE Tumbleweed	Reporter:	Ludwig Nussel <lnussel>
Component:	Kernel	Assignee:	Coly Li <colyli>
Status:	RESOLVED FIXED	QA Contact:	E-mail List <qa-bugs>
Severity:	Normal
Priority:	P5 - None	CC:	colyli, daan.j.demeyer, hare, jslaby, tiwai
Version:	Current
Target Milestone:	---
Hardware:	Other
OS:	Other
Whiteboard:
Found By:	---	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Description Ludwig Nussel 2024-04-29 15:13:23 UTC

Systemd wants to have CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG to enable signed Verity images: https://github.com/systemd/systemd/blob/main/README#L131

Any chance we can enable that (and potentially other settings we missed) in TW kernels to leverage systemd's full potential?

Comment 1 Takashi Iwai 2024-05-03 08:46:25 UTC

Actually this config has been already enabled on SLE15 since years ago (bsc#1175995,jsc#SLE-15608).

It's just missing on stable/master branch.

Hannes, I suppose we should take it to master/stable branch, too?

Comment 2 Daan De Meyer 2024-05-29 06:42:28 UTC

Ping?

Comment 3 Coly Li 2024-05-29 16:26:18 UTC

Let me handle this.

Comment 4 Coly Li 2024-05-29 17:03:59 UTC

The update of configs for enabling CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG gets submitted into my master/for-next and stable/for-next branches.

Waiting for maintainers to response.

Comment 5 Jiri Slaby 2024-06-18 05:57:45 UTC

I believe we are done here.