buildkernel icon indicating copy to clipboard operation
buildkernel copied to clipboard

Support for dm-integrity

Open Alex-Gorny opened this issue 5 years ago • 4 comments

dm-integrity is a ZFS-like feature that can be used together with buildkernel + LUKS + LVM + ext4 I think dm-integrity should be enabled in buildkernel by default and added to Sakaki's EFI Install Guide See also https://security.stackexchange.com/questions/190670/luks2-dm-integrity

Alex-Gorny avatar Jan 25 '19 11:01 Alex-Gorny

Thanks, looks interesting. I'll take a look at this next week. Best, sakaki

sakaki- avatar Jan 26 '19 10:01 sakaki-

Okay. Thank you. According to this manual, dm-integrity is awesome feature: https://gitlab.com/cryptsetup/cryptsetup/wikis/DMIntegrity It can turn ext4 into a ZFS-like filesystem.

A quote from ZFS WIkipedia page: https://en.wikipedia.org/wiki/ZFS "ZFS has no tool equivalent to fsck (the standard Unix and Linux data checking and repair tool for file systems).[43] Instead, ZFS has a built-in scrub function which regularly examines all data and repairs silent corruption and other problems".

Alex-Gorny avatar Jan 26 '19 12:01 Alex-Gorny

One more manual: https://gist.github.com/MawKKe/caa2bbf7edcc072129d73b61ae7815fb

This is dm-crypt + dm-integrity + dm-raid (RAID1)

Alex-Gorny avatar Jan 26 '19 12:01 Alex-Gorny

31 Oct 2020: sadly, due to legal obligations arising from a recent change in my 'real world' job, I must announce I am standing down as maintainer of this project with immediate effect. For the meantime, I will leave the repo up (for historical interest, and it may be of use to others); however, I plan no further updates, nor will I be accepting / actioning further pull requests or bug reports from this point. Email requests for support will also have to be politely declined, so, please treat this as an effective EOL notice.

For further details, please see my post here.

With sincere apologies, sakaki ><

sakaki- avatar Oct 31 '20 15:10 sakaki-