Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
Jesse 🇫🇷 (jessew@mk.cpluspatch.com)'s status on Thursday, 17-Sep-2026 18:14:03 JST Jesse 🇫🇷
in reply to
- cn (OLD)
@cancername@mas.to not that kind of verity
In conversation about a month ago from mk.cpluspatch.com permalink
Attachments
1. Untitled attachment
  https://mk-cdn.cpluspatch.com/uploads/84b59ee9-773f-4e72-848b-76b2d8db2910.png
- Embed this notice
  cn (OLD) (cancername@mas.to)'s status on Thursday, 17-Sep-2026 18:14:04 JST cn (OLD)
  in reply to
  
  @jessew that's annoying :/
  i can see this use case, but if we aren't being charitable to poettering (and i believe he used up his share long ago) seems like an excuse to make systems more opaque to end users, which is disheartening. for mutable data we have dm-integrity.
  
  In conversation about a month ago permalink
- Embed this notice
  Jesse 🇫🇷 (jessew@mk.cpluspatch.com)'s status on Thursday, 17-Sep-2026 18:14:05 JST Jesse 🇫🇷
  
  VERITY IN LUKS????
  
  VERITY????
  
  RE: https://mastodon.social/users/pid_eins/statuses/117285466187073619
  In conversation about a month ago permalink
  Attachments
  1. No result found on File_thumbnail lookup.
    
    Lennart Poettering (@pid_eins@mastodon.social)
    
    from Lennart Poettering
    
    There was no support for DDIs that combined Verity with LUKS. With v262 that changes: you may now use systemd-repart to generate DDIs that have file systems with both Encrypt= and Verity= enabled. Yay! This closes a major gap, since it means confexts become useful not only to configure pure configuration but actually cryptographic material, since authenticity and confidentiality can both be guaranteed simultaneously. (And in case you wonder, Verity wraps LUKS, not the other way round)

Public

Conversation

Notices

Feeds