How to enable dm-verity in linux 6.x

[Aravinthkumar]

Hi Team,

I'm using Linux bsp kernel 6.1 version on imx6dl sabresd. Can you please help me how to enable and use dm-verity.

Regards,

Aravinth

[Sanket_Parekh]

Hi @Aravinthkumar,

I hope you are doing well.

Please find the configuration for the device-mapper below.

Device Drivers --> RAID and LVM Support --> you should find "device mapper support"

For more information related to the device mapper, kindly refer to the below documents.

1) One can refer to section 3.4 Configurations in Linux/Android platform for security features in i.MX_Android_Security_User's_Guide.pdf

2) App-note:- AN12714 i.MX Encrypted Storage Using CAAM Secure Keys

3) https://elinux.org/images/e/e0/Josserand-schulz-secure-boot.pdf

Thanks & Regards,

Sanket Parekh

[Aravinthkumar]

Hi @Sanket_Parekh,
Thanks for immediate response.
1)i.MX_Android_Security_User's_Guide.pdf --> this pdf has more details about Android not much on linux
2) App-note:- AN12714 i.MX Encrypted Storage Using CAAM Secure Keys --> As mentioned earlier we are not using dm-crypt, we are using only dm-verity.
3) https://elinux.org/images/e/e0/Josserand-schulz-secure-boot.pdf - It's generic document about secure boot.

Can you please help exactly how to setup and use dm-verity on imx6dl sabresd linux platform.

Regards,
Aravinth

[Sanket_Parekh]

Hi @Aravinthkumar 

I hope you are doing well

These are the available documents from NXP for this feature.

As it is supported by the Yocto layer, you can post this issue in the yocto community.
Reference link: https://lists.yoctoproject.org/g/yocto/message/49112

My apology for the inconvenience.

Thanks & Regards

Sanket Parekh