Dracut Verity

Most systems utilize systemds dm-verity generator to automatically set up a dm-verity protected root, dracut-verity does this without depending on systemd.

Florist will automatically install and configure dracut-verity, the USE flag -dmverity can be used to disable this.

Dracut Verity reads the following kernel arguments during boot:

• verity.root_data: Path to the actual root partition
• verity.root_hash: Path to the verity hash tree
• verity.roothash: Roothash generated by veritysetup format

root_data and root_hash may be LABEL, PARTLABEL, UUID, PARTUUID or just a direct path.

Source

Dracut Verity can be downloaded from https://git.pinkro.se/Rose/gardenhouse/dracut_verity.git/about/

It's also mirrored to Codeberg where bugtracking is done.

A sys-kernel/dracut-verity port is available in the Gardenhouse portage overlay