m/n/b/mkverity: implement a dm-verity hash image generator
Background: https://github.com/monogon-dev/monogon/issues/57
The piece of code included implements a subset of veritysetup
functionality (see: dm-verity). It was written in an attempt to
minimize projected higher maintenance cost of packaging cryptsetup
for metropolis in the long term.
The implementation was verified with the original veritysetup tool:
>$ ./go-veritysetup format file1 file2
>33359c1f1bdd25e7afc2e98cd27c440e7af9ef2fb55462ce562a1b8254bf02e4
>$ veritysetup --debug --verbose verify file1 file2 33359c1f1bdd25e7afc2e98cd27c440e7af9ef2fb55462ce562a1b8254bf02e4
Ktest-based tests and buildsystem integration are still pending.
Compatibility with the original cryptsetup tool might be dropped
eventually, if it's found beneficial to do so.
Change-Id: I5a6e1b18b692b1701e405013f132f6f2711b2c96
Reviewed-on: https://review.monogon.dev/c/monogon/+/250
Reviewed-by: Sergiusz Bazanski <serge@monogon.tech>
diff --git a/metropolis/node/build/mkverity/BUILD.bazel b/metropolis/node/build/mkverity/BUILD.bazel
new file mode 100644
index 0000000..d749762
--- /dev/null
+++ b/metropolis/node/build/mkverity/BUILD.bazel
@@ -0,0 +1,14 @@
+load("@io_bazel_rules_go//go:def.bzl", "go_binary", "go_library")
+
+go_library(
+ name = "go_default_library",
+ srcs = ["main.go"],
+ importpath = "source.monogon.dev/metropolis/node/build/mkverity",
+ visibility = ["//visibility:private"],
+)
+
+go_binary(
+ name = "mkverity",
+ embed = [":go_default_library"],
+ visibility = ["//visibility:private"],
+)