From: "Darrick J. Wong" <djwong@kernel.org>
To: aalbersh@redhat.com, ebiggers@kernel.org, cem@kernel.org,
djwong@kernel.org
Cc: linux-fsdevel@vger.kernel.org, linux-xfs@vger.kernel.org,
fsverity@lists.linux.dev
Subject: [PATCH 33/38] xfs_scrub: validate verity file contents when doing a media scan
Date: Mon, 29 Apr 2024 20:39:29 -0700 [thread overview]
Message-ID: <171444683613.960383.9616089814402935985.stgit@frogsfrogsfrogs> (raw)
In-Reply-To: <171444683053.960383.12871831441554683674.stgit@frogsfrogsfrogs>
From: Darrick J. Wong <djwong@kernel.org>
Augment the media scan when verity files are detected by reading those
files' pagecache to force verity to compare the hash and (optional)
signatures.
Signed-off-by: Darrick J. Wong <djwong@kernel.org>
---
scrub/phase6.c | 305 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++
1 file changed, 305 insertions(+)
diff --git a/scrub/phase6.c b/scrub/phase6.c
index de7fcb548fe6..983470b7bece 100644
--- a/scrub/phase6.c
+++ b/scrub/phase6.c
@@ -23,6 +23,8 @@
#include "vfs.h"
#include "common.h"
#include "libfrog/bulkstat.h"
+#include "descr.h"
+#include "progress.h"
/*
* Phase 6: Verify data file integrity.
@@ -34,6 +36,9 @@
* to tell us if metadata are now corrupt. Otherwise, we'll scan the
* whole directory tree looking for files that overlap the bad regions
* and report the paths of the now corrupt files.
+ *
+ * If the filesystem supports verity, read the contents of each verity file to
+ * force it to validate the file contents.
*/
/* Verify disk blocks with GETFSMAP */
@@ -674,6 +679,285 @@ remember_ioerr(
str_liberror(ctx, ret, _("setting bad block bitmap"));
}
+struct verity_ctx {
+ struct scrub_ctx *ctx;
+ struct workqueue wq_ddev;
+ struct workqueue wq_rtdev;
+ bool aborted;
+};
+
+struct verity_file_ctx {
+ struct xfs_handle handle;
+ struct verity_ctx *vc;
+};
+
+static int
+render_ino_from_handle(
+ struct scrub_ctx *ctx,
+ char *buf,
+ size_t buflen,
+ void *data)
+{
+ struct xfs_handle *han = data;
+
+ return scrub_render_ino_descr(ctx, buf, buflen, han->ha_fid.fid_ino,
+ han->ha_fid.fid_gen, NULL);
+}
+
+static inline void
+report_verity_error(
+ struct scrub_ctx *ctx,
+ struct descr *dsc,
+ off_t fail_pos,
+ off_t fail_len)
+{
+ if (fail_pos < 0)
+ return;
+
+ str_unfixable_error(ctx, descr_render(dsc),
+ _("verity error at offsets %llu-%llu"),
+ (unsigned long long)fail_pos,
+ (unsigned long long)(fail_pos + fail_len - 1));
+}
+
+/* Record a verity validation error and maybe log an old error. */
+static inline void
+record_verity_error(
+ struct scrub_ctx *ctx,
+ struct descr *dsc,
+ off_t pos,
+ size_t len,
+ off_t *fail_pos,
+ off_t *fail_len)
+{
+ if (*fail_pos < 0)
+ goto record;
+
+ if (pos == *fail_pos + *fail_len) {
+ *fail_len += len;
+ return;
+ }
+
+ report_verity_error(ctx, dsc, *fail_pos, *fail_len);
+record:
+ *fail_pos = pos;
+ *fail_len = len;
+}
+
+/* Record a verity validation success and maybe log an old error. */
+static inline void
+record_verity_success(
+ struct scrub_ctx *ctx,
+ struct descr *dsc,
+ off_t *fail_pos,
+ off_t *fail_len)
+{
+ if (*fail_pos >= 0)
+ report_verity_error(ctx, dsc, *fail_pos, *fail_len);
+
+ *fail_pos = -1;
+ *fail_len = 0;
+}
+
+/* Scan a verity file's data looking for validation errors. */
+static void
+scan_verity_file(
+ struct workqueue *wq,
+ uint32_t index,
+ void *arg)
+{
+ struct stat sb;
+ struct verity_file_ctx *vf = arg;
+ struct scrub_ctx *ctx = vf->vc->ctx;
+ off_t pos;
+ off_t fail_pos = -1, fail_len = 0;
+ int fd;
+ int ret;
+ DEFINE_DESCR(dsc, ctx, render_ino_from_handle);
+
+ descr_set(&dsc, &vf->handle);
+
+ if (vf->vc->aborted) {
+ ret = ECANCELED;
+ goto out_vf;
+ }
+
+ fd = scrub_open_handle(&vf->handle);
+ if (fd < 0) {
+ /*
+ * Stale file handle means that the verity file is gone.
+ *
+ * Even if there's a replacement file, its contents have been
+ * freshly written and checked. Either way, we can skip
+ * scanning this file.
+ */
+ if (errno == ESTALE) {
+ ret = 0;
+ goto out_vf;
+ }
+
+ /*
+ * If the fsverity metadata is missing, inform the user and
+ * move on to the next file.
+ */
+ if (fsverity_meta_is_missing(errno)) {
+ str_error(ctx, descr_render(&dsc),
+ _("fsverity metadata missing."));
+ ret = 0;
+ goto out_vf;
+ }
+
+ ret = -errno;
+ str_errno(ctx, descr_render(&dsc));
+ goto out_vf;
+ }
+
+ ret = fstat(fd, &sb);
+ if (ret) {
+ str_errno(ctx, descr_render(&dsc));
+ goto out_fd;
+ }
+
+ /* Read a single byte from each block in the file to validate. */
+ for (pos = 0; pos < sb.st_size; pos += sb.st_blksize) {
+ char c;
+ ssize_t bytes_read;
+
+ bytes_read = pread(fd, &c, 1, pos);
+ if (!bytes_read)
+ break;
+ if (bytes_read > 0) {
+ record_verity_success(ctx, &dsc, &fail_pos, &fail_len);
+ progress_add(sb.st_blksize);
+ continue;
+ }
+
+ if (errno == EIO) {
+ size_t length = min(sb.st_size - pos, sb.st_blksize);
+
+ record_verity_error(ctx, &dsc, pos, length, &fail_pos,
+ &fail_len);
+ continue;
+ }
+
+ str_errno(ctx, descr_render(&dsc));
+ break;
+ }
+ report_verity_error(ctx, &dsc, fail_pos, fail_len);
+
+ ret = close(fd);
+ if (ret) {
+ str_errno(ctx, descr_render(&dsc));
+ goto out_vf;
+ }
+ fd = -1;
+
+out_fd:
+ if (fd >= 0)
+ close(fd);
+out_vf:
+ if (ret)
+ vf->vc->aborted = true;
+ free(vf);
+ return;
+}
+
+/* If this is a verity file, queue it for scanning. */
+static int
+schedule_verity_file(
+ struct scrub_ctx *ctx,
+ struct xfs_handle *handle,
+ struct xfs_bulkstat *bs,
+ void *arg)
+{
+ struct verity_ctx *vc = arg;
+ struct verity_file_ctx *vf;
+ int ret;
+
+ if (vc->aborted)
+ return ECANCELED;
+
+ if (!(bs->bs_xflags & FS_XFLAG_VERITY)) {
+ progress_add(bs->bs_size);
+ return 0;
+ }
+
+ vf = malloc(sizeof(struct verity_file_ctx));
+ if (!vf) {
+ str_errno(ctx, _("could not allocate fsverity scan context"));
+ vc->aborted = true;
+ return ENOMEM;
+ }
+
+ /* Queue the validation work. */
+ vf->handle = *handle; /* struct copy */
+ vf->vc = vc;
+
+ if (bs->bs_xflags & FS_XFLAG_REALTIME)
+ ret = -workqueue_add(&vc->wq_rtdev, scan_verity_file, 0, vf);
+ else
+ ret = -workqueue_add(&vc->wq_ddev, scan_verity_file, 0, vf);
+ if (ret) {
+ str_liberror(ctx, ret, _("could not schedule fsverity scan"));
+ vc->aborted = true;
+ return ECANCELED;
+ }
+
+ return 0;
+}
+
+static int
+scan_verity_files(
+ struct scrub_ctx *ctx)
+{
+ struct verity_ctx vc = {
+ .ctx = ctx,
+ };
+ unsigned int verifier_threads;
+ int ret;
+
+ /* Create thread pool for data dev fsverity processing. */
+ verifier_threads = disk_heads(ctx->datadev);
+ if (verifier_threads == 1)
+ verifier_threads = 0;
+ ret = -workqueue_create_bound(&vc.wq_ddev, ctx, verifier_threads, 500);
+ if (ret) {
+ str_liberror(ctx, ret, _("creating data dev fsverity workqueue"));
+ return ret;
+ }
+
+ /* Create thread pool for rtdev fsverity processing. */
+ if (ctx->rtdev) {
+ verifier_threads = disk_heads(ctx->rtdev);
+ if (verifier_threads == 1)
+ verifier_threads = 0;
+ ret = -workqueue_create_bound(&vc.wq_rtdev, ctx,
+ verifier_threads, 500);
+ if (ret) {
+ str_liberror(ctx, ret,
+ _("creating rt dev fsverity workqueue"));
+ goto out_ddev;
+ }
+ }
+
+ /* Find all the verity inodes. */
+ ret = scrub_scan_all_inodes(ctx, schedule_verity_file, 0, &vc);
+ if (ret)
+ goto out_rtdev;
+ if (vc.aborted) {
+ ret = ECANCELED;
+ goto out_rtdev;
+ }
+
+out_rtdev:
+ workqueue_terminate(&vc.wq_rtdev);
+ workqueue_destroy(&vc.wq_rtdev);
+out_ddev:
+ workqueue_terminate(&vc.wq_ddev);
+ workqueue_destroy(&vc.wq_ddev);
+ return ret;
+}
+
/*
* Read verify all the file data blocks in a filesystem. Since XFS doesn't
* do data checksums, we trust that the underlying storage will pass back
@@ -689,6 +973,12 @@ phase6_func(
struct media_verify_state vs = { NULL };
int ret, ret2, ret3;
+ if (ctx->mnt.fsgeom.flags & XFS_FSOP_GEOM_FLAGS_VERITY) {
+ ret = scan_verity_files(ctx);
+ if (ret)
+ return ret;
+ }
+
ret = -bitmap_alloc(&vs.d_bad);
if (ret) {
str_liberror(ctx, ret, _("creating datadev badblock bitmap"));
@@ -816,5 +1106,20 @@ phase6_estimate(
if (ctx->logdev)
*nr_threads += disk_heads(ctx->logdev);
*rshift = 20;
+
+ /*
+ * If fsverity is active, double the amount of progress items because
+ * we will want to validate individual files' data with fsverity.
+ * Bump the thread counts for the separate verity thread pools and the
+ * inode scanner.
+ */
+ if (ctx->mnt.fsgeom.flags & XFS_FSOP_GEOM_FLAGS_VERITY) {
+ *items *= 2;
+ *nr_threads += disk_heads(ctx->datadev);
+ *nr_threads += scrub_nproc_workqueue(ctx);
+ if (ctx->rtdev)
+ *nr_threads += disk_heads(ctx->rtdev);
+ }
+
return 0;
}
next prev parent reply other threads:[~2024-04-30 3:39 UTC|newest]
Thread overview: 165+ messages / expand[flat|nested] mbox.gz Atom feed top
2024-04-30 3:11 [PATCHBOMB v5.6] fs-verity support for XFS Darrick J. Wong
2024-04-30 3:18 ` [PATCHSET v5.6 1/2] fs-verity: support merkle tree access by blocks Darrick J. Wong
2024-04-30 3:19 ` [PATCH 01/18] fs: add FS_XFLAG_VERITY for verity files Darrick J. Wong
2024-04-30 3:19 ` [PATCH 02/18] fsverity: pass tree_blocksize to end_enable_verity() Darrick J. Wong
2024-04-30 3:20 ` [PATCH 03/18] fsverity: convert verification to use byte instead of page offsets Darrick J. Wong
2024-05-01 7:33 ` Christoph Hellwig
2024-05-01 22:33 ` Darrick J. Wong
2024-05-02 0:42 ` Eric Biggers
2024-05-08 20:14 ` Darrick J. Wong
2024-04-30 3:20 ` [PATCH 04/18] fsverity: support block-based Merkle tree caching Darrick J. Wong
2024-05-01 7:36 ` Christoph Hellwig
2024-05-01 22:35 ` Darrick J. Wong
2024-05-02 4:42 ` Christoph Hellwig
2024-05-15 2:16 ` Eric Biggers
2024-04-30 3:20 ` [PATCH 05/18] fsverity: pass the merkle tree block level to fsverity_read_merkle_tree_block Darrick J. Wong
2024-04-30 3:20 ` [PATCH 06/18] fsverity: add per-sb workqueue for post read processing Darrick J. Wong
2024-04-30 3:21 ` [PATCH 07/18] fsverity: add tracepoints Darrick J. Wong
2024-04-30 3:21 ` [PATCH 08/18] fsverity: pass the new tree size and block size to ->begin_enable_verity Darrick J. Wong
2024-04-30 3:21 ` [PATCH 09/18] fsverity: expose merkle tree geometry to callers Darrick J. Wong
2024-04-30 3:22 ` [PATCH 10/18] fsverity: box up the write_merkle_tree_block parameters too Darrick J. Wong
2024-04-30 3:22 ` [PATCH 11/18] fsverity: pass the zero-hash value to the implementation Darrick J. Wong
2024-04-30 3:22 ` [PATCH 12/18] fsverity: report validation errors back to the filesystem Darrick J. Wong
2024-04-30 3:22 ` [PATCH 13/18] fsverity: pass super_block to fsverity_enqueue_verify_work Darrick J. Wong
2024-04-30 3:23 ` [PATCH 14/18] ext4: use a per-superblock fsverity workqueue Darrick J. Wong
2024-04-30 3:23 ` [PATCH 15/18] f2fs: " Darrick J. Wong
2024-04-30 3:23 ` [PATCH 16/18] btrfs: " Darrick J. Wong
2024-04-30 3:23 ` [PATCH 17/18] fsverity: remove system-wide workqueue Darrick J. Wong
2024-04-30 3:24 ` [PATCH 18/18] iomap: integrate fs-verity verification into iomap's read path Darrick J. Wong
2024-05-01 7:10 ` Christoph Hellwig
2024-05-01 22:37 ` Darrick J. Wong
2024-04-30 3:18 ` [PATCHSET v5.6 2/2] xfs: fs-verity support Darrick J. Wong
2024-04-30 3:24 ` [PATCH 01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c Darrick J. Wong
2024-05-01 6:55 ` Christoph Hellwig
2024-05-01 22:39 ` Darrick J. Wong
2024-05-02 4:56 ` Christoph Hellwig
2024-05-02 5:56 ` Chandan Babu R
2024-05-02 6:34 ` Christoph Hellwig
2024-04-30 3:24 ` [PATCH 02/26] xfs: turn XFS_ATTR3_RMT_BUF_SPACE into a function Darrick J. Wong
2024-05-01 6:55 ` Christoph Hellwig
2024-04-30 3:24 ` [PATCH 03/26] xfs: create a helper to compute the blockcount of a max sized remote value Darrick J. Wong
2024-05-01 6:56 ` Christoph Hellwig
2024-04-30 3:25 ` [PATCH 04/26] xfs: minor cleanups of xfs_attr3_rmt_blocks Darrick J. Wong
2024-05-01 6:56 ` Christoph Hellwig
2024-04-30 3:25 ` [PATCH 05/26] xfs: use an empty transaction to protect xfs_attr_get from deadlocks Darrick J. Wong
2024-05-01 6:57 ` Christoph Hellwig
2024-05-01 22:42 ` Darrick J. Wong
2024-04-30 3:25 ` [PATCH 06/26] xfs: add attribute type for fs-verity Darrick J. Wong
2024-04-30 3:25 ` [PATCH 07/26] xfs: do not use xfs_attr3_rmt_hdr for remote verity value blocks Darrick J. Wong
2024-04-30 3:26 ` [PATCH 08/26] xfs: add fs-verity ro-compat flag Darrick J. Wong
2024-04-30 3:26 ` [PATCH 09/26] xfs: add inode on-disk VERITY flag Darrick J. Wong
2024-04-30 3:26 ` [PATCH 10/26] xfs: initialize fs-verity on file open and cleanup on inode destruction Darrick J. Wong
2024-04-30 3:26 ` [PATCH 11/26] xfs: don't allow to enable DAX on fs-verity sealed inode Darrick J. Wong
2024-04-30 3:27 ` [PATCH 12/26] xfs: disable direct read path for fs-verity files Darrick J. Wong
2024-04-30 3:27 ` [PATCH 13/26] xfs: widen flags argument to the xfs_iflags_* helpers Darrick J. Wong
2024-05-01 6:54 ` Christoph Hellwig
2024-05-01 22:44 ` Darrick J. Wong
2024-04-30 3:27 ` [PATCH 14/26] xfs: add fs-verity support Darrick J. Wong
2024-04-30 3:28 ` [PATCH 15/26] xfs: create a per-mount shrinker for verity inodes merkle tree blocks Darrick J. Wong
2024-04-30 3:28 ` [PATCH 16/26] xfs: shrink verity blob cache Darrick J. Wong
2024-04-30 3:28 ` [PATCH 17/26] xfs: don't store trailing zeroes of merkle tree blocks Darrick J. Wong
2024-04-30 3:28 ` [PATCH 18/26] xfs: use merkle tree offset as attr hash Darrick J. Wong
2024-05-01 6:53 ` Christoph Hellwig
2024-05-01 7:23 ` Christoph Hellwig
2024-05-07 21:24 ` Darrick J. Wong
2024-05-08 11:47 ` Christoph Hellwig
2024-05-08 20:26 ` Darrick J. Wong
2024-05-09 5:02 ` Christoph Hellwig
2024-05-09 20:02 ` Darrick J. Wong
2024-05-10 5:08 ` Christoph Hellwig
2024-05-10 6:20 ` Christoph Hellwig
2024-05-17 17:17 ` Darrick J. Wong
2024-05-20 12:39 ` Christoph Hellwig
2024-05-20 16:02 ` Darrick J. Wong
2024-05-22 14:37 ` Christoph Hellwig
2024-05-22 18:29 ` Eric Biggers
2024-05-31 21:28 ` Darrick J. Wong
2024-05-31 21:45 ` Eric Biggers
2024-05-09 17:46 ` Eric Biggers
2024-05-09 18:04 ` Darrick J. Wong
2024-05-09 18:36 ` Eric Biggers
2024-04-30 3:29 ` [PATCH 19/26] xfs: don't bother storing merkle tree blocks for zeroed data blocks Darrick J. Wong
2024-05-01 6:47 ` Christoph Hellwig
2024-05-01 22:47 ` Darrick J. Wong
2024-05-02 0:01 ` Eric Biggers
2024-05-08 20:26 ` Darrick J. Wong
2024-04-30 3:29 ` [PATCH 20/26] xfs: add fs-verity ioctls Darrick J. Wong
2024-04-30 3:29 ` [PATCH 21/26] xfs: advertise fs-verity being available on filesystem Darrick J. Wong
2024-04-30 3:29 ` [PATCH 22/26] xfs: check and repair the verity inode flag state Darrick J. Wong
2024-04-30 3:30 ` [PATCH 23/26] xfs: teach online repair to evaluate fsverity xattrs Darrick J. Wong
2024-04-30 3:30 ` [PATCH 24/26] xfs: report verity failures through the health system Darrick J. Wong
2024-04-30 3:30 ` [PATCH 25/26] xfs: make it possible to disable fsverity Darrick J. Wong
2024-05-01 6:48 ` Christoph Hellwig
2024-05-01 22:50 ` Darrick J. Wong
2024-05-02 0:15 ` Eric Biggers
2024-05-08 20:31 ` Darrick J. Wong
2024-05-09 5:04 ` Christoph Hellwig
2024-05-09 14:45 ` Darrick J. Wong
2024-05-09 15:06 ` Christoph Hellwig
2024-05-09 15:09 ` Darrick J. Wong
2024-05-09 15:13 ` Christoph Hellwig
2024-05-09 15:43 ` Darrick J. Wong
2024-05-17 19:36 ` Theodore Ts'o
2024-04-30 3:30 ` [PATCH 26/26] xfs: enable ro-compat fs-verity flag Darrick J. Wong
2024-04-30 3:19 ` [PATCHSET v5.6] xfsprogs: fs-verity support for XFS Darrick J. Wong
2024-04-30 3:31 ` [PATCH 01/38] fs: add FS_XFLAG_VERITY for verity files Darrick J. Wong
2024-04-30 3:31 ` [PATCH 02/38] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c Darrick J. Wong
2024-04-30 3:31 ` [PATCH 03/38] xfs: turn XFS_ATTR3_RMT_BUF_SPACE into a function Darrick J. Wong
2024-04-30 3:31 ` [PATCH 04/38] xfs: create a helper to compute the blockcount of a max sized remote value Darrick J. Wong
2024-04-30 3:32 ` [PATCH 05/38] xfs: minor cleanups of xfs_attr3_rmt_blocks Darrick J. Wong
2024-04-30 3:32 ` [PATCH 06/38] xfs: use an empty transaction to protect xfs_attr_get from deadlocks Darrick J. Wong
2024-04-30 3:32 ` [PATCH 07/38] xfs: add attribute type for fs-verity Darrick J. Wong
2024-04-30 3:32 ` [PATCH 08/38] xfs: do not use xfs_attr3_rmt_hdr for remote verity value blocks Darrick J. Wong
2024-04-30 3:33 ` [PATCH 09/38] xfs: add fs-verity ro-compat flag Darrick J. Wong
2024-04-30 3:33 ` [PATCH 10/38] xfs: add inode on-disk VERITY flag Darrick J. Wong
2024-04-30 3:33 ` [PATCH 11/38] xfs: add fs-verity support Darrick J. Wong
2024-04-30 3:34 ` [PATCH 12/38] xfs: use merkle tree offset as attr hash Darrick J. Wong
2024-04-30 3:34 ` [PATCH 13/38] xfs: advertise fs-verity being available on filesystem Darrick J. Wong
2024-04-30 3:34 ` [PATCH 14/38] xfs: report verity failures through the health system Darrick J. Wong
2024-04-30 3:34 ` [PATCH 15/38] xfs: enable ro-compat fs-verity flag Darrick J. Wong
2024-04-30 3:35 ` [PATCH 16/38] libfrog: add fsverity to xfs_report_geom output Darrick J. Wong
2024-04-30 3:35 ` [PATCH 17/38] xfs_db: introduce attr_modify command Darrick J. Wong
2024-04-30 3:35 ` [PATCH 18/38] xfs_db: add ATTR_PARENT support to " Darrick J. Wong
2024-04-30 3:35 ` [PATCH 19/38] xfs_db: make attr_set/remove/modify be able to handle fs-verity attrs Darrick J. Wong
2024-04-30 3:36 ` [PATCH 20/38] man: document attr_modify command Darrick J. Wong
2024-04-30 3:36 ` [PATCH 21/38] xfs_db: create hex string as a field type Darrick J. Wong
2024-04-30 3:36 ` [PATCH 22/38] xfs_db: dump verity features and metadata Darrick J. Wong
2024-04-30 3:36 ` [PATCH 23/38] xfs_db: dump merkle tree data Darrick J. Wong
2024-04-30 3:37 ` [PATCH 24/38] xfs_db: dump the verity descriptor Darrick J. Wong
2024-04-30 3:37 ` [PATCH 25/38] xfs_db: don't obfuscate verity xattrs Darrick J. Wong
2024-04-30 3:37 ` [PATCH 26/38] xfs_db: dump the inode verity flag Darrick J. Wong
2024-04-30 3:37 ` [PATCH 27/38] xfs_db: compute hashes of merkle tree blocks Darrick J. Wong
2024-04-30 3:38 ` [PATCH 28/38] xfs_repair: junk fsverity xattrs when unnecessary Darrick J. Wong
2024-04-30 3:38 ` [PATCH 29/38] xfs_repair: clear verity iflag when verity isn't supported Darrick J. Wong
2024-04-30 3:38 ` [PATCH 30/38] xfs_repair: handle verity remote attrs Darrick J. Wong
2024-04-30 3:38 ` [PATCH 31/38] xfs_repair: allow upgrading filesystems with verity Darrick J. Wong
2024-04-30 3:39 ` [PATCH 32/38] xfs_scrub: check verity file metadata Darrick J. Wong
2024-04-30 3:39 ` Darrick J. Wong [this message]
2024-04-30 3:39 ` [PATCH 34/38] xfs_scrub: use MADV_POPULATE_READ to check verity files Darrick J. Wong
2024-04-30 3:40 ` [PATCH 35/38] xfs_spaceman: report data corruption Darrick J. Wong
2024-04-30 3:40 ` [PATCH 36/38] xfs_io: report fsverity status via statx Darrick J. Wong
2024-04-30 3:40 ` [PATCH 37/38] xfs_io: create magic command to disable verity Darrick J. Wong
2024-04-30 3:40 ` [PATCH 38/38] mkfs.xfs: add verity parameter Darrick J. Wong
2024-04-30 3:19 ` [PATCHSET v5.6] fstests: fs-verity support for XFS Darrick J. Wong
2024-04-30 3:41 ` [PATCH 1/6] common/verity: enable fsverity " Darrick J. Wong
2024-04-30 12:39 ` Andrey Albershteyn
2024-04-30 15:35 ` Darrick J. Wong
2024-04-30 3:41 ` [PATCH 2/6] xfs/{021,122}: adapt to fsverity xattrs Darrick J. Wong
2024-04-30 12:46 ` Andrey Albershteyn
2024-04-30 15:36 ` Darrick J. Wong
2024-04-30 3:41 ` [PATCH 3/6] xfs/122: adapt to fsverity Darrick J. Wong
2024-04-30 12:45 ` Andrey Albershteyn
2024-04-30 15:37 ` Darrick J. Wong
2024-04-30 3:41 ` [PATCH 4/6] xfs: test xfs_scrub detection and correction of corrupt fsverity metadata Darrick J. Wong
2024-04-30 12:29 ` Andrey Albershteyn
2024-04-30 15:43 ` Darrick J. Wong
2024-04-30 3:42 ` [PATCH 5/6] xfs: test disabling fsverity Darrick J. Wong
2024-04-30 12:56 ` Andrey Albershteyn
2024-04-30 13:11 ` Andrey Albershteyn
2024-04-30 15:48 ` Darrick J. Wong
2024-04-30 18:06 ` Andrey Albershteyn
2024-04-30 3:42 ` [PATCH 6/6] common/populate: add verity files to populate xfs images Darrick J. Wong
2024-04-30 13:22 ` Andrey Albershteyn
2024-04-30 15:49 ` Darrick J. Wong
2024-05-11 5:01 ` [PATCHSET v5.6] fstests: fs-verity support for XFS Zorro Lang
2024-05-17 15:56 ` Darrick J. Wong
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=171444683613.960383.9616089814402935985.stgit@frogsfrogsfrogs \
--to=djwong@kernel.org \
--cc=aalbersh@redhat.com \
--cc=cem@kernel.org \
--cc=ebiggers@kernel.org \
--cc=fsverity@lists.linux.dev \
--cc=linux-fsdevel@vger.kernel.org \
--cc=linux-xfs@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).