blob: cf641a9b0ff7afef725cd7d53156cf2fd256380a [file] [view] [edit]
fs-verity signing
=================
With a key pair, fs-verity signature can be generated by simply running
`fsverity_metadata_generator` command line tool, which uses
[fsverity-util](https://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/fsverity-utils.git).
```
fsverity_metadata_generator --fsverity-path {fsverity_path} --key key.pem --key-format pem \
--cert cert.pem --signature pkcs7 --output test.data.fsv_meta test.data
```