€•ö(      Œsphinx.addnodes”Œdocument”“”)”}”(Œ	rawsource”Œ ”Œchildren”]”(Œtranslations”ŒLanguagesNode”“”)”}”(hhh]”(h Œpending_xref”“”)”}”(hhh]”Œdocutils.nodes”ŒText”“”ŒChinese (Simplified)”…””}”Œparent”hsbaŒ
attributes”}”(Œids”]”Œclasses”]”Œnames”]”Œdupnames”]”Œbackrefs”]”Œ	refdomain”Œstd”Œreftype”Œdoc”Œ	reftarget”Œ+/translations/zh_CN/filesystems/ext4/verity”Œmodname”NŒ	classname”NŒrefexplicit”ˆuŒtagname”hhhubh)”}”(hhh]”hŒChinese (Traditional)”…””}”hh2sbah}”(h]”h ]”h"]”h$]”h&]”Œ	refdomain”h)Œreftype”h+Œ	reftarget”Œ+/translations/zh_TW/filesystems/ext4/verity”Œmodname”NŒ	classname”NŒrefexplicit”ˆuh1hhhubh)”}”(hhh]”hŒItalian”…””}”hhFsbah}”(h]”h ]”h"]”h$]”h&]”Œ	refdomain”h)Œreftype”h+Œ	reftarget”Œ+/translations/it_IT/filesystems/ext4/verity”Œmodname”NŒ	classname”NŒrefexplicit”ˆuh1hhhubh)”}”(hhh]”hŒJapanese”…””}”hhZsbah}”(h]”h ]”h"]”h$]”h&]”Œ	refdomain”h)Œreftype”h+Œ	reftarget”Œ+/translations/ja_JP/filesystems/ext4/verity”Œmodname”NŒ	classname”NŒrefexplicit”ˆuh1hhhubh)”}”(hhh]”hŒKorean”…””}”hhnsbah}”(h]”h ]”h"]”h$]”h&]”Œ	refdomain”h)Œreftype”h+Œ	reftarget”Œ+/translations/ko_KR/filesystems/ext4/verity”Œmodname”NŒ	classname”NŒrefexplicit”ˆuh1hhhubh)”}”(hhh]”hŒSpanish”…””}”hh‚sbah}”(h]”h ]”h"]”h$]”h&]”Œ	refdomain”h)Œreftype”h+Œ	reftarget”Œ+/translations/sp_SP/filesystems/ext4/verity”Œmodname”NŒ	classname”NŒrefexplicit”ˆuh1hhhubeh}”(h]”h ]”h"]”h$]”h&]”Œcurrent_language”ŒEnglish”uh1h
hhŒ	_document”hŒsource”NŒline”NubhŒcomment”“”)”}”(hŒ SPDX-License-Identifier: GPL-2.0”h]”hŒ SPDX-License-Identifier: GPL-2.0”…””}”hh£sbah}”(h]”h ]”h"]”h$]”h&]”Œ	xml:space”Œpreserve”uh1h¡hhhžhhŸŒE/var/lib/git/docbuild/linux/Documentation/filesystems/ext4/verity.rst”h KubhŒsection”“”)”}”(hhh]”(hŒtitle”“”)”}”(hŒVerity files”h]”hŒVerity files”…””}”(hh»hžhhŸNh Nubah}”(h]”h ]”h"]”h$]”h&]”uh1h¹hh¶hžhhŸh³h KubhŒ	paragraph”“”)”}”(hXÐ  ext4 supports fs-verity, which is a filesystem feature that provides
Merkle tree based hashing for individual readonly files.  Most of
fs-verity is common to all filesystems that support it; see
:ref:`Documentation/filesystems/fsverity.rst <fsverity>` for the
fs-verity documentation.  However, the on-disk layout of the verity
metadata is filesystem-specific.  On ext4, the verity metadata is
stored after the end of the file data itself, in the following format:”h]”(hŒÃext4 supports fs-verity, which is a filesystem feature that provides
Merkle tree based hashing for individual readonly files.  Most of
fs-verity is common to all filesystems that support it; see
”…””}”(hhËhžhhŸNh Nubh)”}”(hŒ8:ref:`Documentation/filesystems/fsverity.rst <fsverity>`”h]”hŒinline”“”)”}”(hhÕh]”hŒ&Documentation/filesystems/fsverity.rst”…””}”(hhÙhžhhŸNh Nubah}”(h]”h ]”(Œxref”Œstd”Œstd-ref”eh"]”h$]”h&]”uh1h×hhÓubah}”(h]”h ]”h"]”h$]”h&]”Œrefdoc”Œfilesystems/ext4/verity”Œ	refdomain”häŒreftype”Œref”Œrefexplicit”ˆŒrefwarn”ˆŒ	reftarget”Œfsverity”uh1hhŸh³h KhhËubhŒÕ for the
fs-verity documentation.  However, the on-disk layout of the verity
metadata is filesystem-specific.  On ext4, the verity metadata is
stored after the end of the file data itself, in the following format:”…””}”(hhËhžhhŸNh Nubeh}”(h]”h ]”h"]”h$]”h&]”uh1hÉhŸh³h Khh¶hžhubhŒbullet_list”“”)”}”(hhh]”(hŒ	list_item”“”)”}”(hŒ{Zero-padding to the next 65536-byte boundary.  This padding need not
actually be allocated on-disk, i.e. it may be a hole.
”h]”hÊ)”}”(hŒzZero-padding to the next 65536-byte boundary.  This padding need not
actually be allocated on-disk, i.e. it may be a hole.”h]”hŒzZero-padding to the next 65536-byte boundary.  This padding need not
actually be allocated on-disk, i.e. it may be a hole.”…””}”(hj  hžhhŸNh Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÉhŸh³h Khj	  ubah}”(h]”h ]”h"]”h$]”h&]”uh1j  hj  hžhhŸh³h Nubj  )”}”(hŒåThe Merkle tree, as documented in
:ref:`Documentation/filesystems/fsverity.rst
<fsverity_merkle_tree>`, with the tree levels stored in order from
root to leaf, and the tree blocks within each level stored in their
natural order.
”h]”hÊ)”}”(hŒäThe Merkle tree, as documented in
:ref:`Documentation/filesystems/fsverity.rst
<fsverity_merkle_tree>`, with the tree levels stored in order from
root to leaf, and the tree blocks within each level stored in their
natural order.”h]”(hŒ"The Merkle tree, as documented in
”…””}”(hj%  hžhhŸNh Nubh)”}”(hŒD:ref:`Documentation/filesystems/fsverity.rst
<fsverity_merkle_tree>`”h]”hØ)”}”(hj/  h]”hŒ&Documentation/filesystems/fsverity.rst”…””}”(hj1  hžhhŸNh Nubah}”(h]”h ]”(hãŒstd”Œstd-ref”eh"]”h$]”h&]”uh1h×hj-  ubah}”(h]”h ]”h"]”h$]”h&]”Œrefdoc”hðŒ	refdomain”j;  Œreftype”Œref”Œrefexplicit”ˆŒrefwarn”ˆhöŒfsverity_merkle_tree”uh1hhŸh³h Khj%  ubhŒ~, with the tree levels stored in order from
root to leaf, and the tree blocks within each level stored in their
natural order.”…””}”(hj%  hžhhŸNh Nubeh}”(h]”h ]”h"]”h$]”h&]”uh1hÉhŸh³h Khj!  ubah}”(h]”h ]”h"]”h$]”h&]”uh1j  hj  hžhhŸh³h Nubj  )”}”(hŒ4Zero-padding to the next filesystem block boundary.
”h]”hÊ)”}”(hŒ3Zero-padding to the next filesystem block boundary.”h]”hŒ3Zero-padding to the next filesystem block boundary.”…””}”(hja  hžhhŸNh Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÉhŸh³h Khj]  ubah}”(h]”h ]”h"]”h$]”h&]”uh1j  hj  hžhhŸh³h Nubj  )”}”(hŒ–The verity descriptor, as documented in
:ref:`Documentation/filesystems/fsverity.rst <fsverity_descriptor>`,
with optionally appended signature blob.
”h]”hÊ)”}”(hŒ•The verity descriptor, as documented in
:ref:`Documentation/filesystems/fsverity.rst <fsverity_descriptor>`,
with optionally appended signature blob.”h]”(hŒ(The verity descriptor, as documented in
”…””}”(hjy  hžhhŸNh Nubh)”}”(hŒC:ref:`Documentation/filesystems/fsverity.rst <fsverity_descriptor>`”h]”hØ)”}”(hjƒ  h]”hŒ&Documentation/filesystems/fsverity.rst”…””}”(hj…  hžhhŸNh Nubah}”(h]”h ]”(hãŒstd”Œstd-ref”eh"]”h$]”h&]”uh1h×hj  ubah}”(h]”h ]”h"]”h$]”h&]”Œrefdoc”hðŒ	refdomain”j  Œreftype”Œref”Œrefexplicit”ˆŒrefwarn”ˆhöŒfsverity_descriptor”uh1hhŸh³h Khjy  ubhŒ*,
with optionally appended signature blob.”…””}”(hjy  hžhhŸNh Nubeh}”(h]”h ]”h"]”h$]”h&]”uh1hÉhŸh³h Khju  ubah}”(h]”h ]”h"]”h$]”h&]”uh1j  hj  hžhhŸh³h Nubj  )”}”(hŒTZero-padding to the next offset that is 4 bytes before a filesystem
block boundary.
”h]”hÊ)”}”(hŒSZero-padding to the next offset that is 4 bytes before a filesystem
block boundary.”h]”hŒSZero-padding to the next offset that is 4 bytes before a filesystem
block boundary.”…””}”(hjµ  hžhhŸNh Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÉhŸh³h Khj±  ubah}”(h]”h ]”h"]”h$]”h&]”uh1j  hj  hžhhŸh³h Nubj  )”}”(hŒOThe size of the verity descriptor in bytes, as a 4-byte little
endian integer.
”h]”hÊ)”}”(hŒNThe size of the verity descriptor in bytes, as a 4-byte little
endian integer.”h]”hŒNThe size of the verity descriptor in bytes, as a 4-byte little
endian integer.”…””}”(hjÍ  hžhhŸNh Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÉhŸh³h K hjÉ  ubah}”(h]”h ]”h"]”h$]”h&]”uh1j  hj  hžhhŸh³h Nubeh}”(h]”h ]”h"]”h$]”h&]”Œbullet”Œ-”uh1j  hŸh³h Khh¶hžhubhÊ)”}”(hŒ÷Verity inodes have EXT4_VERITY_FL set, and they must use extents, i.e.
EXT4_EXTENTS_FL must be set and EXT4_INLINE_DATA_FL must be clear.
They can have EXT4_ENCRYPT_FL set, in which case the verity metadata
is encrypted as well as the data itself.”h]”hŒ÷Verity inodes have EXT4_VERITY_FL set, and they must use extents, i.e.
EXT4_EXTENTS_FL must be set and EXT4_INLINE_DATA_FL must be clear.
They can have EXT4_ENCRYPT_FL set, in which case the verity metadata
is encrypted as well as the data itself.”…””}”(hjé  hžhhŸNh Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÉhŸh³h K#hh¶hžhubhÊ)”}”(hŒNVerity files cannot have blocks allocated past the end of the verity
metadata.”h]”hŒNVerity files cannot have blocks allocated past the end of the verity
metadata.”…””}”(hj÷  hžhhŸNh Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÉhŸh³h K(hh¶hžhubhÊ)”}”(hŒ^Verity and DAX are not compatible and attempts to set both of these flags
on a file will fail.”h]”hŒ^Verity and DAX are not compatible and attempts to set both of these flags
on a file will fail.”…””}”(hj  hžhhŸNh Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÉhŸh³h K+hh¶hžhubeh}”(h]”Œverity-files”ah ]”h"]”Œverity files”ah$]”h&]”uh1h´hhhžhhŸh³h Kubeh}”(h]”h ]”h"]”h$]”h&]”Œsource”h³uh1hŒcurrent_source”NŒcurrent_line”NŒsettings”Œdocutils.frontend”ŒValues”“”)”}”(h¹NŒ	generator”NŒ	datestamp”NŒsource_link”NŒ
source_url”NŒtoc_backlinks”Œentry”Œfootnote_backlinks”KŒsectnum_xform”KŒstrip_comments”NŒstrip_elements_with_classes”NŒstrip_classes”NŒreport_level”KŒ
halt_level”KŒexit_status_level”KŒdebug”NŒwarning_stream”NŒ	traceback”ˆŒinput_encoding”Œ	utf-8-sig”Œinput_encoding_error_handler”Œstrict”Œoutput_encoding”Œutf-8”Œoutput_encoding_error_handler”j>  Œerror_encoding”Œutf-8”Œerror_encoding_error_handler”Œbackslashreplace”Œlanguage_code”Œen”Œrecord_dependencies”NŒconfig”NŒ	id_prefix”hŒauto_id_prefix”Œid”Œdump_settings”NŒdump_internals”NŒdump_transforms”NŒdump_pseudo_xml”NŒexpose_internals”NŒstrict_visitor”NŒ_disable_config”NŒ_source”h³Œ_destination”NŒ_config_files”]”Œ7/var/lib/git/docbuild/linux/Documentation/docutils.conf”aŒfile_insertion_enabled”ˆŒraw_enabled”KŒline_length_limit”M'Œpep_references”NŒpep_base_url”Œhttps://peps.python.org/”Œpep_file_url_template”Œpep-%04d”Œrfc_references”NŒrfc_base_url”Œ&https://datatracker.ietf.org/doc/html/”Œ	tab_width”KŒtrim_footnote_reference_space”‰Œsyntax_highlight”Œlong”Œsmart_quotes”ˆŒsmartquotes_locales”]”Œcharacter_level_inline_markup”‰Œdoctitle_xform”‰Œdocinfo_xform”KŒsectsubtitle_xform”‰Œimage_loading”Œlink”Œembed_stylesheet”‰Œcloak_email_addresses”ˆŒsection_self_link”‰Œenv”NubŒreporter”NŒindirect_targets”]”Œsubstitution_defs”}”Œsubstitution_names”}”Œrefnames”}”Œrefids”}”Œnameids”}”j  j  sŒ	nametypes”}”j  ‰sh}”j  h¶sŒfootnote_refs”}”Œcitation_refs”}”Œautofootnotes”]”Œautofootnote_refs”]”Œsymbol_footnotes”]”Œsymbol_footnote_refs”]”Œ	footnotes”]”Œ	citations”]”Œautofootnote_start”KŒsymbol_footnote_start”K Œ
id_counter”Œcollections”ŒCounter”“”}”…”R”Œparse_messages”]”Œtransform_messages”]”Œtransformer”NŒinclude_log”]”Œ
decoration”Nhžhub.