€•Ù)      Œsphinx.addnodes”Œdocument”“”)”}”(Œ	rawsource”Œ ”Œchildren”]”(Œtranslations”ŒLanguagesNode”“”)”}”(hhh]”(h Œpending_xref”“”)”}”(hhh]”Œdocutils.nodes”ŒText”“”ŒChinese (Simplified)”…””}”Œparent”hsbaŒ
attributes”}”(Œids”]”Œclasses”]”Œnames”]”Œdupnames”]”Œbackrefs”]”Œ	refdomain”Œstd”Œreftype”Œdoc”Œ	reftarget”Œ+/translations/zh_CN/filesystems/ext4/verity”Œmodname”NŒ	classname”NŒrefexplicit”ˆuŒtagname”hhhubh)”}”(hhh]”hŒChinese (Traditional)”…””}”hh2sbah}”(h]”h ]”h"]”h$]”h&]”Œ	refdomain”h)Œreftype”h+Œ	reftarget”Œ+/translations/zh_TW/filesystems/ext4/verity”Œmodname”NŒ	classname”NŒrefexplicit”ˆuh1hhhubh)”}”(hhh]”hŒItalian”…””}”hhFsbah}”(h]”h ]”h"]”h$]”h&]”Œ	refdomain”h)Œreftype”h+Œ	reftarget”Œ+/translations/it_IT/filesystems/ext4/verity”Œmodname”NŒ	classname”NŒrefexplicit”ˆuh1hhhubh)”}”(hhh]”hŒJapanese”…””}”hhZsbah}”(h]”h ]”h"]”h$]”h&]”Œ	refdomain”h)Œreftype”h+Œ	reftarget”Œ+/translations/ja_JP/filesystems/ext4/verity”Œmodname”NŒ	classname”NŒrefexplicit”ˆuh1hhhubh)”}”(hhh]”hŒKorean”…””}”hhnsbah}”(h]”h ]”h"]”h$]”h&]”Œ	refdomain”h)Œreftype”h+Œ	reftarget”Œ+/translations/ko_KR/filesystems/ext4/verity”Œmodname”NŒ	classname”NŒrefexplicit”ˆuh1hhhubh)”}”(hhh]”hŒPortuguese (Brazilian)”…””}”hh‚sbah}”(h]”h ]”h"]”h$]”h&]”Œ	refdomain”h)Œreftype”h+Œ	reftarget”Œ+/translations/pt_BR/filesystems/ext4/verity”Œmodname”NŒ	classname”NŒrefexplicit”ˆuh1hhhubh)”}”(hhh]”hŒSpanish”…””}”hh–sbah}”(h]”h ]”h"]”h$]”h&]”Œ	refdomain”h)Œreftype”h+Œ	reftarget”Œ+/translations/sp_SP/filesystems/ext4/verity”Œmodname”NŒ	classname”NŒrefexplicit”ˆuh1hhhubeh}”(h]”h ]”h"]”h$]”h&]”Œcurrent_language”ŒEnglish”uh1h
hhŒ	_document”hŒsource”NŒline”NubhŒcomment”“”)”}”(hŒ SPDX-License-Identifier: GPL-2.0”h]”hŒ SPDX-License-Identifier: GPL-2.0”…””}”hh·sbah}”(h]”h ]”h"]”h$]”h&]”Œ	xml:space”Œpreserve”uh1hµhhh²hh³ŒE/var/lib/git/docbuild/linux/Documentation/filesystems/ext4/verity.rst”h´KubhŒsection”“”)”}”(hhh]”(hŒtitle”“”)”}”(hŒVerity files”h]”hŒVerity files”…””}”(hhÏh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÍhhÊh²hh³hÇh´KubhŒ	paragraph”“”)”}”(hXÐ  ext4 supports fs-verity, which is a filesystem feature that provides
Merkle tree based hashing for individual readonly files.  Most of
fs-verity is common to all filesystems that support it; see
:ref:`Documentation/filesystems/fsverity.rst <fsverity>` for the
fs-verity documentation.  However, the on-disk layout of the verity
metadata is filesystem-specific.  On ext4, the verity metadata is
stored after the end of the file data itself, in the following format:”h]”(hŒÃext4 supports fs-verity, which is a filesystem feature that provides
Merkle tree based hashing for individual readonly files.  Most of
fs-verity is common to all filesystems that support it; see
”…””}”(hhßh²hh³Nh´Nubh)”}”(hŒ8:ref:`Documentation/filesystems/fsverity.rst <fsverity>`”h]”hŒinline”“”)”}”(hhéh]”hŒ&Documentation/filesystems/fsverity.rst”…””}”(hhíh²hh³Nh´Nubah}”(h]”h ]”(Œxref”Œstd”Œstd-ref”eh"]”h$]”h&]”uh1hëhhçubah}”(h]”h ]”h"]”h$]”h&]”Œrefdoc”Œfilesystems/ext4/verity”Œ	refdomain”høŒreftype”Œref”Œrefexplicit”ˆŒrefwarn”ˆŒ	reftarget”Œfsverity”uh1hh³hÇh´KhhßubhŒÕ for the
fs-verity documentation.  However, the on-disk layout of the verity
metadata is filesystem-specific.  On ext4, the verity metadata is
stored after the end of the file data itself, in the following format:”…””}”(hhßh²hh³Nh´Nubeh}”(h]”h ]”h"]”h$]”h&]”uh1hÝh³hÇh´KhhÊh²hubhŒbullet_list”“”)”}”(hhh]”(hŒ	list_item”“”)”}”(hŒ{Zero-padding to the next 65536-byte boundary.  This padding need not
actually be allocated on-disk, i.e. it may be a hole.
”h]”hÞ)”}”(hŒzZero-padding to the next 65536-byte boundary.  This padding need not
actually be allocated on-disk, i.e. it may be a hole.”h]”hŒzZero-padding to the next 65536-byte boundary.  This padding need not
actually be allocated on-disk, i.e. it may be a hole.”…””}”(hj!  h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÝh³hÇh´Khj  ubah}”(h]”h ]”h"]”h$]”h&]”uh1j  hj  h²hh³hÇh´Nubj  )”}”(hŒåThe Merkle tree, as documented in
:ref:`Documentation/filesystems/fsverity.rst
<fsverity_merkle_tree>`, with the tree levels stored in order from
root to leaf, and the tree blocks within each level stored in their
natural order.
”h]”hÞ)”}”(hŒäThe Merkle tree, as documented in
:ref:`Documentation/filesystems/fsverity.rst
<fsverity_merkle_tree>`, with the tree levels stored in order from
root to leaf, and the tree blocks within each level stored in their
natural order.”h]”(hŒ"The Merkle tree, as documented in
”…””}”(hj9  h²hh³Nh´Nubh)”}”(hŒD:ref:`Documentation/filesystems/fsverity.rst
<fsverity_merkle_tree>`”h]”hì)”}”(hjC  h]”hŒ&Documentation/filesystems/fsverity.rst”…””}”(hjE  h²hh³Nh´Nubah}”(h]”h ]”(h÷Œstd”Œstd-ref”eh"]”h$]”h&]”uh1hëhjA  ubah}”(h]”h ]”h"]”h$]”h&]”Œrefdoc”j  Œ	refdomain”jO  Œreftype”Œref”Œrefexplicit”ˆŒrefwarn”ˆj
  Œfsverity_merkle_tree”uh1hh³hÇh´Khj9  ubhŒ~, with the tree levels stored in order from
root to leaf, and the tree blocks within each level stored in their
natural order.”…””}”(hj9  h²hh³Nh´Nubeh}”(h]”h ]”h"]”h$]”h&]”uh1hÝh³hÇh´Khj5  ubah}”(h]”h ]”h"]”h$]”h&]”uh1j  hj  h²hh³hÇh´Nubj  )”}”(hŒ4Zero-padding to the next filesystem block boundary.
”h]”hÞ)”}”(hŒ3Zero-padding to the next filesystem block boundary.”h]”hŒ3Zero-padding to the next filesystem block boundary.”…””}”(hju  h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÝh³hÇh´Khjq  ubah}”(h]”h ]”h"]”h$]”h&]”uh1j  hj  h²hh³hÇh´Nubj  )”}”(hŒ–The verity descriptor, as documented in
:ref:`Documentation/filesystems/fsverity.rst <fsverity_descriptor>`,
with optionally appended signature blob.
”h]”hÞ)”}”(hŒ•The verity descriptor, as documented in
:ref:`Documentation/filesystems/fsverity.rst <fsverity_descriptor>`,
with optionally appended signature blob.”h]”(hŒ(The verity descriptor, as documented in
”…””}”(hj  h²hh³Nh´Nubh)”}”(hŒC:ref:`Documentation/filesystems/fsverity.rst <fsverity_descriptor>`”h]”hì)”}”(hj—  h]”hŒ&Documentation/filesystems/fsverity.rst”…””}”(hj™  h²hh³Nh´Nubah}”(h]”h ]”(h÷Œstd”Œstd-ref”eh"]”h$]”h&]”uh1hëhj•  ubah}”(h]”h ]”h"]”h$]”h&]”Œrefdoc”j  Œ	refdomain”j£  Œreftype”Œref”Œrefexplicit”ˆŒrefwarn”ˆj
  Œfsverity_descriptor”uh1hh³hÇh´Khj  ubhŒ*,
with optionally appended signature blob.”…””}”(hj  h²hh³Nh´Nubeh}”(h]”h ]”h"]”h$]”h&]”uh1hÝh³hÇh´Khj‰  ubah}”(h]”h ]”h"]”h$]”h&]”uh1j  hj  h²hh³hÇh´Nubj  )”}”(hŒTZero-padding to the next offset that is 4 bytes before a filesystem
block boundary.
”h]”hÞ)”}”(hŒSZero-padding to the next offset that is 4 bytes before a filesystem
block boundary.”h]”hŒSZero-padding to the next offset that is 4 bytes before a filesystem
block boundary.”…””}”(hjÉ  h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÝh³hÇh´KhjÅ  ubah}”(h]”h ]”h"]”h$]”h&]”uh1j  hj  h²hh³hÇh´Nubj  )”}”(hŒOThe size of the verity descriptor in bytes, as a 4-byte little
endian integer.
”h]”hÞ)”}”(hŒNThe size of the verity descriptor in bytes, as a 4-byte little
endian integer.”h]”hŒNThe size of the verity descriptor in bytes, as a 4-byte little
endian integer.”…””}”(hjá  h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÝh³hÇh´K hjÝ  ubah}”(h]”h ]”h"]”h$]”h&]”uh1j  hj  h²hh³hÇh´Nubeh}”(h]”h ]”h"]”h$]”h&]”Œbullet”Œ-”uh1j  h³hÇh´KhhÊh²hubhÞ)”}”(hŒ÷Verity inodes have EXT4_VERITY_FL set, and they must use extents, i.e.
EXT4_EXTENTS_FL must be set and EXT4_INLINE_DATA_FL must be clear.
They can have EXT4_ENCRYPT_FL set, in which case the verity metadata
is encrypted as well as the data itself.”h]”hŒ÷Verity inodes have EXT4_VERITY_FL set, and they must use extents, i.e.
EXT4_EXTENTS_FL must be set and EXT4_INLINE_DATA_FL must be clear.
They can have EXT4_ENCRYPT_FL set, in which case the verity metadata
is encrypted as well as the data itself.”…””}”(hjý  h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÝh³hÇh´K#hhÊh²hubhÞ)”}”(hŒNVerity files cannot have blocks allocated past the end of the verity
metadata.”h]”hŒNVerity files cannot have blocks allocated past the end of the verity
metadata.”…””}”(hj  h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÝh³hÇh´K(hhÊh²hubhÞ)”}”(hŒ^Verity and DAX are not compatible and attempts to set both of these flags
on a file will fail.”h]”hŒ^Verity and DAX are not compatible and attempts to set both of these flags
on a file will fail.”…””}”(hj  h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÝh³hÇh´K+hhÊh²hubeh}”(h]”Œverity-files”ah ]”h"]”Œverity files”ah$]”h&]”uh1hÈhhh²hh³hÇh´Kubeh}”(h]”h ]”h"]”h$]”h&]”Œsource”hÇuh1hŒcurrent_source”NŒcurrent_line”NŒsettings”Œdocutils.frontend”ŒValues”“”)”}”(hÍNŒ	generator”NŒ	datestamp”NŒsource_link”NŒ
source_url”NŒtoc_backlinks”Œentry”Œfootnote_backlinks”KŒsectnum_xform”KŒstrip_comments”NŒstrip_elements_with_classes”NŒstrip_classes”NŒreport_level”KŒ
halt_level”KŒexit_status_level”KŒdebug”NŒwarning_stream”NŒ	traceback”ˆŒinput_encoding”Œ	utf-8-sig”Œinput_encoding_error_handler”Œstrict”Œoutput_encoding”Œutf-8”Œoutput_encoding_error_handler”jR  Œerror_encoding”Œutf-8”Œerror_encoding_error_handler”Œbackslashreplace”Œlanguage_code”Œen”Œrecord_dependencies”NŒconfig”NŒ	id_prefix”hŒauto_id_prefix”Œid”Œdump_settings”NŒdump_internals”NŒdump_transforms”NŒdump_pseudo_xml”NŒexpose_internals”NŒstrict_visitor”NŒ_disable_config”NŒ_source”hÇŒ_destination”NŒ_config_files”]”Œ7/var/lib/git/docbuild/linux/Documentation/docutils.conf”aŒfile_insertion_enabled”ˆŒraw_enabled”KŒline_length_limit”M'Œpep_references”NŒpep_base_url”Œhttps://peps.python.org/”Œpep_file_url_template”Œpep-%04d”Œrfc_references”NŒrfc_base_url”Œ&https://datatracker.ietf.org/doc/html/”Œ	tab_width”KŒtrim_footnote_reference_space”‰Œsyntax_highlight”Œlong”Œsmart_quotes”ˆŒsmartquotes_locales”]”Œcharacter_level_inline_markup”‰Œdoctitle_xform”‰Œdocinfo_xform”KŒsectsubtitle_xform”‰Œimage_loading”Œlink”Œembed_stylesheet”‰Œcloak_email_addresses”ˆŒsection_self_link”‰Œenv”NubŒreporter”NŒindirect_targets”]”Œsubstitution_defs”}”Œsubstitution_names”}”Œrefnames”}”Œrefids”}”Œnameids”}”j,  j)  sŒ	nametypes”}”j,  ‰sh}”j)  hÊsŒfootnote_refs”}”Œcitation_refs”}”Œautofootnotes”]”Œautofootnote_refs”]”Œsymbol_footnotes”]”Œsymbol_footnote_refs”]”Œ	footnotes”]”Œ	citations”]”Œautofootnote_start”KŒsymbol_footnote_start”K Œ
id_counter”Œcollections”ŒCounter”“”}”…”R”Œparse_messages”]”Œtransform_messages”]”Œtransformer”NŒinclude_log”]”Œ
decoration”Nh²hub.