There's been a good amount of changes since the last libfsverity release. I'm primarily interested in https://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/fsverity-utils.git/commit/?id=f76d01b8ce8ce13538bac89afa8acfea9e2bdd57 I have some work in progress to update the ostree fsverity support to use it: https://github.com/ostreedev/ostree/pull/2269 Anything blocking a release? While I'm here, some feedback on the new library APIs: - ostree is multi-threaded, and a process global error callback is problematic for that. I think a GLib-style "GError" type which is really just a pair of error code and string is better. - Supporting passing the keys via file descriptor or byte array would be nice; or perhaps even better than that we should just expose the openssl types and allow passing pre-parsed key+certificate?
|