Monday 9 December 2019

Defaulting to verify the image integrity before installing on desktop?

There's another angle to this that ought to be considered.

A few months ago in the Lubuntu project, due to a variety of issues with
installer images, I investigated using dm-verity to detect errors:

"Make checksum verification automatic"

https://phab.lubuntu.me/T32

I went further to investigate using Forward Error Correction (FEC) to
actually correct for minor errors but current kernel config prevents that:

"dm-verity: Invalid number of feature arg" with FEC due to "#
CONFIG_DM_VERITY_FEC is not set"

https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1838844

That bug also details the steps for creating the verity hashes.

My experiments indicate that adopting dm-verity, especially in
conjunction with FEC, could avoid a large range of installer bug reports
and support requests we see constantly in IRC #ubuntu due to data
corruption.

The aim would be:

1. Enable FEC in kernel
2. Adapt live-build to create the verity images
3. Create userspace alerts package

--
ubuntu-devel mailing list
ubuntu-devel@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel