Tuesday 10 December 2019

Re: Defaulting to verify the image integrity before installing on desktop?

On Mon, Dec 09, 2019 at 11:49:11AM +0000, TJ wrote:
> There's another angle to this that ought to be considered.
>
> A few months ago in the Lubuntu project, due to a variety of issues with
> installer images, I investigated using dm-verity to detect errors:
>
> "Make checksum verification automatic"
>
> https://phab.lubuntu.me/T32
>
> I went further to investigate using Forward Error Correction (FEC) to
> actually correct for minor errors but current kernel config prevents that:
>
> "dm-verity: Invalid number of feature arg" with FEC due to "#
> CONFIG_DM_VERITY_FEC is not set"
>
> https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1838844
>
> That bug also details the steps for creating the verity hashes.
>
> My experiments indicate that adopting dm-verity, especially in
> conjunction with FEC, could avoid a large range of installer bug reports
> and support requests we see constantly in IRC #ubuntu due to data
> corruption.
>
> The aim would be:
>
> 1. Enable FEC in kernel
> 2. Adapt live-build to create the verity images
> 3. Create userspace alerts package

Could you elaborate on step 3 and what the user experience would look
like?

Thanks!
--
Brian Murray

--
ubuntu-devel mailing list
ubuntu-devel@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel