Using IPE with images generated by mkosi

[compujuckel]

Hi,

I'm having a bit of trouble trying to set up IPE with a signed dm-verity root partition.

My IPE policy looks like this:

policy_name=Allow_Signed_DMV_And_Initramfs policy_version=0.0.0
DEFAULT action=DENY

op=EXECUTE boot_verified=TRUE action=ALLOW
op=EXECUTE dmverity_signature=TRUE action=ALLOW
op=KMODULE boot_verified=TRUE action=ALLOW
op=KMODULE dmverity_signature=TRUE action=ALLOW

I placed the signed version in /usr/lib/ipe so that it gets picked up by systemd.

It looks like systemd-veritysetup-generator does not verify the signature contained in the verity-sig partition generated by systemd-repart, leading to a lot of errors when booting with that IPE policy.

What works for me so far is the following cmdline: root=dissect systemd.verity=no

That causes systemd-gpt-auto-generator to handle the verity setup including signatures, instead of systemd-veritysetup-generator.

systemd.verity=no seems to be necessary because #3593 was reverted in 1de9bd6.

Is this intended behavior, or is there a better way to accomplish all of this?

I'm using Debian testing with systemd 260.1-1, the same config does not work in Trixie.