Skip to content

feat: enable dm-integrity#1447

Merged
talos-bot merged 1 commit intosiderolabs:mainfrom
ggruner:feat/enable-dm-integrity
Jan 23, 2026
Merged

feat: enable dm-integrity#1447
talos-bot merged 1 commit intosiderolabs:mainfrom
ggruner:feat/enable-dm-integrity

Conversation

@ggruner
Copy link
Copy Markdown

@ggruner ggruner commented Jan 22, 2026

We would like to use dm-integrity in conjunction with LUKS.

LUKS, which is used for encrypting hard drives, dm-integrity provides an additional layer of protection by ensuring that the encrypted data cannot be manipulated without detection.

To use LUKS with the integrity command, the dm-integrity.ko is required.

For example:
cryptsetup luksFormat --type luks2 --hash sha256 --cipher aes-xts-plain64 --integrity hmac-sha256 /dev/sdX

All other requirements are already enabled in the kernel config file (CONFIG_DM_CRYPT, CONFIG_CRYPTO_SHA256, CONFIG_CRYPTO_SHA512, CONFIG_CRYPTO_AES etc.)

@talos-bot talos-bot moved this to In Review in Planning Jan 22, 2026
@smira
Copy link
Copy Markdown
Member

smira commented Jan 22, 2026

Please add DCO to your commit (git commit -s --amend).

I will move this to be a kernel module.

@smira smira self-assigned this Jan 22, 2026
@ggruner ggruner force-pushed the feat/enable-dm-integrity branch from 3902580 to 355ed8c Compare January 23, 2026 09:59
@ggruner
Copy link
Copy Markdown
Author

ggruner commented Jan 23, 2026

@smira I added the DCO to my commit.

This might be consumed e.g. by Ceph CSI.

Signed-off-by: Gregor Gruener <gregor.gruener@stackit.cloud>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
@smira smira force-pushed the feat/enable-dm-integrity branch from 355ed8c to 553e0fb Compare January 23, 2026 14:12
@github-project-automation github-project-automation bot moved this from In Review to Approved in Planning Jan 23, 2026
@smira
Copy link
Copy Markdown
Member

smira commented Jan 23, 2026

/m

@talos-bot talos-bot merged commit 553e0fb into siderolabs:main Jan 23, 2026
13 checks passed
@github-project-automation github-project-automation bot moved this from Approved to Done in Planning Jan 23, 2026
smira added a commit to smira/talos that referenced this pull request Jan 23, 2026
Update pkgs with Linux 6.18.6 and dm-integrity module added.

Drops some crc kmods, as they are now compiled in.

See siderolabs/pkgs#1447

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
smira added a commit to smira/talos that referenced this pull request Jan 26, 2026
Update pkgs with Linux 6.18.6 and dm-integrity module added.

Drops some crc kmods, as they are now compiled in.

See siderolabs/pkgs#1447

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
@shanduur shanduur moved this from Proposed to In Progress in Backports to v1.12 Feb 5, 2026
shanduur pushed a commit to shanduur/talos that referenced this pull request Feb 6, 2026
Update pkgs with Linux 6.18.6 and dm-integrity module added.

Drops some crc kmods, as they are now compiled in.

See siderolabs/pkgs#1447

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit b9e27eb)
shanduur pushed a commit to shanduur/talos that referenced this pull request Feb 6, 2026
Update pkgs with Linux 6.18.6 and dm-integrity module added.

Drops some crc kmods, as they are now compiled in.

See siderolabs/pkgs#1447

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit b9e27eb)
shanduur pushed a commit to shanduur/talos that referenced this pull request Feb 6, 2026
Update pkgs with Linux 6.18.6 and dm-integrity module added.

Drops some crc kmods, as they are now compiled in.

See siderolabs/pkgs#1447

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit b9e27eb)
shanduur pushed a commit to shanduur/talos that referenced this pull request Feb 6, 2026
Update pkgs with Linux 6.18.6 and dm-integrity module added.

Drops some crc kmods, as they are now compiled in.

See siderolabs/pkgs#1447

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit b9e27eb)
@smira smira moved this from In Progress to Backported in Backports to v1.12 Feb 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

Status: Backported
Archived in project

Development

Successfully merging this pull request may close these issues.

4 participants