Function TestDMVerity

internal/dmverity/dmverity_test.go:37–185

(t *testing.T)

)

func TestDMVerity(t *testing.T) {
	testutil.RequiresRoot(t)

	supported, err := IsSupported()
	if !supported || err != nil {
		t.Skipf("dm-verity is not supported on this system: %v", err)
	}

	t.Run("IsSupported", func(t *testing.T) {
		supported, err := IsSupported()
		assert.True(t, supported)
		assert.NoError(t, err)
	})

	t.Run("WithSuperblock", func(t *testing.T) {
		t.Run("SameDevice", func(t *testing.T) {
			tempDir := t.TempDir()
			_, loopDevice := createLoopbackDevice(t, tempDir, "1Mb")
			defer func() {
				assert.NoError(t, mount.DetachLoopDevice(loopDevice))
			}()

			opts := testOptions(true, 1048576)

			// Format with superblock - data and hash on same device
			rootHash, err := Format(loopDevice, loopDevice, &opts)
			assert.NoError(t, err)
			assert.NotEmpty(t, rootHash)

			// Open with superblock mode - provide hashOffset, opts is nil
			deviceName := testDeviceName + "-sb-same"
			devicePath, err := Open(loopDevice, deviceName, loopDevice, rootHash, opts.HashOffset, nil)
			assert.NoError(t, err)
			assert.Equal(t, "/dev/mapper/"+deviceName, devicePath)

			waitForDevice(t, devicePath)

			// Close device
			err = Close(deviceName)
			assert.NoError(t, err)

			// Verify device is removed
			_, err = os.Stat(devicePath)
			assert.True(t, os.IsNotExist(err))
		})

		t.Run("SeparateDevices", func(t *testing.T) {
			tempDir := t.TempDir()
			_, dataDevice := createLoopbackDevice(t, tempDir, "1Mb")
			_, hashDevice := createLoopbackDevice(t, tempDir, "512Kb")
			defer func() {
				assert.NoError(t, mount.DetachLoopDevice(dataDevice))
				assert.NoError(t, mount.DetachLoopDevice(hashDevice))
			}()

			// HashOffset is REQUIRED even for separate devices when using superblock.
			// Typically 4096 bytes (one block) is sufficient for superblock metadata.
			opts := testOptions(true, 4096)