3 ms·
This is possible in nix with "nix-store --verify --check-contents" .
by the_duke 7y ago
This is possible in nix with "nix-store --verify --check-contents" .
- arianvanp 7y agoThat's different though. that's verification _after_ the fact, whilst dm-verity does it any time during block-level access. Also an attacker could modify the nix-store sqlite database and spoof the hashes, rendering this check moot