That's different though. that's verification _after_ the fact, whilst dm-verity does it any time during block-level access. Also an attacker could modify the n

That's different though. that's verification _after_ the fact, whilst dm-verity does it any time during block-level access. Also an attacker could modify the nix-store sqlite database and spoof the hashes, rendering this check moot