{"id":21134549,"url":"https://github.com/nikstur/nix-store-veritysetup-generator","last_synced_at":"2025-06-10T08:04:59.789Z","repository":{"id":222164306,"uuid":"755588938","full_name":"nikstur/nix-store-veritysetup-generator","owner":"nikstur","description":"Systemd unit generator for a verity protected Nix Store","archived":false,"fork":false,"pushed_at":"2024-09-20T12:59:15.000Z","size":23,"stargazers_count":25,"open_issues_count":0,"forks_count":1,"subscribers_count":4,"default_branch":"main","last_synced_at":"2025-05-31T05:19:46.896Z","etag":null,"topics":["dm-verity","image-based","linux","nix","nixos"],"latest_commit_sha":null,"homepage":"","language":"Rust","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/nikstur.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2024-02-10T17:08:55.000Z","updated_at":"2025-04-21T23:54:28.000Z","dependencies_parsed_at":"2024-06-13T01:40:20.670Z","dependency_job_id":"8c10c681-254a-4df2-8405-0685d30711b8","html_url":"https://github.com/nikstur/nix-store-veritysetup-generator","commit_stats":null,"previous_names":["nikstur/nix-store-veritysetup-generator"],"tags_count":1,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nikstur%2Fnix-store-veritysetup-generator","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nikstur%2Fnix-store-veritysetup-generator/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nikstur%2Fnix-store-veritysetup-generator/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nikstur%2Fnix-store-veritysetup-generator/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nikstur","download_url":"https://codeload.github.com/nikstur/nix-store-veritysetup-generator/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nikstur%2Fnix-store-veritysetup-generator/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":259033827,"owners_count":22795769,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["dm-verity","image-based","linux","nix","nixos"],"created_at":"2024-11-20T06:31:02.118Z","updated_at":"2025-06-10T08:04:59.766Z","avatar_url":"https://github.com/nikstur.png","language":"Rust","funding_links":[],"categories":[],"sub_categories":[],"readme":"# nix-store-veritysetup-generator\n\nLike `systemd-veritysetup-generator` but for the Nix Store.\n\nReads the `storehash=` argument from the kernel commandline and dynamically\ncreates a service that sets up the verity protected device as\n`dev/mapper/nix-store`.\n\nIf no `storehash=` argument on the kernel commandline is provided, nothing\nhappens.\n\nOnly works with the systemd initrd (`boot.initrd.systemd.enable = true;`).\n\nExpects the UUIDs of the verity partitions to be set to the the first 128 bits\nof the verity root hash for the data partition and the last 128 bits for the\nhash partition. The easiest way to achieve this is by creating the partitions\nwith [`image.repart`](https://nixos.org/manual/nixos/stable/#sec-image-repart)\n(which does the correct thing by default).\n\nThe get an idea of how to implement this, look at the\n[test](./nix/tests/nix-store-veritysetup-generator.nix). An easier way\nto build an appliance image that contains a verity protected Nix Store needs\na few more abstractions that I plan on building but that do not exist yet.\n\nThe plan is to eventually upstream this into Nixpkgs.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnikstur%2Fnix-store-veritysetup-generator","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fnikstur%2Fnix-store-veritysetup-generator","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnikstur%2Fnix-store-veritysetup-generator/lists"}