Skip to main content

find_expected_composefs_digest

Function find_expected_composefs_digest 

Source
fn find_expected_composefs_digest(
    repo: &Repository<Sha512HashValue>,
    entries: &[BootEntry<Sha512HashValue>],
) -> Result<Option<ExpectedComposefsDigest>>
Expand description

Scans entries for the primary UKI or aboot payload and extracts the composefs digests embedded in its kernel cmdline.

Returns Ok(None) for a BLS-only boot setup — there’s nothing to validate against in that case.