From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-lj1-f180.google.com (mail-lj1-f180.google.com [209.85.208.180]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id D259833D509 for ; Fri, 31 Jul 2026 21:03:27 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.208.180 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1785531809; cv=none; b=NhvTjtWQYBBD4TmWBWTs4yezuLcpHyby/0Fk5OwGI36dPxRIqSqe1hHPo4Pmf6mg5441WAoZPgdKJP++2A3ne/P+uvNtam7WVr4mv8OxGgYWegS6JnHo7Hx3fPF0DCxH5NGjRxvcm9zuNQXtrZbkb1xt6Yo8TJKl4+C0zaiZxjg= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1785531809; c=relaxed/simple; bh=CUwfhmcNw0RvUYqCknuxoufz7LN848bPTFlt0csmNX8=; h=Message-ID:Date:MIME-Version:Subject:To:Cc:References:From: In-Reply-To:Content-Type; b=VZq9GUqluaaHVGMSACc1XumoPcnvFLocqpSqzWWFoonKl6wtWF4USmXrSO+DW7sIQOsei20t2aOZXFKpH/oAo11jfnKSWBXrPBIZAvCNXvtGAtKONL5NO7z2KUkSdcmqconFFbAE+6gYdWfWerF6o6H9ifELiUFtOSDgd3rsro4= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=QCpTxCm0; arc=none smtp.client-ip=209.85.208.180 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="QCpTxCm0" Received: by mail-lj1-f180.google.com with SMTP id 38308e7fff4ca-39c908d6cb6so15236781fa.1 for ; Fri, 31 Jul 2026 14:03:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1785531806; x=1786136606; darn=vger.kernel.org; h=content-transfer-encoding:content-type:in-reply-to:autocrypt:from :content-language:references:cc:to:subject:user-agent:mime-version :date:message-id:from:to:cc:subject:date:message-id:reply-to :content-type; bh=4R4MQhqitPZHCbwSowvGVDgacr1GK+1ohL2DFBB/ACs=; b=QCpTxCm0B1RnoALuQ69skcuOHB1/HbklamscySLfJkyqbrP49R35wR+WrUh/GgO5LE zTbZMk+CRtIrkkVj80Lq7PV8/Kf6I49bm6Z6B1HwHu9mE2a5xlULI5hPbkuLrVm+WCuD z58rgDpNfq66mo2LFjDH9CoHdAUBIURQ9NIbfkGLLWk9OQ3gi16G5RDOg8dz1+5UG9RZ XLrXC+Ba/WN20XyvF58nbx2cOTFNNi61cWdtYY1iThBgLdXpG+FeMzmTLRW7VbdTTQ7k ECXlECNiKwhybt4fn8PTMJHpI9EBBH/n7SjlKv9201wRu9vrkLTMPjbf1euM/mxkMVgt 388g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1785531806; x=1786136606; h=content-transfer-encoding:content-type:in-reply-to:autocrypt:from :content-language:references:cc:to:subject:user-agent:mime-version :date:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=4R4MQhqitPZHCbwSowvGVDgacr1GK+1ohL2DFBB/ACs=; b=bDC9f9MZRYWT704p00RFbY00QZXxK9ZudsAncAOBUVLzThgCa1uGydTi4A6fh/jTQ7 5gGraNDxmvfQl+wyW0DlOjlF8w6JLFLFqFrT+yMAPnUMopxZAun+O6DNfwCWm05pRlSO JC470WJTVmMMXdpvzvGK6EFrth5Nr2U21aaR3VJZjF6tQU3Lt9sZNXcbpmhSuW91z1KF Sw5mzva7cd/KESPbgRA9qMkNXBVY7JqovxjA4e4/X1Dh9pcCw/SfON8Kg0uY9GxbIEeF 6m4qK4VSMRtHcETTinXMvoFZjTA1a4ahIt7kBjEvEXwVj7+HOPTdnL3vQwKRsK50KmEQ sGlw== X-Forwarded-Encrypted: i=1; AHgh+RpJnpaNL42LD3hl7tjpVHehc9Iuop/yP7vv3tva/dwNzIrJgM9lOnp8SQGXmjBRMUZLCLj4aQvPUn3xioE=@vger.kernel.org X-Gm-Message-State: AOJu0YxrtNNv7PGxDG3RWmKEoCPgbRakqOjbr+5jG2388Qlpx1HBTRLm zL07CqVJ6+JzcGWjIdSnd6Oi+rzJCziPQp2L+XgAX/xZ9JwZ7p/GXEbz X-Gm-Gg: AR+sD12uy8G9wf2G6sjcplW9OtoHQCYtnCpj1eCVaVw68ijZzVIVVGNunBsL2e2KD9W UakvHRnqV/SGw3ZEVkD7f5+7CvLkOHNES3FLDyeC9FR3QQR5RFqH2AlJwos5th7y3aOzkb9MVhG 7biZ8sShSJwlt68zDCBO6/3TyEqJnIRyYbn4mzl1ZXbvkWccZo6LCOVmM6ynt7xaA+S50RWTfYK ZKAhf3KyY3hJHu7oKg3QNOJXDgWQxRc6mgPBOsD5Pv3RM5EM6ejrz23dMitEI5UVDMsuvLm2sh9 tNHj8X/qQH9oAlrhDJgj0v44LDFyU1vZ9JZqpHZShFd0/CTBR8i86RzpMgw8XqjJogOH1dEQj+w TTWkpvFMrH+KJxJVeIuggcSoV44a8NQBeDwYo78x1PtG9tt/EdHVX4FddLpu4xWs6M8FLYlAYeT pfWAXDb5XDLEm1iHzRCoVj4tQpmRxTp6HpISC4hbiGgOhEWa7tQki8Ah9VrV6pYDJi X-Received: by 2002:a2e:a9ab:0:b0:39c:7ef1:a640 with SMTP id 38308e7fff4ca-39f86175166mr1893581fa.12.1785531805649; Fri, 31 Jul 2026 14:03:25 -0700 (PDT) Received: from [192.168.8.101] ([109.183.8.210]) by smtp.gmail.com with ESMTPSA id 38308e7fff4ca-39f812aee0csm3300151fa.21.2026.07.31.14.03.24 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Fri, 31 Jul 2026 14:03:25 -0700 (PDT) Message-ID: <2d413e76-2709-4d11-8bd8-b34bb7465368@gmail.com> Date: Fri, 31 Jul 2026 23:03:22 +0200 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH v2 1/1] dm-integrity: replace forgeable discard filler with a keyed sector marker To: Mikulas Patocka , Shukai Ni Cc: agk@redhat.com, snitzer@kernel.org, bmarzins@redhat.com, dm-devel@lists.linux.dev, linux-kernel@vger.kernel.org, Jo Van Bulck References: <20260728143350.44279-1-shukai.ni@kuleuven.be> <20260728143350.44279-2-shukai.ni@kuleuven.be> <5a838e63-f772-7ef9-ab45-8bc2c1ccae87@redhat.com> Content-Language: en-US From: Milan Broz Autocrypt: addr=gmazyland@gmail.com; keydata= xsFNBE94p38BEADZRET8y1gVxlfDk44/XwBbFjC7eM6EanyCuivUPMmPwYDo9qRey0JdOGhW hAZeutGGxsKliozmeTL25Z6wWICu2oeY+ZfbgJQYHFeQ01NVwoYy57hhytZw/6IMLFRcIaWS Hd7oNdneQg6mVJcGdA/BOX68uo3RKSHj6Q8GoQ54F/NpCotzVcP1ORpVJ5ptyG0x6OZm5Esn 61pKE979wcHsz7EzcDYl+3MS63gZm+O3D1u80bUMmBUlxyEiC5jo5ksTFheA8m/5CAPQtxzY vgezYlLLS3nkxaq2ERK5DhvMv0NktXSutfWQsOI5WLjG7UWStwAnO2W+CVZLcnZV0K6OKDaF bCj4ovg5HV0FyQZknN2O5QbxesNlNWkMOJAnnX6c/zowO7jq8GCpa3oJl3xxmwFbCZtH4z3f EVw0wAFc2JlnufR4dhaax9fhNoUJ4OSVTi9zqstxhEyywkazakEvAYwOlC5+1FKoc9UIvApA GvgcTJGTOp7MuHptHGwWvGZEaJqcsqoy7rsYPxtDQ7bJuJJblzGIUxWAl8qsUsF8M4ISxBkf fcUYiR0wh1luUhXFo2rRTKT+Ic/nJDE66Ee4Ecn9+BPlNODhlEG1vk62rhiYSnyzy5MAUhUl stDxuEjYK+NGd2aYH0VANZalqlUZFTEdOdA6NYROxkYZVsVtXQARAQABzSBNaWxhbiBCcm96 IDxnbWF6eWxhbmRAZ21haWwuY29tPsLBlQQTAQgAPwIbAwYLCQgHAwIGFQgCCQoLBBYCAwEC HgECF4AWIQQqKRgkP95GZI0GhvnZsFd72T6Y/AUCYaUUZgUJJPhv5wAKCRDZsFd72T6Y/D5N D/438pkYd5NyycQ2Gu8YAjF57Od2GfeiftCDBOMXzh1XxIx7gLosLHvzCZ0SaRYPVF/Nr/X9 sreJVrMkwd1ILNdCQB1rLBhhKzwYFztmOYvdCG9LRrBVJPgtaYqO/0493CzXwQ7FfkEc4OVB uhBs4YwFu+kmhh0NngcP4jaaaIziHw/rQ9vLiAi28p1WeVTzOjtBt8QisTidS2VkZ+/iAgqB 9zz2UPkE1UXBAPU4iEsGCVXGWRz99IULsTNjP4K3p8ZpdZ6ovy7X6EN3lYhbpmXYLzZ3RXst PEojSvqpkSQsjUksR5VBE0GnaY4B8ZlM3Ng2o7vcxbToQOsOkbVGn+59rpBKgiRadRFuT+2D x80VrwWBccaph+VOfll9/4FVv+SBQ1wSPOUHl11TWVpdMFKtQgA5/HHldVqrcEssWJb9/tew 9pqxTDn6RHV/pfzKCspiiLVkI66BF802cpyboLBBSvcDuLHbOBHrpC+IXCZ7mgkCrgMlZMql wFWBjAu8Zlc5tQJPgE9eeQAQrfZRcLgux88PtxhVihA1OsMNoqYapgMzMTubLUMYCCsjrHZe nzw5uTcjig0RHz9ilMJlvVbhwVVLmmmf4p/R37QYaqm1RycLpvkUZUzSz2NCyTcZp9nM6ooR GhpDQWmUdH1Jz9T6E9//KIhI6xt4//P15ZfiIs7BTQRPeKd/ARAA3oR1fJ/D3GvnoInVqydD U9LGnMQaVSwQe+fjBy5/ILwo3pUZSVHdaKeVoa84gLO9g6JLToTo+ooMSBtsCkGHb//oiGTU 7KdLTLiFh6kmL6my11eiK53o1BI1CVwWMJ8jxbMBPet6exUubBzceBFbmqq3lVz4RZ2D1zKV njxB0/KjdbI53anIv7Ko1k+MwaKMTzO/O6vBmI71oGQkKO6WpcyzVjLIip9PEpDUYJRCrhKg hBeMPwe+AntP9Om4N/3AWF6icarGImnFvTYswR2Q+C6AoiAbqI4WmXOuzJLKiImwZrSYnSfQ 7qtdDGXWYr/N1+C+bgI8O6NuAg2cjFHE96xwJVhyaMzyROUZgm4qngaBvBvCQIhKzit61oBe I/drZ/d5JolzlKdZZrcmofmiCQRa+57OM3Fbl8ykFazN1ASyCex2UrftX5oHmhaeeRlGVaTV iEbAvU4PP4RnNKwaWQivsFhqQrfFFhvFV9CRSvsR6qu5eiFI6c8CjB49gBcKKAJ9a8gkyWs8 sg4PYY7L15XdRn8kOf/tg98UCM1vSBV2moEJA0f98/Z48LQXNb7dgvVRtH6owARspsV6nJyD vktsLTyMW5BW9q4NC1rgQC8GQXjrQ+iyQLNwy5ESe2MzGKkHogxKg4Pvi1wZh9Snr+RyB0Rq rIrzbXhyi47+7wcAEQEAAcLBfAQYAQgAJgIbDBYhBCopGCQ/3kZkjQaG+dmwV3vZPpj8BQJh pRSXBQkk+HAYAAoJENmwV3vZPpj8BPMP/iZV+XROOhs/MsKd7ngQeFgETkmt8YVhb2Rg3Vgp AQe9cn6aw9jk3CnB0ecNBdoyyt33t3vGNau6iCwlRfaTdXg9qtIyctuCQSewY2YMk5AS8Mmb XoGvjH1Z/irrVsoSz+N7HFPKIlAy8D/aRwS1CHm9saPQiGoeR/zThciVYncRG/U9J6sV8XH9 OEPnQQR4w/V1bYI9Sk+suGcSFN7pMRMsSslOma429A3bEbZ7Ikt9WTJnUY9XfL5ZqQnjLeRl 8243OTfuHSth26upjZIQ2esccZMYpQg0/MOlHvuFuFu6MFL/gZDNzH8jAcBrNd/6ABKsecYT nBInKH2TONc0kC65oAhrSSBNLudTuPHce/YBCsUCAEMwgJTybdpMQh9NkS68WxQtXxU6neoQ U7kEJGGFsc7/yXiQXuVvJUkK/Xs04X6j0l1f/6KLoNQ9ep/2In596B0BcvvaKv7gdDt1Trgg vlB+GpT+iFRLvhCBe5kAERREfRfmWJq1bHod/ulrp/VLGAaZlOBTgsCzufWF5SOLbZkmV2b5 xy2F/AU3oQUZncCvFMTWpBC+gO/o3kZCyyGCaQdQe4jS/FUJqR1suVwNMzcOJOP/LMQwujE/ Ch7XLM35VICo9qqhih4OvLHUAWzC5dNSipL+rSGHvWBdfXDhbezJIl6sp7/1rJfS8qPs In-Reply-To: <5a838e63-f772-7ef9-ab45-8bc2c1ccae87@redhat.com> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit On 7/30/26 5:29 PM, Mikulas Patocka wrote: > Hi > > I accepted the patch (and made some small modifications to it). Mikulas, you added this part to constructor: + if (!!(ic->sb->flags & cpu_to_le32(SB_FLAG_DISCARD_KEYED)) != ic->discard_keyed) { + r = -EINVAL; + ti->error = "Mismatch in the discard_keyed flag"; + goto bad; + } Unfortunately, this is not going to work. In integritysetup, allowing discard is an active flag, not a format flag. It should be ok to activate discard later, but this check blocks it. It should also allow to activate the device without discard (even if it was activated before with it). IMO, it should upgrade the superblock if allow_discards_keyed is set on activation (and then do not allow it to revert back). With the current approach, I cannot add this option to integritysetup. We just have no way to send allow_discard in format action (as it is an activation flag only in our API). Milan