mirror of
https://github.com/containerd/containerd.git
synced 2026-08-09 01:21:15 +00:00
31ca428580
Update the EROFS snapshotter to pass the dm-verity metadata path through the `X-containerd.dmverity` mount option. Previously, the system relied on implicit mode detection; providing the explicit path allows downstream components (such as Kata Containers mount handlers) to reliably locate and read `.dmverity` files. Correspondingly, update the EROFS mount handler to parse and utilize this explicit metadata path for dm-verity device initialization. This enables the runtime to retrieve root hashes and other necessary metadata directly, ensuring robust layer integrity verification. Signed-off-by: Alex Lyn <alex.lyn@antgroup.com>