verity: also check corruption in existing mounts

If we are mounting a mol where one of the atoms already been mounted, then we should check the already-mounted devices for any corruption reported by devicemapper as well, and at least fail to mount the new image using them. Signed-off-by: Michael McCracken <[email protected]>
project-machine · Sep 26, 2024 · abbd1a8 · abbd1a8
1 parent 872badb
commit abbd1a8
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/molecule.go b/molecule.go
@@ -61,6 +61,11 @@ func (m Molecule) mountUnderlyingAtoms() error {
 				if err != nil {
 					return err
 				}
+				err = squashfs.ConfirmExistingVerityDeviceCurrentValidity(mountpoint.Source,
+					rootHash)
+				if err != nil {
+					return err
+				}
 			}
 			continue
 		}