LOADPIN_IOC_...RITY_DIGESTS(9)

💅 LOADPIN_IOC_SET_TRUSTED_VERITY_DIGESTS(9)

okay bestie, so this is a page straight out of the Kernel API Manual and it's genuinely such a slay little ioctl, let me tell you everything 🫶

---

✨ NAME ✨

LOADPIN_IOC_SET_TRUSTED_VERITY_DIGESTS — the icon that lets you set up the root digests of verity devices that loadpin should trust 💖

---

🎀 SYNOPSIS 🎀

LOADPIN_IOC_SET_TRUSTED_VERITY_DIGESTS

---

🌸 DESCRIPTION 🌸

So here's the vibe: this ioctl takes a file descriptor, and from that fd it reads the root digests of your trusted verity devices. Easy, right? 💅

That file is expected to contain a list of digests in ASCII format, and it's one line per digest — no cap, that's literally the whole format, keep it cute and one-per-line ✨

lowkey important: the ioctl must be issued on the securityfs attribute loadpin/dm-verity.

And where does that live? Typically you'll find it right here, bestie 🦋:

/sys/kernel/security/loadpin/dm-verity

that's it, that's the whole flow. main character energy from a securityfs attribute, honestly 😭👑

---

🌈 SEE ALSO 🌈

• Kernel file ./include/uapi/linux/loadpin.h

---

and that's the page!! mwah 💜 stay safe out there and remember: one digest per line, periodt 🎀✨

source: ./include/uapi/linux · dated October 2026 · byeee bestie, go set some trusted digests 🧚💖