Add support for dm-integrity

[ggruner]

I wanted to raise the question of whether it makes sense to officially include dm-integrity in Talos Linux?
In conjunction with LUKS, which is used for disk encryption, dm-integrity offers an additional layer of protection by ensuring that encrypted data cannot be manipulated without detection.

This feature has now also been implemented in the Ceph-CSI (v3.16.0) driver, that you can provide an "integrityMode" option, but for this the dm-integrity module must be loaded.

Currently it's requiring the construction of a custom kernel.

Cheers,
Gregor

[smira]

Support for dm-integrity should be definitely part of Talos Linux kernel (if it's not the case already).

[ggruner]

I'm playing with Talos 1.11.6 right now and it's not included so far as I can see.

TALOSCONFIG=talosconfig ./talosctl -n 192.168.XXX.XXX -e 192.168.XXX.XXX read /proc/config.gz | zgrep DM_INTEGRITY CONFIG_DM_INTEGRITY is not set

TALOSCONFIG=talosconfig ./talosctl -n 192.168.XXX.XXX -e 192.168.XXX.XXX list /lib/modules/6.12.62-talos/kernel/drivers/md/
bcache dm-bio-prison.ko dm-cache-smq.ko dm-cache.ko dm-multipath.ko dm-raid.ko dm-round-robin.ko dm-thin-pool.ko persistent-data/dm-persistent-data.ko raid456.ko

[smira]

yep, please just throw a PR to siderolabs/pkgs if you can

[ggruner]

Thanks for the quick response. I've created a PR siderolabs/pkgs#1447

[ggruner]

@smira thanks for the quick processing. I will close this discussionn thread.