dissect-image: add env var for disabling "sidecar" loading of verity params

Just to make debugging easier.

diff --git a/src/shared/dissect-image.c b/src/shared/dissect-image.c
index af65d15306a0a7b08cdb161292e835a841657b6b..157ef262f170b2b1c543bb6f40502ac8a51b3ef1 100644 (file)
--- a/src/shared/dissect-image.c
+++ b/src/shared/dissect-image.c
@@ -2609,6 +2609,12 @@ int verity_settings_load(
         if (is_device_path(image))
                 return 0;
 
+        r = getenv_bool_secure("SYSTEMD_DISSECT_VERITY_SIDECAR");
+        if (r < 0 && r != -ENXIO)
+                log_debug_errno(r, "Failed to parse $SYSTEMD_DISSECT_VERITY_SIDECAR, ignoring: %m");
+        if (r == 0)
+                return 0;
+
         designator = verity->designator;
 
         /* We only fill in what isn't already filled in */