From edfc39c2afce8e9eadfc37c8ad6dfd1f8dc46e60 Mon Sep 17 00:00:00 2001
From: Michael Marineau <michael.marineau@coreos.com>
Date: Thu, 20 Oct 2016 15:02:54 -0700
Subject: [PATCH] build_image: re-enable verity by default

---
 build_image | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/build_image b/build_image
index 588da4512b..9ee671732a 100755
--- a/build_image
+++ b/build_image
@@ -28,7 +28,7 @@ DEFINE_string getbinpkgver "" \
   "Use binary packages from a specific version."
 DEFINE_boolean enable_rootfs_verification ${FLAGS_TRUE} \
   "Default all bootloaders to use kernel-based root fs integrity checking."
-DEFINE_boolean enable_verity ${FLAGS_FALSE} \
+DEFINE_boolean enable_verity ${FLAGS_TRUE} \
   "Default GRUB to use dm-verity-enabled boot arguments"
 DEFINE_string base_pkg "coreos-base/coreos" \
   "The base portage package to base the build off of (only applies to prod images)"