rk35xx-android14/packages/modules/Virtualization/authfs/testdata/README.md

fs-verity signing

With a key pair, fs-verity signature can be generated by simply running fsverity_metadata_generator command line tool, which uses fsverity-utils

fsverity_metadata_generator --fsverity-path {fsverity_path} --key key.pem --key-format pem \
    --cert cert.pem --signature pkcs7 --output test.data.fsv_meta test.data