Read the verity hash from the kernel binary and pass it to the running system via the kernel command line
Matthew Garrett