Enable post-processing of FIT artifacts on HS boards
cover Enable post-processing of FIT artifacts on HS boards
Hello all,
With eba3fbd6a12b ("common: image: Add support for post-processing of images") we can now post-process FIT artifacts in U-Boot proper just like we do in SPL. This allows us to continue the chain-of-trust into the next stages of the boot process after U-Boot. This series enables this in the defconfig for supported HS devices.
Thanks,
Andrew
Andreas Dannenberg (3):
ARM: AM43xx: Enable post-processing of FIT artifacts loaded by U-Boot
ARM: DRA7xx: Enable post-processing of FIT artifacts loaded by U-Boot
ARM: AM57xx: Enable post-processing of FIT artifacts loaded by U-Boot
configs/am43xx_hs_evm_defconfig | 1 + configs/am57xx_hs_evm_defconfig | 1 + configs/dra7xx_hs_evm_defconfig | 1 + 3 files changed, 3 insertions(+)
Signature · 1 line
2.9.3
PATCH 1/3 ARM: AM43xx: Enable post-processing of FIT artifacts loaded by U-Boot
From: Andreas Dannenberg <[email protected]>
Enable the platform-specific post-processing of FIT-extracted blobs such as Kernel, DTB, and initramfs on TI AM43xx high-security (HS) devices which will ultimately invoke a ROM-based API call that performs secure processing such as blob authentication.
--- configs/am43xx_hs_evm_defconfig | 1 + 1 file changed, 1 insertion(+)
configs/am43xx_hs_evm_defconfig +1 -0
@@ -14,6 +14,7 @@ CONFIG_FIT=y CONFIG_SYS_EXTRA_OPTIONS="CONS_INDEX=1, NAND" CONFIG_SPL_LOAD_FIT=y CONFIG_SPL_FIT_IMAGE_POST_PROCESS=y +CONFIG_FIT_IMAGE_POST_PROCESS=y CONFIG_HUSH_PARSER=y CONFIG_CMD_BOOTZ=y # CONFIG_CMD_IMLS is not set
Signature · 1 line
2.9.3
PATCH 1/3 ARM: AM43xx: Enable post-processing of FIT artifacts loaded by U-Boot
Quoted 9 lines · Andrew F. Davis
From: Andreas Dannenberg <[email protected]>
Enable the platform-specific post-processing of FIT-extracted blobs such as Kernel, DTB, and initramfs on TI AM43xx high-security (HS) devices which will ultimately invoke a ROM-based API call that performs secure processing such as blob authentication.
Signed-off-by Andreas Dannenberg <[email protected]>Signed-off-by Andrew F. Davis <[email protected]>
Thanks and regards,
Lokesh
Quoted 17 lines
--- configs/am43xx_hs_evm_defconfig | 1 + 1 file changed, 1 insertion(+)configs/am43xx_hs_evm_defconfig +1
-0@@ -14,6 +14,7 @@ CONFIG_FIT=y CONFIG_SYS_EXTRA_OPTIONS="CONS_INDEX=1, NAND" CONFIG_SPL_LOAD_FIT=y CONFIG_SPL_FIT_IMAGE_POST_PROCESS=y +CONFIG_FIT_IMAGE_POST_PROCESS=y CONFIG_HUSH_PARSER=y CONFIG_CMD_BOOTZ=y # CONFIG_CMD_IMLS is not set
PATCH 1/3 ARM: AM43xx: Enable post-processing of FIT artifacts loaded by U-Boot
In reply to Andrew F. DavisQuoted 9 lines · Andrew F. Davis
From: Andreas Dannenberg <[email protected]>
Enable the platform-specific post-processing of FIT-extracted blobs such as Kernel, DTB, and initramfs on TI AM43xx high-security (HS) devices which will ultimately invoke a ROM-based API call that performs secure processing such as blob authentication.
Signed-off-by Andreas Dannenberg <[email protected]>Signed-off-by Andrew F. Davis <[email protected]>
Signature · 8 lines
Tom -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 819 bytes Desc: Digital signature URL: <http://lists.denx.de/pipermail/u-boot/attachments/20160826/eb54f905/attachment.sig>
PATCH 1/3 ARM: AM43xx: Enable post-processing of FIT artifacts loaded by U-Boot
In reply to Andrew F. DavisQuoted 11 lines · Andrew F. Davis
From: Andreas Dannenberg <[email protected]>
Enable the platform-specific post-processing of FIT-extracted blobs such as Kernel, DTB, and initramfs on TI AM43xx high-security (HS) devices which will ultimately invoke a ROM-based API call that performs secure processing such as blob authentication.
Signed-off-by Andreas Dannenberg <[email protected]>Signed-off-by Andrew F. Davis <[email protected]>Reviewed-by Lokesh Vutla <[email protected]>Reviewed-by Tom Rini <[email protected]>
Applied to u-boot/master, thanks!
Signature · 8 lines
Tom -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 819 bytes Desc: Digital signature URL: <http://lists.denx.de/pipermail/u-boot/attachments/20160907/d30a05bd/attachment.sig>
PATCH 2/3 ARM: DRA7xx: Enable post-processing of FIT artifacts loaded by U-Boot
In reply to Andrew F. DavisFrom: Andreas Dannenberg <[email protected]>
Enable the platform-specific post-processing of FIT-extracted blobs such as Kernel, DTB, and initramfs on TI DRA7xx high-security (HS) devices which will ultimately invoke a ROM-based API call that performs secure processing such as blob authentication.
--- configs/dra7xx_hs_evm_defconfig | 1 + 1 file changed, 1 insertion(+)
configs/dra7xx_hs_evm_defconfig +1 -0
@@ -65,3 +65,4 @@ CONFIG_PCF8575_GPIO=y CONFIG_DM_REGULATOR=y CONFIG_DM_REGULATOR_FIXED=y CONFIG_CMD_REGULATOR=y +CONFIG_FIT_IMAGE_POST_PROCESS=y
Signature · 1 line
2.9.3
PATCH 2/3 ARM: DRA7xx: Enable post-processing of FIT artifacts loaded by U-Boot
Quoted 9 lines · Andrew F. Davis
From: Andreas Dannenberg <[email protected]>
Enable the platform-specific post-processing of FIT-extracted blobs such as Kernel, DTB, and initramfs on TI DRA7xx high-security (HS) devices which will ultimately invoke a ROM-based API call that performs secure processing such as blob authentication.
Signed-off-by Andreas Dannenberg <[email protected]>Signed-off-by Andrew F. Davis <[email protected]>
Thanks and regards,
Lokesh
Quoted 14 lines
--- configs/dra7xx_hs_evm_defconfig | 1 + 1 file changed, 1 insertion(+)configs/dra7xx_hs_evm_defconfig +1
-0@@ -65,3 +65,4 @@ CONFIG_PCF8575_GPIO=y CONFIG_DM_REGULATOR=y CONFIG_DM_REGULATOR_FIXED=y CONFIG_CMD_REGULATOR=y +CONFIG_FIT_IMAGE_POST_PROCESS=y
PATCH 2/3 ARM: DRA7xx: Enable post-processing of FIT artifacts loaded by U-Boot
In reply to Andrew F. DavisQuoted 9 lines · Andrew F. Davis
From: Andreas Dannenberg <[email protected]>
Enable the platform-specific post-processing of FIT-extracted blobs such as Kernel, DTB, and initramfs on TI DRA7xx high-security (HS) devices which will ultimately invoke a ROM-based API call that performs secure processing such as blob authentication.
Signed-off-by Andreas Dannenberg <[email protected]>Signed-off-by Andrew F. Davis <[email protected]>
Signature · 8 lines
Tom -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 819 bytes Desc: Digital signature URL: <http://lists.denx.de/pipermail/u-boot/attachments/20160826/9cf7466f/attachment.sig>
PATCH 2/3 ARM: DRA7xx: Enable post-processing of FIT artifacts loaded by U-Boot
In reply to Andrew F. DavisQuoted 11 lines · Andrew F. Davis
From: Andreas Dannenberg <[email protected]>
Enable the platform-specific post-processing of FIT-extracted blobs such as Kernel, DTB, and initramfs on TI DRA7xx high-security (HS) devices which will ultimately invoke a ROM-based API call that performs secure processing such as blob authentication.
Signed-off-by Andreas Dannenberg <[email protected]>Signed-off-by Andrew F. Davis <[email protected]>Reviewed-by Lokesh Vutla <[email protected]>Reviewed-by Tom Rini <[email protected]>
Applied to u-boot/master, thanks!
Signature · 8 lines
Tom -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 819 bytes Desc: Digital signature URL: <http://lists.denx.de/pipermail/u-boot/attachments/20160907/8e929557/attachment.sig>
PATCH 3/3 ARM: AM57xx: Enable post-processing of FIT artifacts loaded by U-Boot
In reply to Andrew F. DavisFrom: Andreas Dannenberg <[email protected]>
Enable the platform-specific post-processing of FIT-extracted blobs such as Kernel, DTB, and initramfs on TI AM57xx high-security (HS) devices which will ultimately invoke a ROM-based API call that performs secure processing such as blob authentication.
--- configs/am57xx_hs_evm_defconfig | 1 + 1 file changed, 1 insertion(+)
configs/am57xx_hs_evm_defconfig +1 -0
@@ -41,6 +41,7 @@ CONFIG_FIT=y CONFIG_SPL_OF_LIBFDT=y CONFIG_SPL_LOAD_FIT=y CONFIG_SPL_FIT_IMAGE_POST_PROCESS=y +CONFIG_FIT_IMAGE_POST_PROCESS=y CONFIG_OF_LIST="am57xx-beagle-x15" CONFIG_DM_I2C=y CONFIG_DM_SPI=y
Signature · 1 line
2.9.3
PATCH 3/3 ARM: AM57xx: Enable post-processing of FIT artifacts loaded by U-Boot
Quoted 9 lines · Andrew F. Davis
From: Andreas Dannenberg <[email protected]>
Enable the platform-specific post-processing of FIT-extracted blobs such as Kernel, DTB, and initramfs on TI AM57xx high-security (HS) devices which will ultimately invoke a ROM-based API call that performs secure processing such as blob authentication.
Signed-off-by Andreas Dannenberg <[email protected]>Signed-off-by Andrew F. Davis <[email protected]>
Thanks and regards,
Lokesh
Quoted 17 lines
--- configs/am57xx_hs_evm_defconfig | 1 + 1 file changed, 1 insertion(+)configs/am57xx_hs_evm_defconfig +1
-0@@ -41,6 +41,7 @@ CONFIG_FIT=y CONFIG_SPL_OF_LIBFDT=y CONFIG_SPL_LOAD_FIT=y CONFIG_SPL_FIT_IMAGE_POST_PROCESS=y +CONFIG_FIT_IMAGE_POST_PROCESS=y CONFIG_OF_LIST="am57xx-beagle-x15" CONFIG_DM_I2C=y CONFIG_DM_SPI=y
PATCH 3/3 ARM: AM57xx: Enable post-processing of FIT artifacts loaded by U-Boot
In reply to Andrew F. DavisQuoted 9 lines · Andrew F. Davis
From: Andreas Dannenberg <[email protected]>
Enable the platform-specific post-processing of FIT-extracted blobs such as Kernel, DTB, and initramfs on TI AM57xx high-security (HS) devices which will ultimately invoke a ROM-based API call that performs secure processing such as blob authentication.
Signed-off-by Andreas Dannenberg <[email protected]>Signed-off-by Andrew F. Davis <[email protected]>
Signature · 8 lines
Tom -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 819 bytes Desc: Digital signature URL: <http://lists.denx.de/pipermail/u-boot/attachments/20160826/49dcdff4/attachment.sig>
PATCH 3/3 ARM: AM57xx: Enable post-processing of FIT artifacts loaded by U-Boot
In reply to Andrew F. DavisQuoted 11 lines · Andrew F. Davis
From: Andreas Dannenberg <[email protected]>
Enable the platform-specific post-processing of FIT-extracted blobs such as Kernel, DTB, and initramfs on TI AM57xx high-security (HS) devices which will ultimately invoke a ROM-based API call that performs secure processing such as blob authentication.
Signed-off-by Andreas Dannenberg <[email protected]>Signed-off-by Andrew F. Davis <[email protected]>Reviewed-by Lokesh Vutla <[email protected]>Reviewed-by Tom Rini <[email protected]>
Applied to u-boot/master, thanks!
Signature · 8 lines
Tom -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 819 bytes Desc: Digital signature URL: <http://lists.denx.de/pipermail/u-boot/attachments/20160907/a05cc345/attachment.sig>