u-boot/doc/uImage.FIT
Sean Anderson bcc85b96b5 cmd: source: Support specifying config name
As discussed previously [1,2], the source command is not safe to use with
verified boot unless there is a key with required = "images" (which has its
own problems). This is because if such a key is absent, signatures are
verified but not required. It is assumed that configuration nodes will
provide the signature. Because the source command does not use
configurations to determine the image to source, effectively no
verification takes place.

To address this, allow specifying configuration nodes. We use the same
syntax as the bootm command (helpfully provided for us by fit_parse_conf).
By default, we first try the default config and then the default image. To
force using a config, # must be present in the command (e.g. `source
$loadaddr#my-conf`). For convenience, the config may be omitted, just like
the address may be (e.g. `source \#`). This also works for images
(`source :` behaves exactly like `source` currently does).

[1] https://lore.kernel.org/u-boot/7d711133-d513-5bcb-52f2-a9dbaa9eeded@prevas.dk/
[2] https://lore.kernel.org/u-boot/042dcb34-f85f-351e-1b0e-513f89005fdd@gmail.com/

Signed-off-by: Sean Anderson <sean.anderson@seco.com>
Reviewed-by: Simon Glass <sjg@chromium.org>
2022-12-31 13:35:19 -05:00
..
beaglebone_vboot.txt arm: ti: Remove ARCH= references from documentation 2020-06-02 17:27:04 -04:00
command_syntax_extensions.txt doc: FIT image: fix incorrect description of DT node unit address 2018-01-15 18:29:21 -07:00
howto.txt image: Allow loading a FIT image for a particular phase 2022-10-31 11:02:45 -04:00
kernel.its doc: FIT image: fix incorrect examples of DT node unit address 2018-01-15 18:29:21 -07:00
kernel_fdt.its doc: FIT image: fix incorrect examples of DT node unit address 2018-01-15 18:29:21 -07:00
kernel_fdts_compressed.its fit: Support compat string property in configuration node 2019-07-29 09:32:08 -04:00
multi-with-fpga.its doc: FIT image: Update FPGA example to make use of "loadables" 2021-04-14 15:23:01 -04:00
multi-with-loadables.its doc: FIT image: fix incorrect examples of DT node unit address 2018-01-15 18:29:21 -07:00
multi.its doc: FIT image: fix incorrect examples of DT node unit address 2018-01-15 18:29:21 -07:00
multi_spl.its doc: FIT image: fix incorrect examples of DT node unit address 2018-01-15 18:29:21 -07:00
overlay-fdt-boot.txt doc: FIT image: fix incorrect description of DT node unit address 2018-01-15 18:29:21 -07:00
sec_firmware_ppa.its armv8: sec_firmware: Add support for multiple loadables 2018-05-09 09:17:51 -05:00
sign-configs.its doc: FIT image: fix incorrect examples of DT node unit address 2018-01-15 18:29:21 -07:00
sign-images.its doc: FIT image: fix incorrect examples of DT node unit address 2018-01-15 18:29:21 -07:00
signature.txt Provide more details of exactly how configuration signatures are calculated 2022-07-29 18:59:47 +02:00
source_file_format.txt cmd: source: Support specifying config name 2022-12-31 13:35:19 -05:00
uefi.its doc: Add sample uefi.its image description file 2020-01-07 18:08:21 +01:00
update3.its doc: FIT image: fix incorrect examples of DT node unit address 2018-01-15 18:29:21 -07:00
update_uboot.its doc: fit: Write hex address as hex instead of int 2020-07-17 10:47:19 -04:00
verified-boot.txt doc: verified-boot: fix typos 2017-08-26 14:56:14 -04:00
x86-fit-boot.txt doc: FIT image: fix incorrect description of DT node unit address 2018-01-15 18:29:21 -07:00