mirror of
https://github.com/AsahiLinux/u-boot
synced 2025-03-03 23:07:12 +00:00
b93a65209c
Extend support for signing in auto-generated (-f auto) FIT. Previously,
it was possible to get signed 'images' subnodes in the FIT using
options -g and -o together with -f auto. This patch allows signing
'configurations' subnodes instead of 'images' ones (which are hashed),
using option -f auto-conf instead of -f auto. Adding also -K <dtb> and
-r options, will add public key to <dtb> file with required = "conf"
property.
Summary:
-f auto => FIT with crc32 images
-f auto -g ... -o ... => FIT with signed images
-f auto-conf -g ... -o ... => FIT with sha1 images and signed confs
Example: FIT with kernel, two device tree files, and signed
configurations; public key (needed to verify signatures) is
added to u-boot.dtb with required = "conf" property.
mkimage -f auto-conf -A arm -O linux -T kernel -C none -a 43e00000 \
-e 0 -d vmlinuz -b /path/to/first.dtb -b /path/to/second.dtb \
-k /folder/with/key-files -g keyname -o sha256,rsa4096 \
-K u-boot.dtb -r kernel.itb
Example: Add public key with required = "conf" property to u-boot.dtb
without needing to sign anything. This will also create a useless FIT
named unused.itb.
mkimage -f auto-conf -d /dev/null -k /folder/with/key-files \
-g keyname -o sha256,rsa4096 -K u-boot.dtb -r unused.itb
Signed-off-by: Massimo Pegorer <massimo.pegorer@vimar.com>
Reviewed-by: Simon Glass <sjg@chromium.org>
|
||
|---|---|---|
| .. | ||
| android | ||
| api | ||
| arch | ||
| board | ||
| build | ||
| chromium | ||
| develop | ||
| device-tree-bindings | ||
| imx | ||
| media | ||
| mvebu | ||
| sphinx | ||
| sphinx-static | ||
| SPI | ||
| SPL | ||
| uImage.FIT | ||
| usage | ||
| .gitignore | ||
| bounces | ||
| conf.py | ||
| dumpimage.1 | ||
| feature-removal-schedule.txt | ||
| git-mailrc | ||
| I2C_Edge_Conditions | ||
| index.rst | ||
| kwboot.1 | ||
| Makefile | ||
| mkeficapsule.1 | ||
| mkimage.1 | ||
| README.arm-caches | ||
| README.arm-relocation | ||
| README.armada-secureboot | ||
| README.asn1 | ||
| README.atmel_mci | ||
| README.atmel_pmecc | ||
| README.autoboot | ||
| README.bcm7xxx | ||
| README.bcmns3 | ||
| README.bitbangMII | ||
| README.bootcount | ||
| README.boston | ||
| README.cfi | ||
| README.commands.itest | ||
| README.commands.spl | ||
| README.console | ||
| README.davinci | ||
| README.davinci.nand_spl | ||
| README.dfutftp | ||
| README.displaying-bmps | ||
| README.dns | ||
| README.enetaddr | ||
| README.esbc_validate | ||
| README.ext4 | ||
| README.falcon | ||
| README.fec_mxc | ||
| README.fsl-ddr | ||
| README.fsl-esdhc | ||
| README.fsl-hwconfig | ||
| README.fsl-trustzone-components | ||
| README.fsl_iim | ||
| README.fuse | ||
| README.generic-board | ||
| README.generic_usb_ohci | ||
| README.gpio | ||
| README.gpt | ||
| README.Heterogeneous-SoCs | ||
| README.hwconfig | ||
| README.i2c | ||
| README.iomux | ||
| README.JFFS2_NAND | ||
| README.kconfig | ||
| README.kwbimage | ||
| README.LED | ||
| README.link-local | ||
| README.malta | ||
| README.marvell | ||
| README.mediatek | ||
| README.memory-test | ||
| README.mpc83xx.ddrecc | ||
| README.mpc83xxads | ||
| README.mpc85xx | ||
| README.mpc85xx-sd-spi-boot | ||
| README.mpc85xx-spin-table | ||
| README.mpc85xxcds | ||
| README.multi-dtb-fit | ||
| README.mxc_ocotp | ||
| README.nand | ||
| README.odroid | ||
| README.OFT | ||
| README.omap-ulpi-viewport | ||
| README.omap3 | ||
| README.pblimage | ||
| README.pcap | ||
| README.POST | ||
| README.power-framework | ||
| README.pxe | ||
| README.ramboot-ppc85xx | ||
| README.rmobile | ||
| README.rockchip | ||
| README.rockusb | ||
| README.s5p4418 | ||
| README.s5pc1xx | ||
| README.sata | ||
| README.sched | ||
| README.scrapyard | ||
| README.serial_multi | ||
| README.sha1 | ||
| README.silent | ||
| README.SNTP | ||
| README.socfpga | ||
| README.splashprepare | ||
| README.srio-pcie-boot-corenet | ||
| README.standalone | ||
| README.t1040-l2switch | ||
| README.tee | ||
| README.ti-secure | ||
| README.TPL | ||
| README.ubi | ||
| README.ubispl | ||
| README.ublimage | ||
| README.udp | ||
| README.unaligned-memory-access.txt | ||
| README.uniphier | ||
| README.update | ||
| README.usb | ||
| README.vf610 | ||
| README.video | ||
| README.VLAN | ||
| README.VSC3316-3308 | ||
| README.watchdog | ||
| README.zfs | ||
This patch series adds support for ZFS listing and load to u-boot. To Enable zfs ls and load commands, modify the board specific config file with #define CONFIG_CMD_ZFS Steps to test: 1. After applying the patch, zfs specific commands can be seen in the boot loader prompt using UBOOT #help zfsload- load binary file from a ZFS file system zfsls - list files in a directory (default /) 2. To list the files in zfs pool, device or partition, execute zfsls <interface> <dev[:part]> [POOL/@/dir/file] For example: UBOOT #zfsls mmc 0:5 /rpool/@/usr/bin/ 3. To read and load a file from an ZFS formatted partition to RAM, execute zfsload <interface> <dev[:part]> [addr] [filename] [bytes] For example: UBOOT #zfsload mmc 2:2 0x30007fc0 /rpool/@/boot/uImage References : -- ZFS GRUB sources from Solaris GRUB-0.97 -- GRUB Bazaar repository Jorgen Lundman <lundman at lundman.net> 2012.