Difuse/u-boot
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

arm: dts: iot2050: Allow verifying U-Boot proper by SPL

Browse source 
Add hashes and configuration signature stubs to prepare verified boot
of main U-Boot by SPL.

Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>
Reviewed-by: Simon Glass <sjg@chromium.org>
This commit is contained in:
Jan Kiszka 2023-02-28 19:19:15 +01:00 committed by Tom Rini
parent 08cba536ef
commit 430e9f6666
1 changed files with 16 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
arch/arm/dts/k3-am65-iot2050-boot-image.dtsi
View file

@ -14,6 +14,7 @@
filename = "flash.bin"; filename = "flash.bin";
pad-byte = <0xff>; pad-byte = <0xff>;
size = <0x8c0000>; size = <0x8c0000>;
allow-repack;
blob-ext@0x000000 { blob-ext@0x000000 {
offset = <0x000000>; offset = <0x000000>;
@ -45,6 +46,9 @@
entry = <0x80800000>; entry = <0x80800000>;
u-boot-nodtb { u-boot-nodtb {
}; };
hash {
algo = "sha256";
};
}; };
@fdt-SEQ { @fdt-SEQ {
@ -52,6 +56,9 @@
type = "flat_dt"; type = "flat_dt";
arch = "arm64"; arch = "arm64";
compression = "none"; compression = "none";
hash {
algo = "sha256";
};
}; };
#ifdef CONFIG_WDT_K3_RTI_FW_FILE #ifdef CONFIG_WDT_K3_RTI_FW_FILE
@ -64,6 +71,9 @@
filename = CONFIG_WDT_K3_RTI_FW_FILE; filename = CONFIG_WDT_K3_RTI_FW_FILE;
missing-msg = "k3-rti-wdt-firmware"; missing-msg = "k3-rti-wdt-firmware";
}; };
hash {
algo = "sha256";
};
}; };
#endif #endif
}; };
@ -77,10 +87,16 @@
#ifdef CONFIG_WDT_K3_RTI_FW_FILE #ifdef CONFIG_WDT_K3_RTI_FW_FILE
loadables = "k3-rti-wdt-firmware"; loadables = "k3-rti-wdt-firmware";
#endif #endif
signature {
sign-images = "firmware", "fdt", "loadables";
};
}; };
}; };
}; };
fdtmap {
};
/* primary env */ /* primary env */
fill@0x680000 { fill@0x680000 {
offset = <0x680000>; offset = <0x680000>;