Re: [dunfell/master][PATCH 1/7] conf/machine: k3: Add multi-certificate boot image support

["Denys Dmytriyenko" <denis@denix.org>]

On Wed, Mar 31, 2021 at 11:51:27AM -0500, Nishanth Menon wrote:
> Lets keep things consistent by providing two possibilities for platforms
> to pick from - legacy boot and multi-certificate boot.
> 
> In legacy boot, the base bootloader and system firmware are
> maintained as separate binaries (tiboot3.bin and sysfw.itb).
> 
> In multi-certificate boot that newer K3 devices support, ROM is smarter
> and can handle multiple x509 certificate based images: so we can strip
> out the sysfw.itb and integrate it as part of tiboot3.bin itself. This
> improves authentication and overall system boot times since we are now
> able to boot both the system controller and the boot processor in
> parallel.
> 
> We do have a scheme currently to identify the images necessary for boot
> etc, but things are handled on a platform conf file basis. We can
> improve that by introducing the pattern at the top level include and use
> the relevant pattern in platforms as needed.

Thanks for detailed explanation of K3 boot modes!


> Signed-off-by: Nishanth Menon <nm@ti.com>

Reviewed-by: Denys Dmytriyenko <denys@konsulko.com>


> ---
>  conf/machine/include/k3.inc | 6 +++++-
>  1 file changed, 5 insertions(+), 1 deletion(-)
> 
> diff --git a/conf/machine/include/k3.inc b/conf/machine/include/k3.inc
> index c727d724ac28..56ad40c3f963 100644
> --- a/conf/machine/include/k3.inc
> +++ b/conf/machine/include/k3.inc
> @@ -40,7 +40,11 @@ MACHINE_FEATURES = "kernel26 apm usbgadget usbhost vfat ext2 alsa ethernet pci"
>  
>  IMAGE_FSTYPES += "tar.xz wic.xz"
>  
> -IMAGE_BOOT_FILES ?= "${SPL_BINARY} u-boot.${UBOOT_SUFFIX} tiboot3.bin sysfw.itb"
> +IMAGE_BOOT_FILES_LEGACY = "${SPL_BINARY} u-boot.${UBOOT_SUFFIX} tiboot3.bin sysfw.itb"
> +IMAGE_BOOT_FILES_MULTI_CERT = "${SPL_BINARY} u-boot.${UBOOT_SUFFIX} tiboot3.bin"
> +
> +IMAGE_BOOT_FILES ?= "${IMAGE_BOOT_FILES_LEGACY}"
> +
>  WKS_FILE ?= "sdimage-2part.wks"
>  do_image_wic[depends] += "virtual/bootloader:do_deploy"
>  do_image_wic[mcdepends] += "mc::k3r5:virtual/bootloader:do_deploy mc::k3r5:ti-sci-fw:do_deploy"
> -- 
> 2.31.0
> 

-- 
Regards,
Denys Dmytriyenko <denis@denix.org>
PGP: 0x420902729A92C964 - https://denix.org/0x420902729A92C964
Fingerprint: 25FC E4A5 8A72 2F69 1186  6D76 4209 0272 9A92 C964