From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from phobos.denx.de (phobos.denx.de [85.214.62.61]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id D1F52C7EE22 for ; Tue, 9 May 2023 08:58:47 +0000 (UTC) Received: from h2850616.stratoserver.net (localhost [IPv6:::1]) by phobos.denx.de (Postfix) with ESMTP id A252484715; Tue, 9 May 2023 10:58:45 +0200 (CEST) Authentication-Results: phobos.denx.de; dmarc=pass (p=reject dis=none) header.from=siemens.com Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=u-boot-bounces@lists.denx.de Authentication-Results: phobos.denx.de; dkim=pass (2048-bit key; unprotected) header.d=siemens.com header.i=@siemens.com header.b="MBdpx9h6"; dkim-atps=neutral Received: by phobos.denx.de (Postfix, from userid 109) id C1B2184715; Tue, 9 May 2023 10:58:43 +0200 (CEST) Received: from EUR03-DBA-obe.outbound.protection.outlook.com (mail-dbaeur03on20616.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe1a::616]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by phobos.denx.de (Postfix) with ESMTPS id BEC3C846B0 for ; Tue, 9 May 2023 10:58:40 +0200 (CEST) Authentication-Results: phobos.denx.de; dmarc=pass (p=reject dis=none) header.from=siemens.com Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=jan.kiszka@siemens.com ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=MkOAeq0MGVN9wWoJdSG8WvsD26lV4qy2zoDtObE7QnfXWoim0fUjTlUyDKp38aYjrHOHP32q9OiL5e68B5ko0+6cUSqUhAyXBXdpt5yZUeFizDI6LTrwq4fwQb2aJgZ4tCJ+iNx53uIfII/oibDUbMo968MUCeJXRXiMdmFaNXa8DshKElmkgd1eIw85wweHovntat2GdiszoOEJlyqmxisy8jcJFmk15SnIURAB9xJxypq2emiMWrNEumyye675OFm3upTQMkJCaUSO8DUd1CUjvgDMI82L9Qal8RlfoGq1gEQRraJc/nscL+H/1ZyYnoDq3j78SED8lxwq9E0dXQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=5tQD+1OzlglPQp9nLNACgjW277YjuRQBO9Rz2y1Xafs=; b=Cen03vWIZvaQtJf2c/1TqtOFJUvnhZe/yI0C4sCh5pN14cvUbh/hg+rMjwn5hnRFRG1vbZl35krYrSaSWG/BLoKjuRLdUfSHM7K8KPVoLR2Wyh/D7L8mDrITDVwJ8YvmoOghnv3H3/jwRmroqHA9368zLrjC9SPFfxtNh0WYid8TjyjgWIokbk6N7lu/tVG3aRJVLFOECmso/5/0YGzqCUSvQ88vzQEqaAVwjKR3i3/rc+aaOV/PKjTajxqaz2SbT2nDts7QUJw1cd8+aa315RboVUFE8H8TpTfKvlASc45Sq4L8QH7k87aQJgfzqfHSy40sxYCt5kOt8I+4FXfxug== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=siemens.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=5tQD+1OzlglPQp9nLNACgjW277YjuRQBO9Rz2y1Xafs=; b=MBdpx9h6IItfolgfgV+kfVszTABh8ynp1XmcGI1C4VN0df7KyK5xf/N1j2m1qhVo0VG8abK6HcVWExluFrfhGtBlFg08GcmJYeOPBQTFJtItCpnjaeByzBFgIW1ADN08W7JglVNk4MfrtKJ1HZhqrV8v9YkTGbTeVjaOdiNLJAzTmOGWv3CeHlEvhyG6RG/5mEVwwGVWlToRGsoN0gchUedfmcATV3rf/YIe5I1fis8bmcBQLBAx7JBk21Og+wZ2AH3+rQgViD8rl9Rt1hcrELgUeQdYp/IO0mg0PHV9bviCLrRttyzbuLVzcQq4sYxBmla1P2qX2/4IMvcmfAZjrQ== Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=siemens.com; Received: from AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:588::19) by AS2PR10MB7177.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:60f::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6363.33; Tue, 9 May 2023 08:58:39 +0000 Received: from AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM ([fe80::b50a:c627:3d12:6f04]) by AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM ([fe80::b50a:c627:3d12:6f04%5]) with mapi id 15.20.6363.033; Tue, 9 May 2023 08:58:39 +0000 Message-ID: <78b5185a-4f40-fa63-5ec6-b7b20a64b9f2@siemens.com> Date: Tue, 9 May 2023 10:58:30 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.9.1 Subject: Re: [PATCH v3 00/19] Migration to using binman for bootloader Content-Language: en-US To: Neha Malcom Francis Cc: u-boot@lists.denx.de, sjg@chromium.org, afd@ti.com, vigneshr@ti.com, rogerq@kernel.org, alpernebiyasak@gmail.com, nm@ti.com, bb@ti.com, u-kumar1@ti.com, Tom Rini References: <20230421123203.1315330-1-n-francis@ti.com> <20230426223750.GA643785@bill-the-cat> <3516dc21-00ab-3307-376d-612c83770cb4@siemens.com> From: Jan Kiszka In-Reply-To: Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-ClientProxiedBy: CH0PR03CA0084.namprd03.prod.outlook.com (2603:10b6:610:cc::29) To AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:588::19) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AS4PR10MB6181:EE_|AS2PR10MB7177:EE_ X-MS-Office365-Filtering-Correlation-Id: 0e718aec-ed0b-434e-3e8a-08db506b94b3 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230028)(4636009)(396003)(376002)(136003)(39860400002)(346002)(366004)(451199021)(2906002)(316002)(8676002)(8936002)(41300700001)(66476007)(478600001)(5660300002)(6916009)(31686004)(4326008)(7416002)(6666004)(66946007)(66556008)(44832011)(966005)(6486002)(6512007)(6506007)(26005)(53546011)(186003)(82960400001)(36756003)(2616005)(83380400001)(38100700002)(31696002)(86362001)(43740500002)(45980500001); DIR:OUT; SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?OHBSQllQTGNnR1Y0U3R2ZU1NRGVOaDVoK1l2KzB6SFVYczREeDZZMjBNWWRv?= =?utf-8?B?YVBBT0dpWndObDNGdXF6THJ6YVQ2MVRCQXh4LzRUREIzeEtabjFkMVNESm0v?= =?utf-8?B?a2dVQnEvUHA3c0s4RkRRSC9VZS9kS3BOS24xZTFrbzVBRVJyV01SNS9jK2RE?= =?utf-8?B?UjhHbGFsWVdhZlRLYXRlVktlYWVZV0pCenJDNzhDT0pXa21zNjBqczI3dGxX?= =?utf-8?B?KzRrN0FTQjdNN21QRThGd1Mvd0VOeEF1V0RhanN3THpTdGNKMEtHSmdpaTJL?= =?utf-8?B?QkMwcEhuc21rWGFINFV3b2lRbDQ1eGpqRFdzOHVyOEQwNDRzYTZOMmJSUmtn?= =?utf-8?B?L2s5ckhkTmw3OEpFZmxWV3pXV1dhMlNYT3dyWEoxWnpwdGN3NUhVU01HR0tv?= =?utf-8?B?eUllRmhnS29kN3VISzAvRTRudDE4ZVdpS2JRaGlkQmRyejJYemloMXRzaTF1?= =?utf-8?B?Mll0L1Fia3JjaDhaZ0x6NXBXMnljanJlVW11S0ExVTM3dm83bUJNTHNxcE5o?= =?utf-8?B?OXRMRGN5T3ZZcklNOWpoc0ZFYzFsSVlJL2p5S1kwK01FZ3grVWJORzdDZ2Mw?= =?utf-8?B?K05oOG1oSDN2MVdoQ1RLcEJxckplejEvZlVVdUF5THhUeEtraFppV1FqY2tt?= =?utf-8?B?ekRHMGRQOTR5RXZpVVFqTkE5RGI2ek11ekVudmtvNlozMEhoUEIyMXE4UVE2?= =?utf-8?B?WDltRFBxTnpuTDNSTFZ1aXVwV1lMNXFtKzZoWUhqVTlhUDFGTGRZdnAwMzlx?= =?utf-8?B?Wi94UGJ1ZWY3UUo0SVBzUDBYTXhaQjlsejFFMjNUM0ZQVWhvNHA3RXZxWE5G?= =?utf-8?B?RVNROW02L0Mzeldva2tBMklRa0svVDNldnhFRk9JSi9WZ0srd0JpMXpMSmRC?= =?utf-8?B?QzFTWlR4ZGI2Yk5OanRVMU9ydnVreVphcjdCTWtsZWtIeUdzYVVSNG5VS0F1?= =?utf-8?B?SWMxeG5xQUtKRXVCWDVhMmxQb2xpbmlMMWhOeThxdmoxTzBtckdDd1NjbmVx?= =?utf-8?B?MUJWMWNnYUNyRkhlM2F1WnBtYkJoSDh5OFhxQzR2VENjakU0elJ0UDRhOU1O?= =?utf-8?B?ZlNsb2Y3eHlWTEhpMHpObVptVmE4UGEvR29YQ0dHK2o5L09kRmRhUUlrVDZk?= =?utf-8?B?OW1seXlYREUzNmJNVFJ1eXNVNnNmMWtZbzNGMW9qRHRMT3IxTGd4QzkraFRJ?= =?utf-8?B?TUdYOW1KVzhxODVEeWlUaEpDWEtGOEZMeERGUlpxVVdVbE1PSUZnQjErN0k0?= =?utf-8?B?NXdBN1gvd0RiR0VIUmkvZk0wMCtZZ0RGWElZbEFlRktrODhyU0xwMmZJUVoz?= =?utf-8?B?cERnSTVidnY5Tmt2azZTRzkxUG5LT1dJbTNwTXNQbjRhTFUza1U3MU5KZ0dL?= =?utf-8?B?TWZKUTRQUkthV1dHWVI4K08zYUJRRVBnVWNNYXFTWmFsVkFXeWw4eHVIQ0pC?= =?utf-8?B?VTRjWm12Y2MzUlMxeEtsK0k4WmlUZlVoejZ5SUpaZUVpZU1UWTM0WjQzOWZa?= =?utf-8?B?QVpURjM5VW5vcGJxMkliT2d0L0NTTnczZ3FSdzNCWUxrVUZPMVJLakxwelBI?= =?utf-8?B?eHdDdkkrSGpoVDRmTERxQ0ZndEduUkFJekJ5bnhjNlJWdEhjN2dCSmVxQldU?= =?utf-8?B?a0VJTTMrT2tkb09kdmlxaVNEOEtwenlsZ2ZqL0pGbXZFTHphK2d6Q0NBeDBS?= =?utf-8?B?UDhTVTFvdk1CMDZ4ZVV6SlNoVlA0Y2ZROURSUXdjdXk2c1NSTkhHcFVMdlNr?= =?utf-8?B?ODd4SlAzVlRmMkZQUU1Ia0NSYTBLZXNQK2wxMWQ2V3o5SGpVNzVmc1JCNDNS?= =?utf-8?B?Zk12MXlYVE1ieTVJU3VyWS9VTXZ0OG5LYXdtQkNFTlJtUGpIcTVxUm9hNGIz?= =?utf-8?B?aGdGUUF1cU9jbGIxRlZTNjMwajkybXpDQVBiWVNvcnhLL1VUREltYUdDREc1?= =?utf-8?B?eUNKcWE1eWJkeTdMaHhOUzVJOWdKZjhPL3JiTGNiUERjRlJmL3E3S1F2OXdK?= =?utf-8?B?NmpFYlVUeDZ6d21zMExVcE82dStoVnFEVmdvWFpJSHBORVpnaUphR2hSY0VT?= =?utf-8?B?ZEJPVnhxUk5odmRGZldsQjgrN2txa1ZWWnI0OGUyWjZFbVFRandrMWxhWDBu?= =?utf-8?B?WDgwcThiTzNsa1dRV3RlZXNNMmJCS1VhU0Jkdm9hOEIzM2toZE9aRGNVdTlz?= =?utf-8?B?c0E9PQ==?= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: 0e718aec-ed0b-434e-3e8a-08db506b94b3 X-MS-Exchange-CrossTenant-AuthSource: AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 09 May 2023 08:58:39.1724 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: So/2Knpxc5IMIZGni6QhAszzmViEzv/gxHowNBfPQTqFzUtX8wktiA5ByvTX20tbQh+QBsQ2HPTvffMiC7bGfg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS2PR10MB7177 X-BeenThere: u-boot@lists.denx.de X-Mailman-Version: 2.1.39 Precedence: list List-Id: U-Boot discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: u-boot-bounces@lists.denx.de Sender: "U-Boot" X-Virus-Scanned: clamav-milter 0.103.8 at phobos.denx.de X-Virus-Status: Clean On 08.05.23 07:05, Neha Malcom Francis wrote: > Hi Jan, > > On 07/05/23 17:41, Jan Kiszka wrote: >> On 04.05.23 08:13, Neha Malcom Francis wrote: >>> Hi Jan >>> >>> On 04/05/23 10:13, Neha Malcom Francis wrote: >>>> Hi Jan, >>>> >>>> On 03/05/23 22:04, Jan Kiszka wrote: >>>>> On 03.05.23 14:56, Neha Malcom Francis wrote: >>>>>> Hi Jan, >>>>>> >>>>>> On 03/05/23 12:57, Neha Malcom Francis wrote: >>>>>>> Hi Tom >>>>>>> >>>>>>> On 27/04/23 04:07, Tom Rini wrote: >>>>>>>> On Fri, Apr 21, 2023 at 06:01:44PM +0530, Neha Malcom Francis >>>>>>>> wrote: >>>>>>>> >>>>>>>>> This series aims to eliminate the use of additional custom >>>>>>>>> repositories >>>>>>>>> such as k3-image-gen (K3 Image Generation) repo and >>>>>>>>> core-secdev-k3 (K3 >>>>>>>>> Security Development Tools) that was plumbed into the U-Boot >>>>>>>>> build flow >>>>>>>>> to generate boot images for TI K3 platform devices. And >>>>>>>>> instead, we >>>>>>>>> move >>>>>>>>> towards using binman that aligns better with the community >>>>>>>>> standard >>>>>>>>> build >>>>>>>>> flow. >>>>>>>>> >>>>>>>>> This series uses binman for all K3 platforms supported on U-Boot >>>>>>>>> currently; >>>>>>>>> both HS (High Security, both SE and FS) and GP (General Purpose) >>>>>>>>> devices. >>>>>>>>> >>>>>>>>> Background on using k3-image-gen: >>>>>>>>>       * TI K3 devices require a SYSFW (System Firmware) image >>>>>>>>> consisting >>>>>>>>>       of a signed system firmware image and board configuration >>>>>>>>> binaries, >>>>>>>>>       this is needed to bring up system firmware during U-Boot >>>>>>>>> R5 SPL >>>>>>>>>       startup. >>>>>>>>>       * Board configuration data contain board-specific >>>>>>>>> information >>>>>>>>>       such as resource management, power management and security. >>>>>>>>> >>>>>>>>> Background on using core-secdev-k3: >>>>>>>>>       * Contains resources to sign x509 certificates for HS >>>>>>>>> devices >>>>>>>>> >>>>>>>>> Series intends to use binman to take over the packaging and >>>>>>>>> signing for >>>>>>>>> the R5 bootloader images tiboot3.bin (and sysfw.itb, for >>>>>>>>> non-combined >>>>>>>>> boot flow) instead of k3-image-gen. >>>>>>>>> >>>>>>>>> Series also packages the A72/A53 bootloader images (tispl.bin and >>>>>>>>> u-boot.img) using ATF, OPTEE and DM (Device Manager) >>>>>>>> >>>>>>>> So, next up is fixing this in CI. After taking Andrew's patch to >>>>>>>> fix the >>>>>>>> typedef issue, and after my patches to ensure we can get >>>>>>>> pyyaml/jsonschema for python, there's problems still: >>>>>>> >>>>>>> >>>>>>> Thanks for checking this! Couple things: >>>>>>> >>>>>>>> Over at https://source.denx.de/u-boot/u-boot/-/jobs/617966: >>>>>>>> binman: Filename 'spl/dts/k3-am68-sk-base-board.dtb' not found in >>>>>>>> input >>>>>>>> path (.,/builds/u-boot/u-boot,board/ti/j721s2,arch/arm/dts) >>>>>>>> (cwd='/tmp/.bm-work/j721s2_hs_evm_a72') >>>>>>> >>>>>>> 1. This is dependent on the patch merging J721S2 HS and GP configs >>>>>>> [1]. However it has been reverted on -next, seen in the same thread. >>>>>>> >>>>>>>> >>>>>>>> And then: >>>>>>>> https://source.denx.de/u-boot/u-boot/-/jobs/617965#L1328 >>>>>>>> Error: arch/arm/dts/k3-am62a-sk-binman.dtsi:167.1-8 syntax error >>>>>>>> I've fixed this, minor but serious change. >>>>>>> >>>>>>> 2. Regarding iot2050, build fails since it uses >>>>>>> arch/arm/mach-k3/config.mk which is now entirely binman based. Will >>>>>>> try moving iot2050 to binman as well. >>>>>> >>>>>> I'll need some help with this, might need to know the bootloader >>>>>> flow to >>>>>> make a clean migration. >>>>> >>>>> Where do I have to look at? Is there a git repo with that experiment >>>>> somewhere? >>>>> >>>>> Jan >>>>> >>>> >>>> There's no experiment yet, I will send one today; but I do not have >>>> complete understanding of the booting; whether the tispl.bin (which I >>>> assume is the only boot component that is affecting iot2050 boot since >>>> k3_fit_atf.sh is no longer there) has any concept of signing? Is >>>> core-secdev-k3 ever used? >>>> >>> >>> I have a tree posted here [2] that builds flash.bin with no error for >>> me. Please confirm whether your build flow does the same and also let me >>> know if the binary actually boots. >>> >>> [2] >>> https://github.com/nehamalcom/u-boot/tree/migration-to-binman-cicd-iot2050 >>> >> >> I've tested the latest version in that branch in the meantime. It >> compiles but it does not work. This is missing from the original script: >> >> diff --git a/arch/arm/dts/k3-am65-iot2050-boot-image.dtsi >> b/arch/arm/dts/k3-am65-iot2050-boot-image.dtsi >> index e17ffd7481f..9d83898d33f 100644 >> --- a/arch/arm/dts/k3-am65-iot2050-boot-image.dtsi >> +++ b/arch/arm/dts/k3-am65-iot2050-boot-image.dtsi >> @@ -92,6 +92,15 @@ >>                       }; >>                   }; >>               }; >> + >> +            configurations { >> +                default = "spl"; >> +                spl { >> +                    fdt = "fdt-0"; >> +                    firmware = "atf"; >> +                    loadables = "tee", "dm", "spl"; >> +                }; >> +            }; >>           }; >>             fit@0x380000 { >> > > Thanks for this! I'll make sure to add this, so we are booting fine on > non-secure with this patch applied as well right? Right, at least on the PG1 variants of our boards (only tested one so far). But I would be fairly optimistic for PG2 and M.2 as well. > >> I didn't test secure booting yet, though. We are currently still signing >> via tools/iot2050-sign-fw.sh, partly due to missing features in binman >> (there were a lot of proposals on the list recently, may that is solved >> now), but partly also due to some remaining breakages. > > Got it. To confirm, this is not modifying anything in the secure flow is > it? flash.bin is just signed manually using tools/iot2050-sign-fw.sh > correct? That would be my expectation, at least until we resolve the blockers for signing with binman. But I'd still like to verify this the next days. Jan -- Siemens AG, Technology Competence Center Embedded Linux