RE: [OE-core] [PATCH] uboot-sign: support to load optee-os and TFA images

Jamin Lin
2024-02-15T01:57:03Z

> -----Original Message-----
> From: Sverdlin, Alexander <alexander.sverdlin@siemens.com>
> Sent: Wednesday, February 14, 2024 7:58 PM
> To: openembedded-core@lists.openembedded.org; Jamin Lin
> <jamin_lin@aspeedtech.com>
> Subject: Re: [OE-core] [PATCH] uboot-sign: support to load optee-os and TFA
> images
>
> Hello Jamin,
>
> On Tue, 2024-01-16 at 08:54 +0100, Alexander Sverdlin wrote:
> > On Mon, 2024-01-15 at 15:54 +0800, Jamin Lin via lists.openembedded.org
> wrote:
> > > Currently, u-boot FIT image only support to load u-boot image.
> > > To support optee-os and trusted-firmware-a, update ITS file
> > > generation scripts, so users are able to use u-boot FIT image to
> > > load u-boot, optee-os and treustred-firmware-a images
> > >
> > > Add a variable "UBOOT_FIT_ARM_TRUSTED_FIRMWARE_A" to enable
> > > trusted-firmware-a image and it is disable by default.
> > >
> > > Add a variable "UBOOT_FIT_OPTEE_OS" to enable optee-os image and it
> > > is disable by default.
> >
> > Have you considered leveraging the existing binman infrastructure in
> > the recent U-Boot for TF-A and OPTEE?
>
> BTW, there has been a recent FOSDEM talk on "Standardizing the generation
> and signing of boot images":
>
Thanks for notification.
Jamin
> https://fosdem.org/2024/schedule/event/fosdem-2024-3067-standardizing-the
> -generation-and-signing-of-boot-images/
>
> > Which platform are you testing on?
> >
> > There is TI K3 documentation already [1], but many parts of the new
> > infrastructure are not TI specific as I understand...
> >
> > > The ITS file creation loos like as following.
> >
> > []
> >
> > [1] Link:
> > https://source.denx.de/u-boot/u-boot/-/blob/master/doc/board/ti/k3.rst
> > ?ref_type=heads&plain=1
>
> --
> Alexander Sverdlin
> Siemens AG
> www.siemens.com