Re: [OE-core] [PATCH] uboot-sign: support to load optee-os and TFA images

["Sverdlin, Alexander" <alexander.sverdlin@siemens.com>]

Hello Jamin,

On Tue, 2024-01-16 at 08:54 +0100, Alexander Sverdlin wrote:
> On Mon, 2024-01-15 at 15:54 +0800, Jamin Lin via lists.openembedded.org wrote:
> > Currently, u-boot FIT image only support to load u-boot image.
> > To support optee-os and trusted-firmware-a, update ITS file generation
> > scripts, so users are able to use u-boot FIT image to load
> > u-boot, optee-os and treustred-firmware-a images
> > 
> > Add a variable "UBOOT_FIT_ARM_TRUSTED_FIRMWARE_A" to
> > enable trusted-firmware-a image and it is disable by default.
> > 
> > Add a variable "UBOOT_FIT_OPTEE_OS" to enable optee-os image
> > and it is disable by default.
> 
> Have you considered leveraging the existing binman infrastructure in the recent
> U-Boot for TF-A and OPTEE?

BTW, there has been a recent FOSDEM talk on
"Standardizing the generation and signing of boot images":

https://fosdem.org/2024/schedule/event/fosdem-2024-3067-standardizing-the-generation-and-signing-of-boot-images/

> Which platform are you testing on?
> 
> There is TI K3 documentation already [1], but many parts of the new infrastructure
> are not TI specific as I understand...
> 
> > The ITS file creation loos like as following.
> 
> []
> 
> [1] Link: https://source.denx.de/u-boot/u-boot/-/blob/master/doc/board/ti/k3.rst?ref_type=heads&plain=1

-- 
Alexander Sverdlin
Siemens AG
www.siemens.com