* [PATCH 1/2] arch: arm: dts: k3-am625-phycore-som-binman: Add custMpk to all images
@ 2025-02-10 7:36 Daniel Schultz
2025-02-10 7:36 ` [PATCH 2/2] arch: arm: dts: k3-am642-phycore-som-binman: " Daniel Schultz
2025-02-11 4:34 ` [PATCH 1/2] arch: arm: dts: k3-am625-phycore-som-binman: " Wadim Egorov
0 siblings, 2 replies; 3+ messages in thread
From: Daniel Schultz @ 2025-02-10 7:36 UTC (permalink / raw)
To: w.egorov, trini, u-boot
Cc: n-francis, d-gole, nm, afd, upstream, Daniel Schultz
There are some device-tree overlays and firmwares with missing entries
for the keyfile. Add them to sign all images in the U-Boot FIT image.
Signed-off-by: Daniel Schultz <d.schultz@phytec.de>
---
arch/arm/dts/k3-am625-phycore-som-binman.dtsi | 49 ++++++++++++++++---
1 file changed, 41 insertions(+), 8 deletions(-)
diff --git a/arch/arm/dts/k3-am625-phycore-som-binman.dtsi b/arch/arm/dts/k3-am625-phycore-som-binman.dtsi
index 31456d23167..7c72da6deda 100644
--- a/arch/arm/dts/k3-am625-phycore-som-binman.dtsi
+++ b/arch/arm/dts/k3-am625-phycore-som-binman.dtsi
@@ -227,6 +227,24 @@
fit {
images {
+ atf {
+ ti-secure {
+ keyfile = "custMpk.pem";
+ };
+ };
+
+ tee {
+ ti-secure {
+ keyfile = "custMpk.pem";
+ };
+ };
+
+ spl {
+ ti-secure {
+ keyfile = "custMpk.pem";
+ };
+ };
+
tifsstub-hs {
description = "TIFSSTUB";
type = "firmware";
@@ -313,6 +331,9 @@
images {
uboot {
description = "U-Boot for phyCORE-AM62x";
+ ti-secure {
+ keyfile = "custMpk.pem";
+ };
};
som-no-rtc {
@@ -321,8 +342,11 @@
compression = "none";
load = <0x8F000000>;
arch = "arm";
-
- blob-ext {
+ ti-secure {
+ content = <&am6xx_phycore_disable_rtc_dtbo>;
+ keyfile = "custMpk.pem";
+ };
+ am6xx_phycore_disable_rtc_dtbo: blob-ext {
filename = "dts/upstream/src/arm64/ti/k3-am6xx-phycore-disable-rtc.dtbo";
};
};
@@ -333,8 +357,11 @@
compression = "none";
load = <0x8F001000>;
arch = "arm";
-
- blob-ext {
+ ti-secure {
+ content = <&am6xx_phycore_disable_spi_not_dtbo>;
+ keyfile = "custMpk.pem";
+ };
+ am6xx_phycore_disable_spi_not_dtbo: blob-ext {
filename = "dts/upstream/src/arm64/ti/k3-am6xx-phycore-disable-spi-nor.dtbo";
};
};
@@ -345,8 +372,11 @@
compression = "none";
load = <0x8F002000>;
arch = "arm";
-
- blob-ext {
+ ti-secure {
+ content = <&am6xx_phycore_disable_eth_phy_dtbo>;
+ keyfile = "custMpk.pem";
+ };
+ am6xx_phycore_disable_eth_phy_dtbo: blob-ext {
filename = "dts/upstream/src/arm64/ti/k3-am6xx-phycore-disable-eth-phy.dtbo";
};
};
@@ -357,8 +387,11 @@
compression = "none";
load = <0x8F003000>;
arch = "arm";
-
- blob-ext {
+ ti-secure {
+ content = <&am6xx_phycore_disable_qspi_nor_dtbo>;
+ keyfile = "custMpk.pem";
+ };
+ am6xx_phycore_disable_qspi_nor_dtbo: blob-ext {
filename = "dts/upstream/src/arm64/ti/k3-am6xx-phycore-qspi-nor.dtbo";
};
};
--
2.25.1
^ permalink raw reply related [flat|nested] 3+ messages in thread* [PATCH 2/2] arch: arm: dts: k3-am642-phycore-som-binman: Add custMpk to all images
2025-02-10 7:36 [PATCH 1/2] arch: arm: dts: k3-am625-phycore-som-binman: Add custMpk to all images Daniel Schultz
@ 2025-02-10 7:36 ` Daniel Schultz
2025-02-11 4:34 ` [PATCH 1/2] arch: arm: dts: k3-am625-phycore-som-binman: " Wadim Egorov
1 sibling, 0 replies; 3+ messages in thread
From: Daniel Schultz @ 2025-02-10 7:36 UTC (permalink / raw)
To: w.egorov, trini, u-boot
Cc: n-francis, d-gole, nm, afd, upstream, Daniel Schultz
There are some device-tree overlays and firmwares with missing entries
for the keyfile. Add them to sign all images in the U-Boot FIT image.
Signed-off-by: Daniel Schultz <d.schultz@phytec.de>
---
arch/arm/dts/k3-am642-phycore-som-binman.dtsi | 49 ++++++++++++++++---
1 file changed, 41 insertions(+), 8 deletions(-)
diff --git a/arch/arm/dts/k3-am642-phycore-som-binman.dtsi b/arch/arm/dts/k3-am642-phycore-som-binman.dtsi
index 3710564cd4a..03cac277434 100644
--- a/arch/arm/dts/k3-am642-phycore-som-binman.dtsi
+++ b/arch/arm/dts/k3-am642-phycore-som-binman.dtsi
@@ -146,6 +146,24 @@
#address-cells = <1>;
images {
+ atf {
+ ti-secure {
+ keyfile = "custMpk.pem";
+ };
+ };
+
+ tee {
+ ti-secure {
+ keyfile = "custMpk.pem";
+ };
+ };
+
+ spl {
+ ti-secure {
+ keyfile = "custMpk.pem";
+ };
+ };
+
dm {
blob-ext {
filename = "/dev/null";
@@ -190,6 +208,9 @@
images {
uboot {
description = "U-Boot for AM64 board";
+ ti-secure {
+ keyfile = "custMpk.pem";
+ };
};
fdt-0 {
@@ -363,8 +384,11 @@
compression = "none";
load = <0x8F000000>;
arch = "arm";
-
- blob-ext {
+ ti-secure {
+ content = <&am6xx_phycore_disable_rtc_dtbo>;
+ keyfile = "custMpk.pem";
+ };
+ am6xx_phycore_disable_rtc_dtbo: blob-ext {
filename = "dts/upstream/src/arm64/ti/k3-am6xx-phycore-disable-rtc.dtbo";
};
};
@@ -375,8 +399,11 @@
compression = "none";
load = <0x8F001000>;
arch = "arm";
-
- blob-ext {
+ ti-secure {
+ content = <&am6xx_phycore_disable_spi_not_dtbo>;
+ keyfile = "custMpk.pem";
+ };
+ am6xx_phycore_disable_spi_not_dtbo: blob-ext {
filename = "dts/upstream/src/arm64/ti/k3-am6xx-phycore-disable-spi-nor.dtbo";
};
};
@@ -387,8 +414,11 @@
compression = "none";
load = <0x8F002000>;
arch = "arm";
-
- blob-ext {
+ ti-secure {
+ content = <&am6xx_phycore_disable_eth_phy_dtbo>;
+ keyfile = "custMpk.pem";
+ };
+ am6xx_phycore_disable_eth_phy_dtbo: blob-ext {
filename = "dts/upstream/src/arm64/ti/k3-am6xx-phycore-disable-eth-phy.dtbo";
};
};
@@ -399,8 +429,11 @@
compression = "none";
load = <0x8F003000>;
arch = "arm";
-
- blob-ext {
+ ti-secure {
+ content = <&am6xx_phycore_disable_qspi_nor_dtbo>;
+ keyfile = "custMpk.pem";
+ };
+ am6xx_phycore_disable_qspi_nor_dtbo: blob-ext {
filename = "dts/upstream/src/arm64/ti/k3-am6xx-phycore-qspi-nor.dtbo";
};
};
--
2.25.1
^ permalink raw reply related [flat|nested] 3+ messages in thread* Re: [PATCH 1/2] arch: arm: dts: k3-am625-phycore-som-binman: Add custMpk to all images
2025-02-10 7:36 [PATCH 1/2] arch: arm: dts: k3-am625-phycore-som-binman: Add custMpk to all images Daniel Schultz
2025-02-10 7:36 ` [PATCH 2/2] arch: arm: dts: k3-am642-phycore-som-binman: " Daniel Schultz
@ 2025-02-11 4:34 ` Wadim Egorov
1 sibling, 0 replies; 3+ messages in thread
From: Wadim Egorov @ 2025-02-11 4:34 UTC (permalink / raw)
To: Daniel Schultz, trini, u-boot; +Cc: n-francis, d-gole, nm, afd, upstream
Hi Daniel,
Am 10.02.25 um 14:36 schrieb Daniel Schultz:
> There are some device-tree overlays and firmwares with missing entries
> for the keyfile. Add them to sign all images in the U-Boot FIT image.
>
> Signed-off-by: Daniel Schultz <d.schultz@phytec.de>
> ---
> arch/arm/dts/k3-am625-phycore-som-binman.dtsi | 49 ++++++++++++++++---
> 1 file changed, 41 insertions(+), 8 deletions(-)
>
> diff --git a/arch/arm/dts/k3-am625-phycore-som-binman.dtsi b/arch/arm/dts/k3-am625-phycore-som-binman.dtsi
> index 31456d23167..7c72da6deda 100644
> --- a/arch/arm/dts/k3-am625-phycore-som-binman.dtsi
> +++ b/arch/arm/dts/k3-am625-phycore-som-binman.dtsi
> @@ -227,6 +227,24 @@
> fit {
>
> images {
> + atf {
> + ti-secure {
> + keyfile = "custMpk.pem";
I don't think you have to define it here, because we are making use of
the ti_spl_template from k3-binman.dtsi which is already defining the
keyfile.
Regards,
Wadim
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2025-02-11 4:34 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2025-02-10 7:36 [PATCH 1/2] arch: arm: dts: k3-am625-phycore-som-binman: Add custMpk to all images Daniel Schultz
2025-02-10 7:36 ` [PATCH 2/2] arch: arm: dts: k3-am642-phycore-som-binman: " Daniel Schultz
2025-02-11 4:34 ` [PATCH 1/2] arch: arm: dts: k3-am625-phycore-som-binman: " Wadim Egorov
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox