public inbox for u-boot@lists.denx.de
 help / color / mirror / Atom feed
From: Christopher Preschern <christopher.preschern@tugraz.at>
To: u-boot@lists.denx.de
Subject: [U-Boot] Help needed: Boot signed RTOS
Date: Wed, 20 Nov 2013 18:49:45 +0100	[thread overview]
Message-ID: <528CF639.9080301@tugraz.at> (raw)

Hi,

I try to boot a signed RTOS as FIT Image with the bootm command and I'm 
kind of stuck here - any help well appreciated. When booting, U-Boot 
shows the following error message:
   ?No Linux ARM Kernel Image Image
    ERROR: can't get kernel image!?

My questions:
  - Is it possible to boot a signed RTOS with U-Boot?
  - Is there something I do wrong (I'm rather new to U-Boot)?


I use the following setup:
  - U-Boot 2013.07
  - i.MX28 board
  - safeRTOS which I can boot with the bootelf command

The following mkimage command (which does not yet create a signature) 
works and produces a with bootm bootable "u-rtos" file:
   mkimage -A arm -C none -O qnx -T kernel_noload -d safeRTOS u-rtos

I tried to re-build the above parameters in my .its File (which I need 
to use the signing features of mkimage):

   /dts-v1/;
   / {
     description = "MY-RTOS";
     #address-cells = <1>;
     images {
       kernel at 1 {
         description = "MY-RTOS";
         data = /incbin/("./my-rtos-image");
         type = "kernel_noload";
         arch = "arm";
         os = "qnx";
         compression = "none";
         signature at 1 {
           algo = "sha1,rsa2048";
           key-name-hint = "dev";
         };
       };
     };
     configurations {
       default = "conf at 1";
       conf at 1 {
         kernel = "kernel at 1";
         hash at 1 {
           algo = "sha1";
         };
       };
     };
   };

I run the following command to get my FIT-file:
   mkimage -f rtos.its -k <path-to-my-keys> rtos.fit

When booting the FIT file with bootm, I get the following output:

   => bootm 0x42000000
   ## Loading kernel from FIT Image at 42000000 ...
      Using 'conf at 1' configuration
      Verifying Hash Integrity ... OK
      Trying 'kernel at 1' kernel subimage
        Description:  safeRTOS Kernel
        Type:         Kernel Image (no loading done)
        Compression:  uncompressed
        Data Start:   0x420000b8
        Data Size:    1543860 Bytes = 1.5 MiB
        Sign algo:    sha1,rsa2048:dev
        Sign value:   45bd54112.........99d0d710
      Verifying Hash Integrity ... sha1,rsa2048:dev+ OK
   No Linux ARM Kernel Image Image
   ERROR: can't get kernel image!

It seems that the whole signature-checking works. However U-Boot 
apparently expects a kernel and instead gets my RTOS to boot. How can I 
tell U-Boot that I want to run my bootelf-runable RTOS?

I'm really stuck here - any help is very much appreciated!

thank you & best regards,
Christopher


-- 
   ------------------------------------------------------------------
| Christopher Preschern
| Institute for Technical Informatics - TU Graz
| Tel: +43 (316) 873 - 6404
| EMail: christopher.preschern at tugraz.at

             reply	other threads:[~2013-11-20 17:49 UTC|newest]

Thread overview: 6+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2013-11-20 17:49 Christopher Preschern [this message]
2013-11-20 18:45 ` [U-Boot] Help needed: Boot signed RTOS Simon Glass
2013-11-21 11:04   ` Christopher Preschern
2013-11-21 17:11     ` Simon Glass
2013-11-22 12:56       ` Christopher Preschern
2013-11-22 16:54         ` Simon Glass

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=528CF639.9080301@tugraz.at \
    --to=christopher.preschern@tugraz.at \
    --cc=u-boot@lists.denx.de \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox