From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from phobos.denx.de (phobos.denx.de [85.214.62.61]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 6961BC021A0 for ; Sat, 15 Feb 2025 15:30:16 +0000 (UTC) Received: from h2850616.stratoserver.net (localhost [IPv6:::1]) by phobos.denx.de (Postfix) with ESMTP id DF29D80C6F; Sat, 15 Feb 2025 16:30:14 +0100 (CET) Authentication-Results: phobos.denx.de; dmarc=pass (p=none dis=none) header.from=denx.de Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=u-boot-bounces@lists.denx.de DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=denx.de; s=phobos-20191101; t=1739633414; bh=HXiwnFVnhHKE3ElpVteYFvPqub5brwUk916OX2vEE1s=; h=Date:Subject:To:Cc:References:From:In-Reply-To:List-Id: List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe: From; b=l+iaCm5+6lWSqkU18YXEZdQsOiz8Mv9gYMtAlbukZMmh6HrefTrWxQwLZHTGtrR1N g5sp69bIEKtE9ucV9up+n0yZ+K6SXtmrFIMXyVSLQ1fJxvN8NxWcFoCUQfTHWfqXN2 gT8iD1IEdSIdE75uyy/CJICgSbh8lbXUhEhp/KvMxY+Ob/k39NRPzeRBfA2LyNfVms 16fLmoIr/i/QZpiIl4GfWev2mB3a2sJYosrU87OVfjHb1GuWJ6z8xYGTawhgak9AJg Fx0SogR7TmRbEqxwdQJeaJ/VCjTzFVhd7AWrzZEvxpHiIT0Mx0YNP1IjXQwBqqGpMi cSZpvSAdvKOhQ== Received: by phobos.denx.de (Postfix, from userid 109) id D450180C77; Sat, 15 Feb 2025 16:30:13 +0100 (CET) Received: from mx.denx.de (mx.denx.de [IPv6:2a03:4000:64:cc:545d:19ff:fe05:8172]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) (No client certificate requested) by phobos.denx.de (Postfix) with ESMTPS id 789DB80756 for ; Sat, 15 Feb 2025 16:30:11 +0100 (CET) Authentication-Results: phobos.denx.de; dmarc=pass (p=none dis=none) header.from=denx.de Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=marex@denx.de Authentication-Results: phobos.denx.de; dkim=pass (2048-bit key; unprotected) header.d=denx.de header.i=@denx.de header.b="Cszoh84P"; dkim-atps=neutral Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id AE4FC102FD473; Sat, 15 Feb 2025 16:30:08 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=denx.de; s=mx-20241105; t=1739633410; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=HXiwnFVnhHKE3ElpVteYFvPqub5brwUk916OX2vEE1s=; b=Cszoh84Pw/4dFMNJ1X72BnjGGMlAi8JHrmk2MTNk/Vrh526FDudwLksPN+8JWjgJR6yJay ldLibrmC7u6JYFWqgtqg/vPhaNsGG21Z8ycV95NB83lwPw0ZRGkhHxQOnD8RlrOEQigbk+ 6w3bp7WKgndwwZbh7XizbZy0u48gQFSeakUBbNPTBXiGaqdtQu3YfWTh7Dk1TCXgieMX9V /YEhf3ZwMsciLW0u/GY5sXCSCt3oxHPBGfXlNiiyatIZgIav2VjZ+ejNMjZpbJ8FFomhBd kUcMcjtXVXydwpusnHIcGNokzCbAEddCBVEoMqIk8k7mph5Jbm8k2g0qERp6DA== Message-ID: <8647abd3-9378-42cf-a1fa-302c7891d439@denx.de> Date: Sat, 15 Feb 2025 15:55:06 +0100 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH] binman: Fill in most of the imx8mimage and imx8mcst tests To: Simon Glass Cc: u-boot@lists.denx.de, Brian Ruley , Paul HENRYS , Rasmus Villemoes , Tim Harvey , Tom Rini References: <20250105203714.158480-1-marex@denx.de> <1b77dd3f-e0f3-492b-981f-1dc9962f1732@denx.de> Content-Language: en-US From: Marek Vasut In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Last-TLS-Session-Version: TLSv1.3 X-BeenThere: u-boot@lists.denx.de X-Mailman-Version: 2.1.39 Precedence: list List-Id: U-Boot discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: u-boot-bounces@lists.denx.de Sender: "U-Boot" X-Virus-Scanned: clamav-milter 0.103.8 at phobos.denx.de X-Virus-Status: Clean On 2/15/25 2:38 PM, Simon Glass wrote: > Hi Marek, > > On Sat, 8 Feb 2025 at 14:27, Marek Vasut wrote: >> >> On 2/7/25 1:49 AM, Simon Glass wrote: >>> Hi Marek, >>> >>> On Thu, 6 Feb 2025 at 13:52, Marek Vasut wrote: >>>> >>>> On 2/6/25 1:42 PM, Simon Glass wrote: >>>> >>>> Hi, >>>> >>>>>>> FAILED (errors=1) >>>>>>> >>>>>>> So where is the SRK_1_2_3_4_table.bin file? >>>>>> See the tool documentation: >>>>>> >>>>>> https://gitlab.apertis.org/pkg/imx-code-signing-tool/-/blob/debian/3.4.0+dfsg-2/docs/CST_UG.pdf?ref_type=tags >>>>>> >>>>>> 3.1.2 Running the hab4_pki_tree script Example >>>>>> 3.1.2.1 Running the hab4_pki_tree script in interactive mode >>>>>> >>>>>> The hab4_pki_tree.sh script should generate all those files. >>>>> >>>>> But with binman we want to avoid vendor scripts, etc. >>>> >>>> I believe the script internally runs openssl to generate that file. >>>> >>>>> Could someone take a look at updating tools/binman/btool/cst.py or >>>>> similar to build the tool from source? There are examples of others >>>>> that do this, e.g. bootgen.py >>>> Is this relevant to finalizing this patch ? >>> >>> Well, I don't see how the tests can pass if we can't build/run the tools needed. >> Maybe you can try to use the shell scripts to generate the missing bin >> file ? I suspect the script does some openssl invocation, which can be >> reproduced in binman ? > > But 'binman tool -f ' is supposed to build/fetch the tool. > So any such building should happen in that bintool. > > One of the main goals of binman is to reduce the work needed to create > a working image. If people have to go spelunking around the Internet, > build it themselves, etc. that is not good. What you are asking me for is not the tool itself, but key material, which is generated by these scripts.