]> git.sur5r.net Git - u-boot/commit
common: fit: Allow U-Boot images to be booted
authormario.six@gdsys.cc <mario.six@gdsys.cc>
Wed, 20 Jul 2016 06:32:50 +0000 (08:32 +0200)
committerTom Rini <trini@konsulko.com>
Mon, 25 Jul 2016 16:00:05 +0000 (12:00 -0400)
commite8fb4358c2ea3b5629f004f7d0d5624c860d7e70
tree13b128109c4db4d4a1a56bb828f0c634a9f06ad6
parentbcdc1c8376c55fcc8b8fdd7f27f117eff0bf715d
common: fit: Allow U-Boot images to be booted

In certain circumstances it comes in handy to be able to boot into a second
U-Boot. But as of now it is not possible to boot a U-Boot binary that is inside
a FIT image, which is problematic for projects that e.g. need to guarantee a
unbroken chain of trust from SOC all the way into the OS, since the FIT signing
mechanism cannot be used.

This patch adds the capability to load such FIT images.

An example .its snippet (utilizing signature verification) might look
like the following:

images {
firmware@1 {
description = "2nd stage U-Boot image";
data = /incbin/("u-boot-dtb.img.gz");
type = "firmware";
arch = "arm";
os = "u-boot";
compression = "gzip";
load = <0x8FFFC0>;
entry = <0x900000>;
signature@1 {
algo = "sha256,rsa4096";
key-name-hint = "key";
};
};
};

Signed-off-by: Mario Six <mario.six@gdsys.cc>
Reviewed-by: Tom Rini <trini@konsulko.com>
common/image-fit.c