[PATCH u-boot v2019.04-aspeed-openbmc v3 0/4] FIT verification

Joel Stanley joel at jms.id.au
Thu Jan 28 11:15:16 AEDT 2021


As part of our effort to enable secure boot in openbmc, this turns on
FIT verification in the SPL and u-boot.

It adjusts the SRAM layout to accommodate the extra code size, moving
the heap to the non-parity checked 24KB of SRAM.

It also modifies the way the SPL is built, including disabling features.

v3 Reorders the patches to put the size reduction changes first, and
then enables signature verification to ensure the build can be bisected.

The ymodem disable patch is dropped, as we fit cleanly under the 64KB
boundary with the feature enabled.

The general cleanup patch is dropped, except for the DOS_PARTITION
change which was added to the SPL cleanup patch. These cleanups will be
posted separately at a later date.

           Size   Delta
 HEAD     44054
 patch 1  43442    -612
 patch 2  42337   -1105
 patch 3  42337       0
 patch 4  63378  +21041

Joel Stanley (4):
  ast2600: Allow selection of SPL boot devices
  config: ast2600: Reduce SPL image size
  ast2600: Modify SPL SRAM layout
  config: ast2600: Enable FIT signature verification

 arch/arm/mach-aspeed/ast2600/Kconfig       | 12 ++++++++++++
 arch/arm/mach-aspeed/ast2600/spl_boot.c    |  9 +++++++++
 configs/ast2600_openbmc_spl_emmc_defconfig |  9 ++++++++-
 include/configs/evb_ast2600a1_spl.h        |  4 ++--
 4 files changed, 31 insertions(+), 3 deletions(-)

-- 
2.29.2



More information about the openbmc mailing list