[U-Boot] [PATCH] board: altera: stratix10: add fitImage to support secure boot
Ooi, Joyce
joyce.ooi at intel.com
Thu Nov 21 15:26:56 UTC 2019
FitImage files are added to load Linux kernel image and U-boot
image for Stratix10 Secure Boot.
Signed-off-by: Ooi, Joyce <joyce.ooi at intel.com>
---
board/altera/stratix10-socdk/its/kernel-sign.its | 51 ++++++++++++++++++++++++
board/altera/stratix10-socdk/its/uboot-sign.its | 41 +++++++++++++++++++
2 files changed, 92 insertions(+)
create mode 100644 board/altera/stratix10-socdk/its/kernel-sign.its
create mode 100644 board/altera/stratix10-socdk/its/uboot-sign.its
diff --git a/board/altera/stratix10-socdk/its/kernel-sign.its b/board/altera/stratix10-socdk/its/kernel-sign.its
new file mode 100644
index 0000000..5136365
--- /dev/null
+++ b/board/altera/stratix10-socdk/its/kernel-sign.its
@@ -0,0 +1,51 @@
+/*
+ * Copyright (C) 2019 Intel Corporation. All rights reserved
+ *
+ * SPDX-License-Identifier: GPL-2.0
+ */
+
+/dts-v1/;
+
+/ {
+ description = "Linux kernel image with FDT blob";
+ #address-cells = <1>;
+
+ images {
+ kernel {
+ description = "Linux Kernel";
+ data = /incbin/("Image");
+ type = "kernel";
+ arch = "arm64";
+ os = "linux";
+ compression = "none";
+ load = <0x2080000>;
+ entry = <0x2080000>;
+ hash {
+ algo = "sha256";
+ };
+ };
+ fdt {
+ description = "Linux DTB";
+ data = /incbin/("socfpga_stratix10_socdk.dtb");
+ type = "flat_dt";
+ arch = "arm64";
+ compression = "none";
+ hash {
+ algo = "sha256";
+ };
+ };
+ };
+ configurations {
+ default = "conf";
+ conf {
+ description = "Linux boot configuration";
+ kernel = "kernel";
+ fdt = "fdt";
+ signature {
+ algo = "sha256,rsa4096";
+ key-name-hint = "dev";
+ sign-images = "fdt", "kernel";
+ };
+ };
+ };
+};
diff --git a/board/altera/stratix10-socdk/its/uboot-sign.its b/board/altera/stratix10-socdk/its/uboot-sign.its
new file mode 100644
index 0000000..16af921
--- /dev/null
+++ b/board/altera/stratix10-socdk/its/uboot-sign.its
@@ -0,0 +1,41 @@
+/*
+ * Copyright (C) 2019 Intel Corporation. All rights reserved
+ *
+ * SPDX-License-Identifier: GPL-2.0
+ */
+
+/dts-v1/;
+
+/ {
+ description = "Authenticator";
+ #address-cells = <1>;
+
+ images {
+ standalone {
+ description = "Authenticator binary";
+ data = /incbin/("../../../../u-boot.bin");
+ type = "standalone";
+ arch = "arm64";
+ compression = "none";
+ load = <0x1000>;
+ entry = <0x1000>;
+ os = "u-boot";
+ hash {
+ algo = "sha256";
+ };
+ };
+ };
+
+ configurations {
+ default = "conf";
+ conf {
+ description = "Authenticator fitImage";
+ standalone = "standalone";
+ signature {
+ algo = "sha256,rsa4096";
+ key-name-hint = "dev";
+ sign-images = "standalone";
+ };
+ };
+ };
+};
--
1.9.1
More information about the U-Boot
mailing list