[v4 16/17] arm: socfpga: soc64: Enable FIT image generation using binman

[Lim, Elly Siew Chin]

> -----Original Message-----
> From: Simon Glass <sjg at chromium.org>
> Sent: Sunday, December 20, 2020 11:58 PM
> To: Lim, Elly Siew Chin <elly.siew.chin.lim at intel.com>
> Cc: U-Boot Mailing List <u-boot at lists.denx.de>; Marek Vasut
> <marex at denx.de>; Tan, Ley Foon <ley.foon.tan at intel.com>; See, Chin Liang
> <chin.liang.see at intel.com>; Simon Goldschmidt
> <simon.k.r.goldschmidt at gmail.com>; Chee, Tien Fong
> <tien.fong.chee at intel.com>; Westergreen, Dalon
> <dalon.westergreen at intel.com>; Gan, Yau Wai <yau.wai.gan at intel.com>
> Subject: Re: [v4 16/17] arm: socfpga: soc64: Enable FIT image generation using
> binman
> 
> Hi Siew,
> 
> On Sun, 20 Dec 2020 at 02:06, Lim, Elly Siew Chin <elly.siew.chin.lim at intel.com>
> wrote:
> >
> > Hi Simon,
> >
> > We call binman to generate itb file in "make fit-itb".
> >
> > We didn't put it in default binman flow is because it require Arm-trusted-
> firmware (bl31.bin) and Linux Image and dtb to build the itb file. These files are
> not part of u-boot. The user will hit compilation error if these files are not
> prepared before they build u-boot. Besides, we are in progressing enabling
> Vendor Authorized Boot (VAB) for Intel SoC FPGA, which requires u-boot prope,
> dtb, bl31.bin and Linux Image, dtb to be signed before generate the itb. The
> signing process involves another signing tool.
> >
> > We prefer not to add new dependency into default u-boot compilation
> process. As a result, we build itb files with "make fit-itb".
> 
> The ATF stuff is not new. On various we use the 'external' flag (or blob-ext entry
> type) to handle this. See atf_bl31.py for example. If the file is not available, a
> warning is printing but the build succeeds.
> 
> Binman should be able to generate all the images. The split of responsibilities
> should be:
> 
> - Makefile - builds the binaries
> - Other projects - build their binaries
> - binman - put it all together into images
> 
> Regards,
> Simon
> 

Hi Simon,

I get what you mean, Simon. I will do the following changes:

(1) I will change blob to blob-ext entry in binman dts node for all input files. 
-					uboot_blob: blob {
+					uboot_blob: blob-ext {

(2) I will revert all changes in Makefile to allow binman to run by default. And, I will remove "make fit-itb". Yes, I saw that it will report warning instead of error.

> - Makefile - builds the binaries
BINMAN  all
Image 'main-section' is missing external blobs and is non-functional: blob-ext

Some images are invalid

(3) We will directly use binman command to generate the fit image. Binman will report error if the input file doesn't exist.
> - binman - put it all together into images

bash-4.1$ ./tools/binman/binman build -u -d u-boot.dtb -O . -i u-boot
bash-4.1$ ./tools/binman/binman build -u -d u-boot.dtb -O . -i kernel
binman: [Errno 2] No such file or directory: 'Image'


Thanks,
Siew Chin

> 
> >
> > Thanks,
> > Siew Chin
> >
> >
> > > -----Original Message-----
> > > From: Simon Glass <sjg at chromium.org>
> > > Sent: Saturday, December 19, 2020 10:29 AM
> > > To: Lim, Elly Siew Chin <elly.siew.chin.lim at intel.com>
> > > Cc: U-Boot Mailing List <u-boot at lists.denx.de>; Marek Vasut
> > > <marex at denx.de>; Tan, Ley Foon <ley.foon.tan at intel.com>; See, Chin
> > > Liang <chin.liang.see at intel.com>; Simon Goldschmidt
> > > <simon.k.r.goldschmidt at gmail.com>; Chee, Tien Fong
> > > <tien.fong.chee at intel.com>; Westergreen, Dalon
> > > <dalon.westergreen at intel.com>; Gan, Yau Wai <yau.wai.gan at intel.com>
> > > Subject: Re: [v4 16/17] arm: socfpga: soc64: Enable FIT image
> > > generation using binman
> > >
> > > Hi Siew,
> > >
> > > On Thu, 17 Dec 2020 at 20:29, Siew Chin Lim
> > > <elly.siew.chin.lim at intel.com>
> > > wrote:
> > > >
> > > > Add new build target "fit-itb" for FIT image generation.
> > > >
> > > > In preparation to support Vendor Authorized Boot (VAB) for Intel
> > > > SOC64 device in near future. With VAB, u-boot proper, dtb and arm
> > > > trusted firmware need to be signed before FIT image generation.
> > > >
> > > > To align user experience for ATF boot with and without VAB
> > > > feature, we skip binman for ARCH_SOCFPGA in default Makefile flow.
> > > > User always use 'make fit-itb' to generate FIT image after
> > > > successfully compile u-boot.
> > > >
> > > > Signed-off-by: Siew Chin Lim <elly.siew.chin.lim at intel.com>
> > > >
> > > > ---
> > > > v2
> > > > ---
> > > > Adjust BINMAN sequence in code, sorted by alphabetical order.
> > > > ---
> > > >  Makefile                      | 7 +++++++
> > > >  arch/arm/mach-socfpga/Kconfig | 2 ++
> > > >  2 files changed, 9 insertions(+)
> > >
> > > Can't we make binman do this?
> > >
> > > Regards,
> > > Simon