[PATCH v3 0/7] vpl: Introduce a verifying program loader

Simon Glass sjg at chromium.org
Tue Jul 27 18:20:49 CEST 2021


Hi Tom,

On Sun, 11 Jul 2021 at 20:19, Simon Glass <sjg at chromium.org> wrote:
>
> U-Boot provides a verified-boot feature based around FIT, but there is
> no standard way of implementing it for a board. At present the various
> required pieces must be built up separately, to produce a working
> implementation. In particular, there is no built-in support for selecting
> A/B boot or recovery mode.
>
> This series introduces VPL, a verified program loader. Its purpose is to
> run the verified-boot process and decide which SPL binary should be run.
> Adding VPL into the boot flow provides a standard way of implementing
> verified boot. So far, only the phase itself is added along with some
> Kconfig options. The next step is to create a build for sandbox.
>
> Changes in v3:
> - Move VPL Kconfig options to a separate patch
> - Add full build support for VPL
>
> Changes in v2:
> - Add some more VPL Kconfig options
>
> Simon Glass (7):
>   doc: Convert SPL documentation to ReST
>   doc: Expand SPL docs to explain the phase and config
>   test: Tidy up test building with SPL
>   spl: Move TPL_HASH_SUPPORT down next to other TPL options
>   binman: Add VPL support
>   Introduce Verifying Program Loader (VPL)
>   vpl: Add Kconfig options for VPL

Any thoughts on this one? I have a few updates so can send a rebase v4
if that helps.

Regards,
Simon


More information about the U-Boot mailing list