[PATCH v3 6/6] doc: capsule: Document the new mechanism to embed ESL file into dtb
Ilias Apalodimas
ilias.apalodimas at linaro.org
Mon Aug 21 11:23:29 CEST 2023
On Mon, 21 Aug 2023 at 10:29, Sughosh Ganu <sughosh.ganu at linaro.org> wrote:
>
> Update the document to specify how the EFI Signature List(ESL) file
> can be embedded into the platform's dtb as part of the U-Boot build.
>
> Signed-off-by: Sughosh Ganu <sughosh.ganu at linaro.org>
> ---
> Changes since V2:
> * Rephrase the statements in a couple of places as suggested by Ilias.
>
> doc/develop/uefi/uefi.rst | 19 +++++--------------
> 1 file changed, 5 insertions(+), 14 deletions(-)
>
> diff --git a/doc/develop/uefi/uefi.rst b/doc/develop/uefi/uefi.rst
> index 3ce579d46e..f422915ef5 100644
> --- a/doc/develop/uefi/uefi.rst
> +++ b/doc/develop/uefi/uefi.rst
> @@ -539,20 +539,11 @@ and used by the steps highlighted below.
> ...
> }
>
> -You can do step-4 manually with
> -
> -.. code-block:: console
> -
> - $ dtc -@ -I dts -O dtb -o signature.dtbo signature.dts
> - $ fdtoverlay -i orig.dtb -o new.dtb -v signature.dtbo
> -
> -where signature.dts looks like::
> -
> - &{/} {
> - signature {
> - capsule-key = /incbin/("CRT.esl");
> - };
> - };
> +You can perform step-4 through the Kconfig symbol
> +CONFIG_EFI_CAPSULE_ESL_FILE. This symbol points to the esl file
> +generated in step-2. Once the symbol has been populated with the path
> +to the esl file, it will automatically get embedded into the
> +platform's dtb as part of U-Boot build.
>
> Anti-rollback Protection
> ************************
> --
> 2.34.1
>
Reviewed-by: Ilias Apalodimas <ilias.apalodimas at linaro.org>
More information about the U-Boot
mailing list