[PATCH] arm: imx: Add command to get offset of first image in AHAB OS container

Tom Rini trini at konsulko.com
Mon Nov 10 15:53:50 CET 2025


On Mon, Nov 10, 2025 at 01:41:00PM +0100, Lukasz Majewski wrote:

> With current mainline it is possible to check with AHAB if system OS image
> can be trusted (with 'auth_cntr' command).
> However, after the validation one needs to use the image (fitImage in this
> case) itself. Such operation requires getting the offset in the image
> eligible for AHAB validation to start execution of the fitImage.
> 
> Command in this patch allows it, so with:
> auth_cntr_offset ${addr} auth_cntr_os_offset;
> setexpr addr ${kernel_addr_r} + ${auth_cntr_os_offset};
> 
> it is possible to boot the fitImage after AHAB IP block vaidation.
> 
> Signed-off-by: Lukasz Majewski <lukma at nabladev.com>
> ---
>  arch/arm/mach-imx/imx8/ahab.c | 50 +++++++++++++++++++++++++++++++++++
>  1 file changed, 50 insertions(+)

Can we please split the commands here out and put it under
cmd/imx/imxh-ahab.c or something? Thanks.

-- 
Tom
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <https://lists.denx.de/pipermail/u-boot/attachments/20251110/c76caf07/attachment.sig>


More information about the U-Boot mailing list