[PATCH] arm: imx: Add command to get offset of first image in AHAB OS container
Łukasz Majewski
lukma at nabladev.com
Mon Nov 10 20:14:35 CET 2025
Hi Tom,
> On Mon, Nov 10, 2025 at 01:41:00PM +0100, Lukasz Majewski wrote:
>
> > With current mainline it is possible to check with AHAB if system
> > OS image can be trusted (with 'auth_cntr' command).
> > However, after the validation one needs to use the image (fitImage
> > in this case) itself. Such operation requires getting the offset in
> > the image eligible for AHAB validation to start execution of the
> > fitImage.
> >
> > Command in this patch allows it, so with:
> > auth_cntr_offset ${addr} auth_cntr_os_offset;
> > setexpr addr ${kernel_addr_r} + ${auth_cntr_os_offset};
> >
> > it is possible to boot the fitImage after AHAB IP block vaidation.
> >
> > Signed-off-by: Lukasz Majewski <lukma at nabladev.com>
> > ---
> > arch/arm/mach-imx/imx8/ahab.c | 50
> > +++++++++++++++++++++++++++++++++++ 1 file changed, 50
> > insertions(+)
>
> Can we please split the commands here out and put it under
> cmd/imx/imxh-ahab.c or something? Thanks.
>
If the community is OK, with such solution (especially Peng and Ji),
then no problem - I can first exclude commands from ahab.c file and
then add the auth_cntr_offset command to the newely created
cmd/imx/imx8-ahab.c file.
--
Best regards,
Lukasz Majewski
--
Nabla Software Engineering GmbH
HRB 40522 Augsburg
Phone: +49 821 45592596
E-Mail: office at nabladev.com
Managing Director : Stefano Babic
More information about the U-Boot
mailing list