[PATCH] arm: imx: Add command to get offset of first image in AHAB OS container

Łukasz Majewski lukma at nabladev.com
Mon Nov 10 20:14:35 CET 2025


Hi Tom,

> On Mon, Nov 10, 2025 at 01:41:00PM +0100, Lukasz Majewski wrote:
> 
> > With current mainline it is possible to check with AHAB if system
> > OS image can be trusted (with 'auth_cntr' command).
> > However, after the validation one needs to use the image (fitImage
> > in this case) itself. Such operation requires getting the offset in
> > the image eligible for AHAB validation to start execution of the
> > fitImage.
> > 
> > Command in this patch allows it, so with:
> > auth_cntr_offset ${addr} auth_cntr_os_offset;
> > setexpr addr ${kernel_addr_r} + ${auth_cntr_os_offset};
> > 
> > it is possible to boot the fitImage after AHAB IP block vaidation.
> > 
> > Signed-off-by: Lukasz Majewski <lukma at nabladev.com>
> > ---
> >  arch/arm/mach-imx/imx8/ahab.c | 50
> > +++++++++++++++++++++++++++++++++++ 1 file changed, 50
> > insertions(+)  
> 
> Can we please split the commands here out and put it under
> cmd/imx/imxh-ahab.c or something? Thanks.
> 

If the community is OK, with such solution (especially Peng and Ji),
then no problem - I can first exclude commands from ahab.c file and
then add the auth_cntr_offset command to the newely created
cmd/imx/imx8-ahab.c file.

-- 
Best regards,

Lukasz Majewski

--
Nabla Software Engineering GmbH
HRB 40522 Augsburg
Phone: +49 821 45592596
E-Mail: office at nabladev.com
Managing Director : Stefano Babic


More information about the U-Boot mailing list