[RFC] Kernel command line from FIT image
Olivier Benjamin
olivier.benjamin at bootlin.com
Thu Jan 29 10:40:31 CET 2026
Hello,
While reading section 5.7.3 of the FIT image spec [1], I noticed the
"cmdline" property:
"cmdline
Command line passed to the next boot stage, e.g. the operating system
kernel. The value is an UTF-8 encoded string."
However, looking at the mkimage sources, more specifically
include/image.h [2], it looks like this property is unsupported.
If properly implemented so that the cmdline can be signed, this would
imho be a viable option for passing the dm-verity bootargs in verified boot.
It could be an alternative to the option of sourcing a script that has
to be referenced via the configuration, as discussed in [3].
I have not found a discussion regarding supporting this property in
U-Boot, has it been discussed and rejected, or has it not made it to
contributor's priority list?
Kind regards,
Olivier
[1]: https://fitspec.osfw.foundation/#optional-properties
[2]: https://elixir.bootlin.com/u-boot/v2026.01/source/include/image.h#L1095
[3]:
https://source.denx.de/u-boot/u-boot/-/commit/bcc85b96b5ffbbce19a89747138feb873d918915
More information about the U-Boot
mailing list