The fit_check_sign tool checks that the configuration is correct, but does not check each image within that configuration. This series adds that feature, at least for uncompressed images.
In order to arrange this, cmd_bootm.c is split up into three files, one for the command processing, one for the OS booting and one for the general bootm processing. Apart from reducing the size of an over-large C file, this makes it easier to include what is needed for host compilation. As part of this, Android boot is enabled for sandbox in case someone wants to write a test for it. Several people have had difficulty getting verified boot running on their board with the instructions available. Following on from the previous series which enabled verified boot on the Beaglebone Black, documentation is added with a step-by-step guide on how to get this running. (A few tidy-up patches have been added as requested based on comments on the beaglebone vboot enablement series) This series is available at u-boot-x86.git branch 'bone'. Changes in v2: - Add update patch to correct and expand -ENOSPC error handling - Update test output in signature.txt Simon Glass (14): hash: Use uint8_t in preference to u8 mkimage: Automatically expand FDT in more cases fdt: Rename the DEV_TREE_BIN Makefile flag to to EXT_DTB tools: Check arguments in fit_check_sign/fit_info Reverse the meaning of the fit_config_verify() return code bootm: Split out code from cmd_bootm.c image: Remove the fit_load_image() property parameter bootm: Support android boot on sandbox Fix small 'case' typo in image-fit.c Avoid including config.h in command.h Allow compiling common/bootm.c on with HOSTCC bootm: Move decompression code into its own function Enhance fit_check_sign to check all images Add documentation for verified boot on Beaglebone Black Makefile | 2 +- common/Makefile | 2 +- common/bootm.c | 913 ++++++++++++++++++++++++ common/bootm_os.c | 480 +++++++++++++ common/cmd_bootm.c | 1345 +---------------------------------- common/cmd_fdt.c | 2 +- common/hash.c | 12 +- common/image-fdt.c | 1 - common/image-fit.c | 36 +- common/image-sig.c | 4 +- common/image.c | 2 +- doc/README.fdt-control | 4 +- doc/uImage.FIT/beaglebone_vboot.txt | 608 ++++++++++++++++ doc/uImage.FIT/signature.txt | 3 + dts/Makefile | 4 +- include/bootm.h | 57 ++ include/command.h | 1 - include/configs/sandbox.h | 1 + include/hash.h | 3 +- include/image.h | 10 +- lib/rsa/rsa-sign.c | 27 +- tools/Makefile | 1 + tools/fit_check_sign.c | 17 +- tools/fit_info.c | 12 + tools/image-host.c | 16 +- 25 files changed, 2184 insertions(+), 1379 deletions(-) create mode 100644 common/bootm.c create mode 100644 common/bootm_os.c create mode 100644 doc/uImage.FIT/beaglebone_vboot.txt create mode 100644 include/bootm.h -- 2.0.0.526.g5318336 _______________________________________________ U-Boot mailing list U-Boot@lists.denx.de http://lists.denx.de/mailman/listinfo/u-boot