Hello, While reading section 5.7.3 of the FIT image spec [1], I noticed the "cmdline" property:
"cmdline Command line passed to the next boot stage, e.g. the operating system kernel. The value is an UTF-8 encoded string." However, looking at the mkimage sources, more specifically include/image.h [2], it looks like this property is unsupported. If properly implemented so that the cmdline can be signed, this would imho be a viable option for passing the dm-verity bootargs in verified boot. It could be an alternative to the option of sourcing a script that has to be referenced via the configuration, as discussed in [3]. I have not found a discussion regarding supporting this property in U-Boot, has it been discussed and rejected, or has it not made it to contributor's priority list? Kind regards, Olivier [1]: https://fitspec.osfw.foundation/#optional-properties [2]: https://elixir.bootlin.com/u-boot/v2026.01/source/include/image.h#L1095 [3]: https://source.denx.de/u-boot/u-boot/-/commit/bcc85b96b5ffbbce19a89747138feb873d918915
