Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

New layout #6

Merged
merged 4 commits into from Oct 18, 2016
Merged

New layout #6

merged 4 commits into from Oct 18, 2016

Conversation

Ham22
Copy link
Member

@Ham22 Ham22 commented Oct 15, 2016

This allows booting our new style fitImage as added here CreatorDev/openwrt#6 . It also has support for booting legacy uImage but only for nand boot in order support any initial boards already out there.

Note that for proof of concept purposes a key pair has been added. If you enable verification with 'setenv bootm_verify y' then this is also capable of performing verified boot of a fitImage that has been signed with this key.

This connects to CreatorDev/openwrt#14

u-boot already has a mechanism to call the altbootcmd so use it
rather than using our own impelementation.

Also dropped the single nand boot command as it was using the same
partition layout as dual nand boot anyway so was pointless.
@Ham22 Ham22 mentioned this pull request Oct 15, 2016
The code has evolved to have many ways of booting which use similar
code. Have refactored out the duplicate bits and whitespace issues.

Have also added some useful log messages.

Signed-off-by: Ian Pozella <Ian.Pozella@imgtec.com>
Currently we assume the kernel is in the ubifs itself but we now
have builds which put it in its own volume named 'kernel'. So make
sure we check this first.

Note legacy boot is not supported when kernel is in its own
volume.

Signed-off-by: Ian Pozella <Ian.Pozella@imgtec.com>
Add a hardcoded development key pair so that they can be used to
demonstrate verified boot without having to add it with mkimage
which adds a dependency of the fitimage already existing.

This change cannot be upstreamed. Note also that because this also
distributes the private key no system protected by this can be
condidered secure.

Signed-off-by: Ian Pozella <Ian.Pozella@imgtec.com>
@nikhil-zinjurde-imgtec
Copy link
Contributor

Verified nandboot, usbboot, mmcboot and verified boot

@nikhil-zinjurde-imgtec nikhil-zinjurde-imgtec merged commit d0483d7 into CreatorDev:2015.10 Oct 18, 2016
@Ham22 Ham22 deleted the new-layout branch November 1, 2016 10:20
@Ham22 Ham22 added this to the factory release v0.10.5 milestone Nov 29, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants