From c59a5fdfe9d8766d486b7f60fa81e85699d60dd5 Mon Sep 17 00:00:00 2001 From: Arturo Buzarra Date: Mon, 24 Mar 2025 13:09:59 +0100 Subject: [PATCH] u-boot-dey: ccmp2: fix support for flashing Trustfence artifacts Both boot artifacts now use the same signed label, so this commit removes unnecessary logic and updates the UUU install script to support the new boot artifact naming. It also fixes the detection of signed artifacts by checking for the presence of the FIP artifact, instead of relying on a U-BOOT artifact that does not exist on this platform. https://onedigi.atlassian.net/browse/DEL-9442 Signed-off-by: Arturo Buzarra --- meta-digi-arm/recipes-bsp/u-boot/u-boot-dey.inc | 4 ---- .../u-boot/u-boot-dey/ccmp2/install_linux_fw_uuu.sh | 4 ++-- 2 files changed, 2 insertions(+), 6 deletions(-) diff --git a/meta-digi-arm/recipes-bsp/u-boot/u-boot-dey.inc b/meta-digi-arm/recipes-bsp/u-boot/u-boot-dey.inc index 58f4abc40..8bcb66272 100644 --- a/meta-digi-arm/recipes-bsp/u-boot/u-boot-dey.inc +++ b/meta-digi-arm/recipes-bsp/u-boot/u-boot-dey.inc @@ -95,13 +95,9 @@ build_uboot_scripts() { fi else sed -i -e 's,##SIGNED##,_Signed,g' ${TMP_INSTALL_SCR} - sed -i -e 's,##SIGNED_TFA##,_signed,g' ${TMP_INSTALL_SCR} fi else sed -i -e 's,-##SIGNED##,,g' -e 's,##SIGNED##,,g' ${TMP_INSTALL_SCR} - if [ "${DEY_SOC_VENDOR}" = "STM" ]; then - sed -i -e 's,##SIGNED_TFA##,,g' ${TMP_INSTALL_SCR} - fi fi if [ "${f_ext}" = "txt" ]; then mkimage -T script -n "DEY firmware install script" -C none -d ${TMP_INSTALL_SCR} ${DEPLOYDIR}/${f%.*}.scr diff --git a/meta-digi-arm/recipes-bsp/u-boot/u-boot-dey/ccmp2/install_linux_fw_uuu.sh b/meta-digi-arm/recipes-bsp/u-boot/u-boot-dey/ccmp2/install_linux_fw_uuu.sh index a4bb3eeda..dc2c4b0f0 100644 --- a/meta-digi-arm/recipes-bsp/u-boot/u-boot-dey/ccmp2/install_linux_fw_uuu.sh +++ b/meta-digi-arm/recipes-bsp/u-boot/u-boot-dey/ccmp2/install_linux_fw_uuu.sh @@ -108,7 +108,7 @@ echo "Determining image files to use..." # Determine ATF file to program if [ -z "${INSTALL_ATF_FILENAME}" ]; then - INSTALL_ATF_FILENAME="tf-a-##MACHINE##-optee-emmc.stm32##SIGNED_TFA##" + INSTALL_ATF_FILENAME="tf-a-##MACHINE##-optee-emmc##SIGNED##.stm32" fi INSTALL_METADATA_FILENAME="metadata-##MACHINE##.bin" @@ -306,7 +306,7 @@ else fi # Set the dboot_kernel_var to fitimage if Trustfence is enabled -if [ "${TRUSTFENCE}" = "true" ] || echo "${INSTALL_UBOOT_FILENAME}" | grep -q -e "signed"; then +if [ "${TRUSTFENCE}" = "true" ] || echo "${INSTALL_FIP_FILENAME}" | grep -q -e "Signed"; then uuu fb: ucmd setenv dboot_kernel_var fitimage uuu fb: ucmd saveenv fi