065cf3e9c4
kirkstone migration: general update to the new override syntax
...
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2022-06-20 11:39:57 +02:00
54ddb775c4
trustfence-sign-artifact.sh: remove CONFIG_SIGN_MODE as a mandatory parameter
...
The sign mode needed for each platform is invariable, and since the platform
is already a mandatory parameter for the script, we can store this information
implicitly. Reflect this change in every recipe where the script is used, but
keep the variable at the Yocto level since it's still needed in several places.
https://onedigi.atlassian.net/browse/DEL-7862
Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2022-03-22 12:47:32 +01:00
52c37a6fe5
hardknott: meta-digi: replace GPL-2.0 license file with GPL-2.0-only
...
The common license file GPL-2.0 is now called GPL-2.0-only in poky, so we need
to reflect this name change to avoid errors
Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2022-01-05 11:09:46 +01:00
ef85b7d8f4
Merge tag 'dey-3.2-r2.2' into dey-3.2/master
...
Digi Embedded Yocto 3.2-r2.2
Manually changed recipes to use the master branches instead of the fixed SHA1
from the last release.
Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2022-01-03 11:49:48 +01:00
23d067b8b9
meta-digi: update revisions for dey-3.2-r2.2
...
Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2021-12-09 18:12:40 +01:00
70de030974
Revert "trustfence: change RAM location to the same values used in u-boot"
...
The AHAB decryption process takes the encrypted file from the address defined
in U-Boot and decrypts it into the address defined in this script. If both
addresses are the same, the decryption process ends up failing. This
happens even for signed-only images.
Maintain the original addresses in this script so they do not collide.
This reverts commit c970d87d5a
2021-12-09 09:19:59 +01:00
c8c3381ba3
meta-digi: revert revisions to AUTOREV
...
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2021-12-02 23:26:47 +01:00
44ff44680f
meta-digi: update revisions for dey-3.2-r2.1
...
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2021-12-02 23:26:47 +01:00
c970d87d5a
trustfence: change RAM location to the same values used in u-boot
...
Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2021-12-01 13:11:39 +01:00
ddec434bc8
trustfence: move CC8X read-only signature to the end of the image
...
This commit moves the read-only container signature to the end of
rootfs image for the CC8X platform.
Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2021-12-01 13:11:39 +01:00
82dd2cbc4d
trustfence-sign-artifact: re-use RAMDISK address for rootfs
...
Re-use RAMDISK address for authenticating the rootfs instead
of allocating a new address (if authenticating a rootfs, we're
not using a ramdisk).
Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2021-11-12 09:01:44 +01:00
fe2a1f281e
Merge branch 'dey-3.2/master' into dey-3.2/maint
...
Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2021-11-11 16:23:43 +01:00
eb730358e5
trustfence: add read only rootfs signing option to signing script
...
Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2021-11-11 13:37:30 +01:00
c33fc8a7fe
uboot/linux: fix build from internal MTK Digi git server
...
Enabling DIGI_INTERNAL_GIT defaults to LOG server. The build from local
MTK Digi server was broken.
Fix uboot and linux recipes declaring different repo paths depending on
whether the local remote is LOG or MTK.
Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2021-09-09 17:38:44 +02:00
9352fc1395
digi: [cosmetic] remove final slash from Digi remotes and move it to recipes
...
Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2021-09-07 11:01:29 +02:00
0e2e09044e
meta-digi: revert revisions to AUTOREV
...
Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
2021-07-07 12:56:23 +02:00
aa92d2d13a
meta-digi: update revisions for dey-3.2-r1.2
...
Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
2021-07-07 12:56:23 +02:00
95c8629cba
meta-digi: revert revisions to AUTOREV
...
Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
2021-07-02 14:42:26 +02:00
d98487a309
meta-digi: update revisions for dey-3.2-r1.1
...
Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
2021-07-02 14:42:09 +02:00
f2286f3d26
meta-digi: branch to dey-3.2/maint
...
Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2021-06-07 12:56:58 +02:00
8182824e43
Merge branch 'dey-3.0/maint' into dey-3.0/master
...
Manually changed recipes to use the master branches instead of the fixed SHA1
from the last release.
2021-04-27 17:18:50 +02:00
4c9546357d
meta-digi: revert revisions to AUTOREV
...
This reverts commit 7728d5f458
2021-03-08 18:07:48 +01:00
7728d5f458
meta-digi: update revisions for dey-3.0-r4.1
...
Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2021-03-08 18:06:59 +01:00
1134e4c07c
trustfence-sign-tools: don't encrypt artifacts in ccimx8mn/ccimx8mm projects
...
Attempting to boot encrypted artifacts on these platforms will result in HAB
events caused by CAAM errors. This is due to the CAAM being configured for
non-secure contexts (in regards to Trustzone) while the HAB expects it to be
configured for secure contexts.
For now, only sign artifacts for these platforms even if the project has the
encryption feature enabled.
https://jira.digi.com/browse/DUB-993
Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2021-03-04 13:14:13 +01:00
f154d811a6
Merge branch 'dey-3.0/master' into fgilmar/merge_to_maint
...
# Conflicts:
# meta-digi-dey/recipes-support/opencv/opencv_4.4.0.imx.bb
2021-03-01 16:53:35 +01:00
daae78b60c
trustfence-sign-tools: add ccimx8mm support to the artifact signing script
...
https://jira.digi.com/browse/DEL-7420
Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2021-02-12 11:37:15 +01:00
b0e535b28c
change recipes to build from 'master' branches
...
Signed-off-by: Hector Bujanda <hector.bujanda@digi.com>
2021-01-26 11:51:11 +01:00
61497fb2dd
meta-digi: revert revisions to AUTOREV
...
This reverts commit bc843e239d
2021-01-21 12:57:49 +01:00
bc843e239d
meta-digi: update revisions for dey-3.0-r3.2
...
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2021-01-21 12:56:46 +01:00
de2e9e40ad
meta-digi: revert revisions to AUTOREV
...
This reverts commit c22e8faf90
2021-01-18 18:37:09 +01:00
c22e8faf90
meta-digi: update revisions for dey-3.0-r3.1
...
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2021-01-18 18:30:50 +01:00
39baff1e60
trustfence: add new TRUSTFENCE_SRK_REVOKE_MASK variable
...
In order to revoke SRKs in platforms with AHAB we need to set a mask
during the signing/encryption process.
Create new TRUSTFENCE_SRK_REVOKE_MASK variable to export the
SRK_REVOKE_MASK variable required by the imx-boot signing script.
The revoke mask is not necessary for signing/encryption of other artifacts,
so set it by default to 0x0.
Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
2021-01-13 17:00:29 +01:00
6c7bd330a4
trustfence-sign-artifact: add support for ccimx8x encryption
...
Add support to sign and encrypt OS artifacts for AHAB devices.
https://jira.digi.com/browse/DEL-7371
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2021-01-08 13:03:36 +01:00
e0055ce0cb
Merge branch 'dey-3.0/master' into dey-3.0/maint
...
Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2020-12-28 12:28:39 +01:00
024732f8cc
trustfence: create 128Bit dek when using MX8MN.
...
This commit creates a 128Bit DEK, which is the max supported
length at the moment for the iMX8M.
Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2020-12-28 11:04:28 +01:00
7eaa7670a7
change recipes to build from 'master' branches
...
Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2020-10-29 12:29:48 +01:00
51319426f8
meta-digi: revert revisions to AUTOREV
...
This reverts commit 4dfdf2d435
2020-10-23 13:09:52 +02:00
4dfdf2d435
meta-digi: update revisions for dey-3.0-r2.4
...
Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2020-10-23 13:09:44 +02:00
a64005482b
meta-digi: revert revisions to AUTOREV
...
This reverts commit 3a299682aa
2020-10-22 16:14:30 +02:00
3a299682aa
meta-digi: update revisions for dey-3.0-r2.3
...
Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2020-10-22 16:14:30 +02:00
5a8b929694
meta-digi: revert revisions to AUTOREV
...
This reverts commit e1129bc8e4
2020-10-20 17:15:59 +02:00
e1129bc8e4
meta-digi: update revisions for dey-3.0-r2.2
...
Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2020-10-20 17:15:59 +02:00
fb3c7d5e3f
meta-digi: revert revisions to AUTOREV
...
This reverts commit 76ec96632760fd3ee6113a74b8363a688edf99c3.
Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2020-10-08 16:37:51 +02:00
519b924f12
meta-digi: update revisions for dey-3.0-r2.1
...
Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2020-10-08 16:37:51 +02:00
27be059de4
digi: switch recipes to maint branches
...
Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2020-09-16 10:48:08 +02:00
6a6ff5080b
trustfence: [cosmetic] fix typos on cst templates
...
https://jira.digi.com/browse/DEL-7175
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2020-09-01 11:29:25 +02:00
e56f201a57
Merge branch 'dey-3.0/maint' into 'dey-3.0/master'
...
Merge at commit right after 'dey-3.0-r1.3'.
Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2020-06-29 16:41:36 +02:00
332438f5b7
meta-digi: revert revisions to AUTOREV
2020-06-25 13:08:41 +02:00
5ebc893b58
meta-digi: update revisions for dey-3.0-r1.3
...
Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2020-06-25 12:15:52 +02:00
d36bce0ee4
meta-digi: revert revisions to AUTOREV
2020-06-22 17:37:52 +02:00
Javier Viguera
Gabriel Valcazar
Gonzalo Ruiz
Arturo Buzarra
Mike Engel
Hector Palacios
Francisco Gil
Hector Bujanda