Commit Graph

9 Commits

Author SHA1 Message Date
Javier Viguera 47dbfee270 trustfence-sign-artifact: fix kernel load address for u-boot v2024
U-boot v2024 changed the default load address (SYS_LOAD_ADDR) for CC8M
platforms to:
* Ensure the kernel load address is 2MB-aligned (avoiding extra memory
  copy)
* Prevent overlap with the fixed DEK blob address at 0x40400000
    
Update the boot artifacts signing script accordingly.

https://onedigi.atlassian.net/browse/DEL-9537
https://onedigi.atlassian.net/browse/DEL-9541
https://onedigi.atlassian.net/browse/DUB-1099

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2025-04-04 11:15:29 +02:00
Javier Viguera 3d2718abb7 trustfence-sign-artifact: fix AHAB-containerizing command for ccimx91
The ccmx91 uses the same AHAB-containerizing command as the ccimx93,
so fix the code to remove the hardcoding check for the ccimx93.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-11-20 18:57:24 +01:00
Mike Engel d11b291f9a meta-digi: add new CCMX91 platform into DEY
This commits adds the CCMX91 platform to the DEY
build system. Furthermore, it creates generic ccimx9
support to be used for the CCiMX91 and CCiMX93
platform.

https://onedigi.atlassian.net/browse/DEL-9106

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2024-07-19 07:32:00 +02:00
Javier Viguera f67d59d7b8 meta-digi: support SRK revocation mask when signing boot artifacts
The script to sign the boot artifacts lacked the support to configure the
revocation mask. The at-the-moment supported platforms did not need it,
but the ccimx93 does need it, so implement it in this commit.

https://onedigi.atlassian.net/browse/DEL-8704

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-03-12 18:12:56 +01:00
Javier Viguera 15211c3133 trustfence-sign-artifact: implement support for ccimx93
https://onedigi.atlassian.net/browse/DEL-8704

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-03-12 12:18:59 +01:00
Javier Viguera 765fa48acc trustfence-sign-artifact: move srktool parameters to the platform data
With the introduction of the ccimx93 support in the following commits, the
srktool parameters not only differ for HAB/AHAB devices but also between
devices using AHAB (for example, different parameters for ccimx8x and
ccimx93). Thus, move this information to the platform-specific data table.

https://onedigi.atlassian.net/browse/DEL-8704

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-03-12 12:18:59 +01:00
Javier Viguera d8454cecc7 trustfence-sign-artifact: create a table for platform-specific data
It is a cosmetic change, as there is no change in functionality, but
convert the if..elif..fi structure to a table with the platform-specific
data, so it's easier to maintain and extend.

https://onedigi.atlassian.net/browse/DEL-8704

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-03-12 12:18:59 +01:00
Mike Engel 1122980ab9 trustfence: add ccimx6qp platform to the sign tool
Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2023-06-20 16:46:16 +02:00
Hector Palacios 1a81de2c2f trustfence-sign-tools: rename sign script with SOC vendor suffix
This is in preparation of using the same script name for different SOC
vendors (NXP and STM).

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2023-05-10 17:33:23 +02:00