Commit Graph

28 Commits

Author SHA1 Message Date
Mike Engel d11b291f9a meta-digi: add new CCMX91 platform into DEY
This commits adds the CCMX91 platform to the DEY
build system. Furthermore, it creates generic ccimx9
support to be used for the CCiMX91 and CCiMX93
platform.

https://onedigi.atlassian.net/browse/DEL-9106

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2024-07-19 07:32:00 +02:00
Isaac Hermida 0c642ed7ec Update Digi Copyright header
Standarize the Copyright header according to company policy.

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
2024-07-15 09:28:58 +02:00
Gabriel Valcazar d07e68b5a2 imx-boot: apply patches to fix CVE-2023-39902 on i.MX8M platforms
The patches have been backported from the lf-6.1.36-2.1.0 release of
imx-mkimage.

https://onedigi.atlassian.net/browse/DUB-1081

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2024-06-06 14:59:26 +02:00
Mike Engel 55b313e7d2 trustfence: create symbolic links for all SOC revisions of the CCiMX8X
This commit creates symbolic links for all SOC revisions
of the CCiMX8X platform.

Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2024-04-24 09:56:37 +02:00
David Escalona bf365df07a imx-boot: generate symlinks for trustfence artifacts
Signed-off-by: David Escalona <david.escalona@digi.com>
2024-01-16 17:55:17 +01:00
Javier Viguera 161c66f5f6 ccimx93: support building bootloader for soc revision A0
Starting with NXP release "lf-6.1.55-2.2.0" the IMX optee fork (based on
version 4.0.0) does not support SOC revision A0. This commit recovers
support to build a bootloader for A0, extending the optee patch for
ccimx93 to support A0 with a build time option, and then extending the
optee-os and imx-boot recipes to build two optee binaries and using them
to generate bootloaders for both SOC revisions.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-01-03 12:00:07 +01:00
Javier Viguera 4566b10751 imx-boot, imx-mkimage: update to NXP's lf-6.1.55-2.2.0 release for ccimx93
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-01-03 12:00:07 +01:00
Francisco Gil fea7e623d7 trustfence: fix building issue with trustfence enabled in cc8x
In commit 2fd1dbfed7, we accidentally removed some changes needed to
build imx-boot with Trustfence enabled, which were added in commit
1ce17da864.

This partially reverts commit 2fd1dbfed7

Signed-off-by: Francisco Gil <francisco.gilmartinez@digi.com>
2023-11-21 10:54:35 +01:00
Javier Viguera 77755ac73c imx-boot: add makefile target to build imx93 A0 SOC revision
Also, set the build of A1 SOC revision by default for ccimx93.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2023-11-02 18:59:06 +01:00
Javier Viguera d55dbce7ae imx-boot, imx-mkimage: update to NXP's lf-6.1.36-2.1.0 release for ccimx93
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2023-10-11 12:10:10 +02:00
Javier Viguera c8a33e8de9 imx-boot: fix build of imx-boot artifacts
Recently, meta-freescale backported the support to build multiple boot
artifacts. This clashes with the changes in our imx-boot bbappend,
so update the bbappend to make it compatible with the latest changes
in meta-freescale.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
(cherry picked from commit 2fd1dbfed7)
2023-10-10 14:13:37 +02:00
Javier Viguera 8f6660c0b0 imx-boot: ccimx93: capture mkimage output into a log file
mkimage output provides some information (basically image offsets) that
cst (code signing tool) uses to sign imx-boot images.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2023-09-25 14:23:40 +02:00
Gabriel Valcazar 1ce17da864 imx-boot: fix ccimx8x builds when Trustfence is enabled
Make a series of changes to make sure the imx-boot signing process works:

    * Store separate mkimage logs for each imx-boot build. In our case, this
      means storing one log per SoC revision. Each SoC revision has a different
      SECO fw binary with varying sizes, which causes offsets of specific
      signing regions to differ among revisions. Since we parse the offsets
      from the logs, we need to make sure the offset information is correct in
      each case.
    * Remove u-boot-atf-container.img in each mkimage iteration, otherwise the
      ATF offset information will be missing from subsequent logs.
    * Implement a separate trustfence_sign_imxboot() function for the ccimx8x
      to iterate through all SoC revisions.

Note that the SPL+AHAB signing script doesn't support imx-boot encryption yet.

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2023-07-10 11:09:37 +02:00
Javier Viguera 837fbec2ca imx-boot, imx-mkimage: update to NXP's lf-6.1.22-2.0.0 release for ccimx93
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2023-07-07 12:22:55 +02:00
Gabriel Valcazar d13b42492f Rework ccimx8x imx-boot/u-boot recipes to reduce number of imx-boot artifacts
Now that both U-Boot and the SCFW can autodetect the RAM configuration, we can
simplify the imx-boot build process to generate two binaries (one per SOC
revision) instead of eight. Build "flash_spl" imx-boot images and use only one
global defconfig for u-boot.

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2023-06-30 15:00:25 +02:00
Gabriel Valcazar 609028fe66 digi-sc-firmware: update to v1.11.0.1
This update includes automatic RAM configuration detection, and only one SCFW
binary is needed for all ccimx8x variants. Adapt the imx-boot recipe
accordingly.

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2023-06-30 15:00:25 +02:00
Gabriel Valcazar 9ce94e4af4 imx-boot: re-add ccimx8x support
Use our custom compile/install/deploy functions from DEY 3.2. NXP's imx-boot
recipe assumes only one U-Boot config and SOC revision, but we have multiple,
so we have to rewrite all of these functions.

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2023-06-29 16:25:55 +02:00
Javier Viguera 88d7cc0a77 imx-boot, imx-mkimage: update to NXP's lf-6.1.1_1.0.0 release for ccimx93
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2023-06-16 16:19:28 +02:00
Javier Viguera 82dc50b6ef meta-digi: update layer to follow changes in meta-freescale
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2023-02-22 11:05:08 +01:00
Javier Viguera 24f0f6ff79 imx-boot: add trustfence support for ccimx8m
https://onedigi.atlassian.net/browse/DEL-8362

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2023-02-13 18:38:08 +01:00
Javier Viguera 763ddf471b ccimx93: imx-boot: generate properly named boot artifacts
Although in theory, you can use any label to name the different u-boot
build configurations, we have them coupled to machine names in the
boot-artifacts bbclass, and also in the default boot artifact filename
in the firmware installation scripts.

So fix that up for the ccimx93 in the machine config, and create the
proper symlinks in the do_deploy imx-boot recipe.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2023-01-03 17:53:40 +01:00
Javier Viguera 345306b94c imx-boot, imx-mkimage: update to version lf-5.15.71-2.2.0
Both recipes (imx-boot and imx-mkimage) use the same source code
repository, so update both of them to the new NXP release, by copying
with minimal changes the recipes in meta-imx.

Also convert the original 'imx-mkimage' recipe, which was only for
native class, to a full target, native, nativesdk recipe. We need this
to be able to include the nativesdk one in our toolchain.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2022-12-23 15:02:53 +01:00
Javier Viguera add03e8464 meta-digi-arm: update support to build imx-boot artifact
For the moment it supports the ccimx93 without Trustfence.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2022-12-20 14:50:54 +01:00
Mike Engel c3b4cfa5d1 swupdate: add u-boot image into SWU update image
Signed-off-by: Mike Engel <Mike.Engel@digi.com>

https://onedigi.atlassian.net/browse/DEL-7853
2022-09-12 14:26:13 +02:00
Javier Viguera 2452e85a6b kirkstone migration: cosmetic, clean build warnings
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2022-06-21 16:49:56 +02:00
Javier Viguera 065cf3e9c4 kirkstone migration: general update to the new override syntax
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2022-06-20 11:39:57 +02:00
Arturo Buzarra 3eef2d8d37 imx-boot: fix include path with dynamic layer
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2022-05-12 17:34:07 +02:00
Mike Engel 0b198431ee imx-mkimage: move recipes into dynamic-layers for NXP
Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2022-05-04 14:01:05 +02:00