Since commit 29d32063ac0abb1017756f62f94aec22ce305b60 ("u-boot: kernel-fitimage:
Fix dependency loop if UBOOT_SIGN_ENABLE and UBOOT_ENV enabled") in Poky layer,
the `kernel-fitimage` and `uboot-sign` classes are no longer explicitly
dependent. This change introduced a race condition when inserting the signed
RSA keys into the U-Boot DTB for FIT image verification.
This commit introduces a new step for `do_uboot_assemble_fitimage`, which is
now responsible for injecting the keys into the U-Boot DTB. This logic was
previously handled in the Linux kernel recipe via the `do_assemble_fitimage`
function in previous Yocto versions.
Additionally, a build-time dependency is added between the `do_uboot_assemble_fitimage()`
function and the kernel's `do_kernel_generate_rsa_keys()` task, which is
responsible for generating the RSA keys used to sign the FIT image.
https://onedigi.atlassian.net/browse/DEL-9634
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
|
||
|---|---|---|
| .. | ||
| alsa-state | ||
| ath-prop-tools | ||
| digi-sc-firmware | ||
| firmware-atheros | ||
| firmware-murata-infineon | ||
| firmware-murata-nxp | ||
| firmware-qualcomm | ||
| formfactor | ||
| libubootenv | ||
| trustfence-cst | ||
| trustfence-stm-signtools | ||
| u-boot | ||
| usbutils | ||