meta-digi/meta-digi-arm/recipes-bsp/u-boot
Arturo Buzarra 11c34bcbdb u-boot-dey: ccmp1/ccmp2: fix support for inserting signed keys into U-Boot DTB for FIT images
Since commit 29d32063ac0abb1017756f62f94aec22ce305b60 ("u-boot: kernel-fitimage:
Fix dependency loop if UBOOT_SIGN_ENABLE and UBOOT_ENV enabled") in Poky layer,
the `kernel-fitimage` and `uboot-sign` classes are no longer explicitly
dependent. This change introduced a race condition when inserting the signed
RSA keys into the U-Boot DTB for FIT image verification.

This commit introduces a new step for `do_uboot_assemble_fitimage`, which is
now responsible for injecting the keys into the U-Boot DTB. This logic was
previously handled in the Linux kernel recipe via the `do_assemble_fitimage`
function in previous Yocto versions.

Additionally, a build-time dependency is added between the `do_uboot_assemble_fitimage()`
function and the kernel's `do_kernel_generate_rsa_keys()` task, which is
responsible for generating the RSA keys used to sign the FIT image.

https://onedigi.atlassian.net/browse/DEL-9634

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2025-05-26 09:48:00 +02:00
..
u-boot-dey ccmp13: add device tree overlay for DVKv3 2025-05-13 12:56:20 +02:00
u-boot-dey.inc u-boot-dey: ccmp1/ccmp2: fix support for inserting signed keys into U-Boot DTB for FIT images 2025-05-26 09:48:00 +02:00
u-boot-dey_2017.03.bb u-boot: disable version v2017.03 for ccimx8x 2024-11-20 18:57:34 +01:00
u-boot-dey_2023.10.bb ccmp1: move ccmp1 platform support to kernel 6.6 and U-Boot v2023.10 2025-04-30 12:49:06 +02:00
u-boot-dey_2024.04.bb u-boot-dey: use version v2024.04 for ccimx8m 2025-03-19 10:26:06 +01:00
u-boot-tools_%.bbappend u-boot-tools: remove upstreamed fdt_add_pubkey patches 2024-10-17 13:03:37 +02:00