GitLab

Patches were tested only with linux-stable, so move them and add only if
linux-stable is taken.

TODO: check patches with linux-yocto, too.
Signed-off-by: Stefano Babic <sbabic@denx.de>

Signed-off-by: Stefano Babic <sbabic@denx.de>

Signed-off-by: Stefano Babic <sbabic@denx.de>

Signed-off-by: Stefano Babic <sbabic@denx.de>

sign-fs: fix build if PASS_FILE is not set

See merge request !1

commit:825d05f0

 ("Signing fs: add PASS_FILE as set in README")
add handling of variable PASS_FILE. If this variable is
not set build failed, fix it.
Signed-off-by: Heiko Schocher <hs@denx.de>

Signed-off-by: Stefano Babic <sbabic@denx.de>

Signed-off-by: Stefano Babic <sbabic@denx.de>

u-boot has multiple providers - better use the generic
virtual/bootloader package name.
Signed-off-by: Stefano Babic <sbabic@denx.de>

Heiko Schocher authored Aug 03, 2021 and Stefano Babic committed Aug 05, 2021

do_sign_uboot must also run before do_deploy.
Signed-off-by: Heiko Schocher <hs@denx.de>

do_sign_uboot must also run before do_deploy.
Signed-off-by: Heiko Schocher <hs@denx.de>

adapt README with imx8m specific parts.
Signed-off-by: Heiko Schocher <hs@denx.de>

CRYPT_KEY is not used in initram scirpt, so drop it.
Signed-off-by: Heiko Schocher <hs@denx.de>

this function is not longer needed, so remove it.
Signed-off-by: Heiko Schocher <hs@denx.de>

add base64 support in busybox.
Signed-off-by: Heiko Schocher <hs@denx.de>

include '/etc/default/initramfs' before looking if INIT
variable is set, so we can set INIT with '/etc/default/initramfs'

while at it, remove VERBOSE variable.
Signed-off-by: Heiko Schocher <hs@denx.de>

add a link without machine name to signed fitimage.
Signed-off-by: Heiko Schocher <hs@denx.de>

update do_deploy task, so it works with fit image (imx8m)
signing.
Signed-off-by: Heiko Schocher <hs@denx.de>

use string "DENX_MGC" as default and as described in README
Signed-off-by: Heiko Schocher <hs@denx.de>

warn if HAB_ENABLE is not set.
Signed-off-by: Heiko Schocher <hs@denx.de>

add support for signing images which contain all infos
for signing in u-boot.itb.
Signed-off-by: Heiko Schocher <hs@denx.de>

prepare support for signing u-boot.itb images, which contain
all infos we need for signing in the itb image itself.

Currently only IMX8M supported.
Signed-off-by: Heiko Schocher <hs@denx.de>

signing images is only done, if HAB_ENABLE is set.
Signed-off-by: Heiko Schocher <hs@denx.de>

pass CAAM or DCP to creating csf file.
Signed-off-by: Heiko Schocher <hs@denx.de>

Signed-off-by: Stefano Babic <sbabic@denx.de>

Signed-off-by: Stefano Babic <sbabic@denx.de>

Drop patch version from kernel version.
Signed-off-by: Stefano Babic <sbabic@denx.de>

Signed-off-by: Stefano Babic <sbabic@denx.de>

Signed-off-by: Stefano Babic <sbabic@denx.de>

Signed-off-by: Stefano Babic <sbabic@denx.de>

Signed-off-by: Stefano Babic <sbabic@denx.de>

Signed-off-by: Stefano Babic <sbabic@denx.de>

The initram,fs startup script reads a configuration file
(/etc/default/initramfs) to know if:
- rootfs must be verified
- rootfs is encrypted

Change initramfs to load key from blob, and start encrypted rootfs
Signed-off-by: Stefano Babic <sbabic@denx.de>

This is a generic layer and it should not have any specific MACHINE
configuration.
Signed-off-by: Stefano Babic <sbabic@denx.de>

Signed-off-by: Stefano Babic <sbabic@denx.de>

Signed-off-by: Stefano Babic <sbabic@denx.de>

Signed-off-by: Stefano Babic <sbabic@denx.de>

Signed-off-by: Stefano Babic <sbabic@denx.de>

Signed-off-by: Stefano Babic <sbabic@denx.de>

Signed-off-by: Stefano Babic <sbabic@denx.de>