CM5 and LetsTrust TPM with u-boot and Linux

2025-07-12 Thread Jonas Kvinge
Hi, I'm working on getting Raspberry Pi CM5 with a source kit io board and LetsTrust TPM with u-boot and Linux working. I'm building a custom u-boot similar to the description here:  https://github.com/joholl/rpi4-uboot-tpm/blob/ad31306ce2f2d52f0572385bfc8bac33cb1f1f68/README.md#setting-up-and-con

Re: Raspberry Pi Compute Module 5 support

2025-06-07 Thread Jonas Kvinge
d the dts files. I did it a year back. But since  did > not have bcm7712 dts files, I took the dtb file from the raspberry pi > images ( it has a pre built dtb file, and extracted dts) > > dtc -I dtb -O dts -o -i< input.dtb> > >   >   >   >  On Satu

Re: Raspberry Pi Compute Module 5 support

2025-06-07 Thread Jonas Kvinge
he device tree fro bcm7712 ( RPI 5 is > bcm7712) > But you can Dow load the dtb file from the pre built dtb file from > raspberry pi images > > and  use those  device tree sources ( using a dtc ) > > > > > > > On Thursday, June 5, 2025 at 02:13:24 PM

Raspberry Pi Compute Module 5 support

2025-06-05 Thread Jonas Kvinge
Hi, I'm trying to boot openSUSE Linux on an CM5 using a sourcekit io board (https://sourcekit.cc/#/). u-boot seem to be stuck with the logo on the upper right corner, no text. I re-built u-boot using the latest source from git from the next branch and also set CONFIG_LOG in make menuconfig, but sti

Re: u-boot on raspberry pi with secure boot

2024-08-28 Thread Jonas Kvinge
Hi, I have produced a signed linux UKI image. But I need to build u-boot to only allow booting with the signed certificate. So I need a ubootefi.var for (EFI_VAR_SEED_FILE) according tohttps://github.com/u-boot/u-boot/blob/ee2af844ba1b27b2e959c4e649e4b769fbeb4074/lib/efi_loader/Kconfig#L146 How

Re: u-boot on raspberry pi with secure boot

2024-08-21 Thread Jonas Kvinge
On Tue, 2024-08-20 at 16:29 +0200, Caleb Connolly wrote: > Hi Jonas, > > > I don't know the details of how this is implemented, but the way to > solve this is by doing EFI secureboot in U-Boot. The trick is to > embed > the securebook public key hash into U-Boot, there it will be > validated >

u-boot on raspberry pi with secure boot

2024-08-19 Thread Jonas Kvinge
Hi, I have a custom installation of openSUSE Tumbleweed which uses u-boot and Grub. To use secure boot on the RPI, one creates a boot.img containing the kernel and other files which is signed, and the eeprom is locked to only allow booting with this signature. (https://github.com/raspberrypi/usbbo

Re: silent u-boot not working

2024-06-14 Thread Jonas Kvinge
On Fri, 2024-06-14 at 07:52 -0300, Fabio Estevam wrote: > Hi Jonas, > > On Fri, Jun 14, 2024 at 7:49 AM Jonas Kvinge > wrote: > > > Where do I find CONFIG_EXTRA_ENV_SETTINGS? Is it an option in make > > menuconfig, or do I need to edit the header file > > includ

Re: silent u-boot not working

2024-06-14 Thread Jonas Kvinge
On Thu, 2024-06-13 at 11:34 -0400, Sean Anderson wrote: > Hi Jonas, > > - Define CONFIG_DISABLE_CONSOLE > - set silent=y in the default environment (CONFIG_EXTRA_ENV_SETTINGS) > > Where do I find CONFIG_EXTRA_ENV_SETTINGS? Is it an option in make menuconfig, or do I need to edit the header file

silent u-boot not working

2024-06-13 Thread Jonas Kvinge
Hi, I'm running openSUSE Tumbleweed on an RPI CM4, I'm trying to silence u- boot boot messages, with the default configuration there is an u-boot logo on the top right corner and boot text, I'd like to get rid of the logo and all text if possible. The keyboard is not working before the Linux kerne

TPM setup on a RPI Compute Module 4

2024-01-31 Thread Jonas Kvinge
Hi, I have a CM4 with a sourcekit io board and a pi3g lets trust TPM. It's running Raspberry Pi OS Bookworm. tpm2_pcrread shows zeros for all pcr's. My understanding is that the tpm needs to be setup on boot so the pcr values are populated. So how can I best fill in the values for the TPM?