On 5/20/19 3:54 AM, Peng Fan wrote: > Hi Marek, > >> Subject: Re: [U-Boot] [PATCH 4/6] spl: mmc: support loading i.MX container >> format file >> >> On 5/20/19 3:30 AM, Peng Fan wrote: >>> Hi Simon, >>> >>>> Subject: Re: [PATCH 4/6] spl: mmc: support loading i.MX container >>>> format file >>>> >>>> Hi Peng, >>>> >>>> On Tue, 7 May 2019 at 06:52, Peng Fan <peng....@nxp.com> wrote: >>>>> >>>>> i.MX8 only support AHAB secure boot with Container format image, we >>>>> could not use FIT to support secure boot, so introduce container >>>> >>>> Why not FIT? >>> >>> Actually before we implement secure boot, we use FIT image, however >>> i.MX8 only support i.MX container format image for secure boot, The >>> chip will verify the container image when secure boot. It could not >>> recognize FIT image. So we have to drop FIT image. >>> >>>> >>>>> support to let SPL could load container images. >>>> >>>> What is a container image? Can you please point to documentation? >>> >>> Sadly, there is no public reference manual. There is a doc that has a >>> bit of information. >>> >> https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcomm >>> >> unity.nxp.com%2Fdocs%2FDOC-343178&data=02%7C01%7Cpeng.fan%4 >> 0nxp.co >>> >> m%7C8626e7a1d20c44b8715408d6dcc4d866%7C686ea1d3bc2b4c6fa92cd9 >> 9c5c30163 >>> >> 5%7C0%7C0%7C636939135344595378&sdata=vmIaO78XmuL1tQJufqf7 >> HCGdWHTCJ >>> bEpmGBio15j46U%3D&reserved=0 >> >> Shouldn't it suffice for the SPL to be in this custom format , while the >> rest of >> the binaries can be in fitImage ? > > The issue is the SoC only support i.MX container format for secure boot(AHAB > boot), > if we not use secure boot, FIT image do work and could work well. > > We investigated using FIT for i.MX8 secure boot, but it does not make sense > we did a FIT wrapper for container. Container itself is also an image format, > it contains > image load/entry/size and etc information. > > I add a kconfig entry in SPL code, it does not hurt others if the Kconfig > entry not chosen. > > I do not know how other SoC vendor did FIT hardware secure boot, please share > you have any information.
The SPL can be in the custom format, but then can load fitImage with the next stage(s), right ? -- Best regards, Marek Vasut _______________________________________________ U-Boot mailing list U-Boot@lists.denx.de https://lists.denx.de/listinfo/u-boot
