There are some device-tree overlays and firmwares with missing entries for the keyfile. Add them to sign all images in the U-Boot FIT image.
Signed-off-by: Daniel Schultz <d.schu...@phytec.de>
---
arch/arm/dts/k3-am625-phycore-som-binman.dtsi | 49 ++++++++++++++++---
1 file changed, 41 insertions(+), 8 deletions(-)
diff --git a/arch/arm/dts/k3-am625-phycore-som-binman.dtsi
b/arch/arm/dts/k3-am625-phycore-som-binman.dtsi
index 31456d23167..7c72da6deda 100644
--- a/arch/arm/dts/k3-am625-phycore-som-binman.dtsi
+++ b/arch/arm/dts/k3-am625-phycore-som-binman.dtsi
@@ -227,6 +227,24 @@
fit {
images {
+ atf {
+ ti-secure {
+ keyfile = "custMpk.pem";
+ };
+ };
+
+ tee {
+ ti-secure {
+ keyfile = "custMpk.pem";
+ };
+ };
+
+ spl {
+ ti-secure {
+ keyfile = "custMpk.pem";
+ };
+ };
+
tifsstub-hs {
description = "TIFSSTUB";
type = "firmware";
@@ -313,6 +331,9 @@
images {
uboot {
description = "U-Boot for
phyCORE-AM62x";
+ ti-secure {
+ keyfile = "custMpk.pem";
+ };
};
som-no-rtc {
@@ -321,8 +342,11 @@
compression = "none";
load = <0x8F000000>;
arch = "arm";
-
- blob-ext {
+ ti-secure {
+ content =
<&am6xx_phycore_disable_rtc_dtbo>;
+ keyfile = "custMpk.pem";
+ };
+ am6xx_phycore_disable_rtc_dtbo:
blob-ext {
filename =
"dts/upstream/src/arm64/ti/k3-am6xx-phycore-disable-rtc.dtbo";
};
};
@@ -333,8 +357,11 @@
compression = "none";
load = <0x8F001000>;
arch = "arm";
-
- blob-ext {
+ ti-secure {
+ content =
<&am6xx_phycore_disable_spi_not_dtbo>;
+ keyfile = "custMpk.pem";
+ };
+ am6xx_phycore_disable_spi_not_dtbo:
blob-ext {
filename =
"dts/upstream/src/arm64/ti/k3-am6xx-phycore-disable-spi-nor.dtbo";
};
};
@@ -345,8 +372,11 @@
compression = "none";
load = <0x8F002000>;
arch = "arm";
-
- blob-ext {
+ ti-secure {
+ content =
<&am6xx_phycore_disable_eth_phy_dtbo>;
+ keyfile = "custMpk.pem";
+ };
+ am6xx_phycore_disable_eth_phy_dtbo:
blob-ext {
filename =
"dts/upstream/src/arm64/ti/k3-am6xx-phycore-disable-eth-phy.dtbo";
};
};
@@ -357,8 +387,11 @@
compression = "none";
load = <0x8F003000>;
arch = "arm";
-
- blob-ext {
+ ti-secure {
+ content =
<&am6xx_phycore_disable_qspi_nor_dtbo>;
+ keyfile = "custMpk.pem";
+ };
+ am6xx_phycore_disable_qspi_nor_dtbo:
blob-ext {
filename =
"dts/upstream/src/arm64/ti/k3-am6xx-phycore-qspi-nor.dtbo";
};
};
--
2.25.1
