There are some device-tree overlays and firmwares with missing entries for the keyfile. Add them to sign all images in the U-Boot FIT image.
Signed-off-by: Daniel Schultz <d.schu...@phytec.de>
---
arch/arm/dts/k3-am642-phycore-som-binman.dtsi | 49 ++++++++++++++++---
1 file changed, 41 insertions(+), 8 deletions(-)
diff --git a/arch/arm/dts/k3-am642-phycore-som-binman.dtsi
b/arch/arm/dts/k3-am642-phycore-som-binman.dtsi
index 3710564cd4a..03cac277434 100644
--- a/arch/arm/dts/k3-am642-phycore-som-binman.dtsi
+++ b/arch/arm/dts/k3-am642-phycore-som-binman.dtsi
@@ -146,6 +146,24 @@
#address-cells = <1>;
images {
+ atf {
+ ti-secure {
+ keyfile = "custMpk.pem";
+ };
+ };
+
+ tee {
+ ti-secure {
+ keyfile = "custMpk.pem";
+ };
+ };
+
+ spl {
+ ti-secure {
+ keyfile = "custMpk.pem";
+ };
+ };
+
dm {
blob-ext {
filename = "/dev/null";
@@ -190,6 +208,9 @@
images {
uboot {
description = "U-Boot for AM64 board";
+ ti-secure {
+ keyfile = "custMpk.pem";
+ };
};
fdt-0 {
@@ -363,8 +384,11 @@
compression = "none";
load = <0x8F000000>;
arch = "arm";
-
- blob-ext {
+ ti-secure {
+ content =
<&am6xx_phycore_disable_rtc_dtbo>;
+ keyfile = "custMpk.pem";
+ };
+ am6xx_phycore_disable_rtc_dtbo:
blob-ext {
filename =
"dts/upstream/src/arm64/ti/k3-am6xx-phycore-disable-rtc.dtbo";
};
};
@@ -375,8 +399,11 @@
compression = "none";
load = <0x8F001000>;
arch = "arm";
-
- blob-ext {
+ ti-secure {
+ content =
<&am6xx_phycore_disable_spi_not_dtbo>;
+ keyfile = "custMpk.pem";
+ };
+ am6xx_phycore_disable_spi_not_dtbo:
blob-ext {
filename =
"dts/upstream/src/arm64/ti/k3-am6xx-phycore-disable-spi-nor.dtbo";
};
};
@@ -387,8 +414,11 @@
compression = "none";
load = <0x8F002000>;
arch = "arm";
-
- blob-ext {
+ ti-secure {
+ content =
<&am6xx_phycore_disable_eth_phy_dtbo>;
+ keyfile = "custMpk.pem";
+ };
+ am6xx_phycore_disable_eth_phy_dtbo:
blob-ext {
filename =
"dts/upstream/src/arm64/ti/k3-am6xx-phycore-disable-eth-phy.dtbo";
};
};
@@ -399,8 +429,11 @@
compression = "none";
load = <0x8F003000>;
arch = "arm";
-
- blob-ext {
+ ti-secure {
+ content =
<&am6xx_phycore_disable_qspi_nor_dtbo>;
+ keyfile = "custMpk.pem";
+ };
+ am6xx_phycore_disable_qspi_nor_dtbo:
blob-ext {
filename =
"dts/upstream/src/arm64/ti/k3-am6xx-phycore-qspi-nor.dtbo";
};
};
--
2.25.1
