On 9/11/25 8:13 AM, Anshul Dalal wrote:
Falcon mode was disabled for TI_SECURE_DEVICE at commit e95b9b4437bc
("ti_armv7_common: Disable Falcon Mode on HS devices") for older 32-bit
HS devices and can be enabled on K3 devices.
The reason we disabled Falcon Mode for these devices is because it
could not be done securely, this is exactly what your series here
is intended to fix. If we have secure falcon boot, then we should
enable it for 32-bit devices also. Enable this for all TI devices
and you can drop the previous patch.
Andrew
For secure boot, the kernel with x509 headers can be packaged in a fit
container (fitImage) signed with TIFS keys for authentication.
Signed-off-by: Anshul Dalal <ansh...@ti.com>
---
common/spl/Kconfig | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/common/spl/Kconfig b/common/spl/Kconfig
index 7e87e50f693..4f817fd31c5 100644
--- a/common/spl/Kconfig
+++ b/common/spl/Kconfig
@@ -1201,7 +1201,8 @@ config SPL_ONENAND_SUPPORT
config SPL_OS_BOOT
bool "Activate Falcon Mode"
- depends on !TI_SECURE_DEVICE
+ depends on !TI_SECURE_DEVICE_K2_OMAP2PLUS
+ select SPL_OS_BOOT_SECURE if TI_SECURE_DEVICE_K3
help
Enable booting directly to an OS from SPL.
for more info read doc/README.falcon
