On Mon, Nov 10, 2025 at 01:41:00PM +0100, Lukasz Majewski wrote:

> With current mainline it is possible to check with AHAB if system OS image
> can be trusted (with 'auth_cntr' command).
> However, after the validation one needs to use the image (fitImage in this
> case) itself. Such operation requires getting the offset in the image
> eligible for AHAB validation to start execution of the fitImage.
> 
> Command in this patch allows it, so with:
> auth_cntr_offset ${addr} auth_cntr_os_offset;
> setexpr addr ${kernel_addr_r} + ${auth_cntr_os_offset};
> 
> it is possible to boot the fitImage after AHAB IP block vaidation.
> 
> Signed-off-by: Lukasz Majewski <[email protected]>
> ---
>  arch/arm/mach-imx/imx8/ahab.c | 50 +++++++++++++++++++++++++++++++++++
>  1 file changed, 50 insertions(+)

Can we please split the commands here out and put it under
cmd/imx/imxh-ahab.c or something? Thanks.

-- 
Tom

Attachment: signature.asc
Description: PGP signature

Reply via email to