linux/poky.git/meta/classes/kernel-fitimage.bbclass, branch yocto-3.1.19

kernel-fitimage.bbclass: add padding algorithm property in config nodes

2022-08-08T15:23:34+00:00

This allows choosing padding algorithm when building fitImage. It may be pkcs-1.5 or pss. (From OE-Core rev: 152765b74c77b4da102fce9c4c61a667e71f26a1) Signed-off-by: LUIS ENRIQUEZ From: LUIS ENRIQUEZ Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

kernel-fitimage: Don't use unit addresses on FIT

2021-06-11T21:45:27+00:00

Das U-Boot 2021.4-rc1 has the following commit: commit 3f04db891a353f4b127ed57279279f851c6b4917 Author: Simon Glass Date: Mon Feb 15 17:08:12 2021 -0700 image: Check for unit addresses in FITs Using unit addresses in a FIT is a security risk. Add a check for this and disallow it. CVE-2021-27138 Adjust the kernel-fitimage.bbclass accordingly to not use unit addresses. This changte is required before we can bump U-Boot to 2021.4. (From OE-Core rev: 14eec2f7c3bbb36de8198989bf772135aa117963) Signed-off-by: Klaus Heinrich Kiwi Signed-off-by: Richard Purdie [Backport for Dunfell] Signed-off-by: Frieder Schrempf Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

kernel-fitimage.bbclass: fix a wrong conditional check

2021-06-03T15:30:56+00:00

It should check if "${UBOOT_SIGN_ENABLE}" equals to "1" instead of checking if "${UBOOT_SIGN_ENABLE}" is not empty since it could be "0". (From OE-Core rev: 0d35b7d1de517ceb1bddc9ffe848e3d25030747a) Signed-off-by: Ming Liu Signed-off-by: Richard Purdie (cherry picked from commit 900949af7fe357ee66065ba150b0b1914e8ca581) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

kernel-fitimage: fix devicetree reproducibility

2020-02-14T13:07:23+00:00

Ensure that the order of dtb/dtbo files in the generated fitimage is reproducible. Fixes: 71bfa9838cbf ("kernel-fitimage: Handle overlays in EXTERNAL_KERNEL_DEVICETREE") (From OE-Core rev: 9e4a91b63dd8e0c1708da2ac7de461b35fb0b011) Signed-off-by: Alex Kiernan Signed-off-by: Richard Purdie

kernel-fitimage: Handle overlays in EXTERNAL_KERNEL_DEVICETREE

2020-02-13T12:19:14+00:00

When using EXTERNAL_KERNEL_DEVICETREE, collect DTB overlays too (*.dtbo) as well as iterating down into sub-directories so using the behaviour for naming which matches KERNEL_DEVICETREE. (From OE-Core rev: 169ebd59f11845a3a5a7157719217ccf0844e448) Signed-off-by: Alex Kiernan Signed-off-by: Richard Purdie

kernel-fitimage: introduce FIT_SIGN_ALG

2019-10-31T16:09:34+00:00

make fitImage configuration signature algorithm selectable with FIT_SIGN_ALG. (From OE-Core rev: e24b27a2b49e97cec6153f2d642d17a901b8ba12) Signed-off-by: Richard Leitner Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

kernel-fitimage: Cope with non-standard kernel deploy subdirectory

2019-10-23T15:30:36+00:00

kernel.bbclass installs non-standard kernels (where KERNEL_PACKAGE_NAME is not "kernel") in a subdirectory of ${DEPLOYDIR}. To achieve this kernel_do_deploy sets the deployDir shell variable to ${DEPLOYDIR} for the standard kernel or ${DEPLOYDIR}/${KERNEL_DEPLOYSUBDIR} for non-standard kernels. kernel-fitimage.bbclass's kernel_do_deploy_append ought to do the same and can do so by using the same shell variable. (From OE-Core rev: d324b22d32eaea9e4337c963c8b1a33b0ba6a2dd) Signed-off-by: Mike Crowe Signed-off-by: Richard Purdie

kernel.fitimage.bbclass: remove ramdisk_ctype

2019-09-27T12:02:17+00:00

set in the ramdisk node the compression property always to "none", as U-Boot nowadays since commit: b1307f884a91 ("fit: Support compression for non-kernel components (e.g. FDT)") decompress non kernel components. Setting compression to the used comression algorithm now, will end in fail of your kernel boot with the ramdisk. This issue is fixed since commit: bddd98573465 ("fit: Do not automatically decompress ramdisk images") which now prints a warning in U-Boot, instead of decompressing the ramdisk, but we should setup compression property correct. (From OE-Core rev: f963a51544a9a7b1abbaa87c95b3c0279847d697) Signed-off-by: Heiko Schocher Signed-off-by: Richard Purdie

kernel-fitimage: introduce FIT_HASH_ALG

2019-06-19T11:46:44+00:00

sanitize fitImage hash algorithm selection with FIT_HASH_ALG switch default hash algorithm from sha1 to sha256 (From OE-Core rev: 8c9d5d59cb1575fac17c461090937df4cbb3d3b5) Signed-off-by: Ayoub Zaki Signed-off-by: Richard Purdie

kernel-fitimage: uboot-sign: Check UBOOT_DTB_BINARY before adding deps

2019-06-12T20:08:52+00:00

Since UBOOT_DTB_BINARY empty means we don't need to inject signatures into the U-Boot DTB, we can remove the dependencies between consumers of these two classes and resolve a circular dependency between u-boot and kernel. (From OE-Core rev: c6b49cb75285e71909d1f9e4bf636f186941b519) Signed-off-by: Alex Kiernan Signed-off-by: Richard Purdie