u-boot.git/doc/uImage.FIT, branch v2018.01

SPL: Add FIT data-position property support

2017-12-13T02:33:38+00:00

For external data, FIT has a optional property "data-position" which
can set the external data to a fixed offset to FIT beginning.
Add the support for this property in SPL FIT.

Signed-off-by: Ye Li 
Signed-off-by: Peng Fan 
Reviewed-by: Simon Glass 
Reviewed-by: Tomas Melin 
Cc: Pantelis Antoniou 
Cc: "Andrew F. Davis" 
Cc: Igor Grinberg 
Cc: "tomas.melin@vaisala.com" 
Cc: Kever Yang 
Cc: Andre Przywara 
Cc: York Sun 
Cc: Lokesh Vutla 
Cc: "Cooper Jr., Franklin" 
Cc: George McCollister 
Cc: Tuomas Tynkkynen 
Cc: Jean-Jacques Hiblot 
Cc: Rick Altherr 
Cc: Tom Rini 
Reviewed-by: Lokesh Vutla 
Reviewed-by: York Sun

doc: verified-boot: fix crypto algorithm examples

2017-10-23T21:28:18+00:00

As you see in crypto_algos in common/image-sig.c, the algorithm
should be either "rsa2048" or "rsa4096".  "rs2048" is a typo.

Signed-off-by: Masahiro Yamada 
Reviewed-by: Simon Glass

doc: overlays: Tweak documentation regarding overlays

2017-09-15T11:27:49+00:00

Pull some information regarding overlays from commit messages and
put them directly within the documentation. Also add some information
regarding required dtc version to properly use overlays.

Signed-off-by: Franklin S Cooper Jr 
Acked-by: Simon Glass

fit: fdt overlays doc

2017-09-15T11:27:49+00:00

Signed-off-by: Pantelis Antoniou 
Reviewed-by: Łukasz Majewski
Acked-by: Simon Glass

spl: fit: Add booting OS first

2017-09-11T14:55:36+00:00

If CONFIG_SPL_OS_BOOT is enabled, boot OS if kernel image is found
in FIT structure.

Signed-off-by: York Sun 
Reviewed-by: Tom Rini 
Reviewed-by: Simon Glass

spl: fit: Support both external and embedded data

2017-09-11T14:55:36+00:00

SPL supports U-Boot image in FIT format which has data outside of
FIT structure. This adds support for embedded data for normal FIT
images.

Signed-off-by: York Sun 
Reviewed-by: Tom Rini 
Reviewed-by: Simon Glass

doc: verified-boot: fix typos

2017-08-26T18:56:14+00:00

Signed-off-by: Masahiro Yamada

FIT: List kernel_noload in the list of types

2017-07-26T15:29:15+00:00

In the source_file_format.txt file we talk about how to construct a
valid FIT image.  While it already says to look at the source for the
full list, add kernel_noload to the explicit list of types.  This is
arguably the most important type to use as most often we are including a
kernel that will run from wherever it is loaded into memory and execute.

This for example, allows you to create a single FIT image for Linux that
can be used on both OMAP and i.MX devices as the kernel will not need to
be moved in memory.

Signed-off-by: Tom Rini

SPL: FIT: allow loading multiple images

2017-05-17T17:45:43+00:00

So far we were not using the FIT image format to its full potential:
The SPL FIT loader was just loading the first image from the /images
node plus one of the listed DTBs.
Now with the refactored loader code it's easy to load an arbitrary
number of images in addition to the two mentioned above.
As described in the FIT image source file format description, iterate
over all images listed at the "loadables" property in the configuration
node and load every image at its desired location.
This allows to load any kind of images:
- firmware images to execute before U-Boot proper (for instance
  ARM Trusted Firmware (ATF))
- firmware images for management processors (SCP, arisc, ...)
- firmware images for devices like WiFi controllers
- bit files for FPGAs
- additional configuration data
- kernels and/or ramdisks
The actual usage of this feature would be platform and/or board specific.

Also update the FIT documentation to mention the new SPL feature and
provide an example .its file to demonstrate its features.

Signed-off-by: Andre Przywara 
Reviewed-by: Lokesh Vutla 
Reviewed-by: Simon Glass 
Tested-by: Heiko Stuebner 
Reviewed-by: Kever Yang 
Tested-by: Kever Yang 
Tested-by: Jagan Teki 
Reviewed-by: Jagan Teki

mkimage: Add support for signing with pkcs11

2017-01-14T21:47:13+00:00

Add support for signing with the pkcs11 engine. This allows FIT images
to be signed with keys securely stored on a smartcard, hardware security
module, etc without exposing the keys.

Support for other engines can be added in the future by modifying
rsa_engine_get_pub_key() and rsa_engine_get_priv_key() to construct
correct key_id strings.

Signed-off-by: George McCollister