u-boot.git/tools/binman, branch main

binman: gbb: update link

2026-08-29T04:41:36Z

The current link results in a 404. Looking at the Wayback Machine[1], I found a similar page currently being served. It's probably very outdated by now but at least it's not a 404 anymore. [1] https://web.archive.org/web/20230520044331/https://www.chromium.org/chromium-os/firmware-porting-guide/ Signed-off-by: Quentin Schulz

binman: btool: bootgen: update link to user guide

2026-08-29T04:41:36Z

The link doesn't serve the document anymore. It's available both in HTML and PDF form at another address but let's point at the HTML version in hope it stays online longer. Signed-off-by: Quentin Schulz

binman: nxp_imx8mcst: Handle FCFB header during SPI NOR boot

2026-08-07T01:05:45Z

In case the image that is wrapped in the nxp_imx8mcst already contains an FCFB header which is mandatory for SPI NOR boot, then the IVT is at offset 0x1000 instead of offset 0x0, but the whole image including the FCFB header must be signed to prevent attacker from tampering with any of the headers. Add the FCFB handling. Signed-off-by: Marek Vasut Reviewed-by: Simon Glass

binman: add CST backend selection for i.MX8M signing

2026-08-03T12:31:24Z

Add support for setting the CST backend, both via DT property and CST_BACKEND environment variable. The CST currently supports two backends, 'ssl' and 'pkcs11', with 'ssl' being the default when CST tool is invoked without any -b parameter. Keep 'ssl' backend as the default, but explicitly pass it via the '-b' parameter, unless the user selects 'pkcs11' via either method. Signed-off-by: Marek Vasut Reviewed-by: Simon Glass

tools: binman: pass KEYDIR to FIT entries

2026-07-28T18:30:55Z

U-Boot's Makefile passes KEYDIR to direct mkimage invocations, but internal binman FIT builds only receive the generic BINMAN_INDIRS search path. Adding KEYDIR to BINMAN_INDIRS treats it as one more input-file search path: FIT entries still auto-detect a key directory from all include directories, so an explicit KEYDIR may not be the directory that gets passed to mkimage. It also makes a key-only directory part of the generic blob lookup path. Forward KEYDIR as a binman entry argument named keydir, matching the existing entry-argument mechanism used for BL31, TEE, of-list and other U-Boot build inputs. FIT entries use that directory directly for mkimage -k when fit,sign or fit,encrypt is enabled, falling back to the include-directory autodetection when keydir is not provided. Signed-off-by: James Hilliard

binman: imx8mimage: Generate FSPI header in binman instead of mkimage

2026-07-27T14:30:25Z

Stop depending on the current mkimage method of generating the FSPI header, instead generate the FSPI header within binman itself. This is more flexible, as the FSPI header properties can be configured from within the board-specific DT instead of being hard-coded in mkimage at build time. Acked-by: Peng Fan Signed-off-by: Marek Vasut Reviewed-by: Simon Glass

global: Switch from source.denx.de to git.u-boot-project.org

2026-07-20T17:13:21Z

As part of moving our git forge to a new location, update all references in tree to point to git.u-boot-project.org now. Signed-off-by: Tom Rini

tools: binman: ti_board_cfg: Add configurable sw-rev support

2026-07-13T23:06:33Z

The software revision field in the combined board config binary header was hardcoded to 1, preventing independent control from SBL SWREV configured via ti-secure-rom's sw-rev property. Add support for the optional 'sw-rev' DTS property in ti_board_config nodes, which sets the SWREV byte in the header. Defaults to 1 for backward compatibility. Signed-off-by: Shiva Tripathi Reviewed-by: Simon Glass

Merge branch 'next'

2026-07-07T00:26:12Z

tools: Stop packaging patman as a pip module

2026-07-06T14:28:50Z

patman is no longer shipped from the U-Boot tree, so drop it from the 'make pip' target and from make_pip.sh, and remove its packaging files (setup.py, pyproject.toml, requirements.txt). Nothing else refers to them by this point in the series, so they can go. Also fix binman's pyproject.toml, which declares package-data for a 'patman' package (a copy-paste leftover); use 'binman' instead. Signed-off-by: Simon Glass