u-boot.git/tools/binman, branch next

global: Update URL for U-Boot project

2026-05-25T15:30:47+00:00

Our official domain is now u-boot-project.org, so update all in-tree
references to use the correct domain.

Reviewed-by: Tony Dinh 
Reviewed-by: Peter Robinson 
Signed-off-by: Tom Rini

binman: Use bintool wrappers for PKCS#11 tools in tests

2026-05-11T18:05:10+00:00

The PKCS#11 signing tests in ftest.py call tools.run('softhsm2-util', ...)
directly (and the equivalent for pkcs11-tool and p11-kit), even though
the test setup has already constructed the corresponding Bintool
instances. As Quentin Schulz observed on v1, the bintool wrapper for
these tools is currently used only as an "is this installed?" probe.

Route the eight remaining call sites in ftest.py through
.run_cmd(...), which the Bintool base class already provides.
The change is test-side only; no production binman code calls these
tools.

Suggested-by: Quentin Schulz 
Signed-off-by: Simon Glass

binman: Flesh out the softhsm2-util bintool docstring

2026-05-11T18:05:10+00:00

The Sphinx-generated bintools.rst currently produces an empty section
for this bintool, since its class docstring is only a single line and
so the body under the heading is blank.

Extend the docstring with a short description of what softhsm2-util
does and how binman uses it, so the generated documentation has useful
content.

Suggested-by: Heinrich Schuchardt 
Signed-off-by: Simon Glass

binman: Flesh out the pkcs11-tool bintool docstring

2026-05-11T18:05:10+00:00

The Sphinx-generated bintools.rst currently produces an empty section
for this bintool, since its class docstring is only a single line and
so the body under the heading is blank.

Extend the docstring with a short description of what pkcs11-tool does
and how binman uses it, so the generated documentation has useful
content.

Suggested-by: Heinrich Schuchardt 
Signed-off-by: Simon Glass

binman: Flesh out the p11-kit bintool docstring

2026-05-11T18:05:10+00:00

The Sphinx-generated bintools.rst currently produces an empty section
for this bintool, since its class docstring is only a single line and
so the body under the heading is blank.

Extend the docstring with a short description of what p11-kit does and
how binman uses it, so the generated documentation has useful content.

Suggested-by: Heinrich Schuchardt 
Signed-off-by: Simon Glass

tools: binman: Test signing an encrypted FIT with a preload header

2026-05-05T16:37:09+00:00

Add a test to verify the preload header correctly signs an encrypted
FIT. This test exercises the case where encryption uses random IVs that
would change between mkimage calls.

Signed-off-by: Paul HENRYS 
Reviewed-by: Simon Glass

binman: collection: Set build_done on referenced entries

2026-05-05T16:37:09+00:00

The collection etype uses phandles in the 'content' property to
reference other entries. Mark each referenced entry with build_done
to avoid rebuilding the same entry data multiple times.

This is important for cases where rebuilding may change the data
content, e.g. due to timestamps or random IVs in encryption.

Refactor GetContentsByPhandle() to return both the entry object and
its data.

Signed-off-by: yan wang 
Reviewed-by: Simon Glass

binman: Generate preload header and sign data only once

2026-05-05T16:37:09+00:00

To optimize preload generation, generate the header and signatures only
after all data has been collected in ProcessContentsUpdate(). This
avoids signing the data multiple times.

Since header_size is known upfront (from __init__), create a placeholder
in `ObtainContents()` to avoid an extra packing pass when
ProcessContentsUpdate() detects a size change.

This reduces unnecessary repacking and signing operations.

Signed-off-by: Paul HENRYS 
Reviewed-by: Simon Glass

binman: Remove pre-generated entries.rst and bintools.rst

2026-04-17T05:26:31+00:00

These files are now auto-generated by the binman_docs Sphinx extension
during the doc build, so the committed copies and their symlinks in
doc/develop/package/ are no longer needed.

Update binman.rst to reference the Sphinx extension instead of the
manual generation commands.

Signed-off-by: Simon Glass 

Rebased to apply file deletions cleanly.
Signed-off-by: Heinrich Schuchardt

test: binman: Add test for pkcs11 signed capsule

2026-03-18T12:14:17+00:00

Test pkcs11 URI support for UEFI capsule generation. Both
public certificate and private key are used over pkcs11
protocol.
Pkcs11-tool has been introduced as softhsm tool doesn't have
functionality to import certificates in commonly distributed
version (only in the latest).

Signed-off-by: Wojciech Dubowik 
Reviewed-by: Simon Glass