From 562dcc6240fdb9b21e0e3b8da0a8452906e31aad Mon Sep 17 00:00:00 2001 From: Bryan Brattlof Date: Thu, 12 Jun 2025 06:38:50 -0500 Subject: binman: alphabetize missing-blob entries As the list of entries grows let's alphabetize the list to make searching a little easier. No functional changes intended Reviewed-by: Anshul Dalal Signed-off-by: Bryan Brattlof --- tools/binman/missing-blob-help | 30 +++++++++++++++--------------- 1 file changed, 15 insertions(+), 15 deletions(-) (limited to 'tools') diff --git a/tools/binman/missing-blob-help b/tools/binman/missing-blob-help index ab0023eb9fb..b73b16f1849 100644 --- a/tools/binman/missing-blob-help +++ b/tools/binman/missing-blob-help @@ -14,15 +14,6 @@ atf-bl31-sunxi: Please read the section on ARM Trusted Firmware (ATF) in board/sunxi/README.sunxi64 -scp-sunxi: -SCP firmware is required for system suspend, but is otherwise optional. -Please read the section on SCP firmware in board/sunxi/README.sunxi64 - -iot2050-seboot: -See the documentation for IOT2050 board. Your image is missing SEBoot -which is mandatory for board startup. Prebuilt SEBoot located at -meta-iot2050/tree/master/recipes-bsp/u-boot/files/prebuild/seboot_pg*.bin. - iot2050-otpcmd: See the documentation for IOT2050 board. Your image is missing OTP command data block which is used for provisioning the customer keys to the board. @@ -31,22 +22,31 @@ meta-iot2050/tree/master/recipes-bsp/secure-boot-otp-provisioning/files/make-otp for how to generate this binary. If you are not using secure boot or do not intend to provision the keys, disable CONFIG_IOT2050_EMBED_OTPCMD. +iot2050-seboot: +See the documentation for IOT2050 board. Your image is missing SEBoot +which is mandatory for board startup. Prebuilt SEBoot located at +meta-iot2050/tree/master/recipes-bsp/u-boot/files/prebuild/seboot_pg*.bin. + k3-rti-wdt-firmware: If CONFIG_WDT_K3_RTI_LOAD_FW is enabled, a firmware image is needed for the R5F core(s) to trigger the system reset. One possible source is https://github.com/siemens/k3-rti-wdt. +opensbi: +See the documentation for your board. The OpenSBI git repo is at +https://github.com/riscv/opensbi.git +You may need to build fw_dynamic.bin first and re-build u-boot with +OPENSBI=/path/to/fw_dynamic.bin + rockchip-tpl: An external TPL is required to initialize DRAM. Get the external TPL binary and build with ROCKCHIP_TPL=/path/to/ddr.bin. One possible source for the external TPL binary is https://github.com/rockchip-linux/rkbin. +scp-sunxi: +SCP firmware is required for system suspend, but is otherwise optional. +Please read the section on SCP firmware in board/sunxi/README.sunxi64 + tee-os: See the documentation for your board. You may need to build Open Portable Trusted Execution Environment (OP-TEE) and build with TEE=/path/to/tee.bin - -opensbi: -See the documentation for your board. The OpenSBI git repo is at -https://github.com/riscv/opensbi.git -You may need to build fw_dynamic.bin first and re-build u-boot with -OPENSBI=/path/to/fw_dynamic.bin -- cgit v1.2.3 From f16f17fb050e44d9381c8742fa7ec1e37618302a Mon Sep 17 00:00:00 2001 From: Bryan Brattlof Date: Thu, 12 Jun 2025 06:38:51 -0500 Subject: binman: add ti-dm entry to missing-blob-help Now that ti-dm is marked as a mandatory component for a successful build, adding some helping text about how to resolve a failed build will be needed. Add some text around what ti-dm is and links to more documentation on how to obtain the firmware binaries Reviewed-by: Anshul Dalal Signed-off-by: Bryan Brattlof --- tools/binman/missing-blob-help | 10 ++++++++++ 1 file changed, 10 insertions(+) (limited to 'tools') diff --git a/tools/binman/missing-blob-help b/tools/binman/missing-blob-help index b73b16f1849..e28eaa20154 100644 --- a/tools/binman/missing-blob-help +++ b/tools/binman/missing-blob-help @@ -50,3 +50,13 @@ Please read the section on SCP firmware in board/sunxi/README.sunxi64 tee-os: See the documentation for your board. You may need to build Open Portable Trusted Execution Environment (OP-TEE) and build with TEE=/path/to/tee.bin + +ti-dm: +You are missing TI's Device Management (DM) firmware which is critical to +provide resource and power management services for your board. Your board +will not boot without this firmware. + +Have a look at your board's documentation to find the latest version of +the DM firmware binary and how to include it in the build. + + https://docs.u-boot.org/en/latest/board/ti/k3.html -- cgit v1.2.3 From cf744bda69772cae34a48ee2d19eefd68231f09d Mon Sep 17 00:00:00 2001 From: Bryan Brattlof Date: Thu, 12 Jun 2025 06:38:52 -0500 Subject: binman: add sysfw-inner-cert to missing-blob-help Now that the inner certificate for TI's Foundation Security TIFS firmware is mandatory to a successful build, provide some guidance on what it is and links to the documentation on how to obtain the firmware blobs. Reviewed-by: Anshul Dalal Signed-off-by: Bryan Brattlof --- tools/binman/missing-blob-help | 10 ++++++++++ 1 file changed, 10 insertions(+) (limited to 'tools') diff --git a/tools/binman/missing-blob-help b/tools/binman/missing-blob-help index e28eaa20154..3b16a9b1679 100644 --- a/tools/binman/missing-blob-help +++ b/tools/binman/missing-blob-help @@ -47,6 +47,16 @@ scp-sunxi: SCP firmware is required for system suspend, but is otherwise optional. Please read the section on SCP firmware in board/sunxi/README.sunxi64 +sysfw-inner-cert: +You are missing the inner certificate for TI's Foundational Security (TIFS) +firmware which is critical to authenticating the TIFS firmware during boot. +HS-FS and HS-SE parts will not boot without this certificate. + +Have a look at your board's documentation to find and include the latest +TIFS certificate blobs and how to include them in the build. + + https://docs.u-boot.org/en/latest/board/ti/k3.html + tee-os: See the documentation for your board. You may need to build Open Portable Trusted Execution Environment (OP-TEE) and build with TEE=/path/to/tee.bin -- cgit v1.2.3 From 85c4c34dc92a8b545d376d00ec66990457556e9b Mon Sep 17 00:00:00 2001 From: Bryan Brattlof Date: Thu, 12 Jun 2025 06:38:53 -0500 Subject: binman: allow '.' to be included in the missing blob tags Extend the regex to add periods '.' in the tag so entries like ti-fs-enc.bin can be represented in the missing-blob-help file. Signed-off-by: Bryan Brattlof --- tools/binman/control.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'tools') diff --git a/tools/binman/control.py b/tools/binman/control.py index 1946656f7d3..e5bd7889806 100644 --- a/tools/binman/control.py +++ b/tools/binman/control.py @@ -97,7 +97,7 @@ def _ReadMissingBlobHelp(): return tag, msg my_data = pkg_resources.resource_string(__name__, 'missing-blob-help') - re_tag = re.compile('^([-a-z0-9]+):$') + re_tag = re.compile(r"^([-\.a-z0-9]+):$") result = {} tag = None msg = '' -- cgit v1.2.3 From c1c8d2db436c9d9e8303b9e9cc108e719c6690c4 Mon Sep 17 00:00:00 2001 From: Bryan Brattlof Date: Thu, 12 Jun 2025 06:38:54 -0500 Subject: binmain: include ti-fs-enc.bin into missing-blob-help Now that the TIFS firmware is marked as a mandatory component to a successful build, provide some helpful descriptions to what it is and links to more information about how to get this needed firmware. Signed-off-by: Bryan Brattlof --- tools/binman/missing-blob-help | 11 +++++++++++ 1 file changed, 11 insertions(+) (limited to 'tools') diff --git a/tools/binman/missing-blob-help b/tools/binman/missing-blob-help index 3b16a9b1679..d2ed35bef4d 100644 --- a/tools/binman/missing-blob-help +++ b/tools/binman/missing-blob-help @@ -70,3 +70,14 @@ Have a look at your board's documentation to find the latest version of the DM firmware binary and how to include it in the build. https://docs.u-boot.org/en/latest/board/ti/k3.html + +ti-fs-enc.bin: +You are missing TI's Foundational Security (TIFS) firmware which is +critical to provide foundational security services like authenticated boot, +and firewall management for the SoC. Your board will not boot without +this firmware. + +Have a look at your board's documentation to find the latest version of the +TIFS firmware binary and how to include them in the build. + + https://docs.u-boot.org/en/latest/board/ti/k3.html -- cgit v1.2.3