diff mbox series

[2/2] arm-bsp/tc1: re-enable signed kernel image

Message ID 20230524160237.3275001-2-jon.mason@arm.com
State New
Headers show
Series [1/2] arm-bsp/tc1: use latest kernel and u-boot | expand

Commit Message

Jon Mason May 24, 2023, 4:02 p.m. UTC 
---
 meta-arm-bsp/conf/machine/include/tc.inc | 11 +++++++++++
 1 file changed, 11 insertions(+)

Comments

Jon Mason May 25, 2023, 12:51 a.m. UTC | #1 
On Wed, 24 May 2023 11:02:37 -0500, Jon Mason wrote:
> 


Applied, thanks!

[2/2] arm-bsp/tc1: re-enable signed kernel image
      commit: 5cbe3041befbf4cd588e8f45a793448833cc3f64

Best regards,
diff mbox series

Patch

diff --git a/meta-arm-bsp/conf/machine/include/tc.inc b/meta-arm-bsp/conf/machine/include/tc.inc
index 14ec7205..75bfea07 100644
--- a/meta-arm-bsp/conf/machine/include/tc.inc
+++ b/meta-arm-bsp/conf/machine/include/tc.inc
@@ -10,6 +10,17 @@  UBOOT_RD_LOADADDRESS = "0x88000000"
 UBOOT_RD_ENTRYPOINT = "0x88000000"
 UBOOT_LOADADDRESS = "0x80080000"
 UBOOT_ENTRYPOINT = "0x80080000"
+# Below options will generate a key to sign the kernel Image and INITRAMFS_IMAGE
+# according to the default parameters of kernel-fitimage.bbclass. If the user
+# would prefer to use their own keys, disable the key generation using the
+# FIT_GENERATE_KEYS parameter and specify the location of the keys using the
+# below paramters.
+UBOOT_SIGN_ENABLE = "1"
+UBOOT_MKIMAGE_DTCOPTS = "-I dts -O dtb"
+UBOOT_SIGN_KEYNAME = "dev_key"
+UBOOT_SIGN_KEYDIR = "${DEPLOY_DIR_IMAGE}/keys"
+FIT_GENERATE_KEYS = "1"
+FIT_SIGN_INDIVIDUAL = "1"
 
 PREFERRED_PROVIDER_virtual/kernel ?= "linux-yocto"