diff options
| author | Jan Luebbe <jlu@pengutronix.de> | 2016-01-06 18:01:31 +0100 |
|---|---|---|
| committer | Sascha Hauer <s.hauer@pengutronix.de> | 2016-01-26 22:45:42 +0100 |
| commit | ac55adb3217cf52aec7f26e6b1614b05c9c83605 (patch) | |
| tree | 884a1abd2421b826544d5322cd8fa9492e753a31 /commands/Kconfig | |
| parent | ebb1160cddbd58831cc8347dba94f208a0cb8500 (diff) | |
| download | barebox-ac55adb3217cf52aec7f26e6b1614b05c9c83605.tar.gz barebox-ac55adb3217cf52aec7f26e6b1614b05c9c83605.tar.xz | |
bootm: add initial FIT support
This implementation is inspired by U-Boot's FIT support. Instead of
using libfdt (which does not exist in barebox), configuration signatures
are verified by using a simplified DT parser based on barebox's own
code.
Currently, only signed configurations with hashed images are supported,
as the other variants are less useful for verified boot. Compatible FIT
images can be created using U-Boot's mkimage tool.
Signed-off-by: Jan Luebbe <jlu@pengutronix.de>
Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
Signed-off-by: Sascha Hauer <s.hauer@pengutronix.de>
Diffstat (limited to 'commands/Kconfig')
| -rw-r--r-- | commands/Kconfig | 25 |
1 files changed, 25 insertions, 0 deletions
diff --git a/commands/Kconfig b/commands/Kconfig index 1743670ed3..b4fdc866a7 100644 --- a/commands/Kconfig +++ b/commands/Kconfig @@ -418,6 +418,31 @@ config CMD_BOOTM_AIMAGE help Support using Android Images. +config CMD_BOOTM_FITIMAGE + bool + prompt "FIT image support" + select FITIMAGE + depends on CMD_BOOTM && ARM + help + Support using Flattened Image Tree (FIT) Images. FIT is an image + format introduced by U-Boot. A FIT image contains one or multiple + kernels, device trees and initrds. The FIT image itself is a flattened + device tree binary. Have a look at the u-boot source tree + in the "doc/uImage.FIT" folder for more information: + http://git.denx.de/?p=u-boot.git;a=tree;f=doc/uImage.FIT + +config CMD_BOOTM_FITIMAGE_SIGNATURE + bool + prompt "support verifying signed FIT images" + depends on CMD_BOOTM_FITIMAGE + select FITIMAGE_SIGNATURE + help + Support verifying signed FIT images. This requires FIT images + as described in: + http://git.denx.de/?p=u-boot.git;a=blob;f=doc/uImage.FIT/signature.txt + Additionally the barebox device tree needs a /signature node with the + public key with which the image has been signed. + config CMD_BOOTU tristate default y |