Hi Siew,
On Sun, 20 Dec 2020 at 02:06, Lim, Elly Siew Chin elly.siew.chin.lim@intel.com wrote:
Hi Simon,
We call binman to generate itb file in "make fit-itb".
We didn't put it in default binman flow is because it require Arm-trusted-firmware (bl31.bin) and Linux Image and dtb to build the itb file. These files are not part of u-boot. The user will hit compilation error if these files are not prepared before they build u-boot. Besides, we are in progressing enabling Vendor Authorized Boot (VAB) for Intel SoC FPGA, which requires u-boot prope, dtb, bl31.bin and Linux Image, dtb to be signed before generate the itb. The signing process involves another signing tool.
We prefer not to add new dependency into default u-boot compilation process. As a result, we build itb files with "make fit-itb".
The ATF stuff is not new. On various we use the 'external' flag (or blob-ext entry type) to handle this. See atf_bl31.py for example. If the file is not available, a warning is printing but the build succeeds.
Binman should be able to generate all the images. The split of responsibilities should be:
- Makefile - builds the binaries - Other projects - build their binaries - binman - put it all together into images
Regards, Simon
Thanks, Siew Chin
-----Original Message----- From: Simon Glass sjg@chromium.org Sent: Saturday, December 19, 2020 10:29 AM To: Lim, Elly Siew Chin elly.siew.chin.lim@intel.com Cc: U-Boot Mailing List u-boot@lists.denx.de; Marek Vasut marex@denx.de; Tan, Ley Foon ley.foon.tan@intel.com; See, Chin Liang chin.liang.see@intel.com; Simon Goldschmidt simon.k.r.goldschmidt@gmail.com; Chee, Tien Fong tien.fong.chee@intel.com; Westergreen, Dalon dalon.westergreen@intel.com; Gan, Yau Wai yau.wai.gan@intel.com Subject: Re: [v4 16/17] arm: socfpga: soc64: Enable FIT image generation using binman
Hi Siew,
On Thu, 17 Dec 2020 at 20:29, Siew Chin Lim elly.siew.chin.lim@intel.com wrote:
Add new build target "fit-itb" for FIT image generation.
In preparation to support Vendor Authorized Boot (VAB) for Intel SOC64 device in near future. With VAB, u-boot proper, dtb and arm trusted firmware need to be signed before FIT image generation.
To align user experience for ATF boot with and without VAB feature, we skip binman for ARCH_SOCFPGA in default Makefile flow. User always use 'make fit-itb' to generate FIT image after successfully compile u-boot.
Signed-off-by: Siew Chin Lim elly.siew.chin.lim@intel.com
v2
Adjust BINMAN sequence in code, sorted by alphabetical order.
Makefile | 7 +++++++ arch/arm/mach-socfpga/Kconfig | 2 ++ 2 files changed, 9 insertions(+)
Can't we make binman do this?
Regards, Simon