This is a PR for the firmware A/B updates going via the TPM tree. Sughosh and Michal have verified and tested the changes.

The following changes since commit 650883a568653f37ee4ff43beda56152b594a49c:

cmd: osd: Depend on OSD (2024-09-16 16:46:16 -0600)

are available in the Git repository at:

https://source.denx.de/u-boot/custodians/u-boot-tpm/ tags/fwu-next-19092024

for you to fetch changes up to 6f933aa963bb971d848ff6bd1c743035bbc98ead:

fwu: print a message if empty capsule checks fail (2024-09-19 10:52:50 +0300)

The CI https://source.denx.de/u-boot/custodians/u-boot-tpm/-/pipelines/22364 showed no issues

Please pull! /Ilias

---------------------------------------------------------------- This PR contains various improvements in the A/B update logic for EFI

- Read both copies of metadata, in case one of the is corrupted - Check the metadata version against the running firmware to make sure it's allowed - Limit the use of a revert capsule if the board is on a trial state and make sure it's not applied if the max counter has expired

---------------------------------------------------------------- Sughosh Ganu (6): fwu: v2: try reading both copies of metadata fwu: v1: do a version check for the metadata fwu: check all images for transitioning out of Trial State fwu: add dependency checks for selecting FWU metadata version fwu: do not allow capsule processing on exceeding Trial Counter threshold fwu: print a message if empty capsule checks fail

include/fwu.h | 11 ++++++ lib/efi_loader/efi_capsule.c | 11 ++++-- lib/fwu_updates/Kconfig | 1 + lib/fwu_updates/fwu.c | 31 +++++++++++++++-- lib/fwu_updates/fwu_v1.c | 18 +++++++--- lib/fwu_updates/fwu_v2.c | 81 ++++++++++++++++++++++++-------------------- 6 files changed, 108 insertions(+), 45 deletions(-)