On 27.03.25 19:45, 'Guthrie Hamish' via EFI Boot Guard wrote: > >>Sure. The approach we developed in CIP is conceptually not bound to the >>isar-based integration there. However, this layer here does not yet >>support unified kernel image generation like we do over there. And one >>of the reason to have EBG providing the UKI is non-x86: there is too >>often the need to update the DTB in lock-step with the kernel (sigh). > > It may sound crazy, but I have introduced DT into our x86 kernels because > we use DT for defining blocks in our FPGA's which are used in both ARM and > x86 platforms, so I have UKI building using the layer, but I just > wrapped theĀ > bg_gen_unified_kernel in our image creation recipe, but I would > obviously prefer > to have it as part of the efibootguard wic plugin. > > I would be very interested in hearing how you use efi in the boot process of > Arm platforms. Is there documentation for this you could point me to > perhaps?
Have a look here: https://elinux.org/images/4/42/ELCE2022-UEFISecureBootOTAUpdatesOnARM.pdf Or study this isar layer for a (public) example: https://github.com/siemens/meta-iot2050 > > We are also wanting to build for Nvidia Tegra platforms (and that would > be using > ISAR) - would know per chance if there is anyone else using ISAR for these > platforms? > Our SIMATIC IPC BX-35A (Orin-based) was enabled also with Debian, using isar to describe images for it. Unfortunately, the BSP layer is nothing I can share. > I will be out of office the whole week next week, but I could submit > some initial > patches when I return from holidays. No worries, same here. Thanks, Jan -- Siemens AG, Foundational Technologies Linux Expert Center -- You received this message because you are subscribed to the Google Groups "EFI Boot Guard" group. To unsubscribe from this group and stop receiving emails from it, send an email to efibootguard-dev+unsubscr...@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/efibootguard-dev/f461cf8d-790c-4584-880c-8af0b8b0fe1a%40siemens.com.