From: Chunrong Guo <chunrong....@nxp.com> Signed-off-by: Chunrong Guo <chunrong....@nxp.com> --- conf/machine/ls2088ardb.conf | 34 +++++++++++++++++++++++++++++++++- 1 file changed, 33 insertions(+), 1 deletion(-)
diff --git a/conf/machine/ls2088ardb.conf b/conf/machine/ls2088ardb.conf index 170d6a4..2e8f4f6 100644 --- a/conf/machine/ls2088ardb.conf +++ b/conf/machine/ls2088ardb.conf @@ -18,11 +18,43 @@ UBOOT_CONFIG ??= "qspi-secure-boot qspi" UBOOT_CONFIG[qspi] = "ls2088ardb_qspi_defconfig,,u-boot-dtb.bin" UBOOT_CONFIG[qspi-secure-boot] = "ls2088ardb_qspi_SECURE_BOOT_defconfig,,u-boot-dtb.bin" +UBOOT_SECURE_ENABLE = "1" +ENCAP = "1" +RCW_NOR = "rcw/ls2088ardb/FFFFFFFF_PP_HH_0x2a_0x41/PBL_0x2a_0x41_1800_700_1866_1600.bin" +RCW_NOR_SEC = "rcw/ls2088ardb/FFFFFFFF_PP_HH_0x2a_0x41/PBL_0x2a_0x41_1800_700_1866_1600_sec.bin" +RCW_QSPI = "rcw/ls2088ardb/FFFFFFFF_PP_HH_0x2a_0x41/PBL_0x2a_0x41_2000_800_2133_1600_QSPIboot.bin" +RCW_QSPI_SEC = "rcw/ls2088ardb/FFFFFFFF_PP_HH_0x2a_0x41/PBL_0x2a_0x41_2000_800_2133_1600_QSPIboot_sec.bin" + +DPAA2_MC_FW = "mc_app/mc.itb" +DPAA2_MC_DPC= "dpl-examples/ls2088a/RDB/custom/dpc-bman-4M.0x2A_0x41.dtb" +DPAA2_MC_DPL= "dpl-examples/dpl-eth.0x2A_0x41.dtb" + +UBOOT_QSPIBOOT_SEC = "u-boot.bin-qspi-secure-boot" +UBOOT_SDBOOT_SEC = "null" + +UBOOT_SCR = "ls2088ardb_boot.scr" +BOOTSCRIPT_DEC = "ls2088ardb_dec_boot.scr" + +SECUREVALIDATE = "setenv secureboot_validate 'load \$devtype \$devnum:2 \$kernelheader_addr_r /secboot_hdrs/ls2088ardb/hdr_linux.out; load \$devtype \$devnum:2 \$fdtheader_addr_r /secboot_hdrs/ls2088ardb/hdr_dtb.out; esbc_validate \$kernelheader_addr_r; esbc_validate \$fdtheader_addr_r'" + +SECUREVALIDATE_ENC = "setenv secureboot_validate 'load \$devtype \$devnum:2 \$kernelheader_addr_r /secboot_hdrs/ls2088ardb/hdr_linux.out; esbc_validate \$kernelheader_addr_r;load \$devtype \$devnum:2 \$fdtheader_addr_r /secboot_hdrs/ls2088ardb/hdr_dtb.out; esbc_validate \$fdtheader_addr_r; size \$devtype \$devnum:2 /vmlinuz; echo Encapsulating linux image;setenv key_addr 0x87000000; mw \$key_addr $key_id_1;setexpr \$key_addr \$key_addr + 0x4; mw \$key_addr $key_id_2;setexpr \$key_addr \$key_addr + 0x4; mw \$key_addr $key_id_3;setexpr \$key_addr \$key_addr + 0x4; mw \$key_addr $key_id_4;blob enc \$kernel_addr_r \$load_addr \$filesize \$key_addr; setexpr blobsize \$filesize + 0x30;echo Saving encrypted linux ;save \$devtype \$devnum:2 \$load_addr /vmlinuz \$blobsize;size \$devtype \$devnum:2 /fsl-ls2088a-rdb.dtb;echo Encapsulating dtb image; blob enc \$fdt_addr_r \$load_addr \$filesize \$key_addr; setexpr blobsize \$filesize + 0x30;echo Saving encrypted dtb; save \$devtype \$d evnum:2 \$load_addr /fsl-ls2088a-rdb.dtb \$blobsize; size \$devtype \$devnum:2 /ls2088ardb_dec_boot.scr; load \$devtype \$devnum:2 \$load_addr /ls2088ardb_dec_boot.scr; echo replacing Bootscript; save \$devtype \$devnum:2 \$load_addr /ls2088ardb_boot.scr \$filesize;size \$devtype \$devnum:2 /secboot_hdrs/ls2088ardb/hdr_ls2088ardb_bs_dec.out; load \$devtype \$devnum:2 \$load_addr /secboot_hdrs/ls2088ardb/hdr_ls2088ardb_bs_dec.out ;echo Replacing bootscript header; save \$devtype \$devnum:2 \$load_addr /hdr_ls2088ardb_bs.out \$filesize;reset;'" + +SECUREVALIDATE_DEC = "setenv secureboot_validate 'size \$devtype \$devnum:2 /vmlinuz;setexpr imgsize \$filesize - 0x30 ;echo Decapsulating linux image; setenv key_addr 0x87000000; mw \$key_addr $key_id_1;setexpr \$key_addr \$key_addr + 0x4; mw \$key_addr $key_id_2;setexpr \$key_addr \$key_addr + 0x4; mw \$key_addr $key_id_3;setexpr \$key_addr \$key_addr + 0x4; mw \$key_addr $key_id_4; blob dec \$kernel_addr_r \$load_addr \$imgsize \$key_addr; cp.b \$load_addr \$kernel_addr_r \$filesize ;size \$devtype \$devnum:2 /fsl-ls2088a-rdb.dtb;setexpr imgsize \$filesize - 0x30 ;echo Decapsulating dtb image; blob dec \$fdt_addr_r \$load_addr \$imgsize \$key_addr; cp.b \$load_addr \$fdt_addr_r \$filesize ; '" + +DISTROBOOT = "'part uuid $devtype $devnum:3 partuuid3; setenv bootargs console=ttyS1,115200 earlycon=uart8250,mmio,0x21c0600 root=PARTUUID=$partuuid3 rw rootwait default_hugepagesz=2m hugepagesz=2m hugepages=256; load $devtype $devnum:2 $kernel_addr_r /vmlinuz;load $devtype $devnum:2 $fdt_addr_r /fsl-ls2088a-rdb.dtb; env exists secureboot && echo validating secureboot && run secureboot_validate; bootm $kernel_addr_r - $fdt_addr_r'" + +NOR_SCRIPT = "platforms/ls2088_1088_nor.sh" +QSPI_SCRIPT = "platforms/ls2088_qspi.sh" + +KERNEL_IMG = "Image" +KERNEL_UIMG = "uImage" +DEVICE_TREE = "fsl-ls2088a-rdb.dtb" + KERNEL_DEVICETREE ?= "freescale/fsl-ls2088a-rdb.dtb" KERNEL_DEFCONFIG ?= "${S}/arch/arm64/configs/defconfig" SERIAL_CONSOLES ?= "115200;ttyS0 115200;ttyS1 115200;ttyAMA0" SERIAL_CONSOLES_CHECK ?= "${SERIAL_CONSOLES}" -EXTRA_IMAGEDEPENDS += "dpl-examples ls2-phy ls2-rcw management-complex ppa uefi" +EXTRA_IMAGEDEPENDS += "dpl-examples ls2-rcw management-complex ppa uefi" USE_VT = "0" -- 1.9.0 -- _______________________________________________ meta-freescale mailing list meta-freescale@yoctoproject.org https://lists.yoctoproject.org/listinfo/meta-freescale