Hi Denys,

On 12:44-20230511, Denys Dmytriyenko wrote:
> On Thu, May 11, 2023 at 01:20:08PM -0300, Ricardo Salveti wrote:
> > On Thu, May 11, 2023 at 12:48 PM Denys Dmytriyenko <[email protected]> wrote:
> > >
> > > On Thu, May 11, 2023 at 11:54:00AM +0530, Manorit Chawdhry via 
> > > lists.yoctoproject.org wrote:
> > > > Signed-off-by: Manorit Chawdhry <[email protected]>
> > > > ---
> > > > To: Ryan Eatmon <[email protected]>
> > > > To: Denys Dmytriyenko <[email protected]>
> > > > Cc: [email protected]
> > > > Cc: Vignesh Raghavendra <[email protected]>
> > > > Cc: Praneeth Bajjuri <[email protected]>
> > > > Cc: Udit Kumar <[email protected]>
> > > > Cc: Andrew Davis <[email protected]>
> > > > Cc: Kamlesh Gurudasani <[email protected]>
> > > > ---
> > > >  meta-ti-bsp/conf/machine/include/k3.inc | 6 ++++++
> > > >  1 file changed, 6 insertions(+)
> > > >
> > > > diff --git a/meta-ti-bsp/conf/machine/include/k3.inc 
> > > > b/meta-ti-bsp/conf/machine/include/k3.inc
> > > > index fff1550564b3..ab7e45a8016f 100644
> > > > --- a/meta-ti-bsp/conf/machine/include/k3.inc
> > > > +++ b/meta-ti-bsp/conf/machine/include/k3.inc
> > > > @@ -31,6 +31,12 @@ SPL_BINARY = "tispl.bin"
> > > >  SPL_BINARYNAME = "tispl.bin"
> > > >  UBOOT_SUFFIX = "img"
> > > >
> > > > +UBOOT_SIGN_ENABLE = "1"
> > > > +UBOOT_MKIMAGE_DTCOPTS = "-I dts -O dtb"
> > > > +UBOOT_SIGN_KEYNAME = "uboot_signing_dev_key"
> > > > +UBOOT_SIGN_KEYDIR = "${DEPLOY_DIR_IMAGE}/u-boot-keys"
> > >
> > > How are the keys get into there? Are there extra docs/instructions?
> > 
> > FIT_GENERATE_KEYS set to 1 forces the key to be automatically
> > generated by openembedded-core/meta/classes/uboot-sign.bbclass, so
> > they are created during build time.
> 
> I know, and that is fine for development, but not so much for production - 
> that is why I asked for docs/instructions for someone to deploy their own 
> keys and disable autogeneration.
> 

Even I am trying to decide if we should have ti-dummy keys type thing
for this or if we should make them dynamic, i believe keeping them
constant would be good for development as well but need to get opinion
of others ( and also the place to keep the keys ), let me know if you
guys have any idea on this?

Regards,
Manorit

> -- 
> Denys
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#16526): 
https://lists.yoctoproject.org/g/meta-ti/message/16526
Mute This Topic: https://lists.yoctoproject.org/mt/98822327/21656
Group Owner: [email protected]
Unsubscribe: https://lists.yoctoproject.org/g/meta-ti/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to