This series reworks the uboot-sign and kernel-fitimage classes to cut their
intertwining web of dependencies. We do this by signing the kernel image
twice: once for real, and once to embed the keys into U-Boot's dtb. This
cuts two of the dependencies between U-Boot and Linux's recipes, and
moves the deployment and signing of U-Boot back into its own recipe.
I tested this series by running
oe-selftest -r fitimage.FitImageTests
Sean Anderson (6):
uboot-sign: Fix using wrong KEY_REQ_ARGS
kernel: Clear SYSROOT_DIRS instead of replacing sysroot_stage_all
kernel-fitimage: Use KERNEL_OUTPUT_DIR where appropriate
uboot-sign: Use bitbake variables directly
uboot-sign: Split off kernel-fitimage variables
u-boot: Rework signing to remove interdependencies
meta/classes-recipe/kernel-fitimage.bbclass | 109 +++--
meta/classes-recipe/kernel.bbclass | 4 +-
meta/classes-recipe/uboot-config.bbclass | 6 +
meta/classes-recipe/uboot-sign.bbclass | 462 +++++++++-----------
meta/lib/oeqa/selftest/cases/fitimage.py | 29 +-
meta/recipes-bsp/u-boot/u-boot.inc | 3 -
6 files changed, 273 insertions(+), 340 deletions(-)
--
2.35.1.1320.gc452695387.dirty
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#172049):
https://lists.openembedded.org/g/openembedded-core/message/172049
Mute This Topic: https://lists.openembedded.org/mt/94487624/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-
