When trying to sign a Linux fitImage including a U-Boot boot script we end up in a dependency loop.
In this scenario adding the public key used to sign the fitImage to the U-Boot dtb depends on the availability of the Linux fitImage. The fitImage in turn can not be created before the boot script is made available by the U-Boot do_populate_sysroot task which can not run before the signing of U-Boot. To fix this, we create a dummy fitImage to feed to mkimage when adding the public keys instead of using the Linux fitImage. The dependency on Linux fitImage availability from U-Boot recipes can thus be removed. This approach was earlier suggested by Sean Anderson in commit d6858c9f45d25cfec6defec17f62139593ae87f3. David Wretman (1): uboot-sign.bbclass: Break dependency loop in fitImage signing meta/classes-recipe/uboot-sign.bbclass | 77 ++++++++++++++++++++------ 1 file changed, 61 insertions(+), 16 deletions(-) -- 2.34.1
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#193990): https://lists.openembedded.org/g/openembedded-core/message/193990 Mute This Topic: https://lists.openembedded.org/mt/103809810/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
