Hi Simon, We call binman to generate itb file in "make fit-itb".
We didn't put it in default binman flow is because it require Arm-trusted-firmware (bl31.bin) and Linux Image and dtb to build the itb file. These files are not part of u-boot. The user will hit compilation error if these files are not prepared before they build u-boot. Besides, we are in progressing enabling Vendor Authorized Boot (VAB) for Intel SoC FPGA, which requires u-boot prope, dtb, bl31.bin and Linux Image, dtb to be signed before generate the itb. The signing process involves another signing tool. We prefer not to add new dependency into default u-boot compilation process. As a result, we build itb files with "make fit-itb". Thanks, Siew Chin > -----Original Message----- > From: Simon Glass <[email protected]> > Sent: Saturday, December 19, 2020 10:29 AM > To: Lim, Elly Siew Chin <[email protected]> > Cc: U-Boot Mailing List <[email protected]>; Marek Vasut > <[email protected]>; Tan, Ley Foon <[email protected]>; See, Chin Liang > <[email protected]>; Simon Goldschmidt > <[email protected]>; Chee, Tien Fong > <[email protected]>; Westergreen, Dalon > <[email protected]>; Gan, Yau Wai <[email protected]> > Subject: Re: [v4 16/17] arm: socfpga: soc64: Enable FIT image generation using > binman > > Hi Siew, > > On Thu, 17 Dec 2020 at 20:29, Siew Chin Lim <[email protected]> > wrote: > > > > Add new build target "fit-itb" for FIT image generation. > > > > In preparation to support Vendor Authorized Boot (VAB) for Intel > > SOC64 device in near future. With VAB, u-boot proper, dtb and arm > > trusted firmware need to be signed before FIT image generation. > > > > To align user experience for ATF boot with and without VAB feature, we > > skip binman for ARCH_SOCFPGA in default Makefile flow. User always use > > 'make fit-itb' to generate FIT image after successfully compile > > u-boot. > > > > Signed-off-by: Siew Chin Lim <[email protected]> > > > > --- > > v2 > > --- > > Adjust BINMAN sequence in code, sorted by alphabetical order. > > --- > > Makefile | 7 +++++++ > > arch/arm/mach-socfpga/Kconfig | 2 ++ > > 2 files changed, 9 insertions(+) > > Can't we make binman do this? > > Regards, > Simon
