Hi Siew, On Sun, 20 Dec 2020 at 02:06, Lim, Elly Siew Chin <[email protected]> wrote: > > Hi Simon, > > We call binman to generate itb file in "make fit-itb". > > We didn't put it in default binman flow is because it require > Arm-trusted-firmware (bl31.bin) and Linux Image and dtb to build the itb > file. These files are not part of u-boot. The user will hit compilation error > if these files are not prepared before they build u-boot. Besides, we are in > progressing enabling Vendor Authorized Boot (VAB) for Intel SoC FPGA, which > requires u-boot prope, dtb, bl31.bin and Linux Image, dtb to be signed before > generate the itb. The signing process involves another signing tool. > > We prefer not to add new dependency into default u-boot compilation process. > As a result, we build itb files with "make fit-itb".
The ATF stuff is not new. On various we use the 'external' flag (or blob-ext entry type) to handle this. See atf_bl31.py for example. If the file is not available, a warning is printing but the build succeeds. Binman should be able to generate all the images. The split of responsibilities should be: - Makefile - builds the binaries - Other projects - build their binaries - binman - put it all together into images Regards, Simon > > Thanks, > Siew Chin > > > > -----Original Message----- > > From: Simon Glass <[email protected]> > > Sent: Saturday, December 19, 2020 10:29 AM > > To: Lim, Elly Siew Chin <[email protected]> > > Cc: U-Boot Mailing List <[email protected]>; Marek Vasut > > <[email protected]>; Tan, Ley Foon <[email protected]>; See, Chin Liang > > <[email protected]>; Simon Goldschmidt > > <[email protected]>; Chee, Tien Fong > > <[email protected]>; Westergreen, Dalon > > <[email protected]>; Gan, Yau Wai <[email protected]> > > Subject: Re: [v4 16/17] arm: socfpga: soc64: Enable FIT image generation > > using > > binman > > > > Hi Siew, > > > > On Thu, 17 Dec 2020 at 20:29, Siew Chin Lim <[email protected]> > > wrote: > > > > > > Add new build target "fit-itb" for FIT image generation. > > > > > > In preparation to support Vendor Authorized Boot (VAB) for Intel > > > SOC64 device in near future. With VAB, u-boot proper, dtb and arm > > > trusted firmware need to be signed before FIT image generation. > > > > > > To align user experience for ATF boot with and without VAB feature, we > > > skip binman for ARCH_SOCFPGA in default Makefile flow. User always use > > > 'make fit-itb' to generate FIT image after successfully compile > > > u-boot. > > > > > > Signed-off-by: Siew Chin Lim <[email protected]> > > > > > > --- > > > v2 > > > --- > > > Adjust BINMAN sequence in code, sorted by alphabetical order. > > > --- > > > Makefile | 7 +++++++ > > > arch/arm/mach-socfpga/Kconfig | 2 ++ > > > 2 files changed, 9 insertions(+) > > > > Can't we make binman do this? > > > > Regards, > > Simon
