On 2026-07-09T02:29:00, James Hilliard <[email protected]> wrote: > tools: binman: pass KEYDIR to FIT entries > > U-Boot's Makefile passes KEYDIR to direct mkimage invocations, but > internal binman FIT builds only receive the generic BINMAN_INDIRS search > path. Adding KEYDIR to BINMAN_INDIRS treats it as one more input-file > search path: FIT entries still auto-detect a key directory from all > include directories, so an explicit KEYDIR may not be the directory that > gets passed to mkimage. It also makes a key-only directory part of the > generic blob lookup path. > > Forward KEYDIR as a binman entry argument named keydir, matching the > existing entry-argument mechanism used for BL31, TEE, of-list and other > U-Boot build inputs. FIT entries use that directory directly for > mkimage -k when fit,sign or fit,encrypt is enabled, falling back to the > include-directory autodetection when keydir is not provided. > > Signed-off-by: James Hilliard <[email protected]> > > Makefile | 1 + > tools/binman/binman.rst | 5 +++++ > tools/binman/etype/fit.py | 28 ++++++++++++++++------------ > tools/binman/ftest.py | 40 ++++++++++++++++++++++++++++++++++++++++ > 4 files changed, 62 insertions(+), 12 deletions(-)
Reviewed-by: Simon Glass <[email protected]>
