MediaTek secure-boot tooling signs the raw DDR-loader and SPL payload
before adding the BootROM headers. Signing mtk-boot.bin would instead
sign an image that already carries the unsigned headers.

Have binman emit the existing payload section as mtk-boot-payload.bin.
This keeps the fixed DDR-loader and SPL layout in one description and
does not change mtk-boot.bin.

Signed-off-by: Carlo Caione <[email protected]>
---
 arch/arm/dts/mtk-genio-mtk-boot-binman.dtsi | 1 +
 1 file changed, 1 insertion(+)

diff --git a/arch/arm/dts/mtk-genio-mtk-boot-binman.dtsi 
b/arch/arm/dts/mtk-genio-mtk-boot-binman.dtsi
index 16ce9cacb66..396bd3d143a 100644
--- a/arch/arm/dts/mtk-genio-mtk-boot-binman.dtsi
+++ b/arch/arm/dts/mtk-genio-mtk-boot-binman.dtsi
@@ -18,6 +18,7 @@
                               "-n", "media=emmc;arm64=1";
 
                        section {
+                               filename = "mtk-boot-payload.bin";
                                pad-byte = <0>;
 #include "mtk-genio-loader-spl-binman.dtsi"
                        };

-- 
2.55.0

Reply via email to