On 10/7/26 03:03, Tom Rini wrote:
On Wed, Sep 23, 2026 at 01:49:27PM +0200, Ludwig Nussel wrote:

This patch series tries to improve dealing with FIT
(configuration-)signatures a bit:
   - make signatures work with QEMU. QEMU brings it's own device tree at
     a memory address. U-Boot expects public keys in it's own DT though.
     So merge both.
   - (optionally) enforce signatures so we can't accidentally boot
     unsigned fit images. Quite an easy oversight, esp when qemu
     previously didn't even use the built in DT.
   - make iminfo verify configuration signatures, not just image hashes

- Note: commit 68e65953400 introduced forcing OF_OMIT_DTB which is
   incompatible with the intent of the qemu DT merging feature, ie merge
   built-in signature nodes into qemu's DT. To be sorted out at some
   point.

So this leads to a CI failure:
https://git.u-boot-project.org/u-boot/u-boot/-/jobs/106655
and I wonder if the merge of the device trees goes wrong, or does
something unexpected, is why this test now fails?

Change in rebased code uncovered a bug in the test introduced by me. Working on it.

cu
Ludwig

--
Ludwig Nussel
Siemens AG
www.siemens.com

Reply via email to