On Wed, 28 Oct 2026 02:14:15 +0000, Enrique Hernández Bello wrote:
> Rebuilding an existing FIT (-F) starts by making a working copy of it,
> and mkimage asks a shell to do that:
>
> snprintf(cmd, sizeof(cmd), "cp \"%s\" \"%s\"",
> params->imagefile, tmpfile);
>
> so signing a FIT needs /bin/sh and cp on top of mkimage itself. That
> rules the tool out of the minimal images where firmware tends to be
> assembled; in one of them the failure reads
>
> [...]
Applied to u-boot/main, thanks!
[1/1] tools: mkimage: copy the FIT in process instead of shelling out to cp
commit: 58eb0801bca518d6aa81a7b49b063aacc6e98bb2
--
Tom
