u-boot: create signed bootscript at build time

Message ID 20221120094642.2408986-1-arne_f@ipfire.org
State Accepted
Commit afa464fd4aebfab35badb0d4231b492dde1fe728
Headers
Series u-boot: create signed bootscript at build time |

Commit Message

Arne Fitzenreiter Nov. 20, 2022, 9:46 a.m. UTC
  before this was as binary in git which make no real sense.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
---
 config/u-boot/boot.scr | Bin 2514 -> 0 bytes
 lfs/u-boot             |   3 +++
 2 files changed, 3 insertions(+)
 delete mode 100644 config/u-boot/boot.scr

index 3452efddb..e5a48ef91 100644
  

Comments

Peter Müller Nov. 21, 2022, 8:25 a.m. UTC | #1
Acked-by: Peter Müller <peter.mueller@ipfire.org>

> before this was as binary in git which make no real sense.
> 
> Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
> ---
>  config/u-boot/boot.scr | Bin 2514 -> 0 bytes
>  lfs/u-boot             |   3 +++
>  2 files changed, 3 insertions(+)
>  delete mode 100644 config/u-boot/boot.scr
> 
> diff --git a/config/u-boot/boot.scr b/config/u-boot/boot.scr
> deleted file mode 100644
> index 875e09dc23cd2b8f17fd46d73f4deed208987004..0000000000000000000000000000000000000000
> GIT binary patch
> literal 0
> HcmV?d00001
> 
> literal 2514
> zcmc&#+iu!G5REFelKlsL8v#<Ks^*fYY7~?QLa2nAiv(#@^@ZAa9ai|J^_pA|KhVd%
> z_80n1{eku)I=kL=7D6a_X?XzbnK|do%<jyq=PxgR?*97ie*XStXUF=sqdq@gcL&d(
> zz0i*veyy*<NCV&`<4~J>Ny0}ynJwTDDwQ_y35jhhBb>xD&_;-&al3rWR0uRMu7M^m
> zoHo<FwjI#6ZQnzqbrk2(T4ZHI0r*ci+16hIwI&_eL_vaZg;YvTUB=hamezt;$~$N&
> zkSg?}G+`X_9_G$(c)ea1=>#qh6W3oVmMUC9RGUu;i%B?geV>ikLITtgK$nw@CkdPg
> z3;``H2#xwhjcLK@h-R$7)aC&VNk;F;0-bezDz$lzf#b+uRF;}%Ng9P5X2iCNH%Hhn
> zxTbuv!fvrV1_fmnvkF1NV4Os$%c&PqehZAaSrTV}=K_u|j)ou4KJ@_wT@w%>Neo#Y
> z-_Wx8sL@MYrW8us>e&i>F0#X{H6SJ_n^}eKgp8*GKO>B~A!>=U1bt}+BzC=!_$Je^
> zH|TdxobLJA@cg7#6y^M^<kNMl%@xe@$uR3`Xl5xb5v<Y&G16SdyDXaR8y=+#rmj*e
> zlz0sLj>T+v<7jt(@129l&Yt5rX_#kqpL-^VKIA%K&TogUH?7v&-DWf1$0p&26s^U7
> zI<svlAFyphXYj3Y@0@m;EBfTE6hcKaO}&rG{da{~X8J$%D9WO{s3xu1@a2L^_kiNC
> z5JO~$7qIkA@bc(0jiok*w#%+E?RR+Z1Y&gKv!37!`QqB8yloeP){)>LY{3S6Y2Sb>
> zFSQbfS7S7xR}%=-2k-oo$LlN#X`J6VwfTq3-eBR-G@y)><CEW}Vqk88E7a(jjW=;4
> zVB`K?8(R*q-uvT=?&<MxWf;ps>Z&3S2p;U0L5U?5!&Akp;iu}v+{mZdRI0-$^AQ)!
> zmRre;!ll%YDc_jl(z+TH3P7wr;>)dK91(4eakUs8`V5-P;HcEZ^1Z`k9&9<&d$C$0
> z5k;RIWj{jZYzhCs&#uCNh@B{QmRP0-_$Hdt$h{)qbRkY+{Othl1#m7P8#9`6aC~S8
> PCGx9|E8BcTAF%%bUf>%$
> 
> diff --git a/lfs/u-boot b/lfs/u-boot
> index 3452efddb..e5a48ef91 100644
> --- a/lfs/u-boot
> +++ b/lfs/u-boot
> @@ -240,6 +240,9 @@ endif
>  
>  	# config (uEnv.txt and boot.*)
>  	cp -vf $(DIR_SRC)/config/u-boot/* /boot/
> +	# create signed binary boot script (boot.scr)
> +	mkimage -C none -A arm -T script -d /boot/boot.cmd /boot/boot.scr
> +
>  	# patch real Kernel version to uEnv.txt
>  	sed -e "s/xxxKVERxxx/$(KVER)/g" -i /boot/uEnv.txt
>
  
Michael Tremer Nov. 21, 2022, 9:17 a.m. UTC | #2
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>

> On 21 Nov 2022, at 08:25, Peter Müller <peter.mueller@ipfire.org> wrote:
> 
> Acked-by: Peter Müller <peter.mueller@ipfire.org>
> 
>> before this was as binary in git which make no real sense.
>> 
>> Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
>> ---
>> config/u-boot/boot.scr | Bin 2514 -> 0 bytes
>> lfs/u-boot             |   3 +++
>> 2 files changed, 3 insertions(+)
>> delete mode 100644 config/u-boot/boot.scr
>> 
>> diff --git a/config/u-boot/boot.scr b/config/u-boot/boot.scr
>> deleted file mode 100644
>> index 875e09dc23cd2b8f17fd46d73f4deed208987004..0000000000000000000000000000000000000000
>> GIT binary patch
>> literal 0
>> HcmV?d00001
>> 
>> literal 2514
>> zcmc&#+iu!G5REFelKlsL8v#<Ks^*fYY7~?QLa2nAiv(#@^@ZAa9ai|J^_pA|KhVd%
>> z_80n1{eku)I=kL=7D6a_X?XzbnK|do%<jyq=PxgR?*97ie*XStXUF=sqdq@gcL&d(
>> zz0i*veyy*<NCV&`<4~J>Ny0}ynJwTDDwQ_y35jhhBb>xD&_;-&al3rWR0uRMu7M^m
>> zoHo<FwjI#6ZQnzqbrk2(T4ZHI0r*ci+16hIwI&_eL_vaZg;YvTUB=hamezt;$~$N&
>> zkSg?}G+`X_9_G$(c)ea1=>#qh6W3oVmMUC9RGUu;i%B?geV>ikLITtgK$nw@CkdPg
>> z3;``H2#xwhjcLK@h-R$7)aC&VNk;F;0-bezDz$lzf#b+uRF;}%Ng9P5X2iCNH%Hhn
>> zxTbuv!fvrV1_fmnvkF1NV4Os$%c&PqehZAaSrTV}=K_u|j)ou4KJ@_wT@w%>Neo#Y
>> z-_Wx8sL@MYrW8us>e&i>F0#X{H6SJ_n^}eKgp8*GKO>B~A!>=U1bt}+BzC=!_$Je^
>> zH|TdxobLJA@cg7#6y^M^<kNMl%@xe@$uR3`Xl5xb5v<Y&G16SdyDXaR8y=+#rmj*e
>> zlz0sLj>T+v<7jt(@129l&Yt5rX_#kqpL-^VKIA%K&TogUH?7v&-DWf1$0p&26s^U7
>> zI<svlAFyphXYj3Y@0@m;EBfTE6hcKaO}&rG{da{~X8J$%D9WO{s3xu1@a2L^_kiNC
>> z5JO~$7qIkA@bc(0jiok*w#%+E?RR+Z1Y&gKv!37!`QqB8yloeP){)>LY{3S6Y2Sb>
>> zFSQbfS7S7xR}%=-2k-oo$LlN#X`J6VwfTq3-eBR-G@y)><CEW}Vqk88E7a(jjW=;4
>> zVB`K?8(R*q-uvT=?&<MxWf;ps>Z&3S2p;U0L5U?5!&Akp;iu}v+{mZdRI0-$^AQ)!
>> zmRre;!ll%YDc_jl(z+TH3P7wr;>)dK91(4eakUs8`V5-P;HcEZ^1Z`k9&9<&d$C$0
>> z5k;RIWj{jZYzhCs&#uCNh@B{QmRP0-_$Hdt$h{)qbRkY+{Othl1#m7P8#9`6aC~S8
>> PCGx9|E8BcTAF%%bUf>%$
>> 
>> diff --git a/lfs/u-boot b/lfs/u-boot
>> index 3452efddb..e5a48ef91 100644
>> --- a/lfs/u-boot
>> +++ b/lfs/u-boot
>> @@ -240,6 +240,9 @@ endif
>> 
>> # config (uEnv.txt and boot.*)
>> cp -vf $(DIR_SRC)/config/u-boot/* /boot/
>> + # create signed binary boot script (boot.scr)
>> + mkimage -C none -A arm -T script -d /boot/boot.cmd /boot/boot.scr
>> +
>> # patch real Kernel version to uEnv.txt
>> sed -e "s/xxxKVERxxx/$(KVER)/g" -i /boot/uEnv.txt
>>
  

Patch

diff --git a/config/u-boot/boot.scr b/config/u-boot/boot.scr
deleted file mode 100644
index 875e09dc23cd2b8f17fd46d73f4deed208987004..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 2514
zcmc&#+iu!G5REFelKlsL8v#<Ks^*fYY7~?QLa2nAiv(#@^@ZAa9ai|J^_pA|KhVd%
z_80n1{eku)I=kL=7D6a_X?XzbnK|do%<jyq=PxgR?*97ie*XStXUF=sqdq@gcL&d(
zz0i*veyy*<NCV&`<4~J>Ny0}ynJwTDDwQ_y35jhhBb>xD&_;-&al3rWR0uRMu7M^m
zoHo<FwjI#6ZQnzqbrk2(T4ZHI0r*ci+16hIwI&_eL_vaZg;YvTUB=hamezt;$~$N&
zkSg?}G+`X_9_G$(c)ea1=>#qh6W3oVmMUC9RGUu;i%B?geV>ikLITtgK$nw@CkdPg
z3;``H2#xwhjcLK@h-R$7)aC&VNk;F;0-bezDz$lzf#b+uRF;}%Ng9P5X2iCNH%Hhn
zxTbuv!fvrV1_fmnvkF1NV4Os$%c&PqehZAaSrTV}=K_u|j)ou4KJ@_wT@w%>Neo#Y
z-_Wx8sL@MYrW8us>e&i>F0#X{H6SJ_n^}eKgp8*GKO>B~A!>=U1bt}+BzC=!_$Je^
zH|TdxobLJA@cg7#6y^M^<kNMl%@xe@$uR3`Xl5xb5v<Y&G16SdyDXaR8y=+#rmj*e
zlz0sLj>T+v<7jt(@129l&Yt5rX_#kqpL-^VKIA%K&TogUH?7v&-DWf1$0p&26s^U7
zI<svlAFyphXYj3Y@0@m;EBfTE6hcKaO}&rG{da{~X8J$%D9WO{s3xu1@a2L^_kiNC
z5JO~$7qIkA@bc(0jiok*w#%+E?RR+Z1Y&gKv!37!`QqB8yloeP){)>LY{3S6Y2Sb>
zFSQbfS7S7xR}%=-2k-oo$LlN#X`J6VwfTq3-eBR-G@y)><CEW}Vqk88E7a(jjW=;4
zVB`K?8(R*q-uvT=?&<MxWf;ps>Z&3S2p;U0L5U?5!&Akp;iu}v+{mZdRI0-$^AQ)!
zmRre;!ll%YDc_jl(z+TH3P7wr;>)dK91(4eakUs8`V5-P;HcEZ^1Z`k9&9<&d$C$0
z5k;RIWj{jZYzhCs&#uCNh@B{QmRP0-_$Hdt$h{)qbRkY+{Othl1#m7P8#9`6aC~S8
PCGx9|E8BcTAF%%bUf>%$

diff --git a/lfs/u-boot b/lfs/u-boot
--- a/lfs/u-boot
+++ b/lfs/u-boot
@@ -240,6 +240,9 @@  endif
 
 	# config (uEnv.txt and boot.*)
 	cp -vf $(DIR_SRC)/config/u-boot/* /boot/
+	# create signed binary boot script (boot.scr)
+	mkimage -C none -A arm -T script -d /boot/boot.cmd /boot/boot.scr
+
 	# patch real Kernel version to uEnv.txt
 	sed -e "s/xxxKVERxxx/$(KVER)/g" -i /boot/uEnv.txt