From patchwork Sun Nov 20 09:46:42 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Arne Fitzenreiter X-Patchwork-Id: 6153 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4NFQf84fmQz3wc7 for ; Sun, 20 Nov 2022 09:46:56 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail02.haj.ipfire.org", Issuer "R3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4NFQf71wxbz2Qq; Sun, 20 Nov 2022 09:46:55 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4NFQf66ZSnz2xhl; Sun, 20 Nov 2022 09:46:54 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4NFQf609CJz2xhl for ; Sun, 20 Nov 2022 09:46:53 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4NFQf50Qxrzqd; Sun, 20 Nov 2022 09:46:52 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1668937613; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=V5rDrwJ+w9NPfD5Nd6Av71YXFZ/+mzkDSzCEjkOzRMw=; b=I3JPhlQbsZQUhCIXqrwGw9RiYOmTLdZ1ai0QNkSBLsF4op8Bytk//+zSxSdwdWvez8F5Ws zwHGTj+Rp06Ci/Cw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1668937613; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=V5rDrwJ+w9NPfD5Nd6Av71YXFZ/+mzkDSzCEjkOzRMw=; b=p6itIyIoFlZOIvKv3EeEVGRC3PHeoc42HGF0jF0O36ohMivQpwdBGk2PbL8o016hJ2asO6 EaPwqBfmplU2F7Clt5Mwmhaf8p39QdN5hfmZdT8RMnBpMhcpjgF5dQFN+3Nt3IfOAA+FEC 1FRdFkqs6temfAjYHyEG69FDMbhX4ONER2mx1PtQPujXB8PNTQykfu0S6cBcESYRqXadrU weXKTpKolRhQcHq7yVEOC89H2K5AjRGy1Nx2QxtOjr0y5axj2SNVjXRDg9Tz7cCiXDMQxr ZTIyZBkEQxcCF0fW9hk3nPMgyV+I2wMJihukcVbotGcgPhdGvwNnLyRVlFVt7w== From: Arne Fitzenreiter To: development@lists.ipfire.org Subject: [PATCH] u-boot: create signed bootscript at build time Date: Sun, 20 Nov 2022 09:46:42 +0000 Message-Id: <20221120094642.2408986-1-arne_f@ipfire.org> MIME-Version: 1.0 X-BeenThere: development@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IPFire development talk List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Arne Fitzenreiter Errors-To: development-bounces@lists.ipfire.org Sender: "Development" before this was as binary in git which make no real sense. Signed-off-by: Arne Fitzenreiter Acked-by: Peter Müller Reviewed-by: Michael Tremer --- config/u-boot/boot.scr | Bin 2514 -> 0 bytes lfs/u-boot | 3 +++ 2 files changed, 3 insertions(+) delete mode 100644 config/u-boot/boot.scr index 3452efddb..e5a48ef91 100644 diff --git a/config/u-boot/boot.scr b/config/u-boot/boot.scr deleted file mode 100644 index 875e09dc23cd2b8f17fd46d73f4deed208987004..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 2514 zcmc&#+iu!G5REFelKlsL8v#Ny0}ynJwTDDwQ_y35jhhBb>xD&_;-&al3rWR0uRMu7M^m zoHo#qh6W3oVmMUC9RGUu;i%B?geV>ikLITtgK$nw@CkdPg z3;``H2#xwhjcLK@h-R$7)aC&VNk;F;0-bezDz$lzf#b+uRF;}%Ng9P5X2iCNH%Hhn zxTbuv!fvrV1_fmnvkF1NV4Os$%c&PqehZAaSrTV}=K_u|j)ou4KJ@_wT@w%>Neo#Y z-_Wx8sL@MYrW8us>e&i>F0#X{H6SJ_n^}eKgp8*GKO>B~A!>=U1bt}+BzC=!_$Je^ zH|TdxobLJA@cg7#6y^M^T+v<7jt(@129l&Yt5rX_#kqpL-^VKIA%K&TogUH?7v&-DWf1$0p&26s^U7 zILY{3S6Y2Sb> zFSQbfS7S7xR}%=-2k-oo$LlN#X`J6VwfTq3-eBR-G@y)>Z&3S2p;U0L5U?5!&Akp;iu}v+{mZdRI0-$^AQ)! zmRre;!ll%YDc_jl(z+TH3P7wr;>)dK91(4eakUs8`V5-P;HcEZ^1Z`k9&9<&d$C$0 z5k;RIWj{jZYzhCs&#uCNh@B{QmRP0-_$Hdt$h{)qbRkY+{Othl1#m7P8#9`6aC~S8 PCGx9|E8BcTAF%%bUf>%$ diff --git a/lfs/u-boot b/lfs/u-boot --- a/lfs/u-boot +++ b/lfs/u-boot @@ -240,6 +240,9 @@ endif # config (uEnv.txt and boot.*) cp -vf $(DIR_SRC)/config/u-boot/* /boot/ + # create signed binary boot script (boot.scr) + mkimage -C none -A arm -T script -d /boot/boot.cmd /boot/boot.scr + # patch real Kernel version to uEnv.txt sed -e "s/xxxKVERxxx/$(KVER)/g" -i /boot/uEnv.txt