From 5cbe3041befbf4cd588e8f45a793448833cc3f64 Mon Sep 17 00:00:00 2001 From: Jon Mason Date: Thu, 27 Apr 2023 11:56:12 -0400 Subject: [PATCH] arm-bsp/tc1: re-enable signed kernel image --- meta-arm-bsp/conf/machine/include/tc.inc | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/meta-arm-bsp/conf/machine/include/tc.inc b/meta-arm-bsp/conf/machine/include/tc.inc index 14ec7205..75bfea07 100644 --- a/meta-arm-bsp/conf/machine/include/tc.inc +++ b/meta-arm-bsp/conf/machine/include/tc.inc @@ -10,6 +10,17 @@ UBOOT_RD_LOADADDRESS = "0x88000000" UBOOT_RD_ENTRYPOINT = "0x88000000" UBOOT_LOADADDRESS = "0x80080000" UBOOT_ENTRYPOINT = "0x80080000" +# Below options will generate a key to sign the kernel Image and INITRAMFS_IMAGE +# according to the default parameters of kernel-fitimage.bbclass. If the user +# would prefer to use their own keys, disable the key generation using the +# FIT_GENERATE_KEYS parameter and specify the location of the keys using the +# below paramters. +UBOOT_SIGN_ENABLE = "1" +UBOOT_MKIMAGE_DTCOPTS = "-I dts -O dtb" +UBOOT_SIGN_KEYNAME = "dev_key" +UBOOT_SIGN_KEYDIR = "${DEPLOY_DIR_IMAGE}/keys" +FIT_GENERATE_KEYS = "1" +FIT_SIGN_INDIVIDUAL = "1" PREFERRED_PROVIDER_virtual/kernel ?= "linux-yocto"