From 8f01b68d92576613ed670b0f0867388164ee26df Mon Sep 17 00:00:00 2001 From: Ryan Eatmon Date: Wed, 15 Oct 2025 16:09:48 -0500 Subject: [PATCH] k3: Move from UBOOT_SIGN_ENABLE to KERNEL_FITIMAGE_SIGN_ENABLE A recent change in oe-core [1] allowed for signing the fitImage without signing the uboot files. Since we use binman to sign all of the uboot files, we do not want oe-core to re-sign themm, but we do want the fitImage signed. [1] https://git.openembedded.org/openembedded-core/commit/?id=313ff06fdfec36a09328dbd60471bd53127fabe3 Signed-off-by: Ryan Eatmon --- meta-ti-bsp/conf/machine/include/k3.inc | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/meta-ti-bsp/conf/machine/include/k3.inc b/meta-ti-bsp/conf/machine/include/k3.inc index 50411a8e..698b46d7 100644 --- a/meta-ti-bsp/conf/machine/include/k3.inc +++ b/meta-ti-bsp/conf/machine/include/k3.inc @@ -20,10 +20,10 @@ SPL_BINARY = "tispl.bin" SPL_BINARYNAME = "tispl.bin" UBOOT_SUFFIX = "img" -UBOOT_SIGN_ENABLE = "1" +FIT_KERNEL_SIGN_ENABLE = "1" +FIT_KERNEL_SIGN_KEYNAME ?= "custMpk" +FIT_KERNEL_SIGN_KEYDIR ?= "${TI_SECURE_DEV_PKG}/keys" UBOOT_MKIMAGE_DTCOPTS = "-I dts -O dtb" -UBOOT_SIGN_KEYNAME ?= "custMpk" -UBOOT_SIGN_KEYDIR ?= "${TI_SECURE_DEV_PKG}/keys" FIT_HASH_ALG ?= "sha512" FIT_SIGN_ALG ?= "rsa4096"