From aeb44bbe5335aa9b84b9315744c3a7dee4454a6d Mon Sep 17 00:00:00 2001 From: Ryan Eatmon Date: Wed, 29 Mar 2023 10:32:05 -0500 Subject: [PATCH] trusted-firmware-a: Only sign files for platforms that support it We are seeing some testing issues where the new code that signs all of the files at all times is causing issues. So rollback the logic and only sign for platforms that support it. Signed-off-by: Ryan Eatmon --- .../trusted-firmware-a_%.bbappend | 40 ++++++++++++++++++- 1 file changed, 38 insertions(+), 2 deletions(-) diff --git a/meta-ti-bsp/recipes-bsp/trusted-firmware-a/trusted-firmware-a_%.bbappend b/meta-ti-bsp/recipes-bsp/trusted-firmware-a/trusted-firmware-a_%.bbappend index 4019a94b..4ea63205 100644 --- a/meta-ti-bsp/recipes-bsp/trusted-firmware-a/trusted-firmware-a_%.bbappend +++ b/meta-ti-bsp/recipes-bsp/trusted-firmware-a/trusted-firmware-a_%.bbappend @@ -15,12 +15,48 @@ inherit ti-secdev EXTRA_OEMAKE:append:k3 = "${@ ' K3_USART=' + d.getVar('TFA_K3_USART') if d.getVar('TFA_K3_USART') else ''}" EXTRA_OEMAKE:append:k3 = "${@ ' K3_PM_SYSTEM_SUSPEND=' + d.getVar('TFA_K3_SYSTEM_SUSPEND') if d.getVar('TFA_K3_SYSTEM_SUSPEND') else ''}" -# Signing procedure for K3 devices -do_compile:append:k3() { +# Signing procedure for K3 HS devices +tfa_sign_k3hs() { mv ${BUILD_DIR}/bl31.bin ${BUILD_DIR}/bl31.bin.unsigned ${TI_SECURE_DEV_PKG}/scripts/secure-binary-image.sh ${BUILD_DIR}/bl31.bin.unsigned ${BUILD_DIR}/bl31.bin } +do_compile:append:am65xx-hs-evm() { + tfa_sign_k3hs +} + +do_compile:append:am64xx-evm() { + tfa_sign_k3hs +} + +do_compile:append:am62xx-evm() { + tfa_sign_k3hs +} + +do_compile:append:am62xx-lp-evm() { + tfa_sign_k3hs +} + +do_compile:append:am62axx-evm() { + tfa_sign_k3hs +} + +do_compile:append:j721e-hs-evm() { + tfa_sign_k3hs +} + +do_compile:append:j7200-hs-evm() { + tfa_sign_k3hs +} + +do_compile:append:j721s2-hs-evm() { + tfa_sign_k3hs +} + +do_compile:append:j784s4-hs-evm() { + tfa_sign_k3hs +} + do_install:append:k3() { if [ -f ${BUILD_DIR}/bl31.bin.unsigned ]; then echo "Install bl31.bin.unsigned"