mbox series

[0/6] u-boot: Rework signing process to remove interdependencies

Message ID 20221021233726.1751124-1-sean.anderson@seco.com
Headers show
Series u-boot: Rework signing process to remove interdependencies | expand

Message

Sean Anderson Oct. 21, 2022, 11:37 p.m. UTC 
This series reworks the uboot-sign and kernel-fitimage classes to cut their
intertwining web of dependencies. We do this by signing the kernel image
twice: once for real, and once to embed the keys into U-Boot's dtb. This
cuts two of the dependencies between U-Boot and Linux's recipes, and
moves the deployment and signing of U-Boot back into its own recipe.

I tested this series by running

	oe-selftest -r fitimage.FitImageTests


Sean Anderson (6):
  uboot-sign: Fix using wrong KEY_REQ_ARGS
  kernel: Clear SYSROOT_DIRS instead of replacing sysroot_stage_all
  kernel-fitimage: Use KERNEL_OUTPUT_DIR where appropriate
  uboot-sign: Use bitbake variables directly
  uboot-sign: Split off kernel-fitimage variables
  u-boot: Rework signing to remove interdependencies

 meta/classes-recipe/kernel-fitimage.bbclass | 109 +++--
 meta/classes-recipe/kernel.bbclass          |   4 +-
 meta/classes-recipe/uboot-config.bbclass    |   6 +
 meta/classes-recipe/uboot-sign.bbclass      | 462 +++++++++-----------
 meta/lib/oeqa/selftest/cases/fitimage.py    |  29 +-
 meta/recipes-bsp/u-boot/u-boot.inc          |   3 -
 6 files changed, 273 insertions(+), 340 deletions(-)