All of lore.kernel.org
 help / color / mirror / Atom feed
* [PATCH v4 00/12] vpl: Introduce a verifying program loader
@ 2021-08-01 19:21 Simon Glass
  2021-08-01 19:21 ` [PATCH v4 01/12] doc: Convert SPL documentation to ReST Simon Glass
                   ` (11 more replies)
  0 siblings, 12 replies; 13+ messages in thread
From: Simon Glass @ 2021-08-01 19:21 UTC (permalink / raw)
  To: U-Boot Mailing List; +Cc: Tom Rini, Simon Glass, Masahiro Yamada

U-Boot provides a verified-boot feature based around FIT, but there is
no standard way of implementing it for a board. At present the various
required pieces must be built up separately, to produce a working
implementation. In particular, there is no built-in support for selecting
A/B boot or recovery mode.

This series introduces VPL, a verified program loader phase for U-Boot.
Its purpose is to run the verified-boot process and decide which SPL
binary should be run. It is critical that this decision happens before
SPL runs, since SPL sets up SDRAM and we need to be able to update the
SDRAM-init code in the field.

Adding VPL into the boot flow provides a standard way of implementing
verified boot. This series includes the phase itself, some useful Kconfig
options and a sandbox_vpl build for sandbox.

Changes in v4:
- Add new patch to correct bloblist Kconfig dependencies
- Add new patch to avoid building avb in SPL
- Update spl_phase_prefix() for VPL
- Tidy up some of the Makefile rules
- Add options for blk, core, misc and tpl also
- Add VPL_SIZE_LIMIT
- Add a sandbox_vpl build
- Update cover letter

Changes in v3:
- Move VPL Kconfig options to a separate patch
- Add full build support for VPL
- Add a VPL size check (Kconfig option in next patch)

Changes in v2:
- Add some more VPL Kconfig options

Simon Glass (12):
  doc: Convert SPL documentation to ReST
  doc: Expand SPL docs to explain the phase and config
  test: Tidy up test building with SPL
  spl: Move TPL_HASH_SUPPORT down next to other TPL options
  bloblist: Correct Kconfig dependencies
  avb: Don't build in SPL
  Makefile: Simplify devicetree rules for SPL/TPL
  Makefile: Tidy up the TPL build rules
  binman: Add VPL support
  Introduce Verifying Program Loader (VPL)
  vpl: Add Kconfig options for VPL
  sandbox: Add a build for VPL

 Kconfig                                    |  10 +
 Makefile                                   |  30 ++-
 arch/sandbox/Kconfig                       |   8 +
 arch/sandbox/cpu/spl.c                     |  12 +-
 arch/sandbox/dts/sandbox.dtsi              |  10 +-
 board/sandbox/MAINTAINERS                  |   7 +
 common/Kconfig                             |  71 +++++-
 common/Makefile                            |   2 +-
 common/spl/Kconfig                         | 239 +++++++++++++++++++-
 common/spl/spl.c                           |  25 ++-
 configs/sandbox_vpl_defconfig              | 249 +++++++++++++++++++++
 doc/develop/index.rst                      |   1 +
 doc/{README.SPL => develop/spl.rst}        |  75 +++++--
 drivers/Makefile                           |   2 +
 drivers/block/Kconfig                      |  12 +
 drivers/clk/Kconfig                        |  10 +
 drivers/core/Kconfig                       |  33 +++
 drivers/core/Makefile                      |   2 +-
 drivers/gpio/Kconfig                       |  11 +
 drivers/i2c/Kconfig                        |  11 +
 drivers/misc/Kconfig                       |  28 +++
 drivers/pinctrl/Kconfig                    |  18 +-
 drivers/rtc/Kconfig                        |   9 +
 drivers/serial/Kconfig                     |  20 ++
 drivers/sysreset/Kconfig                   |  10 +
 drivers/timer/Kconfig                      |  10 +
 drivers/tpm/Kconfig                        |  30 +++
 dts/Kconfig                                |   9 +
 include/bootstage.h                        |   2 +
 include/linux/kconfig.h                    |   3 +
 include/spl.h                              |  22 +-
 lib/Kconfig                                |  64 +++++-
 scripts/Kbuild.include                     |   4 +
 scripts/Makefile.autoconf                  |  12 +
 scripts/Makefile.build                     |   4 +
 scripts/Makefile.lib                       |   5 +
 scripts/Makefile.spl                       |  37 ++-
 tools/binman/etype/u_boot_vpl.py           |  42 ++++
 tools/binman/etype/u_boot_vpl_bss_pad.py   |  44 ++++
 tools/binman/etype/u_boot_vpl_dtb.py       |  28 +++
 tools/binman/etype/u_boot_vpl_expanded.py  |  45 ++++
 tools/binman/etype/u_boot_vpl_nodtb.py     |  42 ++++
 tools/binman/ftest.py                      | 109 +++++++--
 tools/binman/state.py                      |   3 +-
 tools/binman/test/082_fdt_update_all.dts   |   2 +
 tools/binman/test/201_u_boot_vpl.dts       |  11 +
 tools/binman/test/202_u_boot_vpl_nodtb.dts |  13 ++
 tools/binman/test/203_fdt_incl_vpl.dts     |  13 ++
 tools/binman/test/204_vpl_bss_pad.dts      |  17 ++
 49 files changed, 1387 insertions(+), 89 deletions(-)
 create mode 100644 configs/sandbox_vpl_defconfig
 rename doc/{README.SPL => develop/spl.rst} (69%)
 create mode 100644 tools/binman/etype/u_boot_vpl.py
 create mode 100644 tools/binman/etype/u_boot_vpl_bss_pad.py
 create mode 100644 tools/binman/etype/u_boot_vpl_dtb.py
 create mode 100644 tools/binman/etype/u_boot_vpl_expanded.py
 create mode 100644 tools/binman/etype/u_boot_vpl_nodtb.py
 create mode 100644 tools/binman/test/201_u_boot_vpl.dts
 create mode 100644 tools/binman/test/202_u_boot_vpl_nodtb.dts
 create mode 100644 tools/binman/test/203_fdt_incl_vpl.dts
 create mode 100644 tools/binman/test/204_vpl_bss_pad.dts

-- 
2.32.0.554.ge1b32706d8-goog


^ permalink raw reply	[flat|nested] 13+ messages in thread

end of thread, other threads:[~2021-08-01 19:23 UTC | newest]

Thread overview: 13+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-08-01 19:21 [PATCH v4 00/12] vpl: Introduce a verifying program loader Simon Glass
2021-08-01 19:21 ` [PATCH v4 01/12] doc: Convert SPL documentation to ReST Simon Glass
2021-08-01 19:21 ` [PATCH v4 02/12] doc: Expand SPL docs to explain the phase and config Simon Glass
2021-08-01 19:21 ` [PATCH v4 03/12] test: Tidy up test building with SPL Simon Glass
2021-08-01 19:21 ` [PATCH v4 04/12] spl: Move TPL_HASH_SUPPORT down next to other TPL options Simon Glass
2021-08-01 19:21 ` [PATCH v4 05/12] bloblist: Correct Kconfig dependencies Simon Glass
2021-08-01 19:21 ` [PATCH v4 06/12] avb: Don't build in SPL Simon Glass
2021-08-01 19:21 ` [PATCH v4 07/12] Makefile: Simplify devicetree rules for SPL/TPL Simon Glass
2021-08-01 19:21 ` [PATCH v4 08/12] Makefile: Tidy up the TPL build rules Simon Glass
2021-08-01 19:21 ` [PATCH v4 09/12] binman: Add VPL support Simon Glass
2021-08-01 19:21 ` [PATCH v4 10/12] Introduce Verifying Program Loader (VPL) Simon Glass
2021-08-01 19:21 ` [PATCH v4 11/12] vpl: Add Kconfig options for VPL Simon Glass
2021-08-01 19:21 ` [PATCH v4 12/12] sandbox: Add a build " Simon Glass

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.