[dunfell/master][PATCH] ti-rtos-firmware: sign DM firmware for J721e HS platform

[dunfell/master][PATCH] ti-rtos-firmware: sign DM firmware for J721e HS platform

[Denys Dmytriyenko]

From: Praneeth Bajjuri <praneeth@ti.com>

U-boot build process requires DM firmware to be signed for J7 HS.
It's better for ti-rtos-firmware package (that delivers DM firmware) to sign
it once and provide signed version to other packages, instead of U-boot needing
to re-sign it during build in staging location.

Signed-off-by: Praneeth Bajjuri <praneeth@ti.com>
Signed-off-by: Denys Dmytriyenko <denys@konsulko.com>
---
 recipes-ti/ti-rtos-bin/ti-rtos-firmware.bb | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/recipes-ti/ti-rtos-bin/ti-rtos-firmware.bb b/recipes-ti/ti-rtos-bin/ti-rtos-firmware.bb
index e85948b..38e9adc 100644
--- a/recipes-ti/ti-rtos-bin/ti-rtos-firmware.bb
+++ b/recipes-ti/ti-rtos-bin/ti-rtos-firmware.bb
@@ -74,6 +74,18 @@ SRC_URI[sha256sum] = "${CORESDK_RTOS_FIRMWARE_SHA256SUM}"
 
 FILES_${PN} += "${base_libdir}"
 
+TI_SECURE_DEV_PKG ?= ""
+
+DM_FIRMWARE = "ipc_echo_testb_mcu1_0_release_strip.xer5f"
+
+do_install_prepend_j7-hs-evm() {
+	export TI_SECURE_DEV_PKG=${TI_SECURE_DEV_PKG}
+	( cd ${S}/firmware/pdk-ipc/; \
+		mv ${DM_FIRMWARE} ${DM_FIRMWARE}.unsigned; \
+		${TI_SECURE_DEV_PKG}/scripts/secure-binary-image.sh ${DM_FIRMWARE}.unsigned ${DM_FIRMWARE}; \
+	)
+}
+
 do_install() {
 	CP_ARGS="-Prf --preserve=mode,timestamps --no-preserve=ownership"
 	install -d ${D}${base_libdir}
-- 
2.7.4

Re: [dunfell/master][PATCH] ti-rtos-firmware: sign DM firmware for J721e HS platform

[praneeth]

On 3/26/2021 1:14 PM, Denys Dmytriyenko wrote:
> From: Praneeth Bajjuri <praneeth@ti.com>
> 
> U-boot build process requires DM firmware to be signed for J7 HS.
> It's better for ti-rtos-firmware package (that delivers DM firmware) to sign
> it once and provide signed version to other packages, instead of U-boot needing
> to re-sign it during build in staging location.
> 
> Signed-off-by: Praneeth Bajjuri <praneeth@ti.com>
> Signed-off-by: Denys Dmytriyenko <denys@konsulko.com>

Thanks denys, This looks much better than the earlier version i posted.
Will pull later today.


> ---
>   recipes-ti/ti-rtos-bin/ti-rtos-firmware.bb | 12 ++++++++++++
>   1 file changed, 12 insertions(+)
> 
> diff --git a/recipes-ti/ti-rtos-bin/ti-rtos-firmware.bb b/recipes-ti/ti-rtos-bin/ti-rtos-firmware.bb
> index e85948b..38e9adc 100644
> --- a/recipes-ti/ti-rtos-bin/ti-rtos-firmware.bb
> +++ b/recipes-ti/ti-rtos-bin/ti-rtos-firmware.bb
> @@ -74,6 +74,18 @@ SRC_URI[sha256sum] = "${CORESDK_RTOS_FIRMWARE_SHA256SUM}"
>   
>   FILES_${PN} += "${base_libdir}"
>   
> +TI_SECURE_DEV_PKG ?= ""
> +
> +DM_FIRMWARE = "ipc_echo_testb_mcu1_0_release_strip.xer5f"
> +
> +do_install_prepend_j7-hs-evm() {
> +	export TI_SECURE_DEV_PKG=${TI_SECURE_DEV_PKG}
> +	( cd ${S}/firmware/pdk-ipc/; \
> +		mv ${DM_FIRMWARE} ${DM_FIRMWARE}.unsigned; \
> +		${TI_SECURE_DEV_PKG}/scripts/secure-binary-image.sh ${DM_FIRMWARE}.unsigned ${DM_FIRMWARE}; \
> +	)
> +}
> +
>   do_install() {
>   	CP_ARGS="-Prf --preserve=mode,timestamps --no-preserve=ownership"
>   	install -d ${D}${base_libdir}
>