From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from phobos.denx.de (phobos.denx.de [85.214.62.61]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 7DD58C7619A for ; Wed, 5 Apr 2023 18:40:57 +0000 (UTC) Received: from h2850616.stratoserver.net (localhost [IPv6:::1]) by phobos.denx.de (Postfix) with ESMTP id 77AB18601B; Wed, 5 Apr 2023 20:39:21 +0200 (CEST) Authentication-Results: phobos.denx.de; dmarc=pass (p=none dis=none) header.from=chromium.org Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=u-boot-bounces@lists.denx.de Authentication-Results: phobos.denx.de; dkim=pass (1024-bit key; unprotected) header.d=chromium.org header.i=@chromium.org header.b="hT4MJxMM"; dkim-atps=neutral Received: by phobos.denx.de (Postfix, from userid 109) id B538E85FB3; Wed, 5 Apr 2023 20:38:57 +0200 (CEST) Received: from mail-yb1-xb2f.google.com (mail-yb1-xb2f.google.com [IPv6:2607:f8b0:4864:20::b2f]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)) (No client certificate requested) by phobos.denx.de (Postfix) with ESMTPS id 741AD86027 for ; Wed, 5 Apr 2023 20:38:45 +0200 (CEST) Authentication-Results: phobos.denx.de; dmarc=pass (p=none dis=none) header.from=chromium.org Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=sjg@google.com Received: by mail-yb1-xb2f.google.com with SMTP id y69so308726ybe.2 for ; Wed, 05 Apr 2023 11:38:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; t=1680719925; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=AJfLaFzbH/2Ju5QS0EeWlC1yCII1lYGihN/Kimg+OhA=; b=hT4MJxMMHD7UI66WcUbX94YmXqOiXNLLU+BBZzVqCx2GtG9UdFoRkDqgDAvhnBTSid d3HAUQeAnrHmkkDBnqfevdvMs8cizAZLU+y8smj5leVoHQEkUQvcNfktydu2AMptZUhW PKWLX8n3skj3/ZtstukRPitUe9yASVqBYqI3Q= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1680719925; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=AJfLaFzbH/2Ju5QS0EeWlC1yCII1lYGihN/Kimg+OhA=; b=c67SqyyY4SWdQ/M9+pLcEERftk7UwoF5HJKvxG6ieht6gu3AcRkmtD7foNb68VmzRL 9yEHaW0lBhORfCUTNox/hhnyYf8NwGXAr1O3JlQk3KYeiY0SoZkDQU7oHBwQoLHgjZ0c srwDSMNU6v3rMNj3ZV678jUpFQtfY3REwyb4OnMIkXjC3+zccoG6ljEvvUj4yZcTxXdQ 1o+YjwVyJrSpPKmH2eTNtb8L4Hw+Bh8kQLE8g8lTA3WAcTqcg5SLUJqGjfsvkgfnDs8b c6iDfCu+cXjFi92JW8G7O5jJwQp8u6NPrSkh0i0klScyzg+QQtvO0F7K1G968ffcRxGx aUbw== X-Gm-Message-State: AAQBX9eIH2W3HmfNLdV3YMXtAsOXm42I/YFsksY4dzZm8v/TBX6UpbQ0 r/+oUnQAz637hpfHk4y6gcm0qJUbDVRkLfR+/OIjmg== X-Google-Smtp-Source: AKy350YWovP8GKeUn7T/fH3bvIy0wzCROQRWWZVBMwc20E+A4nGtcEZLRpfQhTf4CNrYuii5Lodq8YrBnYT5CUetSAE= X-Received: by 2002:a25:7689:0:b0:b75:9519:dbcd with SMTP id r131-20020a257689000000b00b759519dbcdmr151815ybc.12.1680719924663; Wed, 05 Apr 2023 11:38:44 -0700 (PDT) MIME-Version: 1.0 References: <20230401185458.2280200-1-sjg@chromium.org> <87zg7rb8dd.fsf@bloch.sibelius.xs4all.nl> <1973D65D-692D-4AA7-B074-942D4E9ADB4B@gmail.com> In-Reply-To: <1973D65D-692D-4AA7-B074-942D4E9ADB4B@gmail.com> From: Simon Glass Date: Thu, 6 Apr 2023 06:38:21 +1200 Message-ID: Subject: Re: [PATCH v2 0/1] meson: Demonstration of using binman to produce the image To: Christian Hewitt Cc: Mark Kettenis , U-Boot Mailing List , u-boot-amlogic@groups.io, AML , Alper Nebi Yasak , Neil Armstrong Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-BeenThere: u-boot@lists.denx.de X-Mailman-Version: 2.1.39 Precedence: list List-Id: U-Boot discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: u-boot-bounces@lists.denx.de Sender: "U-Boot" X-Virus-Scanned: clamav-milter 0.103.8 at phobos.denx.de X-Virus-Status: Clean Hi Christian, On Mon, 3 Apr 2023 at 20:10, Christian Hewitt wrote: > > > On 2 Apr 2023, at 6:41 am, Simon Glass wrote: > > > > Hi Mark, > > > > On Sun, 2 Apr 2023 at 09:28, Mark Kettenis wr= ote: > > > > > > > From: Simon Glass > > > > Date: Sun, 2 Apr 2023 06:54:57 +1200 > > > > > > > > The Odroid-C2 is quite a complicated image with many steps. It is a= n ideal > > > > example for how Binman can be used. > > > > > > You say Odroid-C2, but the patches seem to address the Odroid-C4... > > > > Ah, yes. The difference seems to be an Amlogic S905 on the C2 and an S9= 02X3 on the C4. I wonder if that affects the image makeup? > > There are currently four different signing recipes that depend on the > board family that you are building for: > > - GXBB > - GXL/GXM > - G12A/SM1 > - G12B > > The G12A/SM1 and G12B recipes are identical except for a different > signing binary used. The latest Amlogic boards (S905X4, T7, etc.) > also have incremental changes, but none are currently supported in > Linux or u-boot. > > One of the challenges for binman will be the signing tools. Currently > this patchset depends upon Amlogic binaries. Apart from them being > closed-source and thus undesirable, they are also x86_64 only and > there are quite a few users (and at least one major distro) needing > to build on arm64 hardware. > > There is an open-source tool called gxlimg which supports GXL and newer > boards. IMHO it would make a lot of sense for u-boot to absorb the > functionality of gxlimg (and extend support backwards to GXBB) as this > would remove the dependency on Amlogic binaries and allow u-boot build > and binman signing to be done anywhere. > > https://github.com/repk/gxlimg Fair enough, but another option would be to allow 'binman tool -f gxlimg' to work, which should be easy. Then we can make use of the existing C code, using binary tools for the unsupported ones. > > > The patch is for testing by Christian, who I hope can help get this lan= ded for all the Amlogic boards. > > I will try to find the time to test this, but it=E2=80=99s not something = I > could do more with (as only supporting 1/4 of the board families > that I need to build for, bu I do appreciate it=E2=80=99s a POC). Yes, it's a start. > > In case you=E2=80=99re not aware, Makefile based signing is implemented i= n > the amlogic-boot-fip repo that I=E2=80=99m currently tooled around: > > https://github.com/LibreELEC/amlogic-boot-fip > > This is the =E2=80=9Ccompetition=E2=80=9D so to speak. It=E2=80=99s quite= simple and widely > used by most of the Amlogic supporting distros right now. Well at least that provides the recipes. Regards, Simon