Skip to content
Snippets Groups Projects
  • Cristian Ciocaltea's avatar
    a031b03f
    image: Add IH_OS_EFI for EFI chain-load boot · a031b03f
    Cristian Ciocaltea authored
    
    Add a new OS type to be used for chain-loading an EFI compatible
    firmware or boot loader like GRUB2, possibly in a verified boot
    scenario.
    
    Bellow is sample ITS file that generates a FIT image supporting
    secure boot. Please note the presence of 'os = "efi";' line, which
    identifies the currently introduced OS type:
    
    / {
        #address-cells = <1>;
    
        images {
            efi-grub {
                description = "GRUB EFI";
                data = /incbin/("bootarm.efi");
                type = "kernel_noload";
                arch = "arm";
                os = "efi";
                compression = "none";
                load = <0x0>;
                entry = <0x0>;
                hash-1 {
                    algo = "sha256";
                };
            };
        };
    
        configurations {
            default = "config-grub";
            config-grub {
                kernel = "efi-grub";
                signature-1 {
                    algo = "sha256,rsa2048";
                    sign-images = "kernel";
                };
            };
        };
    };
    
    Signed-off-by: default avatarCristian Ciocaltea <cristian.ciocaltea@gmail.com>
    Reviewed-by: default avatarHeinrich Schuchardt <xypron.glpk@gmx.de>
    a031b03f
    History
    image: Add IH_OS_EFI for EFI chain-load boot
    Cristian Ciocaltea authored
    
    Add a new OS type to be used for chain-loading an EFI compatible
    firmware or boot loader like GRUB2, possibly in a verified boot
    scenario.
    
    Bellow is sample ITS file that generates a FIT image supporting
    secure boot. Please note the presence of 'os = "efi";' line, which
    identifies the currently introduced OS type:
    
    / {
        #address-cells = <1>;
    
        images {
            efi-grub {
                description = "GRUB EFI";
                data = /incbin/("bootarm.efi");
                type = "kernel_noload";
                arch = "arm";
                os = "efi";
                compression = "none";
                load = <0x0>;
                entry = <0x0>;
                hash-1 {
                    algo = "sha256";
                };
            };
        };
    
        configurations {
            default = "config-grub";
            config-grub {
                kernel = "efi-grub";
                signature-1 {
                    algo = "sha256,rsa2048";
                    sign-images = "kernel";
                };
            };
        };
    };
    
    Signed-off-by: default avatarCristian Ciocaltea <cristian.ciocaltea@gmail.com>
    Reviewed-by: default avatarHeinrich Schuchardt <xypron.glpk@gmx.de>