From mboxrd@z Thu Jan  1 00:00:00 1970
From: Peter =?utf-8?q?M=C3=BCller?= <peter.mueller@ipfire.org>
To: development@lists.ipfire.org
Subject: Re: [PATCH] u-boot: create signed bootscript at build time
Date: Mon, 21 Nov 2022 08:25:11 +0000
Message-ID: <39b49d01-b8da-1b14-2059-639cc4d0e6e2@ipfire.org>
In-Reply-To: <20221120094642.2408986-1-arne_f@ipfire.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============6587986101353599227=="
List-Id: <development.lists.ipfire.org>

--===============6587986101353599227==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Acked-by: Peter M=C3=BCller <peter.mueller(a)ipfire.org>

> before this was as binary in git which make no real sense.
>=20
> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
> ---
>  config/u-boot/boot.scr | Bin 2514 -> 0 bytes
>  lfs/u-boot             |   3 +++
>  2 files changed, 3 insertions(+)
>  delete mode 100644 config/u-boot/boot.scr
>=20
> diff --git a/config/u-boot/boot.scr b/config/u-boot/boot.scr
> deleted file mode 100644
> index 875e09dc23cd2b8f17fd46d73f4deed208987004..000000000000000000000000000=
0000000000000
> GIT binary patch
> literal 0
> HcmV?d00001
>=20
> literal 2514
> zcmc&#+iu!G5REFelKlsL8v#<Ks^*fYY7~?QLa2nAiv(#@^@ZAa9ai|J^_pA|KhVd%
> z_80n1{eku)I=3DkL=3D7D6a_X?XzbnK|do%<jyq=3DPxgR?*97ie*XStXUF=3Dsqdq(a)gcL&d(
> zz0i*veyy*<NCV&`<4~J>Ny0}ynJwTDDwQ_y35jhhBb>xD&_;-&al3rWR0uRMu7M^m
> zoHo<FwjI#6ZQnzqbrk2(T4ZHI0r*ci+16hIwI&_eL_vaZg;YvTUB=3Dhamezt;$~$N&
> zkSg?}G+`X_9_G$(c)ea1=3D>#qh6W3oVmMUC9RGUu;i%B?geV>ikLITtgK$nw(a)CkdPg
> z3;``H2#xwhjcLK(a)h-R$7)aC&VNk;F;0-bezDz$lzf#b+uRF;}%Ng9P5X2iCNH%Hhn
> zxTbuv!fvrV1_fmnvkF1NV4Os$%c&PqehZAaSrTV}=3DK_u|j)ou4KJ(a)_wT@w%>Neo#Y
> z-_Wx8sL(a)MYrW8us>e&i>F0#X{H6SJ_n^}eKgp8*GKO>B~A!>=3DU1bt}+BzC=3D!_$Je^
> zH|TdxobLJA(a)cg7#6y^M^<kNMl%@xe@$uR3`Xl5xb5v<Y&G16SdyDXaR8y=3D+#rmj*e
> zlz0sLj>T+v<7jt(@129l&Yt5rX_#kqpL-^VKIA%K&TogUH?7v&-DWf1$0p&26s^U7
> zI<svlAFyphXYj3Y(a)0@m;EBfTE6hcKaO}&rG{da{~X8J$%D9WO{s3xu1(a)a2L^_kiNC
> z5JO~$7qIkA(a)bc(0jiok*w#%+E?RR+Z1Y&gKv!37!`QqB8yloeP){)>LY{3S6Y2Sb>
> zFSQbfS7S7xR}%=3D-2k-oo$LlN#X`J6VwfTq3-eBR-G(a)y)><CEW}Vqk88E7a(jjW=3D;4
> zVB`K?8(R*q-uvT=3D?&<MxWf;ps>Z&3S2p;U0L5U?5!&Akp;iu}v+{mZdRI0-$^AQ)!
> zmRre;!ll%YDc_jl(z+TH3P7wr;>)dK91(4eakUs8`V5-P;HcEZ^1Z`k9&9<&d$C$0
> z5k;RIWj{jZYzhCs&#uCNh(a)B{QmRP0-_$Hdt$h{)qbRkY+{Othl1#m7P8#9`6aC~S8
> PCGx9|E8BcTAF%%bUf>%$
>=20
> diff --git a/lfs/u-boot b/lfs/u-boot
> index 3452efddb..e5a48ef91 100644
> --- a/lfs/u-boot
> +++ b/lfs/u-boot
> @@ -240,6 +240,9 @@ endif
> =20
>  	# config (uEnv.txt and boot.*)
>  	cp -vf $(DIR_SRC)/config/u-boot/* /boot/
> +	# create signed binary boot script (boot.scr)
> +	mkimage -C none -A arm -T script -d /boot/boot.cmd /boot/boot.scr
> +
>  	# patch real Kernel version to uEnv.txt
>  	sed -e "s/xxxKVERxxx/$(KVER)/g" -i /boot/uEnv.txt
> =20

--===============6587986101353599227==--