mirror of
https://github.com/u-boot/u-boot.git
synced 2025-05-03 10:17:21 +00:00
e2cc9b4fc1
mkimage can be used for both signing the FIT or encrypt its content and the option '-k' can be used to pass a directory where both signing and encryption keys can be retrieved. Adding 'fit,encrypt' property to the 'fit' node, leads to try to find keys directory among binman include directories. _get_priv_keys_dir() is renamed as _get_keys_dir() and adapted to support both signing and encryption nodes in the FIT. Signed-off-by: Paul HENRYS <paul.henrys_ext@softathome.com> Reviewed-by: Simon Glass <sjg@chromium.org>
72 lines
2.4 KiB
Python
72 lines
2.4 KiB
Python
# SPDX-License-Identifier: GPL-2.0+
|
|
# Copyright 2022 Google LLC
|
|
#
|
|
"""Bintool implementation for mkimage"""
|
|
|
|
import re
|
|
|
|
from binman import bintool
|
|
|
|
class Bintoolmkimage(bintool.Bintool):
|
|
"""Image generation for U-Boot
|
|
|
|
This bintool supports running `mkimage` with some basic parameters as
|
|
needed by binman.
|
|
|
|
Normally binman uses the mkimage built by U-Boot. But when run outside the
|
|
U-Boot build system, binman can use the version installed in your system.
|
|
Support is provided for fetching this on Debian-like systems, using apt.
|
|
"""
|
|
def __init__(self, name):
|
|
super().__init__(name, 'Generate image for U-Boot', r'mkimage version (.*)')
|
|
|
|
# pylint: disable=R0913
|
|
def run(self, reset_timestamp=False, output_fname=None, external=False,
|
|
pad=None, align=None, keys_dir=None):
|
|
"""Run mkimage
|
|
|
|
Args:
|
|
reset_timestamp: True to update the timestamp in the FIT
|
|
output_fname: Output filename to write to
|
|
external: True to create an 'external' FIT, where the binaries are
|
|
located outside the main data structure
|
|
pad: Bytes to use for padding the FIT devicetree output. This allows
|
|
other things to be easily added later, if required, such as
|
|
signatures
|
|
align: Bytes to use for alignment of the FIT and its external data
|
|
keys_dir: Path to directory containing private and encryption keys
|
|
version: True to get the mkimage version
|
|
"""
|
|
args = []
|
|
if external:
|
|
args.append('-E')
|
|
if pad:
|
|
args += ['-p', f'{pad:x}']
|
|
if align:
|
|
args += ['-B', f'{align:x}']
|
|
if reset_timestamp:
|
|
args.append('-t')
|
|
if keys_dir:
|
|
args += ['-k', f'{keys_dir}']
|
|
if output_fname:
|
|
args += ['-F', output_fname]
|
|
return self.run_cmd(*args)
|
|
|
|
def fetch(self, method):
|
|
"""Fetch handler for mkimage
|
|
|
|
This installs mkimage using the apt utility.
|
|
|
|
Args:
|
|
method (FETCH_...): Method to use
|
|
|
|
Returns:
|
|
True if the file was fetched and now installed, None if a method
|
|
other than FETCH_BIN was requested
|
|
|
|
Raises:
|
|
Valuerror: Fetching could not be completed
|
|
"""
|
|
if method != bintool.FETCH_BIN:
|
|
return None
|
|
return self.apt_install('u-boot-tools')
|