arch/arm/mach-omap2/config_secure.mk

   1 #
   2 # Copyright (C) 2016, Texas Instruments, Incorporated - http://www.ti.com/
   3 #
   4 # SPDX-License-Identifier:      GPL-2.0+
   5 #
   6 quiet_cmd_mkomapsecimg = SECURE  $@
   7 ifneq ($(TI_SECURE_DEV_PKG),)
   8 ifneq ($(wildcard $(TI_SECURE_DEV_PKG)/scripts/create-boot-image.sh),)
   9 ifneq ($(CONFIG_SPL_BUILD),)
  10 cmd_mkomapsecimg = $(TI_SECURE_DEV_PKG)/scripts/create-boot-image.sh \
  11         $(patsubst u-boot-spl_HS_%,%,$(@F)) $< $@ $(CONFIG_ISW_ENTRY_ADDR) \
  12         $(if $(KBUILD_VERBOSE:1=), >/dev/null)
  13 else
  14 cmd_mkomapsecimg = $(TI_SECURE_DEV_PKG)/scripts/create-boot-image.sh \
  15         $(patsubst u-boot_HS_%,%,$(@F)) $< $@ $(CONFIG_ISW_ENTRY_ADDR) \
  16         $(if $(KBUILD_VERBOSE:1=), >/dev/null)
  17 endif
  18 else
  19 cmd_mkomapsecimg = echo "WARNING:" \
  20         "$(TI_SECURE_DEV_PKG)/scripts/create-boot-image.sh not found." \
  21         "$@ was NOT secured!"; cp $< $@
  22 endif
  23 else
  24 cmd_mkomapsecimg = echo "WARNING: TI_SECURE_DEV_PKG environment" \
  25         "variable must be defined for TI secure devices. \
  26         $@ was NOT secured!"; cp $< $@
  27 endif
  28
  29 ifdef CONFIG_SPL_LOAD_FIT
  30 quiet_cmd_omapsecureimg = SECURE  $@
  31 ifneq ($(TI_SECURE_DEV_PKG),)
  32 ifneq ($(wildcard $(TI_SECURE_DEV_PKG)/scripts/secure-binary-image.sh),)
  33 cmd_omapsecureimg = $(TI_SECURE_DEV_PKG)/scripts/secure-binary-image.sh \
  34         $< $@ \
  35         $(if $(KBUILD_VERBOSE:1=), >/dev/null)
  36 else
  37 cmd_omapsecureimg = echo "WARNING:" \
  38         "$(TI_SECURE_DEV_PKG)/scripts/secure-binary-image.sh not found." \
  39         "$@ was NOT secured!"; cp $< $@
  40 endif
  41 else
  42 cmd_omapsecureimg = echo "WARNING: TI_SECURE_DEV_PKG environment" \
  43         "variable must be defined for TI secure devices." \
  44         "$@ was NOT secured!"; cp $< $@
  45 endif
  46 endif
  47
  48
  49 # Standard X-LOADER target (QPSI, NOR flash)
  50 u-boot-spl_HS_X-LOADER: $(obj)/u-boot-spl.bin FORCE
  51         $(call if_changed,mkomapsecimg)
  52
  53 # For MLO targets (SD card boot) the final file name that is copied to the SD
  54 # card FAT partition must be MLO, so we make a copy of the output file to a new
  55 # file with that name
  56 u-boot-spl_HS_MLO: $(obj)/u-boot-spl.bin FORCE
  57         $(call if_changed,mkomapsecimg)
  58         @if [ -f $@ ]; then \
  59                 cp -f $@ MLO; \
  60         fi
  61
  62 # Standard 2ND target (certain peripheral boot modes)
  63 u-boot-spl_HS_2ND: $(obj)/u-boot-spl.bin FORCE
  64         $(call if_changed,mkomapsecimg)
  65
  66 # Standard ULO target (certain peripheral boot modes)
  67 u-boot-spl_HS_ULO: $(obj)/u-boot-spl.bin FORCE
  68         $(call if_changed,mkomapsecimg)
  69
  70 # Standard ISSW target (certain devices, various boot modes), when copied to
  71 # an SD card FAT partition this file must be called "MLO", we make a copy with
  72 # this name to make this clear
  73 u-boot-spl_HS_ISSW: $(obj)/u-boot-spl.bin FORCE
  74         $(call if_changed,mkomapsecimg)
  75         @if [ -f $@ ]; then \
  76                 cp -f $@ MLO; \
  77         fi
  78
  79 # For SPI flash on AM335x and AM43xx, these require special byte swap handling
  80 # so we use the SPI_X-LOADER target instead of X-LOADER and let the
  81 # create-boot-image.sh script handle that
  82 u-boot-spl_HS_SPI_X-LOADER: $(obj)/u-boot-spl.bin FORCE
  83         $(call if_changed,mkomapsecimg)
  84
  85 # For supporting single stage boot on keystone, the image is a full u-boot
  86 # file, not an SPL. This will work for all boot devices, other than SPI
  87 # flash. On Keystone devices when booting from an SD card FAT partition this
  88 # file must be called "MLO"
  89 u-boot_HS_MLO: $(obj)/u-boot.bin
  90         $(call if_changed,mkomapsecimg)
  91         @if [ -f $@ ]; then \
  92                 cp -f $@ MLO; \
  93         fi
  94
  95 # For supporting single stage XiP QSPI on AM43xx, the image is a full u-boot
  96 # file, not an SPL. In this case the mkomapsecimg command looks for a
  97 # u-boot-HS_* prefix
  98 u-boot_HS_XIP_X-LOADER: $(obj)/u-boot.bin FORCE
  99         $(call if_changed,mkomapsecimg)
 100
 101 # For supporting the SPL loading and interpreting of FIT images whose
 102 # components are pre-processed before being integrated into the FIT image in
 103 # order to secure them in some way
 104 ifdef CONFIG_SPL_LOAD_FIT
 105
 106 MKIMAGEFLAGS_u-boot_HS.img = -f auto -A $(ARCH) -T firmware -C none -O u-boot \
 107         -a $(CONFIG_SYS_TEXT_BASE) -e $(CONFIG_SYS_UBOOT_START) \
 108         -n "U-Boot $(UBOOTRELEASE) for $(BOARD) board" -E \
 109         $(patsubst %,-b arch/$(ARCH)/dts/%.dtb_HS,$(subst ",,$(CONFIG_OF_LIST)))
 110
 111 OF_LIST_TARGETS = $(patsubst %,arch/$(ARCH)/dts/%.dtb,$(subst ",,$(CONFIG_OF_LIST)))
 112 $(OF_LIST_TARGETS): dtbs
 113
 114 %.dtb_HS: %.dtb FORCE
 115         $(call if_changed,omapsecureimg)
 116
 117 u-boot-nodtb_HS.bin: u-boot-nodtb.bin FORCE
 118         $(call if_changed,omapsecureimg)
 119
 120 u-boot_HS.img: u-boot-nodtb_HS.bin u-boot.img $(patsubst %.dtb,%.dtb_HS,$(OF_LIST_TARGETS)) FORCE
 121         $(call if_changed,mkimage)
 122         $(Q)if [ -f $@ ]; then \
 123                 cp -f $@ u-boot.img; \
 124         fi
 125
 126 endif