[meta-freescale] [PATCH 29/29] ls1021atwr: add default environment variable for build secureboot

[Chunrong Guo]

From: Chunrong Guo <chunrong.guo at nxp.com>

Signed-off-by: Chunrong Guo <chunrong.guo at nxp.com>
---
 conf/machine/ls1021atwr.conf | 39 +++++++++++++++++++++++++++++++++++++--
 1 file changed, 37 insertions(+), 2 deletions(-)

diff --git a/conf/machine/ls1021atwr.conf b/conf/machine/ls1021atwr.conf
index 081592b..48f4f12 100644
--- a/conf/machine/ls1021atwr.conf
+++ b/conf/machine/ls1021atwr.conf
@@ -12,14 +12,49 @@ require conf/machine/include/tune-cortexa7.inc
 
 DEFAULTTUNE = "cortexa7hf-neon"
 
-UBOOT_CONFIG ??= "sdcard-ifc-secure-boot sdcard-ifc sdcard-qspi lpuart qspi secure-boot nor"
+KERNEL_CLASSES  = " kernel-itbimage "
+KERNEL_IMAGETYPES = "itbImage"
+
+UBOOT_ENTRYPOINT = "0x80080000"
+
+UBOOT_CONFIG ??= "sdcard-secure-boot sdcard-ifc sdcard-qspi lpuart qspi secure-boot nor"
 UBOOT_CONFIG[nor] = "ls1021atwr_nor_config,,u-boot-dtb.bin"
 UBOOT_CONFIG[sdcard-ifc] = "ls1021atwr_sdcard_ifc_config,,u-boot-with-spl-pbl.bin"
 UBOOT_CONFIG[sdcard-qspi] = "ls1021atwr_sdcard_qspi_config,,u-boot-with-spl-pbl.bin"
 UBOOT_CONFIG[lpuart] = "ls1021atwr_nor_lpuart_config,,u-boot-dtb.bin"
 UBOOT_CONFIG[qspi] = "ls1021atwr_qspi_config,,u-boot-dtb.bin"
 UBOOT_CONFIG[secure-boot] = "ls1021atwr_nor_SECURE_BOOT_config,,u-boot-dtb.bin"
-UBOOT_CONFIG[sdcard-ifc-secure-boot] = "ls1021atwr_sdcard_ifc_SECURE_BOOT_defconfig,,u-boot-with-spl-pbl.bin"
+UBOOT_CONFIG[sdcard-secure-boot] = "ls1021atwr_sdcard_ifc_SECURE_BOOT_defconfig,,u-boot-with-spl-pbl.bin"
+
+UBOOT_SECURE_ENABLE = "1"
+ENCAP = "1"
+RCW_NOR = "rcw/ls1021atwr/SSR_PNS_30/rcw_1200.bin"
+RCW_NOR_SEC = "rcw/ls1021atwr/SSR_PNS_30/rcw_1200_sben.bin"
+RCW_QSPI = "rcw/ls1021atwr/SSR_PNS_30/rcw_1200_qspiboot.bin"
+RCW_SD = "rcw/ls1021atwr/SSR_PNS_30/rcw_1200_sdboot.bin"
+
+UBOOT_NORBOOT_SEC = "u-boot.bin-secure-boot"
+UBOOT_SDBOOT_SEC = "u-boot.bin-sdcard-secure-boot"
+
+UBOOT_SPL = "uboot-sdcard-secure-boot-spl.bin"
+UBOOT_DTB = "uboot-sdcard-secure-boot-dtb.bin"
+
+UBOOT_SCR = "ls1021atwr_boot.scr"
+BOOTSCRIPT_DEC = "ls1021atwr_dec_boot.scr"
+
+SECUREVALIDATE = "setenv secureboot_validate 'load \$devtype \$devnum:2 \$kernelheader_addr_r /secboot_hdrs/ls1021atwr/hdr_linux.out; load \$devtype \$devnum:2 \$fdtheader_addr_r /secboot_hdrs/ls1021atwr/hdr_dtb.out; esbc_validate \$kernelheader_addr_r; esbc_validate \$fdtheader_addr_r'"
+
+SECUREVALIDATE_ENV = "setenv secureboot_validate 'load \$devtype \$devnum:2 \$kernelheader_addr_r /secboot_hdrs/ls1021atwr/hdr_linux.out; esbc_validate \$kernelheader_addr_r;load \$devtype \$devnum:2 \$fdtheader_addr_r /secboot_hdrs/ls1021atwr/hdr_dtb.out; esbc_validate \$fdtheader_addr_r; size \$devtype \$devnum:2 /vmlinuz.v7; echo Encapsulating linux image;setenv key_addr 0x87000000; mw \$key_addr $key_id_1;setexpr \$key_addr \$key_addr + 0x4; mw \$key_addr $key_id_2;setexpr \$key_addr \$key_addr + 0x4; mw \$key_addr $key_id_3;setexpr \$key_addr \$key_addr + 0x4; mw \$key_addr $key_id_4;blob enc \$kernel_addr_r \$load_addr \$filesize \$key_addr; setexpr blobsize \$filesize + 0x30;echo Saving encrypted linux ;save \$devtype \$devnum:2 \$load_addr /vmlinuz.v7 \$blobsize;size \$devtype \$devnum:2 /ls1021a-twr.dtb;echo Encapsulating dtb image; blob enc \$fdt_addr_r \$load_addr \$filesize \$key_addr; setexpr blobsize \$filesize + 0x30;echo Saving encrypted dtb; save \$devtype \$devnum:2 \$load_addr /ls1021a-twr.dtb \$blobsize; size \$devtype \$devnum:2 /ls1021atwr_dec_boot.scr; load \$devtype \$devnum:2 \$load_addr /ls1021atwr_dec_boot.scr; echo replacing Bootscript; save \$devtype \$devnum:2 \$load_addr /ls1021atwr_boot.scr \$filesize;size \$devtype \$devnum:2 /secboot_hdrs/ls1021atwr/hdr_ls1021atwr_bs_dec.out; load \$devtype \$devnum:2 \$load_addr /secboot_hdrs/ls1021atwr/hdr_ls1021atwr_bs_dec.out ;echo Replacing bootscript header; save \$devtype \$devnum:2 \$load_addr /hdr_ls1021atwr_bs.out \$filesize;reset;'"
+
+SECUREVALIDATE_DEC = "setenv secureboot_validate 'size \$devtype \$devnum:2 /vmlinuz.v7;setexpr imgsize \$filesize - 0x30 ;echo Decapsulating linux image; setenv key_addr 0x87000000; mw \$key_addr $key_id_1;setexpr \$key_addr \$key_addr + 0x4; mw \$key_addr $key_id_2;setexpr \$key_addr \$key_addr + 0x4; mw \$key_addr $key_id_3;setexpr \$key_addr \$key_addr + 0x4; mw \$key_addr $key_id_4; blob dec \$kernel_addr_r \$load_addr \$imgsize \$key_addr; cp.b \$load_addr \$kernel_addr_r \$filesize ;size \$devtype \$devnum:2 /ls1021a-twr.dtb;setexpr imgsize \$filesize - 0x30 ;echo Decapsulating dtb image; blob dec \$fdt_addr_r \$load_addr \$imgsize \$key_addr; cp.b \$load_addr \$fdt_addr_r \$filesize ; '"
+
+DISTROBOOT = "'part uuid $devtype $devnum:3 partuuid3; setenv bootargs console=ttyS0,115200 root=PARTUUID=$partuuid3 rw rootwait; load $devtype $devnum:2 $kernel_addr_r /vmlinuz.v7;load $devtype $devnum:2 $fdt_addr_r /ls1021a-twr.dtb; env exists secureboot && echo validating secureboot && run secureboot_validate; bootm $kernel_addr_r - $fdt_addr_r'"
+
+SD_SCRIPT = "platforms/ls1_sd.sh"
+NOR_SCRIPT = "platforms/ls1_nor.sh"
+
+KERNEL_UIMG  = "uImage"
+DEVICE_TREE = "ls1021a-twr.dtb"
 
 QE_UCODE="iram_Type_A_LS1021a_r1.0.bin"
 
-- 
1.9.0