mbox series

[U-Boot,0/6] doc: imx: habv4: Improve iMX6 and iMX7 secure boot documentation

Message ID 1548271740-177-1-git-send-email-breno.lima@nxp.com
Headers show
Series doc: imx: habv4: Improve iMX6 and iMX7 secure boot documentation | expand

Message

Breno Matheus Lima Jan. 23, 2019, 7:29 p.m. UTC
Hi All,

This series is improving the current HABv4 U-Boot documentation
for iMX6 and iMX7 families devices.

The patch set is adding a complete step-by-step procedure on how to
securely boot an U-Boot image using HABv4:

 habv4
 ├── csf_examples
 │   ├── additional_images
 │   │   └── csf_additional_images.txt
 │   └── mx6_mx7
 │       ├── csf_uboot_fast_authentication.txt
 │       └── csf_uboot.txt
 ├── guides
 │   ├── encrypted_boot.txt
 │   ├── mx6_mx7_secure_boot.txt
 │   └── mx6_mx7_spl_secure_boot.txt
 ├── introduction_habv4.txt
 └── script_examples
     └── genIVT.pl

Patches 0001, 0005 and 0006 are cleaning up the HABv4 documentation
direcotry structure.

Patches 0002, 0003 and 0004 are adding new content under HABv4 directory.

Depending on the web browser the plain text diagrams are not correctly
displayed, the documentation can be also seen in the following links:

0002 - HABv4 introduction:
https://pastebin.com/SLU52WwP

0003 - Secure Boot guide for i.MX6 and i.MX7 non-SPL targets:
https://pastebin.com/87zVfFpJ

0004 - Secure Boot guide for i.MX6 and i.MX7 SPL targets:
https://pastebin.com/DPm42ihr

Subsequent patches will include more content for encrypted boot
and also cover i.MX8M family.

Breno Lima (6):
  doc: imx: habv4: Remove extra hab directory for a cleaner
    documentation structure
  doc: imx: habv4: Add HABv4 introduction
  doc: imx: habv4: Add Secure Boot guide for i.MX6 and i.MX7 non-SPL
    targets
  doc: imx: habv4: Add Secure Boot guide for i.MX6 and i.MX7 SPL targets
  doc: imx: habv4: Move encrypted boot guide
  doc: imx: habv4: Remove secure_boot.txt guide

 doc/imx/hab/habv4/secure_boot.txt             | 100 -----
 .../csf_additional_images.txt                 |  34 ++
 .../habv4/csf_examples/mx6_mx7/csf_uboot.txt  |  32 ++
 .../mx6_mx7/csf_uboot_fast_authentication.txt |  23 +
 .../habv4 => habv4/guides}/encrypted_boot.txt |   0
 doc/imx/habv4/guides/mx6_mx7_secure_boot.txt  | 402 ++++++++++++++++++
 .../habv4/guides/mx6_mx7_spl_secure_boot.txt  | 181 ++++++++
 doc/imx/habv4/introduction_habv4.txt          | 262 ++++++++++++
 doc/imx/habv4/script_examples/genIVT.pl       |  12 +
 9 files changed, 946 insertions(+), 100 deletions(-)
 delete mode 100644 doc/imx/hab/habv4/secure_boot.txt
 create mode 100644 doc/imx/habv4/csf_examples/additional_images/csf_additional_images.txt
 create mode 100644 doc/imx/habv4/csf_examples/mx6_mx7/csf_uboot.txt
 create mode 100644 doc/imx/habv4/csf_examples/mx6_mx7/csf_uboot_fast_authentication.txt
 rename doc/imx/{hab/habv4 => habv4/guides}/encrypted_boot.txt (100%)
 create mode 100644 doc/imx/habv4/guides/mx6_mx7_secure_boot.txt
 create mode 100644 doc/imx/habv4/guides/mx6_mx7_spl_secure_boot.txt
 create mode 100644 doc/imx/habv4/introduction_habv4.txt
 create mode 100644 doc/imx/habv4/script_examples/genIVT.pl

Comments

Breno Matheus Lima Jan. 23, 2019, 7:30 p.m. UTC | #1
The secure_boot.txt guide was replaced by mx6_mx7_secure_boot.txt and
mx6_mx7_spl_secure_boot.txt documents.

Both documents covers all steps needed for SPL and non-SPL tagets,
so remove secure_boot.txt file to avoid duplicated content.

Signed-off-by: Breno Lima <breno.lima@nxp.com>
---
 doc/imx/habv4/secure_boot.txt | 100 ----------------------------------
 1 file changed, 100 deletions(-)
 delete mode 100644 doc/imx/habv4/secure_boot.txt

diff --git a/doc/imx/habv4/secure_boot.txt b/doc/imx/habv4/secure_boot.txt
deleted file mode 100644
index ae68dc8040..0000000000
Stefano Babic Feb. 15, 2019, 11:57 a.m. UTC | #2
On 23/01/19 20:30, Breno Matheus Lima wrote:
> The secure_boot.txt guide was replaced by mx6_mx7_secure_boot.txt and
> mx6_mx7_spl_secure_boot.txt documents.
> 
> Both documents covers all steps needed for SPL and non-SPL tagets,
> so remove secure_boot.txt file to avoid duplicated content.
> 
> Signed-off-by: Breno Lima <breno.lima@nxp.com>
> ---
>  doc/imx/habv4/secure_boot.txt | 100 ----------------------------------
>  1 file changed, 100 deletions(-)
>  delete mode 100644 doc/imx/habv4/secure_boot.txt
> 
> diff --git a/doc/imx/habv4/secure_boot.txt b/doc/imx/habv4/secure_boot.txt
> deleted file mode 100644
> index ae68dc8040..0000000000
> 

I have applied to my working branch, but I cannot find this on
patchwork. The rest of the series is present, this not, weird..

Regards,
Stefano
Breno Matheus Lima Feb. 15, 2019, 12:38 p.m. UTC | #3
Hi Stefano,

Em sex, 15 de fev de 2019 às 09:57, Stefano Babic <sbabic@denx.de> escreveu:
>
> On 23/01/19 20:30, Breno Matheus Lima wrote:
> > The secure_boot.txt guide was replaced by mx6_mx7_secure_boot.txt and
> > mx6_mx7_spl_secure_boot.txt documents.
> >
> > Both documents covers all steps needed for SPL and non-SPL tagets,
> > so remove secure_boot.txt file to avoid duplicated content.
> >
> > Signed-off-by: Breno Lima <breno.lima@nxp.com>
> > ---
> >  doc/imx/habv4/secure_boot.txt | 100 ----------------------------------
> >  1 file changed, 100 deletions(-)
> >  delete mode 100644 doc/imx/habv4/secure_boot.txt
> >
> > diff --git a/doc/imx/habv4/secure_boot.txt b/doc/imx/habv4/secure_boot.txt
> > deleted file mode 100644
> > index ae68dc8040..0000000000
> >
>
> I have applied to my working branch, but I cannot find this on
> patchwork. The rest of the series is present, this not, weird..

Thanks for looking this series.

Interesting, I'm also not being able to find it in patchwork.

Anyway, I have just sent again :)

Best regards,
Breno Lima
Fabio Estevam Feb. 15, 2019, 12:45 p.m. UTC | #4
Hi Stefano,

On Fri, Feb 15, 2019 at 9:57 AM Stefano Babic <sbabic@denx.de> wrote:

> > diff --git a/doc/imx/habv4/secure_boot.txt b/doc/imx/habv4/secure_boot.txt
> > deleted file mode 100644
> > index ae68dc8040..0000000000
> >
>
> I have applied to my working branch, but I cannot find this on
> patchwork. The rest of the series is present, this not, weird..

Looks like a patchwork bug.
We have seen some issues with patches not getting detected by
patchwork when they are only file renames or file delete operations
(like in this case).

Regards,

Fabio Estevam
Stefano Babic Feb. 15, 2019, 1:12 p.m. UTC | #5
On 15/02/19 13:45, Fabio Estevam wrote:
> Hi Stefano,
> 
> On Fri, Feb 15, 2019 at 9:57 AM Stefano Babic <sbabic@denx.de> wrote:
> 
>>> diff --git a/doc/imx/habv4/secure_boot.txt b/doc/imx/habv4/secure_boot.txt
>>> deleted file mode 100644
>>> index ae68dc8040..0000000000
>>>
>>
>> I have applied to my working branch, but I cannot find this on
>> patchwork. The rest of the series is present, this not, weird..
> 
> Looks like a patchwork bug.
> We have seen some issues with patches not getting detected by
> patchwork when they are only file renames or file delete operations
> (like in this case).

Right - anyway, patch just drops a file, I did myself on my branch
adding Breno's commit message.

Regards,
Stefano