/dts-v1/;
/*
 * hal/cm4.its - FIT template for booting Linux on the RPi CM4 via wolfBoot.
 * Kernel-only: the DTB is taken from the RPi firmware (fully patched: RAM size,
 * mini-UART clock, serial no.) - see hal/cm4.c hal_get_boot_dts(). Point the
 * incbin at the gzip kernel (Yocto fitImage-linux.bin) and build with:
 *   mkimage -f hal/cm4.its cm4-fitImage
 *   tools/keytools/sign --ecc384 --sha384 cm4-fitImage <key.der> <version>
 * Load/entry 0x10000000 matches config/examples/cm4_emmc_linux.config (and GCX
 * UBOOT_LOADADDRESS). Copyright (C) 2026 wolfSSL Inc.  GPLv3.
 */
/*
 * The hash-1 { algo = "sha256"; } nodes below are informational only: mkimage
 * populates their `value`, but wolfBoot does not re-verify per-image hashes here.
 * Authentication of the whole FIT comes from the outer wolfBoot signature; the
 * FIT hashes are best-effort defense-in-depth, not an enforced integrity check.
 */
/ {
    description = "wolfBoot CM4 (BCM2711) Linux";
    #address-cells = <1>;
    images {
        kernel-1 {
            description = "Linux kernel (arm64, gzip)";
            data = /incbin/("../Image.gz");
            type = "kernel"; arch = "arm64"; os = "linux"; compression = "gzip";
            load = <0x10000000>; entry = <0x10000000>;
            hash-1 { algo = "sha256"; };
        };
    };
    configurations { default = "conf1"; conf1 { kernel = "kernel-1"; hash-1 { algo = "sha256"; }; }; };
};