mirror of https://github.com/wolfSSL/wolfBoot.git
32 lines
1.4 KiB
Plaintext
32 lines
1.4 KiB
Plaintext
/dts-v1/;
|
|
/*
|
|
* hal/cm4.its - FIT template for booting Linux on the RPi CM4 via wolfBoot.
|
|
* Kernel-only: the DTB is taken from the RPi firmware (fully patched: RAM size,
|
|
* mini-UART clock, serial no.) - see hal/cm4.c hal_get_boot_dts(). Point the
|
|
* incbin at the gzip kernel (Yocto fitImage-linux.bin) and build with:
|
|
* mkimage -f hal/cm4.its cm4-fitImage
|
|
* tools/keytools/sign --ecc384 --sha384 cm4-fitImage <key.der> <version>
|
|
* Load/entry 0x10000000 matches config/examples/cm4_emmc_linux.config (and GCX
|
|
* UBOOT_LOADADDRESS). Copyright (C) 2026 wolfSSL Inc. GPLv3.
|
|
*/
|
|
/*
|
|
* The hash-1 { algo = "sha256"; } nodes below are informational only: mkimage
|
|
* populates their `value`, but wolfBoot does not re-verify per-image hashes here.
|
|
* Authentication of the whole FIT comes from the outer wolfBoot signature; the
|
|
* FIT hashes are best-effort defense-in-depth, not an enforced integrity check.
|
|
*/
|
|
/ {
|
|
description = "wolfBoot CM4 (BCM2711) Linux";
|
|
#address-cells = <1>;
|
|
images {
|
|
kernel-1 {
|
|
description = "Linux kernel (arm64, gzip)";
|
|
data = /incbin/("../Image.gz");
|
|
type = "kernel"; arch = "arm64"; os = "linux"; compression = "gzip";
|
|
load = <0x10000000>; entry = <0x10000000>;
|
|
hash-1 { algo = "sha256"; };
|
|
};
|
|
};
|
|
configurations { default = "conf1"; conf1 { kernel = "kernel-1"; hash-1 { algo = "sha256"; }; }; };
|
|
};
|