topic Re: LX2160ARDB dual boot with secure boot enable in Layerscape

LX2160ARDB dual boot with secure boot enable

jackho — Fri, 03 Sep 2021 09:26:13 GMT

Hi,

We want to implement dual boot on LX2160ARDB by using uboot env variables(devpart_boot and devpart_root) to switch different kernel and roofs, but we also need secure boot feature, does secure boot allow us to modify uboot environment to implement dual boot function?

Thank you.

Jack

Re: LX2160ARDB dual boot with secure boot enable

yipingwang — Mon, 06 Sep 2021 02:56:48 GMT

Under secure boot mode, the user isn't allowed to enter u-boot prompt to modify u-boot environment variables.

Re: LX2160ARDB dual boot with secure boot enable

jackho — Mon, 06 Sep 2021 09:21:35 GMT

Hi,

Thank you for your reply,

If so, do you have any suggestion in this case, if we want to support both dual boot and secure boot function.

Thank you.

Jack

Re: LX2160ARDB dual boot with secure boot enable

yipingwang — Thu, 09 Sep 2021 08:47:48 GMT

You could add u-boot environment variable in variable "CONFIG_EXTRA_ENV_SETTINGS" in include/configs/lx2160ardb.h in u-boot source code, then rebuild u-boot image.

Re: LX2160ARDB dual boot with secure boot enable

jackho — Mon, 13 Sep 2021 03:03:40 GMT

Hi @yipingwang,

Thanks for the reply,

Is that means I can use fw_setenv to dynamic change devpart_boot or depart_root value?

Thank you.

Jack

Re: LX2160ARDB dual boot with secure boot enable

yipingwang — Fri, 17 Sep 2021 06:29:49 GMT

Yes, you can modify u-boot environment with fw_setenv in Linux under secure boot mode.

Re: LX2160ARDB dual boot with secure boot enable

jackho — Wed, 23 Mar 2022 01:42:23 GMT

Hi yipingwang,

We try to use fw_setenv to write uboot environment variable with secure boot mode, variable can be written and use fw_printenv read out correctly , but it seems uboot didn't eat the variable, like depart_boot and devpart_root, we need use fw_setenv modify this two parameters to runtime switch boot partition, but it seems not working on secure boot, do you have any suggestion?

Thank you

Jack