HAB sign initramfs image

richc128 — Sun, 17 Apr 2022 22:53:43 GMT

I want to use an initramfs with a signed kernel.

Right now I have INITRAMFS_IMAGE_BUNDLE = "1" so I get a large file image-initramfs.bin in my deploy directory that seems to have the kernel and initramfs together.

I don't seem to be able to sign this directly. I'm assuming I need to sign the kernel before it is package.

Does anyone have any tips on how to do this?

Re: HAB sign initramfs image

Harvey021 — Tue, 26 Apr 2022 15:24:51 GMT

Hi @richc128

If you want to sign them together, please try to consider some key points.

In booti.c bootm.c, where the hab_authenticate function is called, add some logs, print out the addresses of these calculations, and pass them to the HAB function with the correct address, make the input of the function name related to hab_authentication in booti.c reasonable, and then the content of the IVT should be correct, especially the location of the CSF.

Best regards

Harvey

i.MX ProcessorsのトピックHAB sign initramfs image

HAB sign initramfs image

Re: HAB sign initramfs image