LX2160ARDB dual boot with secure boot enable

[jackho]

Hi,

We want to implement dual boot on LX2160ARDB by using uboot env variables(devpart_boot and devpart_root) to switch different kernel and roofs, but we also need secure boot feature, does secure boot allow us to modify uboot environment to implement dual boot function?

Thank you.

Jack

[yipingwang]

Under secure boot mode, the user isn't allowed to enter u-boot prompt to modify u-boot environment variables.

[jackho]

Hi,

Thank you for your reply,

If so, do you have any suggestion in this case, if we want to support both dual boot and secure boot function.

Thank you.

Jack

[yipingwang]

You could add u-boot environment variable in variable "CONFIG_EXTRA_ENV_SETTINGS" in include/configs/lx2160ardb.h in u-boot source code, then rebuild u-boot image.

[jackho]

Hi @yipingwang,

Thanks for the reply, 

Is that means I can use fw_setenv to dynamic change devpart_boot or depart_root value?

Thank you.

Jack 

[yipingwang · Accepted solution]

Yes, you can modify u-boot environment with fw_setenv in Linux under secure boot mode.

[jackho]

Hi yipingwang,

We try to use fw_setenv to write uboot environment variable with secure boot mode, variable can be written and use fw_printenv read out correctly , but it seems uboot didn't eat the variable, like depart_boot and devpart_root, we need use fw_setenv modify this two parameters to runtime switch boot partition, but it seems not working on secure boot, do you have any suggestion?  

Thank you

Jack