How to create OTFAD &HAB bootable images on Linux?

[Omar_hong]

Hi NXP,

1. I know there are scripts files in this path for Linux(C:\Users\admin\secure_provisioning\build_image_lnx.sh), but I want to know if there are tools with features like "creat manufacturing package"? This is helpful for building image on different computers.

Omar_hong_0-1732183197214.png

2. When I press the 'Browse' button, SEC will automatically create the relevant files in this path(C:\Users\admin\secure_provisioning\source_images). How are these files created?

Omar_hong_1-1732183341672.png

Omar_hong_2-1732183439074.png

3 .This script uses nxpimage.exe. Can it run directly on Linux, or does it require Wine? Or is there a Linux version available?

Omar_hong_4-1732183780091.png

[liborukropec]

Hi Omar,

I'd add few notes:

ad 2) build (the same can be applied to write respectively) scripts are generated when clicking on "Build" button based on the workspace configuration.

ad 3) that no Wine is required, SEC tool provide support for Windows, Linux (Ubuntu) and MacOS (Intel+Arm). Based on the used OS the correct installer should be used and that's it. Only for Ubuntu - there are some dependencies, so SEC tool v 9.0.1 works in Ubuntu 22, while SEC v10 works on Ubuntu 24 (v10 Ubuntu 22 deb package will be released soon).

Regards,

Libor

[Omar_hong]

Hi @liborukropec 

ad 3) that no Wine is required, SEC tool provide support for Windows, Linux (Ubuntu) and MacOS (Intel+Arm). Based on the used OS the correct installer should be used and that's it. Only for Ubuntu - there are some dependencies, so SEC tool v 9.0.1 works in Ubuntu 22, while SEC v10 works on Ubuntu 24 (v10 Ubuntu 22 deb package will be released soon).

=> Does Linux version V9.0.1 support Ubuntu desktop or Ubuntu server, or both?"

[liborukropec]

Hello Omar,

>Does Linux version V9.0.1 support Ubuntu desktop or Ubuntu server, or both?"

it is intended for Ubuntu desktop, but I believe it could be installed also on Ubuntu server (without GUI) even it is not supported/tested. It will work only with CLI argument, like 'build', 'write'. Without CLI arguments it will try to launch GUI, where it will probably fail because of missing GTK dependencies and also noX/Wayland server.

Give it a try.

Regards,

Libor

[Omar_hong]

Hi @liborukropec ,

    I tried installing the following SPT Linux version on Ubuntu 22.04.5, but it still doesn't work. Could you please tell me what steps I might have missed?

It appears to have been successfully installed on the Ubuntu desktop 22.04.05 .When I click on SPT, there is no response from SPT.(No windows open or messages appear.)

Omar_hong_0-1732859630251.pngOmar_hong_1-1732859649134.pngOmar_hong_2-1732859667124.pngOmar_hong_3-1732859799675.png

[liborukropec]

Hi Omar,

have you used the deb package for ubuntu22?

liborukropec_0-1732870045505.png

Please open Terminal and execute

# if you notice UI glitches, uncomment the export command
# UBUNTU_MENUPROXY=0 GDK_BACKEND=x11 /opt/nxp/MCUX_Provi_v10/bin/securep
/opt/nxp/MCUX_Provi_v10/bin/securep

most probably in the output there will be clear what is the problem and you can paste it here.

Regards,

Libor

[Omar_hong]

Hi @liborukropec ,

  The result is as attached file.

[liborukropec]

HI,

you doubled the SEC path in the terminal, that's why it opened only help.

you should run either:

/opt/nxp/MCUX_Provi_v10/bin/securep

or:

UBUNTU_MENUPROXY=0 GDK_BACKEND=x11 /opt/nxp/MCUX_Provi_v10/bin/securep

Could you please try again?

Libor

[Omar_hong]

Hi @liborukropec 

  Thanks for your quick reply.

    The result is as attached file.

[liborukropec · Accepted solution]

Hi,

could you install these packages as it is documented in the User Guide, chapter 4.4. Linux?

sudo apt install libhidapi-dev libsdl2-2.0-0

Regards,

Libor

[Omar_hong]

Hi @liborukropec 

  Thanks for your quick reply.

      It seems to be starting up normally now. Thank you very much. !

[marek-trmac]

Hi Omar,

ad 1) SEC tool does not support creation of manufacturing package on command-line. It is supported in GUI only.

ad 2) SEC tool parses the source image and convert to the format, that will be needed on the build. This feature is same for GUI and for the build CLI command.

d 3) Go to https://nxp.com/mcuxpresso/secure and download the SEC tool for Linux. It contains all tools compiled for Linux. Supported operating system version are described in release notes.

[Omar_hong]

ad 2) SEC tool parses the source image and convert to the format, that will be needed on the build. This feature is same for GUI and for the build CLI command.

=>Could you please provide specific commands or methods to generate those files? (.serc .bin)

Omar_hong_0-1732210100760.png

[marek-trmac]

Hi Omar,

see command nxpimage utils binary-image convert.

For description, please refer to SEC tool command: main menu > Help > SPSDK Online Documentation.

[marek-trmac]

Hi Omar,

for the first question, do you have any reason to create manufacturing package on CLI? We understand it is good to have a build available for continuous integration, but for the manufacturing package - this is created once you are ready to send the code to FAB. I do not see any reason to automate that. Why did you ask for CLI version?

[Omar_hong]

Hi @marek-trmac 

I think you misunderstood my mean. What I want is a feature that can package the tools needed to build the boot image into a zip file.(It can be executed on the Windows version of SEC)

[marek-trmac]

Hi Omar,

the only distribution of the executable tools is available on NXP.com https://nxp.com/mcuxpresso/secure via the MCUXpresso installers. Currently there are no plans for other distribution.