How to extend the OS Container to include kernel and rootfs on iMX8X?

[Gandalf-kern]

How can I extend the OS container to include the kernel and rootfs for signed images and secure boot?

[Zhiming_Liu]

Hi

You can see the Chapter 9 Security in i.MX_Linux_User's_Guide.pdf && i.MX_Android_Security_User's_Guide.pdf

BR

Zhiming

[Gandalf-kern]

Ok read the documents. 

There is a recipe to create the imx-boot container, but I don’t see a recipe to create the  OS-container/kernel image under recipes-bsp/imx-mkimage/. I don’t see a recipe under meta-freescale/recipes-bsp/imx-mkimage to invoke the "make SOC=iMX8QX flash_linux" for the flash_os.bin.

Do you know how the “make SOC=iMX8QX flash_linux” for the flash_os.bin gets invoked?  I need the Container header and signature offsets from this make to sign the OS-container using the cst. This will at least give a bootable signed kernel image to begin with. Does NXP provide a recipe for this, or if not, why not?