System Ready IR failing for Fedora 39 & 40 on iMX8MM EVKB

[rama_katta]

I am able to install Fedora 37 with your flash.bin image. That is booted well with Fedora 37. But It is failing for Fedora 39 and 40. During installation I am getting message  as attachment. I am suspecting the keys, In latest errata it was mentioned only  Fedora 37. Any specific things needed for Fedora 39 & 40.

[rama_katta]

Hi Salas,

Thanks for your reply. In this document https://armkeil.blob.core.windows.net/developer/Files/pdf/certificate-list/arm-systemready-errata-nx...

it was mentioned about Fedora-37. I was able to install Fedora-37. With same process rpmb key write, it is getting problem with image signature while installing fedora 39 & 40

After further investigation I found

it seems this is because of GPG signature verification changes started in Fedora 38. See here:

https://www.redhat.com/en/blog/updating-gpg-keys-for-fedora-and-rhel

as per Your errata, Any new content need to update in RPMB block to support things from Fedora-38 ? Please specify

Note #1 - Firmware setup
Clear the RPMB from U-Boot prompt with:
u-boot=> mw 0x60000000 0xc33eebd3;mw 0x60000004 0x9f4c336e
u-boot=> mw 0x60000008 0xc0e28c98;mw 0x6000000c 0x615459b8
u-boot=> mw 0x60000010 0x86cf2b0d;mw 0x60000014 0xf24d8464
u-boot=> mw 0x60000018 0xc6e656ab;mw 0x6000001c 0xe401b71b
u-boot=> mw.b 0x50000000 0 0x400000
u-boot=> mmc rpmb write 0x50000000 0 0x2000 0x60000000

[rama_katta]

Any update on above question? Fedora-37 End of life 2023-12-05. Any thoughts on that

[Alejandro_Salas]

Hello, 

Unfortunately I am not sure what Fedora version was tested as you can see in release notes (Rev. LF6.6.3_1.0.0 — 29 March 2024):

It appears it was tested with Fedora 37. So we need to wait until the next release and see if the i.MX8M families can boot with newer version of Fedora.

Best regards.

Salas.

[rama_katta]

Could you please inform approximate time lines to verify Fedora 38 version