HAB sign initramfs image

[richc128]

I want to use an initramfs with a signed kernel.

Right now I have INITRAMFS_IMAGE_BUNDLE = "1" so I get a large file image-initramfs.bin in my deploy directory that seems to have the kernel and initramfs together. 

I don't seem to be able to sign this directly. I'm assuming I need to sign the kernel before it is package.

Does anyone have any tips on how to do this?

[Harvey021]

Hi @richc128 

If you want to sign them together, please try to consider some key points.

In booti.c bootm.c, where the hab_authenticate function is called, add some logs, print out the addresses of these calculations, and pass them to the HAB function with the correct address, make the input of the function name related to hab_authentication in booti.c reasonable, and then the content of the IVT should be correct, especially the location of the CSF.

Best regards

Harvey