Uboot image with trusty os is too large for partition bootloader0 in Android 12

[herman_lin]

Hi,

I can generate images individually using the following two defconfigs: imx8mq_evk_android_trusty_defconfig => u-boot-imx8mq-trusty.imx imx8mq_evk_android_trusty_dual_defconfig => spl-imx8mq-trusty-dual.bin + bootloader-imx8mq-trusty-dual.img

However, the u-boot-imx8mq-trusty.imx file exceeds 4MB (with tee-imx8mq.bin alone being 2.8MB), resulting in the following error message when flashing using uuu:

1:9 7/8 [image too large for partition ] FB[-t 600000]: flash bootloader0 u-boot-imx8mq-trusty.imx

Is U-Boot with Trusty OS supported on i.MX8MQ in Android 12(built with imx8mq_evk_android_trusty_defconfig)?

Or need to support Trusty OS based on SPL and a dual bootloader configuration? (built with imx8mq_evk_android_trusty_dual_defconfig)?

Thanks

[Zhiming_Liu]

Hi @herman_lin 

You can only choose dual, trusty-dual, trusty-secure-unlock-dual from the Android Quick Start Guide. Please use imx8mq_evk_android_trusty_dual_defconfig to build images.

[herman_lin]

Hi Zhiming,

Thanks for your reply.

In the Android 11.0.0_2.2.0 user guide on page 16, it is stated that even non-dual bootloader versions can support Trusty OS.

=> u-boot-imx8mq-trusty.imx (An image containing U-Boot, ATF, and Trusty OS for i.MX 8M Quad EVK board)

However, it seems that starting from Android 12, only dual bootloader versions can support Trusty OS.

What is the reason for this?

Is there a chance that Trusty OS support will be available on non-dual bootloader versions in Android12?

Thanks!!

[Zhiming_Liu · Accepted solution]

Hi @herman_lin 

Dual bootloader would provide a more secure way to prevent bootloader rollback attack, so we set the dual bootloader as the default boot mode. 

Best Regards

Zhiming