iMX6, lf_v2022.04 u-boot and HAB support

[lisandropm]

Hi! We have a device using an iMX6 with Dunfell and are porting it to Yocto Kirkstone. We want to keep using SecureBoot/HAB on it. By looking at a recent u-boot's code [0] it would be a matter of enabling CONFIG_IMX_HAB... except it fails to build pretty quickly:

git/arch/arm/mach-imx/hab.c:875: undefined reference to `fuse_read'

And indeed the fuse_read() function seems to be only defined for iMX8, even if the doc says this should be supported from iMX6 to 8.

Older instructions for enabling this talk about CONFIG_SECURE_BOOT, which does not seems to exist anymore on u-boot.

So, what's the correct way to enable HAB on iMX6? A solution using u-boot-imx is just fine.

[0] I used 2022.04 as a starting point, but I see the same issue on 2023.04.

[lisandropm · Accepted solution]

Thanks to the u-boot people the root issue has been found.

CONFIG_SPL_DRIVERS_MISC=y

↑ This was also needed, and should probably be selected by CONFIG_IMX_HAB=y.

[Bio_TICFSL]

Hello,

Have no try this for MX6 but it should works:

https://community.nxp.com/t5/i-MX-Processors/Make-the-secure-u-boot-image-for-NAND-with-i-MX6-SoloX/...

Regards

[lisandropm]

Thanks, but that will not work. Check that the first thing to do is to enable CONFIG_SECURE_BOOT. But now:

$ git clone https://github.com/nxp-imx/uboot-imx.git
$ cd uboot-imx/0
$ git branch
* lf_v2022.04
$ grep -Rn CONFIG_SECURE_BOOT
$

So that does not seems to be an option any more.