diff options
| author | Brian Woods | 2021-09-22 15:59:59 -0700 |
|---|---|---|
| committer | Stefano Stabellini | 2021-09-22 17:30:54 -0700 |
| commit | 22a60a46b62fb74c2319384b50f3039f8b85e76b (patch) | |
| tree | 244b41d0ab37cd2695ca06f7fc2a3727aae7d008 /scripts/uboot-script-gen | |
| parent | 98718d8cd49fcec9c45cea9038cd643862e6fb53 (diff) | |
Change Xen load order to enable Secure Boot
Secure boot on uboot expects the last PE image loaded be the signed
image used. Simply move Xen to the bottom of the load order (other than
device trees and bitstreams) and it enables Xen to boot.
Signed-off-by: Brian Woods <brian.woods@xilinx.com>
Reviewed-by: Stefano Stabellini <sstabellini@kernel.org>
Signed-off-by: Stefano Stabellini <stefano.stabellini@xilinx.com>
Diffstat (limited to 'scripts/uboot-script-gen')
| -rwxr-xr-x | scripts/uboot-script-gen | 12 |
1 files changed, 7 insertions, 5 deletions
diff --git a/scripts/uboot-script-gen b/scripts/uboot-script-gen index 3359404..e14ee32 100755 --- a/scripts/uboot-script-gen +++ b/scripts/uboot-script-gen @@ -372,11 +372,6 @@ function linux_config() xen_file_loading() { - check_compressed_file_type $XEN "executable" - kernel_addr=$memaddr - kernel_path=$XEN - load_file "$XEN" "host_kernel" - check_compressed_file_type $DOM0_KERNEL "executable" dom0_kernel_addr=$memaddr load_file $DOM0_KERNEL "dom0_linux" @@ -425,6 +420,13 @@ xen_file_loading() fi i=$(( $i + 1 )) done + + # secure boot on uboot expects the last PE image loaded to be the + # signed secureboot image used + check_compressed_file_type $XEN "executable" + kernel_addr=$memaddr + kernel_path=$XEN + load_file "$XEN" "host_kernel" } linux_file_loading() |