Add split-slot A/B sample

[tomchy]

Add A/B sample variant, that describe multi-image FW through a MCUboot manifest with digests.

[NordicBuilder]

The following west manifest projects have changed revision in this Pull Request:

Name	Old Revision	New Revision	Diff
mcuboot	nrfconnect/sdk-mcuboot@459288d	nrfconnect/sdk-mcuboot#560	nrfconnect/sdk-mcuboot#560/files

⛔ DNM label due to: 1 project with PR revision

Note: This message is automatically posted and updated by the Manifest GitHub Action.

[NordicBuilder]

CI Information

^{To view the history of this post, click the 'edited' button above}
Build number: 23

Inputs:

Sources:

sdk-nrf: PR head: 902f6f21868031cc2d1924950a94c14c855dd479
mcuboot: PR head: 49908e88d5ea3d18029f3fdde58a5054aac30ad3

more details

sdk-nrf:

PR head: 902f6f21868031cc2d1924950a94c14c855dd479
merge base: ce5938942331190b4aefdcb52ee1b3538d944ed4
target head (main): d5dea1aa89ccea24269f12d3777442967a358e93
Diff

mcuboot:

PR head: 49908e88d5ea3d18029f3fdde58a5054aac30ad3
merge base: 459288d6a13cede9fa09e314b21a979a6cc6e3f2
target head (main): 0d263faf6e55a697ee336f2fbef0af095802f979
Diff

Github labels

Enabled	Name	Description
	ci-disabled	Disable the ci execution
	ci-all-test	Run all of ci, no test spec filtering will be done
	ci-force-downstream	Force execution of downstream even if twister fails
	ci-run-twister	Force run twister
	ci-run-zephyr-twister	Force run zephyr twister

List of changed files detected by CI (61)

CODEOWNERS
bootloader
│  ├── mcuboot
│  │  ├── boot
│  │  │  ├── boot_serial
│  │  │  │  ├── src
│  │  │  │  │  │ boot_serial_encryption.c
│  │  │  ├── bootutil
│  │  │  │  ├── CMakeLists.txt
│  │  │  │  ├── include
│  │  │  │  │  ├── bootutil
│  │  │  │  │  │  ├── bootutil.h
│  │  │  │  │  │  ├── enc_key.h
│  │  │  │  │  │  ├── image.h
│  │  │  │  │  │  │ mcuboot_manifest.h
│  │  │  │  ├── src
│  │  │  │  │  ├── bootutil_area.c
│  │  │  │  │  ├── bootutil_area.h
│  │  │  │  │  ├── bootutil_img_hash.c
│  │  │  │  │  ├── bootutil_loader.c
│  │  │  │  │  ├── bootutil_loader.h
│  │  │  │  │  ├── bootutil_misc.c
│  │  │  │  │  ├── bootutil_misc.h
│  │  │  │  │  ├── bootutil_priv.h
│  │  │  │  │  ├── bootutil_public.c
│  │  │  │  │  ├── ed25519_psa.c
│  │  │  │  │  ├── encrypted.c
│  │  │  │  │  ├── image_validate.c
│  │  │  │  │  ├── loader.c
│  │  │  │  │  ├── loader_manifest_xip.c
│  │  │  │  │  ├── ram_load.c
│  │  │  │  │  ├── swap_misc.c
│  │  │  │  │  ├── swap_offset.c
│  │  │  │  │  │ swap_scratch.c
│  │  │  ├── espressif
│  │  │  │  │ CMakeLists.txt
│  │  │  ├── zephyr
│  │  │  │  ├── CMakeLists.txt
│  │  │  │  ├── Kconfig
│  │  │  │  ├── decompression.c
│  │  │  │  ├── firmware_loader_bm.c
│  │  │  │  ├── include
│  │  │  │  │  ├── mcuboot_config
│  │  │  │  │  │  │ mcuboot_config.h
│  │  ├── docs
│  │  │  │ design.md
│  │  ├── scripts
│  │  │  ├── imgtool
│  │  │  │  ├── image.py
│  │  │  │  │ main.py
│  │  ├── sim
│  │  │  ├── Cargo.toml
│  │  │  ├── mcuboot-sys
│  │  │  │  ├── Cargo.toml
│  │  │  │  │ build.rs
│  │  │  ├── src
│  │  │  │  ├── image.rs
│  │  │  │  │ lib.rs
│  │  │  ├── tests
│  │  │  │  │ core.rs
cmake
│  ├── sysbuild
│  │  ├── image_signing.cmake
│  │  │ mcuboot_manifest.cmake
samples
│  ├── dfu
│  │  ├── ab_split
│  │  │  ├── CMakeLists.txt
│  │  │  ├── Kconfig
│  │  │  ├── README.rst
│  │  │  ├── boards
│  │  │  │  │ nrf54h20dk_nrf54h20_cpuapp.overlay
│  │  │  ├── prj.conf
│  │  │  ├── sample.yaml
│  │  │  ├── src
│  │  │  │  ├── ab_utils.c
│  │  │  │  ├── ab_utils.h
│  │  │  │  │ main.c
│  │  │  ├── sysbuild.conf
│  │  │  ├── sysbuild
│  │  │  │  ├── mcuboot
│  │  │  │  │  ├── boards
│  │  │  │  │  │  │ nrf54h20dk_nrf54h20_cpuapp.overlay
│  │  │  │  │  │ prj.conf
│  │  │  │  │ nrf54h20dk_nrf54h20_memory_map.dtsi
subsys
│  ├── bootloader
│  │  │ Kconfig
│  ├── mgmt
│  │  ├── mcumgr
│  │  │  ├── grp
│  │  │  │  ├── img_mgmt
│  │  │  │  │  ├── src
│  │  │  │  │  │  ├── img_mgmt.c
│  │  │  │  │  │  │ img_mgmt_state.c
sysbuild
│  ├── CMakeLists.txt
│  │ Kconfig.mcuboot
west.yml

Outputs:

Toolchain

Version: df3cc9d822
Build docker image: docker-dtr.nordicsemi.no/sw-production/ncs-build:df3cc9d822_e595b21c39

Test Spec & Results: ✅ Success; ❌ Failure; 🟠 Queued; 🟡 Progress; ◻️ Skipped; ⚠️ Quarantine

• ◻️ Toolchain - Skipped: existing toolchain is used
• ✅ Build twister - Skipped: Skipping Build & Test as it succeeded in a previous run: 22
• ❌ Integration tests
  • ✅ test-sdk-audio - Skipped: Job was skipped as it succeeded in a previous run
  • ✅ desktop52_verification
  • ✅ test-fw-nrfconnect-apps - Skipped: Job was skipped as it succeeded in a previous run
  • ✅ test_ble_nrf_config
  • ✅ test-fw-nrfconnect-ble_mesh - Skipped: Job was skipped as it succeeded in a previous run
  • ✅ test-fw-nrfconnect-ble_samples - Skipped: Job was skipped as it succeeded in a previous run
  • ✅ test-fw-nrfconnect-chip - Skipped: Job was skipped as it succeeded in a previous run
  • ✅ test-fw-nrfconnect-nfc - Skipped: Job was skipped as it succeeded in a previous run
  • ✅ test-fw-nrfconnect-nrf-iot_libmodem-nrf - Skipped: Job was skipped as it succeeded in a previous run
  • ✅ test-fw-nrfconnect-nrf-iot_zephyr_lwm2m - Skipped: Job was skipped as it succeeded in a previous run
  • ✅ test-fw-nrfconnect-nrf-iot_samples - Skipped: Job was skipped as it succeeded in a previous run
  • ✅ test-fw-nrfconnect-nrf-iot_lwm2m - Skipped: Job was skipped as it succeeded in a previous run
  • ✅ test-fw-nrfconnect-nrf-iot_thingy91 - Skipped: Job was skipped as it succeeded in a previous run
  • ✅ test-fw-nrfconnect-nrf_crypto - Skipped: Job was skipped as it succeeded in a previous run
  • ✅ test-fw-nrfconnect-rpc - Skipped: Job was skipped as it succeeded in a previous run
  • ✅ test-fw-nrfconnect-rs - Skipped: Job was skipped as it succeeded in a previous run
  • ✅ test-fw-nrfconnect-fem - Skipped: Job was skipped as it succeeded in a previous run
  • ✅ test-fw-nrfconnect-tfm - Skipped: Job was skipped as it succeeded in a previous run
  • ✅ test-fw-nrfconnect-thread-main - Skipped: Job was skipped as it succeeded in a previous run
  • ✅ test-sdk-find-my - Skipped: Job was skipped as it succeeded in a previous run
  • ✅ test-fw-nrfconnect-nrf_lrcs_positioning - Skipped: Job was skipped as it succeeded in a previous run
  • ✅ test-sdk-wifi - Skipped: Job was skipped as it succeeded in a previous run
  • ✅ test-low-level - Skipped: Job was skipped as it succeeded in a previous run
  • ❌ test-sdk-mcuboot
  • ✅ test-sdk-dfu - Skipped: Job was skipped as it succeeded in a previous run
  • ✅ test-fw-nrfconnect-ps-main - Skipped: Job was skipped as it succeeded in a previous run
  • ✅ test-secdom-samples-public - Skipped: Job was skipped as it succeeded in a previous run
  • ⚠️ test-fw-nrfconnect-nrf-iot_cloud

Note: This message is automatically posted and updated by the CI

[NordicBuilder]

Memory footprint analysis revealed the following potential issues

applications.hpf.gpio.icbmsg[nrf54l15dk/nrf54l15/cpuflpr]: High RAM usage: 12744[B] - link (cc: @nrfconnect/ncs-ll-ursus)
applications.hpf.gpio.icbmsg[nrf54l15dk/nrf54l15/cpuflpr]: High ROM usage: 9492[B] - link (cc: @nrfconnect/ncs-ll-ursus)
applications.hpf.gpio.icmsg[nrf54l15dk/nrf54l15/cpuflpr]: High RAM usage: 9102[B] - link (cc: @nrfconnect/ncs-ll-ursus)
applications.hpf.gpio.icmsg[nrf54l15dk/nrf54l15/cpuflpr]: High ROM usage: 5858[B] - link (cc: @nrfconnect/ncs-ll-ursus)

Note: This message is automatically posted and updated by the CI (latest/sdk-nrf/PR-25036/22)

[Copilot]

Pull Request Overview

This PR adds A/B update sample variant demonstrating multi-image firmware updates through MCUboot manifests with digests, enabling transactional updates of multiple images atomically. The implementation introduces manifest-based dependency management for split-slot DirectXIP configurations.

Key Changes:

• Adds manifest-based transactional update support in MCUboot configuration
• Implements a new A/B split-slot sample demonstrating separated application and radio core images
• Updates image management code to handle manifest verification and slot selection

Reviewed Changes

Copilot reviewed 24 out of 24 changed files in this pull request and generated 6 comments.

Show a summary per file

File	Description
west.yml	Updates Zephyr and MCUboot revisions to pull requests supporting manifest features
sysbuild/Kconfig.mcuboot	Adds Kconfig options for manifest-based transactional updates
sysbuild/CMakeLists.txt	Implements manifest image target assignment and configuration propagation
subsys/mgmt/mcumgr/grp/img_mgmt/src/img_mgmt_state.c	Modifies slot state handling to use manifest image when manifest updates enabled
subsys/mgmt/mcumgr/grp/img_mgmt/src/img_mgmt.c	Adds full img_mgmt implementation with manifest verification support
subsys/mgmt/mcumgr/grp/img_mgmt/Kconfig	Adds QSPI XIP split image configuration option
subsys/mgmt/mcumgr/grp/img_mgmt/CMakeLists.txt	Updates build to include new img_mgmt.c and marks upstream file as header-only
subsys/bootloader/Kconfig	Adds application-side Kconfig options for manifest updates
scripts/ci/license_allow_list.yaml	Adds img_mgmt.c to Apache-2.0 license allowlist
samples/dfu/ab_split/*	New sample demonstrating A/B updates with separated slots and manifest-based dependencies
cmake/sysbuild/mcuboot_manifest.cmake	Implements manifest YAML generation for primary and secondary slots
cmake/sysbuild/image_signing.cmake	Adds manifest appending to imgtool signing process

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull Request Overview

Copilot reviewed 24 out of 24 changed files in this pull request and generated 1 comment.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull Request Overview

Copilot reviewed 24 out of 24 changed files in this pull request and generated 1 comment.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull Request Overview

Copilot reviewed 25 out of 25 changed files in this pull request and generated 6 comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull Request Overview

Copilot reviewed 25 out of 25 changed files in this pull request and generated 2 comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull Request Overview

Copilot reviewed 22 out of 22 changed files in this pull request and generated 3 comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull Request Overview

Copilot reviewed 22 out of 22 changed files in this pull request and generated 2 comments.

Comments suppressed due to low confidence (1)

sysbuild/Kconfig.mcuboot:259

• [nitpick] There are two consecutive blank lines before 'endmenu'. Remove one blank line to maintain consistent spacing.

endmenu

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull Request Overview

Copilot reviewed 22 out of 22 changed files in this pull request and generated 3 comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

[nitpick] Empty line at line 8 appears unnecessary and should be removed for consistency.

Suggested change

[Copilot]

The documentation states that individual image files should be uploaded separately, but the manifest-based update approach requires both application and radio images to be updated together as a set. This could mislead users. Consider clarifying that both files for a given slot must be uploaded together to satisfy the manifest requirements.

Suggested change

	.. note::
	When using manifest-based updates (with :kconfig:option:`SB_CONFIG_MCUBOOT_MANIFEST_UPDATES=y`), both the application and radio image files for a given slot must be uploaded together as a set.
	Uploading only one file will not satisfy the manifest requirements and may result in an incomplete or failed update.
	Always ensure that both files for the target slot are uploaded together during the update process.

[Copilot]

[nitpick] Extra blank line at the end of file (line 213) should be removed.

Suggested change