Skip to content

Commit f631314

Browse files
committed
imx8mm_var_dart_defconfig: Disable full UEFI support
The security feature maintained by variscite for secure boot on the imx8mm is HABv4 support, so this change disables full UEFI support. This reduces the size of the binaries generated for the bootloader, and avoids HAB events when enabled. Binaries size with uefi enabled: - u-boot-spl.bin 103K - u-boot.bin 977K Binaries size with uefi disabled: - u-boot-spl.bin 101K - u-boot.bin 823K This patch avoid the following events: --------- HAB Event 1 ----------------- event data: 0xdb 0x00 0x14 0x43 0x33 0x22 0x33 0x00 0x00 0x00 0x00 0x0f 0x00 0x7e 0x0b 0xc0 0x00 0x03 0xf8 0x00 STS = HAB_FAILURE (0x33) RSN = HAB_INV_ADDRESS (0x22) CTX = HAB_CTX_TARGET (0x33) ENG = HAB_ENG_ANY (0x00) --------- HAB Event 2 ----------------- event data: 0xdb 0x00 0x14 0x43 0x33 0x22 0x33 0x00 0x00 0x00 0x00 0x0f 0x00 0x7e 0x0b 0xc0 0x00 0x03 0xf6 0x60 STS = HAB_FAILURE (0x33) RSN = HAB_INV_ADDRESS (0x22) CTX = HAB_CTX_TARGET (0x33) ENG = HAB_ENG_ANY (0x00) Signed-off-by: Luan Rafael Carneiro <luan.r@variscite.com>
1 parent fc434c2 commit f631314

File tree

1 file changed

+2
-9
lines changed

1 file changed

+2
-9
lines changed

configs/imx8mm_var_dart_defconfig

Lines changed: 2 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -62,7 +62,6 @@ CONFIG_SYS_PROMPT="u-boot=> "
6262
# CONFIG_BOOTM_NETBSD is not set
6363
# CONFIG_CMD_EXPORTENV is not set
6464
# CONFIG_CMD_IMPORTENV is not set
65-
CONFIG_CMD_NVEDIT_EFI=y
6665
CONFIG_CRC32_VERIFY=y
6766
CONFIG_CMD_MEMTEST=y
6867
CONFIG_CMD_CLK=y
@@ -79,13 +78,13 @@ CONFIG_CMD_USB_MASS_STORAGE=y
7978
CONFIG_BOOTP_PREFER_SERVERIP=y
8079
CONFIG_CMD_SNTP=y
8180
CONFIG_CMD_CACHE=y
82-
CONFIG_CMD_EFIDEBUG=y
8381
CONFIG_CMD_RTC=y
8482
CONFIG_CMD_TIME=y
8583
CONFIG_CMD_GETTIME=y
8684
CONFIG_CMD_TIMER=y
8785
CONFIG_CMD_REGULATOR=y
8886
CONFIG_CMD_EXT4_WRITE=y
87+
# CONFIG_SPL_EFI_PARTITION is not set
8988
CONFIG_OF_CONTROL=y
9089
CONFIG_ENV_OVERWRITE=y
9190
CONFIG_ENV_IS_IN_MMC=y
@@ -170,11 +169,5 @@ CONFIG_SPL_RSA=y
170169
CONFIG_SHA384=y
171170
CONFIG_LZO=y
172171
CONFIG_BZIP2=y
173-
CONFIG_EFI_VAR_BUF_SIZE=139264
174-
CONFIG_EFI_SET_TIME=y
175-
CONFIG_EFI_RUNTIME_UPDATE_CAPSULE=y
176-
CONFIG_EFI_CAPSULE_ON_DISK=y
177-
CONFIG_EFI_IGNORE_OSINDICATIONS=y
178-
CONFIG_EFI_CAPSULE_FIRMWARE_RAW=y
179-
CONFIG_EFI_SECURE_BOOT=y
172+
# CONFIG_EFI_LOADER is not set
180173
# CONFIG_OPTEE_LIB is not set

0 commit comments

Comments
 (0)