blob: a00cfbcbf0bf55f5935257cde1c5c40c5112f2f0 [file] [log] [blame]
xiaobo gu3de99422019-04-09 18:09:19 +08001#!/bin/bash
2
3# include uboot pre-build macros
4#declare CONFIG_FILE=("${buildtree}/.config")
5#declare AUTOCFG_FILE=("${buildtree}/include/autoconf.mk")
6
7function init_vari() {
8 #source ${CONFIG_FILE} &> /dev/null # ignore warning/error
9 #source ${AUTOCFG_FILE} &> /dev/null # ignore warning/error
10
11 AML_BL2_NAME="bl2.bin"
12 AML_KEY_BLOB_NANE="aml-user-key.sig"
13
14 if [ "y" == "${CONFIG_AML_SECURE_BOOT_V3}" ]; then
15 V3_PROCESS_FLAG="--level v3"
16 fi
17
Haixiang Bao8803a9c2019-06-03 16:59:49 +080018 if [ "y" == "${CONFIG_AML_CRYPTO_AES}" ]; then
19 BOOT_SIG_FLAG="--aeskey enable"
Haixiang Bao400ac6c2019-10-11 17:06:15 +080020 EFUSE_GEN_FLAG="--aeskey enable"
21 fi
22
23 if [ "y" == "${CONFIG_AML_EFUSE_GEN_AES_ONLY}" ]; then
24 EFUSE_GEN_FLAG="--aeskey only"
Haixiang Bao8803a9c2019-06-03 16:59:49 +080025 fi
26
xiaobo gu3de99422019-04-09 18:09:19 +080027 if [ "y" == "${CONFIG_AML_BL33_COMPRESS_ENABLE}" ]; then
28 BL33_COMPRESS_FLAG="--compress lz4"
29 fi
30
31 if [ "y" == "${CONFIG_FIP_IMG_SUPPORT}" ]; then
32 BL3X_SUFFIX="img"
33 fi
34}
35
36function fix_blx() {
37 #bl2 file size 41K, bl21 file size 3K (file size not equal runtime size)
38 #total 44K
39 #after encrypt process, bl2 add 4K header, cut off 4K tail
40
41 #bl2 file size 56K, acs file size 4K
42 #total 60K
43 #after encrypt process, bl2 add 4K header, cut off 4K tail
44
xiaobo gu3de99422019-04-09 18:09:19 +080045 #bl2 limit 56K
46 #acs limit 4K, but encrypt tool need 64K bl2.bin, so fix to 8192byte.
47
48 declare blx_bin_limit=0
49 declare blx01_bin_limit=0
50 declare -i blx_size=0
51 declare -i zero_size=0
52
53 #$7:name flag
Haixiang Baof008dc12019-05-23 18:47:15 +080054 if [ "$7" = "bl2" ]; then
xiaobo gu3de99422019-04-09 18:09:19 +080055 blx_bin_limit=57344
56 blx01_bin_limit=4096
57 else
58 echo "blx_fix name flag not supported!"
59 exit 1
60 fi
61
62 # blx_size: blx.bin size, zero_size: fill with zeros
63 blx_size=`du -b $1 | awk '{print int($1)}'`
64 if [ $blx_size -gt $blx_bin_limit ]; then
65 echo "Error: $7 ($1) too big. $blx_size > $blx_bin_limit"
66 exit 1
67 fi
68
69 zero_size=$blx_bin_limit-$blx_size
70 dd if=/dev/zero of=$2 bs=1 count=$zero_size
71 cat $1 $2 > $3
72 rm $2
73
74 blx_size=`du -b $4 | awk '{print int($1)}'`
75 zero_size=$blx01_bin_limit-$blx_size
76 dd if=/dev/zero of=$2 bs=1 count=$zero_size
77 cat $4 $2 > $5
78
79 cat $3 $5 > $6
80
81 rm $2
82}
83
84function cleanup() {
85 rm -f ${BUILD_PATH}/bl*.enc ${BUILD_PATH}/bl2*.sig
86 rm -f ${BUILD_PATH}/boot_new.bin
87}
88
89function encrypt_step() {
90 dbg "encrypt: $@"
91 local ret=0
92 ./${FIP_FOLDER}${CUR_SOC}/aml_encrypt_${CUR_SOC} $@
93 ret=$?
94 if [ 0 != $ret ]; then
95 echo "Err! aml_encrypt_${CUR_SOC} return $ret"
96 exit $ret
97 fi
98}
99
100function encrypt() {
101 #u-boot.bin generate
102 if [ "y" == "${CONFIG_AML_SECURE_BOOT_V3}" ]; then
xiaobo gu3de99422019-04-09 18:09:19 +0800103 encrypt_step --bl3sig --input ${BUILD_PATH}/bl31.${BL3X_SUFFIX} --output ${BUILD_PATH}/bl31.${BL3X_SUFFIX}.enc ${V3_PROCESS_FLAG} --type bl31
104 if [ "${FIP_BL32}" == "${BUILD_PATH}/bl32.${BL3X_SUFFIX}" ]; then
105 encrypt_step --bl3sig --input ${BUILD_PATH}/bl32.${BL3X_SUFFIX} --output ${BUILD_PATH}/bl32.${BL3X_SUFFIX}.enc ${V3_PROCESS_FLAG} --type bl32
106 fi
Haixiang Bao400ac6c2019-10-11 17:06:15 +0800107 #encrypt_step --bl3sig --input ${BUILD_PATH}/bl33.bin ${BL33_COMPRESS_FLAG} --output ${BUILD_PATH}/bl33.bin.enc ${V3_PROCESS_FLAG} --type bl33
108 encrypt_step --bl3sig --input ${BUILD_PATH}/bl33.bin --output ${BUILD_PATH}/bl33.bin.enc ${V3_PROCESS_FLAG} --type bl33
xiaobo gu3de99422019-04-09 18:09:19 +0800109 fi
110
111 encrypt_step --bl2sig --input ${BUILD_PATH}/bl2_new.bin --output ${BUILD_PATH}/bl2.n.bin.sig
112
113 encrypt_step --bootmk --output ${BUILD_PATH}/u-boot.bin \
Haixiang Baof008dc12019-05-23 18:47:15 +0800114 --bl2 ${BUILD_PATH}/bl2.n.bin.sig \
xiaobo gu3de99422019-04-09 18:09:19 +0800115 --bl31 ${BUILD_PATH}/bl31.${BL3X_SUFFIX}.enc ${FIP_BL32_PROCESS} --bl33 ${BUILD_PATH}/bl33.bin.enc ${V3_PROCESS_FLAG} \
116 --ddrfw1 ./${FIP_FOLDER}${CUR_SOC}/ddr4_1d.fw --ddrfw2 ./${FIP_FOLDER}${CUR_SOC}/ddr4_2d.fw \
117 --ddrfw3 ./${FIP_FOLDER}${CUR_SOC}/ddr3_1d.fw --ddrfw4 ./${FIP_FOLDER}${CUR_SOC}/piei.fw \
xiaobo gude7c2952019-05-24 23:32:16 +0800118 --ddrfw5 ./${FIP_FOLDER}${CUR_SOC}/diag_lpddr4.fw --ddrfw6 ./${FIP_FOLDER}${CUR_SOC}/${DDR_FW_NAME}
xiaobo gu3de99422019-04-09 18:09:19 +0800119
120 if [ "y" == "${CONFIG_AML_CRYPTO_UBOOT}" ]; then
Haixiang Bao400ac6c2019-10-11 17:06:15 +0800121 encrypt_step --efsgen --amluserkey ${UBOOT_SRC_FOLDER}/${BOARD_DIR}/${AML_KEY_BLOB_NANE} \
122 --output ${BUILD_PATH}/u-boot.bin.encrypt.efuse ${V3_PROCESS_FLAG} ${EFUSE_GEN_FLAG}
Haixiang Bao8803a9c2019-06-03 16:59:49 +0800123 encrypt_step --bootsig --input ${BUILD_PATH}/u-boot.bin --amluserkey ${UBOOT_SRC_FOLDER}/${BOARD_DIR}/${AML_KEY_BLOB_NANE} \
124 ${BOOT_SIG_FLAG} --output ${BUILD_PATH}/u-boot.bin.encrypt ${V3_PROCESS_FLAG}
xiaobo gu3de99422019-04-09 18:09:19 +0800125 fi
126
127 if [ "y" == "${CONFIG_AML_CRYPTO_IMG}" ]; then
128 encrypt_step --imgsig --input ${UBOOT_SRC_FOLDER}/${BOARD_DIR}/boot.img --amluserkey ${UBOOT_SRC_FOLDER}/${BOARD_DIR}/${AML_KEY_BLOB_NANE} --output ${BUILD_PATH}/boot.img.encrypt
129 fi
130
131 return
132}
133
134function build_fip() {
xiaobo gu3de99422019-04-09 18:09:19 +0800135
136 # acs_tool process ddr timing and configurable parameters
137 #python ${FIP_FOLDER}/acs_tool.pyc ${BUILD_PATH}/${AML_BL2_NAME} ${BUILD_PATH}/bl2_acs.bin ${BUILD_PATH}/acs.bin 0
138
139 # fix bl2/bl21
140 fix_blx \
141 ${BUILD_PATH}/bl2.bin \
142 ${BUILD_PATH}/zero_tmp \
143 ${BUILD_PATH}/bl2_zero.bin \
144 ${BUILD_PATH}/acs.bin \
145 ${BUILD_PATH}/bl21_zero.bin \
146 ${BUILD_PATH}/bl2_new.bin \
147 bl2
148
Haixiang Baof008dc12019-05-23 18:47:15 +0800149 FIP_ARGS=" --bl31 ${BUILD_PATH}/bl31.${BL3X_SUFFIX}"
xiaobo gu3de99422019-04-09 18:09:19 +0800150
151 if [ "y" == "${CONFIG_NEED_BL32}" ]; then
152 FIP_BL32="`find ${BUILD_PATH} -name "bl32.${BL3X_SUFFIX}"`"
153 if [ "${FIP_BL32}" == "${BUILD_PATH}/bl32.${BL3X_SUFFIX}" ]; then
154 FIP_ARGS="${FIP_ARGS}"" --bl32 ${BUILD_PATH}/bl32.${BL3X_SUFFIX}"
155 FIP_BL32_PROCESS=" --bl32 ${BUILD_PATH}/bl32.${BL3X_SUFFIX}.enc"
156 fi
157 fi
158 FIP_ARGS="${FIP_ARGS}"" --bl33 ${BUILD_PATH}/bl33.bin"
159
160 # create fip.bin
161 ./${FIP_FOLDER}/fip_create ${FIP_ARGS} ${BUILD_PATH}/fip.bin
162 ./${FIP_FOLDER}/fip_create --dump ${BUILD_PATH}/fip.bin
163
164 # build final bootloader
165 cat ${BUILD_PATH}/bl2_new.bin ${BUILD_PATH}/fip.bin > ${BUILD_PATH}/boot_new.bin
166
167 return
168}
169
170function copy_other_soc() {
xiaobo gu3de99422019-04-09 18:09:19 +0800171 cp ${BL33_BUILD_FOLDER}${BOARD_DIR}/firmware/acs.bin ${BUILD_PATH} -f
xiaobo gu3de99422019-04-09 18:09:19 +0800172}
173
174function package() {
175 # BUILD_PATH without "/"
176 x=$((${#BUILD_PATH}-1))
177 if [ "\\" == "${BUILD_PATH:$x:1}" ] || [ "/" == "${BUILD_PATH:$x:1}" ]; then
178 BUILD_PATH=${BUILD_PATH:0:$x}
179 fi
180
181 init_vari $@
182 build_fip $@
183 if [ 1 -eq ${CONFIG_DDR_FW} ]; then
184 echo -n "Copy ddr fw..."
185 cp ${BLX_SRC_FOLDER}/${DDR_FW_NAME} ${FIP_FOLDER}/${CUR_SOC} -f
186 if [ 0 != $? ]; then
187 echo " failed!"
188 else
189 echo " ok!"
190 fi
191 fi
192
193 if [ "y" == "${CONFIG_AML_SIGNED_UBOOT}" ]; then
194
195 mv -f ${BUILD_PATH}/bl33.bin ${BUILD_PATH}/bl33.bin.org
196 encrypt_step --bl3sig --input ${BUILD_PATH}/bl33.bin.org --output ${BUILD_PATH}/bl33.bin.org.lz4 --compress lz4 --level v3 --type bl33
197 #get LZ4 format bl33 image from bl33.bin.enc with offset 0x720
198 dd if=${BUILD_PATH}/bl33.bin.org.lz4 of=${BUILD_PATH}/bl33.bin bs=1 skip=1824 >& /dev/null
199
Haixiang Baof008dc12019-05-23 18:47:15 +0800200 list_pack="${BUILD_PATH}/bl2_new.bin ${BUILD_PATH}/bl31.img ${BUILD_PATH}/bl32.img ${BUILD_PATH}/bl33.bin"
xiaobo gu3de99422019-04-09 18:09:19 +0800201 list_pack="$list_pack ${FIP_FOLDER}/${CUR_SOC}/*.fw"
202 u_pack=${BUILD_FOLDER}/"$(basename ${BOARD_DIR})"-u-boot.aml.zip
203 zip -j $u_pack ${list_pack} >& /dev/null
204
205 ${FIP_FOLDER}/stool/sign.sh -s ${CUR_SOC} -z $u_pack -o ${BUILD_FOLDER} -r ${UBOOT_SRC_FOLDER}/${BOARD_DIR}/aml-key -a ${UBOOT_SRC_FOLDER}/${BOARD_DIR}/aml-key
206
207 if [ "y" == "${CONFIG_AML_CRYPTO_IMG}" ]; then
208 ${FIP_FOLDER}/stool/sign.sh -s ${CUR_SOC} -p ${UBOOT_SRC_FOLDER}/${BOARD_DIR} -o ${BUILD_FOLDER} -r ${UBOOT_SRC_FOLDER}/${BOARD_DIR}/aml-key -a ${UBOOT_SRC_FOLDER}/${BOARD_DIR}/aml-key
209 fi
210 else
211 encrypt $@
212 fi
213 #copy_file
214 #cleanup
215 echo "Bootloader build done!"
216}