Pull request for fwu-next-19092024

Message ID	20240919143435.209455-1-ilias.apalodimas@linaro.org
State	New
Headers	show Delivered-To: patch@linaro.org Received-SPF: pass (google.com: domain of u-boot-bounces@lists.denx.de designates 85.214.62.61 as permitted sender) client-ip=85.214.62.61; From: Ilias Apalodimas <ilias.apalodimas@linaro.org> To: u-boot@lists.denx.de, trini@konsulko.com Cc: michal.simek@amd.com, sughosh.ganu@linaro.org Subject: Pull request for fwu-next-19092024 Date: Thu, 19 Sep 2024 17:34:35 +0300 Message-ID: <20240919143435.209455-1-ilias.apalodimas@linaro.org> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Precedence: list Errors-To: u-boot-bounces@lists.denx.de Sender: "U-Boot" <u-boot-bounces@lists.denx.de>
Series	Pull request for fwu-next-19092024 \| expand Pull request for fwu-next-19092024

Message ID

20240919143435.209455-1-ilias.apalodimas@linaro.org

State

New

Headers

Received-SPF: pass (google.com: domain of u-boot-bounces@lists.denx.de
 designates 85.214.62.61 as permitted sender) client-ip=85.214.62.61;
From: Ilias Apalodimas <ilias.apalodimas@linaro.org>
To: u-boot@lists.denx.de,
	trini@konsulko.com
Cc: michal.simek@amd.com,
	sughosh.ganu@linaro.org
Subject: Pull request for fwu-next-19092024
Date: Thu, 19 Sep 2024 17:34:35 +0300
Message-ID: <20240919143435.209455-1-ilias.apalodimas@linaro.org>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Precedence: list
Errors-To: u-boot-bounces@lists.denx.de
Sender: "U-Boot" <u-boot-bounces@lists.denx.de>

Series

Pull request for fwu-next-19092024 | expand

Message

Ilias Apalodimas Sept. 19, 2024, 2:34 p.m. UTC

This is a PR for the firmware A/B updates going via the TPM tree.
Sughosh and Michal have verified and tested the changes.

The following changes since commit 650883a568653f37ee4ff43beda56152b594a49c:

  cmd: osd: Depend on OSD (2024-09-16 16:46:16 -0600)

are available in the Git repository at:

  https://source.denx.de/u-boot/custodians/u-boot-tpm/ tags/fwu-next-19092024

for you to fetch changes up to 6f933aa963bb971d848ff6bd1c743035bbc98ead:

  fwu: print a message if empty capsule checks fail (2024-09-19 10:52:50 +0300)

The CI https://source.denx.de/u-boot/custodians/u-boot-tpm/-/pipelines/22364
showed no issues

Please pull!
/Ilias

----------------------------------------------------------------
This PR contains various improvements in the A/B update logic for EFI

- Read both copies of metadata, in case one of the is corrupted
- Check the metadata version against the running firmware to make sure it's
  allowed
- Limit the use of a revert capsule if the board is on a trial state and
  make sure it's not applied if the max counter has expired

----------------------------------------------------------------
Sughosh Ganu (6):
      fwu: v2: try reading both copies of metadata
      fwu: v1: do a version check for the metadata
      fwu: check all images for transitioning out of Trial State
      fwu: add dependency checks for selecting FWU metadata version
      fwu: do not allow capsule processing on exceeding Trial Counter threshold
      fwu: print a message if empty capsule checks fail

 include/fwu.h                | 11 ++++++
 lib/efi_loader/efi_capsule.c | 11 ++++--
 lib/fwu_updates/Kconfig      |  1 +
 lib/fwu_updates/fwu.c        | 31 +++++++++++++++--
 lib/fwu_updates/fwu_v1.c     | 18 +++++++---
 lib/fwu_updates/fwu_v2.c     | 81 ++++++++++++++++++++++++--------------------
 6 files changed, 108 insertions(+), 45 deletions(-)

Pull request for fwu-next-19092024

Pull-request

Message