mbox series

Pull request for fwu-next-19092024

Message ID 20240919143435.209455-1-ilias.apalodimas@linaro.org
State New
Headers show
Series Pull request for fwu-next-19092024 | expand

Pull-request

https://source.denx.de/u-boot/custodians/u-boot-tpm/ tags/fwu-next-19092024

Message

Ilias Apalodimas Sept. 19, 2024, 2:34 p.m. UTC
This is a PR for the firmware A/B updates going via the TPM tree.
Sughosh and Michal have verified and tested the changes.

The following changes since commit 650883a568653f37ee4ff43beda56152b594a49c:

  cmd: osd: Depend on OSD (2024-09-16 16:46:16 -0600)

are available in the Git repository at:

  https://source.denx.de/u-boot/custodians/u-boot-tpm/ tags/fwu-next-19092024

for you to fetch changes up to 6f933aa963bb971d848ff6bd1c743035bbc98ead:

  fwu: print a message if empty capsule checks fail (2024-09-19 10:52:50 +0300)

The CI https://source.denx.de/u-boot/custodians/u-boot-tpm/-/pipelines/22364
showed no issues

Please pull!
/Ilias

----------------------------------------------------------------
This PR contains various improvements in the A/B update logic for EFI

- Read both copies of metadata, in case one of the is corrupted
- Check the metadata version against the running firmware to make sure it's
  allowed
- Limit the use of a revert capsule if the board is on a trial state and
  make sure it's not applied if the max counter has expired

----------------------------------------------------------------
Sughosh Ganu (6):
      fwu: v2: try reading both copies of metadata
      fwu: v1: do a version check for the metadata
      fwu: check all images for transitioning out of Trial State
      fwu: add dependency checks for selecting FWU metadata version
      fwu: do not allow capsule processing on exceeding Trial Counter threshold
      fwu: print a message if empty capsule checks fail

 include/fwu.h                | 11 ++++++
 lib/efi_loader/efi_capsule.c | 11 ++++--
 lib/fwu_updates/Kconfig      |  1 +
 lib/fwu_updates/fwu.c        | 31 +++++++++++++++--
 lib/fwu_updates/fwu_v1.c     | 18 +++++++---
 lib/fwu_updates/fwu_v2.c     | 81 ++++++++++++++++++++++++--------------------
 6 files changed, 108 insertions(+), 45 deletions(-)

Comments

Tom Rini Sept. 19, 2024, 10:05 p.m. UTC | #1
On Thu, Sep 19, 2024 at 05:34:35PM +0300, Ilias Apalodimas wrote:

> This is a PR for the firmware A/B updates going via the TPM tree.
> Sughosh and Michal have verified and tested the changes.
> 
> The following changes since commit 650883a568653f37ee4ff43beda56152b594a49c:
> 
>   cmd: osd: Depend on OSD (2024-09-16 16:46:16 -0600)
> 
> are available in the Git repository at:
> 
>   https://source.denx.de/u-boot/custodians/u-boot-tpm/ tags/fwu-next-19092024
> 
> for you to fetch changes up to 6f933aa963bb971d848ff6bd1c743035bbc98ead:
> 
>   fwu: print a message if empty capsule checks fail (2024-09-19 10:52:50 +0300)
> 
> The CI https://source.denx.de/u-boot/custodians/u-boot-tpm/-/pipelines/22364
> showed no issues
> 
> Please pull!
> /Ilias
> 

Applied to u-boot/next, thanks!