meta-compulab-hab

This meta-layer allows using the cst-tools inside Yocto.

Supported machines:

How to use

Clone the layer repository to the ${BUILDIR}/../sources

git clone -b imx8-kirkstone https://github.com/compulab-yokneam/meta-compulab-hab.git ../sources/meta-compulab-hab

Update conf/bblayers.conf

cat << eof >> conf/bblayers.conf
BBLAYERS += "\${BSPDIR}/sources/meta-compulab-hab"
eof

Target	Location
signed imx-boot	${BUILDIR}/tmp/deploy/images/${MACHINE}/flash.bin.signed
signed kernel image	${BUILDIR}/tmp/deploy/images/${MACHINE}/Image.signed
fuse values file	${BUILDIR}/tmp/deploy/images/${MACHINE}/fuse.out

Note	The `crts` and the `keys` folders contain keys generated by the latest Yocto build. These forders can be replaced with the user generated keys. The `cst-tools` recipe makes use of predefined keys if them are at `crts` and `keys`.

Copy the user predefined crts and the keys to ${BUILDIR}/tmp/deploy/images/${MACHINE}/cst-tools folder:
```
cp -a /path/to/user-predefined/{crts,keys} ${BUILDIR}/tmp/deploy/images/${MACHINE}/cst-tools/
```
Goto to the ${BUILDIR} directory and rebuild the image:
```
bitbake -k cst-tools -c cleansstate
bitbake -k <image>
```

Goto cst-tools:

cd ${BUILDIR}/tmp/deploy/images/${MACHINE}/cst-tools

Signing imx-boot

make imx-boot
stat hab/signed/u/flash.bin

Generating fuse values
```
make fuse
stat hab/signed/f/fuse.out
```
Generating all targets kernel, imx-boot, fuse at the same time:
```
make
```
Cleaning up

Fuse progrmming is demonstrated in NXP document i.MX8M family Secure Boot guide using HABv4.