STM32MP1 Signed FIT Using Yocto

[lauala]

Hello!

I'm working on creating a signed FIT image in my Yocto build for the STM32MP1. After reviewing the FIT image build recipes in the meta-st layer, it seems that they only support U-Boot SPL, while my bootchain uses TF-A instead of SPL (I’m new to Yocto, so I might be mistaken).

This tutorial did not work anymore.
https://wiki.st.com/stm32mpu/wiki/How_to_create_Signed_FIT_image_from_Distribution_package

I’ve been unable to find specific documentation on how to build a signed FIT image for STM32MP1 in Yocto. Could anyone provide guidance or direct me to relevant documentation for implementing and signing FIT images in this setup?

Thank you in advance for any assistance!

[umarFarooq-emb]

Hello,

The secure boot is working fine in my case, if you could please share the issue that you are facing after you have followed the steps mentioned in the st wiki?

Best Regards,
Umer

[subhajit-ghosh-tweaklogic]

Hi Umar,

I am facing a yocto build issue after I run "bitbake st-image-weston" following the above guide:

ERROR: u-boot-stm32mp-v2023.10-stm32mp-r1-r0 do_uboot_assemble_fitimage: ExecutionError('/home/subhajit/stm32mp1_chain_of_trust/yocto/build-openstlinuxweston-stm32mp15-disco/tmp-glibc/work/stm32mp15_disco-ostl-linux-gnueabi/u-boot-stm32mp/v2023.10-stm32mp-r1/temp/run.do_uboot_assemble_fitimage.3502757', 1, None, None)
ERROR: Logfile of failure stored in: /home/subhajit/stm32mp1_chain_of_trust/yocto/build-openstlinuxweston-stm32mp15-disco/tmp-glibc/work/stm32mp15_disco-ostl-linux-gnueabi/u-boot-stm32mp/v2023.10-stm32mp-r1/temp/log.do_uboot_assemble_fitimage.3502757
Log data follows:
| DEBUG: Executing shell function do_uboot_assemble_fitimage
| WARNING: exit code 1 from a shell command.
| cp: cannot stat '/home/subhajit/stm32mp1_chain_of_trust/yocto/build-openstlinuxweston-stm32mp15-disco/tmp-glibc/work/stm32mp15_disco-ostl-linux-gnueabi/u-boot-stm32mp/v2023.10-stm32mp-r1/recipe-sysroot/sysroot-only/fitImage': No such file or directory
ERROR: Task (/home/subhajit/stm32mp1_chain_of_trust/yocto/layers/meta-st/meta-st-stm32mp/recipes-bsp/u-boot/u-boot-stm32mp_2023.10.bb:do_uboot_assemble_fitimage) failed with exit code '1'

I tried several other methods with no luck. I am sure ST will have some config.

Regards,

Subhajit Ghosh