From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Tue, 01 Apr 2025 14:16:02 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1tzaXC-006zFe-0x for lore@lore.pengutronix.de; Tue, 01 Apr 2025 14:16:02 +0200 Received: from localhost ([127.0.0.1] helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1tzaXB-0005pu-RN; Tue, 01 Apr 2025 14:16:01 +0200 Received: from drehscheibe.grey.stw.pengutronix.de ([2a0a:edc0:0:c01:1d::a2]) by metis.whiteo.stw.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1tzaX7-0005of-Ig; Tue, 01 Apr 2025 14:15:57 +0200 Received: from dude05.red.stw.pengutronix.de ([2a0a:edc0:0:1101:1d::54]) by drehscheibe.grey.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1tzaX7-002lK6-1F; Tue, 01 Apr 2025 14:15:57 +0200 Received: from localhost ([::1] helo=dude05.red.stw.pengutronix.de) by dude05.red.stw.pengutronix.de with esmtp (Exim 4.96) (envelope-from ) id 1tzaX7-003Iqs-0x; Tue, 01 Apr 2025 14:15:57 +0200 From: Ahmad Fatoum To: distrokit@pengutronix.de Date: Tue, 1 Apr 2025 14:15:56 +0200 Message-Id: <20250401121556.787399-3-a.fatoum@pengutronix.de> X-Mailer: git-send-email 2.39.5 In-Reply-To: <20250401121556.787399-1-a.fatoum@pengutronix.de> References: <20250401121556.787399-1-a.fatoum@pengutronix.de> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Subject: [DistroKit] =?utf-8?q?=5BPATCH_3/3=5D_v8a=3A_barebox=3A_update_t?= =?utf-8?q?o_version_bump_v2024=2E12=2E0_=E2=86=92_v2025=2E03=2E0?= X-BeenThere: distrokit@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: DistroKit Mailinglist List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Ahmad Fatoum Sender: "DistroKit" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: distrokit-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Some highlights from the version bump: - Much faster eMMC erases - Individual boot artifacts can now be easily overridden by a new -o parameter to the boot command (e.g. to inject rsinit as initrd) - Fixes and hardening against memory safety bugs - Improvement for Rockchip SoC support Signed-off-by: Ahmad Fatoum --- configs/platform-v8a/barebox.config | 75 ++++++++++++++++++++++++++--- configs/platform-v8a/platformconfig | 4 +- 2 files changed, 71 insertions(+), 8 deletions(-) diff --git a/configs/platform-v8a/barebox.config b/configs/platform-v8a/barebox.config index 328e365d27b8..7d3794ad5221 100644 --- a/configs/platform-v8a/barebox.config +++ b/configs/platform-v8a/barebox.config @@ -1,12 +1,13 @@ # # Automatically generated file; DO NOT EDIT. -# Barebox/arm 2024.12.0 Configuration +# Barebox/arm 2025.03.0 Configuration # CONFIG_ARM=y +CONFIG_ARCH_LINUX_NAME="arm64" +CONFIG_ARCH_MKIMAGE_NAME="arm64" CONFIG_ARM64=y CONFIG_ARCH_TEXT_BASE=0x00000000 CONFIG_ARM_LINUX=y -CONFIG_ARM_USE_COMPRESSED_DTB=y # # System Type @@ -16,6 +17,7 @@ CONFIG_ARCH_MULTIARCH=y # CONFIG_ARCH_BCM283X is not set CONFIG_ARCH_IMX=y # CONFIG_ARCH_K3 is not set +# CONFIG_ARCH_SUNXI is not set # CONFIG_ARCH_LAYERSCAPE is not set CONFIG_ARCH_ROCKCHIP=y # CONFIG_ARCH_ZYNQMP is not set @@ -93,6 +95,7 @@ CONFIG_ARCH_RK3568=y # CONFIG_MACH_RK3568_EVB=y # CONFIG_MACH_RK3568_BPI_R2PRO is not set +# CONFIG_MACH_PINE64_PINETAB2 is not set # CONFIG_MACH_PINE64_QUARTZ64 is not set # CONFIG_MACH_PROTONIC_MECSBC is not set CONFIG_MACH_RADXA_ROCK3=y @@ -105,10 +108,11 @@ CONFIG_MACH_RADXA_ROCK3=y # select board features: # CONFIG_ARCH_ROCKCHIP_ATF=y -# CONFIG_ARCH_RK3568_OPTEE is not set +# CONFIG_ARCH_ROCKCHIP_OPTEE is not set # end of Rockchip Features -# CONFIG_BOARD_ARM_GENERIC_DT is not set +CONFIG_BOARD_ARM_GENERIC_DT=y +CONFIG_BOARD_ARM_GENERIC_DT_AARCH64=y # end of System Type CONFIG_64BIT=y @@ -125,6 +129,18 @@ CONFIG_ARM_PSCI_CLIENT=y CONFIG_ARM_ATF=y # end of ARM specific settings +CONFIG_HAVE_ARCH_BOARD_GENERIC_DT=y + +# +# General architecture-dependent options +# +CONFIG_BOARD_GENERIC_DT=y +# CONFIG_BOARD_GENERIC_FIT is not set +# end of General architecture-dependent options + +CONFIG_CC_IS_GCC=y +CONFIG_GCC_VERSION=140201 +CONFIG_CLANG_VERSION=0 CONFIG_GREGORIAN_CALENDER=y CONFIG_HAS_KALLSYMS=y CONFIG_HAS_CACHE=y @@ -142,7 +158,6 @@ CONFIG_LOGBUF=y CONFIG_STDDEV=y CONFIG_MENUTREE=y CONFIG_ARCH_DMA_ADDR_T_64BIT=y -CONFIG_USBGADGET_START=y CONFIG_BOOT=y CONFIG_FASTBOOT_BASE=y @@ -151,6 +166,8 @@ CONFIG_FASTBOOT_BASE=y # CONFIG_LOCALVERSION="" CONFIG_LOCALVERSION_AUTO=y +CONFIG_HAS_INSECURE_DEFAULTS=y +CONFIG_INSECURE=y CONFIG_BANNER=y CONFIG_MEMINFO=y CONFIG_MEMTEST=y @@ -211,6 +228,7 @@ CONFIG_MENU=y CONFIG_ERRNO_MESSAGES=y CONFIG_TIMESTAMP=y CONFIG_BOOTM=y +CONFIG_BOOT_OVERRIDE=y CONFIG_BOOTM_SHOW_TYPE=y CONFIG_BOOTM_VERBOSE=y CONFIG_BOOTM_INITRD=y @@ -221,6 +239,7 @@ CONFIG_BOOTM_OFTREE_UIMAGE=y # CONFIG_BOOTM_ELF is not set CONFIG_BOOTM_FITIMAGE=y # CONFIG_BOOTM_FITIMAGE_SIGNATURE is not set +CONFIG_BOOTM_OPTIONAL_SIGNED_IMAGES=y CONFIG_BLSPEC=y CONFIG_FLEXIBLE_BOOTARGS=y CONFIG_MMCBLKDEV_ROOTARG=y @@ -304,6 +323,10 @@ CONFIG_CC_HAS_KASAN_GENERIC=y # CONFIG_KASAN is not set # CONFIG_COMPILE_TEST is not set # CONFIG_WERROR is not set + +# +# arm Debugging +# # end of Debugging # @@ -414,6 +437,7 @@ CONFIG_CMD_SHA1SUM=y # CONFIG_CMD_SHA256SUM is not set # CONFIG_CMD_SHA384SUM is not set # CONFIG_CMD_SHA512SUM is not set +# CONFIG_CMD_FIPTOOL is not set CONFIG_CMD_UNCOMPRESS=y # end of File @@ -557,11 +581,13 @@ CONFIG_AIODEV=y # CONFIG_LM75 is not set # CONFIG_ST_GYRO is not set CONFIG_ROCKCHIP_SARADC=y +CONFIG_ARM_AMBA=y # # serial drivers # CONFIG_SERIAL_DEV_BUS=y +# CONFIG_SERIAL_AMBA_PL011 is not set CONFIG_DRIVER_SERIAL_IMX=y CONFIG_DRIVER_SERIAL_NS16550=y # CONFIG_DRIVER_SERIAL_CADENCE is not set @@ -639,6 +665,7 @@ CONFIG_DRIVER_SPI_IMX=y CONFIG_DRIVER_SPI_IMX_2_3=y # CONFIG_DRIVER_SPI_LITEX_SPIFLASH is not set # CONFIG_SPI_NXP_FLEXSPI is not set +CONFIG_SPI_ROCKCHIP=y # end of SPI drivers CONFIG_I2C=y @@ -673,7 +700,6 @@ CONFIG_MTD_OOB_DEVICE=y CONFIG_MTD_DATAFLASH=y # CONFIG_MTD_DATAFLASH_WRITE_VERIFY is not set CONFIG_MTD_M25P80=y -# CONFIG_MTD_SST25L is not set # CONFIG_MTD_DOCG3 is not set # CONFIG_MTD_MTDRAM is not set # end of Self contained MTD devices @@ -733,6 +759,7 @@ CONFIG_USB_STORAGE=y # # CONFIG_USB_HUB_USB251XB is not set # CONFIG_USB_ONBOARD_HUB is not set +CONFIG_TYPEC=y # CONFIG_TYPEC_TUSB320 is not set CONFIG_USB_GADGET=y CONFIG_USB_GADGET_DUALSPEED=y @@ -769,9 +796,11 @@ CONFIG_MCI_MMC_BOOT_PARTITIONS=y # CONFIG_MCI_DWC_MSHC is not set CONFIG_MCI_DW=y # CONFIG_MCI_DW_PIO is not set +# CONFIG_MCI_SUNXI_SMHC is not set CONFIG_MCI_ROCKCHIP_DWCMSHC=y CONFIG_MCI_IMX_ESDHC=y # CONFIG_MCI_IMX_ESDHC_PIO is not set +# CONFIG_MCI_MMCI is not set CONFIG_MCI_ARASAN=y # CONFIG_MCI_AM654 is not set # CONFIG_MCI_SPI is not set @@ -802,6 +831,7 @@ CONFIG_CLOCKSOURCE_ARM_ARCHITECTED_TIMER=y # CONFIG_MFD_MC9SDZ60 is not set # CONFIG_MFD_STMPE is not set CONFIG_MFD_SYSCON=y +# CONFIG_MFD_TPS65219 is not set # CONFIG_MFD_TWL4030 is not set # CONFIG_MFD_TWL6030 is not set # CONFIG_RAVE_SP_CORE is not set @@ -865,6 +895,7 @@ CONFIG_WATCHDOG_IMX=y # # DMA support # +# CONFIG_DMADEVICES is not set # end of DMA support CONFIG_GPIOLIB=y @@ -879,6 +910,7 @@ CONFIG_GPIO_GENERIC=y CONFIG_GPIO_IMX=y # CONFIG_GPIO_PCA953X is not set # CONFIG_GPIO_PCF857X is not set +# CONFIG_GPIO_PL061 is not set CONFIG_GPIO_ROCKCHIP=y # CONFIG_GPIO_DESIGNWARE is not set # CONFIG_GPIO_SX150X is not set @@ -975,6 +1007,7 @@ CONFIG_PHY_FSL_IMX8MQ_USB=y CONFIG_PHY_ROCKCHIP_INNO_USB2=y CONFIG_PHY_ROCKCHIP_NANENG_COMBO_PHY=y # CONFIG_PHY_ROCKCHIP_SNPS_PCIE3 is not set +CONFIG_PHY_ROCKCHIP_USBDP=y # # Hardware crypto devices @@ -1050,6 +1083,7 @@ CONFIG_SYSCON_REBOOT_MODE=y # CONFIG_FS=y CONFIG_FS_LEGACY=y +CONFIG_FS_WRITABLE=y # # Some selected filesystems still use the legacy FS API. @@ -1120,6 +1154,7 @@ CONFIG_LZO_DECOMPRESS=y CONFIG_FNMATCH=y CONFIG_QSORT=y CONFIG_IMAGE_SPARSE=y +CONFIG_LIBFDT=y # CONFIG_RATP is not set # CONFIG_ALLOW_PRNG_FALLBACK is not set CONFIG_CRC_CCITT=y @@ -1141,7 +1176,35 @@ CONFIG_ARCH_HAS_ZERO_PAGE=y # # Hardening options # + +# +# This barebox configuration has CONFIG_HAS_INSECURE_DEFAULTS=y indicating +# + +# +# that some of the configured options have potentially insecure defaults. +# + +# +# Extra care needs to be in secure booted systems. +# # CONFIG_BUG_ON_DATA_CORRUPTION is not set + +# +# Memory initialization +# +CONFIG_CC_HAS_AUTO_VAR_INIT_PATTERN=y +CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO_BARE=y +CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO=y +# CONFIG_INIT_STACK_NONE is not set +# CONFIG_INIT_STACK_ALL_PATTERN is not set +CONFIG_INIT_STACK_ALL_ZERO=y +# CONFIG_INIT_ON_ALLOC_DEFAULT_ON is not set +# CONFIG_INIT_ON_FREE_DEFAULT_ON is not set +CONFIG_CC_HAS_ZERO_CALL_USED_REGS=y +# CONFIG_ZERO_CALL_USED_REGS is not set +# end of Memory initialization + # CONFIG_STACK_GUARD_PAGE is not set CONFIG_STACKPROTECTOR_NONE=y # CONFIG_STACKPROTECTOR_STRONG is not set diff --git a/configs/platform-v8a/platformconfig b/configs/platform-v8a/platformconfig index 5a4fa0c58bd2..fb1019cfab42 100644 --- a/configs/platform-v8a/platformconfig +++ b/configs/platform-v8a/platformconfig @@ -179,10 +179,10 @@ PTXCONF_CONSOLE_SPEED="115200" PTXCONF_BAREBOX_ARCH_STRING="arm" PTXCONF_BAREBOX_DEPENDENCIES=y PTXCONF_BAREBOX=y -PTXCONF_BAREBOX_VERSION="2024.12.0" +PTXCONF_BAREBOX_VERSION="2025.03.0" PTXCONF_BAREBOX_CONFIG_BUILDSYSTEM_VERSION=y PTXCONF_BAREBOX_BUILDSYSTEM_VERSION="${PTXDIST_VCS_VERSION}" -PTXCONF_BAREBOX_MD5="b9277ee0dc251b2a49de97d37ee5d365" +PTXCONF_BAREBOX_MD5="2b84bcf8644373db021c86864f2e5761" PTXCONF_BAREBOX_CONFIG="barebox.config" PTXCONF_BAREBOX_FIRMWARE=y PTXCONF_BAREBOX_EXTRA_ENV=y -- 2.39.5