TDA4VH-Q1: How to sign an image such as tiboot3 , tispl(atf optee uboot-SPL), uboot, fitimage(linux)

hongyao.jin

Intellectual 780 points

Part Number: TDA4VH-Q1
Other Parts Discussed in Thread: TDA4VH

Tool/software:

TDA4VH

SDK 0900 linux+freertos

customer board

now we have successfully converted the HS-FS device to HS-SE, and while trying to boot the device by SPL mode.

We would like to know how to modify the configuration of uboot or linux to use our own key instead of custMpk.pem provided by TI to implement the signature

1 month ago

0 Diwakar Dhyani 1 month ago

TI__Mastermind 43620 points

Hi hongyao.jin,

While generating the signed tispl,tiboot3.bin,uboot.img image build infra make use of k3-j784s4-binman.dtsi configuration file . In default SDK the root trust keys used to sign the image is custMpk.pem, which is TI dummy key you need to use you key instead of TI dummy key.

For the kernel fitimage generation follow the SDK docuemanataion.

Regards
Diwakar

0 hongyao.jin 1 month ago in reply to Diwakar Dhyani

Intellectual 780 points

In the SPL mode, all system firmware can be verified successfully and the system starts normally.

Then we are trying to debug the SBL in hs-se, how should we sign the tiboot3.bin, tifs.bin, combined.appimage, Is there any documentation for reference?

By the way, we don't seem to have signed sysfw.itd in SPL mode, so do we need some extra operations for tifs.bin in SBL mode

0 Diwakar Dhyani 1 month ago in reply to hongyao.jin

TI__Mastermind 43620 points

Hi hongyao,

hongyao.jin said:
Then we are trying to debug the SBL in hs-se, how should we sign the tiboot3.bin, tifs.bin, combined.appimage, Is there any documentation for reference?

When you say you want to debug, do you you want to enable the JTAG or want to validate the SBL boot flow?

If you want to just boot the devices using SBL boot flow suggestion would be to go through SDK documentation.

hongyao.jin said:
By the way, we don't seem to have signed sysfw.itd in SPL mode, so do we need some extra operations for tifs.bin in SBL mode

Binman use's signed TIFS inner certificate and generate the outer certificate with the root trust keys(SMPK,BMPK),

inner certificate and encrypted binary for the TIFS can be found at <LINUX_SDK>/board-support/prebuilt-images/ti-sysfw/

ti-fs-firmware-j784s4-hs-cert.bin -> Inner cetifcate signed with TI MPK
ti-fs-firmware-j784s4-hs-enc.bin -> Encrypted binary signed with TI MEK

Regards
Diwakar

0 hongyao.jin 1 month ago in reply to Diwakar Dhyani

Intellectual 780 points

Diwakar Dhyani said:
When you say you want to debug, do you you want to enable the JTAG or want to validate the SBL boot flow?

we want to validate the SBL boot flow and now the system can boot normally, but it seems that ATF has some error messages

the boot log as follows

[2024-12-06 19:03:20]  root@tda4vh-dt2vh:~# NOTICE:  BL31: v2.10.0(release):v2.10.0-367-g00f1ec6b87-dirty NOTICE:  BL31: Built : 16:09:05, Feb  9 2024 Timeout waiting for thread SP_RESPONSE to fill Thread SP_RESPONSE verification failed (-60) Message receive failed (-60) Failed to get response (-60) Transfer send failed (-60) GTC_CNTFID0 is 0! Assuming 200000000 Hz. Fix Bootloader I/TC: OP-TEE version: 4.1.0-51-g012cdca49 (gcc version 11.4.0 (GCC)) #1 Tue Jan 30 10:48:03 UTC 2024 aarch64 I/TC: WARNING: This OP-TEE configuration might be insecure! I/TC: WARNING: Please check https://optee.readthedocs.io/en/latest/architecture/porting_guidelines.html I/TC: Primary CPU initializing I/TC: GIC redistributor base address not provided I/TC: Assuming default GIC group status and modifier I/TC: SYSFW ABI: 3.1 (firmware rev 0x0009 '9.2.4--v09.02.04 (Kool Koala)') I/TC: Secure Board Configuration Software: Rev 1 I/TC: Secure Boot Keys: Count 1, Rev 1 I/TC: HUK Initialized I/TC: Activated SA2UL device I/TC: Enabled firewalls for SA2UL TRNG device I/TC: SA2UL TRNG initialized I/TC: SA2UL Drivers initialized I/TC: Primary CPU switching to normal world boot U-Boot SPL 2023.04-ti-gf9b966c67473 (Mar 19 2024 - 20:31:40 +0000) SYSFW ABI: 3.1 (firmware rev 0x0009 '9.2.4--v09.02.04 (Kool Koala)') Trying to boot from MMC1 Authentication passed Authentication passed U-Boot 2023.04-ti-gf9b966c67473 (Mar 19 2024 - 20:31:40 +0000) J784S4 SR1.0 HS-SE Model: Texas Instruments J784S4 EVM DRAM:  2 GiB (effective 32 GiB) idle-statesCore:  84 devices, 29 uclasses, devicetree: separate mmc@4f80000: 0, mmc@4fb0000: 1 Loading Environment from MMC... *** Warning - bad CRC, using default environment serial@2880000 serial@2880000 serial@2880000 Hit any key to stop autoboot:  2  1  0 EXT_CSD[179], PARTITION_CONFIG: BOOT_PARTITION_ENABLE: 0x1 PARTITION_ACCESS: 0x0 k3_r5f_rproc r5f@41000000: Core 1 is already in use. No rproc commands work 1623256 bytes read in 41 ms (37.8 MiB/s) Authentication passed Load Remote Processor 2 with data@addr=0x82000000 1623256 bytes: Success! 8331702 bytes read in 85 ms (93.5 MiB/s) name_fit_overlay=conf-ti_k3-j784s4-evm-virt-mac-client.dtbo name_fit_overlay=conf-ti_k3-j784s4-vision-apps.dtbo name_fit_config=conf-ti_k3-j784s4-evm.dtb ## Loading kernel from FIT Image at 90000000 ... Using 'conf-ti_k3-j784s4-evm.dtb' configuration Verifying Hash Integrity ... sha512,rsa4096:smpk+ OK Trying 'kernel-1' kernel subimage Description:  Linux kernel Type:         Kernel Image Compression:  gzip compressed Data Start:   0x900000f4 Data Size:    8210370 Bytes = 7.8 MiB Architecture: AArch64 OS:           Linux Load Address: 0x81000000 Entry Point:  0x81000000 Hash algo:    sha512 Hash value:   b82672e99b12b85f9b34c1d1979ee060305853881d03c7309fc0d89f4f2e02f9d03ad1958531264316df591f7c54613930818be90957289f276520360f7a0895 Verifying Hash Integrity ... sha512+ OK ## Loading fdt from FIT Image at 90000000 ... Using 'conf-ti_k3-j784s4-evm.dtb' configuration Verifying Hash Integrity ... sha512,rsa4096:smpk+ OK Trying 'fdt-ti_k3-j784s4-evm.dtb' fdt subimage Description:  Flattened Device Tree blob Type:         Flat Device Tree Compression:  uncompressed Data Start:   0x907d49f0 Data Size:    97747 Bytes = 95.5 KiB Architecture: AArch64 Load Address: 0x83000000 Hash algo:    sha512 Hash value:   61cab2c047f927492495b58cb6cf069b596d8a153599cf66260decfd58e0d60a326a25d75b95c8e5bd8d5b2588d7bfdc519488de8af51ddeca8881e69a4bec93 Verifying Hash Integrity ... sha512+ OK Loading fdt from 0x907d49f0 to 0x83000000 ## Loading fdt from FIT Image at 90000000 ... Using 'conf-ti_k3-j784s4-evm-virt-mac-client.dtbo' configuration Verifying Hash Integrity ... sha512,rsa4096:smpk+ OK Trying 'fdt-ti_k3-j784s4-evm-virt-mac-client.dtbo' fdt subimage Description:  Flattened Device Tree blob Type:         Flat Device Tree Compression:  uncompressed Data Start:   0x907f022c Data Size:    3764 Bytes = 3.7 KiB Architecture: AArch64 Load Address: 0x83080000 Hash algo:    sha512 Hash value:   23db0e9e29072ad0fe99d145ce7fdb96de552a337b8860312551375fb6d28cb539645fcd4a2a627d9f63fae2d1fa92480fb326b452b70d3012a4797850f2fcaf Verifying Hash Integrity ... sha512+ OK ## Loading fdt from FIT Image at 90000000 ... Using 'conf-ti_k3-j784s4-vision-apps.dtbo' configuration Verifying Hash Integrity ... sha512,rsa4096:smpk+ OK Trying 'fdt-ti_k3-j784s4-vision-apps.dtbo' fdt subimage Description:  Flattened Device Tree blob Type:         Flat Device Tree Compression:  uncompressed Data Start:   0x907ec8e0 Data Size:    14374 Bytes = 14 KiB Architecture: AArch64 Load Address: 0x83080000 Hash algo:    sha512 Hash value:   566ae37c581e474bd9407492128b1d0322e48915599d0f0ab20dbf92e6ffc50099f7de9bb7f8ea0cf20060c7ee94b7639dd7ce9aba0aebbcaf3559b80a81ad33 Verifying Hash Integrity ... sha512+ OK Booting using the fdt blob at 0x83000000 Working FDT set to 83000000 Uncompressing Kernel Image ERROR: reserving fdt memory region failed (addr=880000000 size=80000000 flags=4) Loading Device Tree to 000000008ffe2000, end 000000008ffff31b ... OK Working FDT set to 8ffe2000 Starting kernel ... 0.000000] Booting Linux on physical CPU 0x0000000000 [0x411fd080] 0.000000] Linux version 6.1.80-tda4vhdthsdv-g2e423244f8c0 (oe-user@oe-host) (aarch64-oe-linux-gcc (GCC) 11.4.0, GNU ld (GNU Binutils) 2.38.20220708) #1 SMP PREEMPT Wed Mar 20 14:43:33 UTC 2024 0.000000] Machine model: Texas Instruments J784S4 EVM 0.000000] earlycon: ns16550a0 at MMIO32 0x0000000002880000 (options '') 0.000000] printk: bootconsole [ns16550a0] enabled 0.000000] efi: UEFI not found. 0.000000] OF: reserved mem: OVERLAP DETECTED! 0.000000] r5f-virtual-eth-queues@af000000 (0x00000000af000000--0x00000000af200000) overlaps with vision-apps-dma-memory@af000000 (0x00000000af000000--0x00000000b2000000) 0.000000] OF: reserved mem: OVERLAP DETECTED! 0.000000] vision-apps-dma-memory@af000000 (0x00000000af000000--0x00000000b2000000) overlaps with r5f-virtual-eth-buffers@af200000 (0x00000000af200000--0x00000000b1000000) 0.000000] Reserved memory: created DMA memory pool at 0x00000000a0000000, size 1 MiB 0.000000] OF: reserved mem: initialized node vision-apps-r5f-dma-memory@a0000000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x00000000a0100000, size 15 MiB 0.000000] OF: reserved mem: initialized node vision-apps-r5f-memory@a0100000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x00000000a1000000, size 1 MiB 0.000000] OF: reserved mem: initialized node vision-apps-r5f-dma-memory@a1000000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x00000000a1100000, size 15 MiB 0.000000] OF: reserved mem: initialized node vision-apps-r5f-memory@a1100000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x00000000a2000000, size 1 MiB 0.000000] OF: reserved mem: initialized node vision-apps-r5f-dma-memory@a2000000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x00000000a2100000, size 31 MiB 0.000000] OF: reserved mem: initialized node vision-apps-r5f-memory@a2100000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x00000000a4000000, size 1 MiB 0.000000] OF: reserved mem: initialized node vision-apps-r5f-dma-memory@a4000000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x00000000a4100000, size 15 MiB 0.000000] OF: reserved mem: initialized node vision-apps-r5f-memory@a4100000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x00000000a5000000, size 1 MiB 0.000000] OF: reserved mem: initialized node vision-apps-r5f-dma-memory@a5000000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x00000000a5100000, size 15 MiB 0.000000] OF: reserved mem: initialized node vision-apps-r5f-memory@a5100000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x00000000a6000000, size 1 MiB 0.000000] OF: reserved mem: initialized node vision-apps-r5f-dma-memory@a6000000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x00000000a6100000, size 15 MiB 0.000000] OF: reserved mem: initialized node vision-apps-r5f-memory@a6100000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x00000000a7000000, size 1 MiB 0.000000] OF: reserved mem: initialized node vision-apps-r5f-dma-memory@a7000000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x00000000a7100000, size 15 MiB 0.000000] OF: reserved mem: initialized node vision-apps-r5f-memory@a7100000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x00000000a8000000, size 1 MiB 0.000000] OF: reserved mem: initialized node vision-apps-r5f-dma-memory@a8000000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x00000000a8100000, size 15 MiB 0.000000] OF: reserved mem: initialized node vision-apps-r5f-memory@a8100000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x00000000ac000000, size 48 MiB 0.000000] OF: reserved mem: initialized node vision-apps-rtos-ipc-memory-region@ac000000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x00000000af000000, size 2 MiB 0.000000] OF: reserved mem: initialized node r5f-virtual-eth-queues@af000000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x00000000af000000, size 48 MiB 0.000000] OF: reserved mem: initialized node vision-apps-dma-memory@af000000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x00000000af200000, size 30 MiB 0.000000] OF: reserved mem: initialized node r5f-virtual-eth-buffers@af200000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x00000000b2000000, size 1 MiB 0.000000] OF: reserved mem: initialized node vision-apps-c71-dma-memory@b2000000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x00000000b2100000, size 31 MiB 0.000000] OF: reserved mem: initialized node vision-apps-c71_0-memory@b2100000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x00000000b4000000, size 1 MiB 0.000000] OF: reserved mem: initialized node vision-apps-c71_1-dma-memory@b4000000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x00000000b4100000, size 31 MiB 0.000000] OF: reserved mem: initialized node vision-apps-c71_1-memory@b4100000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x00000000b6000000, size 1 MiB 0.000000] OF: reserved mem: initialized node vision-apps-c71_2-dma-memory@b6000000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x00000000b6100000, size 31 MiB 0.000000] OF: reserved mem: initialized node vision-apps-c71_2-memory@b6100000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x00000000b8000000, size 1 MiB 0.000000] OF: reserved mem: initialized node vision-apps-c71_3-dma-memory@b8000000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x00000000b8100000, size 31 MiB 0.000000] OF: reserved mem: initialized node vision-apps-c71_3-memory@b8100000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x00000000ba000000, size 64 MiB 0.000000] OF: reserved mem: initialized node vision-apps-core-heap-memory-lo@ba000000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x00000000be000000, size 8 MiB 0.000000] OF: reserved mem: initialized node vision-apps-r5f-virtual-eth-queues@be000000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x00000000be800000, size 24 MiB 0.000000] OF: reserved mem: initialized node vision-apps-r5f-virtual-eth-buffers@be800000, compatible id shared-dma-pool 0.000000] Reserved memory: created DMA memory pool at 0x0000000880000000, size 2048 MiB 0.000000] OF: reserved mem: initialized node vision-apps-core-heap-memory-hi@880000000, compatible id shared-dma-pool 0.000000] OF: reserved mem: initialized node vision_apps_shared-memories, compatible id dma-heap-carveout 0.000000] Reserved memory: created CMA memory pool at 0x0000000980000000, size 1792 MiB 0.000000] OF: reserved mem: initialized node linux-cma-buffers@980000000, compatible id shared-dma-pool 0.000000] Zone ranges: 0.000000]   DMA      [mem 0x0000000080000000-0x00000000ffffffff] 0.000000]   DMA32    empty 0.000000]   Normal   [mem 0x0000000100000000-0x0000000fffffffff] 0.000000] Movable zone start for each node 0.000000] Early memory node ranges 0.000000]   node   0: [mem 0x0000000080000000-0x000000009e7fffff] 0.000000]   node   0: [mem 0x000000009e800000-0x00000000a8ffffff] 0.000000]   node   0: [mem 0x00000000a9000000-0x00000000abffffff] 0.000000]   node   0: [mem 0x00000000ac000000-0x00000000bfffffff] 0.000000]   node   0: [mem 0x00000000c0000000-0x00000000ffffffff] 0.000000]   node   0: [mem 0x0000000880000000-0x00000008ffffffff] 0.000000]   node   0: [mem 0x0000000900000000-0x0000000fffffffff] 0.000000] Initmem setup node 0 [mem 0x0000000080000000-0x0000000fffffffff] 0.000000] psci: probing for conduit method from DT. 0.000000] psci: PSCIv1.1 detected in firmware. 0.000000] psci: Using standard PSCI v0.2 function IDs 0.000000] psci: Trusted OS migration not required 0.000000] psci: SMC Calling Convention v1.4 0.000000] percpu: Embedded 20 pages/cpu s41064 r8192 d32664 u81920 0.000000] Detected PIPT I-cache on CPU0 0.000000] CPU features: detected: GIC system register CPU interface 0.000000] CPU features: detected: Spectre-v3a 0.000000] CPU features: detected: Spectre-BHB 0.000000] CPU features: detected: ARM erratum 1742098 0.000000] CPU features: detected: ARM errata 1165522, 1319367, or 1530923 0.000000] alternatives: applying boot alternatives 0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 8257536 0.000000] Kernel command line: console=ttyS2,115200n8 earlycon=ns16550a,mmio32,0x02880000 root=PARTUUID=80f886e6-02 rw rootfstype=ext4 rootwait 0.000000] Dentry cache hash table entries: 4194304 (order: 13, 33554432 bytes, linear) 0.000000] Inode-cache hash table entries: 2097152 (order: 12, 16777216 bytes, linear) 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off 0.000000] software IO TLB: area num 8. 0.000000] software IO TLB: mapped [mem 0x00000000fbfff000-0x00000000fffff000] (64MB) 0.000000] Memory: 27418560K/33554432K available (11712K kernel code, 1258K rwdata, 3812K rodata, 1984K init, 438K bss, 4300864K reserved, 1835008K cma-reserved) 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=8, Nodes=1 0.000000] rcu: Preemptible hierarchical RCU implementation. 0.000000] rcu: RCU event tracing is enabled. 0.000000] rcu: RCU restricting CPUs from NR_CPUS=256 to nr_cpu_ids=8. 0.000000] Trampoline variant of Tasks RCU enabled. 0.000000] Tracing variant of Tasks RCU enabled. 0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 25 jiffies. 0.000000] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=8 0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 0.000000] GICv3: [Firmware Bug]: GICR region 0x0000000001900000 has overlapping address 0.000000] GICv3: GIC: Using split EOI/Deactivate mode 0.000000] GICv3: 960 SPIs implemented 0.000000] GICv3: 0 Extended SPIs implemented 0.000000] Root IRQ handler: gic_handle_irq 0.000000] GICv3: GICv3 features: 16 PPIs 0.000000] GICv3: CPU0: found redistributor 0 region 0:0x0000000001900000 0.000000] ITS [mem 0x01820000-0x0182ffff] 0.000000] GIC: enabling workaround for ITS: Socionext Synquacer pre-ITS 0.000000] ITS@0x0000000001820000: Devices Table too large, reduce ids 20->19 0.000000] ITS@0x0000000001820000: allocated 524288 Devices @93c800000 (flat, esz 8, psz 64K, shr 0) 0.000000] ITS: using cache flushing for cmd queue 0.000000] GICv3: using LPI property table @0x000000093c050000 0.000000] GIC: using cache flushing for LPI property table 0.000000] GICv3: CPU0: using allocated LPI pending table @0x000000093c060000 0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention. 0.000000] arch_timer: cp15 timer(s) running at 200.00MHz (phys). 0.000000] clocksource: arch_sys_counter: mask: 0x3ffffffffffffff max_cycles: 0x2e2049d3e8, max_idle_ns: 440795210634 ns 0.000000] sched_clock: 58 bits at 200MHz, resolution 5ns, wraps every 4398046511102ns 0.010579] Console: colour dummy device 80x25 0.016301] Calibrating delay loop (skipped), value calculated using timer frequency.. 400.00 BogoMIPS (lpj=800000) 0.029642] pid_max: default: 32768 minimum: 301 0.035567] LSM: Security Framework initializing 0.041595] Mount-cache hash table entries: 65536 (order: 7, 524288 bytes, linear) 0.051361] Mountpoint-cache hash table entries: 65536 (order: 7, 524288 bytes, linear) 0.062965] cblist_init_generic: Setting adjustable number of callback queues. 0.072231] cblist_init_generic: Setting shift to 3 and lim to 1. 0.080071] cblist_init_generic: Setting adjustable number of callback queues. 0.089308] cblist_init_generic: Setting shift to 3 and lim to 1. 0.097207] rcu: Hierarchical SRCU implementation. 0.103333] rcu: Max phase no-delay instances is 1000. 0.110222] Platform MSI: msi-controller@1820000 domain created 0.118035] PCI/MSI: /bus@100000/interrupt-controller@1800000/msi-controller@1820000 domain created 0.129877] EFI services will not be available. 0.135990] smp: Bringing up secondary CPUs ... GTC_CNTFID0 is 0! Assuming 200000000 Hz. Fix Bootloader I/TC: Secondary CPU 1 initializing I/TC: Secondary CPU 1 switching to normal world boot GTC_CNTFID0 is 0! Assuming 200000000 Hz. Fix Bootloader I/TC: Secondary CPU 2 initializing I/TC: Secondary CPU 2 switching to normal world boot GTC_CNTFID0 is 0! Assuming 200000000 Hz. Fix Bootloader I/TC: Secondary CPU 3 initializing I/TC: Secondary CPU 3 switching to normal world boot GTC_CNTFID0 is 0! Assuming 200000000 Hz. Fix Bootloader I/TC: Secondary CPU 4 initializing I/TC: Secondary CPU 4 switching to normal world boot GTC_CNTFID0 is 0! Assuming 200000000 Hz. Fix Bootloader I/TC: Secondary CPU 5 initializing I/TC: Secondary CPU 5 switching to normal world boot GTC_CNTFID0 is 0! Assuming 200000000 Hz. Fix Bootloader I/TC: Secondary CPU 6 initializing I/TC: Secondary CPU 6 switching to normal world boot GTC_CNTFID0 is 0! Assuming 200000000 Hz. Fix Bootloader I/TC: Secondary CPU 7 initializing I/TC: Secondary CPU 7 switching to normal world boot 0.159701] Detected PIPT I-cache on CPU1 0.159787] GICv3: CPU1: found redistributor 1 region 0:0x0000000001920000 0.159807] GICv3: CPU1: using allocated LPI pending table @0x000000093c070000 0.159851] CPU1: Booted secondary processor 0x0000000001 [0x411fd080] 0.177847] Detected PIPT I-cache on CPU2 0.177920] GICv3: CPU2: found redistributor 2 region 0:0x0000000001940000 0.177936] GICv3: CPU2: using allocated LPI pending table @0x000000093c080000 0.177970] CPU2: Booted secondary processor 0x0000000002 [0x411fd080] 0.195871] Detected PIPT I-cache on CPU3 0.195935] GICv3: CPU3: found redistributor 3 region 0:0x0000000001960000 0.195952] GICv3: CPU3: using allocated LPI pending table @0x000000093c090000 0.195983] CPU3: Booted secondary processor 0x0000000003 [0x411fd080] 0.213916] Detected PIPT I-cache on CPU4 0.214030] GICv3: CPU4: found redistributor 100 region 0:0x0000000001980000 0.214048] GICv3: CPU4: using allocated LPI pending table @0x000000093c0a0000 0.214090] CPU4: Booted secondary processor 0x0000000100 [0x411fd080] 0.232073] Detected PIPT I-cache on CPU5 0.232156] GICv3: CPU5: found redistributor 101 region 0:0x00000000019a0000 0.232173] GICv3: CPU5: using allocated LPI pending table @0x000000093c0b0000 0.232204] CPU5: Booted secondary processor 0x0000000101 [0x411fd080] 0.250142] Detected PIPT I-cache on CPU6 0.250220] GICv3: CPU6: found redistributor 102 region 0:0x00000000019c0000 0.250237] GICv3: CPU6: using allocated LPI pending table @0x000000093c0c0000 0.250269] CPU6: Booted secondary processor 0x0000000102 [0x411fd080] 0.268191] Detected PIPT I-cache on CPU7 0.268271] GICv3: CPU7: found redistributor 103 region 0:0x00000000019e0000 0.268287] GICv3: CPU7: using allocated LPI pending table @0x000000093c0d0000 0.268320] CPU7: Booted secondary processor 0x0000000103 [0x411fd080] 0.268387] smp: Brought up 1 node, 8 CPUs 0.494621] SMP: Total of 8 processors activated. 0.500629] CPU features: detected: 32-bit EL0 Support 0.507197] CPU features: detected: CRC32 instructions 0.513825] CPU: All CPU(s) started at EL2 0.519053] alternatives: applying system-wide alternatives 0.527594] devtmpfs: initialized 0.544827] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns 0.557315] futex hash table entries: 2048 (order: 5, 131072 bytes, linear) 0.602686] pinctrl core: initialized pinctrl subsystem 0.609858] DMI not present or invalid. 0.615281] NET: Registered PF_NETLINK/PF_ROUTE protocol family 0.624620] DMA: preallocated 4096 KiB GFP_KERNEL pool for atomic allocations 0.634680] DMA: preallocated 4096 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations 0.645601] DMA: preallocated 4096 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations 0.655932] audit: initializing netlink subsys (disabled) 0.663025] audit: type=2000 audit(0.440:1): state=initialized audit_enabled=0 res=1 0.663329] thermal_sys: Registered thermal governor 'step_wise' 0.672928] thermal_sys: Registered thermal governor 'power_allocator' 0.680743] cpuidle: using governor menu 0.694189] hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. 0.703007] ASID allocator initialised with 65536 entries 0.718650] KASLR disabled due to lack of seed 0.728027] HugeTLB: registered 1.00 GiB page size, pre-allocated 0 pages 0.736725] HugeTLB: 0 KiB vmemmap can be freed for a 1.00 GiB page 0.744735] HugeTLB: registered 32.0 MiB page size, pre-allocated 0 pages 0.753404] HugeTLB: 0 KiB vmemmap can be freed for a 32.0 MiB page 0.761407] HugeTLB: registered 2.00 MiB page size, pre-allocated 0 pages 0.770075] HugeTLB: 0 KiB vmemmap can be freed for a 2.00 MiB page 0.778077] HugeTLB: registered 64.0 KiB page size, pre-allocated 0 pages 0.786745] HugeTLB: 0 KiB vmemmap can be freed for a 64.0 KiB page 0.795869] k3-chipinfo 43000014.chipid: Family:J784S4 rev:SR1.0 JTAGID[0x0bb8002f] Detected 0.807848] iommu: Default domain type: Translated 0.814132] iommu: DMA domain TLB invalidation policy: strict mode 0.822318] SCSI subsystem initialized 0.827352] usbcore: registered new interface driver usbfs 0.834386] usbcore: registered new interface driver hub 0.841188] usbcore: registered new device driver usb 0.847882] pps_core: LinuxPPS API ver. 1 registered 0.854225] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it> 0.865898] PTP clock support registered 0.870996] EDAC MC: Ver: 3.0.0 0.875671] FPGA manager framework 0.880067] Advanced Linux Sound Architecture Driver Initialized. 0.888487] clocksource: Switched to clocksource arch_sys_counter 0.896463] VFS: Disk quotas dquot_6.6.0 0.901505] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) 0.914248] Carveout Heap: Exported 960 MiB at 0x0000000900000000 0.922130] NET: Registered PF_INET protocol family 0.928860] IP idents hash table entries: 262144 (order: 9, 2097152 bytes, linear) 0.945160] tcp_listen_portaddr_hash hash table entries: 16384 (order: 6, 262144 bytes, linear) 0.956500] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) 0.966421] TCP established hash table entries: 262144 (order: 9, 2097152 bytes, linear) 0.977794] TCP bind hash table entries: 65536 (order: 9, 2097152 bytes, linear) 0.988543] TCP: Hash tables configured (established 262144 bind 65536) 0.997178] UDP hash table entries: 16384 (order: 7, 524288 bytes, linear) 1.006384] UDP-Lite hash table entries: 16384 (order: 7, 524288 bytes, linear) 1.016285] NET: Registered PF_UNIX/PF_LOCAL protocol family 1.024029] RPC: Registered named UNIX socket transport module. 1.031608] RPC: Registered udp transport module. 1.037613] RPC: Registered tcp transport module. 1.043617] RPC: Registered tcp NFSv4.1 backchannel transport module. 1.051850] NET: Registered PF_XDP protocol family 1.057983] PCI: CLS 0 bytes, default 64 1.063956] hw perfevents: enabled with armv8_cortex_a72 PMU driver, 7 counters available 1.075581] Initialise system trusted keyrings 1.081451] workingset: timestamp_bits=46 max_order=23 bucket_order=0 1.092382] squashfs: version 4.0 (2009/01/31) Phillip Lougher 1.100257] NFS: Registering the id_resolver key type 1.106744] Key type id_resolver registered 1.112084] Key type id_legacy registered 1.117238] nfs4filelayout_init: NFSv4 File Layout Driver Registering... 1.125800] nfs4flexfilelayout_init: NFSv4 Flexfile Layout Driver Registering... 1.159910] Key type asymmetric registered 1.165146] Asymmetric key parser 'x509' registered 1.171427] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 245) 1.180994] io scheduler mq-deadline registered 1.186783] io scheduler kyber registered 1.194752] pinctrl-single 4301c000.pinctrl: 13 pins, size 52 1.202227] pinctrl-single 4301c038.pinctrl: 11 pins, size 44 1.209727] pinctrl-single 4301c068.pinctrl: 72 pins, size 288 1.217254] pinctrl-single 4301c190.pinctrl: 1 pins, size 4 1.224545] pinctrl-single 11c000.pinctrl: 72 pins, size 288 1.236125] Serial: 8250/16550 driver, 12 ports, IRQ sharing enabled 1.251745] loop: module loaded 1.256787] megasas: 07.719.03.00-rc1 1.263429] tun: Universal TUN/TAP device driver, 1.6 1.270402] VFIO - User Level meta-driver version: 0.3 1.277495] usbcore: registered new interface driver usb-storage 1.285577] i2c_dev: i2c /dev entries driver 1.291712] sdhci: Secure Digital Host Controller Interface driver 1.299617] sdhci: Copyright(c) Pierre Ossman 1.305312] sdhci-pltfm: SDHCI platform and OF driver helper 1.313083] ledtrig-cpu: registered to indicate activity on CPUs 1.320902] SMCCC: SOC_ID: ARCH_SOC_ID not implemented, skipping .... 1.329321] usbcore: registered new interface driver usbhid 1.336443] usbhid: USB HID core driver 1.341985] optee: probing for conduit method. I/TC: Reserved shared memory is enabled I/TC: Dynamic shared memory is enabled I/TC: Normal World virtualization support is disabled I/TC: Asynchronous notifications are disabled 1.347690] optee: revision 4.1 (012cdca4) 1.368238] optee: dynamic shared memory is enabled 1.379999] optee: initialized driver 1.385957] Initializing XFRM netlink socket 1.391457] NET: Registered PF_PACKET protocol family 1.397964] Key type dns_resolver registered 1.403692] registered taskstats version 1 1.408959] Loading compiled-in X.509 certificates 1.423249] ti-sci 44083000.system-controller: ABI: 3.1 (firmware rev 0x0009 '9.2.4--v09.02.04 (Kool Koala)') 1.468218] ti-sci-intr 42200000.interrupt-controller: Interrupt Router 177 domain created 1.478943] ti-sci-intr bus@100000:interrupt-controller@a00000: Interrupt Router 10 domain created 1.490520] ti-sci-intr 310e0000.interrupt-controller: Interrupt Router 283 domain created 1.501388] ti-sci-inta 33d00000.msi-controller: Interrupt Aggregator domain 321 created 1.512342] ti-udma 311a0000.dma-controller: Number of rings: 48 1.520879] ti-udma 311a0000.dma-controller: Channels: 24 (bchan: 0, tchan: 8, rchan: 16) 1.532527] k3-ringacc 2b800000.ringacc: Ring Accelerator probed rings:286, gp-rings[96,20] sci-dev-id:328 1.544874] k3-ringacc 2b800000.ringacc: dma-ring-reset-quirk: disabled 1.553323] k3-ringacc 2b800000.ringacc: RA Proxy rev. 66349100, num_proxies:64 1.564628] k3-ringacc 3c000000.ringacc: Ring Accelerator probed rings:1024, gp-rings[878,128] sci-dev-id:315 1.577318] k3-ringacc 3c000000.ringacc: dma-ring-reset-quirk: disabled 1.585767] k3-ringacc 3c000000.ringacc: RA Proxy rev. 66349100, num_proxies:64 1.595776] printk: console [ttyS2] disabled 1.601284] 2880000.serial: ttyS2 at MMIO 0x2880000 (irq = 212, base_baud = 3000000) is a 8250 1.612362] printk: console [ttyS2] enabled 1.612362] printk: console [ttyS2] enabled 1.622920] printk: bootconsole [ns16550a0] disabled 1.622920] printk: bootconsole [ns16550a0] disabled 1.636651] am65-cpts 310d0000.cpts: CPTS ver 0x4e8a010c, freq:250000000, add_val:3 pps:0 1.647857] mmc0: CQHCI version 5.10 1.651404] omap-mailbox 31f80000.mailbox: omap mailbox rev 0x66fca100 1.660901] omap-mailbox 31f81000.mailbox: omap mailbox rev 0x66fca100 1.669412] omap-mailbox 31f82000.mailbox: omap mailbox rev 0x66fca100 1.677899] omap-mailbox 31f83000.mailbox: omap mailbox rev 0x66fca100 1.686390] omap-mailbox 31f84000.mailbox: omap mailbox rev 0x66fca100 1.693539] mmc0: SDHCI controller on 4f80000.mmc [4f80000.mmc] using ADMA 64-bit 1.694892] omap-mailbox 31f85000.mailbox: omap mailbox rev 0x66fca100 1.712841] ti-udma 285c0000.dma-controller: Channels: 22 (tchan: 11, rchan: 11, gp-rflow: 8) 1.725456] ti-udma 31150000.dma-controller: Channels: 66 (tchan: 33, rchan: 33, gp-rflow: 16) 1.738575] debugfs: Directory 'pd:74' with parent 'pm_genpd' already present! 1.747654] debugfs: Directory 'pd:73' with parent 'pm_genpd' already present! 1.756750] debugfs: Directory 'pd:72' with parent 'pm_genpd' already present! 1.766497] debugfs: Directory 'pd:335' with parent 'pm_genpd' already present! 1.775666] debugfs: Directory 'pd:333' with parent 'pm_genpd' already present! 1.784812] debugfs: Directory 'pd:332' with parent 'pm_genpd' already present! 1.803246] ALSA device list: 1.806971]   No soundcards found. 1.811434] mmc0: Command Queue Engine enabled 1.817017] mmc0: new HS400 MMC card at address 0001 1.823281] Waiting for root device PARTUUID=80f886e6-02... 1.823844] mmcblk0: mmc0:0001 AAM20G 119 GiB 1.837794]  mmcblk0: p1 p2 p3 p4 1.842534] mmcblk0boot0: mmc0:0001 AAM20G 31.5 MiB 1.849733] mmcblk0boot1: mmc0:0001 AAM20G 31.5 MiB 1.856843] mmcblk0rpmb: mmc0:0001 AAM20G 4.00 MiB, chardev (240:0) 1.902596] EXT4-fs (mmcblk0p2): recovery complete 1.909604] EXT4-fs (mmcblk0p2): mounted filesystem with ordered data mode. Quota mode: none. 1.920294] VFS: Mounted root (ext4 filesystem) on device 179:2. 1.929489] devtmpfs: mounted 1.934269] Freeing unused kernel memory: 1984K 1.940094] Run /sbin/init as init process 2.012613] systemd[1]: System time before build time, advancing clock. 2.040287] NET: Registered PF_INET6 protocol family 2.047345] Segment Routing with IPv6 2.051958] In-situ OAM (IOAM) with IPv6 2.072240] systemd[1]: systemd 250.5+ running in system mode (+PAM -AUDIT -SELINUX -APPARMOR +IMA -SMACK +SECCOMP -GCRYPT -GNUTLS -OPENSSL +ACL +BLKID -CURL +ELFUTILS -FIDO2 -IDN2 -IDN -IPTC +KMOD -LIBCRYPTSETUP +LIBFDISK -PCRE2 -PWQUALITY -P11KIT -QRENCODE -BZIP2 -LZ4 -XZ -ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=hybrid) 2.111898] systemd[1]: Detected architecture arm64. Welcome to Arago 2023.10! 2.161594] systemd[1]: Hostname set to <tda4vh-dt2vh>. 2.226000] systemd-sysv-generator[172]: SysV service '/etc/init.d/thermal-zone-init' lacks a native systemd unit file. Automatically generating a unit file for compatibility. Please update package to include a native systemd unit file, in order to make it more safe and robust. 2.339916] systemd[1]: /lib/systemd/system/rsyslog.service:15: PIDFile= references a path below legacy directory /var/run/, updating /var/run/rsyslogd.pid  /run/rsyslogd.pid; please update the unit file accordingly. 2.426625] systemd[1]: Queued start job for default target Multi-User System. 2.487273] systemd[1]: Created slice Slice /system/getty. [  OK  ] Created slice Slice /system/getty. 2.513915] systemd[1]: Created slice Slice /system/modprobe. [  OK  ] Created slice Slice /system/modprobe. 2.537636] systemd[1]: Created slice Slice /system/serial-getty. [  OK  ] Created slice Slice /system/serial-getty. 2.561410] systemd[1]: Created slice User and Session Slice. [  OK  ] Created slice User and Session Slice. 2.584747] systemd[1]: Started Dispatch Password Requests to Console Directory Watch. [  OK  ] Started Dispatch Password ts to Console Directory Watch. 2.612689] systemd[1]: Started Forward Password Requests to Wall Directory Watch. [  OK  ] Started Forward Password Ruests to Wall Directory Watch. 2.640716] systemd[1]: Reached target Path Units. [  OK  ] Reached target Path Units. 2.664565] systemd[1]: Reached target Remote File Systems. [  OK  ] Reached target Remote File Systems. 2.688546] systemd[1]: Reached target Slice Units. [  OK  ] Reached target Slice Units. 2.712567] systemd[1]: Reached target Swaps. [  OK  ] Reached target Swaps. 2.765274] systemd[1]: Listening on RPCbind Server Activation Socket. [  OK  ] Listening on RPCbind Server Activation Socket. 2.796710] systemd[1]: Reached target RPC Port Mapper. [  OK  ] Reached target RPC Port Mapper. 2.821078] systemd[1]: Listening on Syslog Socket. [  OK  ] Listening on Syslog Socket. 2.848739] systemd[1]: Listening on Process Core Dump Socket. [  OK  ] Listening on Process Core Dump Socket. 2.872789] systemd[1]: Listening on initctl Compatibility Named Pipe. [  OK  ] Listening on initctl Compatibility Named Pipe. 2.896978] systemd[1]: Listening on Journal Audit Socket. [  OK  ] Listening on Journal Audit Socket. 2.920840] systemd[1]: Listening on Journal Socket (/dev/log). [  OK  ] Listening on Journal Socket (/dev/log). 2.944936] systemd[1]: Listening on Journal Socket. [  OK  ] Listening on Journal Socket. 2.968914] systemd[1]: Listening on Network Service Netlink Socket. [  OK  ] Listening on Network Service Netlink Socket. 2.992945] systemd[1]: Listening on udev Control Socket. [  OK  ] Listening on udev Control Socket. 3.016783] systemd[1]: Listening on udev Kernel Socket. [  OK  ] Listening on udev Kernel Socket. 3.056883] systemd[1]: Mounting Huge Pages File System... Mounting Huge Pages File System... 3.083872] systemd[1]: Mounting POSIX Message Queue File System... Mounting POSIX Message Queue File System... 3.112023] systemd[1]: Mounting Kernel Debug File System... Mounting Kernel Debug File System... 3.132896] systemd[1]: Kernel Trace File System was skipped because of a failed condition check (ConditionPathExists=/sys/kernel/tracing). 3.153055] systemd[1]: Mounting Temporary Directory /tmp... Mounting Temporary Directory /tmp... 3.176218] systemd[1]: Starting Create List of Static Device Nodes... Starting Create List of Static Device Nodes... 3.208099] systemd[1]: Starting Load Kernel Module configfs... Starting Load Kernel Module configfs... 3.232172] systemd[1]: Starting Load Kernel Module drm... Starting Load Kernel Module drm... 3.252746] systemd[1]: Starting Load Kernel Module fuse... Starting Load Kernel Module fuse... 3.262496] fuse: init (API version 7.37) 3.276627] systemd[1]: Starting RPC Bind... Starting RPC Bind... 3.292840] systemd[1]: File System Check on Root Device was skipped because of a failed condition check (ConditionPathIsReadWrite=!/). 3.313337] systemd[1]: Starting Journal Service... Starting Journal Service... 3.334376] systemd[1]: Starting Load Kernel Modules... Starting Load Kernel Modules... 3.347882] cryptodev: loading out-of-tree module taints kernel. 3.356691] cryptodev: driver 1.12 loaded. 3.360342] systemd[1]: Starting Generate network units from Kernel command line... Starting Generate network ts from Kernel command line... 3.392519] systemd[1]: Starting Remount Root and Kernel File Systems... Starting Remount Root and Kernel File Systems... 3.408850] EXT4-fs (mmcblk0p2): re-mounted. Quota mode: none. 3.424539] systemd[1]: Starting Coldplug All udev Devices... Starting Coldplug All udev Devices... 3.446985] systemd[1]: Started RPC Bind. [  OK  ] Started RPC Bind. 3.461195] systemd[1]: Started Journal Service. [  OK  ] Started Journal Service. [  OK  ] Mounted Huge Pages File System. [  OK  ] Mounted POSIX Message Queue File System. [  OK  ] Mounted Kernel Debug File System. [  OK  ] Mounted Temporary Directory /tmp. [  OK  ] Finished Create List of Static Device Nodes. [  OK  ] Finished Load Kernel Module configfs. [  OK  ] Finished Load Kernel Module drm. [  OK  ] Finished Load Kernel Module fuse. [  OK  ] Finished Load Kernel Modules. [  OK  ] Finished Generate network units from Kernel command line. [  OK  ] Finished Remount Root and Kernel File Systems. Mounting FUSE Control File System... Mounting Kernel Configuration File System... Starting Flush Journal to Persistent Storage... 3.782876] systemd-journald[187]: Received client request to flush runtime journal. Starting Apply Kernel Variables... Starting Create Static Device Nodes in /dev... [  OK  ] Mounted FUSE Control File System. [  OK  ] Mounted Kernel Configuration File System. [  OK  ] Finished Flush Journal to Persistent Storage. [  OK  ] Finished Apply Kernel Variables. [  OK  ] Finished Create Static Device Nodes in /dev. [  OK  ] Reached target Preparation for Local File Systems. Mounting /var/volatile... 3.999568] audit: type=1334 audit(1651167746.984:2): prog-id=5 op=LOAD 4.007893] audit: type=1334 audit(1651167746.992:3): prog-id=6 op=LOAD Starting Rule-based Managefor Device Events and Files... [  OK  ] Finished Coldplug All udev Devices. [  OK  ] Mounted /var/volatile. Starting Load/Save Random Seed... [  OK  ] Reached target Local File Systems. Starting Synchronize Systeime With RTC Timestamp File... Starting Create Volatile Files and Directories... [  OK  ] Started Rule-based Manager for Device Events and Files. [  OK  ] Finished Synchronize System Time With RTC Timestamp File. [  OK  ] Finished Create Volatile Files and [    4.209802] random: crng init done 4.221620] mc: Linux media interface: v0.10 [  OK  ] Finished Load/Save Random Seed.[    4.241730] videodev: Linux video capture interface: v2.00 4.256289] PVR_K:  209: Device: 4e20000000.gpu 4.263829] PVR_K:  209: Read BVNC 36.53.104.796 from HW device registers 4.273599] PVR_K:  209: RGX Device registered BVNC 36.53.104.796 with 1 core in the system [  OK  ] Found device /dev/ttyS2. 4.289542] k3-dsp-rproc 64800000.dsp: assigned reserved memory node vision-apps-c71-dma-memory@b2000000 4.308540] k3-dsp-rproc 64800000.dsp: configured DSP for remoteproc mode 4.323717] [drm] Initialized pvr 23.3.6512818 20170530 for 4e20000000.gpu on minor 0 4.336274] remoteproc remoteproc0: 64800000.dsp is available 4.343795] k3-dsp-rproc 64800000.dsp: register pm nitifiers in remoteproc mode 4.379998] k3-dsp-rproc 65800000.dsp: assigned reserved memory node vision-apps-c71_1-dma-memory@b4000000 4.396311] k3-dsp-rproc 65800000.dsp: configured DSP for remoteproc mode 4.402096] platform 41000000.r5f: R5F core may have been powered on by a different host, programmed state (0) != actual state (1) 4.411293] remoteproc remoteproc1: 65800000.dsp is available 4.416045] remoteproc remoteproc0: powering up 64800000.dsp 4.416075] remoteproc remoteproc0: Booting fw image j784s4-c71_0-fw, size 15470920 4.416612] remoteproc remoteproc0: unsupported resource 65538 4.424564] k3-dsp-rproc 64800000.dsp: booting DSP core using boot addr = 0xb2200000 4.425483] platform 41000000.r5f: configured R5F for IPC-only mode 4.427179] k3-dsp-rproc 65800000.dsp: register pm nitifiers in remoteproc mode 4.428189] platform 41000000.r5f: assigned reserved memory node vision-apps-r5f-dma-memory@a0000000 4.433042] remoteproc remoteproc2: 41000000.r5f is available 4.433139] remoteproc remoteproc2: attaching to 41000000.r5f 4.433742] platform 41000000.r5f: R5F core initialized in IPC-only mode 4.433769] rproc-virtio rproc-virtio.1.auto: assigned reserved memory node vision-apps-r5f-dma-memory@a0000000 4.434905] rproc-virtio rproc-virtio.0.auto: assigned reserved memory node vision-apps-c71-dma-memory@b2000000 4.449854] virtio_rpmsg_bus virtio0: rpmsg host is online 4.450798] k3-dsp-rproc 66800000.dsp: assigned reserved memory node vision-apps-c71_2-dma-memory@b6000000 4.452277] virtio_rpmsg_bus virtio1: rpmsg host is online 4.459924] k3-dsp-rproc 66800000.dsp: configured DSP for remoteproc mode 4.460081] remoteproc remoteproc3: 66800000.dsp is available 4.460180] k3-dsp-rproc 66800000.dsp: register pm nitifiers in remoteproc mode 4.461259] rproc-virtio rproc-virtio.1.auto: registered virtio0 (type 7) 4.461445] virtio_rpmsg_bus virtio0: creating channel rpmsg_chrdev addr 0xd 4.469770] k3-dsp-rproc 67800000.dsp: assigned reserved memory node vision-apps-c71_3-dma-memory@b8000000 4.470659] rproc-virtio rproc-virtio.0.auto: registered virtio1 (type 7) 4.470676] remoteproc remoteproc0: remote processor 64800000.dsp is now up 4.478337] remoteproc remoteproc2: remote processor 41000000.r5f is now attached 4.496968] k3-dsp-rproc 67800000.dsp: configured DSP for remoteproc mode 4.509992] platform 5c00000.r5f: configured R5F for IPC-only mode 4.513566] virtio_rpmsg_bus virtio1: creating channel rpmsg_chrdev addr 0xd 4.515860] remoteproc remoteproc4: 67800000.dsp is available 4.515974] k3-dsp-rproc 67800000.dsp: register pm nitifiers in remoteproc mode 4.525554] platform 5c00000.r5f: assigned reserved memory node vision-apps-r5f-dma-memory@a2000000 4.634472] remoteproc remoteproc1: powering up 65800000.dsp 4.640396] remoteproc remoteproc5: 5c00000.r5f is available 4.649032] remoteproc remoteproc1: Booting fw image j784s4-c71_1-fw, size 15864024 4.653135] remoteproc remoteproc5: attaching to 5c00000.r5f 4.662389] remoteproc remoteproc3: powering up 66800000.dsp 4.671797] platform 5c00000.r5f: R5F core initialized in IPC-only mode 4.679107] remoteproc remoteproc3: Booting fw image j784s4-c71_2-fw, size 15474960 4.686442] rproc-virtio rproc-virtio.2.auto: assigned reserved memory node vision-apps-r5f-dma-memory@a2000000 4.687537] virtio_rpmsg_bus virtio2: rpmsg host is online 4.693475] virtio_rpmsg_bus virtio2: creating channel rpmsg_chrdev addr 0xd 4.700643] remoteproc remoteproc1: unsupported resource 65538 4.705100] rproc-virtio rproc-virtio.2.auto: registered virtio2 (type 7) 4.716825] remoteproc remoteproc4: powering up 67800000.dsp 4.721642] remoteproc remoteproc5: remote processor 5c00000.r5f is now attached 4.721971] platform 5d00000.r5f: configured R5F for remoteproc mode 4.729214] remoteproc remoteproc3: unsupported resource 65538 4.736670] platform 5d00000.r5f: assigned reserved memory node vision-apps-r5f-dma-memory@a4000000 4.744273] remoteproc remoteproc4: Booting fw image j784s4-c71_3-fw, size 15474960 4.756316] remoteproc remoteproc6: 5d00000.r5f is available 4.771128] k3-dsp-rproc 65800000.dsp: booting DSP core using boot addr = 0xb4200000 4.778046] remoteproc remoteproc6: powering up 5d00000.r5f 4.789018] k3-dsp-rproc 66800000.dsp: booting DSP core using boot addr = 0xb6200000 4.789658] remoteproc remoteproc6: Booting fw image j784s4-main-r5f0_1-fw, size 322804 4.798618] rproc-virtio rproc-virtio.3.auto: assigned reserved memory node vision-apps-c71_1-dma-memory@b4000000 4.809283] rproc-virtio rproc-virtio.6.auto: assigned reserved memory node vision-apps-r5f-dma-memory@a4000000 4.814894] remoteproc remoteproc4: unsupported resource 65538 4.829620] virtio_rpmsg_bus virtio4: rpmsg host is online 4.830641] virtio_rpmsg_bus virtio3: rpmsg host is online 4.835597] virtio_rpmsg_bus virtio4: creating channel rpmsg_chrdev addr 0xd 4.841225] rproc-virtio rproc-virtio.6.auto: registered virtio4 (type 7) 4.851132] rproc-virtio rproc-virtio.4.auto: assigned reserved memory node vision-apps-c71_2-dma-memory@b6000000 4.857875] remoteproc remoteproc6: remote processor 5d00000.r5f is now up 4.872589] virtio_rpmsg_bus virtio3: creating channel rpmsg_chrdev addr 0xd 4.881254] k3-dsp-rproc 67800000.dsp: booting DSP core using boot addr = 0xb8200000 4.930367] omap_rng 4e10000.rng: Random Number Generator ver. 241b34c 4.934011] rproc-virtio rproc-virtio.3.auto: registered virtio3 (type 7) Starting Record System Boot/Shutdown in UTMP    5.015363] remoteproc remoteproc1: remote processor 65800000.dsp is now up 5.030978] virtio_rpmsg_bus virtio5: rpmsg host is online 5.033994] virtio_rpmsg_bus virtio5: creating channel rpmsg_chrdev addr 0xd 5.038288] rproc-virtio rproc-virtio.4.auto: registered virtio5 (type 7) 5.055570] remoteproc remoteproc3: remote processor 66800000.dsp is now up 5.064399] rproc-virtio rproc-virtio.5.auto: assigned reserved memory node vision-apps-c71_3-dma-memory@b8000000 5.079201] virtio_rpmsg_bus virtio6: rpmsg host is online 5.086194] rproc-virtio rproc-virtio.5.auto: registered virtio6 (type 7) [  OK  ] Finished Record System Boot/Shutdow[    5.095622] remoteproc remoteproc4: remote processor 67800000.dsp is now up 5.097606] virtio_rpmsg_bus virtio6: creating channel rpmsg_chrdev addr 0xd 5.121788] virtio_rpmsg_bus virtio5: creating channel rpmsg_chrdev addr 0x15 5.131141] virtio_rpmsg_bus virtio6: creating channel rpmsg_chrdev addr 0x15 5.140369] virtio_rpmsg_bus virtio5: creating channel ti.ipc4.ping-pong addr 0xe 5.150113] virtio_rpmsg_bus virtio1: creating channel rpmsg_chrdev addr 0x15 5.159286] virtio_rpmsg_bus virtio3: creating channel rpmsg_chrdev addr 0x15 5.168543] virtio_rpmsg_bus virtio6: creating channel ti.ipc4.ping-pong addr 0xe 5.178048] virtio_rpmsg_bus virtio3: creating channel ti.ipc4.ping-pong addr 0xe 5.187538] virtio_rpmsg_bus virtio1: creating channel ti.ipc4.ping-pong addr 0xe [  OK  ] Reached target System Initializatio[    5.197255] virtio_rpmsg_bus virtio2: creating channel rpmsg_chrdev addr 0x15 5.213051] virtio_rpmsg_bus virtio4: creating channel rpmsg_chrdev addr 0x15 5.222803] virtio_rpmsg_bus virtio0: creating channel rpmsg_chrdev addr 0x15 5.232260] virtio_rpmsg_bus virtio0: creating channel ti.ipc4.ping-pong addr 0xe 5.241820] virtio_rpmsg_bus virtio4: creating channel ti.ipc4.ping-pong addr 0xe [  OK  ] Started Daily rotation of log files. [  OK  ] Started Daily Cleanup of Temporary Directories. [  OK  ] Reached target Timer Units. [  OK  ] Listening on D-Bus System Message Bus Socket. [  OK  ] Listening on dropbear.socket. [  OK  ] Reached target Socket Units. Starting D-Bus System Message Bus... 5.388875] virtio_rpmsg_bus virtio2: creating channel ti.ethfw.notifyservice addr 0x6f 5.399184] virtio_rpmsg_bus virtio2: creating channel ti.ethfw.ethdevice addr 0x6e [  OK  ] Started D-Bus System Message Bus. 5.437029] ti_cpsw_proxy_client virtio2.ti.ethfw.ethdevice.-1.110: 1 Virtual Switch Port(s), 0 Virtual MAC Only Port(s) 5.451065] ti_cpsw_proxy_client virtio2.ti.ethfw.ethdevice.-1.110: Virt Port: 0, Type: Switch Port, Iface: eth0, Num TX: 2, Num RX: 1, Token: 0 [  OK  ] Reached target Basic System. 5.514187] virtio_rpmsg_bus virtio2: creating channel ti.ipc4.ping-pong addr 0xe Starting Print notice about GPLv3 packages... Starting IPv4 Packet Filtering Framework... Starting Expand the rootfsll size of the boot device.... Starting Auto Mount[    5.548929] audit: type=1334 audit(1651167748.536:4): prog-id=7 op=LOAD eMMC Active partition... 5.560109] audit: type=1334 audit(1651167748.544:5): prog-id=8 op=LOAD Starting User Login Management... [  OK  ] Started TEE Supplicant. Starting Telnet Server... [  OK  ] Finished IPv4 Packet Filtering Framework. [FAILED] Failed to start Auto Mount eMMC Active partition. See 'systemctl status select_partition.service' for details. [  OK  ] Finished Telnet Server. [  OK  ] Reached target Preparation for Network. [FAILED] Failed to start Hirain TDA4 remote log service. See 'systemctl status remote-log.service' for details. Starting Network Configuration... [  OK  ] Started User Login Management. 5.766873] cfg80211: Loading compiled-in X.509 certificates for regulatory database 5.783762] cfg80211: Loaded X.509 cert 'sforshee: 00b28ddf47aef9cea7' 5.792502] cfg80211: Loaded X.509 cert 'wens: 61c038651aabdcf94bd0ac7ff06c7248db18c600' 5.802950] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 5.813759] cfg80211: failed to load regulatory.db [  OK  ] Started Network Configuration. Starting Wait for Network to be Configured[    5.851983] ti_cpsw_proxy_client virtio2.ti.ethfw.ethdevice.-1.110: started virt port: 0 on interface eth0 Starting Network Name Resolution... [  OK  ] Finished Wait for Network to be Configured. [  OK  ] Started Hirain Gratuitous ARP Service. [  OK  ] Started Network Name Resolution. [  OK  ] Reached target Network. [  OK  ] Reached target Network is Online. [  OK  ] Reached target Host and Network Name Lookups. [  OK  ] Started Netperf Benchmark Server. [  OK  ] Started NFS status monitor for NFSv2/3 locking.. Starting System Logging Service... Starting Permit User Sessions... [  OK  ] Finished Expand the rootfsfull size of the boot device.. [  OK  ] Finished Permit User Sessions. [  OK  ] Started Getty on tty1. [  OK  ] Started Serial Getty on ttyS2. [  OK  ] Reached target Login Prompts. [  OK  ] Started System Logging Service. *************************************************************** *************************************************************** NOTICE: This file system contains the following GPL-3.0 packages: If you do not wish to distribute GPL-3.0 components please remove the above packages prior to distribution.  This can be done using the opkg remove command.  i.e.: opkg remove <package> Where <package> is the name printed in the list above NOTE: If the package is a dependency of another package you will be notified of the dependent packages.  You should use the --force-removal-of-dependent-packages option to also remove the dependent packages as well *************************************************************** *************************************************************** [  OK  ] Finished Print notice about GPLv3 packages. [  OK  ] Reached target Multi-User System. Starting Record Runlevel Change in UTMP... Starting Rotate log files... [  OK  ] Finished Record Runlevel Change in UTMP. [  OK  ] Finished Rotate log files. __ |   |__|.----.---.-.|__|.-----. |  ||   _|  _  ||  ||     | |___|___|__||__| |___._||__||__|__| Hirain Project tda4vh-dt2vh tda4vh-dt2vh login: tda4vh-dt2vh login: tda4vh-dt2vh login: tda4vh-dt2vh login: tda4vh-dt2vh login: tda4vh-dt2vh login: tda4vh-dt2vh login:

and what documents should we refer to when we want to encrypt the binaries

0 Diwakar Dhyani 1 month ago in reply to hongyao.jin

TI__Mastermind 43620 points

Hi hongyao,

I am hopping you are using correct ATF build, if the device for which ATF is build is wrong may result in wrong sec proxy configuration.

hongyao.jin said:
we want to validate the SBL boot flow and now the system can boot normally, but it seems that ATF has some error messages

Regards
Diwakar

0 hongyao.jin 1 month ago in reply to Diwakar Dhyani

Intellectual 780 points

We have solved the problem of ATF error because there are too many logs in tiboot3.

Now our system has successfully boot with the signature alone, we want to try the signature and encryption next, which documents can we refer to ?

0 Diwakar Dhyani 1 month ago in reply to hongyao.jin

TI__Mastermind 43620 points

Hi hongyao,

Current implement of BINMAN does't have support in the script to encrypt binary. You can use SBL x509CertificateGen.sh script to get the encrypted + signed binary.

Please refer section "2.2 Sign and Encrypt System Image" of this document.

Though it is suggested not to use a encrypted binary in a boot flow , as it will add additional time in the boot process.

Regards
Diwakar

0 hongyao.jin 1 month ago in reply to Diwakar Dhyani

Intellectual 780 points

We seem to have successfully encrypted tiboot3 and combined.appimage in SBL mode, but it is a bit strange. how we can verify that we have implemented encryption ? as we found that the system can boot without encryption, so there is no difference when encrypted

0 Diwakar Dhyani 1 month ago in reply to hongyao.jin

TI__Mastermind 43620 points

hongyao.jin said:
We seem to have successfully encrypted tiboot3 and combined.appimage in SBL mode, but it is a bit strange. how we can verify that we have implemented encryption ? as we found that the system can boot without encryption, so there is no difference when encrypted

From the logs you will not able to see whether encrypted + signed imaged is getting authenticated or just signed image, flow will remain the same.

Using encrypted image will add additional process time in the boot flow nothing else.

If you are

Regards
Diwakar

0 hongyao.jin 1 month ago in reply to Diwakar Dhyani

Intellectual 780 points

We find that in SBL and SPL modes, the check mode of combined.appimage and tisp. bin are different. In SPL, tispl.bin is not signed, while ATF,OPTEE,DM, and u-boot-spl are signed and checked during boot.

In SBL, however, combined.appimage must be signed, and the code only appears to check the signature of combined.appimage.

Why is there such a difference, and what should we do if we want to check the signatures of ATF,OPTEE, U-BOOT-SPL, etc., in SBL

0 Diwakar Dhyani 1 month ago in reply to hongyao.jin

TI__Mastermind 43620 points

hongyao.jin said:
We find that in SBL and SPL modes, the check mode of combined.appimage and tisp. bin are different. In SPL, tispl.bin is not signed, while ATF,OPTEE,DM, and u-boot-spl are signed and checked during boot.

In SBL, however, combined.appimage must be signed, and the code only appears to check the signature of combined.appimage.

Why is there such a difference, and what should we do if we want to check the signatures of ATF,OPTEE, U-BOOT-SPL, etc., in SBL

This is by design in SBL we are furst authenticating the whole combined app image and then SBL will parse the header of the app image to load it at different location.

Currently there is no support for authenticating the image individually in SBL , also there is no plan to add this is near future.

Regards
Diwakar

Processors

Processors forum

TDA4VH-Q1: How to sign an image such as tiboot3 , tispl(atf optee uboot-SPL), uboot, fitimage(linux)