134 lines
6.5 KiB
Bash
Executable File
134 lines
6.5 KiB
Bash
Executable File
#!/bin/bash
|
|
set -e
|
|
BL33_BIN_SIZE="1572864"
|
|
if [[ $1 =~ "sc2" ]];
|
|
then
|
|
PROJECT=`cat ./bl33/v2019/board/amlogic/defconfigs/$1_defconfig | grep 'CONFIG_CHIPSET_NAME' | awk -F '=' '{print $2}' `
|
|
PRJ=`echo $PROJECT | tr -d "\""`
|
|
echo $PRJ
|
|
export PRJ
|
|
fi;
|
|
|
|
if [[ $1 == "ta_seg_id" ]]; ## generate dfu&device keys
|
|
then
|
|
mkdir -p ./fip/sc2/nocs/efuse/input
|
|
mkdir -p ./fip/sc2/nocs/efuse/output
|
|
./fip/sc2/bin/efuse-gen.sh --ta-segid $2 -o ./fip/sc2/nocs/efuse/input/ta-segid.efuse
|
|
|
|
elif [[ $2 == "generate_keys" ]]; ## generate dfu&device keys
|
|
then
|
|
echo "Start to build Uboot";
|
|
if [ ! -f "dv_scs_keys/root/rsa/$PRJ/roothash/hash-device-rootcert.bin" ];
|
|
then echo "generate dfu keys";
|
|
./fip/sc2/generate-device-keys/gen_all_device_key.sh --key-dir ./dv_scs_keys --rsa-size 4096 --project $PRJ --rootkey-index 0 --template-dir ./soc/templates/sc2/ --out-dir ./bl33/v2019/board/amlogic/$1/device-keys
|
|
./fip/sc2/nocs/createtemplate.sh $1
|
|
./fip/sc2/generate-device-keys/bin/dvuk_gen.sh fip/sc2/nocs/dvuk
|
|
mkdir -p ./fip/sc2/nocs/efuse/input
|
|
mkdir -p ./fip/sc2/nocs/efuse/output
|
|
./fip/sc2/bin/efuse-gen.sh --dfu-device-roothash ./dv_scs_keys/root/rsa/$PRJ/roothash/hash-device-rootcert.bin -o ./fip/sc2/nocs/efuse/input/dfu.efuse
|
|
./fip/sc2/bin/efuse-gen.sh --dvgk ./dv_scs_keys/root/dvgk/$PRJ/dvgk.bin -o ./fip/sc2/nocs/efuse/input/dvgk.efuse
|
|
./fip/sc2/bin/efuse-gen.sh --dvuk ./fip/sc2/nocs/dvuk.bin -o ./fip/sc2/nocs/efuse/input/dvuk.efuse
|
|
else
|
|
./fip/sc2/nocs/createtemplate.sh $1
|
|
echo "no need generate dfu keys";
|
|
fi;
|
|
## generate device keys
|
|
cp ./dv_scs_keys/root/dvgk/$PRJ/dvgk.bin ./fip/sc2/nocs
|
|
cd ./fip/sc2/nocs
|
|
|
|
if [ ! -f "./stage-3a-stbm-generate-keysets/output/data-stbm/keydir/boot-blobs/rsa/$PRJ/rootrsa-0/key/level-2-rsa-pub.pem" ];
|
|
then echo "generate device key";
|
|
./run-generate-key.sh
|
|
else
|
|
echo "no need geneate device key";
|
|
fi;
|
|
elif [[ $2 == "production" ]];
|
|
then
|
|
if [ ! -s "./fip/sc2/nocs/stage-4-nagra-signing/output/refImgSigned.bin" ];then
|
|
echo "!!!PLEASE PUT NAGRA SIGNED FILE to ./fip/sc2/nocs/stage-4-nagra-signing/output/refImgSigned.bin";
|
|
exit;
|
|
fi;
|
|
|
|
if [ ! -L "./fip/sc2/nocs/stage-5-stbm-process-signed/input/refImgSigned.bin" ]; then
|
|
echo "error ./fip/sc2/nocs/stage-5-stbm-process-signed/input/refImgSigned.bin shall be symbolic link to ./fip/sc2/nocs/stage-4-nagra-signing/output/refImgSigned.bin"
|
|
exit;
|
|
fi
|
|
|
|
if ! cmp -s ./fip/sc2/nocs/stage-4-nagra-signing/output/refImgSigned.bin ./fip/sc2/nocs/stage-5-stbm-process-signed/input/refImgSigned.bin; then
|
|
echo "!!! ./fip/sc2/nocs/stage-4-nagra-signing/output/refImgSigned.bin AND ./fip/sc2/nocs/stage-5-stbm-process-signed/input/refImgSigned.bin ARE DIFFERENT. PLEASE CHECK NAGRA SIGNED FILE";
|
|
exit;
|
|
fi
|
|
echo "update device vendor segid"
|
|
c1=$(xxd -ps -s 7664 -c4 -g4 -l1 fip/sc2/nocs/stage-4-nagra-signing/output/refImgSigned.bin)
|
|
c2=$(xxd -ps -s 7665 -c4 -g4 -l1 fip/sc2/nocs/stage-4-nagra-signing/output/refImgSigned.bin)
|
|
c3=$(xxd -ps -s 7666 -c4 -g4 -l1 fip/sc2/nocs/stage-4-nagra-signing/output/refImgSigned.bin)
|
|
c4=$(xxd -ps -s 7667 -c4 -g4 -l1 fip/sc2/nocs/stage-4-nagra-signing/output/refImgSigned.bin)
|
|
|
|
vendsg="DEVICE_VENDOR_SEGID=0x$c4$c3$c2$c1"
|
|
scssg="DEVICE_SCS_SEGID=0x$c4$c3$c2$c1"
|
|
echo $vendsg
|
|
echo $scssg
|
|
sed -i 's/DEVICE_VENDOR_SEGID.*/'$vendsg'/' bl33/v2019/board/amlogic/$1/fw_arb.cfg
|
|
sed -i 's/DEVICE_SCS_SEGID.*/'$scssg'/' bl33/v2019/board/amlogic/$1/fw_arb.cfg
|
|
mkdir -p ./fip/sc2/nocs/efuse/input/
|
|
mkdir -p ./fip/sc2/nocs/efuse/output/
|
|
./fip/sc2/bin/efuse-gen.sh --device-vendor-segid 0x$c4$c3$c2$c1 -o ./fip/sc2/nocs/efuse/input/device-vendor.efuse
|
|
./fip/sc2/nocs/createtemplate.sh $1
|
|
cd ./fip/sc2/nocs
|
|
./package-uboot.sh usb
|
|
cd -
|
|
./fip/sc2/bin/device-vendor-scs-signing.sh --key-dir bl33/v2019/board/amlogic/$1/device-keys/ --project $PRJ --input-dir ./fip/sc2/nocs/usb/ --rootkey-index 0 --chipset-variant nocs-prod --arb-config ./bl33/v2019/board/amlogic/$1/fw_arb.cfg --out-dir ./fip/sc2/nocs/usb/
|
|
cd ./fip/sc2/nocs
|
|
./run-post.sh
|
|
./package-uboot.sh sto
|
|
./installkeys.sh $1 stage-3a-stbm-generate-keysets/
|
|
if [[ $3 =~ "nasc_nagra_tier_1" ]];
|
|
then
|
|
cp stage-4-nagra-signing/output/bl33-payload.bin sto/bl33-payload.bin
|
|
bl33_size=`stat -c %s sto/bl33-payload.bin`
|
|
if [[ ${bl33_size} -gt ${BL33_BIN_SIZE} ]]; then
|
|
echo size of bl33-payload.bin is ${bl33_size}, large than ${BL33_BIN_SIZE}
|
|
exit -1
|
|
fi
|
|
|
|
dd if=/dev/zero of=sto/tmp.bin bs=${BL33_BIN_SIZE} count=1 &> /dev/null
|
|
dd if=sto/bl33-payload.bin of=sto/tmp.bin conv=notrunc &> /dev/null
|
|
mv sto/tmp.bin sto/bl33-payload.bin
|
|
fi;
|
|
cd -
|
|
./fip/sc2/bin/device-vendor-scs-signing.sh --key-dir bl33/v2019/board/amlogic/$1/device-keys/ --project $PRJ --input-dir ./fip/sc2/nocs/sto/ --rootkey-index 0 --chipset-variant nocs-prod --arb-config ./bl33/v2019/board/amlogic/$1/fw_arb.cfg --out-dir ./fip/sc2/nocs/sto/
|
|
cd -
|
|
cp stage-5-stbm-process-signed/output/bb1st.bin sto/bb1st.sto.nocs-prod.bin.device.signed
|
|
cp stage-5-stbm-process-signed/output/blob-bl2e.bin sto/blob-bl2e.sto.nocs-prod.bin.device.signed
|
|
cd -
|
|
cp ./fip/_tmp/blob-ddr-fip.bin.signed ./fip/sc2/nocs/sto/
|
|
source ./fip/sc2/build.sh
|
|
export DDR_FIP_NAME=blob-ddr-fip.bin
|
|
mk_uboot ./fip/sc2/nocs/sto/ ./fip/sc2/nocs/sto/ .device.signed .sto .nocs-prod
|
|
cd -
|
|
#merge efuse files.
|
|
if [ -f "efuse/input/*.bin" ];
|
|
then echo "generate all.bin based on input .bin and .dec";
|
|
./efuse/combine-efuse output/all.bin ./efuse/input/*.bin ./efuse/input/*.dec
|
|
else
|
|
echo "generate all.bin based on input .dec";
|
|
./efuse/combine-efuse ./efuse/output/all.bin ./efuse/input/*.dec
|
|
../aml_encrypt_sc2 --efsproc --input ./efuse/output/all.bin --output ./efuse/output/all.efuse --option=debug
|
|
fi;
|
|
cd -
|
|
rm -f ./build/u-boot.bin.sd.*
|
|
cp fip/sc2/nocs/usb/u-boot.bin.usb.* ./build
|
|
cp fip/sc2/nocs/sto/u-boot.bin.device.* ./build/u-boot.bin.device.signed
|
|
echo "please use ./build/u-boot.bin.usb.device.signed for dfu mode";
|
|
echo "please use ./build/u-boot.bin.device.signed for normal mode uboot";
|
|
echo "please program ./fip/sc2/nocs/efuse/out/all.efuse into chipset OTP space";
|
|
else #//build usb and sto mode u-boot
|
|
sed -i 's/\/\/#define\ CONFIG_AML_SIGNED_UBOOT.*/'#define\ CONFIG_AML_SIGNED_UBOOT\ \ \ 1'/' bl33/v2019/board/amlogic/configs/$1.h
|
|
sed -i 's/#define\ CONFIG_AML_SIGNED_UBOOT /\/\/#define\ CONFIG_AML_SIGNED_UBOOT /' bl33/v2019/board/amlogic/configs/$1.h
|
|
./mk $1 --chip-variant nocs-prod --former-sign $2
|
|
cd ./fip/sc2/nocs
|
|
./run-pre.sh
|
|
cd -
|
|
echo "NOW PLEASE RUN <./fip/sc2/nocs/run-all.sh sc2_ahxxx production> to generate complete U-boot.bin under fip/sc2/nocs/sto";
|
|
fi;
|