Skip to content

Conversation

@lyakh
Copy link
Collaborator

@lyakh lyakh commented Sep 24, 2024

The user can configure west to pass additional arguments to rimage for signing, we need to use them when signing LLEXT modules too.

The user can configure west to pass additional arguments to rimage
for signing, we need to use them when signing LLEXT modules too.

Signed-off-by: Guennadi Liakhovetski <guennadi.liakhovetski@linux.intel.com>
Copy link
Member

@abonislawski abonislawski left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It should work but will duplicate -k parameter

Before:
rimage -o drc.llext.ri -e -c rimage_config.toml -k otc_private_key_3k.pem -l -r drc.llext
After:
rimage -o drc.llext.ri -e -c rimage_config.toml -k otc_private_key_3k.pem -l -r -k otc_private_key_3k.pem -f 2.10.99 -b 1 drc.llext

@lyakh
Copy link
Collaborator Author

lyakh commented Sep 25, 2024

It should work but will duplicate -k parameter

Before: rimage -o drc.llext.ri -e -c rimage_config.toml -k otc_private_key_3k.pem -l -r drc.llext After: rimage -o drc.llext.ri -e -c rimage_config.toml -k otc_private_key_3k.pem -l -r -k otc_private_key_3k.pem -f 2.10.99 -b 1 drc.llext

@abonislawski yes, a more comprehensive solution could filter parameters to avoid duplicates. If that's more important than a fast solution, we can try adding that. Otherwise you can also just remove the key from your local configuration. But even as is it shouldn't cause issues?

@abonislawski
Copy link
Member

abonislawski commented Sep 25, 2024

No issues, it doesnt matter for rimage.
I think it will be enough to just remove "-k", str(signing_key) from sign_cmd since -k will be included anyway with this commit.

@lgirdwood
Copy link
Member

@lyakh @abonislawski lets go with this now, clean up the cmd line to avoid duplicates is less urgent today, also scripts that call this can be fixed to do the right thing too.

@lgirdwood lgirdwood merged commit 58ec860 into thesofproject:main Sep 26, 2024
@lyakh lyakh deleted the llext-sign branch September 26, 2024 16:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants