blob: eddb0c6b318d60dbdbafc89a3bb77256a9f71803 [file] [log] [blame]
Simon Glassb45b1632020-09-10 20:21:13 -06001menu "Boot options"
2
3menu "Boot images"
4
5config ANDROID_BOOT_IMAGE
6 bool "Enable support for Android Boot Images"
7 default y if FASTBOOT
8 help
9 This enables support for booting images which use the Android
10 image format header.
11
12config FIT
13 bool "Support Flattened Image Tree"
Alexandru Gagniuc650b7862021-09-02 19:54:21 -050014 select HASH
Simon Glassb45b1632020-09-10 20:21:13 -060015 select MD5
16 select SHA1
Alexandru Gagniuc8d310ef2021-09-02 19:54:17 -050017 imply SHA256
Simon Glassb45b1632020-09-10 20:21:13 -060018 help
19 This option allows you to boot the new uImage structure,
20 Flattened Image Tree. FIT is formally a FDT, which can include
21 images of various types (kernel, FDT blob, ramdisk, etc.)
22 in a single blob. To boot this new uImage structure,
23 pass the address of the blob to the "bootm" command.
24 FIT is very flexible, supporting compression, multiple images,
25 multiple configurations, verification through hashing and also
26 verified boot (secure boot using RSA).
27
Simon Glass65831d92021-12-18 11:27:50 -070028config TIMESTAMP
29 bool "Show image date and time when displaying image information"
30 default y if CMD_DATE
31 help
32 When CONFIG_TIMESTAMP is selected, the timestamp (date and time) of
33 an image is printed by image commands like bootm or iminfo. This
34 is shown as 'Timestamp: xxx' and 'Created: xxx'. If this option is
35 enabled, then U-Boot requires FITs to have a timestamp. If a FIT is
36 loaded that does not, the message 'Wrong FIT format: no timestamp'
37 is shown.
38
Simon Glassb45b1632020-09-10 20:21:13 -060039if FIT
40
41config FIT_EXTERNAL_OFFSET
42 hex "FIT external data offset"
43 default 0x0
44 help
45 This specifies a data offset in fit image.
46 The offset is from data payload offset to the beginning of
47 fit image header. When specifies a offset, specific data
48 could be put in the hole between data payload and fit image
49 header, such as CSF data on i.MX platform.
50
Simon Glass244705b2021-02-15 17:08:10 -070051config FIT_FULL_CHECK
52 bool "Do a full check of the FIT before using it"
53 default y
54 help
55 Enable this do a full check of the FIT to make sure it is valid. This
56 helps to protect against carefully crafted FITs which take advantage
57 of bugs or omissions in the code. This includes a bad structure,
58 multiple root nodes and the like.
59
Simon Glassb45b1632020-09-10 20:21:13 -060060config FIT_SIGNATURE
61 bool "Enable signature verification of FIT uImages"
62 depends on DM
63 select HASH
Alexandru Gagniuc1f2e2312021-07-29 11:47:18 -050064 imply RSA
65 imply RSA_VERIFY
Simon Glassb45b1632020-09-10 20:21:13 -060066 select IMAGE_SIGN_INFO
Simon Glass244705b2021-02-15 17:08:10 -070067 select FIT_FULL_CHECK
Simon Glassb45b1632020-09-10 20:21:13 -060068 help
69 This option enables signature verification of FIT uImages,
70 using a hash signed and verified using RSA. If
71 CONFIG_SHA_PROG_HW_ACCEL is defined, i.e support for progressive
72 hashing is available using hardware, then the RSA library will use
73 it. See doc/uImage.FIT/signature.txt for more details.
74
75 WARNING: When relying on signed FIT images with a required signature
76 check the legacy image format is disabled by default, so that
77 unsigned images cannot be loaded. If a board needs the legacy image
78 format support in this case, enable it using
79 CONFIG_LEGACY_IMAGE_FORMAT.
80
81config FIT_SIGNATURE_MAX_SIZE
82 hex "Max size of signed FIT structures"
83 depends on FIT_SIGNATURE
84 default 0x10000000
85 help
86 This option sets a max size in bytes for verified FIT uImages.
87 A sane value of 256MB protects corrupted DTB structures from overlapping
88 device memory. Assure this size does not extend past expected storage
89 space.
90
Simon Glass66b00c82021-07-14 17:05:31 -050091config FIT_RSASSA_PSS
Simon Glassb45b1632020-09-10 20:21:13 -060092 bool "Support rsassa-pss signature scheme of FIT image contents"
93 depends on FIT_SIGNATURE
Simon Glassb45b1632020-09-10 20:21:13 -060094 help
95 Enable this to support the pss padding algorithm as described
96 in the rfc8017 (https://tools.ietf.org/html/rfc8017).
97
98config FIT_CIPHER
99 bool "Enable ciphering data in a FIT uImages"
100 depends on DM
101 select AES
102 help
103 Enable the feature of data ciphering/unciphering in the tool mkimage
104 and in the u-boot support of the FIT image.
105
106config FIT_VERBOSE
107 bool "Show verbose messages when FIT images fail"
108 help
109 Generally a system will have valid FIT images so debug messages
110 are a waste of code space. If you are debugging your images then
111 you can enable this option to get more verbose information about
112 failures.
113
114config FIT_BEST_MATCH
115 bool "Select the best match for the kernel device tree"
116 help
117 When no configuration is explicitly selected, default to the
118 one whose fdt's compatibility field best matches that of
119 U-Boot itself. A match is considered "best" if it matches the
120 most specific compatibility entry of U-Boot's fdt's root node.
121 The order of entries in the configuration's fdt is ignored.
122
123config FIT_IMAGE_POST_PROCESS
124 bool "Enable post-processing of FIT artifacts after loading by U-Boot"
Siew Chin Lim2492d592021-03-01 20:04:11 +0800125 depends on TI_SECURE_DEVICE || SOCFPGA_SECURE_VAB_AUTH
Andrew Davis4ba9e6e2022-05-04 15:52:28 -0500126 default y if TI_SECURE_DEVICE
Simon Glassb45b1632020-09-10 20:21:13 -0600127 help
128 Allows doing any sort of manipulation to blobs after they got extracted
129 from FIT images like stripping off headers or modifying the size of the
130 blob, verification, authentication, decryption etc. in a platform or
131 board specific way. In order to use this feature a platform or board-
132 specific implementation of board_fit_image_post_process() must be
133 provided. Also, anything done during this post-processing step would
134 need to be comprehended in how the images were prepared before being
135 injected into the FIT creation (i.e. the blobs would have been pre-
136 processed before being added to the FIT image).
137
Ravik Hasija11dac412021-01-27 14:01:48 -0800138config FIT_PRINT
139 bool "Support FIT printing"
140 default y
141 help
142 Support printing the content of the fitImage in a verbose manner.
143
Simon Glassb45b1632020-09-10 20:21:13 -0600144if SPL
145
146config SPL_FIT
147 bool "Support Flattened Image Tree within SPL"
148 depends on SPL
Alexandru Gagniuc650b7862021-09-02 19:54:21 -0500149 select SPL_HASH
Simon Glassb45b1632020-09-10 20:21:13 -0600150 select SPL_OF_LIBFDT
151
152config SPL_FIT_PRINT
153 bool "Support FIT printing within SPL"
154 depends on SPL_FIT
155 help
156 Support printing the content of the fitImage in a verbose manner in SPL.
157
Simon Glass244705b2021-02-15 17:08:10 -0700158config SPL_FIT_FULL_CHECK
159 bool "Do a full check of the FIT before using it"
160 help
161 Enable this do a full check of the FIT to make sure it is valid. This
162 helps to protect against carefully crafted FITs which take advantage
163 of bugs or omissions in the code. This includes a bad structure,
164 multiple root nodes and the like.
165
166
Simon Glassb45b1632020-09-10 20:21:13 -0600167config SPL_FIT_SIGNATURE
168 bool "Enable signature verification of FIT firmware within SPL"
169 depends on SPL_DM
Klaus Heinrich Kiwiae5073f2021-02-09 15:41:54 -0300170 depends on SPL_LOAD_FIT || SPL_LOAD_FIT_FULL
Klaus Heinrich Kiwic9796e62021-02-09 15:41:53 -0300171 select FIT_SIGNATURE
Simon Glassb45b1632020-09-10 20:21:13 -0600172 select SPL_FIT
Simon Glassa8437ce2021-07-10 21:14:25 -0600173 select SPL_CRYPTO
Alexandru Gagniuc97464ff2021-09-02 19:54:19 -0500174 select SPL_HASH
Alexandru Gagniuc1f2e2312021-07-29 11:47:18 -0500175 imply SPL_RSA
176 imply SPL_RSA_VERIFY
Simon Glassb45b1632020-09-10 20:21:13 -0600177 select SPL_IMAGE_SIGN_INFO
Simon Glass244705b2021-02-15 17:08:10 -0700178 select SPL_FIT_FULL_CHECK
Simon Glassb45b1632020-09-10 20:21:13 -0600179
Simon Glassc0cabbc2021-09-25 19:43:39 -0600180config SPL_FIT_SIGNATURE_MAX_SIZE
181 hex "Max size of signed FIT structures in SPL"
182 depends on SPL_FIT_SIGNATURE
183 default 0x10000000
184 help
185 This option sets a max size in bytes for verified FIT uImages.
186 A sane value of 256MB protects corrupted DTB structures from overlapping
187 device memory. Assure this size does not extend past expected storage
188 space.
189
Philippe Reynes47f3eb22021-10-15 11:35:03 +0200190config SPL_FIT_RSASSA_PSS
191 bool "Support rsassa-pss signature scheme of FIT image contents in SPL"
192 depends on SPL_FIT_SIGNATURE
193 help
194 Enable this to support the pss padding algorithm as described
195 in the rfc8017 (https://tools.ietf.org/html/rfc8017) in SPL.
196
Simon Glassb45b1632020-09-10 20:21:13 -0600197config SPL_LOAD_FIT
198 bool "Enable SPL loading U-Boot as a FIT (basic fitImage features)"
199 select SPL_FIT
200 help
201 Normally with the SPL framework a legacy image is generated as part
202 of the build. This contains U-Boot along with information as to
203 where it should be loaded. This option instead enables generation
204 of a FIT (Flat Image Tree) which provides more flexibility. In
205 particular it can handle selecting from multiple device tree
206 and passing the correct one to U-Boot.
207
Alexandru Gagniuc064c9c22021-03-29 12:05:15 -0500208 This path has the following limitations:
209
Bin Meng91cdcb92021-05-10 20:23:29 +0800210 1. "loadables" images, other than FDTs, which do not have a "load"
Alexandru Gagniuc064c9c22021-03-29 12:05:15 -0500211 property will not be loaded. This limitation also applies to FPGA
212 images with the correct "compatible" string.
Oleksandr Suvorov17773572022-07-22 17:16:13 +0300213 2. For FPGA images, the supported "compatible" list is in the
214 doc/uImage.FIT/source_file_format.txt.
Alexandru Gagniuc064c9c22021-03-29 12:05:15 -0500215 3. FDTs are only loaded for images with an "os" property of "u-boot".
216 "linux" images are also supported with Falcon boot mode.
217
Simon Glassb45b1632020-09-10 20:21:13 -0600218config SPL_LOAD_FIT_ADDRESS
219 hex "load address of fit image"
220 depends on SPL_LOAD_FIT
221 default 0x0
222 help
223 Specify the load address of the fit image that will be loaded
224 by SPL.
225
226config SPL_LOAD_FIT_APPLY_OVERLAY
227 bool "Enable SPL applying DT overlays from FIT"
228 depends on SPL_LOAD_FIT
229 select OF_LIBFDT_OVERLAY
230 help
231 The device tree is loaded from the FIT image. Allow the SPL is to
232 also load device-tree overlays from the FIT image an apply them
233 over the device tree.
234
235config SPL_LOAD_FIT_APPLY_OVERLAY_BUF_SZ
236 depends on SPL_LOAD_FIT_APPLY_OVERLAY
237 default 0x10000
238 hex "size of temporary buffer used to load the overlays"
239 help
240 The size of the area where the overlays will be loaded and
241 uncompress. Must be at least as large as biggest overlay
242 (uncompressed)
243
244config SPL_LOAD_FIT_FULL
245 bool "Enable SPL loading U-Boot as a FIT (full fitImage features)"
246 select SPL_FIT
247 help
248 Normally with the SPL framework a legacy image is generated as part
249 of the build. This contains U-Boot along with information as to
250 where it should be loaded. This option instead enables generation
251 of a FIT (Flat Image Tree) which provides more flexibility. In
252 particular it can handle selecting from multiple device tree
253 and passing the correct one to U-Boot.
254
255config SPL_FIT_IMAGE_POST_PROCESS
256 bool "Enable post-processing of FIT artifacts after loading by the SPL"
257 depends on SPL_LOAD_FIT
Andrew Davis4ba9e6e2022-05-04 15:52:28 -0500258 default y if TI_SECURE_DEVICE
Simon Glassb45b1632020-09-10 20:21:13 -0600259 help
260 Allows doing any sort of manipulation to blobs after they got extracted
261 from the U-Boot FIT image like stripping off headers or modifying the
262 size of the blob, verification, authentication, decryption etc. in a
263 platform or board specific way. In order to use this feature a platform
264 or board-specific implementation of board_fit_image_post_process() must
265 be provided. Also, anything done during this post-processing step would
266 need to be comprehended in how the images were prepared before being
267 injected into the FIT creation (i.e. the blobs would have been pre-
268 processed before being added to the FIT image).
269
270config SPL_FIT_SOURCE
271 string ".its source file for U-Boot FIT image"
272 depends on SPL_FIT
273 help
274 Specifies a (platform specific) FIT source file to generate the
275 U-Boot FIT image. This could specify further image to load and/or
276 execute.
277
278config USE_SPL_FIT_GENERATOR
279 bool "Use a script to generate the .its script"
Bin Meng442d4462021-05-10 20:23:41 +0800280 default y if SPL_FIT && (!ARCH_SUNXI && !RISCV)
Simon Glassb45b1632020-09-10 20:21:13 -0600281
282config SPL_FIT_GENERATOR
283 string ".its file generator script for U-Boot FIT image"
284 depends on USE_SPL_FIT_GENERATOR
285 default "arch/arm/mach-rockchip/make_fit_atf.py" if SPL_LOAD_FIT && ARCH_ROCKCHIP
286 default "arch/arm/mach-zynqmp/mkimage_fit_atf.sh" if SPL_LOAD_FIT && ARCH_ZYNQMP
Simon Glassb45b1632020-09-10 20:21:13 -0600287 help
288 Specifies a (platform specific) script file to generate the FIT
289 source file used to build the U-Boot FIT image file. This gets
290 passed a list of supported device tree file stub names to
291 include in the generated image.
292
293endif # SPL
294
295endif # FIT
296
Simon Glass08ad13e2022-04-24 23:31:06 -0600297config BOOTSTD
298 bool "Standard boot support"
299 default y
300 depends on DM && OF_CONTROL && BLK
301 help
302 U-Boot supports a standard way of locating something to boot,
303 typically an Operating System such as Linux, provided by a distro such
304 as Arch Linux or Debian. Enable this to support iterating through
305 available bootdevs and using bootmeths to find bootflows suitable for
306 booting.
307
308 Standard boot is not a standard way of booting, just a framework
309 within U-Boot for supporting all the different ways that exist.
310
311 Terminology:
312
313 - bootdev - a device which can hold a distro (e.g. MMC)
314 - bootmeth - a method to scan a bootdev to find bootflows (owned by
315 U-Boot)
316 - bootflow - a description of how to boot (owned by the distro)
317
318config BOOTSTD_FULL
319 bool "Enhanced features for standard boot"
320 default y if SANDBOX
321 help
322 This enables various useful features for standard boot, which are not
323 essential for operation:
324
325 - bootdev, bootmeth commands
326 - extra features in the bootflow command
327 - support for selecting the ordering of bootmeths ("bootmeth order")
328 - support for selecting the ordering of bootdevs using the devicetree
329 as well as the "boot_targets" environment variable
330
Simon Glassad8ec372022-04-24 23:31:13 -0600331if BOOTSTD
332
Simon Glassbe661cb2022-04-24 23:31:27 -0600333config BOOTSTD_BOOTCOMMAND
334 bool "Use bootstd to boot"
335 default y if !DISTRO_DEFAULTS
336 help
337 Enable this to select a default boot-command suitable for booting
338 with standard boot. This can be overridden by the board if needed,
339 but the default command should be enough for most boards which use
340 standard boot.
341
342 For now this is only selected if distro boot is NOT used, since
343 standard boot does not support all of the features of distro boot
344 yet.
345
Simon Glassad8ec372022-04-24 23:31:13 -0600346config BOOTMETH_DISTRO
347 bool "Bootdev support for distro boot"
348 depends on CMD_PXE
349 default y
350 help
351 Enables support for distro boot using bootdevs. This makes the
352 bootdevs look for a 'extlinux/extlinux.conf' on each filesystem
353 they scan.
354
355 This provides a way to try out standard boot on an existing boot flow.
356
Simon Glass83144612022-04-24 23:31:16 -0600357config BOOTMETH_DISTRO_PXE
358 bool "Bootdev support for distro boot over network"
359 depends on CMD_PXE && CMD_NET && DM_ETH
360 default y
361 help
362 Enables support for distro boot using bootdevs. This makes the
363 bootdevs look for a 'extlinux/extlinux.conf' on the tftp server.
364
365 This provides a way to try out standard boot on an existing boot flow.
366
Simon Glass66f62552022-04-24 23:31:17 -0600367config BOOTMETH_EFILOADER
368 bool "Bootdev support for EFI boot"
369 depends on CMD_BOOTEFI
370 default y
371 help
372 Enables support for EFI boot using bootdevs. This makes the
373 bootdevs look for a 'boot<arch>.efi' on each filesystem
374 they scan. The resulting file is booted after enabling U-Boot's
375 EFI loader support.
376
377 The <arch> depends on the architecture of the board:
378
379 aa64 - aarch64 (ARM 64-bit)
380 arm - ARM 32-bit
381 ia32 - x86 32-bit
382 x64 - x86 64-bit
383 riscv32 - RISC-V 32-bit
384 riscv64 - RISC-V 64-bit
385
386 This provides a way to try out standard boot on an existing boot flow.
387
Simon Glass423994e2022-04-24 23:31:20 -0600388config BOOTMETH_SANDBOX
389 def_bool y
390 depends on SANDBOX
391 help
392 This is a sandbox bootmeth driver used for testing. It always returns
393 -ENOTSUPP when attempting to boot.
394
Simon Glass7e03e742022-04-24 23:31:22 -0600395config BOOTMETH_SCRIPT
396 bool "Bootdev support for U-Boot scripts"
397 default y if BOOTSTD_FULL
398 help
399 Enables support for booting a distro via a U-Boot script. This makes
400 the bootdevs look for a 'boot/boot.scr' file which can be used to
401 boot the distro.
402
403 This provides a way to try out standard boot on an existing boot flow.
404 It is not enabled by default to save space.
405
Simon Glassad8ec372022-04-24 23:31:13 -0600406endif
407
Simon Glassb45b1632020-09-10 20:21:13 -0600408config LEGACY_IMAGE_FORMAT
409 bool "Enable support for the legacy image format"
Andrew Davis98a22d02022-05-04 15:52:27 -0500410 default y if !FIT_SIGNATURE && !TI_SECURE_DEVICE
Simon Glassb45b1632020-09-10 20:21:13 -0600411 help
412 This option enables the legacy image format. It is enabled by
413 default for backward compatibility, unless FIT_SIGNATURE is
414 set where it is disabled so that unsigned images cannot be
415 loaded. If a board needs the legacy image format support in this
416 case, enable it here.
417
Simon Glassf11d6132020-09-10 20:21:19 -0600418config SUPPORT_RAW_INITRD
419 bool "Enable raw initrd images"
420 help
421 Note, defining the SUPPORT_RAW_INITRD allows user to supply
422 kernel with raw initrd images. The syntax is slightly different, the
423 address of the initrd must be augmented by it's size, in the following
424 format: "<initrd address>:<initrd size>".
425
Simon Glassb45b1632020-09-10 20:21:13 -0600426config OF_BOARD_SETUP
427 bool "Set up board-specific details in device tree before boot"
428 depends on OF_LIBFDT
429 help
430 This causes U-Boot to call ft_board_setup() before booting into
431 the Operating System. This function can set up various
432 board-specific information in the device tree for use by the OS.
433 The device tree is then passed to the OS.
434
435config OF_SYSTEM_SETUP
436 bool "Set up system-specific details in device tree before boot"
437 depends on OF_LIBFDT
438 help
439 This causes U-Boot to call ft_system_setup() before booting into
440 the Operating System. This function can set up various
441 system-specific information in the device tree for use by the OS.
442 The device tree is then passed to the OS.
443
444config OF_STDOUT_VIA_ALIAS
445 bool "Update the device-tree stdout alias from U-Boot"
446 depends on OF_LIBFDT
447 help
448 This uses U-Boot's serial alias from the aliases node to update
449 the device tree passed to the OS. The "linux,stdout-path" property
450 in the chosen node is set to point to the correct serial node.
451 This option currently references CONFIG_CONS_INDEX, which is
452 incorrect when used with device tree as this option does not
453 exist / should not be used.
454
Simon Glassb45b1632020-09-10 20:21:13 -0600455config HAVE_SYS_TEXT_BASE
456 bool
457 depends on !NIOS2 && !XTENSA
458 depends on !EFI_APP
459 default y
460
461config SYS_TEXT_BASE
462 depends on HAVE_SYS_TEXT_BASE
Tom Rini63471d52021-07-09 10:39:21 -0400463 default 0x0 if POSITION_INDEPENDENT
Simon Glassb45b1632020-09-10 20:21:13 -0600464 default 0x80800000 if ARCH_OMAP2PLUS || ARCH_K3
Icenowy Zheng711fab32022-01-29 10:23:09 -0500465 default 0x81700000 if MACH_SUNIV
466 default 0x2a000000 if MACH_SUN9I
467 default 0x42e00000 if MACH_SUN8I_V3S
468 default 0x4a000000 if ARCH_SUNXI
Simon Glassb45b1632020-09-10 20:21:13 -0600469 hex "Text Base"
470 help
471 The address in memory that U-Boot will be running from, initially.
472
Tom Rini03becca2022-03-24 17:18:05 -0400473config HAVE_SYS_MONITOR_BASE
474 bool
475 depends on ARC || MIPS || M68K || NIOS2 || PPC || XTENSA || X86 \
Tom Rini57f2c292022-07-23 13:05:01 -0400476 || ENV_IS_IN_FLASH || MTD_NOR_FLASH
Tom Rini03becca2022-03-24 17:18:05 -0400477 depends on !EFI_APP
478 default y
479
480config SYS_MONITOR_BASE
481 depends on HAVE_SYS_MONITOR_BASE
482 hex "Physical start address of boot monitor code"
483 default SYS_TEXT_BASE
484 help
485 The physical start address of boot monitor code (which is the same as
486 CONFIG_SYS_TEXT_BASE when linking) and the same as CONFIG_SYS_FLASH_BASE
487 when booting from flash.
488
489config SPL_SYS_MONITOR_BASE
490 depends on MPC85xx && SPL && HAVE_SYS_MONITOR_BASE
491 hex "Physical start address of SPL monitor code"
492 default SPL_TEXT_BASE
493
494config TPL_SYS_MONITOR_BASE
495 depends on MPC85xx && TPL && HAVE_SYS_MONITOR_BASE
496 hex "Physical start address of TPL monitor code"
497
Tom Rini8c70baa2021-12-14 13:36:40 -0500498config DYNAMIC_SYS_CLK_FREQ
499 bool "Determine CPU clock frequency at run-time"
500 help
501 Implement a get_board_sys_clk function that will determine the CPU
502 clock frequency at run time, rather than define it statically.
503
Simon Glassb45b1632020-09-10 20:21:13 -0600504config SYS_CLK_FREQ
Tom Rini8c70baa2021-12-14 13:36:40 -0500505 depends on !DYNAMIC_SYS_CLK_FREQ
Simon Glassb45b1632020-09-10 20:21:13 -0600506 int "CPU clock frequency"
Tom Rini8c70baa2021-12-14 13:36:40 -0500507 default 125000000 if ARCH_LS1012A
508 default 100000000 if ARCH_P2020 || ARCH_T1024 || ARCH_T1042 || \
509 ARCH_LS1021A || FSL_LSCH2 || FSL_LSCH3
510 default 66666666 if ARCH_P1010 || ARCH_P1020 || ARCH_T4240
511 default 66660000 if ARCH_T2080
512 default 33333333 if RCAR_GEN3
513 default 24000000 if ARCH_EXYNOS
514 default 20000000 if RCAR_GEN2
515 default 0
Simon Glassb45b1632020-09-10 20:21:13 -0600516 help
Tom Rini8c70baa2021-12-14 13:36:40 -0500517 A static value for the CPU frequency. Note that if not required
518 for a given SoC, this can be left at 0.
Simon Glassb45b1632020-09-10 20:21:13 -0600519
520config ARCH_FIXUP_FDT_MEMORY
521 bool "Enable arch_fixup_memory_banks() call"
522 default y
523 help
524 Enable FDT memory map syncup before OS boot. This feature can be
525 used for booting OS with different memory setup where the part of
526 the memory location should be used for different purpose.
527
Simon Glassd81f07f2020-11-04 09:57:35 -0700528config CHROMEOS
529 bool "Support booting Chrome OS"
530 help
531 Chrome OS requires U-Boot to set up a table indicating the boot mode
532 (e.g. Developer mode) and a few other things. Enable this if you are
533 booting on a Chromebook to avoid getting an error about an invalid
534 firmware ID.
535
536config CHROMEOS_VBOOT
537 bool "Support Chrome OS verified boot"
538 help
539 This is intended to enable the full Chrome OS verified boot support
540 in U-Boot. It is not actually implemented in the U-Boot source code
541 at present, so this option is always set to 'n'. It allows
542 distinguishing between booting Chrome OS in a basic way (developer
543 mode) and a full boot.
544
Tom Rinieb4f2de2022-06-25 11:02:44 -0400545config SYS_RAMBOOT
546 bool
547
Tom Rini9ff815a2021-08-24 23:11:49 -0400548config RAMBOOT_PBL
549 bool "Freescale PBL(pre-boot loader) image format support"
Tom Rinieb4f2de2022-06-25 11:02:44 -0400550 select SYS_RAMBOOT if PPC
Tom Rini9ff815a2021-08-24 23:11:49 -0400551 help
552 Some SoCs use PBL to load RCW and/or pre-initialization instructions.
553 For more details refer to doc/README.pblimage
554
Tom Rini886e6e32022-03-23 17:20:03 -0400555choice
556 prompt "Freescale PBL load location"
557 depends on RAMBOOT_PBL || ((TARGET_P1010RDB_PA || TARGET_P1010RDB_PB \
558 || TARGET_P1020RDB_PC || TARGET_P1020RDB_PD || TARGET_P2020RDB) \
559 && !CMD_NAND)
560
561config SDCARD
562 bool "Freescale PBL is found on SD card"
563
564config SPIFLASH
565 bool "Freescale PBL is found on SPI flash"
566
567endchoice
568
Tom Rini5989fd42022-06-20 08:07:42 -0400569config FSL_FIXED_MMC_LOCATION
570 bool "PBL MMC is at a fixed location"
571 depends on SDCARD && !RAMBOOT_PBL
572
573config ESDHC_HC_BLK_ADDR
574 def_bool y
575 depends on FSL_FIXED_MMC_LOCATION && (ARCH_BSC9131 || ARCH_BSC9132 || ARCH_P1010)
576 help
577 In High Capacity SD Cards (> 2 GBytes), the 32-bit source address and
578 code length of these soc specify the memory address in block address
579 format. Block length is fixed to 512 bytes as per the SD High
580 Capacity specification.
581
Tom Rini9ff815a2021-08-24 23:11:49 -0400582config SYS_FSL_PBL_PBI
583 string "PBI(pre-boot instructions) commands for the PBL image"
584 depends on RAMBOOT_PBL
585 help
586 PBI commands can be used to configure SoC before it starts the execution.
587 Please refer doc/README.pblimage for more details.
588
589config SYS_FSL_PBL_RCW
590 string "Aadditional RCW (Power on reset configuration) for the PBL image"
591 depends on RAMBOOT_PBL
592 help
593 Enables addition of RCW (Power on reset configuration) in built image.
594 Please refer doc/README.pblimage for more details.
595
Tom Rini94b4fec2022-06-25 11:02:46 -0400596config SYS_BOOT_RAMDISK_HIGH
597 depends on CMD_BOOTM || CMD_BOOTI || CMD_BOOTZ
598 depends on !(NIOS2 || SANDBOX || SH || XTENSA)
599 def_bool y
600 help
601 Enable initrd_high functionality. If defined then the initrd_high
602 feature is enabled and the boot* ramdisk subcommand is enabled.
603
Simon Glassb45b1632020-09-10 20:21:13 -0600604endmenu # Boot images
605
Simon Glassd02ddcf2020-09-10 20:21:14 -0600606menu "Boot timing"
607
608config BOOTSTAGE
609 bool "Boot timing and reporting"
610 help
611 Enable recording of boot time while booting. To use it, insert
612 calls to bootstage_mark() with a suitable BOOTSTAGE_ID from
613 bootstage.h. Only a single entry is recorded for each ID. You can
614 give the entry a name with bootstage_mark_name(). You can also
615 record elapsed time in a particular stage using bootstage_start()
616 before starting and bootstage_accum() when finished. Bootstage will
617 add up all the accumulated time and report it.
618
619 Normally, IDs are defined in bootstage.h but a small number of
620 additional 'user' IDs can be used by passing BOOTSTAGE_ID_ALLOC
621 as the ID.
622
623 Calls to show_boot_progress() will also result in log entries but
624 these will not have names.
625
626config SPL_BOOTSTAGE
627 bool "Boot timing and reported in SPL"
Tom Rini0a83cc22022-06-10 23:03:09 -0400628 depends on BOOTSTAGE && SPL
Simon Glassd02ddcf2020-09-10 20:21:14 -0600629 help
630 Enable recording of boot time in SPL. To make this visible to U-Boot
631 proper, enable BOOTSTAGE_STASH as well. This will stash the timing
632 information when SPL finishes and load it when U-Boot proper starts
633 up.
634
635config TPL_BOOTSTAGE
636 bool "Boot timing and reported in TPL"
Tom Rini36a4ca02022-06-08 08:24:39 -0400637 depends on BOOTSTAGE && TPL
Simon Glassd02ddcf2020-09-10 20:21:14 -0600638 help
639 Enable recording of boot time in SPL. To make this visible to U-Boot
640 proper, enable BOOTSTAGE_STASH as well. This will stash the timing
641 information when TPL finishes and load it when U-Boot proper starts
642 up.
643
644config BOOTSTAGE_REPORT
645 bool "Display a detailed boot timing report before booting the OS"
646 depends on BOOTSTAGE
647 help
648 Enable output of a boot time report just before the OS is booted.
649 This shows how long it took U-Boot to go through each stage of the
650 boot process. The report looks something like this:
651
652 Timer summary in microseconds:
653 Mark Elapsed Stage
654 0 0 reset
655 3,575,678 3,575,678 board_init_f start
656 3,575,695 17 arch_cpu_init A9
657 3,575,777 82 arch_cpu_init done
658 3,659,598 83,821 board_init_r start
659 3,910,375 250,777 main_loop
660 29,916,167 26,005,792 bootm_start
661 30,361,327 445,160 start_kernel
662
663config BOOTSTAGE_RECORD_COUNT
664 int "Number of boot stage records to store"
Simon Glass051ddfb2021-02-03 06:00:49 -0700665 depends on BOOTSTAGE
Simon Glassd02ddcf2020-09-10 20:21:14 -0600666 default 30
667 help
668 This is the size of the bootstage record list and is the maximum
669 number of bootstage records that can be recorded.
670
671config SPL_BOOTSTAGE_RECORD_COUNT
672 int "Number of boot stage records to store for SPL"
Simon Glass051ddfb2021-02-03 06:00:49 -0700673 depends on SPL_BOOTSTAGE
Simon Glassd02ddcf2020-09-10 20:21:14 -0600674 default 5
675 help
676 This is the size of the bootstage record list and is the maximum
677 number of bootstage records that can be recorded.
678
679config TPL_BOOTSTAGE_RECORD_COUNT
680 int "Number of boot stage records to store for TPL"
Simon Glass051ddfb2021-02-03 06:00:49 -0700681 depends on TPL_BOOTSTAGE
Simon Glassd02ddcf2020-09-10 20:21:14 -0600682 default 5
683 help
684 This is the size of the bootstage record list and is the maximum
685 number of bootstage records that can be recorded.
686
687config BOOTSTAGE_FDT
688 bool "Store boot timing information in the OS device tree"
689 depends on BOOTSTAGE
690 help
691 Stash the bootstage information in the FDT. A root 'bootstage'
692 node is created with each bootstage id as a child. Each child
693 has a 'name' property and either 'mark' containing the
694 mark time in microseconds, or 'accum' containing the
695 accumulated time for that bootstage id in microseconds.
696 For example:
697
698 bootstage {
699 154 {
700 name = "board_init_f";
701 mark = <3575678>;
702 };
703 170 {
704 name = "lcd";
705 accum = <33482>;
706 };
707 };
708
709 Code in the Linux kernel can find this in /proc/devicetree.
710
711config BOOTSTAGE_STASH
712 bool "Stash the boot timing information in memory before booting OS"
713 depends on BOOTSTAGE
714 help
715 Some OSes do not support device tree. Bootstage can instead write
716 the boot timing information in a binary format at a given address.
717 This happens through a call to bootstage_stash(), typically in
718 the CPU's cleanup_before_linux() function. You can use the
719 'bootstage stash' and 'bootstage unstash' commands to do this on
720 the command line.
721
722config BOOTSTAGE_STASH_ADDR
723 hex "Address to stash boot timing information"
724 default 0
725 help
726 Provide an address which will not be overwritten by the OS when it
727 starts, so that it can read this information when ready.
728
729config BOOTSTAGE_STASH_SIZE
730 hex "Size of boot timing stash region"
731 default 0x1000
732 help
733 This should be large enough to hold the bootstage stash. A value of
734 4096 (4KiB) is normally plenty.
735
736config SHOW_BOOT_PROGRESS
737 bool "Show boot progress in a board-specific manner"
738 help
739 Defining this option allows to add some board-specific code (calling
740 a user-provided function show_boot_progress(int) that enables you to
741 show the system's boot progress on some display (for example, some
742 LEDs) on your board. At the moment, the following checkpoints are
743 implemented:
744
745 Legacy uImage format:
746
747 Arg Where When
748 1 common/cmd_bootm.c before attempting to boot an image
749 -1 common/cmd_bootm.c Image header has bad magic number
750 2 common/cmd_bootm.c Image header has correct magic number
751 -2 common/cmd_bootm.c Image header has bad checksum
752 3 common/cmd_bootm.c Image header has correct checksum
753 -3 common/cmd_bootm.c Image data has bad checksum
754 4 common/cmd_bootm.c Image data has correct checksum
755 -4 common/cmd_bootm.c Image is for unsupported architecture
756 5 common/cmd_bootm.c Architecture check OK
757 -5 common/cmd_bootm.c Wrong Image Type (not kernel, multi)
758 6 common/cmd_bootm.c Image Type check OK
759 -6 common/cmd_bootm.c gunzip uncompression error
760 -7 common/cmd_bootm.c Unimplemented compression type
761 7 common/cmd_bootm.c Uncompression OK
762 8 common/cmd_bootm.c No uncompress/copy overwrite error
763 -9 common/cmd_bootm.c Unsupported OS (not Linux, BSD, VxWorks, QNX)
764
765 9 common/image.c Start initial ramdisk verification
766 -10 common/image.c Ramdisk header has bad magic number
767 -11 common/image.c Ramdisk header has bad checksum
768 10 common/image.c Ramdisk header is OK
769 -12 common/image.c Ramdisk data has bad checksum
770 11 common/image.c Ramdisk data has correct checksum
771 12 common/image.c Ramdisk verification complete, start loading
772 -13 common/image.c Wrong Image Type (not PPC Linux ramdisk)
773 13 common/image.c Start multifile image verification
774 14 common/image.c No initial ramdisk, no multifile, continue.
775
776 15 arch/<arch>/lib/bootm.c All preparation done, transferring control to OS
777
778 -30 arch/powerpc/lib/board.c Fatal error, hang the system
779 -31 post/post.c POST test failed, detected by post_output_backlog()
780 -32 post/post.c POST test failed, detected by post_run_single()
781
782 34 common/cmd_doc.c before loading a Image from a DOC device
783 -35 common/cmd_doc.c Bad usage of "doc" command
784 35 common/cmd_doc.c correct usage of "doc" command
785 -36 common/cmd_doc.c No boot device
786 36 common/cmd_doc.c correct boot device
787 -37 common/cmd_doc.c Unknown Chip ID on boot device
788 37 common/cmd_doc.c correct chip ID found, device available
789 -38 common/cmd_doc.c Read Error on boot device
790 38 common/cmd_doc.c reading Image header from DOC device OK
791 -39 common/cmd_doc.c Image header has bad magic number
792 39 common/cmd_doc.c Image header has correct magic number
793 -40 common/cmd_doc.c Error reading Image from DOC device
794 40 common/cmd_doc.c Image header has correct magic number
795 41 common/cmd_ide.c before loading a Image from a IDE device
796 -42 common/cmd_ide.c Bad usage of "ide" command
797 42 common/cmd_ide.c correct usage of "ide" command
798 -43 common/cmd_ide.c No boot device
799 43 common/cmd_ide.c boot device found
800 -44 common/cmd_ide.c Device not available
801 44 common/cmd_ide.c Device available
802 -45 common/cmd_ide.c wrong partition selected
803 45 common/cmd_ide.c partition selected
804 -46 common/cmd_ide.c Unknown partition table
805 46 common/cmd_ide.c valid partition table found
806 -47 common/cmd_ide.c Invalid partition type
807 47 common/cmd_ide.c correct partition type
808 -48 common/cmd_ide.c Error reading Image Header on boot device
809 48 common/cmd_ide.c reading Image Header from IDE device OK
810 -49 common/cmd_ide.c Image header has bad magic number
811 49 common/cmd_ide.c Image header has correct magic number
812 -50 common/cmd_ide.c Image header has bad checksum
813 50 common/cmd_ide.c Image header has correct checksum
814 -51 common/cmd_ide.c Error reading Image from IDE device
815 51 common/cmd_ide.c reading Image from IDE device OK
816 52 common/cmd_nand.c before loading a Image from a NAND device
817 -53 common/cmd_nand.c Bad usage of "nand" command
818 53 common/cmd_nand.c correct usage of "nand" command
819 -54 common/cmd_nand.c No boot device
820 54 common/cmd_nand.c boot device found
821 -55 common/cmd_nand.c Unknown Chip ID on boot device
822 55 common/cmd_nand.c correct chip ID found, device available
823 -56 common/cmd_nand.c Error reading Image Header on boot device
824 56 common/cmd_nand.c reading Image Header from NAND device OK
825 -57 common/cmd_nand.c Image header has bad magic number
826 57 common/cmd_nand.c Image header has correct magic number
827 -58 common/cmd_nand.c Error reading Image from NAND device
828 58 common/cmd_nand.c reading Image from NAND device OK
829
830 -60 common/env_common.c Environment has a bad CRC, using default
831
832 64 net/eth.c starting with Ethernet configuration.
833 -64 net/eth.c no Ethernet found.
834 65 net/eth.c Ethernet found.
835
836 -80 common/cmd_net.c usage wrong
837 80 common/cmd_net.c before calling net_loop()
838 -81 common/cmd_net.c some error in net_loop() occurred
839 81 common/cmd_net.c net_loop() back without error
840 -82 common/cmd_net.c size == 0 (File with size 0 loaded)
841 82 common/cmd_net.c trying automatic boot
842 83 common/cmd_net.c running "source" command
843 -83 common/cmd_net.c some error in automatic boot or "source" command
844 84 common/cmd_net.c end without errors
845
846 FIT uImage format:
847
848 Arg Where When
849 100 common/cmd_bootm.c Kernel FIT Image has correct format
850 -100 common/cmd_bootm.c Kernel FIT Image has incorrect format
851 101 common/cmd_bootm.c No Kernel subimage unit name, using configuration
852 -101 common/cmd_bootm.c Can't get configuration for kernel subimage
853 102 common/cmd_bootm.c Kernel unit name specified
854 -103 common/cmd_bootm.c Can't get kernel subimage node offset
855 103 common/cmd_bootm.c Found configuration node
856 104 common/cmd_bootm.c Got kernel subimage node offset
857 -104 common/cmd_bootm.c Kernel subimage hash verification failed
858 105 common/cmd_bootm.c Kernel subimage hash verification OK
859 -105 common/cmd_bootm.c Kernel subimage is for unsupported architecture
860 106 common/cmd_bootm.c Architecture check OK
861 -106 common/cmd_bootm.c Kernel subimage has wrong type
862 107 common/cmd_bootm.c Kernel subimage type OK
863 -107 common/cmd_bootm.c Can't get kernel subimage data/size
864 108 common/cmd_bootm.c Got kernel subimage data/size
865 -108 common/cmd_bootm.c Wrong image type (not legacy, FIT)
866 -109 common/cmd_bootm.c Can't get kernel subimage type
867 -110 common/cmd_bootm.c Can't get kernel subimage comp
868 -111 common/cmd_bootm.c Can't get kernel subimage os
869 -112 common/cmd_bootm.c Can't get kernel subimage load address
870 -113 common/cmd_bootm.c Image uncompress/copy overwrite error
871
872 120 common/image.c Start initial ramdisk verification
873 -120 common/image.c Ramdisk FIT image has incorrect format
874 121 common/image.c Ramdisk FIT image has correct format
875 122 common/image.c No ramdisk subimage unit name, using configuration
876 -122 common/image.c Can't get configuration for ramdisk subimage
877 123 common/image.c Ramdisk unit name specified
878 -124 common/image.c Can't get ramdisk subimage node offset
879 125 common/image.c Got ramdisk subimage node offset
880 -125 common/image.c Ramdisk subimage hash verification failed
881 126 common/image.c Ramdisk subimage hash verification OK
882 -126 common/image.c Ramdisk subimage for unsupported architecture
883 127 common/image.c Architecture check OK
884 -127 common/image.c Can't get ramdisk subimage data/size
885 128 common/image.c Got ramdisk subimage data/size
886 129 common/image.c Can't get ramdisk load address
887 -129 common/image.c Got ramdisk load address
888
889 -130 common/cmd_doc.c Incorrect FIT image format
890 131 common/cmd_doc.c FIT image format OK
891
892 -140 common/cmd_ide.c Incorrect FIT image format
893 141 common/cmd_ide.c FIT image format OK
894
895 -150 common/cmd_nand.c Incorrect FIT image format
896 151 common/cmd_nand.c FIT image format OK
897
Marek Vasut98154342021-10-23 03:06:03 +0200898config SPL_SHOW_BOOT_PROGRESS
Jan Kiszka5780edb2021-11-03 15:09:36 +0100899 bool "Show boot progress in a board-specific manner in SPL"
Marek Vasut98154342021-10-23 03:06:03 +0200900 depends on SPL
901 help
902 Defining this option allows to add some board-specific code (calling
903 a user-provided function show_boot_progress(int) that enables you to
904 show the system's boot progress on some display (for example, some
905 LEDs) on your board. For details see SHOW_BOOT_PROGRESS.
906
Simon Glassd02ddcf2020-09-10 20:21:14 -0600907endmenu
908
Simon Glasseebed782020-09-10 20:21:15 -0600909menu "Boot media"
910
911config NOR_BOOT
912 bool "Support for booting from NOR flash"
913 depends on NOR
914 help
915 Enabling this will make a U-Boot binary that is capable of being
916 booted via NOR. In this case we will enable certain pinmux early
917 as the ROM only partially sets up pinmux. We also default to using
918 NOR for environment.
919
920config NAND_BOOT
921 bool "Support for booting from NAND flash"
Simon Glasseebed782020-09-10 20:21:15 -0600922 imply MTD_RAW_NAND
923 help
924 Enabling this will make a U-Boot binary that is capable of being
925 booted via NAND flash. This is not a must, some SoCs need this,
926 some not.
927
928config ONENAND_BOOT
929 bool "Support for booting from ONENAND"
Simon Glasseebed782020-09-10 20:21:15 -0600930 imply MTD_RAW_NAND
931 help
932 Enabling this will make a U-Boot binary that is capable of being
933 booted via ONENAND. This is not a must, some SoCs need this,
934 some not.
935
936config QSPI_BOOT
937 bool "Support for booting from QSPI flash"
Simon Glasseebed782020-09-10 20:21:15 -0600938 help
939 Enabling this will make a U-Boot binary that is capable of being
940 booted via QSPI flash. This is not a must, some SoCs need this,
941 some not.
942
943config SATA_BOOT
944 bool "Support for booting from SATA"
Simon Glasseebed782020-09-10 20:21:15 -0600945 help
946 Enabling this will make a U-Boot binary that is capable of being
947 booted via SATA. This is not a must, some SoCs need this,
948 some not.
949
950config SD_BOOT
951 bool "Support for booting from SD/EMMC"
Simon Glasseebed782020-09-10 20:21:15 -0600952 help
953 Enabling this will make a U-Boot binary that is capable of being
954 booted via SD/EMMC. This is not a must, some SoCs need this,
955 some not.
956
Tom Rinia43bf4e2021-12-11 14:55:50 -0500957config SD_BOOT_QSPI
958 bool "Support for booting from SD/EMMC and enable QSPI"
959 help
960 Enabling this will make a U-Boot binary that is capable of being
961 booted via SD/EMMC while enabling QSPI on the platform as well. This
962 is not a must, some SoCs need this, some not.
963
Simon Glasseebed782020-09-10 20:21:15 -0600964config SPI_BOOT
965 bool "Support for booting from SPI flash"
Simon Glasseebed782020-09-10 20:21:15 -0600966 help
967 Enabling this will make a U-Boot binary that is capable of being
968 booted via SPI flash. This is not a must, some SoCs need this,
969 some not.
970
971endmenu
972
Simon Glasse9d54d72020-09-10 20:21:16 -0600973menu "Autoboot options"
974
975config AUTOBOOT
976 bool "Autoboot"
977 default y
978 help
979 This enables the autoboot. See doc/README.autoboot for detail.
980
Simon Glass1b6cbaa2020-09-10 20:21:17 -0600981config BOOTDELAY
982 int "delay in seconds before automatically booting"
983 default 2
984 depends on AUTOBOOT
985 help
986 Delay before automatically running bootcmd;
987 set to 0 to autoboot with no delay, but you can stop it by key input.
988 set to -1 to disable autoboot.
989 set to -2 to autoboot with no delay and not check for abort
990
991 If this value is >= 0 then it is also used for the default delay
992 before starting the default entry in bootmenu. If it is < 0 then
993 a default value of 10s is used.
994
995 See doc/README.autoboot for details.
996
Simon Glasse9d54d72020-09-10 20:21:16 -0600997config AUTOBOOT_KEYED
998 bool "Stop autobooting via specific input key / string"
Simon Glasse9d54d72020-09-10 20:21:16 -0600999 help
1000 This option enables stopping (aborting) of the automatic
1001 boot feature only by issuing a specific input key or
1002 string. If not enabled, any input key will abort the
1003 U-Boot automatic booting process and bring the device
1004 to the U-Boot prompt for user input.
1005
Steffen Jaeckeldfc97322021-07-08 15:57:38 +02001006config AUTOBOOT_FLUSH_STDIN
1007 bool "Enable flushing stdin before starting to read the password"
1008 depends on AUTOBOOT_KEYED && !SANDBOX
1009 help
1010 When this option is enabled stdin buffer will be flushed before
1011 starting to read the password.
1012 This can't be enabled for the sandbox as flushing stdin would
1013 break the autoboot unit tests.
1014
Simon Glasse9d54d72020-09-10 20:21:16 -06001015config AUTOBOOT_PROMPT
1016 string "Autoboot stop prompt"
1017 depends on AUTOBOOT_KEYED
1018 default "Autoboot in %d seconds\\n"
1019 help
1020 This string is displayed before the boot delay selected by
1021 CONFIG_BOOTDELAY starts. If it is not defined there is no
1022 output indicating that autoboot is in progress.
1023
1024 Note that this define is used as the (only) argument to a
1025 printf() call, so it may contain '%' format specifications,
1026 provided that it also includes, sepearated by commas exactly
1027 like in a printf statement, the required arguments. It is
1028 the responsibility of the user to select only such arguments
1029 that are valid in the given context.
1030
1031config AUTOBOOT_ENCRYPTION
1032 bool "Enable encryption in autoboot stopping"
1033 depends on AUTOBOOT_KEYED
1034 help
1035 This option allows a string to be entered into U-Boot to stop the
Steffen Jaeckel6aa6bfb2021-07-08 15:57:35 +02001036 autoboot.
1037 The behavior depends whether CONFIG_CRYPT_PW from lib is enabled
1038 or not.
1039 In case CONFIG_CRYPT_PW is enabled, the string will be forwarded
1040 to the crypt-based functionality and be compared against the
1041 string in the environment variable 'bootstopkeycrypt'.
1042 In case CONFIG_CRYPT_PW is disabled the string itself is hashed
1043 and compared against the hash in the environment variable
1044 'bootstopkeysha256'.
1045 If it matches in either case then boot stops and
1046 a command-line prompt is presented.
Simon Glasse9d54d72020-09-10 20:21:16 -06001047 This provides a way to ship a secure production device which can also
1048 be accessed at the U-Boot command line.
1049
Steffen Jaeckel28be70d2021-07-08 15:57:39 +02001050config AUTOBOOT_SHA256_FALLBACK
1051 bool "Allow fallback from crypt-hashed password to sha256"
1052 depends on AUTOBOOT_ENCRYPTION && CRYPT_PW
1053 help
1054 This option adds support to fall back from crypt-hashed
1055 passwords to checking a SHA256 hashed password in case the
1056 'bootstopusesha256' environment variable is set to 'true'.
1057
Simon Glasse9d54d72020-09-10 20:21:16 -06001058config AUTOBOOT_DELAY_STR
1059 string "Delay autobooting via specific input key / string"
1060 depends on AUTOBOOT_KEYED && !AUTOBOOT_ENCRYPTION
1061 help
1062 This option delays the automatic boot feature by issuing
1063 a specific input key or string. If CONFIG_AUTOBOOT_DELAY_STR
1064 or the environment variable "bootdelaykey" is specified
1065 and this string is received from console input before
1066 autoboot starts booting, U-Boot gives a command prompt. The
1067 U-Boot prompt will time out if CONFIG_BOOT_RETRY_TIME is
1068 used, otherwise it never times out.
1069
1070config AUTOBOOT_STOP_STR
1071 string "Stop autobooting via specific input key / string"
1072 depends on AUTOBOOT_KEYED && !AUTOBOOT_ENCRYPTION
1073 help
1074 This option enables stopping (aborting) of the automatic
1075 boot feature only by issuing a specific input key or
1076 string. If CONFIG_AUTOBOOT_STOP_STR or the environment
1077 variable "bootstopkey" is specified and this string is
1078 received from console input before autoboot starts booting,
1079 U-Boot gives a command prompt. The U-Boot prompt never
1080 times out, even if CONFIG_BOOT_RETRY_TIME is used.
1081
1082config AUTOBOOT_KEYED_CTRLC
1083 bool "Enable Ctrl-C autoboot interruption"
1084 depends on AUTOBOOT_KEYED && !AUTOBOOT_ENCRYPTION
Simon Glasse9d54d72020-09-10 20:21:16 -06001085 help
1086 This option allows for the boot sequence to be interrupted
1087 by ctrl-c, in addition to the "bootdelaykey" and "bootstopkey".
1088 Setting this variable provides an escape sequence from the
1089 limited "password" strings.
1090
Steffen Jaeckel792a13f2021-07-08 15:57:37 +02001091config AUTOBOOT_NEVER_TIMEOUT
1092 bool "Make the password entry never time-out"
1093 depends on AUTOBOOT_KEYED && AUTOBOOT_ENCRYPTION && CRYPT_PW
1094 help
1095 This option removes the timeout from the password entry
1096 when the user first presses the <Enter> key before entering
1097 any other character.
1098
Steffen Jaeckel6aa6bfb2021-07-08 15:57:35 +02001099config AUTOBOOT_STOP_STR_ENABLE
1100 bool "Enable fixed string to stop autobooting"
1101 depends on AUTOBOOT_KEYED && AUTOBOOT_ENCRYPTION
1102 help
1103 This option enables the feature to add a fixed stop
1104 string that is defined at compile time.
1105 In every case it will be tried to load the stop
1106 string from the environment.
1107 In case this is enabled and there is no stop string
1108 in the environment, this will be used as default value.
1109
1110config AUTOBOOT_STOP_STR_CRYPT
1111 string "Stop autobooting via crypt-hashed password"
1112 depends on AUTOBOOT_STOP_STR_ENABLE && CRYPT_PW
1113 help
1114 This option adds the feature to only stop the autobooting,
1115 and therefore boot into the U-Boot prompt, when the input
1116 string / password matches a values that is hashed via
1117 one of the supported crypt-style password hashing options
1118 and saved in the environment variable "bootstopkeycrypt".
1119
Simon Glasse9d54d72020-09-10 20:21:16 -06001120config AUTOBOOT_STOP_STR_SHA256
Steffen Jaeckele1788f92021-07-08 15:57:40 +02001121 string "Stop autobooting via SHA256 hashed password"
Steffen Jaeckel6aa6bfb2021-07-08 15:57:35 +02001122 depends on AUTOBOOT_STOP_STR_ENABLE
Simon Glasse9d54d72020-09-10 20:21:16 -06001123 help
1124 This option adds the feature to only stop the autobooting,
1125 and therefore boot into the U-Boot prompt, when the input
1126 string / password matches a values that is encypted via
Joel Peshkin8b7bf532020-11-21 17:18:59 -08001127 a SHA256 hash and saved in the environment variable
1128 "bootstopkeysha256". If the value in that variable
1129 includes a ":", the portion prior to the ":" will be treated
1130 as a salt value.
Simon Glasse9d54d72020-09-10 20:21:16 -06001131
1132config AUTOBOOT_USE_MENUKEY
1133 bool "Allow a specify key to run a menu from the environment"
1134 depends on !AUTOBOOT_KEYED
1135 help
1136 If a specific key is pressed to stop autoboot, then the commands in
1137 the environment variable 'menucmd' are executed before boot starts.
1138
1139config AUTOBOOT_MENUKEY
1140 int "ASCII value of boot key to show a menu"
1141 default 0
1142 depends on AUTOBOOT_USE_MENUKEY
1143 help
1144 If this key is pressed to stop autoboot, then the commands in the
1145 environment variable 'menucmd' will be executed before boot starts.
1146 For example, 33 means "!" in ASCII, so pressing ! at boot would take
1147 this action.
1148
1149config AUTOBOOT_MENU_SHOW
1150 bool "Show a menu on boot"
1151 depends on CMD_BOOTMENU
1152 help
1153 This enables the boot menu, controlled by environment variables
1154 defined by the board. The menu starts after running the 'preboot'
1155 environmnent variable (if enabled) and before handling the boot delay.
1156 See README.bootmenu for more details.
1157
Masahisa Kojima97cbcc42022-05-26 19:09:38 +09001158config BOOTMENU_DISABLE_UBOOT_CONSOLE
1159 bool "Disallow bootmenu to enter the U-Boot console"
1160 depends on AUTOBOOT_MENU_SHOW
1161 help
1162 If this option is enabled, user can not enter the U-Boot console from
1163 bootmenu. It increases the system security.
1164
Tom Rinia45a3ef2022-03-11 09:12:04 -05001165config BOOT_RETRY
1166 bool "Boot retry feature"
1167 help
1168 Allow for having the U-Boot command prompt time out and attempt
1169 to boot again. If the environment variable "bootretry" is found then
1170 its value is used, otherwise the retry timeout is
1171 CONFIG_BOOT_RETRY_TIME. CONFIG_BOOT_RETRY_MIN is optional and
1172 defaults to CONFIG_BOOT_RETRY_TIME. All times are in seconds.
1173
1174config BOOT_RETRY_TIME
1175 int "Timeout in seconds before attempting to boot again"
1176 depends on BOOT_RETRY
1177 help
1178 Time in seconds before the U-Boot prompt will timeout and boot will
1179 be attempted again.
1180
1181config BOOT_RETRY_MIN
1182 int "Minimum timeout in seconds for 'bootretry'"
1183 depends on BOOT_RETRY
1184 default BOOT_RETRY_TIME
1185 help
1186 The minimum time in seconds that "bootretry" can be set to.
1187
1188config RESET_TO_RETRY
1189 bool "Reset the board to retry autoboot"
1190 depends on BOOT_RETRY
1191 help
1192 After the countdown timed out, the board will be reset to restart
1193 again.
1194
Simon Glasse9d54d72020-09-10 20:21:16 -06001195endmenu
1196
Philippe Reynesd28484e2022-03-28 22:56:59 +02001197menu "Image support"
1198
1199config IMAGE_PRE_LOAD
1200 bool "Image pre-load support"
1201 help
1202 Enable an image pre-load stage in the SPL.
1203 This pre-load stage allows to do some manipulation
1204 or check (for example signature check) on an image
1205 before launching it.
1206
1207config SPL_IMAGE_PRE_LOAD
1208 bool "Image pre-load support within SPL"
1209 depends on SPL && IMAGE_PRE_LOAD
1210 help
1211 Enable an image pre-load stage in the SPL.
1212 This pre-load stage allows to do some manipulation
1213 or check (for example signature check) on an image
1214 before launching it.
1215
1216config IMAGE_PRE_LOAD_SIG
1217 bool "Image pre-load signature support"
1218 depends on IMAGE_PRE_LOAD
1219 select FIT_SIGNATURE
1220 select RSA
1221 select RSA_VERIFY_WITH_PKEY
1222 help
1223 Enable signature check support in the pre-load stage.
1224 For this feature a very simple header is added before
1225 the image with few fields:
1226 - a magic
1227 - the image size
1228 - the signature
1229 All other information (header size, type of signature,
1230 ...) are provided in the node /image/pre-load/sig of
1231 u-boot.
1232
1233config SPL_IMAGE_PRE_LOAD_SIG
1234 bool "Image pre-load signature support witin SPL"
1235 depends on SPL_IMAGE_PRE_LOAD && IMAGE_PRE_LOAD_SIG
1236 select SPL_FIT_SIGNATURE
1237 select SPL_RSA
1238 select SPL_RSA_VERIFY_WITH_PKEY
1239 help
1240 Enable signature check support in the pre-load stage in the SPL.
1241 For this feature a very simple header is added before
1242 the image with few fields:
1243 - a magic
1244 - the image size
1245 - the signature
1246 All other information (header size, type of signature,
1247 ...) are provided in the node /image/pre-load/sig of
1248 u-boot.
1249
1250endmenu
1251
Simon Glass5e958642020-09-10 20:21:18 -06001252config USE_BOOTARGS
1253 bool "Enable boot arguments"
1254 help
1255 Provide boot arguments to bootm command. Boot arguments are specified
1256 in CONFIG_BOOTARGS option. Enable this option to be able to specify
1257 CONFIG_BOOTARGS string. If this option is disabled, CONFIG_BOOTARGS
1258 will be undefined and won't take any space in U-Boot image.
1259
1260config BOOTARGS
1261 string "Boot arguments"
1262 depends on USE_BOOTARGS && !USE_DEFAULT_ENV_FILE
1263 help
1264 This can be used to pass arguments to the bootm command. The value of
1265 CONFIG_BOOTARGS goes into the environment value "bootargs". Note that
1266 this value will also override the "chosen" node in FDT blob.
1267
Simon Glass529e2082020-11-05 10:33:48 -07001268config BOOTARGS_SUBST
1269 bool "Support substituting strings in boot arguments"
1270 help
1271 This allows substituting string values in the boot arguments. These
1272 are applied after the commandline has been built.
1273
1274 One use for this is to insert the root-disk UUID into the command
1275 line where bootargs contains "root=${uuid}"
1276
1277 setenv bootargs "console= root=${uuid}"
1278 # Set the 'uuid' environment variable
1279 part uuid mmc 2:2 uuid
1280
1281 # Command-line substitution will put the real uuid into the
1282 # kernel command line
1283 bootm
1284
Simon Glass5e958642020-09-10 20:21:18 -06001285config USE_BOOTCOMMAND
1286 bool "Enable a default value for bootcmd"
1287 help
1288 Provide a default value for the bootcmd entry in the environment. If
1289 autoboot is enabled this is what will be run automatically. Enable
1290 this option to be able to specify CONFIG_BOOTCOMMAND as a string. If
1291 this option is disabled, CONFIG_BOOTCOMMAND will be undefined and
1292 won't take any space in U-Boot image.
1293
1294config BOOTCOMMAND
1295 string "bootcmd value"
1296 depends on USE_BOOTCOMMAND && !USE_DEFAULT_ENV_FILE
Simon Glassbe661cb2022-04-24 23:31:27 -06001297 default "bootflow scan -lb" if BOOTSTD_BOOTCOMMAND && CMD_BOOTFLOW_FULL
1298 default "bootflow scan" if BOOTSTD_BOOTCOMMAND && !CMD_BOOTFLOW_FULL
1299 default "run distro_bootcmd" if !BOOTSTD_BOOTCOMMAND && DISTRO_DEFAULTS
Simon Glass5e958642020-09-10 20:21:18 -06001300 help
1301 This is the string of commands that will be used as bootcmd and if
1302 AUTOBOOT is set, automatically run.
1303
1304config USE_PREBOOT
1305 bool "Enable preboot"
1306 help
1307 When this option is enabled, the existence of the environment
1308 variable "preboot" will be checked immediately before starting the
1309 CONFIG_BOOTDELAY countdown and/or running the auto-boot command resp.
1310 entering interactive mode.
1311
1312 This feature is especially useful when "preboot" is automatically
1313 generated or modified. For example, the boot code can modify the
1314 "preboot" when a user holds down a certain combination of keys.
1315
1316config PREBOOT
1317 string "preboot default value"
1318 depends on USE_PREBOOT && !USE_DEFAULT_ENV_FILE
Patrick Delaunaybb15d402020-10-12 09:47:50 +02001319 default "usb start" if USB_KEYBOARD
Simon Glass5e958642020-09-10 20:21:18 -06001320 default ""
1321 help
1322 This is the default of "preboot" environment variable.
1323
Simon Glassc10ddfd2020-09-10 20:21:20 -06001324config DEFAULT_FDT_FILE
1325 string "Default fdt file"
1326 help
1327 This option is used to set the default fdt file to boot OS.
1328
Dzmitry Sankouskia3463062022-02-22 21:49:52 +03001329config SAVE_PREV_BL_FDT_ADDR
1330 depends on ARM
1331 bool "Saves fdt address, passed by the previous bootloader, to env var"
1332 help
1333 When u-boot is used as a chain-loaded bootloader (replacing OS kernel),
1334 enable this option to save fdt address, passed by the
1335 previous bootloader for future use.
1336 Address is saved to `prevbl_fdt_addr` environment variable.
1337
1338 If no fdt was provided by previous bootloader, no env variables
1339 will be created.
1340
1341config SAVE_PREV_BL_INITRAMFS_START_ADDR
1342 depends on ARM
1343 bool "Saves initramfs address, passed by the previous bootloader, to env var"
1344 help
1345 When u-boot is used as a chain-loaded bootloader(replacing OS kernel),
1346 enable this option to save initramfs address, passed by the
1347 previous bootloader for future use.
1348 Address is saved to `prevbl_initrd_start_addr` environment variable.
1349
1350 If no initramfs was provided by previous bootloader, no env variables
1351 will be created.
1352
Simon Glassb45b1632020-09-10 20:21:13 -06001353endmenu # Booting