Commit 67b73d3c authored by Gustavo Henrique Nihei's avatar Gustavo Henrique Nihei Committed by Gustavo Henrique Nihei
Browse files

espressif: Add CI jobs for Secure boot enabled images 



Signed-off-by: default avatarGustavo Henrique Nihei <gustavo.nihei@espressif.com>
parent a3495105

.github/workflows/espressif.yaml

+3 −0
Original line number Diff line number Diff line
@@ -15,9 +15,12 @@ jobs: 
    strategy:

      matrix:

        targets: [esp32, esp32s2, esp32c3]

        features:

        - "sign-rsa2048,sign-rsa3072,sign-ec256,sign-ed25519"

    runs-on: ubuntu-latest

    env:

      MCUBOOT_TARGET: ${{ matrix.targets }}

      MCUBOOT_FEATURES: ${{ matrix.features }}

    steps:

    - uses: actions/checkout@v2

      with:

boot/espressif/secureboot-sign-ec256.conf

0 → 100644
+19 −0
Original line number Diff line number Diff line 
# SPDX-FileCopyrightText: 2021 Espressif Systems (Shanghai) CO LTD

#

# SPDX-License-Identifier: Apache-2.0



CONFIG_SECURE_SIGNED_ON_BOOT=1

CONFIG_SECURE_SIGNED_APPS_RSA_SCHEME=1

CONFIG_SECURE_BOOT=1

CONFIG_SECURE_BOOT_V2_ENABLED=1

CONFIG_SECURE_BOOT_SUPPORTS_RSA=1

CONFIG_ESP_SIGN_KEY_FILE=root-ec-p256.pem

CONFIG_ESP_USE_TINYCRYPT=1

CONFIG_ESP_SIGN_EC256=1

CONFIG_ESP_BOOTLOADER_SIZE=0xF000

CONFIG_ESP_APPLICATION_PRIMARY_START_ADDRESS=0x10000

CONFIG_ESP_APPLICATION_SIZE=0x100000

CONFIG_ESP_APPLICATION_SECONDARY_START_ADDRESS=0x110000

CONFIG_ESP_MCUBOOT_WDT_ENABLE=1

CONFIG_ESP_SCRATCH_OFFSET=0x210000

CONFIG_ESP_SCRATCH_SIZE=0x40000

boot/espressif/secureboot-sign-ed25519.conf

0 → 100644
+19 −0
Original line number Diff line number Diff line 
# SPDX-FileCopyrightText: 2021 Espressif Systems (Shanghai) CO LTD

#

# SPDX-License-Identifier: Apache-2.0



CONFIG_SECURE_SIGNED_ON_BOOT=1

CONFIG_SECURE_SIGNED_APPS_RSA_SCHEME=1

CONFIG_SECURE_BOOT=1

CONFIG_SECURE_BOOT_V2_ENABLED=1

CONFIG_SECURE_BOOT_SUPPORTS_RSA=1

CONFIG_ESP_SIGN_KEY_FILE=root-ed25519.pem

CONFIG_ESP_USE_TINYCRYPT=1

CONFIG_ESP_SIGN_ED25519=1

CONFIG_ESP_BOOTLOADER_SIZE=0xF000

CONFIG_ESP_APPLICATION_PRIMARY_START_ADDRESS=0x10000

CONFIG_ESP_APPLICATION_SIZE=0x100000

CONFIG_ESP_APPLICATION_SECONDARY_START_ADDRESS=0x110000

CONFIG_ESP_MCUBOOT_WDT_ENABLE=1

CONFIG_ESP_SCRATCH_OFFSET=0x210000

CONFIG_ESP_SCRATCH_SIZE=0x40000

boot/espressif/secureboot-sign-rsa2048.conf

0 → 100644
+20 −0
Original line number Diff line number Diff line 
# SPDX-FileCopyrightText: 2021 Espressif Systems (Shanghai) CO LTD

#

# SPDX-License-Identifier: Apache-2.0



CONFIG_SECURE_SIGNED_ON_BOOT=1

CONFIG_SECURE_SIGNED_APPS_RSA_SCHEME=1

CONFIG_SECURE_BOOT=1

CONFIG_SECURE_BOOT_V2_ENABLED=1

CONFIG_SECURE_BOOT_SUPPORTS_RSA=1

CONFIG_ESP_SIGN_KEY_FILE=root-rsa-2048.pem

CONFIG_ESP_USE_MBEDTLS=1

CONFIG_ESP_SIGN_RSA=1

CONFIG_ESP_SIGN_RSA_LEN=2048

CONFIG_ESP_BOOTLOADER_SIZE=0xF000

CONFIG_ESP_APPLICATION_PRIMARY_START_ADDRESS=0x10000

CONFIG_ESP_APPLICATION_SIZE=0x100000

CONFIG_ESP_APPLICATION_SECONDARY_START_ADDRESS=0x110000

CONFIG_ESP_MCUBOOT_WDT_ENABLE=1

CONFIG_ESP_SCRATCH_OFFSET=0x210000

CONFIG_ESP_SCRATCH_SIZE=0x40000

boot/espressif/secureboot-sign-rsa3072.conf

0 → 100644
+20 −0
Original line number Diff line number Diff line 
# SPDX-FileCopyrightText: 2021 Espressif Systems (Shanghai) CO LTD

#

# SPDX-License-Identifier: Apache-2.0



CONFIG_SECURE_SIGNED_ON_BOOT=1

CONFIG_SECURE_SIGNED_APPS_RSA_SCHEME=1

CONFIG_SECURE_BOOT=1

CONFIG_SECURE_BOOT_V2_ENABLED=1

CONFIG_SECURE_BOOT_SUPPORTS_RSA=1

CONFIG_ESP_SIGN_KEY_FILE=root-rsa-3072.pem

CONFIG_ESP_USE_MBEDTLS=1

CONFIG_ESP_SIGN_RSA=1

CONFIG_ESP_SIGN_RSA_LEN=3072

CONFIG_ESP_BOOTLOADER_SIZE=0xF000

CONFIG_ESP_APPLICATION_PRIMARY_START_ADDRESS=0x10000

CONFIG_ESP_APPLICATION_SIZE=0x100000

CONFIG_ESP_APPLICATION_SECONDARY_START_ADDRESS=0x110000

CONFIG_ESP_MCUBOOT_WDT_ENABLE=1

CONFIG_ESP_SCRATCH_OFFSET=0x210000

CONFIG_ESP_SCRATCH_SIZE=0x40000

CRA Git | Maintained and supported by SUSTech CRA and CCSE