Video

https://youtu.be/3bR2fuZ9sK8

Attendees

9

Topics

• Shared captured learning on UEFI capsule signing
  • Driving a capsule update signed with own keys failed initially
  • NVIDIA’s documentation describes how to sign, but this presumes you are using the default key
  • When provisioning your own key, small piece of information buried in documentation - generate capsule directory README under the pks7signed directory at Linux_for_Tegra/generate_capsule/Pkcs7Sign/Readme.md
  • EDK2_nvidia has jetson specific files with variable which has root key embedded.
  • See modifications in forked tegra demo distro here: https://github.com/Lexmark-chad/tegra-demo-distro/commit/309a00b0142263817bd36adbbaedaf525708a951
  • Using instructions in the readme, created a patch and patched over the edk2 source.
  • UEFI provides utilities to run against the keys and generate the associated modifications in the patch.
• Noticed odd things in tegra demo distro on kirkstone for Orin NX and demo-image-base
  • Trying to test capsule updates
  • No drivers are loaded, nothing in lsmod.
  • Will open a discussion about this.
• Docker support on dunfell
  • See https://github.com/OE4T/tegra-demo-distro/issues/277
  • Suggested way to resolve using https://git.yoctoproject.org/meta-lts-mixins/
  • Don’t plan to pursue this further, will attempt to bring in docker changes to kirkstone-l4t branches for glibc mismatch.
• Plans for support of Xavier after Jetpack 6
  • Discussion about desire to support both Orin and Xavier product on the same development branch, wondering if it would be possible to have a branch with JP5 and 6 side by side.
  • Related discussion about sharing L4T releases on a branch at https://github.com/OE4T/meta-tegra/wiki/OE4T-Meeting-Notes-2022-03-10
• Digsigserver latest status
  • See pull request in https://github.com/madisongh/digsigserver/pull/19
  • Adding Dockerfies to codify work required to deploy on different L4T releases.
  • Adding scripts to help build a dockerfile which will work across specific L4T releases
• Intention to support kernel driver for open source GPU on x86
  • meta-tegra-holoscan does have recipe for open kernel modules for dGPU but only on ARM nothing for x86.