push sheeet

pkgs/misc/uboot/binman-resources.patch

@@ -0,0 +1,72 @@
+(Patch from https://lists.denx.de/pipermail/u-boot/2024-July/559077.html)
+
+
+pkg_resources is deprecated long ago and being removed in python 3.12.
+
+Reimplement functions with importlib.resources.
+
+Link: https://docs.python.org/3/library/importlib.resources.html
+Signed-off-by: Jiaxun Yang <jiaxun.yang at flygoat.com>
+---
+ tools/binman/control.py | 18 +++++++++---------
+ 1 file changed, 9 insertions(+), 9 deletions(-)
+
+diff --git a/tools/binman/control.py b/tools/binman/control.py
+index 2f00279232b8..5549b0ad2185 100644
+--- a/tools/binman/control.py
++++ b/tools/binman/control.py
+@@ -8,12 +8,11 @@
+ from collections import OrderedDict
+ import glob
+ try:
+-    import importlib.resources
+-except ImportError:  # pragma: no cover
++    from importlib import resources
++except ImportError:
+     # for Python 3.6
+-    import importlib_resources
++    import importlib_resources as resources
+ import os
+-import pkg_resources
+ import re
+ 
+ import sys
+@@ -96,12 +95,12 @@ def _ReadMissingBlobHelp():
+             msg = ''
+         return tag, msg
+ 
+-    my_data = pkg_resources.resource_string(__name__, 'missing-blob-help')
++    my_data = resources.files(__package__).joinpath('missing-blob-help').read_text()
+     re_tag = re.compile('^([-a-z0-9]+):$')
+     result = {}
+     tag = None
+     msg = ''
+-    for line in my_data.decode('utf-8').splitlines():
++    for line in my_data.splitlines():
+         if not line.startswith('#'):
+             m_tag = re_tag.match(line)
+             if m_tag:
+@@ -151,8 +150,9 @@ def GetEntryModules(include_testing=True):
+     Returns:
+         Set of paths to entry class filenames
+     """
+-    glob_list = pkg_resources.resource_listdir(__name__, 'etype')
+-    glob_list = [fname for fname in glob_list if fname.endswith('.py')]
++    directory = resources.files("binman.etype")
++    glob_list = [entry.name for entry in directory.iterdir()
++                 if entry.name.endswith('.py')]
+     return set([os.path.splitext(os.path.basename(item))[0]
+                 for item in glob_list
+                 if include_testing or '_testing' not in item])
+@@ -735,7 +735,7 @@ def Binman(args):
+     global state
+ 
+     if args.full_help:
+-        with importlib.resources.path('binman', 'README.rst') as readme:
++        with resources.path('binman', 'README.rst') as readme:
+             tools.print_full_help(str(readme))
+         return 0
+ 
+
+-- 
+2.45.2

pkgs/misc/uboot/default.nix

@@ -0,0 +1,888 @@
+{
+  stdenv,
+  lib,
+  bc,
+  bison,
+  dtc,
+  fetchFromGitHub,
+  fetchpatch,
+  fetchurl,
+  flex,
+  gnutls,
+  installShellFiles,
+  libuuid,
+  meson-tools,
+  ncurses,
+  openssl,
+  rkbin,
+  swig,
+  which,
+  python3,
+  perl,
+  armTrustedFirmwareAllwinner,
+  armTrustedFirmwareAllwinnerH6,
+  armTrustedFirmwareAllwinnerH616,
+  armTrustedFirmwareRK3328,
+  armTrustedFirmwareRK3399,
+  armTrustedFirmwareRK3568,
+  armTrustedFirmwareRK3588,
+  armTrustedFirmwareS905,
+  opensbi,
+  buildPackages,
+  callPackages,
+  darwin,
+}@pkgs:
+
+let
+  defaultVersion = "2025.07";
+  defaultSrc = fetchurl {
+    url = "https://ftp.denx.de/pub/u-boot/u-boot-${defaultVersion}.tar.bz2";
+    hash = "sha256-D5M/bFpCaJW/MG6T5qxTxghw5LVM2lbZUhG+yZ5jvsc=";
+  };
+
+  # Dependencies for the tools need to be included as either native or cross,
+  # depending on which we're building
+  toolsDeps = [
+    ncurses # tools/kwboot
+    libuuid # tools/mkeficapsule
+    gnutls # tools/mkeficapsule
+    openssl # tools/mkimage and tools/env/fw_printenv
+  ];
+
+  buildUBoot = lib.makeOverridable (
+    {
+      version ? null,
+      src ? null,
+      filesToInstall,
+      pythonScriptsToInstall ? { },
+      installDir ? "$out",
+      defconfig,
+      extraConfig ? "",
+      extraPatches ? [ ],
+      extraMakeFlags ? [ ],
+      extraMeta ? { },
+      crossTools ? false,
+      stdenv ? pkgs.stdenv,
+      ...
+    }@args:
+    stdenv.mkDerivation (
+      {
+        pname = "uboot-${defconfig}";
+
+        version = if src == null then defaultVersion else version;
+
+        src = if src == null then defaultSrc else src;
+
+        patches = extraPatches;
+
+        postPatch = ''
+          ${lib.concatMapStrings (script: ''
+            substituteInPlace ${script} \
+            --replace "#!/usr/bin/env python3" "#!${pythonScriptsToInstall.${script}}/bin/python3"
+          '') (builtins.attrNames pythonScriptsToInstall)}
+          patchShebangs tools
+          patchShebangs scripts
+        '';
+
+        nativeBuildInputs = [
+          ncurses # tools/kwboot
+          bc
+          bison
+          flex
+          installShellFiles
+          (buildPackages.python3.withPackages (p: [
+            p.libfdt
+            p.setuptools # for pkg_resources
+            p.pyelftools
+          ]))
+          swig
+          which # for scripts/dtc-version.sh
+          perl # for oid build (secureboot)
+        ]
+        ++ lib.optionals (!crossTools) toolsDeps
+        ++ lib.optionals stdenv.buildPlatform.isDarwin [ darwin.DarwinTools ]; # sw_vers command is needed on darwin
+        depsBuildBuild = [ buildPackages.gccStdenv.cc ]; # gccStdenv is needed for Darwin buildPlatform
+        buildInputs = lib.optionals crossTools toolsDeps;
+
+        hardeningDisable = [ "all" ];
+
+        enableParallelBuilding = true;
+
+        makeFlags = [
+          "DTC=${lib.getExe buildPackages.dtc}"
+          "CROSS_COMPILE=${stdenv.cc.targetPrefix}"
+          "HOSTCFLAGS=-fcommon"
+        ]
+        ++ extraMakeFlags;
+
+        passAsFile = [ "extraConfig" ];
+
+        configurePhase = ''
+          runHook preConfigure
+
+          make -j$NIX_BUILD_CORES ${defconfig}
+
+          cat $extraConfigPath >> .config
+
+          runHook postConfigure
+        '';
+
+        installPhase = ''
+          runHook preInstall
+
+          mkdir -p ${installDir}
+          cp ${
+            lib.concatStringsSep " " (filesToInstall ++ builtins.attrNames pythonScriptsToInstall)
+          } ${installDir}
+
+          mkdir -p "$out/nix-support"
+          ${lib.concatMapStrings (file: ''
+            echo "file binary-dist ${installDir}/${baseNameOf file}" >> "$out/nix-support/hydra-build-products"
+          '') (filesToInstall ++ builtins.attrNames pythonScriptsToInstall)}
+
+          runHook postInstall
+        '';
+
+        dontStrip = true;
+
+        meta =
+          with lib;
+          {
+            homepage = "https://www.denx.de/wiki/U-Boot/";
+            description = "Boot loader for embedded systems";
+            license = licenses.gpl2Plus;
+            maintainers = with maintainers; [
+              dezgeg
+              lopsided98
+            ];
+          }
+          // extraMeta;
+      }
+      // removeAttrs args [
+        "extraMeta"
+        "pythonScriptsToInstall"
+      ]
+    )
+  );
+in
+{
+  inherit buildUBoot;
+
+  ubootTools = buildUBoot {
+    defconfig = "tools-only_defconfig";
+    installDir = "$out/bin";
+    hardeningDisable = [ ];
+    dontStrip = false;
+    extraMeta.platforms = lib.platforms.linux;
+
+    crossTools = true;
+    extraMakeFlags = [
+      "HOST_TOOLS_ALL=y"
+      "NO_SDL=1"
+      "cross_tools"
+      "envtools"
+    ];
+
+    outputs = [
+      "out"
+      "man"
+    ];
+
+    postInstall = ''
+      installManPage doc/*.1
+
+      # from u-boot's tools/env/README:
+      # "You should then create a symlink from fw_setenv to fw_printenv. They
+      # use the same program and its function depends on its basename."
+      ln -s $out/bin/fw_printenv $out/bin/fw_setenv
+    '';
+
+    filesToInstall = [
+      "tools/dumpimage"
+      "tools/fdt_add_pubkey"
+      "tools/fdtgrep"
+      "tools/kwboot"
+      "tools/mkeficapsule"
+      "tools/mkenvimage"
+      "tools/mkimage"
+      "tools/env/fw_printenv"
+      "tools/mkeficapsule"
+    ];
+
+    pythonScriptsToInstall = {
+      "tools/efivar.py" = (python3.withPackages (ps: [ ps.pyopenssl ]));
+    };
+  };
+
+  ubootPythonTools = lib.recurseIntoAttrs (callPackages ./python.nix { });
+
+  ubootA20OlinuxinoLime = buildUBoot {
+    defconfig = "A20-OLinuXino-Lime_defconfig";
+    extraMeta.platforms = [ "armv7l-linux" ];
+    filesToInstall = [ "u-boot-sunxi-with-spl.bin" ];
+  };
+
+  ubootA20OlinuxinoLime2EMMC = buildUBoot {
+    defconfig = "A20-OLinuXino-Lime2-eMMC_defconfig";
+    extraMeta.platforms = [ "armv7l-linux" ];
+    filesToInstall = [ "u-boot-sunxi-with-spl.bin" ];
+  };
+
+  ubootAmx335xEVM = buildUBoot {
+    defconfig = "am335x_evm_defconfig";
+    extraMeta = {
+      platforms = [ "armv7l-linux" ];
+      broken = true; # too big, exceeds memory size
+    };
+    filesToInstall = [
+      "MLO"
+      "u-boot.img"
+    ];
+  };
+
+  ubootBananaPi = buildUBoot {
+    defconfig = "Bananapi_defconfig";
+    extraMeta.platforms = [ "armv7l-linux" ];
+    filesToInstall = [ "u-boot-sunxi-with-spl.bin" ];
+  };
+
+  ubootBananaPim2Zero = buildUBoot {
+    defconfig = "bananapi_m2_zero_defconfig";
+    filesToInstall = [ "u-boot-sunxi-with-spl.bin" ];
+    extraMeta.platforms = [ "armv7l-linux" ];
+  };
+
+  ubootBananaPim3 = buildUBoot {
+    defconfig = "Sinovoip_BPI_M3_defconfig";
+    extraMeta.platforms = [ "armv7l-linux" ];
+    filesToInstall = [ "u-boot-sunxi-with-spl.bin" ];
+  };
+
+  ubootBananaPim64 = buildUBoot {
+    defconfig = "bananapi_m64_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    BL31 = "${armTrustedFirmwareAllwinner}/bl31.bin";
+    SCP = "/dev/null";
+    filesToInstall = [ "u-boot-sunxi-with-spl.bin" ];
+  };
+
+  # http://git.denx.de/?p=u-boot.git;a=blob;f=board/solidrun/clearfog/README;hb=refs/heads/master
+  ubootClearfog = buildUBoot {
+    defconfig = "clearfog_defconfig";
+    extraMeta.platforms = [ "armv7l-linux" ];
+    filesToInstall = [ "u-boot-with-spl.kwb" ];
+  };
+
+  ubootCM3588NAS = buildUBoot {
+    defconfig = "cm3588-nas-rk3588_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    BL31 = "${armTrustedFirmwareRK3588}/bl31.elf";
+    ROCKCHIP_TPL = rkbin.TPL_RK3588;
+    filesToInstall = [
+      "u-boot.itb"
+      "idbloader.img"
+      "u-boot-rockchip.bin"
+    ];
+  };
+
+  ubootCubieboard2 = buildUBoot {
+    defconfig = "Cubieboard2_defconfig";
+    extraMeta.platforms = [ "armv7l-linux" ];
+    filesToInstall = [ "u-boot-sunxi-with-spl.bin" ];
+  };
+
+  ubootGuruplug = buildUBoot {
+    defconfig = "guruplug_defconfig";
+    extraMeta.platforms = [ "armv5tel-linux" ];
+    filesToInstall = [ "u-boot.bin" ];
+  };
+
+  ubootJetsonTK1 = buildUBoot {
+    defconfig = "jetson-tk1_defconfig";
+    extraMeta.platforms = [ "armv7l-linux" ];
+    filesToInstall = [
+      "u-boot"
+      "u-boot.dtb"
+      "u-boot-dtb-tegra.bin"
+      "u-boot-nodtb-tegra.bin"
+    ];
+    # tegra-uboot-flasher expects this exact directory layout, sigh...
+    postInstall = ''
+      mkdir -p $out/spl
+      cp spl/u-boot-spl $out/spl/
+    '';
+  };
+
+  # Flashing instructions:
+  # dd if=u-boot.gxl.sd.bin of=<sdcard> conv=fsync,notrunc bs=512 skip=1 seek=1
+  # dd if=u-boot.gxl.sd.bin of=<sdcard> conv=fsync,notrunc bs=1 count=444
+  ubootLibreTechCC =
+    let
+      firmwareImagePkg = fetchFromGitHub {
+        owner = "LibreELEC";
+        repo = "amlogic-boot-fip";
+        rev = "4369a138ca24c5ab932b8cbd1af4504570b709df";
+        sha256 = "sha256-mGRUwdh3nW4gBwWIYHJGjzkezHxABwcwk/1gVRis7Tc=";
+        meta.license = lib.licenses.unfreeRedistributableFirmware;
+      };
+    in
+    buildUBoot {
+      defconfig = "libretech-cc_defconfig";
+      extraMeta = {
+        broken = stdenv.buildPlatform.system != "x86_64-linux"; # aml_encrypt_gxl is a x86_64 binary
+        platforms = [ "aarch64-linux" ];
+      };
+      filesToInstall = [ "u-boot.bin" ];
+      postBuild = ''
+        # Copy binary files & tools from LibreELEC/amlogic-boot-fip, and u-boot build to working dir
+        mkdir $out tmp
+        cp ${firmwareImagePkg}/lepotato/{acs.bin,bl2.bin,bl21.bin,bl30.bin,bl301.bin,bl31.img} \
+           ${firmwareImagePkg}/lepotato/{acs_tool.py,aml_encrypt_gxl,blx_fix.sh} \
+           u-boot.bin tmp/
+        cd tmp
+        python3 acs_tool.py bl2.bin bl2_acs.bin acs.bin 0
+
+        bash -e blx_fix.sh bl2_acs.bin zero bl2_zero.bin bl21.bin bl21_zero.bin bl2_new.bin bl2
+        [ -f zero ] && rm zero
+
+        bash -e blx_fix.sh bl30.bin zero bl30_zero.bin bl301.bin bl301_zero.bin bl30_new.bin bl30
+        [ -f zero ] && rm zero
+
+        ./aml_encrypt_gxl --bl2sig --input bl2_new.bin --output bl2.n.bin.sig
+        ./aml_encrypt_gxl --bl3enc --input bl30_new.bin --output bl30_new.bin.enc
+        ./aml_encrypt_gxl --bl3enc --input bl31.img --output bl31.img.enc
+        ./aml_encrypt_gxl --bl3enc --input u-boot.bin --output bl33.bin.enc
+        ./aml_encrypt_gxl --bootmk --output $out/u-boot.gxl \
+          --bl2 bl2.n.bin.sig --bl30 bl30_new.bin.enc --bl31 bl31.img.enc --bl33 bl33.bin.enc
+      '';
+    };
+
+  ubootNanoPCT4 = buildUBoot rec {
+    rkbin = fetchFromGitHub {
+      owner = "armbian";
+      repo = "rkbin";
+      rev = "3bd0321cae5ef881a6005fb470009ad5a5d1462d";
+      sha256 = "09r4dzxsbs3pff4sh70qnyp30s3rc7pkc46v1m3152s7jqjasp31";
+    };
+
+    defconfig = "nanopc-t4-rk3399_defconfig";
+
+    extraMeta = {
+      platforms = [ "aarch64-linux" ];
+      license = lib.licenses.unfreeRedistributableFirmware;
+    };
+    BL31 = "${armTrustedFirmwareRK3399}/bl31.elf";
+    filesToInstall = [
+      "u-boot.itb"
+      "idbloader.img"
+    ];
+    postBuild = ''
+      ./tools/mkimage -n rk3399 -T rksd -d ${rkbin}/rk33/rk3399_ddr_800MHz_v1.24.bin idbloader.img
+      cat ${rkbin}/rk33/rk3399_miniloader_v1.19.bin >> idbloader.img
+    '';
+  };
+
+  ubootNanoPCT6 = buildUBoot {
+    defconfig = "nanopc-t6-rk3588_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    BL31 = "${armTrustedFirmwareRK3588}/bl31.elf";
+    ROCKCHIP_TPL = rkbin.TPL_RK3588;
+    filesToInstall = [
+      "u-boot.itb"
+      "idbloader.img"
+      "u-boot-rockchip.bin"
+      "u-boot-rockchip-spi.bin"
+    ];
+  };
+
+  ubootNovena = buildUBoot {
+    defconfig = "novena_defconfig";
+    extraMeta.platforms = [ "armv7l-linux" ];
+    filesToInstall = [
+      "u-boot-dtb.img"
+      "SPL"
+    ];
+  };
+
+  # Flashing instructions:
+  # dd if=bl1.bin.hardkernel of=<device> conv=fsync bs=1 count=442
+  # dd if=bl1.bin.hardkernel of=<device> conv=fsync bs=512 skip=1 seek=1
+  # dd if=u-boot.gxbb of=<device> conv=fsync bs=512 seek=97
+  ubootOdroidC2 =
+    let
+      firmwareBlobs = fetchFromGitHub {
+        owner = "armbian";
+        repo = "odroidc2-blobs";
+        rev = "47c5aac4bcac6f067cebe76e41fb9924d45b429c";
+        sha256 = "1ns0a130yxnxysia8c3q2fgyjp9k0nkr689dxk88qh2vnibgchnp";
+        meta.license = lib.licenses.unfreeRedistributableFirmware;
+      };
+    in
+    buildUBoot {
+      defconfig = "odroid-c2_defconfig";
+      extraMeta.platforms = [ "aarch64-linux" ];
+      filesToInstall = [
+        "u-boot.bin"
+        "u-boot.gxbb"
+        "${firmwareBlobs}/bl1.bin.hardkernel"
+      ];
+      postBuild = ''
+        # BL301 image needs at least 64 bytes of padding after it to place
+        # signing headers (with amlbootsig)
+        truncate -s 64 bl301.padding.bin
+        cat '${firmwareBlobs}/gxb/bl301.bin' bl301.padding.bin > bl301.padded.bin
+        # The downstream fip_create tool adds a custom TOC entry with UUID
+        # AABBCCDD-ABCD-EFEF-ABCD-12345678ABCD for the BL301 image. It turns out
+        # that the firmware blob does not actually care about UUIDs, only the
+        # order the images appear in the file. Because fiptool does not know
+        # about the BL301 UUID, we would have to use the --blob option, which adds
+        # the image to the end of the file, causing the boot to fail. Instead, we
+        # take advantage of the fact that UUIDs are ignored and just put the
+        # images in the right order with the wrong UUIDs. In the command below,
+        # --tb-fw is really --scp-fw and --scp-fw is the BL301 image.
+        #
+        # See https://github.com/afaerber/meson-tools/issues/3 for more
+        # information.
+        '${buildPackages.armTrustedFirmwareTools}/bin/fiptool' create \
+          --align 0x4000 \
+          --tb-fw '${firmwareBlobs}/gxb/bl30.bin' \
+          --scp-fw bl301.padded.bin \
+          --soc-fw '${armTrustedFirmwareS905}/bl31.bin' \
+          --nt-fw u-boot.bin \
+          fip.bin
+        cat '${firmwareBlobs}/gxb/bl2.package' fip.bin > boot_new.bin
+        '${buildPackages.meson-tools}/bin/amlbootsig' boot_new.bin u-boot.img
+        dd if=u-boot.img of=u-boot.gxbb bs=512 skip=96
+      '';
+    };
+
+  ubootOdroidXU3 = buildUBoot {
+    defconfig = "odroid-xu3_defconfig";
+    extraMeta.platforms = [ "armv7l-linux" ];
+    filesToInstall = [ "u-boot-dtb.bin" ];
+  };
+
+  ubootOlimexA64Olinuxino = buildUBoot {
+    defconfig = "a64-olinuxino-emmc_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    BL31 = "${armTrustedFirmwareAllwinner}/bl31.bin";
+    SCP = "/dev/null";
+    filesToInstall = [ "u-boot-sunxi-with-spl.bin" ];
+  };
+
+  ubootOlimexA64Teres1 = buildUBoot {
+    defconfig = "teres_i_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    BL31 = "${armTrustedFirmwareAllwinner}/bl31.bin";
+    # Using /dev/null here is upstream-specified way that disables the inclusion of crust-firmware as it's not yet packaged and without which the build will fail -- https://docs.u-boot.org/en/latest/board/allwinner/sunxi.html#building-the-crust-management-processor-firmware
+    SCP = "/dev/null";
+    filesToInstall = [ "u-boot-sunxi-with-spl.bin" ];
+  };
+
+  ubootOrangePi5 = buildUBoot {
+    defconfig = "orangepi-5-rk3588s_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    BL31 = "${armTrustedFirmwareRK3588}/bl31.elf";
+    ROCKCHIP_TPL = rkbin.TPL_RK3588;
+    filesToInstall = [
+      "u-boot.itb"
+      "idbloader.img"
+      "u-boot-rockchip.bin"
+      "u-boot-rockchip-spi.bin"
+    ];
+  };
+
+  ubootOrangePi5Max = buildUBoot {
+    defconfig = "orangepi-5-max-rk3588_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    BL31 = "${armTrustedFirmwareRK3588}/bl31.elf";
+    ROCKCHIP_TPL = rkbin.TPL_RK3588;
+    filesToInstall = [
+      "u-boot.itb"
+      "idbloader.img"
+      "u-boot-rockchip.bin"
+      "u-boot-rockchip-spi.bin"
+    ];
+  };
+
+  ubootOrangePi5Plus = buildUBoot {
+    defconfig = "orangepi-5-plus-rk3588_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    BL31 = "${armTrustedFirmwareRK3588}/bl31.elf";
+    ROCKCHIP_TPL = rkbin.TPL_RK3588;
+    filesToInstall = [
+      "u-boot.itb"
+      "idbloader.img"
+      "u-boot-rockchip.bin"
+      "u-boot-rockchip-spi.bin"
+    ];
+  };
+
+  ubootOrangePiPc = buildUBoot {
+    defconfig = "orangepi_pc_defconfig";
+    extraMeta.platforms = [ "armv7l-linux" ];
+    filesToInstall = [ "u-boot-sunxi-with-spl.bin" ];
+  };
+
+  ubootOrangePiZeroPlus2H5 = buildUBoot {
+    defconfig = "orangepi_zero_plus2_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    BL31 = "${armTrustedFirmwareAllwinner}/bl31.bin";
+    SCP = "/dev/null";
+    filesToInstall = [ "u-boot-sunxi-with-spl.bin" ];
+  };
+
+  ubootOrangePiZero = buildUBoot {
+    defconfig = "orangepi_zero_defconfig";
+    extraMeta.platforms = [ "armv7l-linux" ];
+    filesToInstall = [ "u-boot-sunxi-with-spl.bin" ];
+  };
+
+  ubootOrangePiZero2 = buildUBoot {
+    defconfig = "orangepi_zero2_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    BL31 = "${armTrustedFirmwareAllwinnerH616}/bl31.bin";
+    filesToInstall = [ "u-boot-sunxi-with-spl.bin" ];
+  };
+
+  ubootOrangePiZero3 = buildUBoot {
+    defconfig = "orangepi_zero3_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    # According to https://linux-sunxi.org/H616 the H618 "is a minor update with a larger (1MB) L2 cache" (compared to the H616)
+    # but "does require extra support in U-Boot, TF-A and sunxi-fel. Support for that has been merged in mainline releases."
+    # But no extra support seems to be in TF-A.
+    BL31 = "${armTrustedFirmwareAllwinnerH616}/bl31.bin";
+    filesToInstall = [ "u-boot-sunxi-with-spl.bin" ];
+  };
+
+  ubootOrangePi3 = buildUBoot {
+    defconfig = "orangepi_3_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    BL31 = "${armTrustedFirmwareAllwinnerH6}/bl31.bin";
+    SCP = "/dev/null";
+    filesToInstall = [ "u-boot-sunxi-with-spl.bin" ];
+  };
+
+  ubootOrangePi3B = buildUBoot {
+    defconfig = "orangepi-3b-rk3566_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    ROCKCHIP_TPL = rkbin.TPL_RK3568;
+    BL31 = rkbin.BL31_RK3568;
+    filesToInstall = [
+      "u-boot.itb"
+      "idbloader.img"
+      "u-boot-rockchip.bin"
+      "u-boot-rockchip-spi.bin"
+    ];
+  };
+
+  ubootPcduino3Nano = buildUBoot {
+    defconfig = "Linksprite_pcDuino3_Nano_defconfig";
+    extraMeta.platforms = [ "armv7l-linux" ];
+    filesToInstall = [ "u-boot-sunxi-with-spl.bin" ];
+  };
+
+  ubootPine64 = buildUBoot {
+    defconfig = "pine64_plus_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    BL31 = "${armTrustedFirmwareAllwinner}/bl31.bin";
+    SCP = "/dev/null";
+    filesToInstall = [ "u-boot-sunxi-with-spl.bin" ];
+  };
+
+  ubootPine64LTS = buildUBoot {
+    defconfig = "pine64-lts_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    BL31 = "${armTrustedFirmwareAllwinner}/bl31.bin";
+    SCP = "/dev/null";
+    filesToInstall = [ "u-boot-sunxi-with-spl.bin" ];
+  };
+
+  ubootPinebook = buildUBoot {
+    defconfig = "pinebook_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    BL31 = "${armTrustedFirmwareAllwinner}/bl31.bin";
+    SCP = "/dev/null";
+    filesToInstall = [ "u-boot-sunxi-with-spl.bin" ];
+  };
+
+  ubootPinebookPro = buildUBoot {
+    defconfig = "pinebook-pro-rk3399_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    BL31 = "${armTrustedFirmwareRK3399}/bl31.elf";
+    filesToInstall = [
+      "u-boot.itb"
+      "idbloader.img"
+    ];
+  };
+
+  ubootQemuAarch64 = buildUBoot {
+    defconfig = "qemu_arm64_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    filesToInstall = [ "u-boot.bin" ];
+  };
+
+  ubootQemuArm = buildUBoot {
+    defconfig = "qemu_arm_defconfig";
+    extraMeta.platforms = [ "armv7l-linux" ];
+    filesToInstall = [ "u-boot.bin" ];
+  };
+
+  ubootQemuRiscv64Smode = buildUBoot {
+    defconfig = "qemu-riscv64_smode_defconfig";
+    extraMeta.platforms = [ "riscv64-linux" ];
+    filesToInstall = [ "u-boot.bin" ];
+  };
+
+  ubootQemuX86 = buildUBoot {
+    defconfig = "qemu-x86_defconfig";
+    extraConfig = ''
+      CONFIG_USB_UHCI_HCD=y
+      CONFIG_USB_EHCI_HCD=y
+      CONFIG_USB_EHCI_GENERIC=y
+      CONFIG_USB_XHCI_HCD=y
+    '';
+    extraMeta.platforms = [
+      "i686-linux"
+      "x86_64-linux"
+    ];
+    filesToInstall = [ "u-boot.rom" ];
+  };
+
+  ubootQemuX86_64 = buildUBoot {
+    defconfig = "qemu-x86_64_defconfig";
+    extraConfig = ''
+      CONFIG_USB_UHCI_HCD=y
+      CONFIG_USB_EHCI_HCD=y
+      CONFIG_USB_EHCI_GENERIC=y
+      CONFIG_USB_XHCI_HCD=y
+    '';
+    extraMeta.platforms = [ "x86_64-linux" ];
+    filesToInstall = [ "u-boot.rom" ];
+  };
+
+  ubootQuartz64B = buildUBoot {
+    defconfig = "quartz64-b-rk3566_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    BL31 = "${armTrustedFirmwareRK3568}/bl31.elf";
+    ROCKCHIP_TPL = rkbin.TPL_RK3566;
+    filesToInstall = [
+      "idbloader.img"
+      "idbloader-spi.img"
+      "u-boot.itb"
+      "u-boot-rockchip.bin"
+      "u-boot-rockchip-spi.bin"
+    ];
+  };
+
+  ubootRadxaZero3W = buildUBoot {
+    defconfig = "radxa-zero-3-rk3566_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    BL31 = "${armTrustedFirmwareRK3568}/bl31.elf";
+    ROCKCHIP_TPL = rkbin.TPL_RK3566;
+    filesToInstall = [
+      "idbloader.img"
+      "u-boot.itb"
+      "u-boot-rockchip.bin"
+    ];
+  };
+
+  ubootRaspberryPi = buildUBoot {
+    defconfig = "rpi_defconfig";
+    extraMeta.platforms = [ "armv6l-linux" ];
+    filesToInstall = [ "u-boot.bin" ];
+  };
+
+  ubootRaspberryPi2 = buildUBoot {
+    defconfig = "rpi_2_defconfig";
+    extraMeta.platforms = [ "armv7l-linux" ];
+    filesToInstall = [ "u-boot.bin" ];
+  };
+
+  ubootRaspberryPi3_32bit = buildUBoot {
+    defconfig = "rpi_3_32b_defconfig";
+    extraMeta.platforms = [ "armv7l-linux" ];
+    filesToInstall = [ "u-boot.bin" ];
+  };
+
+  ubootRaspberryPi3_64bit = buildUBoot {
+    defconfig = "rpi_3_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    filesToInstall = [ "u-boot.bin" ];
+  };
+
+  ubootRaspberryPi4_32bit = buildUBoot {
+    defconfig = "rpi_4_32b_defconfig";
+    extraMeta.platforms = [ "armv7l-linux" ];
+    filesToInstall = [ "u-boot.bin" ];
+  };
+
+  ubootRaspberryPi4_64bit = buildUBoot {
+    defconfig = "rpi_4_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    filesToInstall = [ "u-boot.bin" ];
+  };
+
+  ubootRaspberryPiZero = buildUBoot {
+    defconfig = "rpi_0_w_defconfig";
+    extraMeta.platforms = [ "armv6l-linux" ];
+    filesToInstall = [ "u-boot.bin" ];
+  };
+
+  ubootRock4CPlus = buildUBoot {
+    defconfig = "rock-4c-plus-rk3399_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    BL31 = "${armTrustedFirmwareRK3399}/bl31.elf";
+    filesToInstall = [
+      "u-boot.itb"
+      "idbloader.img"
+    ];
+  };
+
+  ubootRock5ModelB = buildUBoot {
+    defconfig = "rock5b-rk3588_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    BL31 = "${armTrustedFirmwareRK3588}/bl31.elf";
+    ROCKCHIP_TPL = rkbin.TPL_RK3588;
+    filesToInstall = [
+      "u-boot.itb"
+      "idbloader.img"
+      "u-boot-rockchip.bin"
+      "u-boot-rockchip-spi.bin"
+    ];
+  };
+
+  ubootRock64 = buildUBoot {
+    defconfig = "rock64-rk3328_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    BL31 = "${armTrustedFirmwareRK3328}/bl31.elf";
+    filesToInstall = [
+      "u-boot.itb"
+      "idbloader.img"
+      "u-boot-rockchip.bin"
+    ];
+  };
+
+  # A special build with much lower memory frequency (666 vs 1600 MT/s) which
+  # makes ROCK64 V2 boards stable. This is necessary because the DDR3 routing
+  # on that revision is marginal and not unconditionally stable at the specified
+  # frequency. If your ROCK64 is unstable you can try this u-boot variant to
+  # see if it works better for you. The only disadvantage is lowered memory
+  # bandwidth.
+  ubootRock64v2 = buildUBoot {
+    prePatch = ''
+      substituteInPlace arch/arm/dts/rk3328-rock64-u-boot.dtsi \
+        --replace rk3328-sdram-lpddr3-1600.dtsi rk3328-sdram-lpddr3-666.dtsi
+    '';
+    defconfig = "rock64-rk3328_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    BL31 = "${armTrustedFirmwareRK3328}/bl31.elf";
+    filesToInstall = [
+      "u-boot.itb"
+      "idbloader.img"
+      "u-boot-rockchip.bin"
+    ];
+  };
+
+  ubootRockPiE = buildUBoot {
+    defconfig = "rock-pi-e-rk3328_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    BL31 = "${armTrustedFirmwareRK3328}/bl31.elf";
+    filesToInstall = [
+      "u-boot.itb"
+      "idbloader.img"
+      "u-boot-rockchip.bin"
+    ];
+  };
+
+  ubootRockPro64 = buildUBoot {
+    defconfig = "rockpro64-rk3399_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    BL31 = "${armTrustedFirmwareRK3399}/bl31.elf";
+    filesToInstall = [
+      "u-boot.itb"
+      "idbloader.img"
+    ];
+  };
+
+  ubootROCPCRK3399 = buildUBoot {
+    defconfig = "roc-pc-rk3399_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    filesToInstall = [
+      "spl/u-boot-spl.bin"
+      "u-boot.itb"
+      "idbloader.img"
+    ];
+    BL31 = "${armTrustedFirmwareRK3399}/bl31.elf";
+  };
+
+  ubootSheevaplug = buildUBoot {
+    defconfig = "sheevaplug_defconfig";
+    extraMeta = {
+      platforms = [ "armv5tel-linux" ];
+      broken = true; # too big, exceeds partition size
+    };
+    filesToInstall = [ "u-boot.kwb" ];
+  };
+
+  ubootSopine = buildUBoot {
+    defconfig = "sopine_baseboard_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    BL31 = "${armTrustedFirmwareAllwinner}/bl31.bin";
+    SCP = "/dev/null";
+    filesToInstall = [ "u-boot-sunxi-with-spl.bin" ];
+  };
+
+  ubootTuringRK1 = buildUBoot {
+    defconfig = "turing-rk1-rk3588_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    BL31 = "${armTrustedFirmwareRK3588}/bl31.elf";
+    ROCKCHIP_TPL = rkbin.TPL_RK3588;
+    filesToInstall = [
+      "u-boot.itb"
+      "idbloader.img"
+      "u-boot-rockchip.bin"
+    ];
+  };
+
+  ubootUtilite = buildUBoot {
+    defconfig = "cm_fx6_defconfig";
+    extraMeta.platforms = [ "armv7l-linux" ];
+    filesToInstall = [ "u-boot-with-nand-spl.imx" ];
+    buildFlags = [ "u-boot-with-nand-spl.imx" ];
+    extraConfig = ''
+      CONFIG_CMD_SETEXPR=y
+    '';
+    # sata init; load sata 0 $loadaddr u-boot-with-nand-spl.imx
+    # sf probe; sf update $loadaddr 0 80000
+  };
+
+  ubootVisionFive2 = buildUBoot {
+    defconfig = "starfive_visionfive2_defconfig";
+    extraMeta.platforms = [ "riscv64-linux" ];
+    OPENSBI = "${opensbi}/share/opensbi/lp64/generic/firmware/fw_dynamic.bin";
+    filesToInstall = [
+      "spl/u-boot-spl.bin.normal.out"
+      "u-boot.itb"
+    ];
+  };
+
+  ubootWandboard = buildUBoot {
+    defconfig = "wandboard_defconfig";
+    extraMeta.platforms = [ "armv7l-linux" ];
+    filesToInstall = [
+      "u-boot.img"
+      "SPL"
+    ];
+  };
+
+  ubootRockPi4 = buildUBoot {
+    defconfig = "rock-pi-4-rk3399_defconfig";
+    extraMeta.platforms = [ "aarch64-linux" ];
+    BL31 = "${armTrustedFirmwareRK3399}/bl31.elf";
+    filesToInstall = [
+      "u-boot.itb"
+      "idbloader.img"
+    ];
+  };
+}

pkgs/misc/uboot/python.nix

@@ -0,0 +1,160 @@
+{
+  lib,
+  python3Packages,
+  fetchPypi,
+  makeWrapper,
+
+  armTrustedFirmwareTools,
+  bzip2,
+  cbfstool,
+  gzip,
+  lz4,
+  lzop,
+  openssl,
+  ubootTools,
+  vboot_reference,
+  xilinx-bootgen,
+  xz,
+  zstd,
+}:
+
+let
+  # We are fetching from PyPI because the code in the repository seems to be
+  # lagging behind the PyPI releases somehow...
+  version = "0.0.7";
+in
+rec {
+
+  u_boot_pylib = python3Packages.buildPythonPackage rec {
+    pname = "u_boot_pylib";
+    inherit version;
+    pyproject = true;
+
+    src = fetchPypi {
+      inherit pname version;
+      hash = "sha256-A5r20Y8mgxhOhaKMpd5MJN5ubzPbkodAO0Tr0RN1SRA=";
+    };
+
+    build-system = with python3Packages; [
+      setuptools
+    ];
+
+    checkPhase = ''
+      ${python3Packages.python.interpreter} "src/$pname/__main__.py"
+      # There are some tests in other files, but they are broken
+    '';
+
+    pythonImportsCheck = [ "u_boot_pylib" ];
+  };
+
+  dtoc = python3Packages.buildPythonPackage rec {
+    pname = "dtoc";
+    inherit version;
+    pyproject = true;
+
+    src = fetchPypi {
+      inherit pname version;
+      hash = "sha256-NA96CznIxjqpw2Ik8AJpJkJ/ei+kQTCUExwFgssV+CM=";
+    };
+
+    build-system = with python3Packages; [
+      setuptools
+    ];
+
+    dependencies =
+      (with python3Packages; [
+        libfdt
+      ])
+      ++ [
+        u_boot_pylib
+      ];
+
+    pythonImportsCheck = [ "dtoc" ];
+  };
+
+  binman =
+    let
+      btools = [
+        armTrustedFirmwareTools
+        bzip2
+        cbfstool
+        # TODO: cst
+        gzip
+        lz4
+        # TODO: lzma_alone
+        lzop
+        openssl
+        ubootTools
+        vboot_reference
+        xilinx-bootgen
+        xz
+        zstd
+      ];
+    in
+    python3Packages.buildPythonApplication rec {
+      pname = "binary_manager";
+      inherit version;
+      pyproject = true;
+
+      src = fetchPypi {
+        inherit pname version;
+        hash = "sha256-llEBBhUoW5jTEQeoaTCjZN8y6Kj+PGNUSB3cKpgD06w=";
+      };
+
+      patches = [
+        ./binman-resources.patch
+      ];
+      patchFlags = [
+        "-p2"
+        "-d"
+        "src"
+      ];
+
+      build-system = with python3Packages; [
+        setuptools
+      ];
+
+      nativeBuildInputs = [ makeWrapper ];
+
+      dependencies =
+        (with python3Packages; [
+          jsonschema
+          pycryptodomex
+          pyelftools
+          yamllint
+        ])
+        ++ [
+          dtoc
+          u_boot_pylib
+        ];
+
+      preFixup = ''
+        wrapProgram "$out/bin/binman" --prefix PATH : "${lib.makeBinPath btools}"
+      '';
+    };
+
+  patman = python3Packages.buildPythonApplication rec {
+    pname = "patch_manager";
+    inherit version;
+    pyproject = true;
+
+    src = fetchPypi {
+      inherit pname version;
+      hash = "sha256-zD9e87fpWKynpUcfxobbdk6wbM6Ja3f8hEVHS7DGIKQ=";
+    };
+
+    build-system = with python3Packages; [
+      setuptools
+    ];
+
+    dependencies =
+      (with python3Packages; [
+        aiohttp
+        pygit2
+      ])
+      ++ [
+        u_boot_pylib
+      ];
+  };
+
+}