Hi NVIDIA Community,
I’m working on enabling disk encryption for a Jetson Orin NX 16GB with a 512GB SSD, using JetPack 6.2 (R36.4.3). I followed the NVIDIA Jetson Linux Developer Guide for disk encryption (Disk Encryption — NVIDIA Jetson Linux Developer Guide 1 documentation ) and used the following process to generate an encrypted image for an NVMe SSD. However, I’m encountering an issue where the process fails when setting the rootfs size to 60GB but succeeds at 16GB. I suspect there’s a size limitation somewhere in the configuration or tools.
Extract Jetson Linux and Root Filesystem :
tar -xvf Jetson_Linux_r36.4.3_aarch64.tbz2
cd Linux_for_Tegra/rootfs
sudo tar -xvf ../../Tegra_Linux_Sample-Root-Filesystem_r36.4.3_aarch64.tbz2
cd ..
Run Prerequisites and Apply Binaries :
sudo ./tools/l4t_flash_prerequisites.sh
sudo ./apply_binaries.sh
Copy Encryption Key :
Copied eks_t234.img to Linux_for_Tegra/bootloader/
Generate Internal Image (No Flash) :
sudo BOARDID=3701 BOARDSKU=0000 ./tools/kernel_flash/l4t_initrd_flash.sh --network usb0 \
--showlogs -p "-c bootloader/generic/cfg/flash_t234_qspi_nvme.xml" \
--no-flash jetson-orin-nano-devkit-super-maxn-nvme internal
Generate Encrypted External Image (NVMe) :
sudo BOARDID=3701 BOARDSKU=0000 ROOTFS_ENC=1 ADDITIONAL_DTB_OVERLAY_OPT="BootOrderNvme.dtbo" \
./tools/kernel_flash/l4t_initrd_flash.sh --network usb0 \
--showlogs --no-flash --external-device nvme0n1p1 -S 60GiB \
-c ./tools/kernel_flash/flash_l4t_t234_nvme_rootfs_enc.xml \
--external-only --append -i ../sym2_t234.key -p "--generic-passphrase" \
--massflash 1 jetson-orin-nano-devkit-super-maxn-nvme external
The process fails with the following errors:
[ 4.8151 ] Assuming zero filled SBK key
[ 4.8164 ] Warning: pub_key.key is not found
[ 4.7939 ] tegrahost_v2 --chip 0x23 0 --updatesigheader mem_rcm_3_aligned_sigheader.bct.encrypt mem_rcm_3_aligned_sigheader.bct.hash zerosbk
[ 4.7949 ] Copying signatures
[ 4.7955 ] tegrahost_v2 --chip 0x23 0 --partitionlayout flash.xml.bin --updatesig images_list_signed.xml
[ 4.7967 ] tegraparser_v2 --generategpt --pt flash.xml.bin
[ 4.7973 ] End sector for APP_ENC, expected at: 119537630, actual: 0
Error: Return value 4
Command tegraparser_v2 --generategpt --pt flash.xml.bin
cp: cannot stat 'signed/*': No such file or directory
cp: cannot stat 'signed/flash.xml.tmp': No such file or directory
Using bpmp-dtb concatenated with odmdata in blob for t23x
./tegraflash.py --bl uefi_jetson_minimal_with_dtb_sigheader.bin.encrypt --bct br_bct_BR.bct --bldtb tegra234-p3768-0000+p3767-0000-nv-super.dtb --applet rcm_2_encrypt.rcm --applet_softfuse rcm_1_encrypt.rcm --cmd "secureflash;reboot" --cfg secureflash.xml --chip 0x23 --mb1_bct mb1_bct_MB1_sigheader.bct.encrypt --mem_bct mem_rcm_sigheader.bct.encrypt --mb1_cold_boot_bct mb1_cold_boot_bct_MB1_sigheader.bct.encrypt --mb1_bin mb1_t234_prod_aligned_sigheader.bin.encrypt --psc_bl1_bin psc_bl1_t234_prod_aligned_sigheader.bin.encrypt --mem_bct_cold_boot mem_coldboot_sigheader.bct.encrypt --bins "psc_fw pscfw_t234_prod_sigheader.bin.encrypt; mts_mce mce_flash_o10_cr_prod_sigheader.bin.encrypt; tsec_fw tsec_t234_sigheader.bin.encrypt; mb2_applet applet_t234_sigheader.bin.encrypt; mb2_bootloader mb2_t234_with_mb2_bct_MB2_sigheader.bin.encrypt; xusb_fw xusb_t234_prod_sigheader.bin.encrypt; pva_fw nvpva_020_sigheader.fw.encrypt; dce_fw display-t234-dce_sigheader.bin.encrypt; nvdec nvdec_t234_prod_sigheader.fw.encrypt; bpmp_fw bpmp_t234-TE980M-A1_prod_sigheader.bin.encrypt; bpmp_fw_dtb tegra234-bpmp-3767-0000-3768-super-maxn_with_odm_sigheader.dtb.encrypt; rce_fw camera-rtcpu-t234-rce_sigheader.img.encrypt; ape_fw adsp-fw_sigheader.bin.encrypt; spe_fw spe_t234_sigheader.bin.encrypt; tos tos-optee_t234_sigheader.img.encrypt; eks eks_t234_sigheader.img.encrypt"
saving flash command in flashcmd.txt
*** no-flash flag enabled. Exiting now... ***
User can run above saved command in factory environment without
providing pkc and sbk keys to flash a device
Example:
$ cd bootloader
$ sudo bash ./flashcmd.txt
Error: /home/minhvo/DATA/0.Secure_boot_ORIN/Linux_for_Tegra/bootloader/signed/flash.idx is not found
Error: failed to relocate images to /home/minhvo/DATA/0.Secure_boot_ORIN/Linux_for_Tegra/tools/kernel_flash/images
Cleaning up...
log.txt (39.8 KB)
Hardware : Jetson Orin NX 16GB with 512GB NVMe SSDSoftware : JetPack 6.2 (R36.4.3)Host : Ubuntu 20.04Configuration : Using sym2_t234.key for encryption, BootOrderNvme.dtbo for NVMe boot priority.
Is there a size limitation in the l4t_initrd_flash.sh tool or flash_l4t_t234_nvme_rootfs_enc.xml that causes the failure at 60GB?
Could the “Secureboot package” warning be related, and if so, how do I install it for a fused board?
Are there specific configurations in the board config file or XML layout that I need to adjust for larger rootfs sizes (e.g., 60GB)?
Any suggestions to debug the tegraparser_v2 error (End sector for APP_ENC, expected at: 119537630, actual: 0)?
I’ve ensured the Jetson is in recovery mode (lsusb | grep 0955:).
I’ve checked /dev/zero, /dev/null, and loop devices, and resolved previous losetup issues.
The SSD has 512GB capacity, so storage shouldn’t be an issue.
Any insights or suggestions to resolve this issue would be greatly appreciated! I’d like to use a > 60GB(~500GB) rootfs for my application.
hello user34150,
please see-also below for reference.$ sudo ./tools/kernel_flash/l4t_initrd_flash.sh --showlogs -p "-c bootloader/generic/cfg/flash_t234_qspi.xml" --no-flash --network usb0 jetson-orin-nano-devkit internal$ sudo ROOTFS_ENC=1 ./tools/kernel_flash/l4t_initrd_flash.sh --showlogs --no-flash --external-device nvme0n1p1 -i $KEY_PATH/sym2_t234.key -p "-T 500118192" -S 50GiB -c ./tools/kernel_flash/flash_l4t_t234_nvme_rootfs_enc.xml --external-only --append --network usb0 jetson-orin-nano-devkit external$ sudo ./tools/kernel_flash/l4t_initrd_flash.sh --showlogs --network usb0 --flash-only
minhvo@minhvo-gremsy:~/DATA/0.Secure_boot_ORIN/Linux_for_Tegra$ sudo fdisk -l /dev/sdc
Disk /dev/sdc: 476.96 GiB, 512110190592 bytes, 1000215216 sectors
Disk model: N845-M30W
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 33553920 bytes
Disklabel type: dos
Disk identifier: 0x8e9de921
What parameters should I set to flash the entire disk partition? Currently, as I haven’t calculated it yet, I plan to use 450GB.
please see-also developer guide, Layout of an Encrypted Disk .
1 Like
I have modified the file /Linux_for_Tegra/bootloader/generic/cfg/flash_t234_qspi_nvme.xml as follows:
<partition name="APP" id="1" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 419430400 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 0x808 </allocation_attribute>
<align_boundary> 16384 </align_boundary>
<percent_reserved> 0 </percent_reserved>
<unique_guid> APPUUID </unique_guid>
<filename> system_boot.img </filename>
<description> Boot partition </description>
</partition>
<partition name="APP_ENC" id="2" type="data" encrypted="true" reencrypt="false">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 483183820800 </size> <!-- 450GB = 450 * 1024 * 1024 * 1024 / 512 -->
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 0x8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<align_boundary> 16384 </align_boundary>
<unique_guid> APP_ENC_UUID </unique_guid>
<filename> system_root_encrypted.img </filename>
<description> Encrypted root partition </description>
</partition>
And modified the file /home/gremsy_soft/Documents/Linux_for_Tegra/p3768-0000-p3767-0000-super-maxn-nvme.conf as follows:
source "${LDK_DIR}/p3768-0000-p3767-0000-super-maxn.conf"
EMMC_CFG="flash_t234_qspi_nvme.xml";
+ disk_enc_enable=1;
if [ "${UPHYLANE}" = "c7x1" ]; then
UPHYLANE_CONFIG="tegra234-mb1-bct-uphylane-si-c7x1.dtsi";
EMMC_CFG="flash_t234_qspi_nvme_c7.xml";
elif [ "${UPHYLANE}" = "c7x2" ]; then
UPHYLANE_CONFIG="tegra234-mb1-bct-uphylane-si-c7x2.dtsi";
EMMC_CFG="flash_t234_qspi_nvme_c7.xml";
fi
I used the following command:
sudo ./tools/kernel_flash/l4t_initrd_flash.sh --showlogs -p "-c bootloader/generic/cfg/flash_t234_qspi_nvme.xml" --no-flash --network usb0 jetson-orin-nano-devkit-super-maxn-nvme internal
And encountered the following error:
[ 7.1981 ] tegrahost_v2 --chip 0x23 0 --updatesigheader mem_rcm_1_aligned_sigheader.bct.encrypt mem_rcm_1_aligned_sigheader.bct.hash zerosbk
[ 7.2017 ] Disabled BPMP dtb trim, using default dtb
[ 7.2018 ]
[ 7.2044 ] tegrahost_v2 --chip 0x23 0 --align mem_rcm_2_aligned.bct
[ 7.2091 ] tegrahost_v2 --chip 0x23 0 --magicid MEM2 --ratchet_blob ratchet_blob.bin --appendsigheader mem_rcm_2_aligned.bct zerosbk
[ 7.2113 ] adding BCH for mem_rcm_2_aligned.bct
[ 7.2183 ] tegrasign_v3.py --key None --list mem_rcm_2_aligned_sigheader.bct_list.xml --pubkeyhash pub_key.key --sha sha512
[ 7.2187 ] Assuming zero filled SBK key
[ 7.2226 ] Warning: pub_key.key is not found
[ 7.2246 ] tegrahost_v2 --chip 0x23 0 --updatesigheader mem_rcm_2_aligned_sigheader.bct.encrypt mem_rcm_2_aligned_sigheader.bct.hash zerosbk
[ 7.2284 ] Disabled BPMP dtb trim, using default dtb
[ 7.2284 ]
[ 7.2310 ] tegrahost_v2 --chip 0x23 0 --align mem_rcm_3_aligned.bct
[ 7.2356 ] tegrahost_v2 --chip 0x23 0 --magicid MEM3 --ratchet_blob ratchet_blob.bin --appendsigheader mem_rcm_3_aligned.bct zerosbk
[ 7.2377 ] adding BCH for mem_rcm_3_aligned.bct
[ 7.2449 ] tegrasign_v3.py --key None --list mem_rcm_3_aligned_sigheader.bct_list.xml --pubkeyhash pub_key.key --sha sha512
[ 7.2453 ] Assuming zero filled SBK key
[ 7.2493 ] Warning: pub_key.key is not found
[ 7.2513 ] tegrahost_v2 --chip 0x23 0 --updatesigheader mem_rcm_3_aligned_sigheader.bct.encrypt mem_rcm_2_aligned_sigheader.bct.hash zerosbk
[ 7.2551 ] Copying signatures
[ 7.2575 ] tegrahost_v2 --chip 0x23 0 --partitionlayout flash.xml.bin --updatesig images_list_signed.xml
[ 7.3278 ] tegraparser_v2 --generategpt --pt flash.xml.bin
[ 7.3296 ] gpt_secondary_3_0.bin:
[ 7.3303 ] partition_id partition_name StartingLba EndingLba
[ 7.3304 ] 1 BCT 0 2047
[ 7.3306 ] 2 A_mb1 2048 3071
[ 7.3307 ] 3 A_psc_bl1 3072 3583
[ 7.3308 ] 4 A_MB1_BCT 3584 3839
[ 7.3309 ] 5 A_MEM_BCT 3840 4351
[ 7.3310 ] 6 A_tsec-fw 4352 6399
[ 7.3312 ] 7 A_nvdec 6400 8447
[ 7.3313 ] 8 A_mb2 8448 9471
[ 7.3314 ] 9 A_xusb-fw 9472 9983
[ 7.3315 ] 10 A_bpmp-fw 9984 13055
[ 7.3316 ] 11 A_bpmp-fw-dtb 13056 21247
[ 7.3318 ] 12 A_psc-fw 21248 22783
[ 7.3319 ] 13 A_mts-mce 22784 23807
[ 7.3320 ] 14 A_sc7 23808 24191
[ 7.3321 ] 15 A_pscrf 24192 24575
[ 7.3323 ] 16 A_mb2rf 24576 24831
[ 7.3324 ] 17 A_cpu-bootloader 24832 31999
[ 7.3325 ] 18 A_secure-os 32000 40191
[ 7.3326 ] 19 A_smm-fw 40192 44287
[ 7.3327 ] 20 A_eks 44288 44799
[ 7.3329 ] 21 A_dce-fw 44800 55039
[ 7.3330 ] 22 A_spe-fw 55040 56191
[ 7.3331 ] 23 A_rce-fw 56192 58239
[ 7.3332 ] 24 A_adsp-fw 58240 62335
[ 7.3334 ] 25 A_pva-fw 62336 62847
[ 7.3335 ] 26 A_reserved_on_boot 62848 65023
[ 7.3336 ] 27 B_mb1 65024 66047
[ 7.3337 ] 28 B_psc_bl1 66048 66559
[ 7.3339 ] 29 B_MB1_BCT 66560 66815
[ 7.3340 ] 30 B_MEM_BCT 66816 67327
[ 7.3341 ] 31 B_tsec-fw 67328 69375
[ 7.3343 ] 32 B_nvdec 69376 71423
[ 7.3343 ] 33 B_mb2 71424 72447
[ 7.3343 ] 34 B_xusb-fw 72448 72959
[ 7.3343 ] 35 B_bpmp-fw 72960 76031
[ 7.3343 ] 36 B_bpmp-fw-dtb 76032 84223
[ 7.3343 ] 37 B_psc-fw 84224 85759
[ 7.3343 ] 38 B_mts-mce 85760 86783
[ 7.3343 ] 39 B_sc7 86784 87167
[ 7.3343 ] 40 B_pscrf 87168 87551
[ 7.3343 ] 41 B_mb2rf 87552 87807
[ 7.3343 ] 42 B_cpu-bootloader 87808 94975
[ 7.3343 ] 43 B_secure-os 94976 103167
[ 7.3343 ] 44 B_smm-fw 103168 107263
[ 7.3343 ] 45 B_eks 107264 107775
[ 7.3343 ] 46 B_dce-fw 107776 118015
[ 7.3343 ] 47 B_spe-fw 118016 119167
[ 7.3343 ] 48 B_rce-fw 119168 121215
[ 7.3343 ] 49 B_adsp-fw 121216 125311
[ 7.3343 ] 50 B_pva-fw 125312 125823
[ 7.3343 ] 51 B_reserved_on_boot 125824 127999
[ 7.3343 ] 52 uefi_variables 128000 128511
[ 7.3343 ] 53 uefi_ftw 128512 129535
[ 7.3343 ] 54 reserved 129536 129919
[ 7.3343 ] 55 worm 129920 130303
[ 7.3343 ] 56 BCT-boot-chain_backup 130304 130431
[ 7.3343 ] 57 reserved_partition 130432 130559
[ 7.3343 ] 58 secondary_gpt_backup 130560 130687
[ 7.3343 ] 59 B_VER 130688 130815
[ 7.3343 ] 60 A_VER 130816 130943
[ 7.3343 ] End sector for APP_ENC, expected at: 119537630, actual: 0
[ 7.3343 ]
Error: Return value 4
Command tegraparser_v2 --generategpt --pt flash.xml.bin
cp: cannot stat 'signed/*': No such file or directory
cp: cannot stat 'signed/flash.xml.tmp': No such file or directory
Using bpmp-dtb concatenated with odmdata in blob for t23x
./tegraflash.py --bl uefi_jetson_minimal_with_dtb_sigheader.bin.encrypt --bct br_bct_BR.bct --bldtb tegra234-p3768-0000+p3767-0000-nv-super.dtb --applet rcm_2_encrypt.rcm --applet_softfuse rcm_1_encrypt.rcm --cmd "secureflash;reboot" --cfg secureflash.xml --chip 0x23 --mb1_bct mb1_bct_MB1_sigheader.bct.encrypt --mem_bct mem_rcm_sigheader.bct.encrypt --mb1_cold_boot_bct mb1_cold_boot_bct_MB1_sigheader.bct.encrypt --mb1_bin mb1_t234_prod_aligned_sigheader.bin.encrypt --psc_bl1_bin psc_bl1_t234_prod_aligned_sigheader.bin.encrypt --mem_bct_cold_boot mem_coldboot_sigheader.bct.encrypt --bins "psc_fw pscfw_t234_prod_sigheader.bin.encrypt; mts_mce mce_flash_o10_cr_prod_sigheader.bin.encrypt; tsec_fw tsec_t234_sigheader.bin.encrypt; mb2_applet applet_t234_sigheader.bin.encrypt; mb2_bootloader mb2_t234_with_mb2_bct_MB2_sigheader.bin.encrypt; xusb_fw xusb_t234_prod_sigheader.bin.encrypt; pva_fw nvpva_020_sigheader.fw.encrypt; dce_fw display-t234-dce_sigheader.bin.encrypt; nvdec nvdec_t234_prod_sigheader.fw.encrypt; bpmp_fw bpmp_t234-TE980M-A1_prod_sigheader.bin.encrypt; bpmp_fw_dtb tegra234-bpmp-3767-0000-3768-super-maxn_with_odm_sigheader.dtb.encrypt; rce_fw camera-rtcpu-t234-rce_sigheader.img.encrypt; ape_fw adsp-fw_sigheader.bin.encrypt; spe_fw spe_t234_sigheader.bin.encrypt; tos tos-optee_t234_sigheader.img.encrypt; eks eks_t234_sigheader.img.encrypt" --bct_backup
saving flash command in flashcmd.txt
*** no-flash flag enabled. Exiting now... ***
User can run above saved command in factory environment without
providing pkc and sbk keys to flash a device
Example:
$ cd bootloader
$ sudo bash ./flashcmd.txt
Error: /home/gremsy_soft/Documents/Linux_for_Tegra/bootloader/signed/flash.idx is not found
Error: failed to relocate images to /home/gremsy_soft/Documents/Linux_for_Tegra/tools/kernel_flash/images
I have attached the relevant files below. My goal is to encrypt my 512GB SSD.log.txt (70.8 KB)log.zip (15.8 KB)
hello user34150,
you should calculate num_sectors, and update it in the xml file.$ sudo fdisk -i to check your NVMe size. (by default it defined as 57GB)
the EXT_NUM_SECTORS size need smaller than your NVMe actual size and bigger than APP size.
<partition_layout version="01.00.0000">
<device type="external" instance="0" sector_size="512" num_sectors="EXT_NUM_SECTORS" >
you should also update EXT_NUM_SECTORS with a number, so that 512 * EXT_NUM_SECTORS ~= 450GB.
1 Like
I checked the SSD using the command:
minhvo@minhvo-gremsy:~/Desktop$ sudo fdisk -l /dev/sdc
[sudo] password for minhvo:
Disk /dev/sdc: 476.96 GiB, 512110190592 bytes, 1000215216 sectors
Disk model: N845-M30W
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 33553920 bytes
Disklabel type: dos
Disk identifier: 0xfc10c512
I found the number of sectors is 1000215216 and updated it into the file:
Linux_for_Tegra/bootloader/generic/cfg/flash_t234_qspi_nvme.xml
Specifically in:
<?xml version="1.0"?>
<!--
# SPDX-FileCopyrightText: Copyright (c) 2023 NVIDIA CORPORATION & AFFILIATES.
# All rights reserved.
# SPDX-License-Identifier: LicenseRef-NvidiaProprietary
#
# NVIDIA CORPORATION, its affiliates and licensors retain all intellectual
# property and proprietary rights in and to this material, related
# documentation and any modifications thereto. Any use, reproduction,
# disclosure or distribution of this material and related documentation
# without an express license agreement from NVIDIA CORPORATION or
# its affiliates is strictly prohibited.
-->
<!-- Nvidia Tegra Partition Layout Version 1.0.0 -->
<partition_layout version="01.00.0000">
<device type="spi" instance="0" sector_size="512" num_sectors="131072" >
<partition name="BCT" type="boot_config_table">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 1048576 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
</partition>
<partition name="A_mb1" type="mb1_bootloader">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 524288 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> MB1FILE </filename>
<align_boundary> 262144 </align_boundary>
</partition>
<partition name="A_psc_bl1" type="psc_bl1">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 262144 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> PSCBL1FILE </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="A_MB1_BCT" type="mb1_boot_config_table">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 131072 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="A_MEM_BCT" type="mem_boot_config_table">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 262144 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="A_tsec-fw" type="tsec_fw" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 1048576 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> TSECFW </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="A_nvdec" type="nvdec" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 1048576 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> NVHOSTNVDEC </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="A_mb2" type="mb2_bootloader" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 524288 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> MB2BLFILE </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="A_xusb-fw" type="xusb_fw" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 262144 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> XUSB_FW </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="A_bpmp-fw" type="bpmp_fw" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 1572864 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> BPFFILE </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="A_bpmp-fw-dtb" type="bpmp_fw_dtb" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 4194304 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> BPFDTB_FILE </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="A_psc-fw" type="psc_fw" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 786432 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> PSCFW </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="A_mts-mce" type="mts_mce" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 524288 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> MCE_IMAGE </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="A_sc7" type="WB0">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 196608 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> WB0FILE </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="A_pscrf" type="psc_rf" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 196608 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> PSCRF_IMAGE </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="A_mb2rf" type="mb2rf" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 131072 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> MB2RF_IMAGE </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="A_cpu-bootloader" type="bootloader_stage2" oem_sign="true" compress="true" comp_algo="lz4">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 3670016 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> TBCDTB-FILE </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="A_secure-os" type="tos" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 4194304 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> TOSFILE </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="A_smm-fw" type="data" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 2097152 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="A_eks" type="eks" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 262144 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> EKSFILE </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="A_dce-fw" type="dce_fw" oem_sign="true" compress="true" comp_algo="lz4">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 5242880 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> DCE </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="A_spe-fw" type="spe_fw" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 589824 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> SPEFILE </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="A_rce-fw" type="rce_fw" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 1048576 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> CAMERAFW </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="A_adsp-fw" type="ape_fw" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 2097152 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> adsp-fw.bin </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="A_pva-fw" type="pva_fw" oem_sign="true" compress="true" comp_algo="lz4">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 262144 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> PVA_FILE </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="A_reserved_on_boot" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 1114112 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="B_mb1" type="mb1_bootloader">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 524288 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> MB1FILE </filename>
<align_boundary> 262144 </align_boundary>
</partition>
<partition name="B_psc_bl1" type="psc_bl1">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 262144 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> PSCBL1FILE </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="B_MB1_BCT" type="mb1_boot_config_table">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 131072 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="B_MEM_BCT" type="mem_boot_config_table">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 262144 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="B_tsec-fw" type="tsec_fw" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 1048576 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> TSECFW </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="B_nvdec" type="nvdec" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 1048576 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> NVHOSTNVDEC </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="B_mb2" type="mb2_bootloader" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 524288 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> MB2BLFILE </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="B_xusb-fw" type="xusb_fw" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 262144 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> XUSB_FW </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="B_bpmp-fw" type="bpmp_fw" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 1572864 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> BPFFILE </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="B_bpmp-fw-dtb" type="bpmp_fw_dtb" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 4194304 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> BPFDTB_FILE </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="B_psc-fw" type="psc_fw" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 786432 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> PSCFW </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="B_mts-mce" type="mts_mce" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 524288 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> MCE_IMAGE </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="B_sc7" type="WB0">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 196608 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> WB0FILE </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="B_pscrf" type="psc_rf" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 196608 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> PSCRF_IMAGE </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="B_mb2rf" type="mb2rf" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 131072 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> MB2RF_IMAGE </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="B_cpu-bootloader" type="bootloader_stage2" oem_sign="true" compress="true" comp_algo="lz4">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 3670016 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> TBCDTB-FILE </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="B_secure-os" type="tos" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 4194304 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> TOSFILE </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="B_smm-fw" type="data" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 2097152 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="B_eks" type="eks" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 262144 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> EKSFILE </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="B_dce-fw" type="dce_fw" oem_sign="true" compress="true" comp_algo="lz4">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 5242880 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> DCE </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="B_spe-fw" type="spe_fw" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 589824 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> SPEFILE </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="B_rce-fw" type="rce_fw" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 1048576 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> CAMERAFW </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="B_adsp-fw" type="ape_fw" oem_sign="true">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 2097152 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> adsp-fw.bin </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="B_pva-fw" type="pva_fw" oem_sign="true" compress="true" comp_algo="lz4">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 262144 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> PVA_FILE </filename>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="B_reserved_on_boot" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 1114112 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="uefi_variables" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 262144 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 0x8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="uefi_ftw" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 524288 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 0x8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="reserved" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 196608 </size>
<align_boundary> 65536 </align_boundary>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
</partition>
<partition name="worm" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<start_location> 0x3F70000 </start_location>
<size> 196608 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 0x8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<align_boundary> 65536 </align_boundary>
</partition>
<partition name="BCT-boot-chain_backup" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<start_location> 0x3FA0000 </start_location>
<size> 65536 </size>
<align_boundary> 65536 </align_boundary>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
</partition>
<partition name="reserved_partition" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 65536 </size>
<align_boundary> 65536 </align_boundary>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
</partition>
<partition name="secondary_gpt_backup" type="backup_secondary_gpt">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<start_location> 0x3FC0000 </start_location>
<size> 65536 </size>
<align_boundary> 65536 </align_boundary>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
</partition>
<partition name="B_VER" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<start_location> 0x3FD0000 </start_location>
<size> 65536 </size>
<align_boundary> 65536 </align_boundary>
<file_system_attribute> 0 </file_system_attribute>
<partition_attribute> 0 </partition_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> VERFILE </filename>
</partition>
<partition name="A_VER" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 65536 </size>
<align_boundary> 65536 </align_boundary>
<file_system_attribute> 0 </file_system_attribute>
<partition_attribute> 0 </partition_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> VERFILE </filename>
</partition>
<partition name="secondary_gpt" type="secondary_gpt">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 0xFFFFFFFFFFFFFFFF </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
</partition>
</device>
<device type="nvme" instance="4" sector_size="512" num_sectors="1000215216" >
<partition name="master_boot_record" type="protective_master_boot_record">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 512 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
</partition>
<partition name="primary_gpt" type="primary_gpt">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 19968 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
</partition>
<partition name="A_kernel" id="5" type="kernel">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 134217728 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> LNXFILE </filename>
</partition>
<partition name="A_kernel-dtb" type="kernel_dtb">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 786432 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> DTB_FILE </filename>
</partition>
<partition name="A_reserved_on_user" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 33161216 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
</partition>
<partition name="B_kernel" type="kernel">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 134217728 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> LNXFILE </filename>
</partition>
<partition name="B_kernel-dtb" type="kernel_dtb">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 786432 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> DTB_FILE </filename>
</partition>
<partition name="B_reserved_on_user" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 33161216 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
</partition>
<partition name="RECNAME" type="kernel">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> RECSIZE </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> RECFILE </filename>
</partition>
<partition name="RECDTB-NAME" type="kernel_dtb">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 524288 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> RECDTB-FILE </filename>
</partition>
<partition name="esp" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 67108864 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 0x8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<filename> ESP_FILE </filename>
<partition_type_guid> C12A7328-F81F-11D2-BA4B-00A0C93EC93B </partition_type_guid>
<description> **Required.** EFI system partition with L4T Launcher. </description>
</partition>
<partition name="RECNAME_alt" type="kernel">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> RECSIZE </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
</partition>
<partition name="RECDTB-NAME_alt" type="kernel_dtb">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 524288 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
</partition>
<partition name="esp_alt" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 67108864 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 0x8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<description> **Required.** EFI system partition for fail-safe ESP update. </description>
</partition>
<partition name="UDA" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 419430400 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<align_boundary> 16384 </align_boundary>
<description> **Required.** This partition may be mounted and used to store user
data. </description>
</partition>
<partition name="reserved" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 502792192 </size> <!-- Recalculate the size if RECSIZE changed -->
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<description> **Required.** Reserve space in case there is any partition change
required in the future, for example, adding new partitions or increasing size
of some partitions. </description>
</partition>
<partition name="APP" id="1" type="data">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 419430400 </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 0x808 </allocation_attribute>
<align_boundary> 16384 </align_boundary>
<percent_reserved> 0 </percent_reserved>
<unique_guid> APPUUID </unique_guid>
<filename> system_boot.img </filename>
<description> Boot partition </description>
</partition>
<partition name="APP_ENC" id="2" type="data" encrypted="true" reencrypt="false">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 33554432 </size> <!-- 16GB = 16 * 1024 * 1024 * 1024 / 512 -->
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 0x8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
<align_boundary> 16384 </align_boundary>
<unique_guid> APP_ENC_UUID </unique_guid>
<filename> system_root_encrypted.img </filename>
<description> Encrypted root partition </description>
</partition>
<partition name="secondary_gpt" type="secondary_gpt">
<allocation_policy> sequential </allocation_policy>
<filesystem_type> basic </filesystem_type>
<size> 0xFFFFFFFFFFFFFFFF </size>
<file_system_attribute> 0 </file_system_attribute>
<allocation_attribute> 8 </allocation_attribute>
<percent_reserved> 0 </percent_reserved>
</partition>
</device>
</partition_layout>
However, when I run the command:
sudo ./tools/kernel_flash/l4t_initrd_flash.sh --showlogs -p "-c bootloader/generic/cfg/flash_t234_qspi_nvme.xml" --no-flash --network usb0 jetson-orin-nano-devkit internal
I encountered the following error:
...
[ 8.0092 ] End sector for APP_ENC, expected at: 1000215182, actual: 0
...
[ 7.8849 ] tegrahost_v2 --chip 0x23 0 --align mem_rcm_2_aligned.bct
[ 7.8900 ] tegrahost_v2 --chip 0x23 0 --magicid MEM2 --ratchet_blob ratchet_blob.bin --appendsigheader mem_rcm_2_aligned.bct zerosbk
[ 7.8924 ] adding BCH for mem_rcm_2_aligned.bct
[ 7.9000 ] tegrasign_v3.py --key None --list mem_rcm_2_aligned_sigheader.bct_list.xml --pubkeyhash pub_key.key --sha sha512
[ 7.9005 ] Assuming zero filled SBK key
[ 7.9054 ] Warning: pub_key.key is not found
[ 7.9075 ] tegrahost_v2 --chip 0x23 0 --updatesigheader mem_rcm_2_aligned_sigheader.bct.encrypt mem_rcm_2_aligned_sigheader.bct.hash zerosbk
[ 7.9117 ] Disabled BPMP dtb trim, using default dtb
[ 7.9117 ]
[ 7.9146 ] tegrahost_v2 --chip 0x23 0 --align mem_rcm_3_aligned.bct
[ 7.9199 ] tegrahost_v2 --chip 0x23 0 --magicid MEM3 --ratchet_blob ratchet_blob.bin --appendsigheader mem_rcm_3_aligned.bct zerosbk
[ 7.9224 ] adding BCH for mem_rcm_3_aligned.bct
[ 7.9301 ] tegrasign_v3.py --key None --list mem_rcm_3_aligned_sigheader.bct_list.xml --pubkeyhash pub_key.key --sha sha512
[ 7.9306 ] Assuming zero filled SBK key
[ 7.9355 ] Warning: pub_key.key is not found
[ 7.9377 ] tegrahost_v2 --chip 0x23 0 --updatesigheader mem_rcm_3_aligned_sigheader.bct.encrypt mem_rcm_3_aligned_sigheader.bct.hash zerosbk
[ 7.9419 ] Copying signatures
[ 7.9446 ] tegrahost_v2 --chip 0x23 0 --partitionlayout flash.xml.bin --updatesig images_list_signed.xml
[ 8.0026 ] tegraparser_v2 --generategpt --pt flash.xml.bin
[ 8.0050 ] gpt_secondary_3_0.bin:
[ 8.0057 ] partition_id partition_name StartingLba EndingLba
[ 8.0062 ] 1 BCT 0 2047
[ 8.0067 ] 2 A_mb1 2048 3071
[ 8.0073 ] 3 A_psc_bl1 3072 3583
[ 8.0077 ] 4 A_MB1_BCT 3584 3839
[ 8.0082 ] 5 A_MEM_BCT 3840 4351
[ 8.0087 ] 6 A_tsec-fw 4352 6399
[ 8.0091 ] 7 A_nvdec 6400 8447
[ 8.0091 ] 8 A_mb2 8448 9471
[ 8.0091 ] 9 A_xusb-fw 9472 9983
[ 8.0091 ] 10 A_bpmp-fw 9984 13055
[ 8.0091 ] 11 A_bpmp-fw-dtb 13056 21247
[ 8.0091 ] 12 A_psc-fw 21248 22783
[ 8.0091 ] 13 A_mts-mce 22784 23807
[ 8.0091 ] 14 A_sc7 23808 24191
[ 8.0091 ] 15 A_pscrf 24192 24575
[ 8.0091 ] 16 A_mb2rf 24576 24831
[ 8.0091 ] 17 A_cpu-bootloader 24832 31999
[ 8.0091 ] 18 A_secure-os 32000 40191
[ 8.0091 ] 19 A_smm-fw 40192 44287
[ 8.0091 ] 20 A_eks 44288 44799
[ 8.0091 ] 21 A_dce-fw 44800 55039
[ 8.0091 ] 22 A_spe-fw 55040 56191
[ 8.0091 ] 23 A_rce-fw 56192 58239
[ 8.0091 ] 24 A_adsp-fw 58240 62335
[ 8.0091 ] 25 A_pva-fw 62336 62847
[ 8.0091 ] 26 A_reserved_on_boot 62848 65023
[ 8.0091 ] 27 B_mb1 65024 66047
[ 8.0091 ] 28 B_psc_bl1 66048 66559
[ 8.0091 ] 29 B_MB1_BCT 66560 66815
[ 8.0091 ] 30 B_MEM_BCT 66816 67327
[ 8.0091 ] 31 B_tsec-fw 67328 69375
[ 8.0092 ] 32 B_nvdec 69376 71423
[ 8.0092 ] 33 B_mb2 71424 72447
[ 8.0092 ] 34 B_xusb-fw 72448 72959
[ 8.0092 ] 35 B_bpmp-fw 72960 76031
[ 8.0092 ] 36 B_bpmp-fw-dtb 76032 84223
[ 8.0092 ] 37 B_psc-fw 84224 85759
[ 8.0092 ] 38 B_mts-mce 85760 86783
[ 8.0092 ] 39 B_sc7 86784 87167
[ 8.0092 ] 40 B_pscrf 87168 87551
[ 8.0092 ] 41 B_mb2rf 87552 87807
[ 8.0092 ] 42 B_cpu-bootloader 87808 94975
[ 8.0092 ] 43 B_secure-os 94976 103167
[ 8.0092 ] 44 B_smm-fw 103168 107263
[ 8.0092 ] 45 B_eks 107264 107775
[ 8.0092 ] 46 B_dce-fw 107776 118015
[ 8.0092 ] 47 B_spe-fw 118016 119167
[ 8.0092 ] 48 B_rce-fw 119168 121215
[ 8.0092 ] 49 B_adsp-fw 121216 125311
[ 8.0092 ] 50 B_pva-fw 125312 125823
[ 8.0092 ] 51 B_reserved_on_boot 125824 127999
[ 8.0092 ] 52 uefi_variables 128000 128511
[ 8.0092 ] 53 uefi_ftw 128512 129535
[ 8.0092 ] 54 reserved 129536 129919
[ 8.0092 ] 55 worm 129920 130303
[ 8.0092 ] 56 BCT-boot-chain_backup 130304 130431
[ 8.0092 ] 57 reserved_partition 130432 130559
[ 8.0092 ] 58 secondary_gpt_backup 130560 130687
[ 8.0092 ] 59 B_VER 130688 130815
[ 8.0092 ] 60 A_VER 130816 130943
[ 8.0092 ] End sector for APP_ENC, expected at: 1000215182, actual: 0
[ 8.0092 ]
Error: Return value 4
Command tegraparser_v2 --generategpt --pt flash.xml.bin
cp: cannot stat 'signed/*': No such file or directory
cp: cannot stat 'signed/flash.xml.tmp': No such file or directory
Using bpmp-dtb concatenated with odmdata in blob for t23x
./tegraflash.py --bl uefi_jetson_minimal_with_dtb_sigheader.bin.encrypt --bct br_bct_BR.bct --bldtb tegra234-p3768-0000+p3767-0000-nv.dtb --applet rcm_2_encrypt.rcm --applet_softfuse rcm_1_encrypt.rcm --cmd "secureflash;reboot" --cfg secureflash.xml --chip 0x23 --mb1_bct mb1_bct_MB1_sigheader.bct.encrypt --mem_bct mem_rcm_sigheader.bct.encrypt --mb1_cold_boot_bct mb1_cold_boot_bct_MB1_sigheader.bct.encrypt --mb1_bin mb1_t234_prod_aligned_sigheader.bin.encrypt --psc_bl1_bin psc_bl1_t234_prod_aligned_sigheader.bin.encrypt --mem_bct_cold_boot mem_coldboot_sigheader.bct.encrypt --bins "psc_fw pscfw_t234_prod_sigheader.bin.encrypt; mts_mce mce_flash_o10_cr_prod_sigheader.bin.encrypt; tsec_fw tsec_t234_sigheader.bin.encrypt; mb2_applet applet_t234_sigheader.bin.encrypt; mb2_bootloader mb2_t234_with_mb2_bct_MB2_sigheader.bin.encrypt; xusb_fw xusb_t234_prod_sigheader.bin.encrypt; pva_fw nvpva_020_sigheader.fw.encrypt; dce_fw display-t234-dce_sigheader.bin.encrypt; nvdec nvdec_t234_prod_sigheader.fw.encrypt; bpmp_fw bpmp_t234-TE980M-A1_prod_sigheader.bin.encrypt; bpmp_fw_dtb tegra234-bpmp-3767-0000-a02-3509-a02_with_odm_sigheader.dtb.encrypt; rce_fw camera-rtcpu-t234-rce_sigheader.img.encrypt; ape_fw adsp-fw_sigheader.bin.encrypt; spe_fw spe_t234_sigheader.bin.encrypt; tos tos-optee_t234_sigheader.img.encrypt; eks eks_t234_sigheader.img.encrypt" --bct_backup
saving flash command in flashcmd.txt
*** no-flash flag enabled. Exiting now... ***
User can run above saved command in factory environment without
providing pkc and sbk keys to flash a device
Example:
$ cd bootloader
$ sudo bash ./flashcmd.txt
Error: /home/gremsy_soft/Documents/Linux_for_Tegra/bootloader/signed/flash.idx is not found
Error: failed to relocate images to /home/gremsy_soft/Documents/Linux_for_Tegra/tools/kernel_flash/images
Cleaning up...
Please help me analyze this error.
hello user34150,
that’s an incorrect flash command-line, it’s internal storage to flash QSPI, and external for your NVMe.post #3 , you may revise the size accordingly for your use-case.
1 Like
I have successfully built with the process:
sudo BOARDID=3701 BOARDSKU=0000 ./tools/kernel_flash/l4t_initrd_flash.sh --showlogs \
-p "-c bootloader/generic/cfg/flash_t234_qspi.xml" \
--no-flash --network usb0 jetson-orin-nano-devkit internal
sudo BOARDID=3701 BOARDSKU=0000 ROOTFS_ENC=1 ADDITIONAL_DTB_OVERLAY_OPT="BootOrderNvme.dtbo" \
./tools/kernel_flash/l4t_initrd_flash.sh \
--showlogs --no-flash --external-device nvme0n1p1 -i ./sym2_t234.key -p "--generic-passphrase" \
-p "-T 998118064" -S 452GiB -c ./tools/kernel_flash/flash_l4t_t234_nvme_rootfs_enc.xml \
--external-only --append --network usb0 --massflash 1 jetson-orin-nano-devkit external
cd mfi_jetson-orin-nano-devkit/
sudo ./tools/kernel_flash/l4t_initrd_flash.sh --flash-only --massflash 1 --network usb0 --showlogs
Thank you for your support!
system
July 15, 2025, 6:54am
12
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.