Jetson AGX Orin, updating image while secureboot active not working [36.3/ devkit]

Hello,

I’ve been trying to update the payload of the Image on the rootfs (/boot/Image) I signed it using the same key use for the secureboot, and I copy past it and I replaced it with the older version of the /boot/Image. everything seem fine but when I reboot to see if the boot will work I get this error and he start from the kernel partition, which is weird cause I thought that the jetson will figure that the image was updated since I signed it with the same db key used during the flash.

here is the error I get:

We can see that it boots after on the kernel partition which is what I don’t want.

Hi elhamriothman,

Please share the detailed steps how you done this.

Could it boot as expected if you replace the kernel Image in BSP package(<Linux_for_Tegra>/kerenl/Image) and reflash the board with secureboot enabled?

For the steps:

I already have flashed the jetson with secureboot enabled, now I want to update the extlinux.conf or another payload, sign it and then modify it, to see if the jetson will boot normally with the new payload signed with the same keys that I gave in the flash.

Here is the command to sign for exp the extlinux.conf that I did:

sudo openssl cms -sign -signer …/db_1.crt -inkey …/db_1.key -binary -in extlinux.conf -outform der -out extlinux.conf.sig

Then what the next step that I did is downloaded this payload using scp to my jetson and change the already existing extlinux.conf with the signature on /boot/extlinux/

Here is the full log of the boot and where it gets stuck, I tried to upload it but the upload processing was loading for like an hour so I decided to just past it here:
On my screen:
image

OPTIONS: I18n
Port /dev/ttyACM0, 10:31:12

Tapez CTRL-A Z pour voir l’aide concernant les touches spéciales

��
[0000.063] I> MB1 (version: 1.4.0.2-t234-54845784-08a4de08)
[0000.068] I> t234-A01-0-Silicon (0x12347) Prod
[0000.073] I> Boot-mode : Coldboot
[0000.076] I> Entry timestamp: 0x00000000
[0000.080] I> last_boot_error: 0x0
[0000.083] I> BR-BCT: preprod_dev_sign: 0
[0000.086] I> rst_source: 0x0, rst_level: 0x0
[0000.091] I> Task: SE error check
[0000.094] I> Task: Bootchain select WAR set
[0000.098] I> Task: Enable SLCG
[0000.101] I> Task: CRC check
[0000.103] I> Skip FUSE records CRC check as records_integrity fuse is not burned
[0000.111] I> Task: Initialize MB2 params
[0000.115] I> MB2-params @ 0x40060000
[0000.118] I> Task: Crypto init
[0000.121] I> Task: Perform MB1 KAT tests
[0000.125] I> Task: NVRNG health check
[0000.129] I> NVRNG: Health check success
[0000.132] I> Task: MSS Bandwidth limiter settings for iGPU clients
[0000.138] I> Task: Enabling and initialization of Bandwidth limiter
[0000.144] I> No request to configure MBWT settings for any PC!
[0000.150] I> Task: Secure debug controls
[0000.154] I> Task: strap war set
[0000.157] I> Task: Initialize SOC Therm
[0000.161] I> Task: Program NV master stream id
[0000.165] I> Task: Verify boot mode
[0000.171] I> Task: Alias fuses
[0000.174] W> FUSE_ALIAS: Fuse alias on production fused part is not supported.
[0000.181] I> Task: Print SKU type
[0000.184] I> FUSE_OPT_CCPLEX_CLUSTER_DISABLE = 0x00000000
[0000.189] I> FUSE_OPT_GPC_DISABLE = 0x00000000
[0000.194] I> FUSE_OPT_TPC_DISABLE = 0x00000000
[0000.198] I> FUSE_OPT_DLA_DISABLE = 0x00000000
[0000.202] I> FUSE_OPT_PVA_DISABLE = 0x00000000
[0000.206] I> FUSE_OPT_NVENC_DISABLE = 0x00000000
[0000.211] I> FUSE_OPT_NVDEC_DISABLE = 0x00000000
[0000.215] I> FUSE_OPT_FSI_DISABLE = 0x00000000
[0000.220] I> FUSE_OPT_EMC_DISABLE = 0x00000000
[0000.224] I> FUSE_BOOTROM_PATCH_VERSION = 0x7
[0000.228] I> FUSE_PSCROM_PATCH_VERSION = 0x7
[0000.232] I> FUSE_OPT_ADC_CAL_FUSE_REV = 0x2
[0000.236] I> FUSE_SKU_INFO_0 = 0xd0
[0000.240] I> FUSE_OPT_SAMPLE_TYPE_0 = 0x3 PS 
[0000.244] I> FUSE_PACKAGE_INFO_0 = 0x2
[0000.247] I> SKU: Prod
[0000.250] I> Task: Boost clocks
[0000.253] I> Initializing NAFLL for BPMP_CPU_NIC.
[0000.258] I> BPMP NAFLL: fll_lock = 1, dvco_min_reached = 0
[0000.263] I> BPMP NAFLL lock success.
[0000.267] I> BPMP_CPU_NIC : src = 42, divisor = 0
[0000.271] I> Initializing PLLC2 for AXI_CBB.
[0000.275] I> AXI_CBB : src = 35, divisor = 0
[0000.279] I> Task: Voltage monitor
[0000.283] I> VMON: Vmon re-calibration and fine tuning done
[0000.288] I> Task: UPHY init
[0000.293] I> HSIO UPHY init done
[0000.296] W> Skipping GBE UPHY config
[0000.300] I> Task: Boot device init
[0000.303] I> Boot_device: QSPI_FLASH instance: 0
[0000.308] I> Qspi clock source : pllc_out0
[0000.312] I> QSPI Flash: Macronix 64MB
[0000.315] I> QSPI-0l initialized successfully
[0000.320] I> Task: TSC init
[0000.322] I> Task: Load membct
[0000.325] I> RAM_CODE 0x4000401
[0000.328] I> Loading MEMBCT 
[0000.331] I> Slot: 0
[0000.333] I> Binary[0] block-3840 (partition size: 0x40000)
[0000.339] I> Binary name: MEM-BCT-0
[0000.342] I> Size of crypto header is 8192
[0000.346] I> Size of crypto header is 8192
[0000.350] I> strt_pg_num(3840) num_of_pgs(16) read_buf(0x40050000)
[0000.356] I> BCH of MEM-BCT-0 read from storage
[0000.360] I> BCH address is : 0x40050000
[0000.364] I> MEM-BCT-0 header integrity check is success
[0000.369] I> Binary magic in BCH component 0 is MEM0
[0000.374] I> component binary type is 0
[0000.378] I> strt_pg_num(3856) num_of_pgs(115) read_buf(0x40040000)
[0000.385] I> MEM-BCT-0 binary is read from storage
[0000.390] I> MEM-BCT-0 binary integrity check is success
[0000.395] I> Binary MEM-BCT-0 loaded successfully at 0x40040000 (0xe580)
[0000.401] I> RAM_CODE 0x4000401
[0000.407] I> RAM_CODE 0x4000401
[0000.410] I> Task: Load Page retirement list
[0000.415] I> Task: SDRAM params override
[0000.418] I> Task: Save mem-bct info
[0000.422] I> Task: Carveout allocate
[0000.425] I> RCM blob carveout will not be allocated
[0000.430] I> Update CCPLEX IST carveout from MB1-BCT
[0000.435] I> ECC region[0]: Start:0x0, End:0x0
[0000.439] I> ECC region[1]: Start:0x0, End:0x0
[0000.443] I> ECC region[2]: Start:0x0, End:0x0
[0000.448] I> ECC region[3]: Start:0x0, End:0x0
[0000.452] I> ECC region[4]: Start:0x0, End:0x0
[0000.456] I> Non-ECC region[0]: Start:0x80000000, End:0x880000000
[0000.462] I> Non-ECC region[1]: Start:0x0, End:0x0
[0000.467] I> Non-ECC region[2]: Start:0x0, End:0x0
[0000.471] I> Non-ECC region[3]: Start:0x0, End:0x0
[0000.476] I> Non-ECC region[4]: Start:0x0, End:0x0
[0000.487] I> allocated(CO:44) base:0x849800000 size:0x36800000 align: 0x100000
[0000.494] I> allocated(CO:31) base:0x840000000 size:0x8000000 align: 0x8000000
[0000.501] I> allocated(CO:43) base:0x83c000000 size:0x4000000 align: 0x200000
[0000.508] I> allocated(CO:39) base:0x839e00000 size:0x2200000 align: 0x10000
[0000.515] I> allocated(CO:20) base:0x836000000 size:0x2000000 align: 0x2000000
[0000.522] I> allocated(CO:24) base:0x834000000 size:0x2000000 align: 0x2000000
[0000.529] I> allocated(CO:28) base:0x832000000 size:0x2000000 align: 0x2000000
[0000.536] I> allocated(CO:29) base:0x830000000 size:0x2000000 align: 0x2000000
[0000.543] I> allocated(CO:22) base:0x848000000 size:0x1000000 align: 0x1000000
[0000.551] I> allocated(CO:35) base:0x838e00000 size:0x1000000 align: 0x100000
[0000.558] I> allocated(CO:41) base:0x82f000000 size:0x1000000 align: 0x100000
[0000.565] I> allocated(CO:02) base:0x849000000 size:0x800000 align: 0x800000
[0000.572] I> allocated(CO:03) base:0x838000000 size:0x800000 align: 0x800000
[0000.579] I> allocated(CO:06) base:0x82e800000 size:0x800000 align: 0x800000
[0000.585] I> allocated(CO:56) base:0x82e000000 size:0x800000 align: 0x200000
[0000.592] I> allocated(CO:07) base:0x838800000 size:0x400000 align: 0x400000
[0000.599] I> allocated(CO:33) base:0x82dc00000 size:0x400000 align: 0x200000
[0000.606] I> allocated(CO:19) base:0x82d980000 size:0x280000 align: 0x10000
[0000.613] I> allocated(CO:23) base:0x838c00000 size:0x200000 align: 0x200000
[0000.620] I> allocated(CO:01) base:0x82d800000 size:0x100000 align: 0x100000
[0000.627] I> allocated(CO:05) base:0x82d700000 size:0x100000 align: 0x100000
[0000.634] I> allocated(CO:08) base:0x82d600000 size:0x100000 align: 0x100000
[0000.641] I> allocated(CO:09) base:0x82d500000 size:0x100000 align: 0x100000
[0000.648] I> allocated(CO:12) base:0x82d400000 size:0x100000 align: 0x100000
[0000.655] I> allocated(CO:15) base:0x82d300000 size:0x100000 align: 0x100000
[0000.662] I> allocated(CO:17) base:0x82d200000 size:0x100000 align: 0x100000
[0000.669] I> allocated(CO:27) base:0x82d100000 size:0x100000 align: 0x100000
[0000.676] I> allocated(CO:42) base:0x82d000000 size:0x100000 align: 0x100000
[0000.683] I> allocated(CO:54) base:0x82d900000 size:0x80000 align: 0x80000
[0000.689] I> allocated(CO:34) base:0x82cff0000 size:0x10000 align: 0x10000
[0000.696] I> allocated(CO:72) base:0x82cdf0000 size:0x200000 align: 0x10000
[0000.703] I> allocated(CO:47) base:0x82c800000 size:0x400000 align: 0x200000
[0000.710] I> allocated(CO:50) base:0x82c600000 size:0x200000 align: 0x100000
[0000.717] I> allocated(CO:52) base:0x82cdc0000 size:0x30000 align: 0x10000
[0000.724] I> allocated(CO:48) base:0x82cda0000 size:0x20000 align: 0x10000
[0000.730] I> allocated(CO:69) base:0x82cd80000 size:0x20000 align: 0x10000
[0000.737] I> allocated(CO:49) base:0x82cd70000 size:0x10000 align: 0x10000
[0000.744] I> NSDRAM base: 0x80000000, end: 0x82cdf0000, size: 0x7acdf0000
[0000.751] I> Task: Thermal check
[0000.754] I> Using min_chip_limit as min_tmon_limit
[0000.758] I> Using max_chip_limit as max_tmon_limit
[0000.763] I> BCT max_tmon_limit = 105
[0000.767] I> BCT min_tmon_limit = -28
[0000.770] I> BCT max_tmon_limit = 105
[0000.774] I> BCT min_tmon_limit = -28
[0000.777] I> SKU specific max_chip_limit = 105
[0000.781] I> SKU specific min_chip_limit = -28
[0000.786] I> BCT max_chip_limit = 105
[0000.789] I> BCT min_chip_limit = -28
[0000.793] I> enable_soctherm_polling = 0
[0000.796] I> max temp read = 30
[0000.799] I> min temp read = 29
[0000.802] I> Enabling thermtrip
[0000.805] I> Task: Update FSI SCR with thermal fuse data
[0000.811] I> Task: Enable WDT 5th expiry
[0000.814] I> Task: I2C register
[0000.817] I> Task: Set I2C bus freq
[0000.821] I> Task: Reset FSI
[0000.823] I> Task: Pinmux init
[0000.827] I> Task: Prod config init
[0000.830] I> Task: Pad voltage init
[0000.833] I> Task: Prod init
[0000.836] I> Task: Program rst req config reg
[0000.840] I> Task: Common rail init
[0000.844] I> DONE: Thermal config
[0000.848] W> DEVICE_PROD: module = 13, instance = 4 not found in device prod.
[0000.856] I> DONE: SOC rail config
[0000.860] W> PMIC_CONFIG: Rail: MEMIO rail config not found in MB1 BCT.
[0000.867] I> DONE: MEMIO rail config
[0000.870] I> DONE: GPU rail info
[0000.873] I> DONE: CV rail info
[0000.876] I> Task: Mem clock src
[0000.879] I> Task: Misc. board config
[0000.883] I> PMIC_CONFIG: Platform config not found in MB1 BCT.
[0000.889] I> Task: SDRAM init
[0000.892] I> MemoryType: 4 MemBctRevision: 10
[0000.899] I> MSS CAR: PLLM/HUB programming for MemoryType: 4 and MemBctRevision: 10
[0000.906] I> MSS CAR: Init PLLM
[0000.909] I> MSS CAR: Init PLLHUB
[0000.914] I> Encryption:   MTS: en, TX: en, VPR: en, GSC: en
[0000.926] I> SDRAM initialized!
[0000.929] I> SDRAM Size in Total 0x800000000
[0000.933] I> Task: Dram Ecc scrub
[0000.936] I> Task: DRAM alias check
[0000.952] I> Task: Program NSDRAM carveout
[0000.956] I> NSDRAM carveout encryption is enabled
[0000.961] I> Program NSDRAM carveout
[0000.965] I> Task: Register checker
[0000.968] I> Task: Enable clock-mon
[0000.982] I> FMON: Fmon re-programming done
[0000.986] I> Task: Mapper init
[0000.989] I> Task: SC7 Context Init
[0000.993] I> Task: CCPLEX IST init
[0000.996] I> Task: CPU WP0
[0000.999] I> Loading MCE
[0001.001] I> Slot: 0
[0001.003] I> Binary[8] block-22784 (partition size: 0x80000)
[0001.009] I> Binary name: MCE
[0001.012] I> Size of crypto header is 8192
[0001.016] I> Size of crypto header is 8192
[0001.020] I> strt_pg_num(22784) num_of_pgs(16) read_buf(0x4003e000)
[0001.026] I> BCH of MCE read from storage
[0001.030] I> BCH address is : 0x4003e000
[0001.034] I> MCE header integrity check is success
[0001.038] I> Binary magic in BCH component 0 is MTSM
[0001.043] I> component binary type is 8
[0001.047] I> Size of crypto header is 8192
[0001.051] I> strt_pg_num(22800) num_of_pgs(350) read_buf(0x40000000)
[0001.059] I> MCE binary is read from storage
[0001.063] I> MCE binary integrity check is success
[0001.068] I> Binary MCE loaded successfully at 0x40000000 (0x2baf0)
[0001.074] I> Size of crypto header is 8192
[0001.085] I> Size of crypto header is 8192
[0001.089] I> Sending WP0 mailbox command to PSC
[0001.098] I> Task: XUSB Powergate
[0001.101] I> Skipping powergate XUSB.
[0001.105] I> Task: MB1 fixed firewalls
[0001.111] W> Firewall readback mismatch
[0001.116] I> Task: Load bpmp-fw
[0001.119] I> Slot: 0
[0001.121] I> Binary[15] block-9984 (partition size: 0x180000)
[0001.127] I> Binary name: BPMP_FW
[0001.130] I> Size of crypto header is 8192
[0001.134] I> Size of crypto header is 8192
[0001.138] I> strt_pg_num(9984) num_of_pgs(16) read_buf(0x807fe000)
[0001.144] I> BCH of BPMP_FW read from storage
[0001.148] I> BCH address is : 0x807fe000
[0001.152] I> BPMP_FW header integrity check is success
[0001.157] I> Binary magic in BCH component 0 is BPMF
[0001.162] I> component binary type is 15
[0001.166] I> Size of crypto header is 8192
[0001.170] I> strt_pg_num(10000) num_of_pgs(1990) read_buf(0x80000000)
[0001.187] I> BPMP_FW binary is read from storage
[0001.194] I> BPMP_FW binary integrity check is success
[0001.199] I> Binary BPMP_FW loaded successfully at 0x80000000 (0xf8bc0)
[0001.205] I> Slot: 0
[0001.207] I> Binary[16] block-13056 (partition size: 0x400000)
[0001.213] I> Binary name: BPMP_FW_DTB
[0001.216] I> Size of crypto header is 8192
[0001.220] I> Size of crypto header is 8192
[0001.224] I> strt_pg_num(13056) num_of_pgs(16) read_buf(0x807fc000)
[0001.230] I> BCH of BPMP_FW_DTB read from storage
[0001.235] I> BCH address is : 0x807fc000
[0001.239] I> BPMP_FW_DTB header integrity check is success
[0001.244] I> Binary magic in BCH component 0 is BPMD
[0001.249] I> component binary type is 16
[0001.253] I> Size of crypto header is 8192
[0001.257] I> strt_pg_num(13072) num_of_pgs(736) read_buf(0x8079fff0)
[0001.267] I> BPMP_FW_DTB binary is read from storage
[0001.273] I> BPMP_FW_DTB binary integrity check is success
[0001.278] I> Binary BPMP_FW_DTB loaded successfully at 0x8079fff0 (0x5bf00)
[0001.285] I> Task: BPMP fw ast config
[0001.288] I> Task: Load psc-fw
[0001.291] I> Slot: 0
[0001.293] I> Binary[17] block-21248 (partition size: 0xc0000)
[0001.299] I> Binary name: PSC_FW
[0001.302] I> Size of crypto header is 8192
[0001.306] I> Size of crypto header is 8192
[0001.310] I> strt_pg_num(21248) num_of_pgs(16) read_buf(0x80ffe000)
[0001.316] I> BCH of PSC_FW read from storage
[0001.320] I> BCH address is : 0x80ffe000
[0001.324] I> PSC_FW header integrity check is success
[0001.329] I> Binary magic in BCH component 0 is PFWP
[0001.334] I> component binary type is 17
[0001.337] I> Size of crypto header is 8192
[0001.341] I> strt_pg_num(21264) num_of_pgs(591) read_buf(0x80fb4200)
[0001.351] I> PSC_FW binary is read from storage
[0001.356] I> PSC_FW binary integrity check is success
[0001.361] I> Binary PSC_FW loaded successfully at 0x80fb4200 (0x49df0)
[0001.367] I> Task: Load nvdec-fw
[0001.370] I> Slot: 0
[0001.372] I> Binary[7] block-6400 (partition size: 0x100000)
[0001.378] I> Binary name: NVDEC
[0001.381] I> Size of crypto header is 8192
[0001.385] I> Size of crypto header is 8192
[0001.389] I> strt_pg_num(6400) num_of_pgs(16) read_buf(0x800fe000)
[0001.395] I> BCH of NVDEC read from storage
[0001.399] I> BCH address is : 0x800fe000
[0001.403] I> NVDEC header integrity check is success
[0001.407] I> Binary magic in BCH component 0 is NDEC
[0001.412] I> component binary type is 7
[0001.416] I> Size of crypto header is 8192
[0001.420] I> strt_pg_num(6416) num_of_pgs(560) read_buf(0x80000000)
[0001.429] I> NVDEC binary is read from storage
[0001.434] I> NVDEC binary integrity check is success
[0001.439] I> Binary NVDEC loaded successfully at 0x80000000 (0x46000)
[0001.445] I> Size of crypto header is 8192
[0001.456] I> Task: Load tsec-fw
[0001.459] I> TSEC-FW load support not enabled
[0001.464] I> Task: GPIO interrupt map
[0001.467] I> Task: SC7 context save
[0001.471] I> Slot: 0
[0001.473] I> Binary[27] block-0 (partition size: 0x100000)
[0001.478] I> Binary name: BR_BCT
[0001.481] I> Size of crypto header is 8192
[0001.485] I> Size of crypto header is 8192
[0001.489] I> Size of crypto header is 8192
[0001.493] I> strt_pg_num(0) num_of_pgs(16) read_buf(0xa0000000)
[0001.499] I> BR_BCT binary is read from storage
[0001.503] I> BR_BCT binary integrity check is success
[0001.508] I> Binary BR_BCT loaded successfully at 0xa0000000 (0x2000)
[0001.514] I> Slot: 0
[0001.516] I> Binary[13] block-23808 (partition size: 0x30000)
[0001.522] I> Binary name: SC7-FW
[0001.525] I> Size of crypto header is 8192
[0001.529] I> Size of crypto header is 8192
[0001.533] I> Size of crypto header is 8192
[0001.537] I> Size of crypto header is 8192
[0001.541] I> strt_pg_num(23808) num_of_pgs(16) read_buf(0xa0002000)
[0001.547] I> BCH of SC7-FW read from storage
[0001.551] I> BCH address is : 0xa0002000
[0001.555] I> SC7-FW header integrity check is success
[0001.560] I> Binary magic in BCH component 0 is WB0B
[0001.565] I> component binary type is 13
[0001.568] I> Size of crypto header is 8192
[0001.572] I> strt_pg_num(23824) num_of_pgs(349) read_buf(0xa0004000)
[0001.581] I> SC7-FW binary is read from storage
[0001.585] I> SC7-FW binary integrity check is success
[0001.590] I> Binary SC7-FW loaded successfully at 0xa0004000 (0x2b920)
[0001.597] I> Slot: 0
[0001.599] I> Binary[22] block-24192 (partition size: 0x30000)
[0001.604] I> Binary name: PSC_RF
[0001.607] I> Size of crypto header is 8192
[0001.611] I> Size of crypto header is 8192
[0001.615] I> Size of crypto header is 8192
[0001.619] I> Size of crypto header is 8192
[0001.623] I> strt_pg_num(24192) num_of_pgs(16) read_buf(0xa002f920)
[0001.629] I> BCH of PSC_RF read from storage
[0001.633] I> BCH address is : 0xa002f920
[0001.637] I> PSC_RF header integrity check is success
[0001.642] I> Binary magic in BCH component 0 is PSCR
[0001.647] I> component binary type is 22
[0001.651] I> Size of crypto header is 8192
[0001.655] I> strt_pg_num(24208) num_of_pgs(224) read_buf(0xa0031920)
[0001.662] I> PSC_RF binary is read from storage
[0001.667] I> PSC_RF binary integrity check is success
[0001.672] I> Binary PSC_RF loaded successfully at 0xa0031920 (0x1be60)
[0001.681] I> Task: Save WP0 payload to SC7 ctx
[0001.685] I> Task: Load MB2rf binary to SC7 ctx
[0001.690] I> Slot: 0
[0001.692] I> Binary[14] block-24576 (partition size: 0x20000)
[0001.697] I> Binary name: MB2_RF
[0001.700] I> Size of crypto header is 8192
[0001.704] I> Size of crypto header is 8192
[0001.708] I> Size of crypto header is 8192
[0001.712] I> Size of crypto header is 8192
[0001.716] I> strt_pg_num(24576) num_of_pgs(16) read_buf(0xa00d5d10)
[0001.722] I> BCH of MB2_RF read from storage
[0001.727] I> BCH address is : 0xa00d5d10
[0001.730] I> MB2_RF header integrity check is success
[0001.735] I> Binary magic in BCH component 0 is MB2R
[0001.740] I> component binary type is 14
[0001.744] I> Size of crypto header is 8192
[0001.748] I> strt_pg_num(24592) num_of_pgs(224) read_buf(0xa00d7d10)
[0001.755] I> MB2_RF binary is read from storage
[0001.760] I> MB2_RF binary integrity check is success
[0001.765] I> Binary MB2_RF loaded successfully at 0xa00d7d10 (0x1bf30)
[0001.771] I> Task: Save fuse alias data to SC7 ctx
[0001.776] I> Task: Save PMIC data to SC7 ctx
[0001.780] I> Task: Save Pinmux data to SC7 ctx
[0001.784] I> Task: Save Pad Voltage data to SC7 ctx
[0001.789] I> Task: Save controller prod data to SC7 ctx
[0001.794] I> Task: Save prod cfg data to SC7 ctx
[0001.798] I> Task: Save I2C bus freq data to SC7 ctx
[0001.803] I> Task: Save SOCTherm data to SC7 ctx
[0001.808] I> Task: Save FMON data to SC7 ctx
[0001.812] I> Task: Save VMON data to SC7 ctx
[0001.816] I> Task: Save TZDRAM data to SC7 ctx
[0001.820] I> Task: Save GPIO int data to SC7 ctx
[0001.825] I> Task: Save clock data to SC7 ctx
[0001.829] I> Task: Save debug data to SC7 ctx
[0001.833] I> Task: Save MBWT data to SC7 ctx
[0001.841] I> SC7 context save done
[0001.844] I> Task: Load MB2/Applet/FSKP
[0001.848] I> Loading MB2
[0001.850] I> Slot: 0
[0001.852] I> Binary[6] block-8448 (partition size: 0x80000)
[0001.858] I> Binary name: MB2
[0001.861] I> Size of crypto header is 8192
[0001.865] I> Size of crypto header is 8192
[0001.869] I> strt_pg_num(8448) num_of_pgs(16) read_buf(0x8007e000)
[0001.875] I> BCH of MB2 read from storage
[0001.879] I> BCH address is : 0x8007e000
[0001.882] I> MB2 header integrity check is success
[0001.887] I> Binary magic in BCH component 0 is MB2B
[0001.892] I> component binary type is 6
[0001.896] I> Size of crypto header is 8192
[0001.899] I> strt_pg_num(8464) num_of_pgs(844) read_buf(0x80000000)
[0001.910] I> MB2 binary is read from storage
[0001.915] I> MB2 binary integrity check is success
[0001.920] I> Binary MB2 loaded successfully at 0x80000000 (0x696a0)
[0001.926] I> Task: Map CCPLEX SHARED carveout
[0001.930] I> Task: Prepare MB2 params
[0001.934] I> Task: Dram ecc test
[0001.937] I> Task: Misc NV security settings
[0001.941] I> NVDEC sticky bits programming done
[0001.946] I> Successfully powergated NVDEC
[0001.950] I> Task: Disable/Reload WDT
[0001.953] I> Task: Program misc carveouts
[0001.957] I> Program IPC carveouts
[0001.961] I> Task: Disable SCPM/POD reset
[0001.964] I> SLCG Global override status := 0x0
[0001.969] I> MB1: MSS reconfig completed
I> MB2 (version: 0.0.0.0-t234-54845784-af79ed0a)
I> t234-A01-0-Silicon (0x12347)
I> Boot-mode : Coldboot
I> Emulation: 
I> Entry timestamp: 0x001e76d7
I> Regular heap: [base:0x40040000, size:0x10000]
I> DMA heap: [base:0x82e000000, size:0x800000]
I> Task: SE error check
I> Task: Crypto init
I> Task: MB2 Params integrity check
I> Task: Enable CCPLEX WDT 5th expiry
I> Task: ARI update carveout TZDRAM
I> Task: Configure OEM set LA/PTSA values
I> Task: Check MC errors
I> Task: Enable hot-plug capability
I> Task: PSC mailbox init
I> Task: Enable clock for external modules
I> Task: Measured Boot init
I> Task: fTPM silicon identity init
I> fTPM is not enabled.
I> Task: OEM SC7 context save init
I> Task: I2C register
I> Task: Map CCPLEX_INTERWORLD_SHMEM carveout
I> Task: Program CBB PCIE AMAP regions
I> Task: Boot device init
I> Boot_device: QSPI_FLASH instance: 0
I> Qspi clock source : pllc_out0
I> QSPI Flash: Macronix 64MB
I> QSPI-0l initialized successfully
I> Secondary storage device: QSPI_FLASH instance: 0
I> Secondary storage device: SDMMC_USER instance: 3
I> sdmmc HS400 mode enabled
I> Task: Partition Manager Init
I> strt_pg_num(1) num_of_pgs(1) read_buf(0x82e001000)
I> strt_pg_num(131071) num_of_pgs(1) read_buf(0x82e001000)
I> strt_pg_num(131039) num_of_pgs(32) read_buf(0x82e001200)
I> Found 60 partitions in QSPI_FLASH (instance 0)
W> Cannot find any partition table for 00000003
W> PARTITION_MANAGER: Failed to publish partition.
I> Found 15 partitions in SDMMC_USER (instance 3)
I> Task: Pass DRAM ECC PRL Flag to FSI
I> Task: Load and authenticate registered FWs
I> Task: Load AUXP FWs
I> Successfully register SPE FW load task with MB2 loader
I> Successfully register RCE FW load task with MB2 loader
I> Successfully register DCE FW load task with MB2 loader
I> Unpowergating APE
I> Unpowergate done
I> Successfully register APE FW load task with MB2 loader
I> Skipping FSI FW load
I> Successfully register XUSB FW load task with MB2 loader
I> Successfully register PVA FW load task with MB2 loader
I> Partition name: A_spe-fw
I> Size of partition: 589824
I> Binary@ device:3/0 block-55040 (partition size: 0x90000), name: A_spe-fw
I> strt_pg_num(55040) num_of_pgs(16) read_buf(0x40066880)
I> strt_pg_num(55056) num_of_pgs(512) read_buf(0x82d600000)
I> Partition name: A_rce-fw
I> Size of partition: 1048576
I> Binary@ device:3/0 block-56192 (partition size: 0x100000), name: A_rce-fw
I> strt_pg_num(56192) num_of_pgs(16) read_buf(0x40066880)
I> strt_pg_num(56208) num_of_pgs(880) read_buf(0x82d200000)
I> spe: Authentication Finalize Done
I> Binary spe loaded successfully at 0x82d600000
I> Partition name: A_dce-fw
I> Size of partition: 5242880
I> Binary@ device:3/0 block-44800 (partition size: 0x500000), name: A_dce-fw
I> strt_pg_num(44800) num_of_pgs(16) read_buf(0x40066880)
I> rce: Authentication Finalize Done
I> Binary rce loaded successfully at 0x82d200000
I> Successfully register RCE FW context save task with MB2 loader
I> dce : oem authentication of header done
I> strt_pg_num(44816) num_of_pgs(1) read_buf(0x82e1403d8)
I> strt_pg_num(44816) num_of_pgs(8) read_buf(0x82e1403d8)
I> dce : meta-blob integrity check is success.
I> strt_pg_num(44824) num_of_pgs(512) read_buf(0x82e0003c0)
I> strt_pg_num(45336) num_of_pgs(512) read_buf(0x82e0403c0)
I> dce : will be decompressed at 0x836000000
I> version 1 Bin 1 BCheckSum 0 content_size 0 Content ChkSum 1 reserved_00  0
I> Reserved10 0 BlockMaxSize 5 Reserved11 0
I> strt_pg_num(45848) num_of_pgs(512) read_buf(0x82e0803c0)
I> dce : decompressed to 12062400 bytes
I> dce: plain binary integrity check is success
I> Partition name: A_adsp-fw
I> Size of partition: 2097152
I> Binary@ device:3/0 block-58240 (partition size: 0x200000), name: A_adsp-fw
I> strt_pg_num(58240) num_of_pgs(16) read_buf(0x40066880)
I> strt_pg_num(58256) num_of_pgs(800) read_buf(0x838800000)
I> dce: Authentication Finalize Done
I> Binary dce loaded successfully at 0x836000000
I> Partition name: A_xusb-fw
I> Size of partition: 262144
I> Binary@ device:3/0 block-9472 (partition size: 0x40000), name: A_xusb-fw
I> strt_pg_num(9472) num_of_pgs(16) read_buf(0x40066880)
I> strt_pg_num(9488) num_of_pgs(312) read_buf(0x82d700000)
I> ape: Authentication Finalize Done
I> Binary ape loaded successfully at 0x838800000
I> Successfully register APE FW context save task with MB2 loader
I> Partition name: A_pva-fw
I> Size of partition: 262144
I> Binary@ device:3/0 block-62336 (partition size: 0x40000), name: A_pva-fw
I> strt_pg_num(62336) num_of_pgs(16) read_buf(0x40066880)
I> xusb: Authentication Finalize Done
I> Binary xusb loaded successfully at 0x82d700000
I> Successfully register XUSB FW context save task with MB2 loader
I> pva-fw : oem authentication of header done
I> strt_pg_num(62352) num_of_pgs(1) read_buf(0x82e1403d8)
I> strt_pg_num(62352) num_of_pgs(8) read_buf(0x82e1403d8)
I> pva-fw : meta-blob integrity check is success.
I> strt_pg_num(62360) num_of_pgs(512) read_buf(0x82e0003c0)
I> pva-fw : will be decompressed at 0x82d980000
I> version 1 Bin 1 BCheckSum 0 content_size 0 Content ChkSum 1 reserved_00  0
I> Reserved10 0 BlockMaxSize 5 Reserved11 0
I> pva-fw : decompressed to 2156512 bytes
I> pva-fw: plain binary integrity check is success
I> pva-fw: Authentication Finalize Done
I> Binary pva-fw loaded successfully at 0x82d980000
I> Successfully register PVA FW context save task with MB2 loader
I> Task: Check MC errors
I> Task: Carveout setup
I> Program remaining OEM carveouts
I> Task: Enable FSITHERM
I> Task: Enable FSI VMON
I> FSI VMON: FSI Vmon re-calibration and fine tuning done
I> Task: Validate FSI Therm readings
I> Task: Restore XUSB sec
I> Task: Enable FSI SE clock
I> Enable FSI-SE clock...
I> Task: Initialize SBSA UART CAR
I> Task: Initialize CPUBL Params
I> CPUBL-params @ 0x832000000
I> Task: Ratchet update
W> Skip ratchet update - OPTIN fuse not set
I> Task: Prepare eeprom data
I> Task: FSI padctl context save
I> Task: Unpowergate APE
W> mb2_unpowergate_ape: skip! APE is in unpowergated state
I> Task: Memctrl reconfig pending clients
I> Task: OEM firewalls
I> OEM firewalls configured
I> Task: Powergate APE
I> Powergating APE
I> Powergate done
I> Task: OEM firewall restore saved settings
I> Task: Unhalt AUXPs
I> Unhalting SPE..
I> Enabling combined UART 
����spe: early_init
����vic initialized
����tsc initialized
����aon lic initialized
����spe: tag is 5243985d1b1eb3f06fac6d36bd7e74ac
����spe: SafeRTOS v8.4
����spe: init
����scheduler initialized
����aon hsp initialized
����tag initialized
����tcu initialized
����bpmp ipc initialized
����spe: late init
����cpu_nic clock initialized
����apb clock initialized
����pm initialized
����bpmp hsp initialized
����top1 hsp initialized
����ccplex ipc initialized
����spe: start scheduler
����
    I> Task: Trigger mailbox for PSC-BL1 exit
I> Sending opcode 0x4d420802 to psc
I> Received ACK from psc
I> Task: Start secure NOR provision
I> Skip Secure NOR provisioning
I> Task: Trigger load FSI keyblob
I> Skipping FSI key blob copy
I> Task: Complete load FSI keyblob
I> Skipping FSI key blob copy
I> Task: MB2-PSC_FW Key Manager Init
I> Sending opcode OP_PSC_KEY_MANAGER to psc-fw
I> Sending opcode 0x4b45594d to p��
                                   hwwdt_init: WDT boot cfg 0x710010 sts 0x10
bpmp: socket 0
bpmp: base binary md5 is 3b0e1a33cf85c7f62a7e8b93c2af97ed
bpmp: combined binary md5 is 2aafe334513692db071cfc4bbbaf4115
bpmp: firmware tag is 2aafe334513692db071c-3b0e1a33cf8
initialized vwdt
initialized mail_early
initialized fuse
initialized vfrel
initialized adc
fmon_populate_monitors: found 199 monitors
initialized fmon
initialized mc
initialized reset
initialized uphy_early
initialized emc_early
initialized pm
465 clocks registered
initialized clk_mach
initialized clk_cal_early
initialized clk_mach_early_config
initialized io_dpd
initialized soctherm
initialized regime
initialized i2c
vrmon_dt_init: vrmon node not found
vrmon_chk_boot_state: found 0 rail monitors
initialized vrmon
initialized regulator
��sc
I> Received ACK from psc
I> Task: Unhalt FSI
I> FSI unhalt skipped
I> Task: Unhalt AUXPs
I> Unhalting RCE
I> RCE unhalt successful
I> Unhalting DCE
I> DCE unhalt successful
I> APE unhalt skipped
I> Task: Load HV/CPUBL
I> Task: Load TOS
I> Task: Trigger l��initialized avfs_clk_platform
initialized powergate
��[     2.580399] Camera-FW on t234-rce-safe started
TCU early console enabled.
��oad��initialized dvs
initialized clk_mach_config
initialized suspend
initialized strap
initialized mce_dbell
�� TSEC leyblob
I> Sending opcode 0x53535452 to psc
��
  ��I> Sent opcode to psc
I> Task: Load and authenticate registered FWs
I> Partition name: A_cpu-bootloader
I> Size of partition: 3670016
I> Binary@ device:3/0 block-24832 (partition size: 0x380000), name: A_cpu-bootloader
��DCE Started
��I> strt_pg_num(24832) num_of_pgs(16) read_buf(0x40066880)
I> cpubl : oem authentication of header done
I> strt_pg_num(24848) num_of_pgs(1) read_buf(0x82e143f98)
I> strt_pg_num(24848) num_of_pgs(8) read_buf(0x82e143f98)
��DCE_R5_Init
��I> cpubl : meta-blob integrity check is success.
I> str��initialized emc
initialized emc_mrq
��t_pg_num(24856) num_of_pgs(512) read_buf(0x82e00��initialized clk_cal
initialized uphy_dt
initialized uphy_mrq
HSIO UPHY reset has been de-asserted 0x0
��3f8��initialized uphy
��0)
��MPU enabled
DCE_SW_In��initialized pg_late
initialized pg_mrq_init
swdtimer_init: reg polling start w period 47 ms
initialized swdtimer
initialized hwwdt_late
initialized bwmgr
initialized thermal_host_trip
initialized thermal_mrq
initialized oc_mrq
initialized reset_mrq
initialized mail_mrq
initialized fmon_mrq
initialized clk_mrq
initialized avfs_mrq
initialized i2c_mrq
initialized tag_mrq
initialized bwmgr_mrq
initialized console_mrq
missing prod DT calibration data for 199 fmons
initialized clk_sync_fmon_post
��it
��I> strt_pg_num(25368) num_of_pgs(512) read_buf(0x82e043f80)
��initialized clk_cal_late
initialized noc_late
initialized cvc
��I> cpubl : will be decompressed at 0��initialized avfs_clk_mach_post
initialized avfs_clk_platform_post
initialized cvc_late
initialized rm
initialized console_late
handling unreferenced clks
enable can1_core
enable can1_host
enable can2_core
enable can2_host
enable pwm3
enable mss_encrypt
enable maud
enable pllg_ref
enable dsi_core
enable aza_2xbit
enable pllc4_muxed
enable sdmmc4_axicif
enable xusb_ss
enable xusb_fs
enable xusb_falcon
enable xusb_core_mux
enable dsi_lp
enable sdmmc_legacy_tm
initialized clk_mach_post
initialized pg_post
initialized regulator_post
initialized profile
initialized mrq
initialized patrol_scrubber
initialized cactmon
initialized extras_post
bpmp: init c��[     2.778791] Camera-FW on t234-rce-safe ready SHA1=e2238c99 (crt 12.421 ms,��omplete
�� total boot 211.886 ms)
��x82c800000
I> version 1 Bin 1 BCheckSum 0 content_size 0 Content ChkSum 1 reserved_00  0
I> Reserved10 0 BlockMaxSize 5 Reserved11 0
I> strt_pg_num(25880) num_of_pgs(512) read_buf(0x82e083f80)
I> strt_pg_num(26392) num_of_pgs(512) read_buf(0x82e0c3f80)
I> strt_pg_num(26904) num_of_pgs(512) read_buf(0x82e103f80)
I> strt_pg_num(27416) num_of_pgs(512) read_buf(0x82e003f80)
I> strt_pg_num(27928) num_of_pgs(512) read_buf(0x82e043f80)
I> strt_pg_num(28440) num_of_pgs(512) read_buf(0x82e083f80)
I> strt_pg_num(28952) num_of_pgs(512) read_buf(0x82e0c3f80)
I> strt_pg_num(29464) num_of_pgs(512) read_buf(0x82e103f80)
I> strt_pg_num(29976) num_of_pgs(512) read_buf(0x82e003f80)
��Admin Task Init
Admin Task Init complete
Print Task Init
RM Task Init
SHA Task Init
Admin Task Started
DCE SC7 SHA Enabled
RM Task Started
RM Tas��I> strt_pg_num(30488) num_of_pgs(512) read_buf(0x82e043f80)
��k Running
Print Task Started
Print Task Running
SHA Task Started
DCE: FW Boot Complete
Adm��I> strt_pg_num(31000) num_of_pgs(512) read_buf(0x82e083f80)
��in Task Running
SHA Task Running
��I> cpubl : decompressed to 3653760 bytes
I> cpubl: plain binary integrity check is success
I> Partition name: A_secure-os
I> Size of partition: 4194304
I> Binary@ device:3/0 block-32000 (partition size: 0x400000), name: A_secure-os
I> strt_pg_num(32000) num_of_pgs(16) read_buf(0x40066880)
I> strt_pg_num(32016) num_of_pgs(3176) read_buf(0x83fd73000)
I> MB2-params @ 0x40060000
I> NSDRAM carveout base: 0x80000000, size: 0x7acdf0000
I> cpubl_params: nsdram: carveout: 1, encryption: 1
I> cpubl: Authentication Finalize Done
I> Binary cpubl loaded successfully at 0x82c800000
I> tos: Authentication Finalize Done
I> Binary tos loaded successfully at 0x83fd73000
I> Relocating OP-TEE dtb from: 0x83feff0f0 to 0x83c040020, size: 0x2889
I> [0] START: 0x80000000, SIZE: 0x7acdf0000
I> [1] START: 0x832000000, SIZE: 0x2000000
I> Setting NS memory ranges to OP-TEE dtb finished.
I> Partition name: A_eks
I> Size of partition: 262144
I> Binary@ device:3/0 block-44288 (partition size: 0x40000), name: A_eks
I> strt_pg_num(44288) num_of_pgs(16) read_buf(0x40066880)
I> strt_pg_num(44304) num_of_pgs(8) read_buf(0x83c020000)
I> eks: Authentication Finalize Done
I> Binary eks loaded successfully at 0x83c020000
I> EKB detected (length: 0x410) @ VA:0x83c020000
I> Task: Add cpubl params integrity check
I> Added cpubl params digest.
I> Task: Prepare TOS params
I> Setting EKB blob info to OPTEE dtb finished.
I> Setting OPTEE arg3: 0x83c040020
I> NVRNG: Health check success
I> NVRNG: Health check success
I> Task: OEM SC7 context save
I> OEM sc7 context saved
I> Task: Disable MSS perf stats
I> Task: Program display sticky bits
I> Task: Storage device deinit
I> Task: SMMU external bypass disable
I> Task: SMMU init
I> Task: Program GICv3 registers
I> Task: Audit firewall settings
I> Task: Bootchain failure check
I> Current Boot-Chain Slot: 0
I> BR-BCT Boot-Chain is 0, and status is 1. Set UPDATE_BRBCT bit to 0
I> Task: Burn RESERVED_ODM0 fuse
I> Task: Lock fusing
I> Task: Clear dec source key
I> MB2 finished

��NOTICE:  BL31: v2.8(release):e12e3fa93
NOTICE:  BL31: Built : 19:36:31, Apr 24 2024
I/TC: 
I/TC: Non-secure external DT found
I/TC: OP-TEE version: 3.22 (gcc version 11.3.0 (Buildroot 2022.08)) #2 Thu Apr 25 02:48:28 UTC 2024 4
I/TC: WARNING: This OP-TEE configuration might be insecure!
I/TC: WARNING: Please check https://optee.readthedocs.io/en/latest/architecture/porting_guidelines.hl
I/TC: Primary CPU initializing
I/TC: Test OEM keys are being used. This is insecure for shipping products!
I/TC: Primary CPU switching to normal world boot
��
  Jetson UEFI firmware (version 36.3.0-gcid-36106755 built on 2024-04-25T02:38:25+00:00)
































































��I/TC: Reserved shared memory is disabled
I/TC: Dynamic shared memory is enabled
I/TC: Normal World virtualization support is disabled
I/TC: Asynchronous notifications are disabled
I/TC: WARNING: Test UEFI variable auth key is being used !
I/TC: WARNING: UEFI variable protection is not fully enabled !
��






























































Jetson System firmware version 36.3.0-gcid-36106755 date 2024-04-25T02:38:25+00:
00
ESC   to enter Setup.
F11   to enter Boot Manager Menu.
Enter to continue boot.

��I/TC: Reserved shared memory is disabled
I/TC: Dynamic shared memory is enabled
I/TC: Normal World virtualization support is disabled
I/TC: Asynchronous notifications are disabled
��L4TLauncher: Attempting Direct Boot
EFI stub: Booting Linux Kernel...
EFI stub: UEFI Secure Boot is enabled.
EFI stub: Using DTB from configuration table
EFI stub: Loaded initrd from LINUX_EFI_INITRD_MEDIA_GUID device path
EFI stub: Exiting boot services...
EFI stub: UEFI Secure Boot is enabled.
��debugfs initialized
��I/TC: Reserved shared memory is disabled
I/TC: Dynamic shared memory is enabled
I/TC: Normal World virtualization support is disabled
I/TC: Asynchronous notifications are disabled
��[    0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd421]
[    0.000000] Linux version 5.15.136-tegra (buildbrain@mobile-u64-6269-d7000) (aarch64-buildroot-li)
[    0.000000] Machine model: NVIDIA Jetson AGX Orin Developer Kit
[    0.000000] efi: EFI v2.70 by EDK II
[    0.000000] efi: RTPROP=0x827fbf198 SMBIOS=0xffff0000 SMBIOS 3.0=0x827990000 MEMATTR=0x821a15018  
[    0.000000] random: crng init done
[    0.000000] secureboot: Secure boot enabled
[    0.000000] esrt: Reserving ESRT space from 0x00000008219d4e18 to 0x00000008219d4e50.
[    0.000000] Reserved memory: created CMA memory pool at 0x0000000805000000, size 256 MiB
[    0.000000] OF: reserved mem: initialized node linux,cma, compatible id shared-dma-pool
[    0.000000] NUMA: No NUMA configuration found
[    0.000000] NUMA: Faking a node at [mem 0x0000000080000000-0x0000000833ffffff]
[    0.000000] NUMA: NODE_DATA [mem 0x828c7a800-0x828c7cfff]
[    0.000000] Zone ranges:
[    0.000000]   DMA      [mem 0x0000000080000000-0x00000000ffffffff]
[    0.000000]   DMA32    empty
[    0.000000]   Normal   [mem 0x0000000100000000-0x0000000833ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000080000000-0x00000000fffdffff]
[    0.000000]   node   0: [mem 0x00000000fffe0000-0x00000000ffffffff]
[    0.000000]   node   0: [mem 0x0000000100000000-0x0000000818a35fff]
[    0.000000]   node   0: [mem 0x0000000818a36000-0x0000000818b9bfff]
[    0.000000]   node   0: [mem 0x0000000818b9c000-0x000000082607ffff]
[    0.000000]   node   0: [mem 0x0000000826080000-0x0000000827fbffff]
[    0.000000]   node   0: [mem 0x0000000827fc0000-0x000000082c5fffff]
[    0.000000]   node   0: [mem 0x000000082c600000-0x000000082c7fffff]
[    0.000000]   node   0: [mem 0x000000082c800000-0x000000082cd6ffff]
[    0.000000]   node   0: [mem 0x000000082d700000-0x000000082d7fffff]
[    0.000000]   node   0: [mem 0x0000000832000000-0x0000000833ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000080000000-0x0000000833ffffff]
[    0.000000] On node 0, zone Normal: 2448 pages in unavailable ranges
[    0.000000] On node 0, zone Normal: 18432 pages in unavailable ranges
[    0.000000] On node 0, zone Normal: 16384 pages in unavailable ranges
[    0.000000] psci: probing for conduit method from DT.
[    0.000000] psci: PSCIv1.1 detected in firmware.
[    0.000000] psci: Using standard PSCI v0.2 function IDs
[    0.000000] psci: Trusted OS migration not required
[    0.000000] psci: SMC Calling Convention v1.2
[    0.000000] percpu: Embedded 2��WARNING: clock_disable: clk_power_ungate on gated domain 35 for gk
��9 pages/cpu s80408 r8192 d30184 u118784
[    0.000000] Detected PIPT I-cache on CPU0
[    0.000000] CPU features: detected: Address authentication (architected algorithm)
[    0.000000] CPU features: detected: GIC system register CPU interface
[    0.000000] CPU features: detected: Virtualization Host Extensions��WARNING: clock_disable: clk_pk
��
[    0.000000] CPU features: detected: Hardware dirty bit management
[    0.000000] CPU features: detected: Spectre-v4
[    0.000000] CPU features: detected: Spectre-BHB
[    0.000000] CPU features: kernel page table isolation forced ON by KASLR
[    0.000000] CPU features: detected: Kernel page table isolation (KPTI)
[    0.000000] alternatives: patching kernel code
[    0.000000] Built 1 z��WARNING: clock_disable: clk_power_ungate on gated domain 35 for gpc0clk
��onelists, mobility grouping on.  Total pages: 7930224
[    0.000000] Policy zone: Normal
[    0.000000] Kernel command line:  bl_prof_dataptr=2031616@0x82C610000 bl_prof_ro_ptr=65536@0x82C6 
[    0.000000] Unknown kernel command line parameters "bl_prof_dataptr=2031616@0x82C610000 bl_prof_r.
[    0.000000] Dentry cache hash table entries: 4194304 (order: 13, 33554432 bytes, linear)
[    0.000000] Inode-cache hash table entries: 2097152 (order: 12, 16777216 bytes, linear)
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] software IO TLB: mapped [mem 0x00000000fbfe0000-0x00000000fffe0000] (64MB)
[    0.000000] Memory: 31152996K/32225728K available (19712K kernel code��WARNING: clock_disable: cle
��, 4056K rwdata, 9968K rodata, 7680K init, 529K bss, 810588K reserved, 262144K cma-reserved)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=12, Nodes=1
[    0.000000] trace event string verifier disabled
[    0.000000] rcu: Preemptible hierarchical RCU implementation.
[    0.00��WARNING: clock_disable: clk_power_ungate on gated domain 34 for nafll_dla1_core
��0000] rcu:    RCU event tracing is enabled.
[    0.000000] rcu:     RCU restricting CPUs from NR_CPUS=256 to nr_cpu_ids=12.
[    0.000000]  Trampoline variant of Tasks RCU enabled.
[    0.000000]  Rude variant of Tasks RCU enabled.
[    0.000000]  Tracing variant of Tasks RCU ena��WARNING: clock_disable: clk_power_ungate on gated n
��bled.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 25 jiffies.
[    0.000000] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=12
[    0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
[    0.000000] GICv3: GIC: Using split EOI/Deactiva��WARNING: clock_disable: clk_power_ungate on gatn
��te mode
[    0.000000] GICv3: 960 SPIs implemented
[    0.000000] GICv3: 0 Extended SPIs implemented
[    0.000000] GICv3: Distributor has no Range Selector support
[    0.000000] Root IRQ handler: gic_handle_irq
[    0.000000] GICv3: 16 PPIs implemented
[    0.000000] GICv3: CPU0:��WARNING: clock_disable: clk_power_ungate on gated domain 34 for dla0_coe
�� found redistributor 0 region 0:0x000000000f440000
[    0.000000] arch_timer: cp15 timer(s) running at 31.25MHz (phys).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0xe6a171046, max_ids
[    0.000001] sched_clock: 56 bits at 31M��WARNING: clock_disable: clk_power_ungate on gated domaine
��Hz, resolution 32ns, wraps every 4398046511088ns
[    0.000409] Console: colour dummy device 80x25
[    0.000421] printk: console [tty0] enabled
[    0.000478] Calibrating delay loop (skipped), value calculated using timer frequency.. 62.50 Bogo)
[    0.00048��WARNING: clock_disable: clk_power_ungate on gated domain 34 for dla0_falcon
��4] pid_max: default: 32768 minimum: 301
[    0.000524] LSM: Security Framework initializing
[    0.000549] Yama: becoming mindful.
[    0.000566] SELinux:  Initializing.
[    0.000675] Mount-cache hash table entries: 65536 (order: 7, 524288 bytes, linear)
[    0.000721] Mountpoin��WARNING: clock_disable: clk_power_ungate on gated domain 34 for nafll_dla0n
��t-cache hash table entries: 65536 (order: 7, 524288 bytes, linear)
[    0.002161] rcu: Hierarchical SRCU implementation.
[    0.005203] Tegra Revision: A01 SKU: 208 CPU Process: 0 SoC Process: 0
[    0.005541] Remapping and enabling EFI services.
[    0.006436] smp: Bringing up secondary CPUs ...
[    0.006944] Detected PIPT I-cache on CPU1
[    0.006989] GICv3: CPU1: found redistributor 100 region 0:0x000000000f460000
[    0.007025] CPU1: Booted secondary processor 0x0000000100 [0x410fd421]
[    0.007491] Detected PIPT I-cache on CPU2
[    0.007503] GICv3: CPU2: found redistributor 200 region 0:0x000000000f480000
[    0.007519] CPU2: Booted secondary processor 0x0000000200 [0x410fd421]
[    0.007926] Detected PIPT I-cache on CPU3
[    0.007936] GICv3: CPU3: found redistributor 300 region 0:0x000000000f4a0000
[    0.007950] CPU3: Booted secondary processor 0x0000000300 [0x410fd421]
[    0.010419] Detected PIPT I-cache on CPU4
[    0.010445] GICv3: CPU4: found redistributor 10000 region 0:0x000000000f4c0000
[    0.010471] CPU4: Booted secondary processor 0x0000010000 [0x410fd421]
[    0.010927] Detected PIPT I-cache on CPU5
[    0.010938] GICv3: CPU5: found redistributor 10100 region 0:0x000000000f4e0000
[    0.010953] CPU5: Booted secondary processor 0x0000010100 [0x410fd421]
[    0.011378] Detected PIPT I-cache on CPU6
[    0.011389] GICv3: CPU6: found redistributor 10200 region 0:0x000000000f500000
[    0.011405] CPU6: Booted secondary processor 0x0000010200 [0x410fd421]
[    0.011839] Detected PIPT I-cache on CPU7
[    0.011850] GICv3: CPU7: found redistributor 10300 region 0:0x000000000f520000
[    0.011866] CPU7: Booted secondary processor 0x0000010300 [0x410fd421]
[    0.014343] Detected PIPT I-cache on CPU8
[    0.014371] GICv3: CPU8: found redistributor 20000 region 0:0x000000000f540000
[    0.014397] CPU8: Booted secondary processor 0x0000020000 [0x410fd421]
[    0.014857] Detected PIPT I-cache on CPU9
[    0.014869] GICv3: CPU9: found redistributor 20100 region 0:0x000000000f560000
[    0.014882] CPU9: Booted secondary processor 0x0000020100 [0x410fd421]
[    0.015314] Detected PIPT I-cache on CPU10
[    0.015327] GICv3: CPU10: found redistributor 20200 region 0:0x000000000f580000
[    0.015340] CPU10: Booted secondary processor 0x0000020200 [0x410fd421]
[    0.015763] Detected PIPT I-cache on CPU11
[    0.015775] GICv3: CPU11: found redistributor 20300 region 0:0x000000000f5a0000
[    0.015789] CPU11: Booted secondary processor 0x0000020300 [0x410fd421]
[    0.015842] smp: Brought up 1 node, 12 CPUs
[    0.015847] SMP: Total of 12 processors activated.
[    0.015850] CPU features: detected: 32-bit EL0 Support
[    0.015852] CPU features: detected: Data cache clean to the PoU not required for I/D coherence
[    0.015854] CPU features: detected: Common not Private translations
[    0.015855] CPU features: detected: CRC32 instructions
[    0.015856] CPU features: detected: Data cache clean to Point of Persistence
[    0.015857] CPU features: detected: Generic authentication (architected algorithm)
[    0.015858] CPU features: detected: RCpc load-acquire (LDAPR)
[    0.015859] CPU features: detected: LSE atomic instructions
[    0.015860] CPU features: detected: Privileged Access Never
[    0.015861] CPU features: detected: RAS Extension Support
[    0.015863] CPU features: detected: Speculative Store Bypassing Safe (SSBS)
[    0.051700] CPU: All CPU(s) started at EL2
[    0.057279] devtmpfs: initialized
[    0.080685] KASLR enabled
[    0.080889] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 764504178s
[    0.080918] futex hash table entries: 4096 (order: 6, 262144 bytes, linear)
[    0.086066] pinctrl core: initialized pinctrl subsystem
[    0.087126] SMBIOS 3.6.0 present.
[    0.087139] DMI: NVIDIA NVIDIA Jetson AGX Orin Developer Kit/Jetson, BIOS 36.3.0-gcid-36106755 044
[    0.087740] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.089875] DMA: preallocated 4096 KiB GFP_KERNEL pool for atomic allocations
[    0.090229] DMA: preallocated 4096 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations
[    0.090562] DMA: preallocated 4096 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations
[    0.090624] audit: initializing netlink subsys (disabled)
[    0.090775] audit: type=2000 audit(0.088:1): state=initialized audit_enabled=0 res=1
[    0.092672] thermal_sys: Registered thermal governor 'step_wise'
[    0.092677] thermal_sys: Registered thermal governor 'user_space'
[    0.092678] thermal_sys: Registered thermal governor 'power_allocator'
[    0.097956] cpuidle: using governor menu
[    0.098155] hw-breakpoint: found 6 breakpoint and 4 watchpoint registers.
[    0.098353] ASID allocator initialised with 32768 entries
[    0.100513] Serial: AMBA PL011 UART driver
[    0.112977] 31d0000.serial: ttyAMA0 at MMIO 0x31d0000 (irq = 118, base_baud = 0) is a SBSA
[    0.125036] platform bpmp: Fixing up cyclic dependency with 2c60000.external-memory-controller
[    0.134688] HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages
[    0.134697] HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages
[    0.134699] HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages
[    0.134700] HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages
[    0.135678] cryptd: max_cpu_qlen set to 1000
[    0.137690] ACPI: Interpreter disabled.
[    0.139760] iommu: Default domain type: Translated 
[    0.139766] iommu: DMA domain TLB invalidation policy: strict mode 
[    0.140168] SCSI subsystem initialized
[    0.140353] vgaarb: loaded
[    0.140537] usbcore: registered new interface driver usbfs
[    0.140559] usbcore: registered new interface driver hub
[    0.140578] usbcore: registered new device driver usb
[    0.141009] pps_core: LinuxPPS API ver. 1 registered
[    0.141017] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.>
[    0.141025] PTP clock support registered
[    0.141093] EDAC MC: Ver: 3.0.0
[    0.142548] Registered efivars operations
[    0.143244] FPGA manager framework
[    0.143320] Advanced Linux Sound Architecture Driver Initialized.
[    0.144203] clocksource: Switched to clocksource arch_sys_counter
[    0.180216] VFS: Disk quotas dquot_6.6.0
[    0.180292] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes)
[    0.180554] pnp: PnP ACPI: disabled
[    0.183831] NET: Registered PF_INET protocol family
[    0.184380] IP idents hash table entries: 262144 (order: 9, 2097152 bytes, linear)
[    0.186829] tcp_listen_portaddr_hash hash table entries: 16384 (order: 6, 262144 bytes, linear)
[    0.186865] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.186900] TCP established hash table entries: 262144 (order: 9, 2097152 bytes, linear)
[    0.187132] TCP bind hash table entries: 65536 (order: 8, 1048576 bytes, linear)
[    0.188488] TCP: Hash tables configured (established 262144 bind 65536)
[    0.188739] UDP hash table entries: 16384 (order: 7, 524288 bytes, linear)
[    0.188808] UDP-Lite hash table entries: 16384 (order: 7, 524288 bytes, linear)
[    0.189116] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    0.189592] RPC: Registered named UNIX socket transport module.
[    0.189598] RPC: Registered udp transport module.
[    0.189599] RPC: Registered tcp transport module.
[    0.189599] RPC: Registered tcp NFSv4.1 backchannel transport module.
[    0.189619] PCI: CLS 0 bytes, default 64
[    0.189901] Unpacking initramfs...
[    0.201352] hw perfevents: enabled with armv8_cortex_a78 PMU driver, 7 counters available
[    0.201676] kvm [1]: IPA Size Limit: 48 bits
[    0.201715] kvm [1]: GICv3: no GICV resource entry
[    0.201723] kvm [1]: disabling GICv2 emulation
[    0.201753] kvm [1]: GIC system register CPU interface enabled
[    0.201883] kvm [1]: vgic interrupt IRQ9
[    0.202092] kvm [1]: VHE mode initialized successfully
[    0.205446] Initialise system trusted keyrings
[    0.205562] workingset: timestamp_bits=42 max_order=23 bucket_order=0
[    0.209431] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.209890] NFS: Registering the id_resolver key type
[    0.209922] Key type id_resolver registered
[    0.209925] Key type id_legacy registered
[    0.209991] nfs4filelayout_init: NFSv4 File Layout Driver Registering...
[    0.210012] nfs4flexfilelayout_init: NFSv4 Flexfile Layout Driver Registering...
[    0.210037] ntfs: driver 2.1.32 [Flags: R/O].
[    0.210239] 9p: Installing v9fs 9p2000 file system support
[    0.222412] Key type asymmetric registered
[    0.222420] Asymmetric key parser 'x509' registered
[    0.222553] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 245)
[    0.222562] io scheduler mq-deadline registered
[    0.222568] io scheduler kyber registered
[    0.233506] EINJ: ACPI disabled.
[    0.245498] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled
[    0.247365] SuperH (H)SCI(F) driver initialized
[    0.247700] msm_serial: driver initialized
[    0.248341] printk: console [ttyTCU0] enabled
[    0.249273] arm-smmu 8000000.iommu: probing hardware configuration...
[    0.249280] arm-smmu 8000000.iommu: SMMUv2 with:
[    0.249287] arm-smmu 8000000.iommu:  stage 1 translation
[    0.249292] arm-smmu 8000000.iommu:  stage 2 translation
[    0.249293] arm-smmu 8000000.iommu:  nested translation
[    0.249299] arm-smmu 8000000.iommu:  stream matching with 128 register groups
[    0.249303] arm-smmu 8000000.iommu:  128 context banks (0 stage-2 only)
[    0.249316] arm-smmu 8000000.iommu:  Supported page sizes: 0x61311000
[    0.249319] arm-smmu 8000000.iommu:  Stage-1: 48-bit VA -> 48-bit IPA
[    0.249320] arm-smmu 8000000.iommu:  Stage-2: 48-bit IPA -> 48-bit PA
[    0.250262] arm-smmu 10000000.iommu: probing hardware configuration...
[    0.250265] arm-smmu 10000000.iommu: SMMUv2 with:
[    0.250269] arm-smmu 10000000.iommu:         stage 1 translation
[    0.250273] arm-smmu 10000000.iommu:         stage 2 translation
[    0.250273] arm-smmu 10000000.iommu:         nested translation
[    0.250276] arm-smmu 10000000.iommu:         stream matching with 128 register groups
[    0.250279] arm-smmu 10000000.iommu:         128 context banks (0 stage-2 only)
[    0.250283] arm-smmu 10000000.iommu:         Supported page sizes: 0x61311000
[    0.250284] arm-smmu 10000000.iommu:         Stage-1: 48-bit VA -> 48-bit IPA
[    0.250285] arm-smmu 10000000.iommu:         Stage-2: 48-bit IPA -> 48-bit PA
[    0.250632] arm-smmu 12000000.iommu: probing hardware configuration...
[    0.250636] arm-smmu 12000000.iommu: SMMUv2 with:
[    0.250639] arm-smmu 12000000.iommu:         stage 1 translation
[    0.250641] arm-smmu 12000000.iommu:         stage 2 translation
[    0.250643] arm-smmu 12000000.iommu:         nested translation
[    0.250646] arm-smmu 12000000.iommu:         stream matching with 128 register groups
[    0.250647] arm-smmu 12000000.iommu:         128 context banks (0 stage-2 only)
[    0.250654] arm-smmu 12000000.iommu:         Supported page sizes: 0x61311000
[    0.250655] arm-smmu 12000000.iommu:         Stage-1: 48-bit VA -> 48-bit IPA
[    0.250657] arm-smmu 12000000.iommu:         Stage-2: 48-bit IPA -> 48-bit PA
[    0.261465] loop: module loaded
[    0.262557] megasas: 07.717.02.00-rc1
[    0.267003] tun: Universal TUN/TAP device driver, 1.6
[    0.267607] thunder_xcv, ver 1.0
[    0.267635] thunder_bgx, ver 1.0
[    0.267659] nicpf, ver 1.0
[    0.268556] hclge is initializing
[    0.268587] hns3: Hisilicon Ethernet Network Driver for Hip08 Family - version
[    0.268595] hns3: Copyright (c) 2017 Huawei Corporation.
[    0.268632] e1000: Intel(R) PRO/1000 Network Driver
[    0.268638] e1000: Copyright (c) 1999-2006 Intel Corporation.
[    0.268668] e1000e: Intel(R) PRO/1000 Network Driver
[    0.268674] e1000e: Copyright(c) 1999 - 2015 Intel Corporation.
[    0.268695] igb: Intel(R) Gigabit Ethernet Network Driver
[    0.268700] igb: Copyright (c) 2007-2014 Intel Corporation.
[    0.268719] igbvf: Intel(R) Gigabit Virtual Function Network Driver
[    0.268725] igbvf: Copyright (c) 2009 - 2012 Intel Corporation.
[    0.268934] sky2: driver version 1.30
[    0.269655] VFIO - User Level meta-driver version: 0.3
[    0.271107] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    0.271119] ehci-pci: EHCI PCI platform driver
[    0.271144] ehci-platform: EHCI generic platform driver
[    0.271236] ehci-orion: EHCI orion driver
[    0.271303] ehci-exynos: EHCI Exynos driver
[    0.271362] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[    0.271391] ohci-pci: OHCI PCI platform driver
[    0.271422] ohci-platform: OHCI generic platform driver
[    0.271497] ohci-exynos: OHCI Exynos driver
[    0.271925] usbcore: registered new interface driver usb-storage
[    0.273830] i2c_dev: i2c /dev entries driver
[    0.275147] pps pps0: new PPS source ktimer
[    0.275157] pps pps0: ktimer PPS source registered
[    0.275165] pps_ldisc: PPS line discipline registered
[    0.277390] device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com
[    0.279596] sdhci: Secure Digital Host Controller Interface driver
[    0.279601] sdhci: Copyright(c) Pierre Ossman
[    0.280061] Synopsys Designware Multimedia Card Interface Driver
[    0.280719] sdhci-pltfm: SDHCI platform and OF driver helper
[    0.282414] ledtrig-cpu: registered to indicate activity on CPUs
[    0.283396] SMCCC: SOC_ID: ID = jep106:036b:0234 Revision = 0x00000401
[    0.283921] tegra-bpmp bpmp: Adding to iommu group 0
[    0.285783] tegra-bpmp bpmp: firmware: 2aafe334513692db071c-3b0e1a33cf8
[    0.377617] Freeing initrd memory: 11444K
[    3.721341] clocksource: tsc: mask: 0xffffffffffffff max_cycles: 0xe6a171046, max_idle_ns: 881590s
[    3.721355] clocksource: osc: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 49772407460 ns
[    3.721359] clocksource: usec: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 191126044627s
[    3.721630] hid: raw HID events driver (C) Jiri Kosina
[    3.722040] usbcore: registered new interface driver usbhid
[    3.722046] usbhid: USB HID core driver
[    3.726948] optee: probing for conduit method.
[    3.727006] optee: revision 3.22 (e7b5ff3f)
[    3.786329] optee: dynamic shared memory is enabled
[    3.786583] optee: initialized driver
[    3.789400] usbcore: registered new interface driver snd-usb-audio
[    3.790981] NET: Registered PF_PACKET protocol family
[    3.791194] 9pnet: Installing 9P2000 support
[    3.791291] Key type dns_resolver registered
[    3.792615] printk: console [ttyTCU0]: printing thread started
[    3.793690] printk: console [tty0]: printing thread started
[    3.793761] Loading compiled-in X.509 certificates
[    3.806461] Loaded X.509 cert 'Build time autogenerated kernel key: f3d26e9f064832ca792e15e33f60c'
[    3.836573] gpio-394 (camera-control-output-low): hogged as output/low
[    3.836607] gpio-397 (camera-control-output-low): hogged as output/low
[    3.836629] gpio-487 (camera-control-output-low): hogged as output/low
[    3.836644] gpio-486 (camera-control-output-low): hogged as output/low
[    3.902398] simple-framebuffer chosen:framebuffer: framebuffer at 0x839e00000, 0x870000 bytes
[    3.902411] simple-framebuffer chosen:framebuffer: format=x8r8g8b8, mode=1920x1080x32, linelength2
[    3.912890] Console: switching to colour frame buffer device 240x67
[    3.915636] simple-framebuffer chosen:framebuffer: fb0: simplefb registered!
[    3.916611] tegra-gpcdma 2600000.dma-controller: Adding to iommu group 1
[    3.918205] tegra-gpcdma 2600000.dma-controller: GPC DMA driver register 31 channels
[    3.919399] serial-tegra 3100000.serial: RX in PIO mode
[    3.919403] serial-tegra 3100000.serial: TX in PIO mode
[    3.919464] 3100000.serial: ttyTHS1 at MMIO 0x3100000 (irq = 112, base_baud = 0) is a TEGRA_UART
[    3.920515] serial-tegra 3110000.serial: RX in PIO mode
[    3.920519] serial-tegra 3110000.serial: TX in PIO mode
[    3.920561] 3110000.serial: ttyTHS2 at MMIO 0x3110000 (irq = 207, base_baud = 0) is a TEGRA_UART
[    3.923829] tegra_rtc c2a0000.rtc: registered as rtc1
[    3.923839] tegra_rtc c2a0000.rtc: Tegra internal Real Time Clock
[    3.924333] tegra-i2c 3160000.i2c: Adding to iommu group 1
[    3.928344] tegra-i2c 3180000.i2c: Adding to iommu group 1
[    3.931802] tegra-i2c 3190000.i2c: Adding to iommu group 1
[    3.934743] tegra-i2c 31b0000.i2c: Adding to iommu group 1
[    3.937823] tegra-i2c 31c0000.i2c: Adding to iommu group 1
[    3.940942] tegra-i2c 31e0000.i2c: Adding to iommu group 1
[    3.944567] tegra-i2c c240000.i2c: Adding to iommu group 1
[    3.947965] tegra-i2c c250000.i2c: Adding to iommu group 1
[    3.973775] cpufreq: cpufreq_online: CPU0: Running at unlisted initial frequency: 2007000 KHz, chz
[    3.976487] cpufreq: cpufreq_online: CPU4: Running at unlisted initial frequency: 2009000 KHz, chz
[    3.978778] cpufreq: cpufreq_online: CPU8: Running at unlisted initial frequency: 2007000 KHz, chz
[    3.981487] sdhci-tegra 3460000.mmc: Adding to iommu group 2
[    3.982899] sdhci-tegra 3400000.mmc: Adding to iommu group 3
[    3.983913] irq: IRQ234: trimming hierarchy from :bus@0:pmc@c360000
[    3.983976] irq: IRQ235: trimming hierarchy from :bus@0:interrupt-controller@f400000-1
[    3.984015] irq: IRQ236: trimming hierarchy from :bus@0:pmc@c360000
[    3.984076] input: gpio-keys as /devices/platform/gpio-keys/input/input0
[    4.488099] ALSA device list:
[    4.488103]   No soundcards found.
[    4.488414] sdhci-tegra 3400000.mmc: Got CD GPIO
[    4.489737] mmc0: CQHCI version 5.10
[    4.524901] mmc0: SDHCI controller on 3460000.mmc [3460000.mmc] using ADMA 64-bit
[    4.537306] irq: IRQ237: trimming hierarchy from :bus@0:interrupt-controller@f400000-1
[    4.538658] mmc1: SDHCI controller on 3400000.mmc [3400000.mmc] using ADMA 64-bit
[    4.539742] Freeing unused kernel memory: 7680K
[    4.539810] Run /init as init process
[    4.551207] Checking overlayfs setting...
[    4.576853] Overlayfs is disabled...
[    4.630566] mmc0: Command Queue Engine enabled
[    4.630576] mmc0: new HS400 Enhanced strobe MMC card at address 0001
[    4.630825] mmcblk0: mmc0:0001 G1M15M 59.3 GiB 
[    4.634131]  mmcblk0: p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15
[    4.634837] mmcblk0boot0: mmc0:0001 G1M15M 31.5 MiB 
[    4.635288] mmcblk0boot1: mmc0:0001 G1M15M 31.5 MiB 
[    4.635696] mmcblk0rpmb: mmc0:0001 G1M15M 4.00 MiB, chardev (511:0)
insmod /lib/modules/5.15.136-tegra/kernel/drivers/thermal/tegra/tegra-bpmp-thermal.ko 
insmod /lib/modules/5.15.136-tegra/kernel/drivers/pwm/pwm-tegra.ko 
insmod /lib/modules/5.15.136-tegra/kernel/drivers/hwmon/pwm-fan.ko 
bash: cannot set terminal process group (-1): Inappropriate ioctl for device
[  .98h: 708no job control in  Mos shelile
bash-5.1# [   35.808384] VDD_3V3_PCIE: disabling
[   35.808397] VDD_12V_PCIE: disabling

It seems you can flash the board with secureboot enabled and boot successfully.
What’t the full commands you used to flash the board.

Do you connect any external NVMe SSD or you only use internal eMMC for these works?

So the flash command that used is:

sudo ./flash.sh --uefi-keys uefi_keys/uefi_keys.conf jetson-agx-orin-devkit internal

everything is perfect when I boot,

What I don’t think you understand is that, after I flashed and secureboot is enabled, I want to update the extlinux.conf or any payload, so imagine I have extlinux_2.conf I sign it manually with openssl with the same keys that I flashed the jetson with and then I change it in the /boot/extlinux with the new signature. When I reboot it dont work, the problem here is not when I flash but when I try to update the extlinux.conf or any payload while the secureboot is activated. In other words do the jetson take support the update of payloads when the secureboot is activated, I think it does but I need your confirmatino cause I can’t get it to work.

I don’t use an external nvme SSD for now, only internal eMMMC, again the boot used to work but for some reason now I get the security violation of shown in the other topic.

Okay, the current issue is about that you can’t modify extlinux.conf and boot successfully.

Could you share the detailed steps how do you perform this for us to verify it locally?

Just after the flash the UEFI secureboot is good, I can also verify it’s activated no problems, now my use case will be that one day we’ll have to change a payload while the secureboot is activated and we can not reflash to modify the payload, so in order to simulate that, I changed an extlinux.conf ( add a
commentary) and then I signed it with the same key and cert used for the flashing of the secureboot on the host:

openssl cms -sign -signer …/db_1.crt -inkey …/db_1.key -binary -in extlinux.conf -outform der -out extlinux.conf.sig

Then I transfered it to the jetson using scp, and modified the original signed extlinux.conf and it’s .sig with the new couple of extlinux.conf and it’s sig under /boot/extlinux of the jetson:

When I restard my jetson the boot gets stucked here:

It’s like at the start the jetson don’t see the new payload as not signed it’s like it accepts it but then when booting I get this no root-device: Mount failed, I don’t get why we get this error.

Could you refer to Generate Signed UEFI Payloads to sign each files in UEFI payloads.

  • extlinux.conf
  • initrd
  • kernel images (in rootfs, and in kernel and recovery partitions)
  • kernel-dtb images (in rootfs, and in kernel-dtb and recovery-dtb partitions)
  • BOOTAA64.efi.

Or you can refer to Generate a Capsule Payload with UEFI Secureboot Enabled to update payload.

I managed to get it to work but thank you for the help, I’ll see now how can I combien both uefi secureboot and the disk encryption of the emmc to work together.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.