Seems like you missed to sign the boot.img
What you need to do is using private key (what was used to enable the signed boot) sign the boot.img using next command-i input file
-k path to the private key
-o output signature file
You can use rpi-eeprom-digest from the ./tools dir from https://github.com/raspberrypi/usbboot
PI firmware will compare the boot.img with it's sign and if it matches - will continue to load boot.img as a bootfs (with kernel and initramfs)
What you need to do is using private key (what was used to enable the signed boot) sign the boot.img using next command
Code:
rpi-eeprom-digest -k private.pem -i /boot/firmware/boot.img -o /boot/firmware/boot.sig -k path to the private key
-o output signature file
You can use rpi-eeprom-digest from the ./tools dir from https://github.com/raspberrypi/usbboot
PI firmware will compare the boot.img with it's sign and if it matches - will continue to load boot.img as a bootfs (with kernel and initramfs)
Statistics: Posted by serhiimi — Mon Jul 01, 2024 11:49 am
