8.5. Release v2025.09.0

8.5.1. Removal of CONFIG_BOOTM_FITIMAGE_PUBKEY

The legacy way of adding FIT keys to the barebox build was having mkimage generate a device tree snippet and including it in the barebox board device tree:

#ifdef CONFIG_BOOTM_FITIMAGE_PUBKEY
#include CONFIG_BOOTM_FITIMAGE_PUBKEY
#endif

This has now been removed in favor of CONFIG_CRYPTO_PUBLIC_KEYS. This option doesn’t consume device tree snippets, but file paths to the PEM or PKCS#11 URIs and thus will require a build-time OpenSSL dependency.

8.5.2. Build dependencies

  • Building barebox for 64-bit Rockchip platforms required OpenSSL v3.0 or later. This was unintended and the fix is queued for v2025.10.0.

  • ti-linux-firmware 11.00.14 renames ti-fs-firmware-am62lx-hs-fs-enc.bin to to ti-fs-firmware-am62lx-hs-enc.bin and ti-fs-firmware-am62lx-hs-fs-cert.bin is renamed to ti-fs-firmware-am62lx-hs-cert.bin and barebox has followed suit.

8.5.3. Rename in /dev

EEPROMs that are pointed at by a device tree alias do no longer have an extra 0 at the end, e.g., /dev/eeprom00 has become /dev/eeprom0.