[DistroKit] [PATCH 1/3] v7a: barebox: version bump v2024.12.0 → v2025.03.0

DistroKit Mailinglist
 help / color / mirror / Atom feed

* [DistroKit] [PATCH 1/3] v7a: barebox: version bump v2024.12.0 → v2025.03.0
@ 2025-04-01 12:15 Ahmad Fatoum
  2025-04-01 12:15 ` [DistroKit] [PATCH 2/3] v7a: barebox: am335x-mlo: disable MTD Ahmad Fatoum
                   ` (2 more replies)
  0 siblings, 3 replies; 4+ messages in thread
From: Ahmad Fatoum @ 2025-04-01 12:15 UTC (permalink / raw)
  To: distrokit; +Cc: Ahmad Fatoum

Some highlights from the version bump:

  - Much faster eMMC erases
  - Individual boot artifacts can now be easily overridden by a new -o
    parameter to the boot command (e.g. to inject rsinit as initrd)
  - Fixes and hardening against memory safety bugs

Signed-off-by: Ahmad Fatoum <a.fatoum@pengutronix.de>
---
 .../platform-v7a/barebox-am335x-mlo.config    | 64 +++++++++++++++--
 configs/platform-v7a/barebox-am335x.config    | 65 +++++++++++++++--
 .../platform-v7a/barebox-am335x.config.diff   |  6 +-
 configs/platform-v7a/barebox-at91.config      | 69 +++++++++++++++++--
 configs/platform-v7a/barebox-at91.config.diff | 14 ++--
 configs/platform-v7a/barebox-mx6.config       | 66 ++++++++++++++++--
 configs/platform-v7a/barebox-mx6.config.diff  |  9 +--
 configs/platform-v7a/barebox-rpi2.config      | 63 +++++++++++++++--
 configs/platform-v7a/barebox-rpi2.config.diff |  2 +-
 configs/platform-v7a/barebox-stm32mp.config   | 65 +++++++++++++++--
 .../platform-v7a/barebox-stm32mp.config.diff  |  7 +-
 configs/platform-v7a/barebox-vexpress.config  | 62 ++++++++++++++++-
 .../platform-v7a/barebox-vexpress.config.diff |  5 +-
 configs/platform-v7a/barebox.config           | 63 +++++++++++++++--
 configs/platform-v7a/platformconfig           |  4 +-
 15 files changed, 506 insertions(+), 58 deletions(-)

diff --git a/configs/platform-v7a/barebox-am335x-mlo.config b/configs/platform-v7a/barebox-am335x-mlo.config
index 1fa7cdeb19f8..c9cb8a914155 100644
--- a/configs/platform-v7a/barebox-am335x-mlo.config
+++ b/configs/platform-v7a/barebox-am335x-mlo.config
@@ -1,11 +1,12 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Barebox/arm 2024.12.0 Configuration
+# Barebox/arm 2025.03.0 Configuration
 #
 CONFIG_ARM=y
+CONFIG_ARCH_LINUX_NAME="arm"
+CONFIG_ARCH_MKIMAGE_NAME="arm"
 CONFIG_ARM32=y
 CONFIG_ARCH_TEXT_BASE=0x00000000
-CONFIG_ARM_USE_COMPRESSED_DTB=y
 
 #
 # System Type
@@ -22,6 +23,8 @@ CONFIG_ARCH_MULTIARCH=y
 # CONFIG_ARCH_ZYNQ is not set
 # CONFIG_ARCH_BCM283X is not set
 # CONFIG_ARCH_IMX is not set
+# CONFIG_ARCH_K3 is not set
+# CONFIG_ARCH_SUNXI is not set
 # CONFIG_ARCH_LAYERSCAPE is not set
 CONFIG_ARCH_OMAP_MULTI=y
 # CONFIG_ARCH_ROCKCHIP is not set
@@ -59,7 +62,6 @@ CONFIG_MACH_PHYTEC_SOM_AM335X=y
 # CONFIG_PHYTEC_SOM_AM335X_OF_AUTOENABLE is not set
 # end of OMAP Features
 
-# CONFIG_BOARD_ARM_GENERIC_DT is not set
 CONFIG_AEABI=y
 CONFIG_THUMB2_BAREBOX=y
 # end of System Type
@@ -77,6 +79,17 @@ CONFIG_ARM_EXCEPTIONS=y
 # CONFIG_ARM_PSCI_CLIENT is not set
 # end of ARM specific settings
 
+CONFIG_HAVE_ARCH_BOARD_GENERIC_DT=y
+
+#
+# General architecture-dependent options
+#
+# CONFIG_BOARD_GENERIC_DT is not set
+# end of General architecture-dependent options
+
+CONFIG_CC_IS_GCC=y
+CONFIG_GCC_VERSION=140201
+CONFIG_CLANG_VERSION=0
 CONFIG_HAS_KALLSYMS=y
 CONFIG_HAS_MODULES=y
 CONFIG_HAS_CACHE=y
@@ -91,6 +104,8 @@ CONFIG_FILETYPE=y
 #
 CONFIG_LOCALVERSION=""
 CONFIG_LOCALVERSION_AUTO=y
+CONFIG_HAS_INSECURE_DEFAULTS=y
+CONFIG_INSECURE=y
 CONFIG_BANNER=y
 # CONFIG_MEMINFO is not set
 # CONFIG_ENVIRONMENT_VARIABLES is not set
@@ -194,6 +209,10 @@ CONFIG_CC_HAS_KASAN_GENERIC=y
 # CONFIG_KASAN is not set
 # CONFIG_COMPILE_TEST is not set
 # CONFIG_WERROR is not set
+
+#
+# arm Debugging
+#
 # end of Debugging
 
 #
@@ -215,13 +234,16 @@ CONFIG_OFDEVICE=y
 CONFIG_OF_GPIO=y
 # CONFIG_OF_OVERLAY is not set
 # CONFIG_AIODEV is not set
+CONFIG_ARM_AMBA=y
 
 #
 # serial drivers
 #
 # CONFIG_SERIAL_DEV_BUS is not set
 # CONFIG_DRIVER_SERIAL_ARM_DCC is not set
+# CONFIG_SERIAL_AMBA_PL011 is not set
 CONFIG_DRIVER_SERIAL_NS16550=y
+# CONFIG_DRIVER_SERIAL_NS16550_OMAP_TTYS is not set
 # CONFIG_DRIVER_SERIAL_CADENCE is not set
 # CONFIG_SERIAL_SIFIVE is not set
 # end of serial drivers
@@ -254,7 +276,6 @@ CONFIG_MTD=y
 #
 # CONFIG_MTD_DATAFLASH is not set
 CONFIG_MTD_M25P80=y
-# CONFIG_MTD_SST25L is not set
 # CONFIG_MTD_DOCG3 is not set
 # CONFIG_MTD_MTDRAM is not set
 # end of Self contained MTD devices
@@ -326,8 +347,10 @@ CONFIG_MCI=y
 #
 # CONFIG_MCI_DWC_MSHC is not set
 # CONFIG_MCI_DW is not set
+# CONFIG_MCI_SUNXI_SMHC is not set
 # CONFIG_MCI_ROCKCHIP_DWCMSHC is not set
 CONFIG_MCI_OMAP_HSMMC=y
+# CONFIG_MCI_MMCI is not set
 # CONFIG_MCI_ARASAN is not set
 # CONFIG_MCI_AM654 is not set
 # CONFIG_MCI_SPI is not set
@@ -348,6 +371,7 @@ CONFIG_CLOCKSOURCE_TI_DM=y
 # CONFIG_MFD_MC13XXX is not set
 # CONFIG_MFD_SYSCON is not set
 # CONFIG_MFD_ATMEL_FLEXCOM is not set
+# CONFIG_MFD_RK808 is not set
 # end of Multifunction device drivers
 
 #
@@ -383,6 +407,7 @@ CONFIG_CLOCKSOURCE_TI_DM=y
 #
 # DMA support
 #
+# CONFIG_DMADEVICES is not set
 # end of DMA support
 
 CONFIG_GPIOLIB=y
@@ -394,6 +419,7 @@ CONFIG_GPIOLIB=y
 # CONFIG_GPIO_74XX_MMIO is not set
 # CONFIG_GPIO_GENERIC_PLATFORM is not set
 CONFIG_GPIO_OMAP=y
+# CONFIG_GPIO_PL061 is not set
 # CONFIG_GPIO_DESIGNWARE is not set
 # CONFIG_GPIO_SIFIVE is not set
 # CONFIG_GPIO_LATCH is not set
@@ -503,6 +529,7 @@ CONFIG_TI_SYSC=y
 #
 CONFIG_FS=y
 CONFIG_FS_LEGACY=y
+CONFIG_FS_WRITABLE=y
 
 #
 # Some selected filesystems still use the legacy FS API.
@@ -564,6 +591,7 @@ CONFIG_XZ_DEC_ARM64=y
 # CONFIG_BASE64 is not set
 # CONFIG_LZO_DECOMPRESS is not set
 CONFIG_XYMODEM=y
+CONFIG_LIBFDT=y
 # CONFIG_ALLOW_PRNG_FALLBACK is not set
 # CONFIG_CRC_CCITT is not set
 # CONFIG_CRC8 is not set
@@ -583,7 +611,35 @@ CONFIG_ARCH_HAS_ZERO_PAGE=y
 #
 # Hardening options
 #
+
+#
+# This barebox configuration has CONFIG_HAS_INSECURE_DEFAULTS=y indicating
+#
+
+#
+# that some of the configured options have potentially insecure defaults.
+#
+
+#
+# Extra care needs to be in secure booted systems.
+#
 # CONFIG_BUG_ON_DATA_CORRUPTION is not set
+
+#
+# Memory initialization
+#
+CONFIG_CC_HAS_AUTO_VAR_INIT_PATTERN=y
+CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO_BARE=y
+CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO=y
+# CONFIG_INIT_STACK_NONE is not set
+# CONFIG_INIT_STACK_ALL_PATTERN is not set
+CONFIG_INIT_STACK_ALL_ZERO=y
+# CONFIG_INIT_ON_ALLOC_DEFAULT_ON is not set
+# CONFIG_INIT_ON_FREE_DEFAULT_ON is not set
+CONFIG_CC_HAS_ZERO_CALL_USED_REGS=y
+# CONFIG_ZERO_CALL_USED_REGS is not set
+# end of Memory initialization
+
 # CONFIG_STACK_GUARD_PAGE is not set
 CONFIG_STACKPROTECTOR_NONE=y
 # CONFIG_STACKPROTECTOR_STRONG is not set
diff --git a/configs/platform-v7a/barebox-am335x.config b/configs/platform-v7a/barebox-am335x.config
index 169553af4438..937ec40a047d 100644
--- a/configs/platform-v7a/barebox-am335x.config
+++ b/configs/platform-v7a/barebox-am335x.config
@@ -1,12 +1,13 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Barebox/arm 2024.12.0 Configuration
+# Barebox/arm 2025.03.0 Configuration
 #
 CONFIG_ARM=y
+CONFIG_ARCH_LINUX_NAME="arm"
+CONFIG_ARCH_MKIMAGE_NAME="arm"
 CONFIG_ARM32=y
 CONFIG_ARCH_TEXT_BASE=0x00000000
 CONFIG_ARM_LINUX=y
-CONFIG_ARM_USE_COMPRESSED_DTB=y
 
 #
 # System Type
@@ -23,6 +24,8 @@ CONFIG_ARCH_MULTIARCH=y
 # CONFIG_ARCH_ZYNQ is not set
 # CONFIG_ARCH_BCM283X is not set
 # CONFIG_ARCH_IMX is not set
+# CONFIG_ARCH_K3 is not set
+# CONFIG_ARCH_SUNXI is not set
 # CONFIG_ARCH_LAYERSCAPE is not set
 CONFIG_ARCH_OMAP_MULTI=y
 # CONFIG_ARCH_ROCKCHIP is not set
@@ -82,6 +85,18 @@ CONFIG_ARM_UNWIND=y
 # CONFIG_ARM_PSCI_CLIENT is not set
 # end of ARM specific settings
 
+CONFIG_HAVE_ARCH_BOARD_GENERIC_DT=y
+
+#
+# General architecture-dependent options
+#
+CONFIG_BOARD_GENERIC_DT=y
+# CONFIG_BOARD_GENERIC_FIT is not set
+# end of General architecture-dependent options
+
+CONFIG_CC_IS_GCC=y
+CONFIG_GCC_VERSION=140201
+CONFIG_CLANG_VERSION=0
 CONFIG_HAS_KALLSYMS=y
 CONFIG_HAS_MODULES=y
 CONFIG_HAS_CACHE=y
@@ -98,7 +113,6 @@ CONFIG_FITIMAGE=y
 CONFIG_LOGBUF=y
 CONFIG_STDDEV=y
 CONFIG_MENUTREE=y
-CONFIG_USBGADGET_START=y
 CONFIG_BOOT=y
 CONFIG_FASTBOOT_BASE=y
 
@@ -107,6 +121,8 @@ CONFIG_FASTBOOT_BASE=y
 #
 CONFIG_LOCALVERSION=""
 CONFIG_LOCALVERSION_AUTO=y
+CONFIG_HAS_INSECURE_DEFAULTS=y
+CONFIG_INSECURE=y
 CONFIG_BANNER=y
 CONFIG_MEMINFO=y
 CONFIG_MEMTEST=y
@@ -124,7 +140,6 @@ CONFIG_PBL_IMAGE=y
 CONFIG_PBL_MULTI_IMAGES=y
 CONFIG_USE_COMPRESSED_DTB=y
 CONFIG_PBL_RELOCATABLE=y
-CONFIG_BOARD_GENERIC_DT=y
 CONFIG_IMAGE_COMPRESSION=y
 # CONFIG_IMAGE_COMPRESSION_LZ4 is not set
 CONFIG_IMAGE_COMPRESSION_LZO=y
@@ -168,6 +183,7 @@ CONFIG_MENU=y
 CONFIG_ERRNO_MESSAGES=y
 # CONFIG_TIMESTAMP is not set
 CONFIG_BOOTM=y
+CONFIG_BOOT_OVERRIDE=y
 CONFIG_BOOTM_SHOW_TYPE=y
 CONFIG_BOOTM_VERBOSE=y
 CONFIG_BOOTM_INITRD=y
@@ -178,6 +194,7 @@ CONFIG_BOOTM_OFTREE_UIMAGE=y
 # CONFIG_BOOTM_ELF is not set
 CONFIG_BOOTM_FITIMAGE=y
 # CONFIG_BOOTM_FITIMAGE_SIGNATURE is not set
+CONFIG_BOOTM_OPTIONAL_SIGNED_IMAGES=y
 CONFIG_BLSPEC=y
 CONFIG_FLEXIBLE_BOOTARGS=y
 CONFIG_MMCBLKDEV_ROOTARG=y
@@ -256,6 +273,10 @@ CONFIG_CC_HAS_KASAN_GENERIC=y
 # CONFIG_KASAN is not set
 # CONFIG_COMPILE_TEST is not set
 # CONFIG_WERROR is not set
+
+#
+# arm Debugging
+#
 # end of Debugging
 
 #
@@ -366,6 +387,7 @@ CONFIG_CMD_SHA1SUM=y
 # CONFIG_CMD_SHA256SUM is not set
 # CONFIG_CMD_SHA384SUM is not set
 # CONFIG_CMD_SHA512SUM is not set
+# CONFIG_CMD_FIPTOOL is not set
 CONFIG_CMD_UNCOMPRESS=y
 # end of File
 
@@ -507,6 +529,7 @@ CONFIG_ARM_AMBA=y
 # CONFIG_DRIVER_SERIAL_ARM_DCC is not set
 # CONFIG_SERIAL_AMBA_PL011 is not set
 CONFIG_DRIVER_SERIAL_NS16550=y
+# CONFIG_DRIVER_SERIAL_NS16550_OMAP_TTYS is not set
 # CONFIG_DRIVER_SERIAL_CADENCE is not set
 # CONFIG_SERIAL_SIFIVE is not set
 # end of serial drivers
@@ -519,6 +542,7 @@ CONFIG_PHYLIB=y
 # CONFIG_DRIVER_NET_ARC_EMAC is not set
 # CONFIG_DRIVER_NET_BCMGENET is not set
 CONFIG_DRIVER_NET_CPSW=y
+CONFIG_DRIVER_NET_TI_DAVINCI_MDIO=y
 # CONFIG_DRIVER_NET_DESIGNWARE_GENERIC is not set
 # CONFIG_DRIVER_NET_ENC28J60 is not set
 # CONFIG_DRIVER_NET_FSL_FMAN is not set
@@ -604,7 +628,6 @@ CONFIG_MTD_OOB_DEVICE=y
 #
 # CONFIG_MTD_DATAFLASH is not set
 CONFIG_MTD_M25P80=y
-# CONFIG_MTD_SST25L is not set
 # CONFIG_MTD_DOCG3 is not set
 # CONFIG_MTD_MTDRAM is not set
 # end of Self contained MTD devices
@@ -708,6 +731,7 @@ CONFIG_MCI_ERASE=y
 #
 # CONFIG_MCI_DWC_MSHC is not set
 # CONFIG_MCI_DW is not set
+# CONFIG_MCI_SUNXI_SMHC is not set
 # CONFIG_MCI_ROCKCHIP_DWCMSHC is not set
 CONFIG_MCI_OMAP_HSMMC=y
 # CONFIG_MCI_MMCI is not set
@@ -737,6 +761,7 @@ CONFIG_CLOCKSOURCE_TI_DM=y
 # CONFIG_MFD_MC9SDZ60 is not set
 # CONFIG_MFD_STMPE is not set
 # CONFIG_MFD_SYSCON is not set
+# CONFIG_MFD_TPS65219 is not set
 # CONFIG_MFD_TWL4030 is not set
 # CONFIG_MFD_TWL6030 is not set
 # CONFIG_MFD_STPMIC1 is not set
@@ -798,6 +823,7 @@ CONFIG_HWRNG=y
 #
 # DMA support
 #
+# CONFIG_DMADEVICES is not set
 # end of DMA support
 
 CONFIG_GPIOLIB=y
@@ -929,6 +955,7 @@ CONFIG_REGULATOR_FIXED=y
 #
 CONFIG_FS=y
 CONFIG_FS_LEGACY=y
+CONFIG_FS_WRITABLE=y
 
 #
 # Some selected filesystems still use the legacy FS API.
@@ -1020,7 +1047,35 @@ CONFIG_ARCH_HAS_ZERO_PAGE=y
 #
 # Hardening options
 #
+
+#
+# This barebox configuration has CONFIG_HAS_INSECURE_DEFAULTS=y indicating
+#
+
+#
+# that some of the configured options have potentially insecure defaults.
+#
+
+#
+# Extra care needs to be in secure booted systems.
+#
 # CONFIG_BUG_ON_DATA_CORRUPTION is not set
+
+#
+# Memory initialization
+#
+CONFIG_CC_HAS_AUTO_VAR_INIT_PATTERN=y
+CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO_BARE=y
+CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO=y
+# CONFIG_INIT_STACK_NONE is not set
+# CONFIG_INIT_STACK_ALL_PATTERN is not set
+CONFIG_INIT_STACK_ALL_ZERO=y
+# CONFIG_INIT_ON_ALLOC_DEFAULT_ON is not set
+# CONFIG_INIT_ON_FREE_DEFAULT_ON is not set
+CONFIG_CC_HAS_ZERO_CALL_USED_REGS=y
+# CONFIG_ZERO_CALL_USED_REGS is not set
+# end of Memory initialization
+
 # CONFIG_STACK_GUARD_PAGE is not set
 CONFIG_STACKPROTECTOR_NONE=y
 # CONFIG_STACKPROTECTOR_STRONG is not set
diff --git a/configs/platform-v7a/barebox-am335x.config.diff b/configs/platform-v7a/barebox-am335x.config.diff
index f0a73b9c8adb..030c822a5058 100644
--- a/configs/platform-v7a/barebox-am335x.config.diff
+++ b/configs/platform-v7a/barebox-am335x.config.diff
@@ -1,4 +1,4 @@
-7107a8d8bbd7061c017ec7d039b9a2b3
+b84e018f387ca177ad90f1972d178d88
 # CONFIG_AM33XX_NET_BOOT is not set
 CONFIG_ARCH_AM33XX=y
 # CONFIG_ARCH_BCM283X is not set
@@ -30,7 +30,9 @@ CONFIG_CRYPTO_KEYSTORE=y
 CONFIG_DEBUG_OMAP_UART_PORT=1
 CONFIG_DIGEST_HMAC_GENERIC=y
 CONFIG_DRIVER_NET_CPSW=y
+CONFIG_DRIVER_NET_TI_DAVINCI_MDIO=y
 CONFIG_DRIVER_SERIAL_NS16550=y
+# CONFIG_DRIVER_SERIAL_NS16550_OMAP_TTYS is not set
 # CONFIG_DRIVER_SPI_FSL_QUADSPI is not set
 CONFIG_DRIVER_SPI_OMAP3=y
 # CONFIG_EEPROM_93XX46 is not set
@@ -76,7 +78,6 @@ CONFIG_MTD_NAND_ECC=y
 CONFIG_MTD_RAW_NAND=y
 CONFIG_MTD_SPI_NOR=y
 # CONFIG_MTD_SPI_NOR_USE_4K_SECTORS is not set
-# CONFIG_MTD_SST25L is not set
 CONFIG_NAND=y
 # CONFIG_NAND_ALLOW_ERASE_BAD is not set
 CONFIG_NAND_ECC_HW_SYNDROME=y
@@ -95,6 +96,7 @@ CONFIG_PINCTRL_SINGLE=y
 CONFIG_PROMPT="barebox> "
 # CONFIG_REGULATOR_BCM283X is undefined
 CONFIG_REGULATOR_FIXED=y
+# CONFIG_SPI_BCM2835 is undefined
 # CONFIG_SPI_CADENCE_QUADSPI is not set
 CONFIG_SPI_MEM=y
 # CONFIG_SPI_SYNOPSYS_OCTALSPI_NOR is not set
diff --git a/configs/platform-v7a/barebox-at91.config b/configs/platform-v7a/barebox-at91.config
index d085dfc9c84b..9d1c6f9c9334 100644
--- a/configs/platform-v7a/barebox-at91.config
+++ b/configs/platform-v7a/barebox-at91.config
@@ -1,12 +1,13 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Barebox/arm 2024.12.0 Configuration
+# Barebox/arm 2025.03.0 Configuration
 #
 CONFIG_ARM=y
+CONFIG_ARCH_LINUX_NAME="arm"
+CONFIG_ARCH_MKIMAGE_NAME="arm"
 CONFIG_ARM32=y
 CONFIG_ARCH_TEXT_BASE=0x00000000
 CONFIG_ARM_LINUX=y
-CONFIG_ARM_USE_COMPRESSED_DTB=y
 
 #
 # System Type
@@ -21,6 +22,7 @@ CONFIG_ARCH_AT91=y
 # CONFIG_ARCH_TEGRA is not set
 # CONFIG_ARCH_ZYNQ is not set
 # CONFIG_ARCH_BCM283X is not set
+# CONFIG_ARCH_K3 is not set
 # CONFIG_ARCH_STM32MP is not set
 # CONFIG_ARCH_VERSATILE is not set
 # CONFIG_ARCH_VEXPRESS is not set
@@ -72,7 +74,7 @@ CONFIG_MACH_SAMA5D4_WIFX=y
 #
 # AT91 Board Options
 #
-# CONFIG_BOARD_ARM_GENERIC_DT is not set
+CONFIG_BOARD_ARM_GENERIC_DT=y
 CONFIG_AEABI=y
 # CONFIG_ARM_BOARD_APPEND_ATAG is not set
 # end of System Type
@@ -90,6 +92,18 @@ CONFIG_ARM_UNWIND=y
 # CONFIG_ARM_PSCI_CLIENT is not set
 # end of ARM specific settings
 
+CONFIG_HAVE_ARCH_BOARD_GENERIC_DT=y
+
+#
+# General architecture-dependent options
+#
+CONFIG_BOARD_GENERIC_DT=y
+# CONFIG_BOARD_GENERIC_FIT is not set
+# end of General architecture-dependent options
+
+CONFIG_CC_IS_GCC=y
+CONFIG_GCC_VERSION=140201
+CONFIG_CLANG_VERSION=0
 CONFIG_GREGORIAN_CALENDER=y
 CONFIG_HAS_KALLSYMS=y
 CONFIG_HAS_MODULES=y
@@ -108,7 +122,6 @@ CONFIG_LOGBUF=y
 CONFIG_STDDEV=y
 CONFIG_MENUTREE=y
 CONFIG_UBIFORMAT=y
-CONFIG_USBGADGET_START=y
 CONFIG_BOOT=y
 CONFIG_FASTBOOT_BASE=y
 
@@ -117,6 +130,8 @@ CONFIG_FASTBOOT_BASE=y
 #
 CONFIG_LOCALVERSION=""
 CONFIG_LOCALVERSION_AUTO=y
+CONFIG_HAS_INSECURE_DEFAULTS=y
+CONFIG_INSECURE=y
 CONFIG_BANNER=y
 CONFIG_MEMINFO=y
 CONFIG_MEMTEST=y
@@ -177,6 +192,7 @@ CONFIG_MENU=y
 CONFIG_ERRNO_MESSAGES=y
 CONFIG_TIMESTAMP=y
 CONFIG_BOOTM=y
+CONFIG_BOOT_OVERRIDE=y
 CONFIG_BOOTM_SHOW_TYPE=y
 CONFIG_BOOTM_VERBOSE=y
 CONFIG_BOOTM_INITRD=y
@@ -187,6 +203,7 @@ CONFIG_BOOTM_OFTREE_UIMAGE=y
 # CONFIG_BOOTM_ELF is not set
 CONFIG_BOOTM_FITIMAGE=y
 # CONFIG_BOOTM_FITIMAGE_SIGNATURE is not set
+CONFIG_BOOTM_OPTIONAL_SIGNED_IMAGES=y
 CONFIG_BLSPEC=y
 CONFIG_FLEXIBLE_BOOTARGS=y
 CONFIG_MMCBLKDEV_ROOTARG=y
@@ -267,6 +284,10 @@ CONFIG_CC_HAS_KASAN_GENERIC=y
 # CONFIG_KASAN is not set
 # CONFIG_COMPILE_TEST is not set
 # CONFIG_WERROR is not set
+
+#
+# arm Debugging
+#
 # end of Debugging
 
 #
@@ -381,6 +402,7 @@ CONFIG_CMD_SHA1SUM=y
 # CONFIG_CMD_SHA256SUM is not set
 # CONFIG_CMD_SHA384SUM is not set
 # CONFIG_CMD_SHA512SUM is not set
+# CONFIG_CMD_FIPTOOL is not set
 CONFIG_CMD_UNCOMPRESS=y
 # end of File
 
@@ -512,12 +534,14 @@ CONFIG_OF_BAREBOX_ENV_IN_FS=y
 CONFIG_OF_OVERLAY=y
 # CONFIG_OF_OVERLAY_LIVE is not set
 # CONFIG_AIODEV is not set
+CONFIG_ARM_AMBA=y
 
 #
 # serial drivers
 #
 # CONFIG_SERIAL_DEV_BUS is not set
 # CONFIG_DRIVER_SERIAL_ARM_DCC is not set
+# CONFIG_SERIAL_AMBA_PL011 is not set
 # CONFIG_DRIVER_SERIAL_NS16550 is not set
 CONFIG_DRIVER_SERIAL_ATMEL=y
 # CONFIG_DRIVER_SERIAL_CADENCE is not set
@@ -614,7 +638,6 @@ CONFIG_MTD_OOB_DEVICE=y
 #
 # CONFIG_MTD_DATAFLASH is not set
 CONFIG_MTD_M25P80=y
-# CONFIG_MTD_SST25L is not set
 # CONFIG_MTD_DOCG3 is not set
 # CONFIG_MTD_MTDRAM is not set
 # end of Self contained MTD devices
@@ -711,9 +734,11 @@ CONFIG_MCI_MMC_BOOT_PARTITIONS=y
 #
 # CONFIG_MCI_DWC_MSHC is not set
 # CONFIG_MCI_DW is not set
+# CONFIG_MCI_SUNXI_SMHC is not set
 # CONFIG_MCI_ROCKCHIP_DWCMSHC is not set
 CONFIG_MCI_ATMEL=y
 CONFIG_MCI_ATMEL_SDHCI=y
+# CONFIG_MCI_MMCI is not set
 # CONFIG_MCI_ARASAN is not set
 # CONFIG_MCI_AM654 is not set
 # CONFIG_MCI_SPI is not set
@@ -745,6 +770,7 @@ CONFIG_CLOCKSOURCE_ARM_ARCHITECTED_TIMER=y
 # CONFIG_MFD_MC9SDZ60 is not set
 # CONFIG_MFD_STMPE is not set
 CONFIG_MFD_SYSCON=y
+# CONFIG_MFD_TPS65219 is not set
 # CONFIG_MFD_TWL4030 is not set
 # CONFIG_MFD_TWL6030 is not set
 # CONFIG_MFD_STPMIC1 is not set
@@ -804,6 +830,7 @@ CONFIG_WATCHDOG_AT91SAM9=y
 #
 # DMA support
 #
+# CONFIG_DMADEVICES is not set
 # end of DMA support
 
 CONFIG_GPIOLIB=y
@@ -816,6 +843,8 @@ CONFIG_GPIOLIB=y
 # CONFIG_GPIO_GENERIC_PLATFORM is not set
 # CONFIG_GPIO_PCA953X is not set
 # CONFIG_GPIO_PCF857X is not set
+# CONFIG_GPIO_PL061 is not set
+# CONFIG_GPIO_SAMA5D2_PIOBU is not set
 # CONFIG_GPIO_DESIGNWARE is not set
 # CONFIG_GPIO_SX150X is not set
 # CONFIG_GPIO_SIFIVE is not set
@@ -935,6 +964,7 @@ CONFIG_ATMEL_EBI=y
 #
 CONFIG_FS=y
 CONFIG_FS_LEGACY=y
+CONFIG_FS_WRITABLE=y
 
 #
 # Some selected filesystems still use the legacy FS API.
@@ -1004,6 +1034,7 @@ CONFIG_QSORT=y
 CONFIG_LIBSCAN=y
 CONFIG_LIBUBIGEN=y
 CONFIG_IMAGE_SPARSE=y
+CONFIG_LIBFDT=y
 # CONFIG_RATP is not set
 # CONFIG_ALLOW_PRNG_FALLBACK is not set
 # CONFIG_CRC_CCITT is not set
@@ -1026,7 +1057,35 @@ CONFIG_GENERIC_ALLOCATOR=y
 #
 # Hardening options
 #
+
+#
+# This barebox configuration has CONFIG_HAS_INSECURE_DEFAULTS=y indicating
+#
+
+#
+# that some of the configured options have potentially insecure defaults.
+#
+
+#
+# Extra care needs to be in secure booted systems.
+#
 # CONFIG_BUG_ON_DATA_CORRUPTION is not set
+
+#
+# Memory initialization
+#
+CONFIG_CC_HAS_AUTO_VAR_INIT_PATTERN=y
+CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO_BARE=y
+CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO=y
+# CONFIG_INIT_STACK_NONE is not set
+# CONFIG_INIT_STACK_ALL_PATTERN is not set
+CONFIG_INIT_STACK_ALL_ZERO=y
+# CONFIG_INIT_ON_ALLOC_DEFAULT_ON is not set
+# CONFIG_INIT_ON_FREE_DEFAULT_ON is not set
+CONFIG_CC_HAS_ZERO_CALL_USED_REGS=y
+# CONFIG_ZERO_CALL_USED_REGS is not set
+# end of Memory initialization
+
 # CONFIG_STACK_GUARD_PAGE is not set
 CONFIG_STACKPROTECTOR_NONE=y
 # CONFIG_STACKPROTECTOR_STRONG is not set
diff --git a/configs/platform-v7a/barebox-at91.config.diff b/configs/platform-v7a/barebox-at91.config.diff
index 4b09dcb416bf..cf092c542a02 100644
--- a/configs/platform-v7a/barebox-at91.config.diff
+++ b/configs/platform-v7a/barebox-at91.config.diff
@@ -1,4 +1,4 @@
-7107a8d8bbd7061c017ec7d039b9a2b3
+b84e018f387ca177ad90f1972d178d88
 CONFIG_ARCH_AT91=y
 # CONFIG_ARCH_BCM283X is not set
 # CONFIG_ARCH_IMX is undefined
@@ -6,15 +6,13 @@ CONFIG_ARCH_AT91=y
 # CONFIG_ARCH_MULTIARCH is not set
 # CONFIG_ARCH_OMAP_MULTI is undefined
 # CONFIG_ARCH_ROCKCHIP is undefined
-# CONFIG_ARM_AMBA is undefined
+# CONFIG_ARCH_SUNXI is undefined
 # CONFIG_ARM_SECURE_MONITOR is undefined
 # CONFIG_ARM_SMCCC is undefined
 CONFIG_AT91SAM9_SMC=y
 CONFIG_AT91_MCI_PBL=y
 CONFIG_AT91_MULTI_BOARDS=y
 CONFIG_ATMEL_EBI=y
-# CONFIG_BOARD_ARM_GENERIC_DT is not set
-# CONFIG_BOARD_GENERIC_DT is undefined
 CONFIG_BOOTM_OFTREE_UIMAGE=y
 CONFIG_CLOCKSOURCE_ATMEL_PIT=y
 # CONFIG_CLOCKSOURCE_BCM283X is undefined
@@ -48,8 +46,8 @@ CONFIG_FS_UBIFS=y
 # CONFIG_FS_UBIFS_COMPRESSION_ZLIB is not set
 CONFIG_FS_UBIFS_COMPRESSION_ZSTD=y
 CONFIG_GENERIC_ALLOCATOR=y
-# CONFIG_GPIO_PL061 is undefined
 # CONFIG_GPIO_RASPBERRYPI_EXP is undefined
+# CONFIG_GPIO_SAMA5D2_PIOBU is not set
 CONFIG_HAS_MACB=y
 CONFIG_HAVE_AT91SAM9_RST=y
 CONFIG_HAVE_AT91_AUDIO_PLL=y
@@ -72,7 +70,6 @@ CONFIG_I2C_AT91=y
 CONFIG_IMAGE_COMPRESSION_NONE=y
 CONFIG_IMD_TARGET=y
 # CONFIG_KEYBOARD_USB is undefined
-# CONFIG_LIBFDT is undefined
 CONFIG_LIBSCAN=y
 CONFIG_LIBUBIGEN=y
 # CONFIG_MACH_AT91SAM9263EK is not set
@@ -97,7 +94,7 @@ CONFIG_MCI_ATMEL_SDHCI=y
 CONFIG_MCI_ATMEL_SDHCI_PBL=y
 # CONFIG_MCI_BCM283X is undefined
 # CONFIG_MCI_BCM283X_SDHOST is undefined
-# CONFIG_MCI_MMCI is undefined
+# CONFIG_MCI_MMCI is not set
 CONFIG_MCI_MMC_BOOT_PARTITIONS=y
 CONFIG_MCI_SDHCI=y
 # CONFIG_MCI_STARTUP is not set
@@ -113,7 +110,6 @@ CONFIG_MTD_NAND_ECC=y
 CONFIG_MTD_RAW_NAND=y
 CONFIG_MTD_SPI_NOR=y
 # CONFIG_MTD_SPI_NOR_USE_4K_SECTORS is not set
-# CONFIG_MTD_SST25L is not set
 CONFIG_MTD_UBI=y
 CONFIG_MTD_UBI_BEB_LIMIT=20
 # CONFIG_MTD_UBI_CHECK_IO is not set
@@ -141,13 +137,13 @@ CONFIG_PROMPT="barebox:"
 # CONFIG_REGULATOR_ANATOP is not set
 # CONFIG_REGULATOR_BCM283X is undefined
 CONFIG_REGULATOR_FIXED=y
-# CONFIG_SERIAL_AMBA_PL011 is undefined
 CONFIG_SOC_SAMA5=y
 CONFIG_SOC_SAMA5D2=y
 CONFIG_SOC_SAMA5D4=y
 CONFIG_SOC_SAMA5_MULTI=y
 CONFIG_SOC_SAM_V7=y
 CONFIG_SPI_ATMEL_QUADSPI=y
+# CONFIG_SPI_BCM2835 is undefined
 # CONFIG_SPI_CADENCE_QUADSPI is not set
 CONFIG_SPI_MEM=y
 # CONFIG_SPI_SYNOPSYS_OCTALSPI_NOR is not set
diff --git a/configs/platform-v7a/barebox-mx6.config b/configs/platform-v7a/barebox-mx6.config
index 0cadf9f40539..4d35168fdac8 100644
--- a/configs/platform-v7a/barebox-mx6.config
+++ b/configs/platform-v7a/barebox-mx6.config
@@ -1,8 +1,10 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Barebox/arm 2024.12.0 Configuration
+# Barebox/arm 2025.03.0 Configuration
 #
 CONFIG_ARM=y
+CONFIG_ARCH_LINUX_NAME="arm"
+CONFIG_ARCH_MKIMAGE_NAME="arm"
 CONFIG_ARM32=y
 CONFIG_ARCH_TEXT_BASE=0x00000000
 CONFIG_ARM_LINUX=y
@@ -21,6 +23,8 @@ CONFIG_ARCH_MULTIARCH=y
 # CONFIG_ARCH_ZYNQ is not set
 # CONFIG_ARCH_BCM283X is not set
 CONFIG_ARCH_IMX=y
+# CONFIG_ARCH_K3 is not set
+# CONFIG_ARCH_SUNXI is not set
 # CONFIG_ARCH_LAYERSCAPE is not set
 # CONFIG_ARCH_OMAP_MULTI is not set
 # CONFIG_ARCH_ROCKCHIP is not set
@@ -102,6 +106,7 @@ CONFIG_MACH_NITROGEN6=y
 # CONFIG_MACH_EMBEDSKY_E9 is not set
 # CONFIG_MACH_EMBEST_MARSBOARD is not set
 CONFIG_MACH_EMBEST_RIOTBOARD=y
+# CONFIG_MACH_TORADEX_COLIBRI_IMX6 is not set
 CONFIG_MACH_SABRELITE=y
 # CONFIG_MACH_SABRESD is not set
 # CONFIG_MACH_FREESCALE_IMX6SX_SABRESDB is not set
@@ -173,6 +178,18 @@ CONFIG_ARM_UNWIND=y
 # CONFIG_ARM_PSCI_CLIENT is not set
 # end of ARM specific settings
 
+CONFIG_HAVE_ARCH_BOARD_GENERIC_DT=y
+
+#
+# General architecture-dependent options
+#
+CONFIG_BOARD_GENERIC_DT=y
+# CONFIG_BOARD_GENERIC_FIT is not set
+# end of General architecture-dependent options
+
+CONFIG_CC_IS_GCC=y
+CONFIG_GCC_VERSION=140201
+CONFIG_CLANG_VERSION=0
 CONFIG_GREGORIAN_CALENDER=y
 CONFIG_HAS_KALLSYMS=y
 CONFIG_HAS_MODULES=y
@@ -192,7 +209,6 @@ CONFIG_STDDEV=y
 CONFIG_MENUTREE=y
 CONFIG_BAREBOX_UPDATE_IMX_NAND_FCB=y
 CONFIG_UBIFORMAT=y
-CONFIG_USBGADGET_START=y
 CONFIG_BOOT=y
 CONFIG_FASTBOOT_BASE=y
 
@@ -201,6 +217,8 @@ CONFIG_FASTBOOT_BASE=y
 #
 CONFIG_LOCALVERSION=""
 CONFIG_LOCALVERSION_AUTO=y
+CONFIG_HAS_INSECURE_DEFAULTS=y
+CONFIG_INSECURE=y
 CONFIG_BANNER=y
 CONFIG_MEMINFO=y
 CONFIG_MEMTEST=y
@@ -216,8 +234,8 @@ CONFIG_HAVE_PBL_MULTI_IMAGES=y
 CONFIG_HAVE_IMAGE_COMPRESSION=y
 CONFIG_PBL_IMAGE=y
 CONFIG_PBL_MULTI_IMAGES=y
+CONFIG_USE_COMPRESSED_DTB=y
 CONFIG_PBL_RELOCATABLE=y
-CONFIG_BOARD_GENERIC_DT=y
 CONFIG_IMAGE_COMPRESSION=y
 # CONFIG_IMAGE_COMPRESSION_LZ4 is not set
 CONFIG_IMAGE_COMPRESSION_LZO=y
@@ -261,6 +279,7 @@ CONFIG_MENU=y
 CONFIG_ERRNO_MESSAGES=y
 CONFIG_TIMESTAMP=y
 CONFIG_BOOTM=y
+CONFIG_BOOT_OVERRIDE=y
 CONFIG_BOOTM_SHOW_TYPE=y
 CONFIG_BOOTM_VERBOSE=y
 CONFIG_BOOTM_INITRD=y
@@ -271,6 +290,7 @@ CONFIG_BOOTM_OFTREE_UIMAGE=y
 # CONFIG_BOOTM_ELF is not set
 CONFIG_BOOTM_FITIMAGE=y
 # CONFIG_BOOTM_FITIMAGE_SIGNATURE is not set
+CONFIG_BOOTM_OPTIONAL_SIGNED_IMAGES=y
 CONFIG_BLSPEC=y
 CONFIG_FLEXIBLE_BOOTARGS=y
 CONFIG_MMCBLKDEV_ROOTARG=y
@@ -350,6 +370,10 @@ CONFIG_CC_HAS_KASAN_GENERIC=y
 # CONFIG_KASAN is not set
 # CONFIG_COMPILE_TEST is not set
 # CONFIG_WERROR is not set
+
+#
+# arm Debugging
+#
 # end of Debugging
 
 #
@@ -463,6 +487,7 @@ CONFIG_CMD_SHA1SUM=y
 # CONFIG_CMD_SHA256SUM is not set
 # CONFIG_CMD_SHA384SUM is not set
 # CONFIG_CMD_SHA512SUM is not set
+# CONFIG_CMD_FIPTOOL is not set
 CONFIG_CMD_UNCOMPRESS=y
 # end of File
 
@@ -543,6 +568,7 @@ CONFIG_CMD_SPI=y
 CONFIG_CMD_LED_TRIGGER=y
 CONFIG_CMD_USB=y
 CONFIG_CMD_USBGADGET=y
+# CONFIG_CMD_DFU is not set
 CONFIG_CMD_WD=y
 CONFIG_CMD_WD_DEFAULT_TIMOUT=0
 # end of Hardware manipulation
@@ -713,7 +739,6 @@ CONFIG_MTD_RAW_DEVICE=y
 CONFIG_MTD_DATAFLASH=y
 # CONFIG_MTD_DATAFLASH_WRITE_VERIFY is not set
 CONFIG_MTD_M25P80=y
-CONFIG_MTD_SST25L=y
 # CONFIG_MTD_DOCG3 is not set
 # CONFIG_MTD_MTDRAM is not set
 # end of Self contained MTD devices
@@ -855,6 +880,7 @@ CONFIG_MCI_MMC_BOOT_PARTITIONS=y
 #
 # CONFIG_MCI_DWC_MSHC is not set
 # CONFIG_MCI_DW is not set
+# CONFIG_MCI_SUNXI_SMHC is not set
 # CONFIG_MCI_ROCKCHIP_DWCMSHC is not set
 CONFIG_MCI_IMX_ESDHC=y
 # CONFIG_MCI_IMX_ESDHC_PIO is not set
@@ -890,6 +916,7 @@ CONFIG_CLOCKSOURCE_IMX_GPT=y
 # CONFIG_MFD_MC9SDZ60 is not set
 # CONFIG_MFD_STMPE is not set
 CONFIG_MFD_SYSCON=y
+# CONFIG_MFD_TPS65219 is not set
 # CONFIG_MFD_TWL4030 is not set
 # CONFIG_MFD_TWL6030 is not set
 # CONFIG_MFD_STPMIC1 is not set
@@ -950,11 +977,13 @@ CONFIG_WATCHDOG_IMX=y
 # CONFIG_CADENCE_WATCHDOG is not set
 CONFIG_PWM=y
 CONFIG_PWM_IMX=y
+# CONFIG_PWM_TPM is not set
 # CONFIG_HWRNG is not set
 
 #
 # DMA support
 #
+# CONFIG_DMADEVICES is not set
 CONFIG_MXS_APBH_DMA=y
 # end of DMA support
 
@@ -1104,6 +1133,7 @@ CONFIG_USB_NOP_XCEIV=y
 #
 CONFIG_FS=y
 CONFIG_FS_LEGACY=y
+CONFIG_FS_WRITABLE=y
 
 #
 # Some selected filesystems still use the legacy FS API.
@@ -1212,7 +1242,35 @@ CONFIG_ARCH_HAS_ZERO_PAGE=y
 #
 # Hardening options
 #
+
+#
+# This barebox configuration has CONFIG_HAS_INSECURE_DEFAULTS=y indicating
+#
+
+#
+# that some of the configured options have potentially insecure defaults.
+#
+
+#
+# Extra care needs to be in secure booted systems.
+#
 # CONFIG_BUG_ON_DATA_CORRUPTION is not set
+
+#
+# Memory initialization
+#
+CONFIG_CC_HAS_AUTO_VAR_INIT_PATTERN=y
+CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO_BARE=y
+CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO=y
+# CONFIG_INIT_STACK_NONE is not set
+# CONFIG_INIT_STACK_ALL_PATTERN is not set
+CONFIG_INIT_STACK_ALL_ZERO=y
+# CONFIG_INIT_ON_ALLOC_DEFAULT_ON is not set
+# CONFIG_INIT_ON_FREE_DEFAULT_ON is not set
+CONFIG_CC_HAS_ZERO_CALL_USED_REGS=y
+# CONFIG_ZERO_CALL_USED_REGS is not set
+# end of Memory initialization
+
 # CONFIG_STACK_GUARD_PAGE is not set
 CONFIG_STACKPROTECTOR_NONE=y
 # CONFIG_STACKPROTECTOR_STRONG is not set
diff --git a/configs/platform-v7a/barebox-mx6.config.diff b/configs/platform-v7a/barebox-mx6.config.diff
index 9362374f05d5..9b2cf6d485b1 100644
--- a/configs/platform-v7a/barebox-mx6.config.diff
+++ b/configs/platform-v7a/barebox-mx6.config.diff
@@ -1,4 +1,4 @@
-7107a8d8bbd7061c017ec7d039b9a2b3
+b84e018f387ca177ad90f1972d178d88
 # CONFIG_ARCH_BCM283X is not set
 CONFIG_ARCH_HAS_FEC_IMX=y
 CONFIG_ARCH_HAS_IMX_GPT=y
@@ -10,7 +10,6 @@ CONFIG_ARCH_IMX_IMXIMAGE=y
 # CONFIG_ARCH_IMX_USBLOADER is not set
 # CONFIG_ARM_SECURE_MONITOR is undefined
 # CONFIG_ARM_SMCCC is undefined
-# CONFIG_ARM_USE_COMPRESSED_DTB is undefined
 CONFIG_AT803X_PHY=y
 # CONFIG_BAREBOX_LOGO is not set
 CONFIG_BAREBOX_UPDATE_IMX_NAND_FCB=y
@@ -21,6 +20,7 @@ CONFIG_BOOTM_OFTREE_UIMAGE=y
 # CONFIG_CACHE_L2X0 is not set
 # CONFIG_CLOCKSOURCE_BCM283X is undefined
 CONFIG_CLOCKSOURCE_IMX_GPT=y
+# CONFIG_CMD_DFU is not set
 # CONFIG_CMD_FBTEST is not set
 CONFIG_CMD_FCB=y
 # CONFIG_CMD_KEYSTORE is not set
@@ -152,6 +152,7 @@ CONFIG_MACH_SABRELITE=y
 # CONFIG_MACH_SOLIDRUN_MICROSOM is not set
 # CONFIG_MACH_TECHNEXION_PICO_HOBBIT is not set
 # CONFIG_MACH_TECHNEXION_WANDBOARD is not set
+# CONFIG_MACH_TORADEX_COLIBRI_IMX6 is not set
 # CONFIG_MACH_TQMA53 is not set
 # CONFIG_MACH_TQMA6UL is not set
 # CONFIG_MACH_TQMA6X is not set
@@ -191,7 +192,6 @@ CONFIG_MTD_RAW_DEVICE=y
 CONFIG_MTD_RAW_NAND=y
 CONFIG_MTD_SPI_NOR=y
 # CONFIG_MTD_SPI_NOR_USE_4K_SECTORS is not set
-CONFIG_MTD_SST25L=y
 CONFIG_MTD_UBI=y
 CONFIG_MTD_UBI_BEB_LIMIT=20
 # CONFIG_MTD_UBI_CHECK_IO is not set
@@ -221,12 +221,14 @@ CONFIG_PNG=y
 CONFIG_PROMPT="barebox:"
 CONFIG_PWM=y
 CONFIG_PWM_IMX=y
+# CONFIG_PWM_TPM is not set
 # CONFIG_QOI is not set
 # CONFIG_REGULATOR_ANATOP is not set
 # CONFIG_REGULATOR_BCM283X is undefined
 CONFIG_REGULATOR_FIXED=y
 # CONFIG_REGULATOR_PFUZE is not set
 CONFIG_RESET_IMX_SRC=y
+# CONFIG_SPI_BCM2835 is undefined
 # CONFIG_SPI_CADENCE_QUADSPI is not set
 CONFIG_SPI_MEM=y
 # CONFIG_SPI_SYNOPSYS_OCTALSPI_NOR is not set
@@ -243,7 +245,6 @@ CONFIG_USB_IMX_PHY=y
 CONFIG_USB_NOP_XCEIV=y
 CONFIG_USB_OTGDEV=y
 CONFIG_USB_ULPI=y
-# CONFIG_USE_COMPRESSED_DTB is undefined
 CONFIG_VIDEO=y
 CONFIG_VIDEO_VPL=y
 # CONFIG_WATCHDOG_BCM2835 is undefined
diff --git a/configs/platform-v7a/barebox-rpi2.config b/configs/platform-v7a/barebox-rpi2.config
index 59cceccd6d92..9233a01e0081 100644
--- a/configs/platform-v7a/barebox-rpi2.config
+++ b/configs/platform-v7a/barebox-rpi2.config
@@ -1,12 +1,13 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Barebox/arm 2024.12.0 Configuration
+# Barebox/arm 2025.03.0 Configuration
 #
 CONFIG_ARM=y
+CONFIG_ARCH_LINUX_NAME="arm"
+CONFIG_ARCH_MKIMAGE_NAME="arm"
 CONFIG_ARM32=y
 CONFIG_ARCH_TEXT_BASE=0x00000000
 CONFIG_ARM_LINUX=y
-CONFIG_ARM_USE_COMPRESSED_DTB=y
 
 #
 # System Type
@@ -22,6 +23,8 @@ CONFIG_ARCH_MULTIARCH=y
 # CONFIG_ARCH_ZYNQ is not set
 CONFIG_ARCH_BCM283X=y
 # CONFIG_ARCH_IMX is not set
+# CONFIG_ARCH_K3 is not set
+# CONFIG_ARCH_SUNXI is not set
 # CONFIG_ARCH_LAYERSCAPE is not set
 # CONFIG_ARCH_OMAP_MULTI is not set
 # CONFIG_ARCH_ROCKCHIP is not set
@@ -74,6 +77,18 @@ CONFIG_ARM_SECURE_MONITOR=y
 # CONFIG_ARM_PSCI_CLIENT is not set
 # end of ARM specific settings
 
+CONFIG_HAVE_ARCH_BOARD_GENERIC_DT=y
+
+#
+# General architecture-dependent options
+#
+CONFIG_BOARD_GENERIC_DT=y
+# CONFIG_BOARD_GENERIC_FIT is not set
+# end of General architecture-dependent options
+
+CONFIG_CC_IS_GCC=y
+CONFIG_GCC_VERSION=140201
+CONFIG_CLANG_VERSION=0
 CONFIG_GREGORIAN_CALENDER=y
 CONFIG_HAS_KALLSYMS=y
 CONFIG_HAS_MODULES=y
@@ -91,7 +106,6 @@ CONFIG_FITIMAGE=y
 CONFIG_LOGBUF=y
 CONFIG_STDDEV=y
 CONFIG_MENUTREE=y
-CONFIG_USBGADGET_START=y
 CONFIG_BOOT=y
 CONFIG_FASTBOOT_BASE=y
 
@@ -100,6 +114,8 @@ CONFIG_FASTBOOT_BASE=y
 #
 CONFIG_LOCALVERSION=""
 CONFIG_LOCALVERSION_AUTO=y
+CONFIG_HAS_INSECURE_DEFAULTS=y
+CONFIG_INSECURE=y
 CONFIG_BANNER=y
 CONFIG_MEMINFO=y
 CONFIG_MEMTEST=y
@@ -117,7 +133,6 @@ CONFIG_PBL_IMAGE=y
 CONFIG_PBL_MULTI_IMAGES=y
 CONFIG_USE_COMPRESSED_DTB=y
 CONFIG_PBL_RELOCATABLE=y
-CONFIG_BOARD_GENERIC_DT=y
 CONFIG_IMAGE_COMPRESSION=y
 # CONFIG_IMAGE_COMPRESSION_LZ4 is not set
 CONFIG_IMAGE_COMPRESSION_LZO=y
@@ -161,6 +176,7 @@ CONFIG_MENU=y
 CONFIG_ERRNO_MESSAGES=y
 CONFIG_TIMESTAMP=y
 CONFIG_BOOTM=y
+CONFIG_BOOT_OVERRIDE=y
 CONFIG_BOOTM_SHOW_TYPE=y
 CONFIG_BOOTM_VERBOSE=y
 CONFIG_BOOTM_INITRD=y
@@ -171,6 +187,7 @@ CONFIG_BOOTM_UIMAGE=y
 # CONFIG_BOOTM_ELF is not set
 CONFIG_BOOTM_FITIMAGE=y
 # CONFIG_BOOTM_FITIMAGE_SIGNATURE is not set
+CONFIG_BOOTM_OPTIONAL_SIGNED_IMAGES=y
 CONFIG_BLSPEC=y
 CONFIG_FLEXIBLE_BOOTARGS=y
 CONFIG_MMCBLKDEV_ROOTARG=y
@@ -248,6 +265,10 @@ CONFIG_CC_HAS_KASAN_GENERIC=y
 # CONFIG_KASAN is not set
 # CONFIG_COMPILE_TEST is not set
 # CONFIG_WERROR is not set
+
+#
+# arm Debugging
+#
 # end of Debugging
 
 #
@@ -358,6 +379,7 @@ CONFIG_CMD_SHA1SUM=y
 # CONFIG_CMD_SHA256SUM is not set
 # CONFIG_CMD_SHA384SUM is not set
 # CONFIG_CMD_SHA512SUM is not set
+# CONFIG_CMD_FIPTOOL is not set
 CONFIG_CMD_UNCOMPRESS=y
 # end of File
 
@@ -561,6 +583,7 @@ CONFIG_SPI=y
 # CONFIG_SPI_MEM is not set
 CONFIG_DRIVER_SPI_GPIO=y
 # CONFIG_DRIVER_SPI_LITEX_SPIFLASH is not set
+# CONFIG_SPI_BCM2835 is not set
 # end of SPI drivers
 
 CONFIG_I2C=y
@@ -675,6 +698,7 @@ CONFIG_MCI_MMC_BOOT_PARTITIONS=y
 #
 # CONFIG_MCI_DWC_MSHC is not set
 # CONFIG_MCI_DW is not set
+# CONFIG_MCI_SUNXI_SMHC is not set
 # CONFIG_MCI_ROCKCHIP_DWCMSHC is not set
 CONFIG_MCI_BCM283X=y
 CONFIG_MCI_BCM283X_SDHOST=y
@@ -709,6 +733,7 @@ CONFIG_CLOCKSOURCE_ARM_ARCHITECTED_TIMER=y
 # CONFIG_MFD_MC9SDZ60 is not set
 # CONFIG_MFD_STMPE is not set
 # CONFIG_MFD_SYSCON is not set
+# CONFIG_MFD_TPS65219 is not set
 # CONFIG_MFD_TWL4030 is not set
 # CONFIG_MFD_TWL6030 is not set
 # CONFIG_MFD_STPMIC1 is not set
@@ -768,6 +793,7 @@ CONFIG_WATCHDOG_BCM2835=y
 #
 # DMA support
 #
+# CONFIG_DMADEVICES is not set
 # end of DMA support
 
 CONFIG_GPIOLIB=y
@@ -900,6 +926,7 @@ CONFIG_USB_NOP_XCEIV=y
 #
 CONFIG_FS=y
 CONFIG_FS_LEGACY=y
+CONFIG_FS_WRITABLE=y
 
 #
 # Some selected filesystems still use the legacy FS API.
@@ -991,7 +1018,35 @@ CONFIG_ARCH_HAS_ZERO_PAGE=y
 #
 # Hardening options
 #
+
+#
+# This barebox configuration has CONFIG_HAS_INSECURE_DEFAULTS=y indicating
+#
+
+#
+# that some of the configured options have potentially insecure defaults.
+#
+
+#
+# Extra care needs to be in secure booted systems.
+#
 # CONFIG_BUG_ON_DATA_CORRUPTION is not set
+
+#
+# Memory initialization
+#
+CONFIG_CC_HAS_AUTO_VAR_INIT_PATTERN=y
+CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO_BARE=y
+CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO=y
+# CONFIG_INIT_STACK_NONE is not set
+# CONFIG_INIT_STACK_ALL_PATTERN is not set
+CONFIG_INIT_STACK_ALL_ZERO=y
+# CONFIG_INIT_ON_ALLOC_DEFAULT_ON is not set
+# CONFIG_INIT_ON_FREE_DEFAULT_ON is not set
+CONFIG_CC_HAS_ZERO_CALL_USED_REGS=y
+# CONFIG_ZERO_CALL_USED_REGS is not set
+# end of Memory initialization
+
 # CONFIG_STACK_GUARD_PAGE is not set
 CONFIG_STACKPROTECTOR_NONE=y
 # CONFIG_STACKPROTECTOR_STRONG is not set
diff --git a/configs/platform-v7a/barebox-rpi2.config.diff b/configs/platform-v7a/barebox-rpi2.config.diff
index 22da608bdf7d..627dc4cfc297 100644
--- a/configs/platform-v7a/barebox-rpi2.config.diff
+++ b/configs/platform-v7a/barebox-rpi2.config.diff
@@ -1,4 +1,4 @@
-7107a8d8bbd7061c017ec7d039b9a2b3
+b84e018f387ca177ad90f1972d178d88
 # CONFIG_CMD_NVMEM is not set
 CONFIG_DRIVER_NET_BCMGENET=y
 CONFIG_DRIVER_SERIAL_NS16550=y
diff --git a/configs/platform-v7a/barebox-stm32mp.config b/configs/platform-v7a/barebox-stm32mp.config
index 74e4bf931d4f..a3feb8eca43c 100644
--- a/configs/platform-v7a/barebox-stm32mp.config
+++ b/configs/platform-v7a/barebox-stm32mp.config
@@ -1,12 +1,13 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Barebox/arm 2024.12.0 Configuration
+# Barebox/arm 2025.03.0 Configuration
 #
 CONFIG_ARM=y
+CONFIG_ARCH_LINUX_NAME="arm"
+CONFIG_ARCH_MKIMAGE_NAME="arm"
 CONFIG_ARM32=y
 CONFIG_ARCH_TEXT_BASE=0x00000000
 CONFIG_ARM_LINUX=y
-CONFIG_ARM_USE_COMPRESSED_DTB=y
 
 #
 # System Type
@@ -23,6 +24,8 @@ CONFIG_ARCH_MULTIARCH=y
 # CONFIG_ARCH_ZYNQ is not set
 # CONFIG_ARCH_BCM283X is not set
 # CONFIG_ARCH_IMX is not set
+# CONFIG_ARCH_K3 is not set
+# CONFIG_ARCH_SUNXI is not set
 # CONFIG_ARCH_LAYERSCAPE is not set
 # CONFIG_ARCH_OMAP_MULTI is not set
 # CONFIG_ARCH_ROCKCHIP is not set
@@ -50,8 +53,9 @@ CONFIG_MACH_LXA_MC1=y
 # CONFIG_MACH_SEEED_ODYSSEY is not set
 CONFIG_MACH_STM32MP15X_EV1=y
 # CONFIG_MACH_PROTONIC_STM32MP1 is not set
+# CONFIG_MACH_PROTONIC_STM32MP13 is not set
 # CONFIG_MACH_PHYTEC_PHYCORE_STM32MP1 is not set
-# CONFIG_BOARD_ARM_GENERIC_DT is not set
+CONFIG_BOARD_ARM_GENERIC_DT=y
 CONFIG_AEABI=y
 CONFIG_THUMB2_BAREBOX=y
 CONFIG_ARM_BOARD_APPEND_ATAG=y
@@ -73,6 +77,18 @@ CONFIG_ARM_PSCI_OF=y
 CONFIG_ARM_PSCI_CLIENT=y
 # end of ARM specific settings
 
+CONFIG_HAVE_ARCH_BOARD_GENERIC_DT=y
+
+#
+# General architecture-dependent options
+#
+CONFIG_BOARD_GENERIC_DT=y
+# CONFIG_BOARD_GENERIC_FIT is not set
+# end of General architecture-dependent options
+
+CONFIG_CC_IS_GCC=y
+CONFIG_GCC_VERSION=140201
+CONFIG_CLANG_VERSION=0
 CONFIG_GREGORIAN_CALENDER=y
 CONFIG_HAS_KALLSYMS=y
 CONFIG_HAS_MODULES=y
@@ -90,7 +106,6 @@ CONFIG_FITIMAGE=y
 CONFIG_LOGBUF=y
 CONFIG_STDDEV=y
 CONFIG_MENUTREE=y
-CONFIG_USBGADGET_START=y
 CONFIG_BOOT=y
 CONFIG_FASTBOOT_BASE=y
 
@@ -99,6 +114,8 @@ CONFIG_FASTBOOT_BASE=y
 #
 CONFIG_LOCALVERSION=""
 CONFIG_LOCALVERSION_AUTO=y
+CONFIG_HAS_INSECURE_DEFAULTS=y
+CONFIG_INSECURE=y
 CONFIG_BANNER=y
 CONFIG_MEMINFO=y
 CONFIG_MEMTEST=y
@@ -159,6 +176,7 @@ CONFIG_MENU=y
 CONFIG_ERRNO_MESSAGES=y
 CONFIG_TIMESTAMP=y
 CONFIG_BOOTM=y
+CONFIG_BOOT_OVERRIDE=y
 CONFIG_BOOTM_SHOW_TYPE=y
 CONFIG_BOOTM_VERBOSE=y
 CONFIG_BOOTM_INITRD=y
@@ -169,6 +187,7 @@ CONFIG_BOOTM_OFTREE_UIMAGE=y
 # CONFIG_BOOTM_ELF is not set
 CONFIG_BOOTM_FITIMAGE=y
 # CONFIG_BOOTM_FITIMAGE_SIGNATURE is not set
+CONFIG_BOOTM_OPTIONAL_SIGNED_IMAGES=y
 CONFIG_BLSPEC=y
 CONFIG_FLEXIBLE_BOOTARGS=y
 CONFIG_MMCBLKDEV_ROOTARG=y
@@ -250,6 +269,10 @@ CONFIG_CC_HAS_KASAN_GENERIC=y
 # CONFIG_KASAN is not set
 # CONFIG_COMPILE_TEST is not set
 # CONFIG_WERROR is not set
+
+#
+# arm Debugging
+#
 # end of Debugging
 
 #
@@ -360,6 +383,7 @@ CONFIG_CMD_SHA1SUM=y
 # CONFIG_CMD_SHA256SUM is not set
 # CONFIG_CMD_SHA384SUM is not set
 # CONFIG_CMD_SHA512SUM is not set
+# CONFIG_CMD_FIPTOOL is not set
 CONFIG_CMD_UNCOMPRESS=y
 # end of File
 
@@ -638,6 +662,7 @@ CONFIG_MCI_MMC_BOOT_PARTITIONS=y
 #
 # CONFIG_MCI_DWC_MSHC is not set
 # CONFIG_MCI_DW is not set
+# CONFIG_MCI_SUNXI_SMHC is not set
 # CONFIG_MCI_ROCKCHIP_DWCMSHC is not set
 # CONFIG_MCI_MMCI is not set
 # CONFIG_MCI_ARASAN is not set
@@ -673,6 +698,7 @@ CONFIG_CLOCKSOURCE_ARM_ARCHITECTED_TIMER=y
 # CONFIG_MFD_MC9SDZ60 is not set
 # CONFIG_MFD_STMPE is not set
 CONFIG_MFD_SYSCON=y
+# CONFIG_MFD_TPS65219 is not set
 # CONFIG_MFD_TWL4030 is not set
 # CONFIG_MFD_TWL6030 is not set
 CONFIG_MFD_STPMIC1=y
@@ -738,6 +764,7 @@ CONFIG_HW_RANDOM_OPTEE=y
 #
 # DMA support
 #
+# CONFIG_DMADEVICES is not set
 # end of DMA support
 
 CONFIG_GPIOLIB=y
@@ -892,6 +919,7 @@ CONFIG_OF_FIXUP_OPTEE=y
 #
 CONFIG_FS=y
 CONFIG_FS_LEGACY=y
+CONFIG_FS_WRITABLE=y
 
 #
 # Some selected filesystems still use the legacy FS API.
@@ -953,6 +981,7 @@ CONFIG_LZO_DECOMPRESS=y
 CONFIG_FNMATCH=y
 CONFIG_QSORT=y
 CONFIG_IMAGE_SPARSE=y
+CONFIG_LIBFDT=y
 # CONFIG_RATP is not set
 # CONFIG_ALLOW_PRNG_FALLBACK is not set
 # CONFIG_CRC_CCITT is not set
@@ -975,7 +1004,35 @@ CONFIG_IDR=y
 #
 # Hardening options
 #
+
+#
+# This barebox configuration has CONFIG_HAS_INSECURE_DEFAULTS=y indicating
+#
+
+#
+# that some of the configured options have potentially insecure defaults.
+#
+
+#
+# Extra care needs to be in secure booted systems.
+#
 # CONFIG_BUG_ON_DATA_CORRUPTION is not set
+
+#
+# Memory initialization
+#
+CONFIG_CC_HAS_AUTO_VAR_INIT_PATTERN=y
+CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO_BARE=y
+CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO=y
+# CONFIG_INIT_STACK_NONE is not set
+# CONFIG_INIT_STACK_ALL_PATTERN is not set
+CONFIG_INIT_STACK_ALL_ZERO=y
+# CONFIG_INIT_ON_ALLOC_DEFAULT_ON is not set
+# CONFIG_INIT_ON_FREE_DEFAULT_ON is not set
+CONFIG_CC_HAS_ZERO_CALL_USED_REGS=y
+# CONFIG_ZERO_CALL_USED_REGS is not set
+# end of Memory initialization
+
 CONFIG_STACK_GUARD_PAGE=y
 CONFIG_STACKPROTECTOR=y
 # CONFIG_STACKPROTECTOR_NONE is not set
diff --git a/configs/platform-v7a/barebox-stm32mp.config.diff b/configs/platform-v7a/barebox-stm32mp.config.diff
index b5eed3964614..6ea1f0c21ec5 100644
--- a/configs/platform-v7a/barebox-stm32mp.config.diff
+++ b/configs/platform-v7a/barebox-stm32mp.config.diff
@@ -1,4 +1,4 @@
-7107a8d8bbd7061c017ec7d039b9a2b3
+b84e018f387ca177ad90f1972d178d88
 # CONFIG_ARCH_BCM283X is not set
 CONFIG_ARCH_HAS_RESET_CONTROLLER=y
 CONFIG_ARCH_NR_GPIO=416
@@ -19,8 +19,6 @@ CONFIG_ARM_SCMI_TRANSPORT_OPTEE=y
 CONFIG_ARM_SCMI_TRANSPORT_SMC=y
 # CONFIG_ARM_SECURE_MONITOR is undefined
 CONFIG_AT803X_PHY=y
-# CONFIG_BOARD_ARM_GENERIC_DT is not set
-# CONFIG_BOARD_GENERIC_DT is undefined
 CONFIG_BOOTM_OFTREE_UIMAGE=y
 # CONFIG_BZLIB is not set
 # CONFIG_CLKSRC_STM32 is not set
@@ -74,10 +72,10 @@ CONFIG_I2C_STM32=y
 CONFIG_IDR=y
 CONFIG_LED_PWM=y
 # CONFIG_LED_TRIGGERS is not set
-# CONFIG_LIBFDT is undefined
 CONFIG_MACHINE_ID=y
 CONFIG_MACH_LXA_MC1=y
 # CONFIG_MACH_PHYTEC_PHYCORE_STM32MP1 is not set
+# CONFIG_MACH_PROTONIC_STM32MP13 is not set
 # CONFIG_MACH_PROTONIC_STM32MP1 is not set
 # CONFIG_MACH_RPI2 is undefined
 # CONFIG_MACH_RPI3 is undefined
@@ -158,6 +156,7 @@ CONFIG_RESET_SCMI=y
 CONFIG_RESET_SIMPLE=y
 CONFIG_RESET_STM32=y
 # CONFIG_SPI is not set
+# CONFIG_SPI_BCM2835 is undefined
 # CONFIG_SPI_MEM is undefined
 CONFIG_STACKPROTECTOR=y
 # CONFIG_STACKPROTECTOR_NONE is not set
diff --git a/configs/platform-v7a/barebox-vexpress.config b/configs/platform-v7a/barebox-vexpress.config
index d56efcd4f9ee..2d5b5a381940 100644
--- a/configs/platform-v7a/barebox-vexpress.config
+++ b/configs/platform-v7a/barebox-vexpress.config
@@ -1,8 +1,10 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Barebox/arm 2024.12.0 Configuration
+# Barebox/arm 2025.03.0 Configuration
 #
 CONFIG_ARM=y
+CONFIG_ARCH_LINUX_NAME="arm"
+CONFIG_ARCH_MKIMAGE_NAME="arm"
 CONFIG_ARM32=y
 CONFIG_ARCH_TEXT_BASE=0x00000000
 CONFIG_ARM_LINUX=y
@@ -21,6 +23,8 @@ CONFIG_ARCH_MULTIARCH=y
 # CONFIG_ARCH_ZYNQ is not set
 # CONFIG_ARCH_BCM283X is not set
 # CONFIG_ARCH_IMX is not set
+# CONFIG_ARCH_K3 is not set
+# CONFIG_ARCH_SUNXI is not set
 # CONFIG_ARCH_LAYERSCAPE is not set
 # CONFIG_ARCH_OMAP_MULTI is not set
 # CONFIG_ARCH_ROCKCHIP is not set
@@ -60,6 +64,18 @@ CONFIG_ARM_UNWIND=y
 # CONFIG_ARM_PSCI_CLIENT is not set
 # end of ARM specific settings
 
+CONFIG_HAVE_ARCH_BOARD_GENERIC_DT=y
+
+#
+# General architecture-dependent options
+#
+CONFIG_BOARD_GENERIC_DT=y
+# CONFIG_BOARD_GENERIC_FIT is not set
+# end of General architecture-dependent options
+
+CONFIG_CC_IS_GCC=y
+CONFIG_GCC_VERSION=140201
+CONFIG_CLANG_VERSION=0
 CONFIG_GREGORIAN_CALENDER=y
 CONFIG_HAS_KALLSYMS=y
 CONFIG_HAS_MODULES=y
@@ -76,7 +92,6 @@ CONFIG_FITIMAGE=y
 CONFIG_LOGBUF=y
 CONFIG_STDDEV=y
 CONFIG_MENUTREE=y
-CONFIG_USBGADGET_START=y
 CONFIG_BOOT=y
 CONFIG_FASTBOOT_BASE=y
 
@@ -85,6 +100,8 @@ CONFIG_FASTBOOT_BASE=y
 #
 CONFIG_LOCALVERSION=""
 CONFIG_LOCALVERSION_AUTO=y
+CONFIG_HAS_INSECURE_DEFAULTS=y
+CONFIG_INSECURE=y
 CONFIG_BANNER=y
 CONFIG_MEMINFO=y
 CONFIG_MEMTEST=y
@@ -100,8 +117,8 @@ CONFIG_HAVE_PBL_MULTI_IMAGES=y
 CONFIG_HAVE_IMAGE_COMPRESSION=y
 CONFIG_PBL_IMAGE=y
 CONFIG_PBL_MULTI_IMAGES=y
+CONFIG_USE_COMPRESSED_DTB=y
 CONFIG_PBL_RELOCATABLE=y
-CONFIG_BOARD_GENERIC_DT=y
 CONFIG_IMAGE_COMPRESSION=y
 # CONFIG_IMAGE_COMPRESSION_LZ4 is not set
 CONFIG_IMAGE_COMPRESSION_LZO=y
@@ -145,6 +162,7 @@ CONFIG_MENU=y
 CONFIG_ERRNO_MESSAGES=y
 CONFIG_TIMESTAMP=y
 CONFIG_BOOTM=y
+CONFIG_BOOT_OVERRIDE=y
 CONFIG_BOOTM_SHOW_TYPE=y
 CONFIG_BOOTM_VERBOSE=y
 CONFIG_BOOTM_INITRD=y
@@ -155,6 +173,7 @@ CONFIG_BOOTM_UIMAGE=y
 # CONFIG_BOOTM_ELF is not set
 CONFIG_BOOTM_FITIMAGE=y
 # CONFIG_BOOTM_FITIMAGE_SIGNATURE is not set
+CONFIG_BOOTM_OPTIONAL_SIGNED_IMAGES=y
 CONFIG_BLSPEC=y
 CONFIG_FLEXIBLE_BOOTARGS=y
 CONFIG_MMCBLKDEV_ROOTARG=y
@@ -234,6 +253,10 @@ CONFIG_CC_HAS_KASAN_GENERIC=y
 # CONFIG_KASAN is not set
 # CONFIG_COMPILE_TEST is not set
 # CONFIG_WERROR is not set
+
+#
+# arm Debugging
+#
 # end of Debugging
 
 #
@@ -343,6 +366,7 @@ CONFIG_CMD_SHA1SUM=y
 # CONFIG_CMD_SHA256SUM is not set
 # CONFIG_CMD_SHA384SUM is not set
 # CONFIG_CMD_SHA512SUM is not set
+# CONFIG_CMD_FIPTOOL is not set
 CONFIG_CMD_UNCOMPRESS=y
 # end of File
 
@@ -657,6 +681,7 @@ CONFIG_MCI_ERASE=y
 #
 # CONFIG_MCI_DWC_MSHC is not set
 # CONFIG_MCI_DW is not set
+# CONFIG_MCI_SUNXI_SMHC is not set
 # CONFIG_MCI_ROCKCHIP_DWCMSHC is not set
 CONFIG_MCI_MMCI=y
 # CONFIG_MCI_ARASAN is not set
@@ -689,6 +714,7 @@ CONFIG_CLOCKSOURCE_ARM_ARCHITECTED_TIMER=y
 # CONFIG_MFD_MC9SDZ60 is not set
 # CONFIG_MFD_STMPE is not set
 # CONFIG_MFD_SYSCON is not set
+# CONFIG_MFD_TPS65219 is not set
 # CONFIG_MFD_TWL4030 is not set
 # CONFIG_MFD_TWL6030 is not set
 # CONFIG_MFD_STPMIC1 is not set
@@ -740,6 +766,7 @@ CONFIG_HWRNG=y
 #
 # DMA support
 #
+# CONFIG_DMADEVICES is not set
 # end of DMA support
 
 # CONFIG_W1 is not set
@@ -842,6 +869,7 @@ CONFIG_REGULATOR=y
 #
 CONFIG_FS=y
 CONFIG_FS_LEGACY=y
+CONFIG_FS_WRITABLE=y
 
 #
 # Some selected filesystems still use the legacy FS API.
@@ -933,7 +961,35 @@ CONFIG_ARCH_HAS_ZERO_PAGE=y
 #
 # Hardening options
 #
+
+#
+# This barebox configuration has CONFIG_HAS_INSECURE_DEFAULTS=y indicating
+#
+
+#
+# that some of the configured options have potentially insecure defaults.
+#
+
+#
+# Extra care needs to be in secure booted systems.
+#
 # CONFIG_BUG_ON_DATA_CORRUPTION is not set
+
+#
+# Memory initialization
+#
+CONFIG_CC_HAS_AUTO_VAR_INIT_PATTERN=y
+CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO_BARE=y
+CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO=y
+# CONFIG_INIT_STACK_NONE is not set
+# CONFIG_INIT_STACK_ALL_PATTERN is not set
+CONFIG_INIT_STACK_ALL_ZERO=y
+# CONFIG_INIT_ON_ALLOC_DEFAULT_ON is not set
+# CONFIG_INIT_ON_FREE_DEFAULT_ON is not set
+CONFIG_CC_HAS_ZERO_CALL_USED_REGS=y
+# CONFIG_ZERO_CALL_USED_REGS is not set
+# end of Memory initialization
+
 # CONFIG_STACK_GUARD_PAGE is not set
 CONFIG_STACKPROTECTOR_NONE=y
 # CONFIG_STACKPROTECTOR_STRONG is not set
diff --git a/configs/platform-v7a/barebox-vexpress.config.diff b/configs/platform-v7a/barebox-vexpress.config.diff
index 333303867754..bef80379b0ef 100644
--- a/configs/platform-v7a/barebox-vexpress.config.diff
+++ b/configs/platform-v7a/barebox-vexpress.config.diff
@@ -1,10 +1,9 @@
-7107a8d8bbd7061c017ec7d039b9a2b3
+b84e018f387ca177ad90f1972d178d88
 CONFIG_AMBA_SP804=y
 # CONFIG_ARCH_BCM283X is not set
 CONFIG_ARCH_VEXPRESS=y
 # CONFIG_ARM_SECURE_MONITOR is undefined
 # CONFIG_ARM_SMCCC is undefined
-# CONFIG_ARM_USE_COMPRESSED_DTB is undefined
 # CONFIG_CFI_BUFFER_WRITE is not set
 # CONFIG_CLOCKSOURCE_BCM283X is undefined
 # CONFIG_CMD_GPIO is undefined
@@ -68,6 +67,6 @@ CONFIG_PROMPT="vexpress: "
 # CONFIG_REGULATOR_BCM283X is undefined
 # CONFIG_REGULATOR_FIXED is undefined
 CONFIG_SERIAL_AMBA_PL011=y
+# CONFIG_SPI_BCM2835 is undefined
 CONFIG_SRAM=y
-# CONFIG_USE_COMPRESSED_DTB is undefined
 # CONFIG_WATCHDOG_BCM2835 is undefined
diff --git a/configs/platform-v7a/barebox.config b/configs/platform-v7a/barebox.config
index ce526b4551cc..6fab1828a60f 100644
--- a/configs/platform-v7a/barebox.config
+++ b/configs/platform-v7a/barebox.config
@@ -1,12 +1,13 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Barebox/arm 2024.12.0 Configuration
+# Barebox/arm 2025.03.0 Configuration
 #
 CONFIG_ARM=y
+CONFIG_ARCH_LINUX_NAME="arm"
+CONFIG_ARCH_MKIMAGE_NAME="arm"
 CONFIG_ARM32=y
 CONFIG_ARCH_TEXT_BASE=0x00000000
 CONFIG_ARM_LINUX=y
-CONFIG_ARM_USE_COMPRESSED_DTB=y
 
 #
 # System Type
@@ -22,6 +23,8 @@ CONFIG_ARCH_MULTIARCH=y
 # CONFIG_ARCH_ZYNQ is not set
 CONFIG_ARCH_BCM283X=y
 # CONFIG_ARCH_IMX is not set
+# CONFIG_ARCH_K3 is not set
+# CONFIG_ARCH_SUNXI is not set
 # CONFIG_ARCH_LAYERSCAPE is not set
 # CONFIG_ARCH_OMAP_MULTI is not set
 # CONFIG_ARCH_ROCKCHIP is not set
@@ -74,6 +77,18 @@ CONFIG_ARM_SECURE_MONITOR=y
 # CONFIG_ARM_PSCI_CLIENT is not set
 # end of ARM specific settings
 
+CONFIG_HAVE_ARCH_BOARD_GENERIC_DT=y
+
+#
+# General architecture-dependent options
+#
+CONFIG_BOARD_GENERIC_DT=y
+# CONFIG_BOARD_GENERIC_FIT is not set
+# end of General architecture-dependent options
+
+CONFIG_CC_IS_GCC=y
+CONFIG_GCC_VERSION=140201
+CONFIG_CLANG_VERSION=0
 CONFIG_GREGORIAN_CALENDER=y
 CONFIG_HAS_KALLSYMS=y
 CONFIG_HAS_MODULES=y
@@ -91,7 +106,6 @@ CONFIG_FITIMAGE=y
 CONFIG_LOGBUF=y
 CONFIG_STDDEV=y
 CONFIG_MENUTREE=y
-CONFIG_USBGADGET_START=y
 CONFIG_BOOT=y
 CONFIG_FASTBOOT_BASE=y
 
@@ -100,6 +114,8 @@ CONFIG_FASTBOOT_BASE=y
 #
 CONFIG_LOCALVERSION=""
 CONFIG_LOCALVERSION_AUTO=y
+CONFIG_HAS_INSECURE_DEFAULTS=y
+CONFIG_INSECURE=y
 CONFIG_BANNER=y
 CONFIG_MEMINFO=y
 CONFIG_MEMTEST=y
@@ -117,7 +133,6 @@ CONFIG_PBL_IMAGE=y
 CONFIG_PBL_MULTI_IMAGES=y
 CONFIG_USE_COMPRESSED_DTB=y
 CONFIG_PBL_RELOCATABLE=y
-CONFIG_BOARD_GENERIC_DT=y
 CONFIG_IMAGE_COMPRESSION=y
 # CONFIG_IMAGE_COMPRESSION_LZ4 is not set
 CONFIG_IMAGE_COMPRESSION_LZO=y
@@ -161,6 +176,7 @@ CONFIG_MENU=y
 CONFIG_ERRNO_MESSAGES=y
 CONFIG_TIMESTAMP=y
 CONFIG_BOOTM=y
+CONFIG_BOOT_OVERRIDE=y
 CONFIG_BOOTM_SHOW_TYPE=y
 CONFIG_BOOTM_VERBOSE=y
 CONFIG_BOOTM_INITRD=y
@@ -171,6 +187,7 @@ CONFIG_BOOTM_UIMAGE=y
 # CONFIG_BOOTM_ELF is not set
 CONFIG_BOOTM_FITIMAGE=y
 # CONFIG_BOOTM_FITIMAGE_SIGNATURE is not set
+CONFIG_BOOTM_OPTIONAL_SIGNED_IMAGES=y
 CONFIG_BLSPEC=y
 CONFIG_FLEXIBLE_BOOTARGS=y
 CONFIG_MMCBLKDEV_ROOTARG=y
@@ -249,6 +266,10 @@ CONFIG_CC_HAS_KASAN_GENERIC=y
 # CONFIG_KASAN is not set
 # CONFIG_COMPILE_TEST is not set
 # CONFIG_WERROR is not set
+
+#
+# arm Debugging
+#
 # end of Debugging
 
 #
@@ -358,6 +379,7 @@ CONFIG_CMD_SHA1SUM=y
 # CONFIG_CMD_SHA256SUM is not set
 # CONFIG_CMD_SHA384SUM is not set
 # CONFIG_CMD_SHA512SUM is not set
+# CONFIG_CMD_FIPTOOL is not set
 CONFIG_CMD_UNCOMPRESS=y
 # end of File
 
@@ -561,6 +583,7 @@ CONFIG_SPI=y
 # CONFIG_SPI_MEM is not set
 CONFIG_DRIVER_SPI_GPIO=y
 # CONFIG_DRIVER_SPI_LITEX_SPIFLASH is not set
+# CONFIG_SPI_BCM2835 is not set
 # end of SPI drivers
 
 CONFIG_I2C=y
@@ -673,6 +696,7 @@ CONFIG_MCI_ERASE=y
 #
 # CONFIG_MCI_DWC_MSHC is not set
 # CONFIG_MCI_DW is not set
+# CONFIG_MCI_SUNXI_SMHC is not set
 # CONFIG_MCI_ROCKCHIP_DWCMSHC is not set
 # CONFIG_MCI_BCM283X is not set
 # CONFIG_MCI_BCM283X_SDHOST is not set
@@ -707,6 +731,7 @@ CONFIG_CLOCKSOURCE_ARM_ARCHITECTED_TIMER=y
 # CONFIG_MFD_MC9SDZ60 is not set
 # CONFIG_MFD_STMPE is not set
 # CONFIG_MFD_SYSCON is not set
+# CONFIG_MFD_TPS65219 is not set
 # CONFIG_MFD_TWL4030 is not set
 # CONFIG_MFD_TWL6030 is not set
 # CONFIG_MFD_STPMIC1 is not set
@@ -769,6 +794,7 @@ CONFIG_HWRNG=y
 #
 # DMA support
 #
+# CONFIG_DMADEVICES is not set
 # end of DMA support
 
 CONFIG_GPIOLIB=y
@@ -895,6 +921,7 @@ CONFIG_REGULATOR_BCM283X=y
 #
 CONFIG_FS=y
 CONFIG_FS_LEGACY=y
+CONFIG_FS_WRITABLE=y
 
 #
 # Some selected filesystems still use the legacy FS API.
@@ -986,7 +1013,35 @@ CONFIG_ARCH_HAS_ZERO_PAGE=y
 #
 # Hardening options
 #
+
+#
+# This barebox configuration has CONFIG_HAS_INSECURE_DEFAULTS=y indicating
+#
+
+#
+# that some of the configured options have potentially insecure defaults.
+#
+
+#
+# Extra care needs to be in secure booted systems.
+#
 # CONFIG_BUG_ON_DATA_CORRUPTION is not set
+
+#
+# Memory initialization
+#
+CONFIG_CC_HAS_AUTO_VAR_INIT_PATTERN=y
+CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO_BARE=y
+CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO=y
+# CONFIG_INIT_STACK_NONE is not set
+# CONFIG_INIT_STACK_ALL_PATTERN is not set
+CONFIG_INIT_STACK_ALL_ZERO=y
+# CONFIG_INIT_ON_ALLOC_DEFAULT_ON is not set
+# CONFIG_INIT_ON_FREE_DEFAULT_ON is not set
+CONFIG_CC_HAS_ZERO_CALL_USED_REGS=y
+# CONFIG_ZERO_CALL_USED_REGS is not set
+# end of Memory initialization
+
 # CONFIG_STACK_GUARD_PAGE is not set
 CONFIG_STACKPROTECTOR_NONE=y
 # CONFIG_STACKPROTECTOR_STRONG is not set
diff --git a/configs/platform-v7a/platformconfig b/configs/platform-v7a/platformconfig
index 14e8a2f40fae..0ed935d55c04 100644
--- a/configs/platform-v7a/platformconfig
+++ b/configs/platform-v7a/platformconfig
@@ -185,8 +185,8 @@ PTXCONF_AT91BOOTSTRAP2_MD5="ef321a80bf428bfd6cb642c96126ef6c"
 PTXCONF_AT91BOOTSTRAP2_CONFIG="at91bootstrap-wifx-l1.config"
 PTXCONF_BAREBOX_COMMON_ARCH_STRING="arm"
 PTXCONF_BAREBOX_COMMON=y
-PTXCONF_BAREBOX_COMMON_VERSION="2024.12.0"
-PTXCONF_BAREBOX_COMMON_MD5="b9277ee0dc251b2a49de97d37ee5d365"
+PTXCONF_BAREBOX_COMMON_VERSION="2025.03.0"
+PTXCONF_BAREBOX_COMMON_MD5="2b84bcf8644373db021c86864f2e5761"
 PTXCONF_BAREBOX_COMMON_NEEDS_HOST_LZOP=y
 PTXCONF_BAREBOX_AM335X_MLO=y
 PTXCONF_BAREBOX_AM335X=y
-- 
2.39.5




^ permalink raw reply	[flat|nested] 4+ messages in thread

* [DistroKit] [PATCH 2/3] v7a: barebox: am335x-mlo: disable MTD
  2025-04-01 12:15 [DistroKit] [PATCH 1/3] v7a: barebox: version bump v2024.12.0 → v2025.03.0 Ahmad Fatoum
@ 2025-04-01 12:15 ` Ahmad Fatoum
  2025-04-01 12:15 ` [DistroKit] [PATCH 3/3] v8a: barebox: update to version bump v2024.12.0 → v2025.03.0 Ahmad Fatoum
  2025-04-01 18:47 ` [DistroKit] [PATCH 1/3] v7a: barebox: " Robert Schwebel
  2 siblings, 0 replies; 4+ messages in thread
From: Ahmad Fatoum @ 2025-04-01 12:15 UTC (permalink / raw)
  To: distrokit; +Cc: Ahmad Fatoum

We currently configure the MLO image to support SPI-NOR and NAND flash,
but we only generate SD/eMMC images for am335x platforms.

The MLO first stage always boots from the same boot medium it came from
and thus the MTD support is unused. barebox v2025.03.0 got big enough
that it breaks our config, thus lets disable MTD for now.

There are already fixes to get the size down queued for the next
release, so this commit can be reverted in future.

Signed-off-by: Ahmad Fatoum <a.fatoum@pengutronix.de>
---
 .../platform-v7a/barebox-am335x-mlo.config    | 60 +------------------
 1 file changed, 1 insertion(+), 59 deletions(-)

diff --git a/configs/platform-v7a/barebox-am335x-mlo.config b/configs/platform-v7a/barebox-am335x-mlo.config
index c9cb8a914155..ad87ca07cf23 100644
--- a/configs/platform-v7a/barebox-am335x-mlo.config
+++ b/configs/platform-v7a/barebox-am335x-mlo.config
@@ -234,14 +234,12 @@ CONFIG_OFDEVICE=y
 CONFIG_OF_GPIO=y
 # CONFIG_OF_OVERLAY is not set
 # CONFIG_AIODEV is not set
-CONFIG_ARM_AMBA=y
 
 #
 # serial drivers
 #
 # CONFIG_SERIAL_DEV_BUS is not set
 # CONFIG_DRIVER_SERIAL_ARM_DCC is not set
-# CONFIG_SERIAL_AMBA_PL011 is not set
 CONFIG_DRIVER_SERIAL_NS16550=y
 # CONFIG_DRIVER_SERIAL_NS16550_OMAP_TTYS is not set
 # CONFIG_DRIVER_SERIAL_CADENCE is not set
@@ -260,59 +258,7 @@ CONFIG_DRIVER_SPI_OMAP3=y
 # end of SPI drivers
 
 # CONFIG_I2C is not set
-CONFIG_MTD=y
-# CONFIG_MTD_WRITE is not set
-# CONFIG_MTD_OOB_DEVICE is not set
-# CONFIG_MTD_RAW_DEVICE is not set
-# CONFIG_MTD_CONCAT is not set
-
-#
-# MTD debug options
-#
-# CONFIG_MTD_PEB_DEBUG is not set
-
-#
-# Self contained MTD devices
-#
-# CONFIG_MTD_DATAFLASH is not set
-CONFIG_MTD_M25P80=y
-# CONFIG_MTD_DOCG3 is not set
-# CONFIG_MTD_MTDRAM is not set
-# end of Self contained MTD devices
-
-# CONFIG_DRIVER_CFI is not set
-
-#
-# NAND
-#
-CONFIG_MTD_NAND_CORE=y
-CONFIG_MTD_RAW_NAND=y
-CONFIG_NAND=y
-# CONFIG_MTD_NAND_ECC_SOFT is not set
-# CONFIG_NAND_ECC_HW_SYNDROME is not set
-
-#
-# Raw/parallel NAND flash controllers
-#
-CONFIG_NAND_OMAP_GPMC=y
-# CONFIG_MTD_NAND_OMAP_ELM is not set
-# CONFIG_MTD_NAND_ECC_SW_HAMMING_SMC is not set
-# CONFIG_MTD_NAND_DENALI is not set
-
-#
-# ECC engine support
-#
-CONFIG_MTD_NAND_ECC=y
-CONFIG_MTD_NAND_ECC_SW_HAMMING=y
-# CONFIG_MTD_NAND_ECC_SW_BCH is not set
-# end of ECC engine support
-# end of NAND
-
-CONFIG_MTD_SPI_NOR=y
-# CONFIG_MTD_SPI_NOR_USE_4K_SECTORS is not set
-# CONFIG_SPI_CADENCE_QUADSPI is not set
-# CONFIG_SPI_SYNOPSYS_OCTALSPI_NOR is not set
-# CONFIG_MTD_UBI is not set
+# CONFIG_MTD is not set
 CONFIG_DISK=y
 # CONFIG_DISK_WRITE is not set
 
@@ -350,7 +296,6 @@ CONFIG_MCI=y
 # CONFIG_MCI_SUNXI_SMHC is not set
 # CONFIG_MCI_ROCKCHIP_DWCMSHC is not set
 CONFIG_MCI_OMAP_HSMMC=y
-# CONFIG_MCI_MMCI is not set
 # CONFIG_MCI_ARASAN is not set
 # CONFIG_MCI_AM654 is not set
 # CONFIG_MCI_SPI is not set
@@ -419,7 +364,6 @@ CONFIG_GPIOLIB=y
 # CONFIG_GPIO_74XX_MMIO is not set
 # CONFIG_GPIO_GENERIC_PLATFORM is not set
 CONFIG_GPIO_OMAP=y
-# CONFIG_GPIO_PL061 is not set
 # CONFIG_GPIO_DESIGNWARE is not set
 # CONFIG_GPIO_SIFIVE is not set
 # CONFIG_GPIO_LATCH is not set
@@ -545,7 +489,6 @@ CONFIG_FS_RAMFS=y
 CONFIG_FS_FAT=y
 # CONFIG_FS_FAT_WRITE is not set
 CONFIG_FS_FAT_LFN=y
-# CONFIG_FS_JFFS2 is not set
 # CONFIG_FS_BPKFS is not set
 # CONFIG_FS_UIMAGEFS is not set
 # CONFIG_FS_PSTORE is not set
@@ -591,7 +534,6 @@ CONFIG_XZ_DEC_ARM64=y
 # CONFIG_BASE64 is not set
 # CONFIG_LZO_DECOMPRESS is not set
 CONFIG_XYMODEM=y
-CONFIG_LIBFDT=y
 # CONFIG_ALLOW_PRNG_FALLBACK is not set
 # CONFIG_CRC_CCITT is not set
 # CONFIG_CRC8 is not set
-- 
2.39.5




^ permalink raw reply	[flat|nested] 4+ messages in thread

* [DistroKit] [PATCH 3/3] v8a: barebox: update to version bump v2024.12.0 → v2025.03.0
  2025-04-01 12:15 [DistroKit] [PATCH 1/3] v7a: barebox: version bump v2024.12.0 → v2025.03.0 Ahmad Fatoum
  2025-04-01 12:15 ` [DistroKit] [PATCH 2/3] v7a: barebox: am335x-mlo: disable MTD Ahmad Fatoum
@ 2025-04-01 12:15 ` Ahmad Fatoum
  2025-04-01 18:47 ` [DistroKit] [PATCH 1/3] v7a: barebox: " Robert Schwebel
  2 siblings, 0 replies; 4+ messages in thread
From: Ahmad Fatoum @ 2025-04-01 12:15 UTC (permalink / raw)
  To: distrokit; +Cc: Ahmad Fatoum

Some highlights from the version bump:

  - Much faster eMMC erases
  - Individual boot artifacts can now be easily overridden by a new -o
    parameter to the boot command (e.g. to inject rsinit as initrd)
  - Fixes and hardening against memory safety bugs
  - Improvement for Rockchip SoC support

Signed-off-by: Ahmad Fatoum <a.fatoum@pengutronix.de>
---
 configs/platform-v8a/barebox.config | 75 ++++++++++++++++++++++++++---
 configs/platform-v8a/platformconfig |  4 +-
 2 files changed, 71 insertions(+), 8 deletions(-)

diff --git a/configs/platform-v8a/barebox.config b/configs/platform-v8a/barebox.config
index 328e365d27b8..7d3794ad5221 100644
--- a/configs/platform-v8a/barebox.config
+++ b/configs/platform-v8a/barebox.config
@@ -1,12 +1,13 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Barebox/arm 2024.12.0 Configuration
+# Barebox/arm 2025.03.0 Configuration
 #
 CONFIG_ARM=y
+CONFIG_ARCH_LINUX_NAME="arm64"
+CONFIG_ARCH_MKIMAGE_NAME="arm64"
 CONFIG_ARM64=y
 CONFIG_ARCH_TEXT_BASE=0x00000000
 CONFIG_ARM_LINUX=y
-CONFIG_ARM_USE_COMPRESSED_DTB=y
 
 #
 # System Type
@@ -16,6 +17,7 @@ CONFIG_ARCH_MULTIARCH=y
 # CONFIG_ARCH_BCM283X is not set
 CONFIG_ARCH_IMX=y
 # CONFIG_ARCH_K3 is not set
+# CONFIG_ARCH_SUNXI is not set
 # CONFIG_ARCH_LAYERSCAPE is not set
 CONFIG_ARCH_ROCKCHIP=y
 # CONFIG_ARCH_ZYNQMP is not set
@@ -93,6 +95,7 @@ CONFIG_ARCH_RK3568=y
 #
 CONFIG_MACH_RK3568_EVB=y
 # CONFIG_MACH_RK3568_BPI_R2PRO is not set
+# CONFIG_MACH_PINE64_PINETAB2 is not set
 # CONFIG_MACH_PINE64_QUARTZ64 is not set
 # CONFIG_MACH_PROTONIC_MECSBC is not set
 CONFIG_MACH_RADXA_ROCK3=y
@@ -105,10 +108,11 @@ CONFIG_MACH_RADXA_ROCK3=y
 # select board features:
 #
 CONFIG_ARCH_ROCKCHIP_ATF=y
-# CONFIG_ARCH_RK3568_OPTEE is not set
+# CONFIG_ARCH_ROCKCHIP_OPTEE is not set
 # end of Rockchip Features
 
-# CONFIG_BOARD_ARM_GENERIC_DT is not set
+CONFIG_BOARD_ARM_GENERIC_DT=y
+CONFIG_BOARD_ARM_GENERIC_DT_AARCH64=y
 # end of System Type
 
 CONFIG_64BIT=y
@@ -125,6 +129,18 @@ CONFIG_ARM_PSCI_CLIENT=y
 CONFIG_ARM_ATF=y
 # end of ARM specific settings
 
+CONFIG_HAVE_ARCH_BOARD_GENERIC_DT=y
+
+#
+# General architecture-dependent options
+#
+CONFIG_BOARD_GENERIC_DT=y
+# CONFIG_BOARD_GENERIC_FIT is not set
+# end of General architecture-dependent options
+
+CONFIG_CC_IS_GCC=y
+CONFIG_GCC_VERSION=140201
+CONFIG_CLANG_VERSION=0
 CONFIG_GREGORIAN_CALENDER=y
 CONFIG_HAS_KALLSYMS=y
 CONFIG_HAS_CACHE=y
@@ -142,7 +158,6 @@ CONFIG_LOGBUF=y
 CONFIG_STDDEV=y
 CONFIG_MENUTREE=y
 CONFIG_ARCH_DMA_ADDR_T_64BIT=y
-CONFIG_USBGADGET_START=y
 CONFIG_BOOT=y
 CONFIG_FASTBOOT_BASE=y
 
@@ -151,6 +166,8 @@ CONFIG_FASTBOOT_BASE=y
 #
 CONFIG_LOCALVERSION=""
 CONFIG_LOCALVERSION_AUTO=y
+CONFIG_HAS_INSECURE_DEFAULTS=y
+CONFIG_INSECURE=y
 CONFIG_BANNER=y
 CONFIG_MEMINFO=y
 CONFIG_MEMTEST=y
@@ -211,6 +228,7 @@ CONFIG_MENU=y
 CONFIG_ERRNO_MESSAGES=y
 CONFIG_TIMESTAMP=y
 CONFIG_BOOTM=y
+CONFIG_BOOT_OVERRIDE=y
 CONFIG_BOOTM_SHOW_TYPE=y
 CONFIG_BOOTM_VERBOSE=y
 CONFIG_BOOTM_INITRD=y
@@ -221,6 +239,7 @@ CONFIG_BOOTM_OFTREE_UIMAGE=y
 # CONFIG_BOOTM_ELF is not set
 CONFIG_BOOTM_FITIMAGE=y
 # CONFIG_BOOTM_FITIMAGE_SIGNATURE is not set
+CONFIG_BOOTM_OPTIONAL_SIGNED_IMAGES=y
 CONFIG_BLSPEC=y
 CONFIG_FLEXIBLE_BOOTARGS=y
 CONFIG_MMCBLKDEV_ROOTARG=y
@@ -304,6 +323,10 @@ CONFIG_CC_HAS_KASAN_GENERIC=y
 # CONFIG_KASAN is not set
 # CONFIG_COMPILE_TEST is not set
 # CONFIG_WERROR is not set
+
+#
+# arm Debugging
+#
 # end of Debugging
 
 #
@@ -414,6 +437,7 @@ CONFIG_CMD_SHA1SUM=y
 # CONFIG_CMD_SHA256SUM is not set
 # CONFIG_CMD_SHA384SUM is not set
 # CONFIG_CMD_SHA512SUM is not set
+# CONFIG_CMD_FIPTOOL is not set
 CONFIG_CMD_UNCOMPRESS=y
 # end of File
 
@@ -557,11 +581,13 @@ CONFIG_AIODEV=y
 # CONFIG_LM75 is not set
 # CONFIG_ST_GYRO is not set
 CONFIG_ROCKCHIP_SARADC=y
+CONFIG_ARM_AMBA=y
 
 #
 # serial drivers
 #
 CONFIG_SERIAL_DEV_BUS=y
+# CONFIG_SERIAL_AMBA_PL011 is not set
 CONFIG_DRIVER_SERIAL_IMX=y
 CONFIG_DRIVER_SERIAL_NS16550=y
 # CONFIG_DRIVER_SERIAL_CADENCE is not set
@@ -639,6 +665,7 @@ CONFIG_DRIVER_SPI_IMX=y
 CONFIG_DRIVER_SPI_IMX_2_3=y
 # CONFIG_DRIVER_SPI_LITEX_SPIFLASH is not set
 # CONFIG_SPI_NXP_FLEXSPI is not set
+CONFIG_SPI_ROCKCHIP=y
 # end of SPI drivers
 
 CONFIG_I2C=y
@@ -673,7 +700,6 @@ CONFIG_MTD_OOB_DEVICE=y
 CONFIG_MTD_DATAFLASH=y
 # CONFIG_MTD_DATAFLASH_WRITE_VERIFY is not set
 CONFIG_MTD_M25P80=y
-# CONFIG_MTD_SST25L is not set
 # CONFIG_MTD_DOCG3 is not set
 # CONFIG_MTD_MTDRAM is not set
 # end of Self contained MTD devices
@@ -733,6 +759,7 @@ CONFIG_USB_STORAGE=y
 #
 # CONFIG_USB_HUB_USB251XB is not set
 # CONFIG_USB_ONBOARD_HUB is not set
+CONFIG_TYPEC=y
 # CONFIG_TYPEC_TUSB320 is not set
 CONFIG_USB_GADGET=y
 CONFIG_USB_GADGET_DUALSPEED=y
@@ -769,9 +796,11 @@ CONFIG_MCI_MMC_BOOT_PARTITIONS=y
 # CONFIG_MCI_DWC_MSHC is not set
 CONFIG_MCI_DW=y
 # CONFIG_MCI_DW_PIO is not set
+# CONFIG_MCI_SUNXI_SMHC is not set
 CONFIG_MCI_ROCKCHIP_DWCMSHC=y
 CONFIG_MCI_IMX_ESDHC=y
 # CONFIG_MCI_IMX_ESDHC_PIO is not set
+# CONFIG_MCI_MMCI is not set
 CONFIG_MCI_ARASAN=y
 # CONFIG_MCI_AM654 is not set
 # CONFIG_MCI_SPI is not set
@@ -802,6 +831,7 @@ CONFIG_CLOCKSOURCE_ARM_ARCHITECTED_TIMER=y
 # CONFIG_MFD_MC9SDZ60 is not set
 # CONFIG_MFD_STMPE is not set
 CONFIG_MFD_SYSCON=y
+# CONFIG_MFD_TPS65219 is not set
 # CONFIG_MFD_TWL4030 is not set
 # CONFIG_MFD_TWL6030 is not set
 # CONFIG_RAVE_SP_CORE is not set
@@ -865,6 +895,7 @@ CONFIG_WATCHDOG_IMX=y
 #
 # DMA support
 #
+# CONFIG_DMADEVICES is not set
 # end of DMA support
 
 CONFIG_GPIOLIB=y
@@ -879,6 +910,7 @@ CONFIG_GPIO_GENERIC=y
 CONFIG_GPIO_IMX=y
 # CONFIG_GPIO_PCA953X is not set
 # CONFIG_GPIO_PCF857X is not set
+# CONFIG_GPIO_PL061 is not set
 CONFIG_GPIO_ROCKCHIP=y
 # CONFIG_GPIO_DESIGNWARE is not set
 # CONFIG_GPIO_SX150X is not set
@@ -975,6 +1007,7 @@ CONFIG_PHY_FSL_IMX8MQ_USB=y
 CONFIG_PHY_ROCKCHIP_INNO_USB2=y
 CONFIG_PHY_ROCKCHIP_NANENG_COMBO_PHY=y
 # CONFIG_PHY_ROCKCHIP_SNPS_PCIE3 is not set
+CONFIG_PHY_ROCKCHIP_USBDP=y
 
 #
 # Hardware crypto devices
@@ -1050,6 +1083,7 @@ CONFIG_SYSCON_REBOOT_MODE=y
 #
 CONFIG_FS=y
 CONFIG_FS_LEGACY=y
+CONFIG_FS_WRITABLE=y
 
 #
 # Some selected filesystems still use the legacy FS API.
@@ -1120,6 +1154,7 @@ CONFIG_LZO_DECOMPRESS=y
 CONFIG_FNMATCH=y
 CONFIG_QSORT=y
 CONFIG_IMAGE_SPARSE=y
+CONFIG_LIBFDT=y
 # CONFIG_RATP is not set
 # CONFIG_ALLOW_PRNG_FALLBACK is not set
 CONFIG_CRC_CCITT=y
@@ -1141,7 +1176,35 @@ CONFIG_ARCH_HAS_ZERO_PAGE=y
 #
 # Hardening options
 #
+
+#
+# This barebox configuration has CONFIG_HAS_INSECURE_DEFAULTS=y indicating
+#
+
+#
+# that some of the configured options have potentially insecure defaults.
+#
+
+#
+# Extra care needs to be in secure booted systems.
+#
 # CONFIG_BUG_ON_DATA_CORRUPTION is not set
+
+#
+# Memory initialization
+#
+CONFIG_CC_HAS_AUTO_VAR_INIT_PATTERN=y
+CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO_BARE=y
+CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO=y
+# CONFIG_INIT_STACK_NONE is not set
+# CONFIG_INIT_STACK_ALL_PATTERN is not set
+CONFIG_INIT_STACK_ALL_ZERO=y
+# CONFIG_INIT_ON_ALLOC_DEFAULT_ON is not set
+# CONFIG_INIT_ON_FREE_DEFAULT_ON is not set
+CONFIG_CC_HAS_ZERO_CALL_USED_REGS=y
+# CONFIG_ZERO_CALL_USED_REGS is not set
+# end of Memory initialization
+
 # CONFIG_STACK_GUARD_PAGE is not set
 CONFIG_STACKPROTECTOR_NONE=y
 # CONFIG_STACKPROTECTOR_STRONG is not set
diff --git a/configs/platform-v8a/platformconfig b/configs/platform-v8a/platformconfig
index 5a4fa0c58bd2..fb1019cfab42 100644
--- a/configs/platform-v8a/platformconfig
+++ b/configs/platform-v8a/platformconfig
@@ -179,10 +179,10 @@ PTXCONF_CONSOLE_SPEED="115200"
 PTXCONF_BAREBOX_ARCH_STRING="arm"
 PTXCONF_BAREBOX_DEPENDENCIES=y
 PTXCONF_BAREBOX=y
-PTXCONF_BAREBOX_VERSION="2024.12.0"
+PTXCONF_BAREBOX_VERSION="2025.03.0"
 PTXCONF_BAREBOX_CONFIG_BUILDSYSTEM_VERSION=y
 PTXCONF_BAREBOX_BUILDSYSTEM_VERSION="${PTXDIST_VCS_VERSION}"
-PTXCONF_BAREBOX_MD5="b9277ee0dc251b2a49de97d37ee5d365"
+PTXCONF_BAREBOX_MD5="2b84bcf8644373db021c86864f2e5761"
 PTXCONF_BAREBOX_CONFIG="barebox.config"
 PTXCONF_BAREBOX_FIRMWARE=y
 PTXCONF_BAREBOX_EXTRA_ENV=y
-- 
2.39.5




^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: [DistroKit]  [PATCH 1/3] v7a: barebox: version bump v2024.12.0 → v2025.03.0
  2025-04-01 12:15 [DistroKit] [PATCH 1/3] v7a: barebox: version bump v2024.12.0 → v2025.03.0 Ahmad Fatoum
  2025-04-01 12:15 ` [DistroKit] [PATCH 2/3] v7a: barebox: am335x-mlo: disable MTD Ahmad Fatoum
  2025-04-01 12:15 ` [DistroKit] [PATCH 3/3] v8a: barebox: update to version bump v2024.12.0 → v2025.03.0 Ahmad Fatoum
@ 2025-04-01 18:47 ` Robert Schwebel
  2 siblings, 0 replies; 4+ messages in thread
From: Robert Schwebel @ 2025-04-01 18:47 UTC (permalink / raw)
  To: Ahmad Fatoum; +Cc: distrokit

Applied to next. Care to update v7a_noneon as well?

On Tue, Apr 01, 2025 at 02:15:54PM +0200, Ahmad Fatoum wrote:
> Some highlights from the version bump:
> 
>   - Much faster eMMC erases
>   - Individual boot artifacts can now be easily overridden by a new -o
>     parameter to the boot command (e.g. to inject rsinit as initrd)
>   - Fixes and hardening against memory safety bugs
> 
> Signed-off-by: Ahmad Fatoum <a.fatoum@pengutronix.de>
> ---
>  .../platform-v7a/barebox-am335x-mlo.config    | 64 +++++++++++++++--
>  configs/platform-v7a/barebox-am335x.config    | 65 +++++++++++++++--
>  .../platform-v7a/barebox-am335x.config.diff   |  6 +-
>  configs/platform-v7a/barebox-at91.config      | 69 +++++++++++++++++--
>  configs/platform-v7a/barebox-at91.config.diff | 14 ++--
>  configs/platform-v7a/barebox-mx6.config       | 66 ++++++++++++++++--
>  configs/platform-v7a/barebox-mx6.config.diff  |  9 +--
>  configs/platform-v7a/barebox-rpi2.config      | 63 +++++++++++++++--
>  configs/platform-v7a/barebox-rpi2.config.diff |  2 +-
>  configs/platform-v7a/barebox-stm32mp.config   | 65 +++++++++++++++--
>  .../platform-v7a/barebox-stm32mp.config.diff  |  7 +-
>  configs/platform-v7a/barebox-vexpress.config  | 62 ++++++++++++++++-
>  .../platform-v7a/barebox-vexpress.config.diff |  5 +-
>  configs/platform-v7a/barebox.config           | 63 +++++++++++++++--
>  configs/platform-v7a/platformconfig           |  4 +-
>  15 files changed, 506 insertions(+), 58 deletions(-)
> 
> diff --git a/configs/platform-v7a/barebox-am335x-mlo.config b/configs/platform-v7a/barebox-am335x-mlo.config
> index 1fa7cdeb19f8..c9cb8a914155 100644
> --- a/configs/platform-v7a/barebox-am335x-mlo.config
> +++ b/configs/platform-v7a/barebox-am335x-mlo.config
> @@ -1,11 +1,12 @@
>  #
>  # Automatically generated file; DO NOT EDIT.
> -# Barebox/arm 2024.12.0 Configuration
> +# Barebox/arm 2025.03.0 Configuration
>  #
>  CONFIG_ARM=y
> +CONFIG_ARCH_LINUX_NAME="arm"
> +CONFIG_ARCH_MKIMAGE_NAME="arm"
>  CONFIG_ARM32=y
>  CONFIG_ARCH_TEXT_BASE=0x00000000
> -CONFIG_ARM_USE_COMPRESSED_DTB=y
>  
>  #
>  # System Type
> @@ -22,6 +23,8 @@ CONFIG_ARCH_MULTIARCH=y
>  # CONFIG_ARCH_ZYNQ is not set
>  # CONFIG_ARCH_BCM283X is not set
>  # CONFIG_ARCH_IMX is not set
> +# CONFIG_ARCH_K3 is not set
> +# CONFIG_ARCH_SUNXI is not set
>  # CONFIG_ARCH_LAYERSCAPE is not set
>  CONFIG_ARCH_OMAP_MULTI=y
>  # CONFIG_ARCH_ROCKCHIP is not set
> @@ -59,7 +62,6 @@ CONFIG_MACH_PHYTEC_SOM_AM335X=y
>  # CONFIG_PHYTEC_SOM_AM335X_OF_AUTOENABLE is not set
>  # end of OMAP Features
>  
> -# CONFIG_BOARD_ARM_GENERIC_DT is not set
>  CONFIG_AEABI=y
>  CONFIG_THUMB2_BAREBOX=y
>  # end of System Type
> @@ -77,6 +79,17 @@ CONFIG_ARM_EXCEPTIONS=y
>  # CONFIG_ARM_PSCI_CLIENT is not set
>  # end of ARM specific settings
>  
> +CONFIG_HAVE_ARCH_BOARD_GENERIC_DT=y
> +
> +#
> +# General architecture-dependent options
> +#
> +# CONFIG_BOARD_GENERIC_DT is not set
> +# end of General architecture-dependent options
> +
> +CONFIG_CC_IS_GCC=y
> +CONFIG_GCC_VERSION=140201
> +CONFIG_CLANG_VERSION=0
>  CONFIG_HAS_KALLSYMS=y
>  CONFIG_HAS_MODULES=y
>  CONFIG_HAS_CACHE=y
> @@ -91,6 +104,8 @@ CONFIG_FILETYPE=y
>  #
>  CONFIG_LOCALVERSION=""
>  CONFIG_LOCALVERSION_AUTO=y
> +CONFIG_HAS_INSECURE_DEFAULTS=y
> +CONFIG_INSECURE=y
>  CONFIG_BANNER=y
>  # CONFIG_MEMINFO is not set
>  # CONFIG_ENVIRONMENT_VARIABLES is not set
> @@ -194,6 +209,10 @@ CONFIG_CC_HAS_KASAN_GENERIC=y
>  # CONFIG_KASAN is not set
>  # CONFIG_COMPILE_TEST is not set
>  # CONFIG_WERROR is not set
> +
> +#
> +# arm Debugging
> +#
>  # end of Debugging
>  
>  #
> @@ -215,13 +234,16 @@ CONFIG_OFDEVICE=y
>  CONFIG_OF_GPIO=y
>  # CONFIG_OF_OVERLAY is not set
>  # CONFIG_AIODEV is not set
> +CONFIG_ARM_AMBA=y
>  
>  #
>  # serial drivers
>  #
>  # CONFIG_SERIAL_DEV_BUS is not set
>  # CONFIG_DRIVER_SERIAL_ARM_DCC is not set
> +# CONFIG_SERIAL_AMBA_PL011 is not set
>  CONFIG_DRIVER_SERIAL_NS16550=y
> +# CONFIG_DRIVER_SERIAL_NS16550_OMAP_TTYS is not set
>  # CONFIG_DRIVER_SERIAL_CADENCE is not set
>  # CONFIG_SERIAL_SIFIVE is not set
>  # end of serial drivers
> @@ -254,7 +276,6 @@ CONFIG_MTD=y
>  #
>  # CONFIG_MTD_DATAFLASH is not set
>  CONFIG_MTD_M25P80=y
> -# CONFIG_MTD_SST25L is not set
>  # CONFIG_MTD_DOCG3 is not set
>  # CONFIG_MTD_MTDRAM is not set
>  # end of Self contained MTD devices
> @@ -326,8 +347,10 @@ CONFIG_MCI=y
>  #
>  # CONFIG_MCI_DWC_MSHC is not set
>  # CONFIG_MCI_DW is not set
> +# CONFIG_MCI_SUNXI_SMHC is not set
>  # CONFIG_MCI_ROCKCHIP_DWCMSHC is not set
>  CONFIG_MCI_OMAP_HSMMC=y
> +# CONFIG_MCI_MMCI is not set
>  # CONFIG_MCI_ARASAN is not set
>  # CONFIG_MCI_AM654 is not set
>  # CONFIG_MCI_SPI is not set
> @@ -348,6 +371,7 @@ CONFIG_CLOCKSOURCE_TI_DM=y
>  # CONFIG_MFD_MC13XXX is not set
>  # CONFIG_MFD_SYSCON is not set
>  # CONFIG_MFD_ATMEL_FLEXCOM is not set
> +# CONFIG_MFD_RK808 is not set
>  # end of Multifunction device drivers
>  
>  #
> @@ -383,6 +407,7 @@ CONFIG_CLOCKSOURCE_TI_DM=y
>  #
>  # DMA support
>  #
> +# CONFIG_DMADEVICES is not set
>  # end of DMA support
>  
>  CONFIG_GPIOLIB=y
> @@ -394,6 +419,7 @@ CONFIG_GPIOLIB=y
>  # CONFIG_GPIO_74XX_MMIO is not set
>  # CONFIG_GPIO_GENERIC_PLATFORM is not set
>  CONFIG_GPIO_OMAP=y
> +# CONFIG_GPIO_PL061 is not set
>  # CONFIG_GPIO_DESIGNWARE is not set
>  # CONFIG_GPIO_SIFIVE is not set
>  # CONFIG_GPIO_LATCH is not set
> @@ -503,6 +529,7 @@ CONFIG_TI_SYSC=y
>  #
>  CONFIG_FS=y
>  CONFIG_FS_LEGACY=y
> +CONFIG_FS_WRITABLE=y
>  
>  #
>  # Some selected filesystems still use the legacy FS API.
> @@ -564,6 +591,7 @@ CONFIG_XZ_DEC_ARM64=y
>  # CONFIG_BASE64 is not set
>  # CONFIG_LZO_DECOMPRESS is not set
>  CONFIG_XYMODEM=y
> +CONFIG_LIBFDT=y
>  # CONFIG_ALLOW_PRNG_FALLBACK is not set
>  # CONFIG_CRC_CCITT is not set
>  # CONFIG_CRC8 is not set
> @@ -583,7 +611,35 @@ CONFIG_ARCH_HAS_ZERO_PAGE=y
>  #
>  # Hardening options
>  #
> +
> +#
> +# This barebox configuration has CONFIG_HAS_INSECURE_DEFAULTS=y indicating
> +#
> +
> +#
> +# that some of the configured options have potentially insecure defaults.
> +#
> +
> +#
> +# Extra care needs to be in secure booted systems.
> +#
>  # CONFIG_BUG_ON_DATA_CORRUPTION is not set
> +
> +#
> +# Memory initialization
> +#
> +CONFIG_CC_HAS_AUTO_VAR_INIT_PATTERN=y
> +CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO_BARE=y
> +CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO=y
> +# CONFIG_INIT_STACK_NONE is not set
> +# CONFIG_INIT_STACK_ALL_PATTERN is not set
> +CONFIG_INIT_STACK_ALL_ZERO=y
> +# CONFIG_INIT_ON_ALLOC_DEFAULT_ON is not set
> +# CONFIG_INIT_ON_FREE_DEFAULT_ON is not set
> +CONFIG_CC_HAS_ZERO_CALL_USED_REGS=y
> +# CONFIG_ZERO_CALL_USED_REGS is not set
> +# end of Memory initialization
> +
>  # CONFIG_STACK_GUARD_PAGE is not set
>  CONFIG_STACKPROTECTOR_NONE=y
>  # CONFIG_STACKPROTECTOR_STRONG is not set
> diff --git a/configs/platform-v7a/barebox-am335x.config b/configs/platform-v7a/barebox-am335x.config
> index 169553af4438..937ec40a047d 100644
> --- a/configs/platform-v7a/barebox-am335x.config
> +++ b/configs/platform-v7a/barebox-am335x.config
> @@ -1,12 +1,13 @@
>  #
>  # Automatically generated file; DO NOT EDIT.
> -# Barebox/arm 2024.12.0 Configuration
> +# Barebox/arm 2025.03.0 Configuration
>  #
>  CONFIG_ARM=y
> +CONFIG_ARCH_LINUX_NAME="arm"
> +CONFIG_ARCH_MKIMAGE_NAME="arm"
>  CONFIG_ARM32=y
>  CONFIG_ARCH_TEXT_BASE=0x00000000
>  CONFIG_ARM_LINUX=y
> -CONFIG_ARM_USE_COMPRESSED_DTB=y
>  
>  #
>  # System Type
> @@ -23,6 +24,8 @@ CONFIG_ARCH_MULTIARCH=y
>  # CONFIG_ARCH_ZYNQ is not set
>  # CONFIG_ARCH_BCM283X is not set
>  # CONFIG_ARCH_IMX is not set
> +# CONFIG_ARCH_K3 is not set
> +# CONFIG_ARCH_SUNXI is not set
>  # CONFIG_ARCH_LAYERSCAPE is not set
>  CONFIG_ARCH_OMAP_MULTI=y
>  # CONFIG_ARCH_ROCKCHIP is not set
> @@ -82,6 +85,18 @@ CONFIG_ARM_UNWIND=y
>  # CONFIG_ARM_PSCI_CLIENT is not set
>  # end of ARM specific settings
>  
> +CONFIG_HAVE_ARCH_BOARD_GENERIC_DT=y
> +
> +#
> +# General architecture-dependent options
> +#
> +CONFIG_BOARD_GENERIC_DT=y
> +# CONFIG_BOARD_GENERIC_FIT is not set
> +# end of General architecture-dependent options
> +
> +CONFIG_CC_IS_GCC=y
> +CONFIG_GCC_VERSION=140201
> +CONFIG_CLANG_VERSION=0
>  CONFIG_HAS_KALLSYMS=y
>  CONFIG_HAS_MODULES=y
>  CONFIG_HAS_CACHE=y
> @@ -98,7 +113,6 @@ CONFIG_FITIMAGE=y
>  CONFIG_LOGBUF=y
>  CONFIG_STDDEV=y
>  CONFIG_MENUTREE=y
> -CONFIG_USBGADGET_START=y
>  CONFIG_BOOT=y
>  CONFIG_FASTBOOT_BASE=y
>  
> @@ -107,6 +121,8 @@ CONFIG_FASTBOOT_BASE=y
>  #
>  CONFIG_LOCALVERSION=""
>  CONFIG_LOCALVERSION_AUTO=y
> +CONFIG_HAS_INSECURE_DEFAULTS=y
> +CONFIG_INSECURE=y
>  CONFIG_BANNER=y
>  CONFIG_MEMINFO=y
>  CONFIG_MEMTEST=y
> @@ -124,7 +140,6 @@ CONFIG_PBL_IMAGE=y
>  CONFIG_PBL_MULTI_IMAGES=y
>  CONFIG_USE_COMPRESSED_DTB=y
>  CONFIG_PBL_RELOCATABLE=y
> -CONFIG_BOARD_GENERIC_DT=y
>  CONFIG_IMAGE_COMPRESSION=y
>  # CONFIG_IMAGE_COMPRESSION_LZ4 is not set
>  CONFIG_IMAGE_COMPRESSION_LZO=y
> @@ -168,6 +183,7 @@ CONFIG_MENU=y
>  CONFIG_ERRNO_MESSAGES=y
>  # CONFIG_TIMESTAMP is not set
>  CONFIG_BOOTM=y
> +CONFIG_BOOT_OVERRIDE=y
>  CONFIG_BOOTM_SHOW_TYPE=y
>  CONFIG_BOOTM_VERBOSE=y
>  CONFIG_BOOTM_INITRD=y
> @@ -178,6 +194,7 @@ CONFIG_BOOTM_OFTREE_UIMAGE=y
>  # CONFIG_BOOTM_ELF is not set
>  CONFIG_BOOTM_FITIMAGE=y
>  # CONFIG_BOOTM_FITIMAGE_SIGNATURE is not set
> +CONFIG_BOOTM_OPTIONAL_SIGNED_IMAGES=y
>  CONFIG_BLSPEC=y
>  CONFIG_FLEXIBLE_BOOTARGS=y
>  CONFIG_MMCBLKDEV_ROOTARG=y
> @@ -256,6 +273,10 @@ CONFIG_CC_HAS_KASAN_GENERIC=y
>  # CONFIG_KASAN is not set
>  # CONFIG_COMPILE_TEST is not set
>  # CONFIG_WERROR is not set
> +
> +#
> +# arm Debugging
> +#
>  # end of Debugging
>  
>  #
> @@ -366,6 +387,7 @@ CONFIG_CMD_SHA1SUM=y
>  # CONFIG_CMD_SHA256SUM is not set
>  # CONFIG_CMD_SHA384SUM is not set
>  # CONFIG_CMD_SHA512SUM is not set
> +# CONFIG_CMD_FIPTOOL is not set
>  CONFIG_CMD_UNCOMPRESS=y
>  # end of File
>  
> @@ -507,6 +529,7 @@ CONFIG_ARM_AMBA=y
>  # CONFIG_DRIVER_SERIAL_ARM_DCC is not set
>  # CONFIG_SERIAL_AMBA_PL011 is not set
>  CONFIG_DRIVER_SERIAL_NS16550=y
> +# CONFIG_DRIVER_SERIAL_NS16550_OMAP_TTYS is not set
>  # CONFIG_DRIVER_SERIAL_CADENCE is not set
>  # CONFIG_SERIAL_SIFIVE is not set
>  # end of serial drivers
> @@ -519,6 +542,7 @@ CONFIG_PHYLIB=y
>  # CONFIG_DRIVER_NET_ARC_EMAC is not set
>  # CONFIG_DRIVER_NET_BCMGENET is not set
>  CONFIG_DRIVER_NET_CPSW=y
> +CONFIG_DRIVER_NET_TI_DAVINCI_MDIO=y
>  # CONFIG_DRIVER_NET_DESIGNWARE_GENERIC is not set
>  # CONFIG_DRIVER_NET_ENC28J60 is not set
>  # CONFIG_DRIVER_NET_FSL_FMAN is not set
> @@ -604,7 +628,6 @@ CONFIG_MTD_OOB_DEVICE=y
>  #
>  # CONFIG_MTD_DATAFLASH is not set
>  CONFIG_MTD_M25P80=y
> -# CONFIG_MTD_SST25L is not set
>  # CONFIG_MTD_DOCG3 is not set
>  # CONFIG_MTD_MTDRAM is not set
>  # end of Self contained MTD devices
> @@ -708,6 +731,7 @@ CONFIG_MCI_ERASE=y
>  #
>  # CONFIG_MCI_DWC_MSHC is not set
>  # CONFIG_MCI_DW is not set
> +# CONFIG_MCI_SUNXI_SMHC is not set
>  # CONFIG_MCI_ROCKCHIP_DWCMSHC is not set
>  CONFIG_MCI_OMAP_HSMMC=y
>  # CONFIG_MCI_MMCI is not set
> @@ -737,6 +761,7 @@ CONFIG_CLOCKSOURCE_TI_DM=y
>  # CONFIG_MFD_MC9SDZ60 is not set
>  # CONFIG_MFD_STMPE is not set
>  # CONFIG_MFD_SYSCON is not set
> +# CONFIG_MFD_TPS65219 is not set
>  # CONFIG_MFD_TWL4030 is not set
>  # CONFIG_MFD_TWL6030 is not set
>  # CONFIG_MFD_STPMIC1 is not set
> @@ -798,6 +823,7 @@ CONFIG_HWRNG=y
>  #
>  # DMA support
>  #
> +# CONFIG_DMADEVICES is not set
>  # end of DMA support
>  
>  CONFIG_GPIOLIB=y
> @@ -929,6 +955,7 @@ CONFIG_REGULATOR_FIXED=y
>  #
>  CONFIG_FS=y
>  CONFIG_FS_LEGACY=y
> +CONFIG_FS_WRITABLE=y
>  
>  #
>  # Some selected filesystems still use the legacy FS API.
> @@ -1020,7 +1047,35 @@ CONFIG_ARCH_HAS_ZERO_PAGE=y
>  #
>  # Hardening options
>  #
> +
> +#
> +# This barebox configuration has CONFIG_HAS_INSECURE_DEFAULTS=y indicating
> +#
> +
> +#
> +# that some of the configured options have potentially insecure defaults.
> +#
> +
> +#
> +# Extra care needs to be in secure booted systems.
> +#
>  # CONFIG_BUG_ON_DATA_CORRUPTION is not set
> +
> +#
> +# Memory initialization
> +#
> +CONFIG_CC_HAS_AUTO_VAR_INIT_PATTERN=y
> +CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO_BARE=y
> +CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO=y
> +# CONFIG_INIT_STACK_NONE is not set
> +# CONFIG_INIT_STACK_ALL_PATTERN is not set
> +CONFIG_INIT_STACK_ALL_ZERO=y
> +# CONFIG_INIT_ON_ALLOC_DEFAULT_ON is not set
> +# CONFIG_INIT_ON_FREE_DEFAULT_ON is not set
> +CONFIG_CC_HAS_ZERO_CALL_USED_REGS=y
> +# CONFIG_ZERO_CALL_USED_REGS is not set
> +# end of Memory initialization
> +
>  # CONFIG_STACK_GUARD_PAGE is not set
>  CONFIG_STACKPROTECTOR_NONE=y
>  # CONFIG_STACKPROTECTOR_STRONG is not set
> diff --git a/configs/platform-v7a/barebox-am335x.config.diff b/configs/platform-v7a/barebox-am335x.config.diff
> index f0a73b9c8adb..030c822a5058 100644
> --- a/configs/platform-v7a/barebox-am335x.config.diff
> +++ b/configs/platform-v7a/barebox-am335x.config.diff
> @@ -1,4 +1,4 @@
> -7107a8d8bbd7061c017ec7d039b9a2b3
> +b84e018f387ca177ad90f1972d178d88
>  # CONFIG_AM33XX_NET_BOOT is not set
>  CONFIG_ARCH_AM33XX=y
>  # CONFIG_ARCH_BCM283X is not set
> @@ -30,7 +30,9 @@ CONFIG_CRYPTO_KEYSTORE=y
>  CONFIG_DEBUG_OMAP_UART_PORT=1
>  CONFIG_DIGEST_HMAC_GENERIC=y
>  CONFIG_DRIVER_NET_CPSW=y
> +CONFIG_DRIVER_NET_TI_DAVINCI_MDIO=y
>  CONFIG_DRIVER_SERIAL_NS16550=y
> +# CONFIG_DRIVER_SERIAL_NS16550_OMAP_TTYS is not set
>  # CONFIG_DRIVER_SPI_FSL_QUADSPI is not set
>  CONFIG_DRIVER_SPI_OMAP3=y
>  # CONFIG_EEPROM_93XX46 is not set
> @@ -76,7 +78,6 @@ CONFIG_MTD_NAND_ECC=y
>  CONFIG_MTD_RAW_NAND=y
>  CONFIG_MTD_SPI_NOR=y
>  # CONFIG_MTD_SPI_NOR_USE_4K_SECTORS is not set
> -# CONFIG_MTD_SST25L is not set
>  CONFIG_NAND=y
>  # CONFIG_NAND_ALLOW_ERASE_BAD is not set
>  CONFIG_NAND_ECC_HW_SYNDROME=y
> @@ -95,6 +96,7 @@ CONFIG_PINCTRL_SINGLE=y
>  CONFIG_PROMPT="barebox> "
>  # CONFIG_REGULATOR_BCM283X is undefined
>  CONFIG_REGULATOR_FIXED=y
> +# CONFIG_SPI_BCM2835 is undefined
>  # CONFIG_SPI_CADENCE_QUADSPI is not set
>  CONFIG_SPI_MEM=y
>  # CONFIG_SPI_SYNOPSYS_OCTALSPI_NOR is not set
> diff --git a/configs/platform-v7a/barebox-at91.config b/configs/platform-v7a/barebox-at91.config
> index d085dfc9c84b..9d1c6f9c9334 100644
> --- a/configs/platform-v7a/barebox-at91.config
> +++ b/configs/platform-v7a/barebox-at91.config
> @@ -1,12 +1,13 @@
>  #
>  # Automatically generated file; DO NOT EDIT.
> -# Barebox/arm 2024.12.0 Configuration
> +# Barebox/arm 2025.03.0 Configuration
>  #
>  CONFIG_ARM=y
> +CONFIG_ARCH_LINUX_NAME="arm"
> +CONFIG_ARCH_MKIMAGE_NAME="arm"
>  CONFIG_ARM32=y
>  CONFIG_ARCH_TEXT_BASE=0x00000000
>  CONFIG_ARM_LINUX=y
> -CONFIG_ARM_USE_COMPRESSED_DTB=y
>  
>  #
>  # System Type
> @@ -21,6 +22,7 @@ CONFIG_ARCH_AT91=y
>  # CONFIG_ARCH_TEGRA is not set
>  # CONFIG_ARCH_ZYNQ is not set
>  # CONFIG_ARCH_BCM283X is not set
> +# CONFIG_ARCH_K3 is not set
>  # CONFIG_ARCH_STM32MP is not set
>  # CONFIG_ARCH_VERSATILE is not set
>  # CONFIG_ARCH_VEXPRESS is not set
> @@ -72,7 +74,7 @@ CONFIG_MACH_SAMA5D4_WIFX=y
>  #
>  # AT91 Board Options
>  #
> -# CONFIG_BOARD_ARM_GENERIC_DT is not set
> +CONFIG_BOARD_ARM_GENERIC_DT=y
>  CONFIG_AEABI=y
>  # CONFIG_ARM_BOARD_APPEND_ATAG is not set
>  # end of System Type
> @@ -90,6 +92,18 @@ CONFIG_ARM_UNWIND=y
>  # CONFIG_ARM_PSCI_CLIENT is not set
>  # end of ARM specific settings
>  
> +CONFIG_HAVE_ARCH_BOARD_GENERIC_DT=y
> +
> +#
> +# General architecture-dependent options
> +#
> +CONFIG_BOARD_GENERIC_DT=y
> +# CONFIG_BOARD_GENERIC_FIT is not set
> +# end of General architecture-dependent options
> +
> +CONFIG_CC_IS_GCC=y
> +CONFIG_GCC_VERSION=140201
> +CONFIG_CLANG_VERSION=0
>  CONFIG_GREGORIAN_CALENDER=y
>  CONFIG_HAS_KALLSYMS=y
>  CONFIG_HAS_MODULES=y
> @@ -108,7 +122,6 @@ CONFIG_LOGBUF=y
>  CONFIG_STDDEV=y
>  CONFIG_MENUTREE=y
>  CONFIG_UBIFORMAT=y
> -CONFIG_USBGADGET_START=y
>  CONFIG_BOOT=y
>  CONFIG_FASTBOOT_BASE=y
>  
> @@ -117,6 +130,8 @@ CONFIG_FASTBOOT_BASE=y
>  #
>  CONFIG_LOCALVERSION=""
>  CONFIG_LOCALVERSION_AUTO=y
> +CONFIG_HAS_INSECURE_DEFAULTS=y
> +CONFIG_INSECURE=y
>  CONFIG_BANNER=y
>  CONFIG_MEMINFO=y
>  CONFIG_MEMTEST=y
> @@ -177,6 +192,7 @@ CONFIG_MENU=y
>  CONFIG_ERRNO_MESSAGES=y
>  CONFIG_TIMESTAMP=y
>  CONFIG_BOOTM=y
> +CONFIG_BOOT_OVERRIDE=y
>  CONFIG_BOOTM_SHOW_TYPE=y
>  CONFIG_BOOTM_VERBOSE=y
>  CONFIG_BOOTM_INITRD=y
> @@ -187,6 +203,7 @@ CONFIG_BOOTM_OFTREE_UIMAGE=y
>  # CONFIG_BOOTM_ELF is not set
>  CONFIG_BOOTM_FITIMAGE=y
>  # CONFIG_BOOTM_FITIMAGE_SIGNATURE is not set
> +CONFIG_BOOTM_OPTIONAL_SIGNED_IMAGES=y
>  CONFIG_BLSPEC=y
>  CONFIG_FLEXIBLE_BOOTARGS=y
>  CONFIG_MMCBLKDEV_ROOTARG=y
> @@ -267,6 +284,10 @@ CONFIG_CC_HAS_KASAN_GENERIC=y
>  # CONFIG_KASAN is not set
>  # CONFIG_COMPILE_TEST is not set
>  # CONFIG_WERROR is not set
> +
> +#
> +# arm Debugging
> +#
>  # end of Debugging
>  
>  #
> @@ -381,6 +402,7 @@ CONFIG_CMD_SHA1SUM=y
>  # CONFIG_CMD_SHA256SUM is not set
>  # CONFIG_CMD_SHA384SUM is not set
>  # CONFIG_CMD_SHA512SUM is not set
> +# CONFIG_CMD_FIPTOOL is not set
>  CONFIG_CMD_UNCOMPRESS=y
>  # end of File
>  
> @@ -512,12 +534,14 @@ CONFIG_OF_BAREBOX_ENV_IN_FS=y
>  CONFIG_OF_OVERLAY=y
>  # CONFIG_OF_OVERLAY_LIVE is not set
>  # CONFIG_AIODEV is not set
> +CONFIG_ARM_AMBA=y
>  
>  #
>  # serial drivers
>  #
>  # CONFIG_SERIAL_DEV_BUS is not set
>  # CONFIG_DRIVER_SERIAL_ARM_DCC is not set
> +# CONFIG_SERIAL_AMBA_PL011 is not set
>  # CONFIG_DRIVER_SERIAL_NS16550 is not set
>  CONFIG_DRIVER_SERIAL_ATMEL=y
>  # CONFIG_DRIVER_SERIAL_CADENCE is not set
> @@ -614,7 +638,6 @@ CONFIG_MTD_OOB_DEVICE=y
>  #
>  # CONFIG_MTD_DATAFLASH is not set
>  CONFIG_MTD_M25P80=y
> -# CONFIG_MTD_SST25L is not set
>  # CONFIG_MTD_DOCG3 is not set
>  # CONFIG_MTD_MTDRAM is not set
>  # end of Self contained MTD devices
> @@ -711,9 +734,11 @@ CONFIG_MCI_MMC_BOOT_PARTITIONS=y
>  #
>  # CONFIG_MCI_DWC_MSHC is not set
>  # CONFIG_MCI_DW is not set
> +# CONFIG_MCI_SUNXI_SMHC is not set
>  # CONFIG_MCI_ROCKCHIP_DWCMSHC is not set
>  CONFIG_MCI_ATMEL=y
>  CONFIG_MCI_ATMEL_SDHCI=y
> +# CONFIG_MCI_MMCI is not set
>  # CONFIG_MCI_ARASAN is not set
>  # CONFIG_MCI_AM654 is not set
>  # CONFIG_MCI_SPI is not set
> @@ -745,6 +770,7 @@ CONFIG_CLOCKSOURCE_ARM_ARCHITECTED_TIMER=y
>  # CONFIG_MFD_MC9SDZ60 is not set
>  # CONFIG_MFD_STMPE is not set
>  CONFIG_MFD_SYSCON=y
> +# CONFIG_MFD_TPS65219 is not set
>  # CONFIG_MFD_TWL4030 is not set
>  # CONFIG_MFD_TWL6030 is not set
>  # CONFIG_MFD_STPMIC1 is not set
> @@ -804,6 +830,7 @@ CONFIG_WATCHDOG_AT91SAM9=y
>  #
>  # DMA support
>  #
> +# CONFIG_DMADEVICES is not set
>  # end of DMA support
>  
>  CONFIG_GPIOLIB=y
> @@ -816,6 +843,8 @@ CONFIG_GPIOLIB=y
>  # CONFIG_GPIO_GENERIC_PLATFORM is not set
>  # CONFIG_GPIO_PCA953X is not set
>  # CONFIG_GPIO_PCF857X is not set
> +# CONFIG_GPIO_PL061 is not set
> +# CONFIG_GPIO_SAMA5D2_PIOBU is not set
>  # CONFIG_GPIO_DESIGNWARE is not set
>  # CONFIG_GPIO_SX150X is not set
>  # CONFIG_GPIO_SIFIVE is not set
> @@ -935,6 +964,7 @@ CONFIG_ATMEL_EBI=y
>  #
>  CONFIG_FS=y
>  CONFIG_FS_LEGACY=y
> +CONFIG_FS_WRITABLE=y
>  
>  #
>  # Some selected filesystems still use the legacy FS API.
> @@ -1004,6 +1034,7 @@ CONFIG_QSORT=y
>  CONFIG_LIBSCAN=y
>  CONFIG_LIBUBIGEN=y
>  CONFIG_IMAGE_SPARSE=y
> +CONFIG_LIBFDT=y
>  # CONFIG_RATP is not set
>  # CONFIG_ALLOW_PRNG_FALLBACK is not set
>  # CONFIG_CRC_CCITT is not set
> @@ -1026,7 +1057,35 @@ CONFIG_GENERIC_ALLOCATOR=y
>  #
>  # Hardening options
>  #
> +
> +#
> +# This barebox configuration has CONFIG_HAS_INSECURE_DEFAULTS=y indicating
> +#
> +
> +#
> +# that some of the configured options have potentially insecure defaults.
> +#
> +
> +#
> +# Extra care needs to be in secure booted systems.
> +#
>  # CONFIG_BUG_ON_DATA_CORRUPTION is not set
> +
> +#
> +# Memory initialization
> +#
> +CONFIG_CC_HAS_AUTO_VAR_INIT_PATTERN=y
> +CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO_BARE=y
> +CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO=y
> +# CONFIG_INIT_STACK_NONE is not set
> +# CONFIG_INIT_STACK_ALL_PATTERN is not set
> +CONFIG_INIT_STACK_ALL_ZERO=y
> +# CONFIG_INIT_ON_ALLOC_DEFAULT_ON is not set
> +# CONFIG_INIT_ON_FREE_DEFAULT_ON is not set
> +CONFIG_CC_HAS_ZERO_CALL_USED_REGS=y
> +# CONFIG_ZERO_CALL_USED_REGS is not set
> +# end of Memory initialization
> +
>  # CONFIG_STACK_GUARD_PAGE is not set
>  CONFIG_STACKPROTECTOR_NONE=y
>  # CONFIG_STACKPROTECTOR_STRONG is not set
> diff --git a/configs/platform-v7a/barebox-at91.config.diff b/configs/platform-v7a/barebox-at91.config.diff
> index 4b09dcb416bf..cf092c542a02 100644
> --- a/configs/platform-v7a/barebox-at91.config.diff
> +++ b/configs/platform-v7a/barebox-at91.config.diff
> @@ -1,4 +1,4 @@
> -7107a8d8bbd7061c017ec7d039b9a2b3
> +b84e018f387ca177ad90f1972d178d88
>  CONFIG_ARCH_AT91=y
>  # CONFIG_ARCH_BCM283X is not set
>  # CONFIG_ARCH_IMX is undefined
> @@ -6,15 +6,13 @@ CONFIG_ARCH_AT91=y
>  # CONFIG_ARCH_MULTIARCH is not set
>  # CONFIG_ARCH_OMAP_MULTI is undefined
>  # CONFIG_ARCH_ROCKCHIP is undefined
> -# CONFIG_ARM_AMBA is undefined
> +# CONFIG_ARCH_SUNXI is undefined
>  # CONFIG_ARM_SECURE_MONITOR is undefined
>  # CONFIG_ARM_SMCCC is undefined
>  CONFIG_AT91SAM9_SMC=y
>  CONFIG_AT91_MCI_PBL=y
>  CONFIG_AT91_MULTI_BOARDS=y
>  CONFIG_ATMEL_EBI=y
> -# CONFIG_BOARD_ARM_GENERIC_DT is not set
> -# CONFIG_BOARD_GENERIC_DT is undefined
>  CONFIG_BOOTM_OFTREE_UIMAGE=y
>  CONFIG_CLOCKSOURCE_ATMEL_PIT=y
>  # CONFIG_CLOCKSOURCE_BCM283X is undefined
> @@ -48,8 +46,8 @@ CONFIG_FS_UBIFS=y
>  # CONFIG_FS_UBIFS_COMPRESSION_ZLIB is not set
>  CONFIG_FS_UBIFS_COMPRESSION_ZSTD=y
>  CONFIG_GENERIC_ALLOCATOR=y
> -# CONFIG_GPIO_PL061 is undefined
>  # CONFIG_GPIO_RASPBERRYPI_EXP is undefined
> +# CONFIG_GPIO_SAMA5D2_PIOBU is not set
>  CONFIG_HAS_MACB=y
>  CONFIG_HAVE_AT91SAM9_RST=y
>  CONFIG_HAVE_AT91_AUDIO_PLL=y
> @@ -72,7 +70,6 @@ CONFIG_I2C_AT91=y
>  CONFIG_IMAGE_COMPRESSION_NONE=y
>  CONFIG_IMD_TARGET=y
>  # CONFIG_KEYBOARD_USB is undefined
> -# CONFIG_LIBFDT is undefined
>  CONFIG_LIBSCAN=y
>  CONFIG_LIBUBIGEN=y
>  # CONFIG_MACH_AT91SAM9263EK is not set
> @@ -97,7 +94,7 @@ CONFIG_MCI_ATMEL_SDHCI=y
>  CONFIG_MCI_ATMEL_SDHCI_PBL=y
>  # CONFIG_MCI_BCM283X is undefined
>  # CONFIG_MCI_BCM283X_SDHOST is undefined
> -# CONFIG_MCI_MMCI is undefined
> +# CONFIG_MCI_MMCI is not set
>  CONFIG_MCI_MMC_BOOT_PARTITIONS=y
>  CONFIG_MCI_SDHCI=y
>  # CONFIG_MCI_STARTUP is not set
> @@ -113,7 +110,6 @@ CONFIG_MTD_NAND_ECC=y
>  CONFIG_MTD_RAW_NAND=y
>  CONFIG_MTD_SPI_NOR=y
>  # CONFIG_MTD_SPI_NOR_USE_4K_SECTORS is not set
> -# CONFIG_MTD_SST25L is not set
>  CONFIG_MTD_UBI=y
>  CONFIG_MTD_UBI_BEB_LIMIT=20
>  # CONFIG_MTD_UBI_CHECK_IO is not set
> @@ -141,13 +137,13 @@ CONFIG_PROMPT="barebox:"
>  # CONFIG_REGULATOR_ANATOP is not set
>  # CONFIG_REGULATOR_BCM283X is undefined
>  CONFIG_REGULATOR_FIXED=y
> -# CONFIG_SERIAL_AMBA_PL011 is undefined
>  CONFIG_SOC_SAMA5=y
>  CONFIG_SOC_SAMA5D2=y
>  CONFIG_SOC_SAMA5D4=y
>  CONFIG_SOC_SAMA5_MULTI=y
>  CONFIG_SOC_SAM_V7=y
>  CONFIG_SPI_ATMEL_QUADSPI=y
> +# CONFIG_SPI_BCM2835 is undefined
>  # CONFIG_SPI_CADENCE_QUADSPI is not set
>  CONFIG_SPI_MEM=y
>  # CONFIG_SPI_SYNOPSYS_OCTALSPI_NOR is not set
> diff --git a/configs/platform-v7a/barebox-mx6.config b/configs/platform-v7a/barebox-mx6.config
> index 0cadf9f40539..4d35168fdac8 100644
> --- a/configs/platform-v7a/barebox-mx6.config
> +++ b/configs/platform-v7a/barebox-mx6.config
> @@ -1,8 +1,10 @@
>  #
>  # Automatically generated file; DO NOT EDIT.
> -# Barebox/arm 2024.12.0 Configuration
> +# Barebox/arm 2025.03.0 Configuration
>  #
>  CONFIG_ARM=y
> +CONFIG_ARCH_LINUX_NAME="arm"
> +CONFIG_ARCH_MKIMAGE_NAME="arm"
>  CONFIG_ARM32=y
>  CONFIG_ARCH_TEXT_BASE=0x00000000
>  CONFIG_ARM_LINUX=y
> @@ -21,6 +23,8 @@ CONFIG_ARCH_MULTIARCH=y
>  # CONFIG_ARCH_ZYNQ is not set
>  # CONFIG_ARCH_BCM283X is not set
>  CONFIG_ARCH_IMX=y
> +# CONFIG_ARCH_K3 is not set
> +# CONFIG_ARCH_SUNXI is not set
>  # CONFIG_ARCH_LAYERSCAPE is not set
>  # CONFIG_ARCH_OMAP_MULTI is not set
>  # CONFIG_ARCH_ROCKCHIP is not set
> @@ -102,6 +106,7 @@ CONFIG_MACH_NITROGEN6=y
>  # CONFIG_MACH_EMBEDSKY_E9 is not set
>  # CONFIG_MACH_EMBEST_MARSBOARD is not set
>  CONFIG_MACH_EMBEST_RIOTBOARD=y
> +# CONFIG_MACH_TORADEX_COLIBRI_IMX6 is not set
>  CONFIG_MACH_SABRELITE=y
>  # CONFIG_MACH_SABRESD is not set
>  # CONFIG_MACH_FREESCALE_IMX6SX_SABRESDB is not set
> @@ -173,6 +178,18 @@ CONFIG_ARM_UNWIND=y
>  # CONFIG_ARM_PSCI_CLIENT is not set
>  # end of ARM specific settings
>  
> +CONFIG_HAVE_ARCH_BOARD_GENERIC_DT=y
> +
> +#
> +# General architecture-dependent options
> +#
> +CONFIG_BOARD_GENERIC_DT=y
> +# CONFIG_BOARD_GENERIC_FIT is not set
> +# end of General architecture-dependent options
> +
> +CONFIG_CC_IS_GCC=y
> +CONFIG_GCC_VERSION=140201
> +CONFIG_CLANG_VERSION=0
>  CONFIG_GREGORIAN_CALENDER=y
>  CONFIG_HAS_KALLSYMS=y
>  CONFIG_HAS_MODULES=y
> @@ -192,7 +209,6 @@ CONFIG_STDDEV=y
>  CONFIG_MENUTREE=y
>  CONFIG_BAREBOX_UPDATE_IMX_NAND_FCB=y
>  CONFIG_UBIFORMAT=y
> -CONFIG_USBGADGET_START=y
>  CONFIG_BOOT=y
>  CONFIG_FASTBOOT_BASE=y
>  
> @@ -201,6 +217,8 @@ CONFIG_FASTBOOT_BASE=y
>  #
>  CONFIG_LOCALVERSION=""
>  CONFIG_LOCALVERSION_AUTO=y
> +CONFIG_HAS_INSECURE_DEFAULTS=y
> +CONFIG_INSECURE=y
>  CONFIG_BANNER=y
>  CONFIG_MEMINFO=y
>  CONFIG_MEMTEST=y
> @@ -216,8 +234,8 @@ CONFIG_HAVE_PBL_MULTI_IMAGES=y
>  CONFIG_HAVE_IMAGE_COMPRESSION=y
>  CONFIG_PBL_IMAGE=y
>  CONFIG_PBL_MULTI_IMAGES=y
> +CONFIG_USE_COMPRESSED_DTB=y
>  CONFIG_PBL_RELOCATABLE=y
> -CONFIG_BOARD_GENERIC_DT=y
>  CONFIG_IMAGE_COMPRESSION=y
>  # CONFIG_IMAGE_COMPRESSION_LZ4 is not set
>  CONFIG_IMAGE_COMPRESSION_LZO=y
> @@ -261,6 +279,7 @@ CONFIG_MENU=y
>  CONFIG_ERRNO_MESSAGES=y
>  CONFIG_TIMESTAMP=y
>  CONFIG_BOOTM=y
> +CONFIG_BOOT_OVERRIDE=y
>  CONFIG_BOOTM_SHOW_TYPE=y
>  CONFIG_BOOTM_VERBOSE=y
>  CONFIG_BOOTM_INITRD=y
> @@ -271,6 +290,7 @@ CONFIG_BOOTM_OFTREE_UIMAGE=y
>  # CONFIG_BOOTM_ELF is not set
>  CONFIG_BOOTM_FITIMAGE=y
>  # CONFIG_BOOTM_FITIMAGE_SIGNATURE is not set
> +CONFIG_BOOTM_OPTIONAL_SIGNED_IMAGES=y
>  CONFIG_BLSPEC=y
>  CONFIG_FLEXIBLE_BOOTARGS=y
>  CONFIG_MMCBLKDEV_ROOTARG=y
> @@ -350,6 +370,10 @@ CONFIG_CC_HAS_KASAN_GENERIC=y
>  # CONFIG_KASAN is not set
>  # CONFIG_COMPILE_TEST is not set
>  # CONFIG_WERROR is not set
> +
> +#
> +# arm Debugging
> +#
>  # end of Debugging
>  
>  #
> @@ -463,6 +487,7 @@ CONFIG_CMD_SHA1SUM=y
>  # CONFIG_CMD_SHA256SUM is not set
>  # CONFIG_CMD_SHA384SUM is not set
>  # CONFIG_CMD_SHA512SUM is not set
> +# CONFIG_CMD_FIPTOOL is not set
>  CONFIG_CMD_UNCOMPRESS=y
>  # end of File
>  
> @@ -543,6 +568,7 @@ CONFIG_CMD_SPI=y
>  CONFIG_CMD_LED_TRIGGER=y
>  CONFIG_CMD_USB=y
>  CONFIG_CMD_USBGADGET=y
> +# CONFIG_CMD_DFU is not set
>  CONFIG_CMD_WD=y
>  CONFIG_CMD_WD_DEFAULT_TIMOUT=0
>  # end of Hardware manipulation
> @@ -713,7 +739,6 @@ CONFIG_MTD_RAW_DEVICE=y
>  CONFIG_MTD_DATAFLASH=y
>  # CONFIG_MTD_DATAFLASH_WRITE_VERIFY is not set
>  CONFIG_MTD_M25P80=y
> -CONFIG_MTD_SST25L=y
>  # CONFIG_MTD_DOCG3 is not set
>  # CONFIG_MTD_MTDRAM is not set
>  # end of Self contained MTD devices
> @@ -855,6 +880,7 @@ CONFIG_MCI_MMC_BOOT_PARTITIONS=y
>  #
>  # CONFIG_MCI_DWC_MSHC is not set
>  # CONFIG_MCI_DW is not set
> +# CONFIG_MCI_SUNXI_SMHC is not set
>  # CONFIG_MCI_ROCKCHIP_DWCMSHC is not set
>  CONFIG_MCI_IMX_ESDHC=y
>  # CONFIG_MCI_IMX_ESDHC_PIO is not set
> @@ -890,6 +916,7 @@ CONFIG_CLOCKSOURCE_IMX_GPT=y
>  # CONFIG_MFD_MC9SDZ60 is not set
>  # CONFIG_MFD_STMPE is not set
>  CONFIG_MFD_SYSCON=y
> +# CONFIG_MFD_TPS65219 is not set
>  # CONFIG_MFD_TWL4030 is not set
>  # CONFIG_MFD_TWL6030 is not set
>  # CONFIG_MFD_STPMIC1 is not set
> @@ -950,11 +977,13 @@ CONFIG_WATCHDOG_IMX=y
>  # CONFIG_CADENCE_WATCHDOG is not set
>  CONFIG_PWM=y
>  CONFIG_PWM_IMX=y
> +# CONFIG_PWM_TPM is not set
>  # CONFIG_HWRNG is not set
>  
>  #
>  # DMA support
>  #
> +# CONFIG_DMADEVICES is not set
>  CONFIG_MXS_APBH_DMA=y
>  # end of DMA support
>  
> @@ -1104,6 +1133,7 @@ CONFIG_USB_NOP_XCEIV=y
>  #
>  CONFIG_FS=y
>  CONFIG_FS_LEGACY=y
> +CONFIG_FS_WRITABLE=y
>  
>  #
>  # Some selected filesystems still use the legacy FS API.
> @@ -1212,7 +1242,35 @@ CONFIG_ARCH_HAS_ZERO_PAGE=y
>  #
>  # Hardening options
>  #
> +
> +#
> +# This barebox configuration has CONFIG_HAS_INSECURE_DEFAULTS=y indicating
> +#
> +
> +#
> +# that some of the configured options have potentially insecure defaults.
> +#
> +
> +#
> +# Extra care needs to be in secure booted systems.
> +#
>  # CONFIG_BUG_ON_DATA_CORRUPTION is not set
> +
> +#
> +# Memory initialization
> +#
> +CONFIG_CC_HAS_AUTO_VAR_INIT_PATTERN=y
> +CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO_BARE=y
> +CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO=y
> +# CONFIG_INIT_STACK_NONE is not set
> +# CONFIG_INIT_STACK_ALL_PATTERN is not set
> +CONFIG_INIT_STACK_ALL_ZERO=y
> +# CONFIG_INIT_ON_ALLOC_DEFAULT_ON is not set
> +# CONFIG_INIT_ON_FREE_DEFAULT_ON is not set
> +CONFIG_CC_HAS_ZERO_CALL_USED_REGS=y
> +# CONFIG_ZERO_CALL_USED_REGS is not set
> +# end of Memory initialization
> +
>  # CONFIG_STACK_GUARD_PAGE is not set
>  CONFIG_STACKPROTECTOR_NONE=y
>  # CONFIG_STACKPROTECTOR_STRONG is not set
> diff --git a/configs/platform-v7a/barebox-mx6.config.diff b/configs/platform-v7a/barebox-mx6.config.diff
> index 9362374f05d5..9b2cf6d485b1 100644
> --- a/configs/platform-v7a/barebox-mx6.config.diff
> +++ b/configs/platform-v7a/barebox-mx6.config.diff
> @@ -1,4 +1,4 @@
> -7107a8d8bbd7061c017ec7d039b9a2b3
> +b84e018f387ca177ad90f1972d178d88
>  # CONFIG_ARCH_BCM283X is not set
>  CONFIG_ARCH_HAS_FEC_IMX=y
>  CONFIG_ARCH_HAS_IMX_GPT=y
> @@ -10,7 +10,6 @@ CONFIG_ARCH_IMX_IMXIMAGE=y
>  # CONFIG_ARCH_IMX_USBLOADER is not set
>  # CONFIG_ARM_SECURE_MONITOR is undefined
>  # CONFIG_ARM_SMCCC is undefined
> -# CONFIG_ARM_USE_COMPRESSED_DTB is undefined
>  CONFIG_AT803X_PHY=y
>  # CONFIG_BAREBOX_LOGO is not set
>  CONFIG_BAREBOX_UPDATE_IMX_NAND_FCB=y
> @@ -21,6 +20,7 @@ CONFIG_BOOTM_OFTREE_UIMAGE=y
>  # CONFIG_CACHE_L2X0 is not set
>  # CONFIG_CLOCKSOURCE_BCM283X is undefined
>  CONFIG_CLOCKSOURCE_IMX_GPT=y
> +# CONFIG_CMD_DFU is not set
>  # CONFIG_CMD_FBTEST is not set
>  CONFIG_CMD_FCB=y
>  # CONFIG_CMD_KEYSTORE is not set
> @@ -152,6 +152,7 @@ CONFIG_MACH_SABRELITE=y
>  # CONFIG_MACH_SOLIDRUN_MICROSOM is not set
>  # CONFIG_MACH_TECHNEXION_PICO_HOBBIT is not set
>  # CONFIG_MACH_TECHNEXION_WANDBOARD is not set
> +# CONFIG_MACH_TORADEX_COLIBRI_IMX6 is not set
>  # CONFIG_MACH_TQMA53 is not set
>  # CONFIG_MACH_TQMA6UL is not set
>  # CONFIG_MACH_TQMA6X is not set
> @@ -191,7 +192,6 @@ CONFIG_MTD_RAW_DEVICE=y
>  CONFIG_MTD_RAW_NAND=y
>  CONFIG_MTD_SPI_NOR=y
>  # CONFIG_MTD_SPI_NOR_USE_4K_SECTORS is not set
> -CONFIG_MTD_SST25L=y
>  CONFIG_MTD_UBI=y
>  CONFIG_MTD_UBI_BEB_LIMIT=20
>  # CONFIG_MTD_UBI_CHECK_IO is not set
> @@ -221,12 +221,14 @@ CONFIG_PNG=y
>  CONFIG_PROMPT="barebox:"
>  CONFIG_PWM=y
>  CONFIG_PWM_IMX=y
> +# CONFIG_PWM_TPM is not set
>  # CONFIG_QOI is not set
>  # CONFIG_REGULATOR_ANATOP is not set
>  # CONFIG_REGULATOR_BCM283X is undefined
>  CONFIG_REGULATOR_FIXED=y
>  # CONFIG_REGULATOR_PFUZE is not set
>  CONFIG_RESET_IMX_SRC=y
> +# CONFIG_SPI_BCM2835 is undefined
>  # CONFIG_SPI_CADENCE_QUADSPI is not set
>  CONFIG_SPI_MEM=y
>  # CONFIG_SPI_SYNOPSYS_OCTALSPI_NOR is not set
> @@ -243,7 +245,6 @@ CONFIG_USB_IMX_PHY=y
>  CONFIG_USB_NOP_XCEIV=y
>  CONFIG_USB_OTGDEV=y
>  CONFIG_USB_ULPI=y
> -# CONFIG_USE_COMPRESSED_DTB is undefined
>  CONFIG_VIDEO=y
>  CONFIG_VIDEO_VPL=y
>  # CONFIG_WATCHDOG_BCM2835 is undefined
> diff --git a/configs/platform-v7a/barebox-rpi2.config b/configs/platform-v7a/barebox-rpi2.config
> index 59cceccd6d92..9233a01e0081 100644
> --- a/configs/platform-v7a/barebox-rpi2.config
> +++ b/configs/platform-v7a/barebox-rpi2.config
> @@ -1,12 +1,13 @@
>  #
>  # Automatically generated file; DO NOT EDIT.
> -# Barebox/arm 2024.12.0 Configuration
> +# Barebox/arm 2025.03.0 Configuration
>  #
>  CONFIG_ARM=y
> +CONFIG_ARCH_LINUX_NAME="arm"
> +CONFIG_ARCH_MKIMAGE_NAME="arm"
>  CONFIG_ARM32=y
>  CONFIG_ARCH_TEXT_BASE=0x00000000
>  CONFIG_ARM_LINUX=y
> -CONFIG_ARM_USE_COMPRESSED_DTB=y
>  
>  #
>  # System Type
> @@ -22,6 +23,8 @@ CONFIG_ARCH_MULTIARCH=y
>  # CONFIG_ARCH_ZYNQ is not set
>  CONFIG_ARCH_BCM283X=y
>  # CONFIG_ARCH_IMX is not set
> +# CONFIG_ARCH_K3 is not set
> +# CONFIG_ARCH_SUNXI is not set
>  # CONFIG_ARCH_LAYERSCAPE is not set
>  # CONFIG_ARCH_OMAP_MULTI is not set
>  # CONFIG_ARCH_ROCKCHIP is not set
> @@ -74,6 +77,18 @@ CONFIG_ARM_SECURE_MONITOR=y
>  # CONFIG_ARM_PSCI_CLIENT is not set
>  # end of ARM specific settings
>  
> +CONFIG_HAVE_ARCH_BOARD_GENERIC_DT=y
> +
> +#
> +# General architecture-dependent options
> +#
> +CONFIG_BOARD_GENERIC_DT=y
> +# CONFIG_BOARD_GENERIC_FIT is not set
> +# end of General architecture-dependent options
> +
> +CONFIG_CC_IS_GCC=y
> +CONFIG_GCC_VERSION=140201
> +CONFIG_CLANG_VERSION=0
>  CONFIG_GREGORIAN_CALENDER=y
>  CONFIG_HAS_KALLSYMS=y
>  CONFIG_HAS_MODULES=y
> @@ -91,7 +106,6 @@ CONFIG_FITIMAGE=y
>  CONFIG_LOGBUF=y
>  CONFIG_STDDEV=y
>  CONFIG_MENUTREE=y
> -CONFIG_USBGADGET_START=y
>  CONFIG_BOOT=y
>  CONFIG_FASTBOOT_BASE=y
>  
> @@ -100,6 +114,8 @@ CONFIG_FASTBOOT_BASE=y
>  #
>  CONFIG_LOCALVERSION=""
>  CONFIG_LOCALVERSION_AUTO=y
> +CONFIG_HAS_INSECURE_DEFAULTS=y
> +CONFIG_INSECURE=y
>  CONFIG_BANNER=y
>  CONFIG_MEMINFO=y
>  CONFIG_MEMTEST=y
> @@ -117,7 +133,6 @@ CONFIG_PBL_IMAGE=y
>  CONFIG_PBL_MULTI_IMAGES=y
>  CONFIG_USE_COMPRESSED_DTB=y
>  CONFIG_PBL_RELOCATABLE=y
> -CONFIG_BOARD_GENERIC_DT=y
>  CONFIG_IMAGE_COMPRESSION=y
>  # CONFIG_IMAGE_COMPRESSION_LZ4 is not set
>  CONFIG_IMAGE_COMPRESSION_LZO=y
> @@ -161,6 +176,7 @@ CONFIG_MENU=y
>  CONFIG_ERRNO_MESSAGES=y
>  CONFIG_TIMESTAMP=y
>  CONFIG_BOOTM=y
> +CONFIG_BOOT_OVERRIDE=y
>  CONFIG_BOOTM_SHOW_TYPE=y
>  CONFIG_BOOTM_VERBOSE=y
>  CONFIG_BOOTM_INITRD=y
> @@ -171,6 +187,7 @@ CONFIG_BOOTM_UIMAGE=y
>  # CONFIG_BOOTM_ELF is not set
>  CONFIG_BOOTM_FITIMAGE=y
>  # CONFIG_BOOTM_FITIMAGE_SIGNATURE is not set
> +CONFIG_BOOTM_OPTIONAL_SIGNED_IMAGES=y
>  CONFIG_BLSPEC=y
>  CONFIG_FLEXIBLE_BOOTARGS=y
>  CONFIG_MMCBLKDEV_ROOTARG=y
> @@ -248,6 +265,10 @@ CONFIG_CC_HAS_KASAN_GENERIC=y
>  # CONFIG_KASAN is not set
>  # CONFIG_COMPILE_TEST is not set
>  # CONFIG_WERROR is not set
> +
> +#
> +# arm Debugging
> +#
>  # end of Debugging
>  
>  #
> @@ -358,6 +379,7 @@ CONFIG_CMD_SHA1SUM=y
>  # CONFIG_CMD_SHA256SUM is not set
>  # CONFIG_CMD_SHA384SUM is not set
>  # CONFIG_CMD_SHA512SUM is not set
> +# CONFIG_CMD_FIPTOOL is not set
>  CONFIG_CMD_UNCOMPRESS=y
>  # end of File
>  
> @@ -561,6 +583,7 @@ CONFIG_SPI=y
>  # CONFIG_SPI_MEM is not set
>  CONFIG_DRIVER_SPI_GPIO=y
>  # CONFIG_DRIVER_SPI_LITEX_SPIFLASH is not set
> +# CONFIG_SPI_BCM2835 is not set
>  # end of SPI drivers
>  
>  CONFIG_I2C=y
> @@ -675,6 +698,7 @@ CONFIG_MCI_MMC_BOOT_PARTITIONS=y
>  #
>  # CONFIG_MCI_DWC_MSHC is not set
>  # CONFIG_MCI_DW is not set
> +# CONFIG_MCI_SUNXI_SMHC is not set
>  # CONFIG_MCI_ROCKCHIP_DWCMSHC is not set
>  CONFIG_MCI_BCM283X=y
>  CONFIG_MCI_BCM283X_SDHOST=y
> @@ -709,6 +733,7 @@ CONFIG_CLOCKSOURCE_ARM_ARCHITECTED_TIMER=y
>  # CONFIG_MFD_MC9SDZ60 is not set
>  # CONFIG_MFD_STMPE is not set
>  # CONFIG_MFD_SYSCON is not set
> +# CONFIG_MFD_TPS65219 is not set
>  # CONFIG_MFD_TWL4030 is not set
>  # CONFIG_MFD_TWL6030 is not set
>  # CONFIG_MFD_STPMIC1 is not set
> @@ -768,6 +793,7 @@ CONFIG_WATCHDOG_BCM2835=y
>  #
>  # DMA support
>  #
> +# CONFIG_DMADEVICES is not set
>  # end of DMA support
>  
>  CONFIG_GPIOLIB=y
> @@ -900,6 +926,7 @@ CONFIG_USB_NOP_XCEIV=y
>  #
>  CONFIG_FS=y
>  CONFIG_FS_LEGACY=y
> +CONFIG_FS_WRITABLE=y
>  
>  #
>  # Some selected filesystems still use the legacy FS API.
> @@ -991,7 +1018,35 @@ CONFIG_ARCH_HAS_ZERO_PAGE=y
>  #
>  # Hardening options
>  #
> +
> +#
> +# This barebox configuration has CONFIG_HAS_INSECURE_DEFAULTS=y indicating
> +#
> +
> +#
> +# that some of the configured options have potentially insecure defaults.
> +#
> +
> +#
> +# Extra care needs to be in secure booted systems.
> +#
>  # CONFIG_BUG_ON_DATA_CORRUPTION is not set
> +
> +#
> +# Memory initialization
> +#
> +CONFIG_CC_HAS_AUTO_VAR_INIT_PATTERN=y
> +CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO_BARE=y
> +CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO=y
> +# CONFIG_INIT_STACK_NONE is not set
> +# CONFIG_INIT_STACK_ALL_PATTERN is not set
> +CONFIG_INIT_STACK_ALL_ZERO=y
> +# CONFIG_INIT_ON_ALLOC_DEFAULT_ON is not set
> +# CONFIG_INIT_ON_FREE_DEFAULT_ON is not set
> +CONFIG_CC_HAS_ZERO_CALL_USED_REGS=y
> +# CONFIG_ZERO_CALL_USED_REGS is not set
> +# end of Memory initialization
> +
>  # CONFIG_STACK_GUARD_PAGE is not set
>  CONFIG_STACKPROTECTOR_NONE=y
>  # CONFIG_STACKPROTECTOR_STRONG is not set
> diff --git a/configs/platform-v7a/barebox-rpi2.config.diff b/configs/platform-v7a/barebox-rpi2.config.diff
> index 22da608bdf7d..627dc4cfc297 100644
> --- a/configs/platform-v7a/barebox-rpi2.config.diff
> +++ b/configs/platform-v7a/barebox-rpi2.config.diff
> @@ -1,4 +1,4 @@
> -7107a8d8bbd7061c017ec7d039b9a2b3
> +b84e018f387ca177ad90f1972d178d88
>  # CONFIG_CMD_NVMEM is not set
>  CONFIG_DRIVER_NET_BCMGENET=y
>  CONFIG_DRIVER_SERIAL_NS16550=y
> diff --git a/configs/platform-v7a/barebox-stm32mp.config b/configs/platform-v7a/barebox-stm32mp.config
> index 74e4bf931d4f..a3feb8eca43c 100644
> --- a/configs/platform-v7a/barebox-stm32mp.config
> +++ b/configs/platform-v7a/barebox-stm32mp.config
> @@ -1,12 +1,13 @@
>  #
>  # Automatically generated file; DO NOT EDIT.
> -# Barebox/arm 2024.12.0 Configuration
> +# Barebox/arm 2025.03.0 Configuration
>  #
>  CONFIG_ARM=y
> +CONFIG_ARCH_LINUX_NAME="arm"
> +CONFIG_ARCH_MKIMAGE_NAME="arm"
>  CONFIG_ARM32=y
>  CONFIG_ARCH_TEXT_BASE=0x00000000
>  CONFIG_ARM_LINUX=y
> -CONFIG_ARM_USE_COMPRESSED_DTB=y
>  
>  #
>  # System Type
> @@ -23,6 +24,8 @@ CONFIG_ARCH_MULTIARCH=y
>  # CONFIG_ARCH_ZYNQ is not set
>  # CONFIG_ARCH_BCM283X is not set
>  # CONFIG_ARCH_IMX is not set
> +# CONFIG_ARCH_K3 is not set
> +# CONFIG_ARCH_SUNXI is not set
>  # CONFIG_ARCH_LAYERSCAPE is not set
>  # CONFIG_ARCH_OMAP_MULTI is not set
>  # CONFIG_ARCH_ROCKCHIP is not set
> @@ -50,8 +53,9 @@ CONFIG_MACH_LXA_MC1=y
>  # CONFIG_MACH_SEEED_ODYSSEY is not set
>  CONFIG_MACH_STM32MP15X_EV1=y
>  # CONFIG_MACH_PROTONIC_STM32MP1 is not set
> +# CONFIG_MACH_PROTONIC_STM32MP13 is not set
>  # CONFIG_MACH_PHYTEC_PHYCORE_STM32MP1 is not set
> -# CONFIG_BOARD_ARM_GENERIC_DT is not set
> +CONFIG_BOARD_ARM_GENERIC_DT=y
>  CONFIG_AEABI=y
>  CONFIG_THUMB2_BAREBOX=y
>  CONFIG_ARM_BOARD_APPEND_ATAG=y
> @@ -73,6 +77,18 @@ CONFIG_ARM_PSCI_OF=y
>  CONFIG_ARM_PSCI_CLIENT=y
>  # end of ARM specific settings
>  
> +CONFIG_HAVE_ARCH_BOARD_GENERIC_DT=y
> +
> +#
> +# General architecture-dependent options
> +#
> +CONFIG_BOARD_GENERIC_DT=y
> +# CONFIG_BOARD_GENERIC_FIT is not set
> +# end of General architecture-dependent options
> +
> +CONFIG_CC_IS_GCC=y
> +CONFIG_GCC_VERSION=140201
> +CONFIG_CLANG_VERSION=0
>  CONFIG_GREGORIAN_CALENDER=y
>  CONFIG_HAS_KALLSYMS=y
>  CONFIG_HAS_MODULES=y
> @@ -90,7 +106,6 @@ CONFIG_FITIMAGE=y
>  CONFIG_LOGBUF=y
>  CONFIG_STDDEV=y
>  CONFIG_MENUTREE=y
> -CONFIG_USBGADGET_START=y
>  CONFIG_BOOT=y
>  CONFIG_FASTBOOT_BASE=y
>  
> @@ -99,6 +114,8 @@ CONFIG_FASTBOOT_BASE=y
>  #
>  CONFIG_LOCALVERSION=""
>  CONFIG_LOCALVERSION_AUTO=y
> +CONFIG_HAS_INSECURE_DEFAULTS=y
> +CONFIG_INSECURE=y
>  CONFIG_BANNER=y
>  CONFIG_MEMINFO=y
>  CONFIG_MEMTEST=y
> @@ -159,6 +176,7 @@ CONFIG_MENU=y
>  CONFIG_ERRNO_MESSAGES=y
>  CONFIG_TIMESTAMP=y
>  CONFIG_BOOTM=y
> +CONFIG_BOOT_OVERRIDE=y
>  CONFIG_BOOTM_SHOW_TYPE=y
>  CONFIG_BOOTM_VERBOSE=y
>  CONFIG_BOOTM_INITRD=y
> @@ -169,6 +187,7 @@ CONFIG_BOOTM_OFTREE_UIMAGE=y
>  # CONFIG_BOOTM_ELF is not set
>  CONFIG_BOOTM_FITIMAGE=y
>  # CONFIG_BOOTM_FITIMAGE_SIGNATURE is not set
> +CONFIG_BOOTM_OPTIONAL_SIGNED_IMAGES=y
>  CONFIG_BLSPEC=y
>  CONFIG_FLEXIBLE_BOOTARGS=y
>  CONFIG_MMCBLKDEV_ROOTARG=y
> @@ -250,6 +269,10 @@ CONFIG_CC_HAS_KASAN_GENERIC=y
>  # CONFIG_KASAN is not set
>  # CONFIG_COMPILE_TEST is not set
>  # CONFIG_WERROR is not set
> +
> +#
> +# arm Debugging
> +#
>  # end of Debugging
>  
>  #
> @@ -360,6 +383,7 @@ CONFIG_CMD_SHA1SUM=y
>  # CONFIG_CMD_SHA256SUM is not set
>  # CONFIG_CMD_SHA384SUM is not set
>  # CONFIG_CMD_SHA512SUM is not set
> +# CONFIG_CMD_FIPTOOL is not set
>  CONFIG_CMD_UNCOMPRESS=y
>  # end of File
>  
> @@ -638,6 +662,7 @@ CONFIG_MCI_MMC_BOOT_PARTITIONS=y
>  #
>  # CONFIG_MCI_DWC_MSHC is not set
>  # CONFIG_MCI_DW is not set
> +# CONFIG_MCI_SUNXI_SMHC is not set
>  # CONFIG_MCI_ROCKCHIP_DWCMSHC is not set
>  # CONFIG_MCI_MMCI is not set
>  # CONFIG_MCI_ARASAN is not set
> @@ -673,6 +698,7 @@ CONFIG_CLOCKSOURCE_ARM_ARCHITECTED_TIMER=y
>  # CONFIG_MFD_MC9SDZ60 is not set
>  # CONFIG_MFD_STMPE is not set
>  CONFIG_MFD_SYSCON=y
> +# CONFIG_MFD_TPS65219 is not set
>  # CONFIG_MFD_TWL4030 is not set
>  # CONFIG_MFD_TWL6030 is not set
>  CONFIG_MFD_STPMIC1=y
> @@ -738,6 +764,7 @@ CONFIG_HW_RANDOM_OPTEE=y
>  #
>  # DMA support
>  #
> +# CONFIG_DMADEVICES is not set
>  # end of DMA support
>  
>  CONFIG_GPIOLIB=y
> @@ -892,6 +919,7 @@ CONFIG_OF_FIXUP_OPTEE=y
>  #
>  CONFIG_FS=y
>  CONFIG_FS_LEGACY=y
> +CONFIG_FS_WRITABLE=y
>  
>  #
>  # Some selected filesystems still use the legacy FS API.
> @@ -953,6 +981,7 @@ CONFIG_LZO_DECOMPRESS=y
>  CONFIG_FNMATCH=y
>  CONFIG_QSORT=y
>  CONFIG_IMAGE_SPARSE=y
> +CONFIG_LIBFDT=y
>  # CONFIG_RATP is not set
>  # CONFIG_ALLOW_PRNG_FALLBACK is not set
>  # CONFIG_CRC_CCITT is not set
> @@ -975,7 +1004,35 @@ CONFIG_IDR=y
>  #
>  # Hardening options
>  #
> +
> +#
> +# This barebox configuration has CONFIG_HAS_INSECURE_DEFAULTS=y indicating
> +#
> +
> +#
> +# that some of the configured options have potentially insecure defaults.
> +#
> +
> +#
> +# Extra care needs to be in secure booted systems.
> +#
>  # CONFIG_BUG_ON_DATA_CORRUPTION is not set
> +
> +#
> +# Memory initialization
> +#
> +CONFIG_CC_HAS_AUTO_VAR_INIT_PATTERN=y
> +CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO_BARE=y
> +CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO=y
> +# CONFIG_INIT_STACK_NONE is not set
> +# CONFIG_INIT_STACK_ALL_PATTERN is not set
> +CONFIG_INIT_STACK_ALL_ZERO=y
> +# CONFIG_INIT_ON_ALLOC_DEFAULT_ON is not set
> +# CONFIG_INIT_ON_FREE_DEFAULT_ON is not set
> +CONFIG_CC_HAS_ZERO_CALL_USED_REGS=y
> +# CONFIG_ZERO_CALL_USED_REGS is not set
> +# end of Memory initialization
> +
>  CONFIG_STACK_GUARD_PAGE=y
>  CONFIG_STACKPROTECTOR=y
>  # CONFIG_STACKPROTECTOR_NONE is not set
> diff --git a/configs/platform-v7a/barebox-stm32mp.config.diff b/configs/platform-v7a/barebox-stm32mp.config.diff
> index b5eed3964614..6ea1f0c21ec5 100644
> --- a/configs/platform-v7a/barebox-stm32mp.config.diff
> +++ b/configs/platform-v7a/barebox-stm32mp.config.diff
> @@ -1,4 +1,4 @@
> -7107a8d8bbd7061c017ec7d039b9a2b3
> +b84e018f387ca177ad90f1972d178d88
>  # CONFIG_ARCH_BCM283X is not set
>  CONFIG_ARCH_HAS_RESET_CONTROLLER=y
>  CONFIG_ARCH_NR_GPIO=416
> @@ -19,8 +19,6 @@ CONFIG_ARM_SCMI_TRANSPORT_OPTEE=y
>  CONFIG_ARM_SCMI_TRANSPORT_SMC=y
>  # CONFIG_ARM_SECURE_MONITOR is undefined
>  CONFIG_AT803X_PHY=y
> -# CONFIG_BOARD_ARM_GENERIC_DT is not set
> -# CONFIG_BOARD_GENERIC_DT is undefined
>  CONFIG_BOOTM_OFTREE_UIMAGE=y
>  # CONFIG_BZLIB is not set
>  # CONFIG_CLKSRC_STM32 is not set
> @@ -74,10 +72,10 @@ CONFIG_I2C_STM32=y
>  CONFIG_IDR=y
>  CONFIG_LED_PWM=y
>  # CONFIG_LED_TRIGGERS is not set
> -# CONFIG_LIBFDT is undefined
>  CONFIG_MACHINE_ID=y
>  CONFIG_MACH_LXA_MC1=y
>  # CONFIG_MACH_PHYTEC_PHYCORE_STM32MP1 is not set
> +# CONFIG_MACH_PROTONIC_STM32MP13 is not set
>  # CONFIG_MACH_PROTONIC_STM32MP1 is not set
>  # CONFIG_MACH_RPI2 is undefined
>  # CONFIG_MACH_RPI3 is undefined
> @@ -158,6 +156,7 @@ CONFIG_RESET_SCMI=y
>  CONFIG_RESET_SIMPLE=y
>  CONFIG_RESET_STM32=y
>  # CONFIG_SPI is not set
> +# CONFIG_SPI_BCM2835 is undefined
>  # CONFIG_SPI_MEM is undefined
>  CONFIG_STACKPROTECTOR=y
>  # CONFIG_STACKPROTECTOR_NONE is not set
> diff --git a/configs/platform-v7a/barebox-vexpress.config b/configs/platform-v7a/barebox-vexpress.config
> index d56efcd4f9ee..2d5b5a381940 100644
> --- a/configs/platform-v7a/barebox-vexpress.config
> +++ b/configs/platform-v7a/barebox-vexpress.config
> @@ -1,8 +1,10 @@
>  #
>  # Automatically generated file; DO NOT EDIT.
> -# Barebox/arm 2024.12.0 Configuration
> +# Barebox/arm 2025.03.0 Configuration
>  #
>  CONFIG_ARM=y
> +CONFIG_ARCH_LINUX_NAME="arm"
> +CONFIG_ARCH_MKIMAGE_NAME="arm"
>  CONFIG_ARM32=y
>  CONFIG_ARCH_TEXT_BASE=0x00000000
>  CONFIG_ARM_LINUX=y
> @@ -21,6 +23,8 @@ CONFIG_ARCH_MULTIARCH=y
>  # CONFIG_ARCH_ZYNQ is not set
>  # CONFIG_ARCH_BCM283X is not set
>  # CONFIG_ARCH_IMX is not set
> +# CONFIG_ARCH_K3 is not set
> +# CONFIG_ARCH_SUNXI is not set
>  # CONFIG_ARCH_LAYERSCAPE is not set
>  # CONFIG_ARCH_OMAP_MULTI is not set
>  # CONFIG_ARCH_ROCKCHIP is not set
> @@ -60,6 +64,18 @@ CONFIG_ARM_UNWIND=y
>  # CONFIG_ARM_PSCI_CLIENT is not set
>  # end of ARM specific settings
>  
> +CONFIG_HAVE_ARCH_BOARD_GENERIC_DT=y
> +
> +#
> +# General architecture-dependent options
> +#
> +CONFIG_BOARD_GENERIC_DT=y
> +# CONFIG_BOARD_GENERIC_FIT is not set
> +# end of General architecture-dependent options
> +
> +CONFIG_CC_IS_GCC=y
> +CONFIG_GCC_VERSION=140201
> +CONFIG_CLANG_VERSION=0
>  CONFIG_GREGORIAN_CALENDER=y
>  CONFIG_HAS_KALLSYMS=y
>  CONFIG_HAS_MODULES=y
> @@ -76,7 +92,6 @@ CONFIG_FITIMAGE=y
>  CONFIG_LOGBUF=y
>  CONFIG_STDDEV=y
>  CONFIG_MENUTREE=y
> -CONFIG_USBGADGET_START=y
>  CONFIG_BOOT=y
>  CONFIG_FASTBOOT_BASE=y
>  
> @@ -85,6 +100,8 @@ CONFIG_FASTBOOT_BASE=y
>  #
>  CONFIG_LOCALVERSION=""
>  CONFIG_LOCALVERSION_AUTO=y
> +CONFIG_HAS_INSECURE_DEFAULTS=y
> +CONFIG_INSECURE=y
>  CONFIG_BANNER=y
>  CONFIG_MEMINFO=y
>  CONFIG_MEMTEST=y
> @@ -100,8 +117,8 @@ CONFIG_HAVE_PBL_MULTI_IMAGES=y
>  CONFIG_HAVE_IMAGE_COMPRESSION=y
>  CONFIG_PBL_IMAGE=y
>  CONFIG_PBL_MULTI_IMAGES=y
> +CONFIG_USE_COMPRESSED_DTB=y
>  CONFIG_PBL_RELOCATABLE=y
> -CONFIG_BOARD_GENERIC_DT=y
>  CONFIG_IMAGE_COMPRESSION=y
>  # CONFIG_IMAGE_COMPRESSION_LZ4 is not set
>  CONFIG_IMAGE_COMPRESSION_LZO=y
> @@ -145,6 +162,7 @@ CONFIG_MENU=y
>  CONFIG_ERRNO_MESSAGES=y
>  CONFIG_TIMESTAMP=y
>  CONFIG_BOOTM=y
> +CONFIG_BOOT_OVERRIDE=y
>  CONFIG_BOOTM_SHOW_TYPE=y
>  CONFIG_BOOTM_VERBOSE=y
>  CONFIG_BOOTM_INITRD=y
> @@ -155,6 +173,7 @@ CONFIG_BOOTM_UIMAGE=y
>  # CONFIG_BOOTM_ELF is not set
>  CONFIG_BOOTM_FITIMAGE=y
>  # CONFIG_BOOTM_FITIMAGE_SIGNATURE is not set
> +CONFIG_BOOTM_OPTIONAL_SIGNED_IMAGES=y
>  CONFIG_BLSPEC=y
>  CONFIG_FLEXIBLE_BOOTARGS=y
>  CONFIG_MMCBLKDEV_ROOTARG=y
> @@ -234,6 +253,10 @@ CONFIG_CC_HAS_KASAN_GENERIC=y
>  # CONFIG_KASAN is not set
>  # CONFIG_COMPILE_TEST is not set
>  # CONFIG_WERROR is not set
> +
> +#
> +# arm Debugging
> +#
>  # end of Debugging
>  
>  #
> @@ -343,6 +366,7 @@ CONFIG_CMD_SHA1SUM=y
>  # CONFIG_CMD_SHA256SUM is not set
>  # CONFIG_CMD_SHA384SUM is not set
>  # CONFIG_CMD_SHA512SUM is not set
> +# CONFIG_CMD_FIPTOOL is not set
>  CONFIG_CMD_UNCOMPRESS=y
>  # end of File
>  
> @@ -657,6 +681,7 @@ CONFIG_MCI_ERASE=y
>  #
>  # CONFIG_MCI_DWC_MSHC is not set
>  # CONFIG_MCI_DW is not set
> +# CONFIG_MCI_SUNXI_SMHC is not set
>  # CONFIG_MCI_ROCKCHIP_DWCMSHC is not set
>  CONFIG_MCI_MMCI=y
>  # CONFIG_MCI_ARASAN is not set
> @@ -689,6 +714,7 @@ CONFIG_CLOCKSOURCE_ARM_ARCHITECTED_TIMER=y
>  # CONFIG_MFD_MC9SDZ60 is not set
>  # CONFIG_MFD_STMPE is not set
>  # CONFIG_MFD_SYSCON is not set
> +# CONFIG_MFD_TPS65219 is not set
>  # CONFIG_MFD_TWL4030 is not set
>  # CONFIG_MFD_TWL6030 is not set
>  # CONFIG_MFD_STPMIC1 is not set
> @@ -740,6 +766,7 @@ CONFIG_HWRNG=y
>  #
>  # DMA support
>  #
> +# CONFIG_DMADEVICES is not set
>  # end of DMA support
>  
>  # CONFIG_W1 is not set
> @@ -842,6 +869,7 @@ CONFIG_REGULATOR=y
>  #
>  CONFIG_FS=y
>  CONFIG_FS_LEGACY=y
> +CONFIG_FS_WRITABLE=y
>  
>  #
>  # Some selected filesystems still use the legacy FS API.
> @@ -933,7 +961,35 @@ CONFIG_ARCH_HAS_ZERO_PAGE=y
>  #
>  # Hardening options
>  #
> +
> +#
> +# This barebox configuration has CONFIG_HAS_INSECURE_DEFAULTS=y indicating
> +#
> +
> +#
> +# that some of the configured options have potentially insecure defaults.
> +#
> +
> +#
> +# Extra care needs to be in secure booted systems.
> +#
>  # CONFIG_BUG_ON_DATA_CORRUPTION is not set
> +
> +#
> +# Memory initialization
> +#
> +CONFIG_CC_HAS_AUTO_VAR_INIT_PATTERN=y
> +CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO_BARE=y
> +CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO=y
> +# CONFIG_INIT_STACK_NONE is not set
> +# CONFIG_INIT_STACK_ALL_PATTERN is not set
> +CONFIG_INIT_STACK_ALL_ZERO=y
> +# CONFIG_INIT_ON_ALLOC_DEFAULT_ON is not set
> +# CONFIG_INIT_ON_FREE_DEFAULT_ON is not set
> +CONFIG_CC_HAS_ZERO_CALL_USED_REGS=y
> +# CONFIG_ZERO_CALL_USED_REGS is not set
> +# end of Memory initialization
> +
>  # CONFIG_STACK_GUARD_PAGE is not set
>  CONFIG_STACKPROTECTOR_NONE=y
>  # CONFIG_STACKPROTECTOR_STRONG is not set
> diff --git a/configs/platform-v7a/barebox-vexpress.config.diff b/configs/platform-v7a/barebox-vexpress.config.diff
> index 333303867754..bef80379b0ef 100644
> --- a/configs/platform-v7a/barebox-vexpress.config.diff
> +++ b/configs/platform-v7a/barebox-vexpress.config.diff
> @@ -1,10 +1,9 @@
> -7107a8d8bbd7061c017ec7d039b9a2b3
> +b84e018f387ca177ad90f1972d178d88
>  CONFIG_AMBA_SP804=y
>  # CONFIG_ARCH_BCM283X is not set
>  CONFIG_ARCH_VEXPRESS=y
>  # CONFIG_ARM_SECURE_MONITOR is undefined
>  # CONFIG_ARM_SMCCC is undefined
> -# CONFIG_ARM_USE_COMPRESSED_DTB is undefined
>  # CONFIG_CFI_BUFFER_WRITE is not set
>  # CONFIG_CLOCKSOURCE_BCM283X is undefined
>  # CONFIG_CMD_GPIO is undefined
> @@ -68,6 +67,6 @@ CONFIG_PROMPT="vexpress: "
>  # CONFIG_REGULATOR_BCM283X is undefined
>  # CONFIG_REGULATOR_FIXED is undefined
>  CONFIG_SERIAL_AMBA_PL011=y
> +# CONFIG_SPI_BCM2835 is undefined
>  CONFIG_SRAM=y
> -# CONFIG_USE_COMPRESSED_DTB is undefined
>  # CONFIG_WATCHDOG_BCM2835 is undefined
> diff --git a/configs/platform-v7a/barebox.config b/configs/platform-v7a/barebox.config
> index ce526b4551cc..6fab1828a60f 100644
> --- a/configs/platform-v7a/barebox.config
> +++ b/configs/platform-v7a/barebox.config
> @@ -1,12 +1,13 @@
>  #
>  # Automatically generated file; DO NOT EDIT.
> -# Barebox/arm 2024.12.0 Configuration
> +# Barebox/arm 2025.03.0 Configuration
>  #
>  CONFIG_ARM=y
> +CONFIG_ARCH_LINUX_NAME="arm"
> +CONFIG_ARCH_MKIMAGE_NAME="arm"
>  CONFIG_ARM32=y
>  CONFIG_ARCH_TEXT_BASE=0x00000000
>  CONFIG_ARM_LINUX=y
> -CONFIG_ARM_USE_COMPRESSED_DTB=y
>  
>  #
>  # System Type
> @@ -22,6 +23,8 @@ CONFIG_ARCH_MULTIARCH=y
>  # CONFIG_ARCH_ZYNQ is not set
>  CONFIG_ARCH_BCM283X=y
>  # CONFIG_ARCH_IMX is not set
> +# CONFIG_ARCH_K3 is not set
> +# CONFIG_ARCH_SUNXI is not set
>  # CONFIG_ARCH_LAYERSCAPE is not set
>  # CONFIG_ARCH_OMAP_MULTI is not set
>  # CONFIG_ARCH_ROCKCHIP is not set
> @@ -74,6 +77,18 @@ CONFIG_ARM_SECURE_MONITOR=y
>  # CONFIG_ARM_PSCI_CLIENT is not set
>  # end of ARM specific settings
>  
> +CONFIG_HAVE_ARCH_BOARD_GENERIC_DT=y
> +
> +#
> +# General architecture-dependent options
> +#
> +CONFIG_BOARD_GENERIC_DT=y
> +# CONFIG_BOARD_GENERIC_FIT is not set
> +# end of General architecture-dependent options
> +
> +CONFIG_CC_IS_GCC=y
> +CONFIG_GCC_VERSION=140201
> +CONFIG_CLANG_VERSION=0
>  CONFIG_GREGORIAN_CALENDER=y
>  CONFIG_HAS_KALLSYMS=y
>  CONFIG_HAS_MODULES=y
> @@ -91,7 +106,6 @@ CONFIG_FITIMAGE=y
>  CONFIG_LOGBUF=y
>  CONFIG_STDDEV=y
>  CONFIG_MENUTREE=y
> -CONFIG_USBGADGET_START=y
>  CONFIG_BOOT=y
>  CONFIG_FASTBOOT_BASE=y
>  
> @@ -100,6 +114,8 @@ CONFIG_FASTBOOT_BASE=y
>  #
>  CONFIG_LOCALVERSION=""
>  CONFIG_LOCALVERSION_AUTO=y
> +CONFIG_HAS_INSECURE_DEFAULTS=y
> +CONFIG_INSECURE=y
>  CONFIG_BANNER=y
>  CONFIG_MEMINFO=y
>  CONFIG_MEMTEST=y
> @@ -117,7 +133,6 @@ CONFIG_PBL_IMAGE=y
>  CONFIG_PBL_MULTI_IMAGES=y
>  CONFIG_USE_COMPRESSED_DTB=y
>  CONFIG_PBL_RELOCATABLE=y
> -CONFIG_BOARD_GENERIC_DT=y
>  CONFIG_IMAGE_COMPRESSION=y
>  # CONFIG_IMAGE_COMPRESSION_LZ4 is not set
>  CONFIG_IMAGE_COMPRESSION_LZO=y
> @@ -161,6 +176,7 @@ CONFIG_MENU=y
>  CONFIG_ERRNO_MESSAGES=y
>  CONFIG_TIMESTAMP=y
>  CONFIG_BOOTM=y
> +CONFIG_BOOT_OVERRIDE=y
>  CONFIG_BOOTM_SHOW_TYPE=y
>  CONFIG_BOOTM_VERBOSE=y
>  CONFIG_BOOTM_INITRD=y
> @@ -171,6 +187,7 @@ CONFIG_BOOTM_UIMAGE=y
>  # CONFIG_BOOTM_ELF is not set
>  CONFIG_BOOTM_FITIMAGE=y
>  # CONFIG_BOOTM_FITIMAGE_SIGNATURE is not set
> +CONFIG_BOOTM_OPTIONAL_SIGNED_IMAGES=y
>  CONFIG_BLSPEC=y
>  CONFIG_FLEXIBLE_BOOTARGS=y
>  CONFIG_MMCBLKDEV_ROOTARG=y
> @@ -249,6 +266,10 @@ CONFIG_CC_HAS_KASAN_GENERIC=y
>  # CONFIG_KASAN is not set
>  # CONFIG_COMPILE_TEST is not set
>  # CONFIG_WERROR is not set
> +
> +#
> +# arm Debugging
> +#
>  # end of Debugging
>  
>  #
> @@ -358,6 +379,7 @@ CONFIG_CMD_SHA1SUM=y
>  # CONFIG_CMD_SHA256SUM is not set
>  # CONFIG_CMD_SHA384SUM is not set
>  # CONFIG_CMD_SHA512SUM is not set
> +# CONFIG_CMD_FIPTOOL is not set
>  CONFIG_CMD_UNCOMPRESS=y
>  # end of File
>  
> @@ -561,6 +583,7 @@ CONFIG_SPI=y
>  # CONFIG_SPI_MEM is not set
>  CONFIG_DRIVER_SPI_GPIO=y
>  # CONFIG_DRIVER_SPI_LITEX_SPIFLASH is not set
> +# CONFIG_SPI_BCM2835 is not set
>  # end of SPI drivers
>  
>  CONFIG_I2C=y
> @@ -673,6 +696,7 @@ CONFIG_MCI_ERASE=y
>  #
>  # CONFIG_MCI_DWC_MSHC is not set
>  # CONFIG_MCI_DW is not set
> +# CONFIG_MCI_SUNXI_SMHC is not set
>  # CONFIG_MCI_ROCKCHIP_DWCMSHC is not set
>  # CONFIG_MCI_BCM283X is not set
>  # CONFIG_MCI_BCM283X_SDHOST is not set
> @@ -707,6 +731,7 @@ CONFIG_CLOCKSOURCE_ARM_ARCHITECTED_TIMER=y
>  # CONFIG_MFD_MC9SDZ60 is not set
>  # CONFIG_MFD_STMPE is not set
>  # CONFIG_MFD_SYSCON is not set
> +# CONFIG_MFD_TPS65219 is not set
>  # CONFIG_MFD_TWL4030 is not set
>  # CONFIG_MFD_TWL6030 is not set
>  # CONFIG_MFD_STPMIC1 is not set
> @@ -769,6 +794,7 @@ CONFIG_HWRNG=y
>  #
>  # DMA support
>  #
> +# CONFIG_DMADEVICES is not set
>  # end of DMA support
>  
>  CONFIG_GPIOLIB=y
> @@ -895,6 +921,7 @@ CONFIG_REGULATOR_BCM283X=y
>  #
>  CONFIG_FS=y
>  CONFIG_FS_LEGACY=y
> +CONFIG_FS_WRITABLE=y
>  
>  #
>  # Some selected filesystems still use the legacy FS API.
> @@ -986,7 +1013,35 @@ CONFIG_ARCH_HAS_ZERO_PAGE=y
>  #
>  # Hardening options
>  #
> +
> +#
> +# This barebox configuration has CONFIG_HAS_INSECURE_DEFAULTS=y indicating
> +#
> +
> +#
> +# that some of the configured options have potentially insecure defaults.
> +#
> +
> +#
> +# Extra care needs to be in secure booted systems.
> +#
>  # CONFIG_BUG_ON_DATA_CORRUPTION is not set
> +
> +#
> +# Memory initialization
> +#
> +CONFIG_CC_HAS_AUTO_VAR_INIT_PATTERN=y
> +CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO_BARE=y
> +CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO=y
> +# CONFIG_INIT_STACK_NONE is not set
> +# CONFIG_INIT_STACK_ALL_PATTERN is not set
> +CONFIG_INIT_STACK_ALL_ZERO=y
> +# CONFIG_INIT_ON_ALLOC_DEFAULT_ON is not set
> +# CONFIG_INIT_ON_FREE_DEFAULT_ON is not set
> +CONFIG_CC_HAS_ZERO_CALL_USED_REGS=y
> +# CONFIG_ZERO_CALL_USED_REGS is not set
> +# end of Memory initialization
> +
>  # CONFIG_STACK_GUARD_PAGE is not set
>  CONFIG_STACKPROTECTOR_NONE=y
>  # CONFIG_STACKPROTECTOR_STRONG is not set
> diff --git a/configs/platform-v7a/platformconfig b/configs/platform-v7a/platformconfig
> index 14e8a2f40fae..0ed935d55c04 100644
> --- a/configs/platform-v7a/platformconfig
> +++ b/configs/platform-v7a/platformconfig
> @@ -185,8 +185,8 @@ PTXCONF_AT91BOOTSTRAP2_MD5="ef321a80bf428bfd6cb642c96126ef6c"
>  PTXCONF_AT91BOOTSTRAP2_CONFIG="at91bootstrap-wifx-l1.config"
>  PTXCONF_BAREBOX_COMMON_ARCH_STRING="arm"
>  PTXCONF_BAREBOX_COMMON=y
> -PTXCONF_BAREBOX_COMMON_VERSION="2024.12.0"
> -PTXCONF_BAREBOX_COMMON_MD5="b9277ee0dc251b2a49de97d37ee5d365"
> +PTXCONF_BAREBOX_COMMON_VERSION="2025.03.0"
> +PTXCONF_BAREBOX_COMMON_MD5="2b84bcf8644373db021c86864f2e5761"
>  PTXCONF_BAREBOX_COMMON_NEEDS_HOST_LZOP=y
>  PTXCONF_BAREBOX_AM335X_MLO=y
>  PTXCONF_BAREBOX_AM335X=y
> -- 
> 2.39.5
> 
> 
> 

-- 
Pengutronix e.K.                           | Dipl.-Ing. Robert Schwebel  |
Steuerwalder Str. 21                       | https://www.pengutronix.de/ |
31137 Hildesheim, Germany                  | Phone: +49-5121-206917-0    |
Amtsgericht Hildesheim, HRA 2686           | Fax:   +49-5121-206917-9    |



^ permalink raw reply	[flat|nested] 4+ messages in thread

end of thread, other threads:[~2025-04-01 18:47 UTC | newest]

Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2025-04-01 12:15 [DistroKit] [PATCH 1/3] v7a: barebox: version bump v2024.12.0 → v2025.03.0 Ahmad Fatoum
2025-04-01 12:15 ` [DistroKit] [PATCH 2/3] v7a: barebox: am335x-mlo: disable MTD Ahmad Fatoum
2025-04-01 12:15 ` [DistroKit] [PATCH 3/3] v8a: barebox: update to version bump v2024.12.0 → v2025.03.0 Ahmad Fatoum
2025-04-01 18:47 ` [DistroKit] [PATCH 1/3] v7a: barebox: " Robert Schwebel

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox