Hi all,
Sorry my noob question but I would like to clarify something. The steps detailed in the 'Signing the coreboot Image' section from https://doc.coreboot.org/security/vboot/index.html are already integrated in the coreboot.rom building process? Now I can see the steps:
CREATE GBB (without BMPFV) successfully created new GBB to: build/gbb.stub.tmp SETUP GBB - import root_key from root_key.vbpubk: success - import recovery_key from recovery_key.vbpubk: success successfully saved new image to: build/gbb.region.tmp WRITE GBB W: Written area will abut bottom of target region: any unused space will keep its current contents FLASHMAP Layout generated for RO and A partition.
at the end of the building process.
Thanks! Jorge