[Buildroot] [PATCH 1/4] configs/aspeed_ast2500evb: check hashes, use bootlin toolchain

[Cédric Le Goater]

This commit adds BR2_DOWNLOAD_FORCE_CHECK_HASHES=y and
BR2_TOOLCHAIN_EXTERNAL_BOOTLIN_ARMV6_EABIHF_GLIBC_STABLE=y in the
defconfig, bumps kernel to 6.16.7, and adds custom hash files and
removes the exception entry in .checkpackageignore.

Signed-off-by: Cédric Le Goater <clg at kaod.org>
---
 .checkpackageignore                                       | 1 -
 .../ast2500-evb/patches/linux-headers/linuux-headers.hash | 2 ++
 board/aspeed/ast2500-evb/patches/linux/linux.hash         | 2 ++
 board/aspeed/ast2500-evb/patches/uboot/uboot.hash         | 2 ++
 configs/aspeed_ast2500evb_defconfig                       | 8 ++++++--
 5 files changed, 12 insertions(+), 3 deletions(-)
 create mode 100644 board/aspeed/ast2500-evb/patches/linux-headers/linuux-headers.hash
 create mode 100644 board/aspeed/ast2500-evb/patches/linux/linux.hash
 create mode 100644 board/aspeed/ast2500-evb/patches/uboot/uboot.hash

diff --git a/.checkpackageignore b/.checkpackageignore
index 12d11f677bee..d100a165effb 100644
--- a/.checkpackageignore
+++ b/.checkpackageignore
@@ -87,7 +87,6 @@ configs/am574x_idk_defconfig lib_defconfig.ForceCheckHash
 configs/andes_ae350_45_defconfig lib_defconfig.ForceCheckHash
 configs/arcturus_ucls1012a_defconfig lib_defconfig.ForceCheckHash
 configs/arcturus_ucp1020_defconfig lib_defconfig.ForceCheckHash
-configs/aspeed_ast2500evb_defconfig lib_defconfig.ForceCheckHash
 configs/aspeed_ast2600evb_defconfig lib_defconfig.ForceCheckHash
 configs/asus_tinker-s_rk3288_defconfig lib_defconfig.ForceCheckHash
 configs/asus_tinker_rk3288_defconfig lib_defconfig.ForceCheckHash
diff --git a/board/aspeed/ast2500-evb/patches/linux-headers/linuux-headers.hash b/board/aspeed/ast2500-evb/patches/linux-headers/linuux-headers.hash
new file mode 100644
index 000000000000..e1da9b309e7c
--- /dev/null
+++ b/board/aspeed/ast2500-evb/patches/linux-headers/linuux-headers.hash
@@ -0,0 +1,2 @@
+# From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
+sha256  5be3daa1f9427b1bdb34c4894d9c1adfac38cff674376fe0611a3065729a1a81  linux-6.16.7.tar.xz
diff --git a/board/aspeed/ast2500-evb/patches/linux/linux.hash b/board/aspeed/ast2500-evb/patches/linux/linux.hash
new file mode 100644
index 000000000000..e1da9b309e7c
--- /dev/null
+++ b/board/aspeed/ast2500-evb/patches/linux/linux.hash
@@ -0,0 +1,2 @@
+# From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
+sha256  5be3daa1f9427b1bdb34c4894d9c1adfac38cff674376fe0611a3065729a1a81  linux-6.16.7.tar.xz
diff --git a/board/aspeed/ast2500-evb/patches/uboot/uboot.hash b/board/aspeed/ast2500-evb/patches/uboot/uboot.hash
new file mode 100644
index 000000000000..0bfbf306ffb0
--- /dev/null
+++ b/board/aspeed/ast2500-evb/patches/uboot/uboot.hash
@@ -0,0 +1,2 @@
+# Locally calculated
+sha256  81b4543227db228c03f8a1bf5ddbc813b0bb8f6555ce46064ef721a6fc680413  u-boot-2022.01.tar.bz2
diff --git a/configs/aspeed_ast2500evb_defconfig b/configs/aspeed_ast2500evb_defconfig
index 64666cc3d704..ca6a1ef3d38e 100644
--- a/configs/aspeed_ast2500evb_defconfig
+++ b/configs/aspeed_ast2500evb_defconfig
@@ -1,12 +1,16 @@
 BR2_arm=y
-BR2_PACKAGE_HOST_LINUX_HEADERS_CUSTOM_6_16=y
+BR2_TOOLCHAIN_EXTERNAL=y
+BR2_TOOLCHAIN_EXTERNAL_BOOTLIN=y
+BR2_TOOLCHAIN_EXTERNAL_BOOTLIN_ARMV6_EABIHF_GLIBC_STABLE=y
+BR2_DOWNLOAD_FORCE_CHECK_HASHES=y
+BR2_GLOBAL_PATCH_DIR="board/aspeed/ast2500-evb/patches"
 BR2_TARGET_GENERIC_HOSTNAME="ast2500-evb"
 BR2_TARGET_GENERIC_ISSUE="Aspeed AST2500 EVB"
 BR2_SYSTEM_DHCP="eth0"
 BR2_ROOTFS_POST_IMAGE_SCRIPT="board/aspeed/common/post-image.sh"
 BR2_LINUX_KERNEL=y
 BR2_LINUX_KERNEL_CUSTOM_VERSION=y
-BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.16.4"
+BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.16.7"
 BR2_LINUX_KERNEL_DEFCONFIG="aspeed_g5"
 BR2_LINUX_KERNEL_CONFIG_FRAGMENT_FILES="board/aspeed/ast2500-evb/linux.fragment"
 BR2_LINUX_KERNEL_XZ=y
-- 
2.51.0