west: runners: Add ncs-provision to west flash command

Added automatic KMU key provisioning, when keyfile.json
file exists in the build directory.
This enables automated key provisioning during the
flashing process to enable testing nRF54L aplications using Twister.
Only applicable on nrfutil runner.

Signed-off-by: Grzegorz Chwierut <[email protected]>

Author: gchwier

scripts/west_commands/runners/nrf_common.py

@@ -97,6 +97,7 @@ def __init__(self, cfg, family, softreset, pinreset, dev_id, erase=False,
 
         # Only applicable for nrfutil
         self.suit_starter = False
+        self.ncs_provision = False
 
         self.tool_opt = []
         if tool_opt is not None:
@@ -468,6 +469,13 @@ def program_hex(self):
         if self.build_conf.get('CONFIG_SOC_NRF54H20_IRON') and core == "Network":
             core = "Application"
 
+        if self.erase or self.recover:
+            # provision keys if keyfile.json exists in the build directory
+            keyfile = Path(self.cfg.build_dir).parent / 'keyfile.json'
+            if keyfile.exists():
+                self.logger.info(f'Provisioning key file: {keyfile}')
+                self.exec_op('x-provision-keys', keyfile=str(keyfile), defer=True)
+
         self.op_program(self.hex_, erase_arg, ext_mem_erase_opt, defer=True, core=core)
         self.flush(force=False)
 
@@ -542,6 +550,9 @@ def do_exec_op(self, op, force=False):
             Throws subprocess.CalledProcessError with the appropriate
             returncode if a failure arises.'''
 
+    def do_ncs_provision(self):
+        ''' Provision default keys. Only applicable for nrfutil '''
+
     def flush_ops(self, force=True):
         ''' Execute any remaining ops in the self.ops array.
             Throws subprocess.CalledProcessError with the appropriate
@@ -589,6 +600,8 @@ def do_run(self, command, **kwargs):
         if self.recover:
             self.recover_target()
         self.program_hex()
+        if self.ncs_provision:
+            self.do_ncs_provision()
         if self.reset:
             self.reset_target()
         # All done, now flush any outstanding ops

scripts/west_commands/runners/nrfutil.py

@@ -147,6 +147,8 @@ def _append_batch(self, op, json_file):
             cmd += ['--reset-kind', _op['kind']]
         elif op_type == 'erase':
             cmd.append(f'--{_op["kind"]}')
+        elif op_type == 'x-provision-keys':
+            cmd += ['--key-file', _op['keyfile']]
 
         cmd += ['--core', op['core']] if op.get('core') else []
         cmd += ['--x-family', f'{self.family}']