diff --git a/scripts/envsetup.sh b/scripts/envsetup.sh
index dba39069..bc52d0b6 100755
--- a/scripts/envsetup.sh
+++ b/scripts/envsetup.sh
@@ -64,6 +64,7 @@ RV_LTP_OUTPUT_DIR=$RV_OUTPUT_DIR/ltp
 RV_DISTRO_DIR=$RV_TOP_DIR/distro_riscv
 RV_UBUNTU_DISTRO=ubuntu
 RV_FEDORA_DISTRO=fedora
+RV_EULER_DISTRO=euler
 
 RV_UBUNTU_OFFICIAL_IMAGE=ubuntu-22.04.3-preinstalled-server-riscv64+unmatched.img
 DOWNLOAD_RV_UBUNTU_OFFICIAL_IMAGE="wget https://cdimage.ubuntu.com/releases/22.04/release/$RV_UBUNTU_OFFICIAL_IMAGE.xz"
@@ -73,8 +74,13 @@ RV_FEDORA_OFFICIAL_IMAGE=fedora-disk-server_sophgo_sg2042-f38-20230523-014306.n.
 DOWNLOAD_RV_FEDORA_OFFICIAL_IMAGE="wget http://openkoji.iscas.ac.cn/kojifiles/work/tasks/8061/1418061/$RV_FEDORA_OFFICIAL_IMAGE.xz"
 UNCOMPRESS_RV_FEDORA_OFFICIAL_IMAGE="unxz $RV_FEDORA_OFFICIAL_IMAGE.xz"
 
+RV_EULER_OFFICIAL_IMAGE=openEuler-23.03-V1-base-sg2042-preview.img
+DOWNLOAD_RV_EULER_OFFICIAL_IMAGE="wget https://mirror.iscas.ac.cn/openeuler-sig-riscv/openEuler-RISC-V/preview/openEuler-23.03-V1-riscv64/SG2042/$RV_EULER_OFFICIAL_IMAGE.zst"
+UNCOMPRESS_RV_EULER_OFFICIAL_IMAGE="unzstd $RV_EULER_OFFICIAL_IMAGE.zst"
+
 RV_UBUNTU_SOPHGO_IMAGE=ubuntu-sophgo.img
 RV_FEDORA_SOPHGO_IMAGE=fedora-sophgo.img
+RV_EULER_SOPHGO_IMAGE=euler-sophgo.img
 
 RV_DEB_INSTALL_DIR=$RV_OUTPUT_DIR/bsp-debs
 RV_RPM_INSTALL_DIR=$RV_OUTPUT_DIR/bsp-rpms
@@ -135,21 +141,26 @@ function show_rv_functions()
 	echo "build_rv_kernel			-build linuxboot kernel"
 	echo "build_rv_ubuntu_kernel		-build ubuntu kernel"
 	echo "build_rv_fedora_kernel		-build fedora kernel"
+	echo "build_rv_euler_kernel		-build euler kernel"
 	echo "build_rv_ramfs			-build buildroot"
 	echo "build_rv_uroot			-build u-root for linuxboot"
 	echo "build_rv_ltp			-build ltp"
 	echo "build_rv_ubuntu_perf_tool     	-build ubuntu perf tool source package"
 	echo "build_rv_fedora_perf_tool     	-build fedora perf tool source package"
+	echo "build_rv_euler_perf_tool     	-build euler perf tool source package"
 	echo "build_rv_firmware                 -build firmware(zsbl,sbi,kernel,uroot,uboot,grub2)"
 	echo "build_rv_firmware_bin		-build firmware bin"
 	echo "build_rv_firmware_image		-build firmware image"
 	echo "build_rv_firmware_package 	-build firmware package"
 	echo "build_rv_ubuntu_distro		-dowload ubuntu image from offical"
 	echo "build_rv_fedora_distro		-download fedora image from offical"
+	echo "build_rv_euler_distro		-download euler image from offical"
 	echo "build_rv_ubuntu_image		-only build sophgo ubuntu image"
 	echo "build_rv_fedora_image		-only build sophgo fedora image"
+	echo "build_rv_euler_image		-only build sophgo euler image"
 	echo "build_rv_ubuntu			-build sophgo ubuntu image"
 	echo "build_rv_fedora			-build sophgo fedora image"
+	echo "build_rv_euler			-build sophgo euler image"
 	echo "build_rv_all			-build all bin and image(default: ubuntu)"
 	echo ""
 	echo "clean_rv_gcc			-clean gcc obj files"
@@ -160,6 +171,7 @@ function show_rv_functions()
 	echo "clean_rv_kernel			-clean linuxboot kernel obj files"
 	echo "clean_rv_ubuntu_kernel		-clean ubuntu kernel obj files"
 	echo "clean_rv_fedora_kernel		-clean fedora kernel obj files"
+	echo "clean_rv_euler_kernel		-clean euler kernel obj files"
 	echo "clean_rv_ramfs			-clean buildroot obj files"
 	echo "clean_rv_uroot			-clean uroot obj files"
 	echo "clean_rv_ltp			-clean ltp obj files"
@@ -171,8 +183,10 @@ function show_rv_functions()
 	echo "clean_rv_firmware_package 	-clean firmware package"
 	echo "clean_rv_ubuntu_distro		-clean ubuntu image"
 	echo "clean_rv_fedora_distro		-clean fedora image"
+	echo "clean_rv_euler_distro		-clean fedora image"
 	echo "clean_rv_ubuntu_image		-clean ubuntu image"
 	echo "clean_rv_fedora_image		-clean fedora image"
+	echo "clean_rv_euler_image		-clean euler image"
 	echo "clean_rv_ubuntu			-clean ubuntu image"
 	echo "clean_rv_fedora			-clean feodra image"
 	echo "clean_rv_all			-clean all bin and image(default: ubuntu)"
@@ -556,6 +570,69 @@ EOT
 	popd
 }
 
+function build_rv_euler_kernel()
+{
+	local RV_KERNEL_CONFIG=${VENDOR}_${CHIP}_euler_defconfig
+	local err
+
+	pushd $RV_KERNEL_SRC_DIR
+	make ARCH=riscv CROSS_COMPILE=$RISCV64_LINUX_CROSS_COMPILE $RV_KERNEL_CONFIG
+	err=$?
+	if [ $err -ne 0 ]; then
+		echo "making kernel config failed"
+		popd
+		return $err
+	fi
+
+	if [ "$CHIP_NUM" = "multi" ];then
+		sed -i 's/# CONFIG_SOPHGO_MULTI_CHIP_CLOCK_SYNC is not set/CONFIG_SOPHGO_MULTI_CHIP_CLOCK_SYNC=y/' .config
+	fi
+
+	if [ -e ~/.rpmmacros ]; then
+		mv ~/.rpmmacros ~/.rpmmacros.orig
+	fi
+
+# following lines must not be started with space or tab.
+cat >> ~/.rpmmacros << "EOT"
+%_build_name_fmt        %%{ARCH}/%%{NAME}-%%{VERSION}.%%{ARCH}.rpm
+EOT
+
+	make -j$(nproc) ARCH=riscv CROSS_COMPILE=$RISCV64_LINUX_CROSS_COMPILE LOCALVERSION="" rpm-pkg
+	ret=$?
+	rm ~/.rpmmacros
+	if [ -e ~/.rpmmacros.orig ]; then
+		mv ~/.rpmmacros.orig ~/.rpmmacros
+	fi
+	if [ $ret -ne 0 ]; then
+		echo "making rpm package failed"
+		make ARCH=riscv CROSS_COMPILE=$RISCV64_LINUX_CROSS_COMPILE distclean
+		rm kernel-[0-9]*.tar.gz
+		rm -rf $HOME/rpmbuild
+		popd
+		return $ret
+	fi
+
+	if [ ! -d $RV_RPM_INSTALL_DIR ]; then
+		mkdir -p $RV_RPM_INSTALL_DIR
+	else
+		rm -f $RV_RPM_INSTALL_DIR/kernel-*.rpm
+	fi
+
+	cp $HOME/rpmbuild/RPMS/riscv64/*.rpm $RV_RPM_INSTALL_DIR/
+	make ARCH=riscv CROSS_COMPILE=$RISCV64_LINUX_CROSS_COMPILE distclean
+	rm kernel-[0-9]*.tar.gz
+	rm -rf $HOME/rpmbuild
+	popd
+}
+
+function clean_rv_euler_kernel()
+{
+	pushd $RV_KERNEL_SRC_DIR
+	make distclean
+	popd
+	rm -f $RV_RPM_INSTALL_DIR/kernel-*.rpm
+}
+
 function clean_rv_fedora_kernel()
 {
 	pushd $RV_KERNEL_SRC_DIR
@@ -648,6 +725,23 @@ function clean_rv_fedora_distro()
 	rm $RV_DISTRO_DIR/$RV_FEDORA_DISTRO/$RV_FEDORA_OFFICIAL_IMAGE
 }
 
+function build_rv_euler_distro()
+{
+	mkdir -p $RV_DISTRO_DIR/$RV_EULER_DISTRO
+
+	pushd $RV_DISTRO_DIR/$RV_EULER_DISTRO
+	if [ ! -f $RV_EULER_OFFICIAL_IMAGE ] ; then
+		$DOWNLOAD_RV_EULER_OFFICIAL_IMAGE
+		$UNCOMPRESS_RV_EULER_OFFICIAL_IMAGE
+	fi
+	popd
+}
+
+function clean_rv_euler_distro()
+{
+	rm $RV_DISTRO_DIR/$RV_EULER_DISTRO/$RV_EULER_OFFICIAL_IMAGE
+}
+
 function build_rv_ubuntu_image()
 {
 	echo build_rv_ubuntu_image
@@ -749,6 +843,125 @@ function clean_rv_ubuntu_image()
 	rm -f $RV_OUTPUT_DIR/$RV_UBUNTU_SOPHGO_IMAGE
 }
 
+function build_rv_euler_image()
+{
+	echo build_rv_euler_image
+	echo create an image file...
+	rm -f $RV_OUTPUT_DIR/$RV_EULER_SOPHGO_IMAGE
+	dd if=/dev/zero of=$RV_OUTPUT_DIR/$RV_EULER_SOPHGO_IMAGE bs=1GiB count=10
+
+	echo create partitions...
+	sudo parted $RV_OUTPUT_DIR/$RV_EULER_SOPHGO_IMAGE mktable msdos
+	sudo parted $RV_OUTPUT_DIR/$RV_EULER_SOPHGO_IMAGE mkpart p fat32 0% 256MiB
+	sudo parted $RV_OUTPUT_DIR/$RV_EULER_SOPHGO_IMAGE mkpart p ext4 256MiB 100%
+	loops=$(sudo kpartx -av $RV_OUTPUT_DIR/$RV_EULER_SOPHGO_IMAGE | cut -d ' ' -f 3)
+	efi_part=$(echo $loops | cut -d ' ' -f 1)
+	root_part=$(echo $loops | cut -d ' ' -f 2)
+	sleep 3
+	sudo mkfs.vfat /dev/mapper/$efi_part -n EFI
+	sudo mkfs.ext4 /dev/mapper/$root_part
+
+	echo copy bootloader...
+	mkdir $RV_OUTPUT_DIR/efi
+	sudo mount /dev/mapper/$efi_part $RV_OUTPUT_DIR/efi
+	sudo mkdir -p $RV_OUTPUT_DIR/efi/riscv64
+
+	sudo cp $RV_FIRMWARE/fip.bin $RV_OUTPUT_DIR/efi/
+	sudo cp $RV_FIRMWARE_INSTALL_DIR/zsbl.bin $RV_OUTPUT_DIR/efi/
+	# sudo cp $RV_FIRMWARE_INSTALL_DIR/grub.cfg $RV_OUTPUT_DIR/efi/
+	# sudo cp $RV_FIRMWARE_INSTALL_DIR/grubriscv64.efi $RV_OUTPUT_DIR/efi/
+	sudo cp $RV_FIRMWARE_INSTALL_DIR/fw_dynamic.bin $RV_OUTPUT_DIR/efi/riscv64
+	sudo cp $RV_FIRMWARE_INSTALL_DIR/riscv64_Image $RV_OUTPUT_DIR/efi/riscv64
+	# sudo cp $RV_FIRMWARE_INSTALL_DIR/u-boot.bin $RV_OUTPUT_DIR/efi/riscv64
+	sudo cp $RV_FIRMWARE_INSTALL_DIR/*.dtb $RV_OUTPUT_DIR/efi/riscv64
+	sudo cp $RV_FIRMWARE_INSTALL_DIR/initrd.img $RV_OUTPUT_DIR/efi/riscv64
+	sudo touch $RV_OUTPUT_DIR/efi/BOOT
+
+	echo copy euler...
+	loops=$(sudo kpartx -av $RV_DISTRO_DIR/$RV_EULER_DISTRO/$RV_EULER_OFFICIAL_IMAGE | cut -d ' ' -f 3)
+	euler_root_part=$(echo $loops | cut -d ' ' -f 3)
+	echo ============ rootfs $euler_root_part
+	sudo dd if=/dev/mapper/$euler_root_part of=/dev/mapper/$root_part bs=256M status=progress
+	sudo e2fsck -f -y /dev/mapper/$root_part
+	sudo resize2fs /dev/mapper/$root_part
+	sudo e2label /dev/mapper/$root_part ROOT
+
+	echo mount root partition...
+	mkdir $RV_OUTPUT_DIR/root
+	sudo mount /dev/mapper/$root_part $RV_OUTPUT_DIR/root
+
+	sudo mount --bind /proc $RV_OUTPUT_DIR/root/proc
+	sudo mount --bind /sys $RV_OUTPUT_DIR/root/sys
+	sudo mount --bind /dev $RV_OUTPUT_DIR/root/dev
+	sudo mount --bind /dev/pts $RV_OUTPUT_DIR/root/dev/pts
+	sudo mount --bind /run/ 	$RV_OUTPUT_DIR/root/run
+	sudo mv $RV_OUTPUT_DIR/root/etc/hosts $RV_OUTPUT_DIR/root/etc/hosts-bak
+	sudo cp /etc/hosts $RV_OUTPUT_DIR/root/etc/
+	#echo add user euler:Sophgo12#
+# following lines must not be started with space or tab.
+
+# following lines must not be started with space or tab.
+	echo copy bsp package...
+	sudo cp -r $RV_RPM_INSTALL_DIR $RV_OUTPUT_DIR/root/home/
+
+	echo install linux image...
+# following lines must not be started with space or tab.
+sudo chroot $RV_OUTPUT_DIR/root /bin/env ROOT_PART="$root_part" /bin/bash << "EOT"
+echo install dracut
+echo "y" | dnf install dracut
+rm -rf /lib/dracut/dracut.conf.d/99-initramfs.conf
+echo install kernel
+rpm -ivh --force /home/bsp-rpms/kernel-[0-9]*.riscv64.rpm
+
+# The following command is to solve the problem of not updating the extlinux.conf file when installing kernel RPM package.
+kernel_version=`ls /home/bsp-rpms/kernel-[0-9]*.riscv64.rpm | cut -d '-' -f 3 | cut -d '.' -f 1-3`
+mv /boot/extlinux/extlinux.conf /boot/extlinux/extlinux.conf_bak
+cat > /boot/extlinux/extlinux.conf << EOF
+## /boot/extlinux/extlinux.conf
+
+default euler_sophgo
+menu title linuxboot menu
+prompt 0
+timeout 50
+
+label euler_sophgo
+	menu label euler Sophgo in SD
+	linux /boot/vmlinuz-$kernel_version
+	initrd /boot/initramfs-$kernel_version.img
+	append  console=ttyS0,115200 root=LABEL=ROOT rootfstype=ext4 rootwait rw earlycon selinux=0 LANG=en_US.UTF-8 nvme.use_threaded_interrupts=1 nvme_core.io_timeout=3000 
+EOF
+
+exit
+
+EOT
+	popd
+
+	echo cleanup...
+	sync
+	sleep 60
+	sudo rm $RV_OUTPUT_DIR/root/etc/hosts
+	sudo mv $RV_OUTPUT_DIR/root/etc/hosts-bak $RV_OUTPUT_DIR/root/etc/hosts
+	sudo umount $RV_OUTPUT_DIR/root/run
+	sudo umount $RV_OUTPUT_DIR/root/proc
+	sudo umount $RV_OUTPUT_DIR/root/sys
+	sudo umount $RV_OUTPUT_DIR/root/dev/pts
+	sudo umount $RV_OUTPUT_DIR/root/dev
+	sudo umount /dev/mapper/$efi_part
+	sudo umount /dev/mapper/$root_part
+	sudo kpartx -d $RV_OUTPUT_DIR/$RV_EULER_SOPHGO_IMAGE
+	sudo kpartx -d $RV_DISTRO_DIR/$RV_EULER_DISTRO/$RV_EULER_OFFICIAL_IMAGE
+	sudo rm -r $RV_OUTPUT_DIR/efi
+	#sudo umount $RV_OUTPUT_DIR/root
+	sudo rm -r $RV_OUTPUT_DIR/root
+
+	echo "build euler image successfully!"
+}
+
+function clean_rv_euler_image()
+{
+	rm -rf $RV_OUTPUT_DIR/$RV_EULER_SOPHGO_IMAGE
+}
+
 function build_rv_fedora_image()
 {
 	echo build_rv_fedora_image
@@ -926,6 +1139,16 @@ function clean_rv_fedora_perf_tool()
 	echo "clean_rv_fedora_perf_tool is not implemented"
 }
 
+function build_rv_euler_perf_tool()
+{
+	echo "build_rv_euler_perf_tool is not implemented"
+}
+
+function clean_rv_euler_perf_tool()
+{
+	echo "clean_rv_euler_perf_tool is not implemented"
+}
+
 function build_rv_firmware()
 {
 	build_rv_zsbl
@@ -954,6 +1177,7 @@ function clean_rv_firmware()
 
 function build_rv_firmware_bin()
 {
+	version=$(date "+%Y%m%d%H%M%S")
 	build_rv_firmware
 
 	gcc -g -Werror $RV_SCRIPTS_DIR/gen_spi_flash.c -o $RV_FIRMWARE_INSTALL_DIR/gen_spi_flash
@@ -970,9 +1194,13 @@ function build_rv_firmware_bin()
 			initrd.img initrd.img 0x30000000 \
 			zsbl.bin zsbl.bin 0x40000000
 
-	mv spi_flash.bin firmware.bin
+	mv spi_flash.bin firmware-$version.bin
 	rm -f gen_spi_flash
 
+	cp firmware-$version.bin image-bmc
+	$RV_SCRIPTS_DIR/gen-tar-for-bmc.sh image-bmc -o obmc-bios.tar.gz -m ast2600-sophgo -v $version -s
+	rm -f image-bmc
+
 	popd
 }
 
@@ -1129,6 +1357,22 @@ function clean_rv_fedora()
 	clean_rv_fedora_image
 }
 
+function build_rv_euler()
+{
+	build_rv_euler_kernel
+	build_rv_euler_perf_tool
+	build_rv_euler_distro
+	build_rv_euler_image
+}
+
+function clean_rv_euler()
+{
+	clean_rv_euler_kernel
+	clean_rv_euler_perf_tool
+	clean_rv_euler_distro
+	clean_rv_euler_image
+}
+
 function build_rv_all()
 {
 	build_rv_firmware_bin
diff --git a/scripts/gen-tar-for-bmc.sh b/scripts/gen-tar-for-bmc.sh
new file mode 100755
index 00000000..a82a8433
--- /dev/null
+++ b/scripts/gen-tar-for-bmc.sh
@@ -0,0 +1,176 @@
+#!/bin/bash
+set -eo pipefail
+
+help=$(cat <<EOF
+Generate Tarball with Bios image and MANIFEST Script
+
+Generates a Bios image tarball from given file as input.
+Creates a MANIFEST for image verification and recreation
+Packages the image and MANIFEST together in a tarball
+
+usage: gen-bios-tar [OPTION] <Bios FILE>...
+
+Options:
+   -o, --out <file>       Specify destination file. Defaults to
+                          $(pwd)/obmc-bios.tar.gz if unspecified.
+   -s, --sign <path>      Sign the image. The optional path argument specifies
+                          the private key file. Defaults to the bash variable
+                          PRIVATE_KEY_PATH if available, or else uses the
+                          open-source private key in this script.
+   -m, --machine <name>   Optionally specify the target machine name of this
+                          image.
+   -v, --version <name>   Specify the version of bios image file
+   -h, --help             Display this help text and exit.
+EOF
+)
+
+#################################################################
+# It's the OpenBMC "public" private key (currently under
+# meta-phosphor/recipes-phosphor/flash/files/OpenBMC.priv):
+# https://gerrit.openbmc-project.xyz/c/openbmc/openbmc/+/8949/15/
+# meta-phosphor/common/recipes-phosphor/flash/files/OpenBMC.priv
+#
+#################################################################
+private_key=$'-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
+'
+
+do_sign=false
+PRIVATE_KEY_PATH=${PRIVATE_KEY_PATH:-}
+private_key_path="${PRIVATE_KEY_PATH}"
+outfile=""
+machine=""
+version=""
+
+while [[ $# -gt 0 ]]; do
+  key="$1"
+  case $key in
+    -o|--out)
+      outfile="$2"
+      shift 2
+      ;;
+    -s|--sign)
+      do_sign=true
+      if [[ -n "${2}"  && "${2}" != -* ]]; then
+        private_key_path="$2"
+        shift 2
+      else
+        shift 1
+      fi
+      ;;
+    -m|--machine)
+      machine="$2"
+      shift 2
+      ;;
+    -v|--version)
+      version="$2"
+      shift 2
+      ;;
+    -h|--help)
+      echo "$help"
+      exit
+      ;;
+    -*)
+      echo "Unrecognised option $1"
+      echo "$help"
+      exit
+      ;;
+    *)
+      file="$1"
+      shift 1
+      ;;
+  esac
+done
+
+if [ ! -f "${file}" ]; then
+  echo "${file} not found, Please enter a valid Bios image file"
+  echo "$help"
+  exit 1
+fi
+
+if [[ -z $version ]]; then
+  echo "Please provide version of image with -v option"
+  exit 1
+fi
+
+if [[ -z $outfile ]]; then
+  outfile=$(pwd)/obmc-bios.tar.gz
+else
+  if [[ $outfile != /* ]]; then
+    outfile=$(pwd)/$outfile
+  fi
+fi
+
+scratch_dir=$(mktemp -d)
+# Remove the temp directory on exit.
+# The files in the temp directory may contain read-only files, so add
+# --interactive=never to skip the prompt.
+trap '{ rm -r --interactive=never ${scratch_dir}; }' EXIT
+
+if [[ "${do_sign}" == true ]]; then
+  if [[ -z "${private_key_path}" ]]; then
+    private_key_path=${scratch_dir}/OpenBMC.priv
+    echo "${private_key}" > "${private_key_path}"
+    echo "Image is NOT secure!! Signing with the open private key!"
+  else
+    if [[ ! -f "${private_key_path}" ]]; then
+      echo "Couldn't find private key ${private_key_path}."
+      exit 1
+    fi
+
+    echo "Signing with ${private_key_path}."
+  fi
+
+  public_key_file=publickey
+  public_key_path=${scratch_dir}/$public_key_file
+  openssl pkey -in "${private_key_path}" -pubout -out "${public_key_path}"
+fi
+
+manifest_location="MANIFEST"
+files_to_sign="$manifest_location $public_key_file"
+
+# Go to scratch_dir
+cp "${file}" "${scratch_dir}"
+cd "${scratch_dir}"
+files_to_sign+=" $(basename "${file}")"
+
+echo "Creating MANIFEST for the image"
+echo -e "purpose=xyz.openbmc_project.Software.Version.VersionPurpose.Host\n\
+version=$version" > $manifest_location
+
+if [[ -n "${machine}" ]]; then
+    echo -e "MachineName=${machine}" >> $manifest_location
+fi
+
+if [[ "${do_sign}" == true ]]; then
+  private_key_name=$(basename "${private_key_path}")
+  key_type="${private_key_name%.*}"
+  echo KeyType="${key_type}" >> $manifest_location
+  echo HashType="RSA-SHA256" >> $manifest_location
+
+  for file in $files_to_sign; do
+    openssl dgst -sha256 -sign "${private_key_path}" -out "${file}.sig" "$file"
+  done
+
+  additional_files="*.sig"
+fi
+
+# shellcheck disable=SC2086
+# Do not quote the files variables since they list multiple files
+# and tar would assume to be a single file name within quotes
+tar -czvf $outfile $files_to_sign $additional_files
+echo "Bios image tarball is at $outfile"