* [PATCH 1/3] initramfs-tee-ftpm-hook: Add missing optee module
2025-10-25 9:37 [PATCH 0/3] initramfs-tee-ftpm-hook fix and optimizations 'Jan Kiszka' via isar-users
@ 2025-10-25 9:37 ` 'Jan Kiszka' via isar-users
2025-10-25 9:37 ` [PATCH 2/3] initramfs-tee-ftpm-hook: Use override to model variations 'Jan Kiszka' via isar-users
` (2 subsequent siblings)
3 siblings, 0 replies; 5+ messages in thread
From: 'Jan Kiszka' via isar-users @ 2025-10-25 9:37 UTC (permalink / raw)
To: isar-users
From: Jan Kiszka <jan.kiszka@siemens.com>
tpm_ftpm_tee only pulls in the TEE core, not the actual interface
drivers. Pull them all (based on kernel 6.18).
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>
---
.../initramfs-tee-ftpm-hook/initramfs-tee-ftpm-hook_0.3.bb | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/meta/recipes-initramfs/initramfs-tee-ftpm-hook/initramfs-tee-ftpm-hook_0.3.bb b/meta/recipes-initramfs/initramfs-tee-ftpm-hook/initramfs-tee-ftpm-hook_0.3.bb
index d430661d..c2fe62c5 100644
--- a/meta/recipes-initramfs/initramfs-tee-ftpm-hook/initramfs-tee-ftpm-hook_0.3.bb
+++ b/meta/recipes-initramfs/initramfs-tee-ftpm-hook/initramfs-tee-ftpm-hook_0.3.bb
@@ -15,5 +15,5 @@ SRC_URI += "file://local-top"
TEE_SUPPLICANT_IN_USERLAND ?= "1"
HOOK_PREREQ = "${@'tee-supplicant' if bb.utils.to_boolean(d.getVar('TEE_SUPPLICANT_IN_USERLAND')) else ''}"
-HOOK_ADD_MODULES = "tpm_ftpm_tee"
+HOOK_ADD_MODULES = "amdtee arm-tstee optee qcomtee tpm_ftpm_tee"
SCRIPT_PREREQ = "${@'tee-supplicant' if bb.utils.to_boolean(d.getVar('TEE_SUPPLICANT_IN_USERLAND')) else ''}"
--
2.51.0
--
You received this message because you are subscribed to the Google Groups "isar-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/isar-users/904c5379330499a2558498aab7fd58a475b4ff92.1761385036.git.jan.kiszka%40siemens.com.
^ permalink raw reply [flat|nested] 5+ messages in thread* [PATCH 2/3] initramfs-tee-ftpm-hook: Use override to model variations
2025-10-25 9:37 [PATCH 0/3] initramfs-tee-ftpm-hook fix and optimizations 'Jan Kiszka' via isar-users
2025-10-25 9:37 ` [PATCH 1/3] initramfs-tee-ftpm-hook: Add missing optee module 'Jan Kiszka' via isar-users
@ 2025-10-25 9:37 ` 'Jan Kiszka' via isar-users
2025-10-25 9:37 ` [PATCH 3/3] initramfs-tee-ftpm-hook: Skip local-top hook without userland supplicant 'Jan Kiszka' via isar-users
2025-10-29 7:54 ` [PATCH 0/3] initramfs-tee-ftpm-hook fix and optimizations Zhihang Wei
3 siblings, 0 replies; 5+ messages in thread
From: 'Jan Kiszka' via isar-users @ 2025-10-25 9:37 UTC (permalink / raw)
To: isar-users
From: Jan Kiszka <jan.kiszka@siemens.com>
Less code, specifically when adding more bits under
TEE_SUPPLICANT_IN_USERLAND control.
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>
---
.../initramfs-tee-ftpm-hook/initramfs-tee-ftpm-hook_0.3.bb | 6 ++++--
1 file changed, 4 insertions(+), 2 deletions(-)
diff --git a/meta/recipes-initramfs/initramfs-tee-ftpm-hook/initramfs-tee-ftpm-hook_0.3.bb b/meta/recipes-initramfs/initramfs-tee-ftpm-hook/initramfs-tee-ftpm-hook_0.3.bb
index c2fe62c5..0a7cd560 100644
--- a/meta/recipes-initramfs/initramfs-tee-ftpm-hook/initramfs-tee-ftpm-hook_0.3.bb
+++ b/meta/recipes-initramfs/initramfs-tee-ftpm-hook/initramfs-tee-ftpm-hook_0.3.bb
@@ -14,6 +14,8 @@ SRC_URI += "file://local-top"
# NOTE: default will eventually be flipped
TEE_SUPPLICANT_IN_USERLAND ?= "1"
-HOOK_PREREQ = "${@'tee-supplicant' if bb.utils.to_boolean(d.getVar('TEE_SUPPLICANT_IN_USERLAND')) else ''}"
+OVERRIDES .= "${@'supp-user' if bb.utils.to_boolean(d.getVar('TEE_SUPPLICANT_IN_USERLAND')) else ''}"
+
+HOOK_PREREQ:supp-user = "tee-supplicant"
HOOK_ADD_MODULES = "amdtee arm-tstee optee qcomtee tpm_ftpm_tee"
-SCRIPT_PREREQ = "${@'tee-supplicant' if bb.utils.to_boolean(d.getVar('TEE_SUPPLICANT_IN_USERLAND')) else ''}"
+SCRIPT_PREREQ:supp-user = "tee-supplicant"
--
2.51.0
--
You received this message because you are subscribed to the Google Groups "isar-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/isar-users/44f1cf083998769d2d18183e9bd2baa5d45af0e4.1761385036.git.jan.kiszka%40siemens.com.
^ permalink raw reply [flat|nested] 5+ messages in thread* [PATCH 3/3] initramfs-tee-ftpm-hook: Skip local-top hook without userland supplicant
2025-10-25 9:37 [PATCH 0/3] initramfs-tee-ftpm-hook fix and optimizations 'Jan Kiszka' via isar-users
2025-10-25 9:37 ` [PATCH 1/3] initramfs-tee-ftpm-hook: Add missing optee module 'Jan Kiszka' via isar-users
2025-10-25 9:37 ` [PATCH 2/3] initramfs-tee-ftpm-hook: Use override to model variations 'Jan Kiszka' via isar-users
@ 2025-10-25 9:37 ` 'Jan Kiszka' via isar-users
2025-10-29 7:54 ` [PATCH 0/3] initramfs-tee-ftpm-hook fix and optimizations Zhihang Wei
3 siblings, 0 replies; 5+ messages in thread
From: 'Jan Kiszka' via isar-users @ 2025-10-25 9:37 UTC (permalink / raw)
To: isar-users
From: Jan Kiszka <jan.kiszka@siemens.com>
When the in-kernel RPMB supplicant is used, there is no need to await
the fTPM appearance, the kernel takes care of it.
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>
---
.../initramfs-tee-ftpm-hook/initramfs-tee-ftpm-hook_0.3.bb | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/meta/recipes-initramfs/initramfs-tee-ftpm-hook/initramfs-tee-ftpm-hook_0.3.bb b/meta/recipes-initramfs/initramfs-tee-ftpm-hook/initramfs-tee-ftpm-hook_0.3.bb
index 0a7cd560..94399374 100644
--- a/meta/recipes-initramfs/initramfs-tee-ftpm-hook/initramfs-tee-ftpm-hook_0.3.bb
+++ b/meta/recipes-initramfs/initramfs-tee-ftpm-hook/initramfs-tee-ftpm-hook_0.3.bb
@@ -8,14 +8,14 @@
require recipes-initramfs/initramfs-hook/hook.inc
-SRC_URI += "file://local-top"
-
# Can be disabled with kernel 6.12 and above
# NOTE: default will eventually be flipped
TEE_SUPPLICANT_IN_USERLAND ?= "1"
OVERRIDES .= "${@'supp-user' if bb.utils.to_boolean(d.getVar('TEE_SUPPLICANT_IN_USERLAND')) else ''}"
+SRC_URI:supp-user += "file://local-top"
+
HOOK_PREREQ:supp-user = "tee-supplicant"
HOOK_ADD_MODULES = "amdtee arm-tstee optee qcomtee tpm_ftpm_tee"
SCRIPT_PREREQ:supp-user = "tee-supplicant"
--
2.51.0
--
You received this message because you are subscribed to the Google Groups "isar-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/isar-users/bc2b163a0498cf36ad76067bbd6ec6bf1e51c253.1761385036.git.jan.kiszka%40siemens.com.
^ permalink raw reply [flat|nested] 5+ messages in thread* Re: [PATCH 0/3] initramfs-tee-ftpm-hook fix and optimizations
2025-10-25 9:37 [PATCH 0/3] initramfs-tee-ftpm-hook fix and optimizations 'Jan Kiszka' via isar-users
` (2 preceding siblings ...)
2025-10-25 9:37 ` [PATCH 3/3] initramfs-tee-ftpm-hook: Skip local-top hook without userland supplicant 'Jan Kiszka' via isar-users
@ 2025-10-29 7:54 ` Zhihang Wei
3 siblings, 0 replies; 5+ messages in thread
From: Zhihang Wei @ 2025-10-29 7:54 UTC (permalink / raw)
To: Jan Kiszka, isar-users
Applied to next, thanks.
Best regards,
Zhihang
On 10/25/25 11:37, 'Jan Kiszka' via isar-users wrote:
> Fix for modular optee and minor optimization.
>
> Jan
>
> Jan Kiszka (3):
> initramfs-tee-ftpm-hook: Add missing optee module
> initramfs-tee-ftpm-hook: Use override to model variations
> initramfs-tee-ftpm-hook: Skip local-top hook without userland
> supplicant
>
> .../initramfs-tee-ftpm-hook_0.3.bb | 12 +++++++-----
> 1 file changed, 7 insertions(+), 5 deletions(-)
>
--
You received this message because you are subscribed to the Google Groups "isar-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/isar-users/f9bde237-98f2-4a7b-b8a9-22b648bba7aa%40ilbers.de.
^ permalink raw reply [flat|nested] 5+ messages in thread