From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 6883009067021762560 X-Received: by 2002:ac2:51ab:: with SMTP id f11mr867261lfk.417.1602755023718; Thu, 15 Oct 2020 02:43:43 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a2e:9a86:: with SMTP id p6ls460714lji.0.gmail; Thu, 15 Oct 2020 02:43:42 -0700 (PDT) X-Google-Smtp-Source: ABdhPJx79bjQ7vs+Mx+pfE6CUozKPBjvEfRn8WPr8O/sJf5zgOjZLfFgkKysoXxEwp4oXT5kNzyF X-Received: by 2002:a2e:92d5:: with SMTP id k21mr899591ljh.258.1602755022335; Thu, 15 Oct 2020 02:43:42 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1602755022; cv=none; d=google.com; s=arc-20160816; b=rDbvvm7M6hU4w6G42K+3D/0tsvnPVzzIw9nTRTywSO4/U0RDkDmX7lPrzSLPyHD5A5 V92CXQSxloHWGYyVa+uqykXICmVgfPHxTJ/0OYl9+BiCuW9AE7YWVcVmUyVpdJl+rnxE o6Ae8n6d/nPXJgrPpyhh0aW4ZYAfKqENkqeBhDoiqZNiviP86nIs22JWXGuE1ZFESts3 eRvn4ShDAsnF7zhKJ1pVUY/jMnjAKAWo7WftmuEfWEoTkCGBBYJAahV3zo70TQ66RuIp nGsCmkG3+/I9RPNyxqKjtMqs86Slh3W+AWtJNcSEdpMJiI08qzAk2bftQNc48Ixle8Cw 7D9g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from; bh=VwXXIWZcLZPy5sBf6juq6wfHfWr2QyXPuy2RgsKr32c=; b=UaLKuwoHeZyYXXXkckYlgkMKOrBkCmDCuH0wS1jL2mDu+R7357/I/AqkctvP/lBkXL L3F2VP5v9qxMJeyXsc6wPgCP8slYfLIsIzyjJE6J4SAQglFpCiXuxPYoN81qYGLi57K6 lPlMPbCgN5j89R03Q0v6kTGZhAVWnK83dxG8vQUJ6kzhgunowRmj9BPHA4XrfSwc2OHo +sBOyCU0hUuEjSWTzuah7ay+sjrlLewY1YdKQItebWxtZ0kjC2ik0gTfcxB2P2/kMnPd Sp1ETx3rppQjGSbGzpdc7vK/3pcMieSx6t9XXn0GYHxyBzu43+/uqubCP7Brwd6BC2R9 skSQ== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of jan.kiszka@siemens.com designates 194.138.37.40 as permitted sender) smtp.mailfrom=jan.kiszka@siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com Return-Path: Received: from gecko.sbs.de (gecko.sbs.de. [194.138.37.40]) by gmr-mx.google.com with ESMTPS id l28si62845lfp.11.2020.10.15.02.43.42 for (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Thu, 15 Oct 2020 02:43:42 -0700 (PDT) Received-SPF: pass (google.com: domain of jan.kiszka@siemens.com designates 194.138.37.40 as permitted sender) client-ip=194.138.37.40; Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of jan.kiszka@siemens.com designates 194.138.37.40 as permitted sender) smtp.mailfrom=jan.kiszka@siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com Received: from mail2.sbs.de (mail2.sbs.de [192.129.41.66]) by gecko.sbs.de (8.15.2/8.15.2) with ESMTPS id 09F9hel7018038 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Thu, 15 Oct 2020 11:43:41 +0200 Received: from md1f2u6c.ad001.siemens.net ([167.87.42.243]) by mail2.sbs.de (8.15.2/8.15.2) with ESMTP id 09F9heaZ028282; Thu, 15 Oct 2020 11:43:40 +0200 From: Jan Kiszka To: isar-users Cc: vijaikumar.kanagarajan@gmail.com Subject: [PATCH v2 00/11] Support for building TF-A and OP-TEE, add STM32MP15x board Date: Thu, 15 Oct 2020 11:43:29 +0200 Message-Id: X-Mailer: git-send-email 2.26.2 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-TUID: 0V9qPAL4fZzy Changes in v2: - fix wks file so that it becomes compatible with upcoming wic version (credits go to Vijai for debugging this) - replace kernel patches with upstream U-Boot backports, following community suggestions This adds include files for building custom Trusted Firmware A and Open Portable Trusted Execution Environment, similar to U-Boot. As a demonstration target, support for the STM32MP15x board is added, and its boot is enabled for both TF-a and OP-TEE. Jan CC: vijaikumar.kanagarajan@gmail.com Jan Kiszka (11): meta-isar: Lift de0-nano-soc build to buster meta-isar: linux-mainline: Update to latest 5.4.70 meta-isar: u-boot: Update to 2020.10 meta-isar: u-boot: Factor our de0-nano-soc recipe meta-isar: example-raw: Purge securetty from target image Add STM32MP15x eval board Add recipe include for building custom Trusted Firmware A stm32mp15x: Switch to TF-A based boot Add recipe include for building custom OP-TEE meta-isar: u-boot-stm32mp15x: Add patches needed for OP-TEE usage meta-isar: Add OP-TEE to STM32MP15x board meta-isar/conf/local.conf.sample | 3 +- meta-isar/conf/machine/de0-nano-soc.conf | 1 + meta-isar/conf/machine/stm32mp15x.conf | 19 +++ .../conf/multiconfig/de0-nano-soc-buster.conf | 7 + .../multiconfig/de0-nano-soc-stretch.conf | 7 - .../conf/multiconfig/stm32mp15x-buster.conf | 7 + .../recipes-app/example-raw/files/postinst | 3 + .../optee-os/optee-os-stm32mp15x_3.10.0.bb | 19 +++ .../trusted-firmware-a-stm32mp15x_2.3.bb | 21 +++ ...y-add-property-no-map-to-created-res.patch | 151 ++++++++++++++++++ ...rty-no-map-to-secure-reserved-memory.patch | 33 ++++ .../recipes-bsp/u-boot/u-boot-2020.10.inc | 13 ++ .../u-boot/u-boot-de0-nano-soc_2020.10.bb | 9 ++ .../u-boot/u-boot-stm32mp15x_2020.10.bb | 10 ++ .../recipes-bsp/u-boot/u-boot_2018.09.bb | 14 -- ...ine_5.4.10.bb => linux-mainline_5.4.70.bb} | 4 +- .../lib/wic/canned-wks/stm32mp15x.wks.in | 16 ++ meta/recipes-bsp/optee-os/files/debian/compat | 1 + .../optee-os/files/debian/control.tmpl | 10 ++ meta/recipes-bsp/optee-os/files/debian/rules | 19 +++ meta/recipes-bsp/optee-os/optee-os-custom.inc | 43 +++++ .../trusted-firmware-a/files/debian/compat | 1 + .../files/debian/control.tmpl | 10 ++ .../trusted-firmware-a/files/debian/rules | 19 +++ .../trusted-firmware-a-custom.inc | 43 +++++ scripts/ci_build.sh | 5 +- 26 files changed, 462 insertions(+), 26 deletions(-) create mode 100644 meta-isar/conf/machine/stm32mp15x.conf create mode 100644 meta-isar/conf/multiconfig/de0-nano-soc-buster.conf delete mode 100644 meta-isar/conf/multiconfig/de0-nano-soc-stretch.conf create mode 100644 meta-isar/conf/multiconfig/stm32mp15x-buster.conf create mode 100644 meta-isar/recipes-bsp/optee-os/optee-os-stm32mp15x_3.10.0.bb create mode 100644 meta-isar/recipes-bsp/trusted-firmware-a/trusted-firmware-a-stm32mp15x_2.3.bb create mode 100644 meta-isar/recipes-bsp/u-boot/files/0001-fdtdec-optionally-add-property-no-map-to-created-res.patch create mode 100644 meta-isar/recipes-bsp/u-boot/files/0002-optee-add-property-no-map-to-secure-reserved-memory.patch create mode 100644 meta-isar/recipes-bsp/u-boot/u-boot-2020.10.inc create mode 100644 meta-isar/recipes-bsp/u-boot/u-boot-de0-nano-soc_2020.10.bb create mode 100644 meta-isar/recipes-bsp/u-boot/u-boot-stm32mp15x_2020.10.bb delete mode 100644 meta-isar/recipes-bsp/u-boot/u-boot_2018.09.bb rename meta-isar/recipes-kernel/linux/{linux-mainline_5.4.10.bb => linux-mainline_5.4.70.bb} (89%) create mode 100644 meta-isar/scripts/lib/wic/canned-wks/stm32mp15x.wks.in create mode 100644 meta/recipes-bsp/optee-os/files/debian/compat create mode 100644 meta/recipes-bsp/optee-os/files/debian/control.tmpl create mode 100755 meta/recipes-bsp/optee-os/files/debian/rules create mode 100644 meta/recipes-bsp/optee-os/optee-os-custom.inc create mode 100644 meta/recipes-bsp/trusted-firmware-a/files/debian/compat create mode 100644 meta/recipes-bsp/trusted-firmware-a/files/debian/control.tmpl create mode 100755 meta/recipes-bsp/trusted-firmware-a/files/debian/rules create mode 100644 meta/recipes-bsp/trusted-firmware-a/trusted-firmware-a-custom.inc -- 2.26.2