mirror of
https://git.yoctoproject.org/meta-arm
synced 2026-05-07 04:58:57 +00:00
arm/trusted-firmware-m: Create inc file for common config
To simplify adding support for new versions of TF-M in the future, create a common .inc file with the non-version-specific configuration. Signed-off-by: Peter Hoyes <Peter.Hoyes@arm.com> Signed-off-by: Jon Mason <jon.mason@arm.com>
This commit is contained in:
Peter Hoyes
Jon Mason
@@ -0,0 +1,118 @@
|
||||
# SPDX-License-Identifier: MIT
|
||||
#
|
||||
# Copyright (c) 2020 Arm Limited
|
||||
#
|
||||
|
||||
SUMMARY = "Trusted Firmware for Cortex-M"
|
||||
DESCRIPTION = "Trusted Firmware-M"
|
||||
HOMEPAGE = "https://git.trustedfirmware.org/trusted-firmware-m.git"
|
||||
PROVIDES = "virtual/trusted-firmware-m"
|
||||
|
||||
SRC_URI += "file://rwx.patch"
|
||||
|
||||
UPSTREAM_CHECK_GITTAGREGEX = "^TF-Mv(?P<pver>\d+(\.\d+)+)$"
|
||||
|
||||
# Note to future readers of this recipe: until the CMakeLists don't abuse
|
||||
# installation (see do_install) there is no point in trying to inherit
|
||||
# cmake here. You can easily short-circuit the toolchain but the install
|
||||
# is so convoluted there's no gain.
|
||||
|
||||
inherit python3native deploy
|
||||
|
||||
# Baremetal and we bring a compiler below
|
||||
INHIBIT_DEFAULT_DEPS = "1"
|
||||
|
||||
PACKAGE_ARCH = "${MACHINE_ARCH}"
|
||||
|
||||
# See tools/requirements.txt for Python dependencies
|
||||
DEPENDS += "cmake-native \
|
||||
ninja-native \
|
||||
gcc-arm-none-eabi-native \
|
||||
python3-cbor2-native \
|
||||
python3-click-native \
|
||||
python3-cryptography-native \
|
||||
python3-pyasn1-native \
|
||||
python3-imgtool-native \
|
||||
python3-jinja2-native \
|
||||
python3-pyyaml-native \
|
||||
python3-pyhsslms-native \
|
||||
python3-ecdsa-native \
|
||||
python3-kconfiglib-native \
|
||||
"
|
||||
|
||||
B = "${WORKDIR}/build"
|
||||
|
||||
# Build for debug (set TFM_DEBUG to 1 to activate)
|
||||
TFM_DEBUG ?= "0"
|
||||
|
||||
# Platform must be set, ideally in the machine configuration.
|
||||
TFM_PLATFORM ?= ""
|
||||
python() {
|
||||
if not d.getVar("TFM_PLATFORM"):
|
||||
raise bb.parse.SkipRecipe("TFM_PLATFORM needs to be set")
|
||||
}
|
||||
|
||||
PACKAGECONFIG ??= ""
|
||||
# Whether to integrate the test suite
|
||||
PACKAGECONFIG[test-secure] = "-DTEST_S=ON,-DTEST_S=OFF"
|
||||
PACKAGECONFIG[test-nonsecure] = "-DTEST_NS=ON,-DTEST_NS=OFF"
|
||||
|
||||
# Currently we only support using the Arm binary GCC
|
||||
EXTRA_OECMAKE += "-DTFM_TOOLCHAIN_FILE=${S}/toolchain_GNUARM.cmake"
|
||||
|
||||
# Don't let FetchContent download more sources during do_configure
|
||||
EXTRA_OECMAKE += "-DFETCHCONTENT_FULLY_DISCONNECTED=ON"
|
||||
|
||||
# Add platform parameters
|
||||
EXTRA_OECMAKE += "-DTFM_PLATFORM=${TFM_PLATFORM}"
|
||||
|
||||
# Handle TFM_DEBUG parameter
|
||||
EXTRA_OECMAKE += "${@bb.utils.contains('TFM_DEBUG', '1', '-DCMAKE_BUILD_TYPE=Debug', '-DCMAKE_BUILD_TYPE=Release', d)}"
|
||||
|
||||
# Verbose builds
|
||||
EXTRA_OECMAKE += "-DCMAKE_VERBOSE_MAKEFILE:BOOL=ON"
|
||||
|
||||
EXTRA_OECMAKE += "-DMBEDCRYPTO_PATH=${S}/../mbedtls -DTFM_TEST_REPO_PATH=${S}/../tf-m-tests -DMCUBOOT_PATH=${S}/../mcuboot -DQCBOR_PATH=${S}/../qcbor"
|
||||
|
||||
export CMAKE_BUILD_PARALLEL_LEVEL = "${@oe.utils.parallel_make(d, False)}"
|
||||
|
||||
# Let the Makefile handle setting up the CFLAGS and LDFLAGS as it is a standalone application
|
||||
CFLAGS[unexport] = "1"
|
||||
LDFLAGS[unexport] = "1"
|
||||
AS[unexport] = "1"
|
||||
LD[unexport] = "1"
|
||||
|
||||
# python3-cryptography needs the legacy provider, so set OPENSSL_MODULES to the
|
||||
# right path until this is relocated automatically.
|
||||
export OPENSSL_MODULES="${STAGING_LIBDIR_NATIVE}/ossl-modules"
|
||||
|
||||
do_configure[cleandirs] = "${B}"
|
||||
do_configure() {
|
||||
cmake -GNinja -S ${S} -B ${B} ${EXTRA_OECMAKE} ${PACKAGECONFIG_CONFARGS}
|
||||
}
|
||||
|
||||
# Invoke install here as there's no point in splitting compile from install: the
|
||||
# first thing the build does is 'install' inside the build tree thus causing a
|
||||
# rebuild. It also overrides the install prefix to be in the build tree, so you
|
||||
# can't use the usual install prefix variables.
|
||||
do_compile() {
|
||||
cmake --build ${B} -- install
|
||||
}
|
||||
do_compile[progress] = "outof:^\[(\d+)/(\d+)\]\s+"
|
||||
|
||||
do_install() {
|
||||
# TODO install headers and static libraries when we know how they're used
|
||||
install -d -m 755 ${D}/firmware
|
||||
install -m 0644 ${B}/bin/* ${D}/firmware/
|
||||
}
|
||||
|
||||
FILES:${PN} = "/firmware"
|
||||
SYSROOT_DIRS += "/firmware"
|
||||
|
||||
addtask deploy after do_install
|
||||
do_deploy() {
|
||||
cp -rf ${D}/firmware/* ${DEPLOYDIR}/
|
||||
}
|
||||
|
||||
# Build paths are currently embedded
|
||||
INSANE_SKIP:${PN} += "buildpaths"
|
||||
@@ -1,120 +1,2 @@
|
||||
# SPDX-License-Identifier: MIT
|
||||
#
|
||||
# Copyright (c) 2020 Arm Limited
|
||||
#
|
||||
|
||||
SUMMARY = "Trusted Firmware for Cortex-M"
|
||||
DESCRIPTION = "Trusted Firmware-M"
|
||||
HOMEPAGE = "https://git.trustedfirmware.org/trusted-firmware-m.git"
|
||||
PROVIDES = "virtual/trusted-firmware-m"
|
||||
|
||||
require recipes-bsp/trusted-firmware-m/trusted-firmware-m-1.7.0-src.inc
|
||||
|
||||
SRC_URI += "file://rwx.patch"
|
||||
|
||||
UPSTREAM_CHECK_GITTAGREGEX = "^TF-Mv(?P<pver>\d+(\.\d+)+)$"
|
||||
|
||||
# Note to future readers of this recipe: until the CMakeLists don't abuse
|
||||
# installation (see do_install) there is no point in trying to inherit
|
||||
# cmake here. You can easily short-circuit the toolchain but the install
|
||||
# is so convoluted there's no gain.
|
||||
|
||||
inherit python3native deploy
|
||||
|
||||
# Baremetal and we bring a compiler below
|
||||
INHIBIT_DEFAULT_DEPS = "1"
|
||||
|
||||
PACKAGE_ARCH = "${MACHINE_ARCH}"
|
||||
|
||||
# See tools/requirements.txt for Python dependencies
|
||||
DEPENDS += "cmake-native \
|
||||
ninja-native \
|
||||
gcc-arm-none-eabi-native \
|
||||
python3-cbor2-native \
|
||||
python3-click-native \
|
||||
python3-cryptography-native \
|
||||
python3-pyasn1-native \
|
||||
python3-imgtool-native \
|
||||
python3-jinja2-native \
|
||||
python3-pyyaml-native \
|
||||
python3-pyhsslms-native \
|
||||
python3-ecdsa-native \
|
||||
python3-kconfiglib-native \
|
||||
"
|
||||
|
||||
B = "${WORKDIR}/build"
|
||||
|
||||
# Build for debug (set TFM_DEBUG to 1 to activate)
|
||||
TFM_DEBUG ?= "0"
|
||||
|
||||
# Platform must be set, ideally in the machine configuration.
|
||||
TFM_PLATFORM ?= ""
|
||||
python() {
|
||||
if not d.getVar("TFM_PLATFORM"):
|
||||
raise bb.parse.SkipRecipe("TFM_PLATFORM needs to be set")
|
||||
}
|
||||
|
||||
PACKAGECONFIG ??= ""
|
||||
# Whether to integrate the test suite
|
||||
PACKAGECONFIG[test-secure] = "-DTEST_S=ON,-DTEST_S=OFF"
|
||||
PACKAGECONFIG[test-nonsecure] = "-DTEST_NS=ON,-DTEST_NS=OFF"
|
||||
|
||||
# Currently we only support using the Arm binary GCC
|
||||
EXTRA_OECMAKE += "-DTFM_TOOLCHAIN_FILE=${S}/toolchain_GNUARM.cmake"
|
||||
|
||||
# Don't let FetchContent download more sources during do_configure
|
||||
EXTRA_OECMAKE += "-DFETCHCONTENT_FULLY_DISCONNECTED=ON"
|
||||
|
||||
# Add platform parameters
|
||||
EXTRA_OECMAKE += "-DTFM_PLATFORM=${TFM_PLATFORM}"
|
||||
|
||||
# Handle TFM_DEBUG parameter
|
||||
EXTRA_OECMAKE += "${@bb.utils.contains('TFM_DEBUG', '1', '-DCMAKE_BUILD_TYPE=Debug', '-DCMAKE_BUILD_TYPE=Release', d)}"
|
||||
|
||||
# Verbose builds
|
||||
EXTRA_OECMAKE += "-DCMAKE_VERBOSE_MAKEFILE:BOOL=ON"
|
||||
|
||||
EXTRA_OECMAKE += "-DMBEDCRYPTO_PATH=${S}/../mbedtls -DTFM_TEST_REPO_PATH=${S}/../tf-m-tests -DMCUBOOT_PATH=${S}/../mcuboot -DQCBOR_PATH=${S}/../qcbor"
|
||||
|
||||
export CMAKE_BUILD_PARALLEL_LEVEL = "${@oe.utils.parallel_make(d, False)}"
|
||||
|
||||
# Let the Makefile handle setting up the CFLAGS and LDFLAGS as it is a standalone application
|
||||
CFLAGS[unexport] = "1"
|
||||
LDFLAGS[unexport] = "1"
|
||||
AS[unexport] = "1"
|
||||
LD[unexport] = "1"
|
||||
|
||||
# python3-cryptography needs the legacy provider, so set OPENSSL_MODULES to the
|
||||
# right path until this is relocated automatically.
|
||||
export OPENSSL_MODULES="${STAGING_LIBDIR_NATIVE}/ossl-modules"
|
||||
|
||||
do_configure[cleandirs] = "${B}"
|
||||
do_configure() {
|
||||
cmake -GNinja -S ${S} -B ${B} ${EXTRA_OECMAKE} ${PACKAGECONFIG_CONFARGS}
|
||||
}
|
||||
|
||||
# Invoke install here as there's no point in splitting compile from install: the
|
||||
# first thing the build does is 'install' inside the build tree thus causing a
|
||||
# rebuild. It also overrides the install prefix to be in the build tree, so you
|
||||
# can't use the usual install prefix variables.
|
||||
do_compile() {
|
||||
cmake --build ${B} -- install
|
||||
}
|
||||
do_compile[progress] = "outof:^\[(\d+)/(\d+)\]\s+"
|
||||
|
||||
do_install() {
|
||||
# TODO install headers and static libraries when we know how they're used
|
||||
install -d -m 755 ${D}/firmware
|
||||
install -m 0644 ${B}/bin/* ${D}/firmware/
|
||||
}
|
||||
|
||||
FILES:${PN} = "/firmware"
|
||||
SYSROOT_DIRS += "/firmware"
|
||||
|
||||
addtask deploy after do_install
|
||||
do_deploy() {
|
||||
cp -rf ${D}/firmware/* ${DEPLOYDIR}/
|
||||
}
|
||||
|
||||
# Build paths are currently embedded
|
||||
INSANE_SKIP:${PN} += "buildpaths"
|
||||
require recipes-bsp/trusted-firmware-m/trusted-firmware-m.inc
|
||||
|
||||
Reference in New Issue
Block a user