mirror of
https://git.yoctoproject.org/meta-arm
synced 2026-05-30 12:30:14 +00:00
arm/trusted-firmware-m: Create inc file for common config
To simplify adding support for new versions of TF-M in the future, create a common .inc file with the non-version-specific configuration. Signed-off-by: Peter Hoyes <Peter.Hoyes@arm.com> Signed-off-by: Jon Mason <jon.mason@arm.com>
This commit is contained in:
Peter Hoyes
Jon Mason
@@ -0,0 +1,118 @@
|
|||||||
|
# SPDX-License-Identifier: MIT
|
||||||
|
#
|
||||||
|
# Copyright (c) 2020 Arm Limited
|
||||||
|
#
|
||||||
|
|
||||||
|
SUMMARY = "Trusted Firmware for Cortex-M"
|
||||||
|
DESCRIPTION = "Trusted Firmware-M"
|
||||||
|
HOMEPAGE = "https://git.trustedfirmware.org/trusted-firmware-m.git"
|
||||||
|
PROVIDES = "virtual/trusted-firmware-m"
|
||||||
|
|
||||||
|
SRC_URI += "file://rwx.patch"
|
||||||
|
|
||||||
|
UPSTREAM_CHECK_GITTAGREGEX = "^TF-Mv(?P<pver>\d+(\.\d+)+)$"
|
||||||
|
|
||||||
|
# Note to future readers of this recipe: until the CMakeLists don't abuse
|
||||||
|
# installation (see do_install) there is no point in trying to inherit
|
||||||
|
# cmake here. You can easily short-circuit the toolchain but the install
|
||||||
|
# is so convoluted there's no gain.
|
||||||
|
|
||||||
|
inherit python3native deploy
|
||||||
|
|
||||||
|
# Baremetal and we bring a compiler below
|
||||||
|
INHIBIT_DEFAULT_DEPS = "1"
|
||||||
|
|
||||||
|
PACKAGE_ARCH = "${MACHINE_ARCH}"
|
||||||
|
|
||||||
|
# See tools/requirements.txt for Python dependencies
|
||||||
|
DEPENDS += "cmake-native \
|
||||||
|
ninja-native \
|
||||||
|
gcc-arm-none-eabi-native \
|
||||||
|
python3-cbor2-native \
|
||||||
|
python3-click-native \
|
||||||
|
python3-cryptography-native \
|
||||||
|
python3-pyasn1-native \
|
||||||
|
python3-imgtool-native \
|
||||||
|
python3-jinja2-native \
|
||||||
|
python3-pyyaml-native \
|
||||||
|
python3-pyhsslms-native \
|
||||||
|
python3-ecdsa-native \
|
||||||
|
python3-kconfiglib-native \
|
||||||
|
"
|
||||||
|
|
||||||
|
B = "${WORKDIR}/build"
|
||||||
|
|
||||||
|
# Build for debug (set TFM_DEBUG to 1 to activate)
|
||||||
|
TFM_DEBUG ?= "0"
|
||||||
|
|
||||||
|
# Platform must be set, ideally in the machine configuration.
|
||||||
|
TFM_PLATFORM ?= ""
|
||||||
|
python() {
|
||||||
|
if not d.getVar("TFM_PLATFORM"):
|
||||||
|
raise bb.parse.SkipRecipe("TFM_PLATFORM needs to be set")
|
||||||
|
}
|
||||||
|
|
||||||
|
PACKAGECONFIG ??= ""
|
||||||
|
# Whether to integrate the test suite
|
||||||
|
PACKAGECONFIG[test-secure] = "-DTEST_S=ON,-DTEST_S=OFF"
|
||||||
|
PACKAGECONFIG[test-nonsecure] = "-DTEST_NS=ON,-DTEST_NS=OFF"
|
||||||
|
|
||||||
|
# Currently we only support using the Arm binary GCC
|
||||||
|
EXTRA_OECMAKE += "-DTFM_TOOLCHAIN_FILE=${S}/toolchain_GNUARM.cmake"
|
||||||
|
|
||||||
|
# Don't let FetchContent download more sources during do_configure
|
||||||
|
EXTRA_OECMAKE += "-DFETCHCONTENT_FULLY_DISCONNECTED=ON"
|
||||||
|
|
||||||
|
# Add platform parameters
|
||||||
|
EXTRA_OECMAKE += "-DTFM_PLATFORM=${TFM_PLATFORM}"
|
||||||
|
|
||||||
|
# Handle TFM_DEBUG parameter
|
||||||
|
EXTRA_OECMAKE += "${@bb.utils.contains('TFM_DEBUG', '1', '-DCMAKE_BUILD_TYPE=Debug', '-DCMAKE_BUILD_TYPE=Release', d)}"
|
||||||
|
|
||||||
|
# Verbose builds
|
||||||
|
EXTRA_OECMAKE += "-DCMAKE_VERBOSE_MAKEFILE:BOOL=ON"
|
||||||
|
|
||||||
|
EXTRA_OECMAKE += "-DMBEDCRYPTO_PATH=${S}/../mbedtls -DTFM_TEST_REPO_PATH=${S}/../tf-m-tests -DMCUBOOT_PATH=${S}/../mcuboot -DQCBOR_PATH=${S}/../qcbor"
|
||||||
|
|
||||||
|
export CMAKE_BUILD_PARALLEL_LEVEL = "${@oe.utils.parallel_make(d, False)}"
|
||||||
|
|
||||||
|
# Let the Makefile handle setting up the CFLAGS and LDFLAGS as it is a standalone application
|
||||||
|
CFLAGS[unexport] = "1"
|
||||||
|
LDFLAGS[unexport] = "1"
|
||||||
|
AS[unexport] = "1"
|
||||||
|
LD[unexport] = "1"
|
||||||
|
|
||||||
|
# python3-cryptography needs the legacy provider, so set OPENSSL_MODULES to the
|
||||||
|
# right path until this is relocated automatically.
|
||||||
|
export OPENSSL_MODULES="${STAGING_LIBDIR_NATIVE}/ossl-modules"
|
||||||
|
|
||||||
|
do_configure[cleandirs] = "${B}"
|
||||||
|
do_configure() {
|
||||||
|
cmake -GNinja -S ${S} -B ${B} ${EXTRA_OECMAKE} ${PACKAGECONFIG_CONFARGS}
|
||||||
|
}
|
||||||
|
|
||||||
|
# Invoke install here as there's no point in splitting compile from install: the
|
||||||
|
# first thing the build does is 'install' inside the build tree thus causing a
|
||||||
|
# rebuild. It also overrides the install prefix to be in the build tree, so you
|
||||||
|
# can't use the usual install prefix variables.
|
||||||
|
do_compile() {
|
||||||
|
cmake --build ${B} -- install
|
||||||
|
}
|
||||||
|
do_compile[progress] = "outof:^\[(\d+)/(\d+)\]\s+"
|
||||||
|
|
||||||
|
do_install() {
|
||||||
|
# TODO install headers and static libraries when we know how they're used
|
||||||
|
install -d -m 755 ${D}/firmware
|
||||||
|
install -m 0644 ${B}/bin/* ${D}/firmware/
|
||||||
|
}
|
||||||
|
|
||||||
|
FILES:${PN} = "/firmware"
|
||||||
|
SYSROOT_DIRS += "/firmware"
|
||||||
|
|
||||||
|
addtask deploy after do_install
|
||||||
|
do_deploy() {
|
||||||
|
cp -rf ${D}/firmware/* ${DEPLOYDIR}/
|
||||||
|
}
|
||||||
|
|
||||||
|
# Build paths are currently embedded
|
||||||
|
INSANE_SKIP:${PN} += "buildpaths"
|
||||||
@@ -1,120 +1,2 @@
|
|||||||
# SPDX-License-Identifier: MIT
|
|
||||||
#
|
|
||||||
# Copyright (c) 2020 Arm Limited
|
|
||||||
#
|
|
||||||
|
|
||||||
SUMMARY = "Trusted Firmware for Cortex-M"
|
|
||||||
DESCRIPTION = "Trusted Firmware-M"
|
|
||||||
HOMEPAGE = "https://git.trustedfirmware.org/trusted-firmware-m.git"
|
|
||||||
PROVIDES = "virtual/trusted-firmware-m"
|
|
||||||
|
|
||||||
require recipes-bsp/trusted-firmware-m/trusted-firmware-m-1.7.0-src.inc
|
require recipes-bsp/trusted-firmware-m/trusted-firmware-m-1.7.0-src.inc
|
||||||
|
require recipes-bsp/trusted-firmware-m/trusted-firmware-m.inc
|
||||||
SRC_URI += "file://rwx.patch"
|
|
||||||
|
|
||||||
UPSTREAM_CHECK_GITTAGREGEX = "^TF-Mv(?P<pver>\d+(\.\d+)+)$"
|
|
||||||
|
|
||||||
# Note to future readers of this recipe: until the CMakeLists don't abuse
|
|
||||||
# installation (see do_install) there is no point in trying to inherit
|
|
||||||
# cmake here. You can easily short-circuit the toolchain but the install
|
|
||||||
# is so convoluted there's no gain.
|
|
||||||
|
|
||||||
inherit python3native deploy
|
|
||||||
|
|
||||||
# Baremetal and we bring a compiler below
|
|
||||||
INHIBIT_DEFAULT_DEPS = "1"
|
|
||||||
|
|
||||||
PACKAGE_ARCH = "${MACHINE_ARCH}"
|
|
||||||
|
|
||||||
# See tools/requirements.txt for Python dependencies
|
|
||||||
DEPENDS += "cmake-native \
|
|
||||||
ninja-native \
|
|
||||||
gcc-arm-none-eabi-native \
|
|
||||||
python3-cbor2-native \
|
|
||||||
python3-click-native \
|
|
||||||
python3-cryptography-native \
|
|
||||||
python3-pyasn1-native \
|
|
||||||
python3-imgtool-native \
|
|
||||||
python3-jinja2-native \
|
|
||||||
python3-pyyaml-native \
|
|
||||||
python3-pyhsslms-native \
|
|
||||||
python3-ecdsa-native \
|
|
||||||
python3-kconfiglib-native \
|
|
||||||
"
|
|
||||||
|
|
||||||
B = "${WORKDIR}/build"
|
|
||||||
|
|
||||||
# Build for debug (set TFM_DEBUG to 1 to activate)
|
|
||||||
TFM_DEBUG ?= "0"
|
|
||||||
|
|
||||||
# Platform must be set, ideally in the machine configuration.
|
|
||||||
TFM_PLATFORM ?= ""
|
|
||||||
python() {
|
|
||||||
if not d.getVar("TFM_PLATFORM"):
|
|
||||||
raise bb.parse.SkipRecipe("TFM_PLATFORM needs to be set")
|
|
||||||
}
|
|
||||||
|
|
||||||
PACKAGECONFIG ??= ""
|
|
||||||
# Whether to integrate the test suite
|
|
||||||
PACKAGECONFIG[test-secure] = "-DTEST_S=ON,-DTEST_S=OFF"
|
|
||||||
PACKAGECONFIG[test-nonsecure] = "-DTEST_NS=ON,-DTEST_NS=OFF"
|
|
||||||
|
|
||||||
# Currently we only support using the Arm binary GCC
|
|
||||||
EXTRA_OECMAKE += "-DTFM_TOOLCHAIN_FILE=${S}/toolchain_GNUARM.cmake"
|
|
||||||
|
|
||||||
# Don't let FetchContent download more sources during do_configure
|
|
||||||
EXTRA_OECMAKE += "-DFETCHCONTENT_FULLY_DISCONNECTED=ON"
|
|
||||||
|
|
||||||
# Add platform parameters
|
|
||||||
EXTRA_OECMAKE += "-DTFM_PLATFORM=${TFM_PLATFORM}"
|
|
||||||
|
|
||||||
# Handle TFM_DEBUG parameter
|
|
||||||
EXTRA_OECMAKE += "${@bb.utils.contains('TFM_DEBUG', '1', '-DCMAKE_BUILD_TYPE=Debug', '-DCMAKE_BUILD_TYPE=Release', d)}"
|
|
||||||
|
|
||||||
# Verbose builds
|
|
||||||
EXTRA_OECMAKE += "-DCMAKE_VERBOSE_MAKEFILE:BOOL=ON"
|
|
||||||
|
|
||||||
EXTRA_OECMAKE += "-DMBEDCRYPTO_PATH=${S}/../mbedtls -DTFM_TEST_REPO_PATH=${S}/../tf-m-tests -DMCUBOOT_PATH=${S}/../mcuboot -DQCBOR_PATH=${S}/../qcbor"
|
|
||||||
|
|
||||||
export CMAKE_BUILD_PARALLEL_LEVEL = "${@oe.utils.parallel_make(d, False)}"
|
|
||||||
|
|
||||||
# Let the Makefile handle setting up the CFLAGS and LDFLAGS as it is a standalone application
|
|
||||||
CFLAGS[unexport] = "1"
|
|
||||||
LDFLAGS[unexport] = "1"
|
|
||||||
AS[unexport] = "1"
|
|
||||||
LD[unexport] = "1"
|
|
||||||
|
|
||||||
# python3-cryptography needs the legacy provider, so set OPENSSL_MODULES to the
|
|
||||||
# right path until this is relocated automatically.
|
|
||||||
export OPENSSL_MODULES="${STAGING_LIBDIR_NATIVE}/ossl-modules"
|
|
||||||
|
|
||||||
do_configure[cleandirs] = "${B}"
|
|
||||||
do_configure() {
|
|
||||||
cmake -GNinja -S ${S} -B ${B} ${EXTRA_OECMAKE} ${PACKAGECONFIG_CONFARGS}
|
|
||||||
}
|
|
||||||
|
|
||||||
# Invoke install here as there's no point in splitting compile from install: the
|
|
||||||
# first thing the build does is 'install' inside the build tree thus causing a
|
|
||||||
# rebuild. It also overrides the install prefix to be in the build tree, so you
|
|
||||||
# can't use the usual install prefix variables.
|
|
||||||
do_compile() {
|
|
||||||
cmake --build ${B} -- install
|
|
||||||
}
|
|
||||||
do_compile[progress] = "outof:^\[(\d+)/(\d+)\]\s+"
|
|
||||||
|
|
||||||
do_install() {
|
|
||||||
# TODO install headers and static libraries when we know how they're used
|
|
||||||
install -d -m 755 ${D}/firmware
|
|
||||||
install -m 0644 ${B}/bin/* ${D}/firmware/
|
|
||||||
}
|
|
||||||
|
|
||||||
FILES:${PN} = "/firmware"
|
|
||||||
SYSROOT_DIRS += "/firmware"
|
|
||||||
|
|
||||||
addtask deploy after do_install
|
|
||||||
do_deploy() {
|
|
||||||
cp -rf ${D}/firmware/* ${DEPLOYDIR}/
|
|
||||||
}
|
|
||||||
|
|
||||||
# Build paths are currently embedded
|
|
||||||
INSANE_SKIP:${PN} += "buildpaths"
|
|
||||||
|
|||||||
Reference in New Issue
Block a user