diff --git a/meta-arm-bsp/documentation/corstone1000/change-log.rst b/meta-arm-bsp/documentation/corstone1000/change-log.rst index 0c79ad1b..fae4d7a4 100644 --- a/meta-arm-bsp/documentation/corstone1000/change-log.rst +++ b/meta-arm-bsp/documentation/corstone1000/change-log.rst @@ -10,6 +10,68 @@ Change Log This document contains a summary of the new features, changes and fixes in each release of Corstone-1000 software stack. +*************** +Version 2026.11 +*************** + +Changes +======= + +- Upgraded key Corstone-1000 components to U-Boot 2026.07, TF-A 2.15.0, TF-M 2.3.1, OP-TEE 4.10.0, and Linux 6.19. +- Updated TF-M to include Corstone-1000 security fixes and the latest firmware-update partition fixes. + +Corstone-1000 components versions +================================= + ++-------------------------------------------+-------------------+ +| linux-yocto | 6.19 | ++-------------------------------------------+-------------------+ +| u-boot | 2026.07 | ++-------------------------------------------+-------------------+ +| external-system | 0.1.0 | ++-------------------------------------------+-------------------+ +| optee-client | 4.10.0 | ++-------------------------------------------+-------------------+ +| optee-os | 4.10.0 | ++-------------------------------------------+-------------------+ +| trusted-firmware-a | 2.15.0 | ++-------------------------------------------+-------------------+ +| trusted-firmware-m | 2.3.1 | ++-------------------------------------------+-------------------+ +| libts | v1.3.0 | ++-------------------------------------------+-------------------+ +| ts-sp-{se-proxy, smm-gateway} | v1.3.0 | ++-------------------------------------------+-------------------+ +| ts-psa-{crypto, iat, its. ps}-api-test | 74dc6646ff | ++-------------------------------------------+-------------------+ + +Yocto distribution components versions +====================================== + ++-------------------------------------------+----------------+ +| meta-arm | blacksail | ++-------------------------------------------+----------------+ +| bitbake | 634f8dede6 | ++-------------------------------------------+----------------+ +| meta-openembedded | a9d69bc066 | ++-------------------------------------------+----------------+ +| openembedded-core | e182a0c4b9 | ++-------------------------------------------+----------------+ +| meta-yocto | d0119aa2eb | ++-------------------------------------------+----------------+ +| meta-secure-core | 56316bacdb | ++-------------------------------------------+----------------+ +| busybox | 1.38.0 | ++-------------------------------------------+----------------+ +| musl | 1.2.6 | ++-------------------------------------------+----------------+ +| gcc-arm-none-eabi | 15.3.rel1 | ++-------------------------------------------+----------------+ +| gcc-cross-aarch64 | 16.2.0 | ++-------------------------------------------+----------------+ +| openssl | 4.0.3 | ++-------------------------------------------+----------------+ + *************** Version 2026.05 *************** diff --git a/meta-arm-bsp/documentation/corstone1000/release-notes.rst b/meta-arm-bsp/documentation/corstone1000/release-notes.rst index 7757e749..c34bea0b 100644 --- a/meta-arm-bsp/documentation/corstone1000/release-notes.rst +++ b/meta-arm-bsp/documentation/corstone1000/release-notes.rst @@ -19,6 +19,12 @@ intended for safety-critical applications. Should Your Software or Your Hardware prove defective, you assume the entire cost of all necessary servicing, repair or correction. +*********************** +Release notes - 2026.11 +*********************** + +The same notes as the 2025.05 release still apply. + *********************** Release notes - 2026.05 *********************** diff --git a/meta-arm-bsp/documentation/corstone1000/user-guide.rst b/meta-arm-bsp/documentation/corstone1000/user-guide.rst index 56adbf0c..adeda319 100644 --- a/meta-arm-bsp/documentation/corstone1000/user-guide.rst +++ b/meta-arm-bsp/documentation/corstone1000/user-guide.rst @@ -51,7 +51,7 @@ The Corstone-1000 software stack can be run on: Yocto Stable Branch ------------------- -Corstone-1000 software stack is built on top of Yocto Project's `Wrynose release `__. +Corstone-1000 software stack is built on top of Yocto Project's `Blacksail release `__. Software Components ------------------- @@ -173,7 +173,7 @@ Secure Enclave Components +----------+-------------------------------------------------------------------------------------------------------+ | bbappend | ``${WORKSPACE}/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-m/trusted-firmware-m_%.bbappend`` | +----------+-------------------------------------------------------------------------------------------------------+ -| Recipe | ``${WORKSPACE}/meta-arm/meta-arm/recipes-bsp/trusted-firmware-m/trusted-firmware-m_2.3.0.bb`` | +| Recipe | ``${WORKSPACE}/meta-arm/meta-arm/recipes-bsp/trusted-firmware-m/trusted-firmware-m_2.3.1.bb`` | +----------+-------------------------------------------------------------------------------------------------------+ ************************************ @@ -233,7 +233,7 @@ Build .. code-block:: console cd ${WORKSPACE} - git clone https://git.yoctoproject.org/git/meta-arm -b CORSTONE1000-2026.05 + git clone https://git.yoctoproject.org/git/meta-arm -b CORSTONE1000-2026.11 #. Build a Corstone-1000 image: @@ -322,7 +322,7 @@ Flash Using smaller cards or unsupported file systems (e.g., exFAT, NTFS) may cause the flashing process to fail or the device to become unresponsive. -#. Download the FPGA bit file image ``AN550: Arm® Corstone™-1000 for MPS3 Version 2.0`` +#. Download the FPGA bit file image ``AN550: Arm® Corstone™-1000 for MPS3 Version 2.0 r2p0-00rel0`` on the `Arm Developer website `__. Click on the ``Download AN550 bundle`` button and login to download the file. @@ -544,8 +544,8 @@ Tests Reports ------- -Reports for the tests conducted on the `Corstone-1000 software (CORSTONE1000-2026.05) `__ -release are available for reference `here `__. +Reports for the tests conducted on the `Corstone-1000 software (CORSTONE1000-2026.11) `__ +release are available for reference `here `__. .. _clean-secure-flash: @@ -564,7 +564,7 @@ Clean Secure Flash .. code-block:: console cd ${WORKSPACE} - git clone https://git.gitlab.arm.com/arm-reference-solutions/iot-platform-assets.git -b CORSTONE1000-2026.05 + git clone https://git.gitlab.arm.com/arm-reference-solutions/iot-platform-assets.git -b CORSTONE1000-2026.11 #. Copy the secure flash cleaning Git patch file to your copy of `meta-arm`. @@ -691,7 +691,7 @@ FVP === The ESP disk image will automatically be used by the Corstone-1000 FVP as the 2nd MMC card image. -It will be used when the SystemReady-IR tests is performed on the FVP in the later section. +It will be used when the SystemReady-IR tests are performed on the FVP in the later section. **************************** @@ -749,7 +749,7 @@ The ``BOOT`` partition is also used to store test results in the ``acs_results`` Ensure that the ``acs_results`` folder is empty before starting the test. -This sections below describe how to build and run ACS tests on Corstone-1000. +This section below describe how to build and run ACS tests on Corstone-1000. .. _mps3-instructions-for-acs-image: @@ -1126,7 +1126,7 @@ Positive Full Capsule Update Test The capsule update will be started. .. note:: - The capsule update takes about 8 minutes to complete on MPS3 and between 15-30 minutes on FVP. + The capsule update takes about 8 minutes to complete on MPS3 and between 10-15 minutes on FVP. The Corstone-1000 will reset after successfully applying the capsule. @@ -1437,13 +1437,13 @@ The following table shows the details of the first four ESRT entries for the pos +-------------------+-----------------------+-------------+----------------+-------------------------+--------------------------+-----------------------------+ | ``capsule_flags`` | ``fw_class`` | ``fw_type`` | ``fw_version`` | ``last_attempt_status`` | ``last_attempt_version`` | ``lowest_supported_fw_ver`` | +===================+=======================+=============+================+=========================+==========================+=============================+ -| 0 | ``${BL2_GUID}`` | 0 | 6 | 0 | 6 | 0 | +| 0 | ``${BL2_GUID}`` | 1 | 6 | 0 | 6 | 0 | +-------------------+-----------------------+-------------+----------------+-------------------------+--------------------------+-----------------------------+ -| 0 | ``${TFM_S_GUID}`` | 0 | 6 | 0 | 6 | 0 | +| 0 | ``${TFM_S_GUID}`` | 1 | 6 | 0 | 6 | 0 | +-------------------+-----------------------+-------------+----------------+-------------------------+--------------------------+-----------------------------+ -| 0 | ``${FIP_GUID}`` | 0 | 6 | 0 | 6 | 0 | +| 0 | ``${FIP_GUID}`` | 1 | 6 | 0 | 6 | 0 | +-------------------+-----------------------+-------------+----------------+-------------------------+--------------------------+-----------------------------+ -| 0 | ``${INITRAMFS_GUID}`` | 0 | 6 | 0 | 6 | 0 | +| 0 | ``${INITRAMFS_GUID}`` | 1 | 6 | 0 | 6 | 0 | +-------------------+-----------------------+-------------+----------------+-------------------------+--------------------------+-----------------------------+ Positive Partial Capsule Update Test ESRT @@ -1454,13 +1454,13 @@ The following table shows the details of the first four ESRT entries for the pos +-------------------+-----------------------+-------------+----------------+-------------------------+--------------------------+-----------------------------+ | ``capsule_flags`` | ``fw_class`` | ``fw_type`` | ``fw_version`` | ``last_attempt_status`` | ``last_attempt_version`` | ``lowest_supported_fw_ver`` | +===================+=======================+=============+================+=========================+==========================+=============================+ -| 0 | ``${BL2_GUID}`` | 0 | 7 | 0 | 7 | 0 | +| 0 | ``${BL2_GUID}`` | 1 | 7 | 0 | 7 | 0 | +-------------------+-----------------------+-------------+----------------+-------------------------+--------------------------+-----------------------------+ -| 0 | ``${TFM_S_GUID}`` | 0 | 6 | 0 | 6 | 0 | +| 0 | ``${TFM_S_GUID}`` | 1 | 6 | 0 | 6 | 0 | +-------------------+-----------------------+-------------+----------------+-------------------------+--------------------------+-----------------------------+ -| 0 | ``${FIP_GUID}`` | 0 | 6 | 0 | 6 | 0 | +| 0 | ``${FIP_GUID}`` | 1 | 6 | 0 | 6 | 0 | +-------------------+-----------------------+-------------+----------------+-------------------------+--------------------------+-----------------------------+ -| 0 | ``${INITRAMFS_GUID}`` | 0 | 6 | 0 | 6 | 0 | +| 0 | ``${INITRAMFS_GUID}`` | 1 | 6 | 0 | 6 | 0 | +-------------------+-----------------------+-------------+----------------+-------------------------+--------------------------+-----------------------------+ Rollback Protection Capsule Update Test ESRT @@ -1471,13 +1471,13 @@ The following table shows the details of the first four ESRT entries for the rol +-------------------+------------------------+-------------+----------------+-------------------------+--------------------------+-----------------------------+ | ``capsule_flags`` | ``fw_class`` | ``fw_type`` | ``fw_version`` | ``last_attempt_status`` | ``last_attempt_version`` | ``lowest_supported_fw_ver`` | +===================+========================+=============+================+=========================+==========================+=============================+ -| 0 | ``${BL2_GUID}`` | 0 | 7 | 1 | 5 | 0 | +| 0 | ``${BL2_GUID}`` | 1 | 7 | 1 | 5 | 0 | +-------------------+------------------------+-------------+----------------+-------------------------+--------------------------+-----------------------------+ -| 0 | ``${TFM_S_GUID}`` | 0 | 6 | 0 | 6 | 0 | +| 0 | ``${TFM_S_GUID}`` | 1 | 6 | 0 | 6 | 0 | +-------------------+------------------------+-------------+----------------+-------------------------+--------------------------+-----------------------------+ -| 0 | ``${FIP_GUID}`` | 0 | 6 | 0 | 6 | 0 | +| 0 | ``${FIP_GUID}`` | 1 | 6 | 0 | 6 | 0 | +-------------------+------------------------+-------------+----------------+-------------------------+--------------------------+-----------------------------+ -| 0 | ``${INITRAMFS_GUID}`` | 0 | 6 | 0 | 6 | 0 | +| 0 | ``${INITRAMFS_GUID}`` | 1 | 6 | 0 | 6 | 0 | +-------------------+------------------------+-------------+----------------+-------------------------+--------------------------+-----------------------------+ See the `UEFI documentation `__ for more information on the significance of the table fields. @@ -1486,7 +1486,7 @@ See the `UEFI documentation This selects the built-in PSA-ADAC implementation, its authentication-token @@ -2193,7 +2202,8 @@ For more information about this, see the following resources: DPv3 is required so that Arm Development Studio uses the ADIv6 debug-port addressing needed to reach ``CSAPBCOM``. - In the same file, give the copied platform a unique title: + In the same file, rename the platform to a unique title in the + ```` extension block: .. code-block:: xml @@ -2301,7 +2311,7 @@ For more information about this, see the following resources: *Copyright (c) 2022-2026, Arm Limited. All rights reserved.* .. _arm-developer-fvp: https://developer.arm.com/tools-and-software/open-source-software/arm-platforms-software/arm-ecosystem-fvps -.. _meta-arm-repository-release-branch: https://docs.yoctoproject.org/next/migration-guides/migration-6.0.html +.. _meta-arm-repository-release-branch: https://docs.yoctoproject.org/next/migration-guides/migration-6.1.html .. _arm-ds-website: https://www.arm.com/products/development-tools/embedded-and-software/arm-development-studio .. _arm-ulink-pro-d-website: https://www.arm.com/products/development-tools/debug-probes/ulink-pro .. _arm-dstream-website: https://www.arm.com/products/development-tools/debug-probes/dstream-st