1
0
mirror of https://git.yoctoproject.org/meta-arm synced 2026-05-07 04:58:57 +00:00
Commit Graph

2085 Commits

Author SHA1 Message Date
Ross Burton 5a7db0ae66 arm/trusted-firmware-a: update mbedtls to recommended release
The TF-A 2.9 documentation[1] says that mbedtls 3.4.0 is the recommended
release to use, so switch to that.

[1] https://trustedfirmware-a.readthedocs.io/en/v2.9/getting_started/prerequisites.html#software-and-libraries

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-11-03 16:00:17 -04:00
Debbie Martin 00e5691e2f ci: Add fvpboot to IMAGE_CLASSES
Use IMAGE_CLASSES rather than a direct INHERIT for fvpboot.
This is Yocto best practice as it is used to enable
functionality across all image recipes.

Signed-off-by: Debbie Martin <Debbie.Martin@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-11-03 06:00:40 -04:00
Debbie Martin 16d03e507f kas: Add kas configuration for Arm SystemReady and fvp-base
Add systemready firmware, systemready ACS, systemready distros, and
fvp-base kas configurations. Update the README file with
instructions on how to build and run using them.

Signed-off-by: Debbie Martin <Debbie.Martin@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-11-03 06:00:40 -04:00
Debbie Martin f6dc41140c arm-bsp/systemready: Bring up the Arm SystemReady IR ACS 2.0 suite on FVP base
1. Configure FVP base to allow Arm SystemReady IR ACS console access.
2. Configure FVP base Arm SystemReady IR ACS firmware build.
3. Add the machine-specific report.txt for FVP base.
4. Patch the check-sr-results.yaml and format-sr-results.yaml files
   to handle the known differences between FVP base and the
   expected ACS functionality.
5. Add a README with instructions of how to use the meta-arm-systemready
   layer with fvp-base.

Signed-off-by: Debbie Martin <Debbie.Martin@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-11-03 06:00:40 -04:00
Debbie Martin aebe535aa8 arm-systemready: Introduce the Arm SystemReady layer
Add the meta-arm-systemready layer. This provides the infrastructure to
load and run the Arm SystemReady IR ACS v2.0.0 prebuilt image and
analyze the results.

The recipes included are as follows:
1. arm-systemready-firmware: Enables the ARM_SYSTEMREADY_FIRMWARE machine
   conf variable to be used to specify which firmware packages to deploy.
2. arm-systemready-ir-acs: Runs the Arm SystemReady IR ACS tests from
   the pre-built images and checks the results adhere to the specification.
3. arm-systemready-linux-distros-[debian|opensuse]: Install the distro of
   choice from CD/DVD image to target disk image.

Signed-off-by: Debbie Martin <Debbie.Martin@arm.com>
Signed-off-by: Diego Sueiro <diego.sueiro@arm.com>
Signed-off-by: Peter Hoyes <Peter.Hoyes@arm.com>
Signed-off-by: Qi Feng <qi.feng@arm.com>
Signed-off-by: Robbie Cao <robbie.cao@arm.com>
Signed-off-by: Tomás González <tomasagustin.gonzalezorlando@arm.com>
Signed-off-by: Vineeth Raveendran <vineeth.raveendran@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-11-03 06:00:40 -04:00
Debbie Martin f78716db98 arm/fvp-base: Update the default testsuites
For fvp-base, update the DEFAULT_TEST_SUITES to include
fvp_boot and fvp_devices. This is only the default behaviour;
individual recipes can override this using the TEST_SUITES
variable.

Signed-off-by: Debbie Martin <Debbie.Martin@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-11-03 06:00:40 -04:00
Jon Mason a25a782b45 arm/optee: cleanups from code review
Comments were made after previous optee changes were committed.
Addressing those comments here.

Suggested-by: Denys Dmytriyenko <denis@denix.org>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-11-01 14:00:42 -04:00
Ali Can Ozaslan 559b8af1ed arm-bsp/documentation: corstone1000: Update the user guide
Update capsule document procedure and ACS image in user guide.

Signed-off-by: Ali Can Ozaslan <ali.oezaslan@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-11-01 12:00:25 -04:00
Jon Mason cddaf8cb0c arm/optee: update to 4.0.0
Update the recipes and patches for OP-TEE 4.0.0.  Migrate the 3.22.0
recipe to meta-arm-bsp for corstone1000 and n1sdp.

Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-30 12:00:24 -04:00
Jon Mason 26586c3d7c arm/hafnium: update to v2.9
Updating to the latest version of hafnium.  Also, dropping tc patches,
as they are either experimental or a similar feature has been added.

Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-30 12:00:22 -04:00
Emekcan Aras 450037ab33 arm-bsp/trusted-firmware-m: update the upstream status of the out-of-tree patches
Updates the status of the patches on the trusted-firmware-m for
corstone1000.

Signed-off-by: Emekcan Aras <emekcan.aras@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-26 13:00:27 -04:00
Emekcan Aras 6dd4620538 arm-bsp/trusted-firmware-m: fix capsule update alignment
U-boot mkefitool creates capsule image without packed and byte-aligned structs.
This patch aligns the capsule-update structures and avoids crashes in case of
unaligned pointer access.

Signed-off-by: Emekcan Aras <emekcan.aras@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-26 13:00:27 -04:00
Jon Mason f625361770 arm-bsp/edk2: remove 202211
202211 is no longer referenced and can be removed

Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-26 10:00:22 -04:00
Jon Mason 2e76052ed2 arm-bsp/optee: remove 3.18 recipes and patches
3.18 recipes and patches are no longer in use and can be removed

Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-26 10:00:22 -04:00
Emekcan Aras f37dc57c54 arm-bsp/u-boot: corstone1000: fix runtime capsule update flag checks
Platform-specific capsule-update feature in u-boot does not check the
capsule-update flags properly (as stated in UEFI specs). This patch fixes the
capsule flags checks in u-boot for corstone1000.

Signed-off-by: Emekcan Aras <emekcan.aras@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-26 09:00:26 -04:00
Emekcan Aras b3f58a0d09 arm-bsp/u-boot: corstone1000: enable on-disk capsule update
Enables on-disk capsule update feature for corstone1000.

Signed-off-by: Emekcan Aras <emekcan.aras@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-26 09:00:26 -04:00
Xueliang Zhong 21df60b921 arm-bsp/n1sdp: update to linux yocto kernel 6.5
Bump kernel version to v6.5 and rebased N1SDP kernel PCIe quirk patches top of this new version.

Signed-off-by: Xueliang Zhong <xueliang.zhong@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-25 15:00:21 -04:00
Ross Burton ce1cb5c740 arm-bsp/u-boot: remove 2023.01
This was made redundant when Corstone 500 upgraded in bddec6c.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-25 10:38:09 -04:00
Ross Burton cba57a6b07 CI: build both aarch64 and x86-64 packages for as many FVPs as possible
Some FVPs are available as x86-64 and aarch64 binaries, so build target
(qemuarm64) and nativesdk (x86-64) packages for these to verify the
checksums are correct.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-24 10:35:40 -04:00
Ross Burton 7309e2683b CI: don't pin corstone1000-fvp to x86-64
Now that there's a FVP for aarch64, we don't need to pin the CI pipeline
to x86-64.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-24 10:35:40 -04:00
Ross Burton ef47c87dbb kas/corstone1000: don't limit the FVP use to x86-64
Now that the FVP supports both aarch64 and x86-64, this inherit doesn't
need to be conditional.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-24 10:35:40 -04:00
Ross Burton 4c27c5fe25 arm/fvp-corstone1000: upgrade to 11.22.35, add aarch64 binaries
Upgrade to the 11.22.35 release of the FVP.

Also add the aarch64 binaries as these are now available.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-24 10:35:40 -04:00
Debbie Martin 0262fee5aa arm-bsp/fvp-base: Configure grub as the EFI provider
Configure grub as the EFI provider and remove the U-boot boot
args.

Signed-off-by: Debbie Martin <Debbie.Martin@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-24 10:32:13 -04:00
Debbie Martin e4fcfa534d arm-bsp/u-boot/fvp-base: Configure FVP base U-boot machine and enable U-boot sysreset, CRC-32 and virtio RNG
Configure FVP base to use vexpress_fvp_defconfig as the U-boot machine.

Configure U-boot:
1. Drop the patch to pick the DRAM size from the devicetree since
   the FVP now specifies a devicetree.
2. Enable sysreset to reset by PSCI and patch the vexpress U-boot
machine to leave the reset to PSCI in this case.
3. Enable Virtio RNG and patch the U-boot Virtio RNG driver to
workaround an issue with the FVP that results in RNG calls
hanging.
4. Enable the Arm64 CRC-32 instruction by default and remove the now
   redundant config setting.

Signed-off-by: Debbie Martin <Debbie.Martin@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-24 09:54:35 -04:00
Debbie Martin 809b401938 arm-bsp/trusted-firmware-a/fvp-base: Add stdout path and virtio net and rng
Set the Trusted Firmware devicetree to fvp-base-gicv3-psci-1t. Patch the
devicetree to include: the stdout path for console access, a virtio net
node and a virtio rng node. This is necessary in the case that the
Trusted Firmware devicetree is passed to Linux from U-boot (rather than
sideloading).

Also rename the include file to change the suffix from "fvp" to "fvp-base".

Signed-off-by: Debbie Martin <Debbie.Martin@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-24 09:54:35 -04:00
Debbie Martin 05d631541f arm-bsp/fvp-base: Merge fvp-common.inc into fvp-base.conf
Merge the common FVP configuration in fvp-common.inc into
fvp-base.conf since that is the only place it is inherited.

Drop setting MACHINE_FEATURES to "optee" because there is no
optee machine feature.

Signed-off-by: Debbie Martin <Debbie.Martin@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-24 09:54:35 -04:00
Debbie Martin 6da032d8f0 arm-bsp/u-boot: Divide the U-boot configuration by machine
Have separate machine include files rather than multiple
machine-specific settings in the same file.

Signed-off-by: Debbie Martin <Debbie.Martin@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-24 09:54:35 -04:00
Ross Burton 4bf3246b7b CI: track nanbield branches
meta-clang and meta-virtualisation don't yet have nanbield branches, so
we need to use master for those at the moment.

Signed-off-by: Ross Burton <ross.burton@arm.com>
2023-10-19 17:36:28 +01:00
Drew Reed ba17def14a CI: Enable TF-A TFTF test builds
To allow running the TF-A TFTF tests we need to ensure the images for
N1SDP and Corstone-1000 MPS3 boards build

Signed-off-by: Drew Reed <Drew.Reed@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-18 11:13:10 -04:00
Drew Reed 8b3df3dd9b arm-bsp: Enable TF-A test building for the N1SDP
To allow running of the TF-A tests we need to be able to build the TF-A
test recipe for the N1SDP machine.

Signed-off-by: Drew Reed <Drew.Reed@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-18 11:13:04 -04:00
Mariam Elshakfy 60eab95971 arm-bsp/n1sdp: Enable OP-TEE cache in N1SDP
This change enables N1SDP cache to improve performance
by removing this patch:
HACK-disable-instruction-cache-and-data-cache.patch

Signed-off-by: Mariam Elshakfy <mariam.elshakfy@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-18 11:13:00 -04:00
Mariam Elshakfy c3ee38fca5 arm-bsp/n1sdp: Move OP-TEE to DDR4
Since the original location of OP-TEE in DDR3 observes
a HW issue when cache is enabled, this change moves OP-TEE
to run from DDR4. Patches are added to TF-A to reflect that
change and the used region is also reserved in UEFI (EDK2)
to protect against allocations by UEFI applications.
OP-TEE size is modified for consistency across all patches
to be 32 MB (0x02000000) instead of (0x02008000).

Signed-off-by: Mariam Elshakfy <mariam.elshakfy@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-18 11:12:26 -04:00
Abdellatif El Khlifi 2608ba344f arm-bsp/linux-yocto: corstone1000: bump to v6.5%
upgrade the kernel to v6.5%

Signed-off-by: Abdellatif El Khlifi <abdellatif.elkhlifi@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-17 13:00:17 -04:00
Jon Mason b4c5577317 arm/linux-yocto: remove PHYS_VIRT config frag
The PHYS_VIRT config fragment is no longer needed for qemuarm

Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-17 10:10:29 -04:00
Xueliang Zhong 7d651e01fb Update Corstone-1000 doc with security issue reporting guideline
Signed-off-by: Xueliang Zhong <xueliang.zhong@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-17 09:57:02 -04:00
Harsimran Singh Tungal b855739e81 arm-bsp/images: corstone1000: Remove the external system test package
Remove external system linux userspace test application

Signed-off-by: Harsimran Singh Tungal <harsimransingh.tungal@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-17 09:56:56 -04:00
Harsimran Singh Tungal 3314bfb27d arm-bsp/linux: corstone1000: Remove External system patches
Remove the External system patches as they are not upstreamable.

Signed-off-by: Harsimran Singh Tungal <harsimransingh.tungal@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-17 09:56:48 -04:00
Harsimran Singh Tungal 9361cde6ae arm-bsp/linux: corstone1000: update the defconfig
the configuration options corresponding to external system are removed
from the kernel and the defconfig is generated with with savedefconfig
bitbake task

Signed-off-by: Harsimran Singh Tungal <harsimransingh.tungal@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-17 09:56:42 -04:00
Harsimran Singh Tungal 42bdec3ab8 arm-bsp/u-boot: corstone1000: Remove External system patches
Remove the External system patches in uboot as they are not upstreamable.

Signed-off-by: Harsimran Singh Tungal <harsimransingh.tungal@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-17 09:56:32 -04:00
Vikas Katariya 3ed13d25a0 arm-bsp/corstone1000: Fix RSA key generation issue
This support is for Cassini distro using Corstone-1000 platform.

When running parsec test, it reports an error
`PSA_ERROR_DATA_INVALID (-153)`.

This is related to `ITS_MAX_ASSET_SIZE` configuration which is been
set to 512 on the secure enclave (TF-M), which defines the max asset
size and it overflows when running the parsec tests.

The key is generated, but when it is asked to store via `psa_its_set`
it returns `PSA_ERROR_INVALID_ARGUMENT (-135)`, which then propagates
to `PSA_ERROR_DATA_INVALID (-153)`

Increasing the `ITS_MAX_ASSET_SIZE` to 2048 solves this issue.

Signed-off-by: Vikas Katariya <vikas.katariya@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-16 09:27:17 -04:00
Ross Burton ebe4d2437c CI: also run the _qemutiny testcase for poky-tiny
The terribly named qemutiny test case tries to login to the target over
the serial console.  It's designed for poky-tiny, so add it to the tests
we run in poky-tiny builds.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-13 13:01:49 -04:00
Ross Burton 19d2d8a484 CI: don't hardcode the selftest tests to run
Just execute all tests with the meta-arm tag, instead of hardcoding the
list of tests.

Also run two tests in parallel as there's no reason to limit it to one.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-13 13:01:49 -04:00
Ross Burton cadb42a66c arm/oeqa/selftest: tag all tests with "meta-arm"
Tag all of the tests in meta-arm so that they can be selectively ran
without needing to explicitly list them.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-13 13:01:49 -04:00
Jon Mason bc4d2e4124 CI: add sbsa-acs to recipe report
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-13 09:50:02 -04:00
Jon Mason 86e17cf073 arm/linux-yocto: remove defconfig patch
Patch was accepted upstream and has been pulled back the 6.5 and 6.1
kernels.  So, it is no longer needed here.

Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-13 09:50:02 -04:00
Jon Mason 07dbfed721 arm-bsp/linux-yocto: add recipe for v6.4 kernel
The v6.4 kernel is needed for some platforms in meta-arm-bsp.
Temporarily add it here to give those machines enough time to
update to the latest version.  Also, add the patch to the
defconfig.

Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-13 09:49:07 -04:00
Javier Tia f2efb2a456 trusted-firmware-a: fix build error when using ccache
When ccache is enabled trusted-firmware-a recipe fails with this
error message:

    make: *** No rule to make target 'aarch64-poky-linux-gcc'. Stop.

ccache prefix CC variable with 'ccache' word before compiler. Because
there are no quotes assigned to CC, only 'ccache' is assigned. The
compiler becomes a make target, producing the build error.

Add single quotes to LD is a good measure to prevent this kind of error.

Signed-off-by: Javier Tia <javier.tia@linaro.org>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-07 19:00:37 -04:00
Jon Mason e914891eee arm-bsp/u-boot: add recipe for 2023.07.02
Multiple machines in meta-arm-bsp have need of the 2023.07.02 version of
u-boot.  Temporarily add it here to give those machines enough time to
update to the latest version.

NOTE: MTD changes in u-boot require changes to the qemuarm config.
Specifically, not disabling it.

Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-06 09:30:14 -04:00
Emekcan Aras 95789365f7 arm-bsp/trusted-firmware-m: Enable authenticated capsule update
Enables authenticated capsule update and makes necessary changes to
align with new capsule generation tool (mkeficapsule in u-boot).

Signed-off-by: Emekcan Aras <emekcan.aras@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-02 07:00:44 -04:00
Emekcan Aras fdbf5f55ad arm-bsp/u-boot: corstone1000: introduce authenticated capsule update
Adds signature to device-tree overlay and enables authenticated capsule
update in u-boot for corstone1000.

Signed-off-by: Emekcan Aras <emekcan.aras@arm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>
2023-10-02 07:00:44 -04:00