1
0
mirror of https://git.yoctoproject.org/meta-ti synced 2026-04-26 22:49:26 +00:00
Files
meta-ti/recipes-security/optee/optee-os_%.bbappend
Sai Sree Kartheek Adivi 2bf12f5449 am62axx-evm: Add AM62A HS-FS evm configuration
Lets add the basic AM62A configuration
- Add machine conf for AM62A.
- The wic images will boot on AM62A HS-FS devices by default. The sysfw image for GP and HS-SE will be packaged in the wic image as tiboot3-am62ax-gp-evm.bin and tiboot3-am62ax-hs-evm.bin respectively.
- Add ti-sci-firmware overrides.
- Sign ATF, OPTEE and RTOS Firmware.

Signed-off-by: Chirag Shilwant <c-shilwant@ti.com>
Signed-off-by: Ryan Eatmon <reatmon@ti.com>
2023-02-14 07:45:02 -06:00

133 lines
3.5 KiB
Plaintext

PV_ti-soc = "3.20.0+git${SRCPV}"
SRCREV_ti-soc = "3bc3809afe372ca7e8216fc5d7a64e965bb4ad70"
SRC_URI_ti-soc = "git://github.com/OP-TEE/optee_os.git;protocol=https"
DEPENDS_append_ti-soc = " python3-cryptography-native"
EXTRA_OEMAKE_append_k3 = "${@ 'CFG_CONSOLE_UART='+ d.getVar('OPTEE_K3_USART') if d.getVar('OPTEE_K3_USART') else ''}"
EXTRA_OEMAKE_append_am62xx-evm = " CFG_WITH_SOFTWARE_PRNG=y CFG_TEE_CORE_LOG_LEVEL=1"
EXTRA_OEMAKE_append_am62xx-lp-evm = " CFG_WITH_SOFTWARE_PRNG=y CFG_TEE_CORE_LOG_LEVEL=1"
EXTRA_OEMAKE_append_am62axx-evm = " CFG_TEE_CORE_LOG_LEVEL=1"
do_compile_prepend_ti-soc() {
export TI_SECURE_DEV_PKG=${TI_SECURE_DEV_PKG}
}
do_compile_append_k3() {
( cd out/arm-plat-${OPTEEOUTPUTMACHINE}/core/; \
cp tee-pager_v2.bin ${B}/bl32.bin; \
cp tee-pager_v2.bin ${B}/bl32.bin.unsigned; \
cp tee.elf ${B}/bl32.elf; \
)
}
# Signing procedure for legacy HS devices
optee_sign_legacyhs() {
( cd out/arm-plat-${OPTEEOUTPUTMACHINE}/core/; \
${TI_SECURE_DEV_PKG}/scripts/secure-binary-image.sh tee.bin tee.bin.signed; \
normfl=`echo ${OPTEEFLAVOR} | tr "_" "-"`
mv tee.bin.signed ${B}/$normfl.optee; \
)
if [ "${OPTEEPAGER}" = "y" ]; then
rm -rf out/
oe_runmake all CFG_TEE_TA_LOG_LEVEL=0 CFG_WITH_PAGER=y
( cd out/arm-plat-${OPTEEOUTPUTMACHINE}/core/; \
${TI_SECURE_DEV_PKG}/scripts/secure-binary-image.sh tee.bin tee.bin.signed; \
normfl=`echo ${OPTEEFLAVOR} | tr "_" "-"`
mv tee.bin.signed ${B}/$normfl-pager.optee; \
)
fi
}
# Signing procedure for K3 HS devices
optee_sign_k3hs() {
( cd out/arm-plat-${OPTEEOUTPUTMACHINE}/core/; \
if [ -f ${TI_SECURE_DEV_PKG}/scripts/secure-binary-image.sh ]; then \
${TI_SECURE_DEV_PKG}/scripts/secure-binary-image.sh tee-pager_v2.bin tee-pager.bin.signed; \
else \
echo "Warning: TI_SECURE_DEV_PKG not set, OP-TEE not signed."; \
cp tee-pager_v2.bin tee-pager.bin.signed; \
fi; \
mv tee-pager.bin.signed ${B}/bl32.bin; \
cp tee-pager_v2.bin bl32.bin.unsigned; \
cp tee.elf ${B}/bl32.elf; \
)
}
do_compile_append_ti43x() {
optee_sign_legacyhs
}
do_compile_append_dra7xx() {
optee_sign_legacyhs
}
do_compile_append_am65xx-hs-evm() {
optee_sign_k3hs
}
do_compile_append_am64xx-evm() {
optee_sign_k3hs
}
do_compile_append_am62xx-evm() {
optee_sign_k3hs
}
do_compile_append_am62xx-lp-evm() {
optee_sign_k3hs
}
do_compile_append_am62axx-evm() {
optee_sign_k3hs
}
do_compile_append_j7-hs-evm() {
optee_sign_k3hs
}
do_compile_append_j7200-hs-evm() {
optee_sign_k3hs
}
do_compile_append_j721s2-hs-evm() {
optee_sign_k3hs
}
do_compile_append_j784s4-hs-evm() {
optee_sign_k3hs
}
do_install_append_ti-soc() {
install -m 644 ${B}/*.optee ${D}${nonarch_base_libdir}/firmware/ || true
install -m 644 ${B}/bl32.bin ${D}${nonarch_base_libdir}/firmware/ || true
install -m 644 ${B}/bl32.bin.unsigned ${D}${nonarch_base_libdir}/firmware/ || true
install -m 644 ${B}/bl32.elf ${D}${nonarch_base_libdir}/firmware/ || true
}
optee_deploy_legacyhs() {
cd ${DEPLOYDIR}/
for f in optee/*.optee; do
ln -sf $f ${DEPLOYDIR}/
done
}
do_deploy_append_ti43x() {
optee_deploy_legacyhs
}
do_deploy_append_dra7xx() {
optee_deploy_legacyhs
}
do_deploy_append_k3() {
ln -sf optee/bl32.bin ${DEPLOYDIR}/
ln -sf optee/bl32.bin.unsigned ${DEPLOYDIR}/
ln -sf optee/bl32.elf ${DEPLOYDIR}/
}
# This is needed for bl32.elf
INSANE_SKIP_${PN}_append_k3 = " textrel"