summaryrefslogtreecommitdiffstats
path: root/recipes-security
Commit message (Collapse)AuthorAgeFilesLines
* optee-os: Use SoC override for i.MX6UL, i.MX6ULL and i.MX6ULZtopic/generalize-soc-overridesOtavio Salvador2022-02-211-4/+4
| | | | Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
* Rework recipes to use imx-nxp-bsp more extensivelyOtavio Salvador2022-02-212-2/+2
| | | | | | | | | | | | | | | | | | | | | | This rework the recipes making use of new imx-nxp-bsp override; it has been applied to: - gstreamer1.0 - gstreamer1.0-plugins-bad - gstreamer1.0-plugins-base - gstreamer1.0-plugins-good - imx-alsa-plugins - imx-codec - imx-gst1.0-plugin - imx-parser - libdrm - libimxdmabuffer - linux-fslc-imx - linux-imx - optee-client - optee-test Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
* Generalize overrides subsystem for NXP and Mainline supportOtavio Salvador2022-02-213-11/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Essentially, we extend the overrides to a generic-bsp, nxp-bsp, and mainline-bsp. So, for example, the mx8mq override is split into: - imx-generic-bsp: compatible with every i.MX SoC and both BSP variants - imx-nxp-bsp: compatible with every i.MX SoC but specific to NXP BSP - imx-mainline-bsp: compatible with every i.MX SoC but specific to Mainline BSP - mx8-generic-bsp: compatible with every i.MX8 SoC and both BSP variants - mx8-nxp-bsp: compatible with every i.MX8 SoC but specific to NXP BSP - mx8-mainline-bsp: compatible with every i.MX8 SoC but specific to Mainline BSP - mx8m-generic-bsp: compatible with every i.MX8M SoC and both BSP variants - mx8m-nxp-bsp: compatible with every i.MX8M SoC but specific to NXP BSP - mx8m-mainline-bsp: compatible with every i.MX8M SoC but specific to Mainline BSP - mx8mq-generic-bsp: compatible with every i.MX8MQ SoC and both BSP variants - mx8mq-nxp-bsp: compatible with every i.MX8MQ SoC8 but specific to NXP BSP - mx8mq-mainline-bsp: compatible with every i.MX8MQ SoC but specific to Mainline BSP The extender mechanism is responsible for extending the override list to include the generic overrides. We can then use the three different variants to handle the metadata correctly. Generically speaking, the conversion mainly was automated (with a lot of back and forth until getting it right). To convert an existing layer, the following script can be used: ```sh git ls-files classes recipes-* \ | xargs sed -i \ -e 's,:\(mx[6-8]\w*\),:\1-nxp-bsp,g' \ -e 's,(\(mx[6-8]\w*\)),(\1-nxp-bsp),g' \ -e 's,\(mx[6-8]\w*\)|,\1-nxp-bsp|,g' \ -e 's,|\(mx[6-8]\w*\)),|\1-nxp-bsp),g' \ \ -e 's,:\(mx[5s]\w*\),:\1-generic-bsp,g' \ -e 's,(\(mx[5s]\w*\)),(\1-generic-bsp),g' \ -e 's,\(mx[5s]\w*\)|,\1-generic-bsp|,g' \ -e 's,|\(mx[5s]\w*\)),|\1-generic-bsp),g' \ \ -e 's,:\(vf\w*\),:\1-generic-bsp,g' \ -e 's,:\(vf[56]0\w*\),:\1-generic-bsp,g' \ -e 's,\(vf\w*\)|,\1-generic-bsp|,g' \ -e 's,|\(vf\w*\)),|\1-generic-bsp),g' \ -e 's,\(vf[56]0\w*\)|,\1-generic-bsp|,g' \ -e 's,|\(vf[56]0\w*\)),|\1-generic-bsp),g' \ \ -e 's,:\(imx\) ,:\1-nxp-bsp ,g' \ -e 's,(\(imx\)),(\1-nxp-bsp),g' \ -e 's,\(imx\)|,\1-nxp-bsp|,g' \ -e 's,|\(imx\)),|\1-nxp-bsp),g' for d in $(find -type d | egrep '/mx[6-8]w*'); do git mv $d $d-nxp-bsp done for d in $(find -type d | egrep '/imx$'); do git mv $d $d-nxp-bsp done for d in $(find -type d | egrep '/mx[5s]w*'); do git mv $d $d-generic-bsp done ``` Fixes: #791. Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
* optee-imx: clarify BSD licenseAndrey Zhizhikin2022-02-183-3/+3
| | | | | | | | | | | | | | | | Since upstream commit 14d4c007c4 ("common-licences: remove ambiguous "BSD" license"), ambiguous "BSD" license has been removed from OE-Core. This triggers the warning message in QA: do_populate_lic_deploy: QA Issue: The license listed BSD was not in the licenses collected for recipe optee-os [license-file-missing] OP-TEE is licensed under "BSD-2-Clause" and license text clearly identifies it. Correct LICENSE variable to indicate proper License SPDX identifier. Signed-off-by: Andrey Zhizhikin <andrey.z@gmail.com>
* Merge pull request #970 from tprrt/tprrt/fix-optee-overridesOtavio Salvador2022-02-023-5/+4
|\ | | | | optee: fix override syntax
| * optee-test: correct TA_DEV_KIT_DIRThomas Perrot2022-02-021-2/+2
| | | | | | | | | | | | | | The value is either ${STAGING_INCDIR}/optee/export-user_ta_arm32/ or ${STAGING_INCDIR}/optee/export-user_ta_arm64/ Signed-off-by: Thomas Perrot <thomas.perrot@bootlin.com>
| * optee-os: fix an override syntaxThomas Perrot2022-02-021-2/+1
| | | | | | | | | | | | Correct a forgotten change when switching to the new syntax. Signed-off-by: Thomas Perrot <thomas.perrot@bootlin.com>
| * optee-client: fix an override syntaxThomas Perrot2022-02-021-1/+1
| | | | | | | | | | | | Correct a forgotten change when switching to the new syntax. Signed-off-by: Thomas Perrot <thomas.perrot@bootlin.com>
* | optee-test: replace old pycrypto with pycryptodomeThomas Perrot2022-02-021-1/+1
|/ | | | | | | For security reason, pycrypto is no longer available, but it can be replaced by pycryptodome. Signed-off-by: Thomas Perrot <thomas.perrot@bootlin.com>
* optee-qoriq: upgrade to 3.13Ting Liu2021-10-1512-212/+247
| | | | Signed-off-by: Ting Liu <ting.liu@nxp.com>
* optee-os-qoriq: fix wrong overridesTing Liu2021-10-131-1/+1
| | | | Signed-off-by: Ting Liu <ting.liu@nxp.com>
* optee-os: Add support for imx6qdlsabre* machinesTom Hochstein2021-08-211-0/+2
| | | | Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
* layer: Convert to new override syntaxKhem Raj2021-08-125-42/+42
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* optee-os: Remove unneeded dependency on python3-pycrptoOtavio Salvador2021-03-241-1/+1
| | | | | | | The python3-pycrpto is provided by python3-pycryptodomex, and in fact is not provided on OpenEmbedded anymore so it cannot be used. Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
* optee-os: Cleanup build optionsTom Hochstein2021-03-181-13/+7
| | | | | | | | | | | - Move log level variables to EXTRA_OEMAKE to simplify overriding - Set LDFLAGS and CFLAGS globally, like normal - Set -C in EXTRA_OEMAKE - Drop do_compile after all of the above - Drop un-necessary override of B variable - Simplify creation of tee.bin link in DEPLOYDIR Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
* optee-imx: add compatibility with imx-boot-containerAndrey Zhizhikin2021-03-171-1/+1
| | | | | | | | | | NXP version of OP-TEE is required to be packed in the boot container if optee feature is enabled in machine features. Add compatibility with imx-boot-container in order to pick up binaries produced by this package. Signed-off-by: Andrey Zhizhikin <andrey.z@gmail.com>
* optee-imx: Upgrade to 3.10.0Tom Hochstein2021-03-1610-542/+27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Update all recipes to pull sources from imx_5.4.70_2.3.0 branch in NXP upstream and update SRCREV to match release tags. Update PREFERRED_VERSION of optee for mx8 to point to 3.10.0.imx. Following notes are additions to the version update of recipes: -------------------------- optee-client: - Drop CFLAGS patch as it is already applied upstream optee-os: - Drop gcc10 patch as it is already applied upstream - Add dependency on python3-pycryptodomex-native - Drop NOWERROR flag as package is reworked to disable warnings by default - Rework mkimage load address since tee-init_load_addr.txt is no longer created optee-test: - Drop python3 patch as it is already applied upstream - Remove unused patch files from layer - Add dependency on python3-pycryptodomex-native - Add sysroot to C and C++ flags Fixes #686, fixes #689. Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
* optee-os_3.7.0.imx.bb: Fix platform flavor for imx8mq-evkCristinel Panfir2021-02-151-0/+1
| | | | | | | | | Due to machine renaming the PLATFORM_FLAVOR need to be updated according makefile. ... | core/arch/arm/plat-imx/conf.mk:211: *** Unsupported PLATFORM_FLAVOR "mx8mq-evk". Stop. ... Signed-off-by: Cristinel Panfir <cristinel.panfir@nxp.com>
* optee-os: Fix the platform for imx8qm-mekTom Hochstein2021-02-131-1/+2
| | | | | | | | | | | | | After the machine name change, the default setting for PLATFORM_FLAVOR no longer works. ``` | core/arch/arm/plat-imx/conf.mk:211: *** Unsupported PLATFORM_FLAVOR "mx8qm-mek". Stop. ``` Set the correct name again manually with SOC override. Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
* optee-os: Fix 6ULZ EVK override, drop 8 DXL Phantom overrideTom Hochstein2021-01-211-13/+12
| | | | Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
* optee-test-qoriq: DEPENDS python3-pycryptodomex-nativeTing Liu2020-12-171-1/+1
| | | | | | | | | Fix: | /usr/include/optee/export-user_ta/scripts/sign_encrypt.py", line 131, in main | from Cryptodome.Signature import pss | ModuleNotFoundError: No module named 'Cryptodome' Signed-off-by: Ting Liu <ting.liu@nxp.com>
* optee-os-qoriq: upgrade to 3.8.0Ting Liu2020-12-165-395/+50
| | | | Signed-off-by: Ting Liu <ting.liu@nxp.com>
* optee-client-qoriq: upgrade to 3.8.0Ting Liu2020-12-164-92/+28
| | | | | | | Switch to use codes from https://github.com/OP-TEE/optee_client, tag: 3.8.0 Signed-off-by: Ting Liu <ting.liu@nxp.com>
* optee-test-qoriq: upgrade to 3.8.0Ting Liu2020-12-163-84/+5
| | | | | | | Switch to use codes from https://github.com/OP-TEE/optee_test, tag: 3.8.0 Signed-off-by: Ting Liu <ting.liu@nxp.com>
* optee-test_3.7.0.imx: fix optee-test buildPeter Griffin2020-12-151-0/+7
| | | | | | | | | | | Currently nothing is built for optee-test which means do_install() fails copying xtest binary. Align the do_compile() with upstream meta-arm optee-test recipe. With this patch the build then completes OK. Fixes: a66dc98 Signed-off-by: Peter Griffin <peter.griffin@linaro.org>
* optee-imx: upgrade to version 3.7.0Andrey Zhizhikin2020-09-237-537/+118
| | | | | | | | | | | | | | | | | | | | | | | Update all recipes to pull sources from imx_5.4.24_2.1.0 branch in NXP upstream and update SRCREV to match release tags. Update PREFERRED_VERSION of optee for mx8 to point to 3.7.0.imx. Following notes are additions to the version update of recipes: -------------------------- optee-os: - Refresh gcc10 patch to resolve the fuzz during apply - Drop python patch as it is already applied upstream - Add new machines to the list optee-client: - Update CFLAGS patch to match 3.7.0 version - Split ${B} from ${S}, this makes build more clear optee-test: - Remove do_compile task and substitute with OEMAKE Signed-off-by: Andrey Zhizhikin <andrey.z@gmail.com>
* optee-os: backport to fix gcc10 compilation issueTing Liu2020-09-092-0/+162
| | | | Signed-off-by: Ting Liu <ting.liu@nxp.com>
* optee-client: refresh patch applied upstreamAndrey Zhizhikin2020-06-231-9/+29
| | | | | | | | | | | PR has been closed upstream with modifications to originally submitted patch. Later implementation implied more modification, which are not compatible with current version, therefore accepted patch has been backported to this fork. Refresh patch file with updated version from upstream. Signed-off-by: Andrey Zhizhikin <andrey.zhizhikin@leica-geosystems.com>
* optee-os: backport gcc10 compilation fix from upstreamAndrey Zhizhikin2020-06-233-65/+159
| | | | | | | | | | | | | | Backport PR 3891 [1] from OP-TEE upstream repository. This PR solves GCC10 compilation issue when new compiler option `outline-atomics` is not implemented and causes the linker error. In addition, above upstream PR solves issue with 'cc-option` macro, which is necessary to be used to provide comptibility with GCC <10 to disable the `outline-atomics` option, since it is present only in GCC10. [1]: https://github.com/OP-TEE/optee_os/pull/3891 Signed-off-by: Andrey Zhizhikin <andrey.zhizhikin@leica-geosystems.com>
* optee-client: add patch to avoid CFLAGS overridesAndrey Zhizhikin2020-05-312-1/+37
| | | | | | | | | | | Base optee-client implementation uses immediate assignment of CFLAGS variable in it's build structure, which causes Yocto CFLAGS to be overridden and not properly propagated into the build system. Introduce a patch which uses append operator intead of immediate assignment to have both CFLAGS variables to be combined. Signed-off-by: Andrey Zhizhikin <andrey.zhizhikin@leica-geosystems.com>
* optee-client: fix build architecture for aarch64Andrey Zhizhikin2020-05-311-9/+5
| | | | | | | | | | | | | | | Overridden do_compile() task relies on an old DEFAULTTUNE set to identify if the build should target arm32 or arm64 architecture, and has a direct comparison to the generic tune. Since aarch64 tune for some derivatives has been switched to a more specialized types (cortexa53-crypto), this causes the check to fail and build defaults to arm32, which is not desired behavior. Define OPTEE_ARCH to a proper value based on machine overrides, drop the task override and use standard Yocto mechanisms to provide additional parameters to make. Signed-off-by: Andrey Zhizhikin <andrey.zhizhikin@leica-geosystems.com>
* optee-os: fix gcc10 build for imx forkAndrey Zhizhikin2020-05-262-0/+65
| | | | | | | | | | | | | | | | | | | | | | | | | OP-TEE OS component fails to build on gcc10 due to missing __getauxval function. This can be resolved via disabling of outline-atomics feature in gcc10. Backport upstream patch [1] with adaptions to optee-imx version. Original patch uses $(call cc-option,-mno-outline-atomics,) to disable outline-atomics which itself is broken and required 4 additional patches to be compatible with gcc and clang. This is resolved in the upstream PR [2], which is applicable to the latest upstream version. NXP fork contains old version of OP-TEE, and therefore would receive the update for Makefiles with new version. Since it is not required to make current NXP version compatible with old compiler versions on master branch - outline-atomics are disabled directly. [1]: https://github.com/OP-TEE/optee_os/pull/3891/commits/e07c2b062846df4385542f4e4fe08b40cf7d8191 [2]: https://github.com/OP-TEE/optee_os/pull/3891 Signed-off-by: Andrey Zhizhikin <andrey.zhizhikin@leica-geosystems.com>
* optee-test-qoriq: add patch to use python3Ting Liu2020-05-062-0/+49
| | | | | | python2 is EOL January 2020. This fixes build failure due to python2. Signed-off-by: Ting Liu <ting.liu@nxp.com>
* optee-os: Replace /lib by ${nonarch_base_libdir} in do_installantznin2020-05-051-2/+2
| | | | | | | | | | | This fixes a do_package error when using `usrmerge` in `DISTRO_FEATURES`. In that case the bin files should have been installed in /usr/lib. Using ${nonarch_base_libdir} makes the location specific to distro settings. Signed-off-by: antznin <agodard@witekio.com> Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Change-Id: I9d6c015975b093f74f29927a7e8bdfd87fd3dc09
* optee-test_3.2.0.imx: fix TA_DEV_KIT_DIR is not correctly defined errorPeter Griffin2020-04-231-7/+7
| | | | | | | | | | | | | | | | | DEFAULTTUNE is no longer aarch64 which means optee-test build fails. Update to use the same mechanism as optee-os recipe for setting arch. Build now passes on imx8mq-evk and optee xtest suite passes +----------------------------------------------------- 16078 subtests of which 3 failed 74 test cases of which 3 failed 0 test case was skipped TEE test application done! Signed-off-by: Peter Griffin <peter.griffin@linaro.org>
* optee-os-qoriq: add patch to use python3Ting Liu2020-04-202-0/+81
| | | | | | python2 is EOL January 2020. This fixes build failure due to python2. Signed-off-by: Ting Liu <ting.liu@nxp.com>
* optee-test_3.2.0.imx: add patch to use python3, backported from v3.8.0Peter Griffin2020-04-172-0/+49
| | | | | | | | This avoids build errors such as optee-test/3.2.0.imx-r0/git/out/ta/crypt//mid_crt.c] Error 127 | /usr/bin/env: ‘python’: No such file or directory Signed-off-by: Peter Griffin <peter.griffin@linaro.org>
* optee-imx: upgrade to lf-5.4.yAndrey Zhizhikin2020-04-163-13/+6
| | | | | | | | | | Upgrade optee recipes to fetch sources from lf-5.4.y branch, this is aligned with new kernel release from NXP. optee-os and optee-client has build defines dropped, this is originated in NXP fork. Signed-off-by: Andrey Zhizhikin <andrey.zhizhikin@leica-geosystems.com>
* optee-test-qoriq: update to python3-pycrypto-native dependencyChunrong Guo2020-02-111-1/+1
| | | | Signed-off-by: Chunrong Guo <chunrong.guo@nxp.com>
* optee-os-qoriq: update to python3-pycrypto-native dependencyChunrong Guo2020-02-111-1/+1
| | | | Signed-off-by: Chunrong Guo <chunrong.guo@nxp.com>
* optee-test: update to python3-pycrypto-native dependencyPeter Griffin2020-02-031-1/+1
| | | | | | As python2 packages are now dropped in oe-core. Signed-off-by: Peter Griffin <peter.griffin@linaro.org>
* optee[-imx]: update recipes to use python3Andrey Zhizhikin2020-01-237-8/+439
| | | | | | | | | | Since Python2 is dropped in oe-core and classes are not available anymore, optee components should be updated to utilize python3. optee-os recipe received an additionl patch to re-target the Python version in the source tree to python3. Signed-off-by: Andrey Zhizhikin <andrey.zhizhikin@leica-geosystems.com>
* optee-test_3.2.0.imx: remove no longer required gcc fixesPeter Griffin2020-01-143-140/+0
| | | | | | | These are now present in the new op-tee fork version. Fixes: 020d818 Signed-off-by: Peter Griffin <peter.griffin@linaro.org>
* optee-client_3.2.0.imx: remove 0001-libteec-refactor-_dprintf.patchPeter Griffin2020-01-142-173/+1
| | | | | | | | This patch no longer applies as it is already included in the new optee-client tag. Fixes: 020d818 Signed-off-by: Peter Griffin <peter.griffin@linaro.org>
* optee-imx: add (backported) patches for GCC 9 & muslAndré Draszik2020-01-085-0/+252
| | | | | | | See the individual patches - all patches are simply backports from optee upstream releases. Signed-off-by: André Draszik <andre.draszik@jci.com>
* optee-[client,test]: upgrade to 4.19.35_1.1.0Andrey Zhizhikin2020-01-082-4/+4
| | | | | | | This upgrade is required to support new i.MX8M Nano SoC and is also aligned with all optee-imx components. Signed-off-by: Andrey Zhizhikin <andrey.zhizhikin@leica-geosystems.com>
* optee-os: update to 4.19.35_1.1.0 and introduce imx8mn configAndrey Zhizhikin2020-01-081-2/+3
| | | | | | | | | | | In order to support new i.MX8M Nano SoC, optee-os should be upgraded to use the imx_4.19.35_1.1.0 branch, which contains the support for new machine. In addition, introduce additional PLATFORM_FLAVOR for new imx8mnevk machine. Signed-off-by: Andrey Zhizhikin <andrey.zhizhikin@leica-geosystems.com>
* optee-os_3.2.0: change PLATFORM_FLAVOR for imx6ulz14x14evkClement Faure2019-11-261-1/+1
| | | | | | The platform flavor 'mx6ulzevk' has been added to Optee-OS. Signed-off-by: Clement Faure <clement.faure@nxp.com>
* optee-imx: Make it imx specificKhem Raj2019-11-101-0/+1
| | | | | | | Fails to build on qemu | core/arch/arm/plat-imx/conf.mk:112: *** Unsupported PLATFORM_FLAVOR "emuarm". Stop. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* optee-client: Add support for optee-client imx forkPeter Griffin2019-11-083-0/+239
| | | | | | This also includes some backported gcc 8 fixes from upstream. Signed-off-by: Peter Griffin <peter.griffin@linaro.org>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2024-06-26 13:53:30 +0000