diff options
Diffstat (limited to 'recipes-security/optee-imx')
18 files changed, 103 insertions, 71 deletions
diff --git a/recipes-security/optee-imx/optee-client-fslc-imx.inc b/recipes-security/optee-imx/optee-client-fslc-imx.inc index 7aeff9fd5..1112a864d 100644 --- a/recipes-security/optee-imx/optee-client-fslc-imx.inc +++ b/recipes-security/optee-imx/optee-client-fslc-imx.inc | |||
| @@ -1,5 +1,5 @@ | |||
| 1 | # Copied from meta-imx/meta-imx-bsp/recipes-security/optee/optee-client-imx.inc. | 1 | # Copied from meta-imx/meta-imx-bsp/recipes-security/optee/optee-client-imx.inc. |
| 2 | # See: https://github.com/nxp-imx/imx-manifest/blob/imx-linux-scarthgap/imx-6.6.52-2.2.0.xml#L37 | 2 | # See: https://github.com/nxp-imx/imx-manifest/blob/imx-linux-walnascar/imx-6.12.20-2.0.0.xml#L37 |
| 3 | 3 | ||
| 4 | require optee-client-fslc.inc | 4 | require optee-client-fslc.inc |
| 5 | 5 | ||
| @@ -10,27 +10,8 @@ SRC_URI:remove = "git://github.com/OP-TEE/optee_client.git;branch=master;protoco | |||
| 10 | SRC_URI:prepend = "${OPTEE_CLIENT_SRC};branch=${SRCBRANCH} " | 10 | SRC_URI:prepend = "${OPTEE_CLIENT_SRC};branch=${SRCBRANCH} " |
| 11 | OPTEE_CLIENT_SRC ?= "git://github.com/nxp-imx/imx-optee-client.git;protocol=https" | 11 | OPTEE_CLIENT_SRC ?= "git://github.com/nxp-imx/imx-optee-client.git;protocol=https" |
| 12 | 12 | ||
| 13 | SRC_URI += "file://0001-tee-supplicant-Fix-non-arch-service-unit-install-pat.patch" | ||
| 14 | |||
| 13 | inherit pkgconfig | 15 | inherit pkgconfig |
| 14 | 16 | ||
| 15 | EXTRA_OECMAKE += "-DCFG_TEE_CLIENT_LOAD_PATH=${nonarch_base_libdir}" | 17 | EXTRA_OECMAKE += "-DCFG_TEE_CLIENT_LOAD_PATH=${nonarch_base_libdir}" |
| 16 | |||
| 17 | # Copy the udev rule from the libts recipe for starting tee-supplicant@.service | ||
| 18 | SRC_URI += "file://tee-udev.rules" | ||
| 19 | # Unix group name for dev/tee* ownership. | ||
| 20 | TEE_GROUP_NAME ?= "teeclnt" | ||
| 21 | do_install:append () { | ||
| 22 | if ${@oe.utils.conditional('VIRTUAL-RUNTIME_dev_manager', 'busybox-mdev', 'false', 'true', d)}; then | ||
| 23 | install -d ${D}${nonarch_base_libdir}/udev/rules.d/ | ||
| 24 | install -m 755 ${UNPACKDIR}/tee-udev.rules ${D}${nonarch_base_libdir}/udev/rules.d/ | ||
| 25 | sed -i -e "s/teeclnt/${TEE_GROUP_NAME}/" ${D}${nonarch_base_libdir}/udev/rules.d/tee-udev.rules | ||
| 26 | fi | ||
| 27 | |||
| 28 | if [ "${libdir}" != "${nonarch_base_libdir}" ]; then | ||
| 29 | rm -rf ${D}${libdir}/systemd | ||
| 30 | fi | ||
| 31 | } | ||
| 32 | inherit ${@oe.utils.conditional('VIRTUAL-RUNTIME_dev_manager', 'busybox-mdev', '', 'useradd', d)} | ||
| 33 | USERADD_PACKAGES = "${PN}" | ||
| 34 | GROUPADD_PARAM:${PN} = "--system ${TEE_GROUP_NAME}" | ||
| 35 | |||
| 36 | FILES:${PN} += "${libdir}/* ${includedir}/*" | ||
diff --git a/recipes-security/optee-imx/optee-client-fslc.inc b/recipes-security/optee-imx/optee-client-fslc.inc index 455bdd780..70a25fe6c 100644 --- a/recipes-security/optee-imx/optee-client-fslc.inc +++ b/recipes-security/optee-imx/optee-client-fslc.inc | |||
| @@ -1,5 +1,5 @@ | |||
| 1 | # Copied from meta-arm/recipes-security/optee/optee-client.inc. | 1 | # Copied from meta-arm/recipes-security/optee/optee-client.inc. |
| 2 | # See: https://github.com/nxp-imx/imx-manifest/blob/imx-linux-scarthgap/imx-6.6.52-2.2.0.xml#L30 | 2 | # See: https://github.com/nxp-imx/imx-manifest/blob/imx-linux-walnascar/imx-6.12.20-2.0.0.xml#L30 |
| 3 | 3 | ||
| 4 | SUMMARY = "OP-TEE Client API" | 4 | SUMMARY = "OP-TEE Client API" |
| 5 | DESCRIPTION = "Open Portable Trusted Execution Environment - Normal World Client side of the TEE" | 5 | DESCRIPTION = "Open Portable Trusted Execution Environment - Normal World Client side of the TEE" |
| @@ -8,32 +8,39 @@ HOMEPAGE = "https://www.op-tee.org/" | |||
| 8 | LICENSE = "BSD-2-Clause" | 8 | LICENSE = "BSD-2-Clause" |
| 9 | LIC_FILES_CHKSUM = "file://LICENSE;md5=69663ab153298557a59c67a60a743e5b" | 9 | LIC_FILES_CHKSUM = "file://LICENSE;md5=69663ab153298557a59c67a60a743e5b" |
| 10 | 10 | ||
| 11 | inherit systemd update-rc.d cmake | 11 | inherit systemd update-rc.d cmake useradd |
| 12 | 12 | ||
| 13 | SRC_URI = " \ | 13 | SRC_URI = " \ |
| 14 | git://github.com/OP-TEE/optee_client.git;branch=master;protocol=https \ | 14 | git://github.com/OP-TEE/optee_client.git;branch=master;protocol=https \ |
| 15 | file://tee-supplicant@.service \ | ||
| 16 | file://tee-supplicant.sh \ | 15 | file://tee-supplicant.sh \ |
| 17 | " | 16 | " |
| 18 | 17 | ||
| 19 | UPSTREAM_CHECK_GITTAGREGEX = "^(?P<pver>\d+(\.\d+)+)$" | 18 | UPSTREAM_CHECK_GITTAGREGEX = "^(?P<pver>\d+(\.\d+)+)$" |
| 20 | 19 | ||
| 21 | S = "${WORKDIR}/git" | ||
| 22 | |||
| 23 | EXTRA_OECMAKE = " \ | 20 | EXTRA_OECMAKE = " \ |
| 24 | -DBUILD_SHARED_LIBS=ON \ | 21 | -DBUILD_SHARED_LIBS=ON \ |
| 25 | -DCFG_TEE_FS_PARENT_PATH='${localstatedir}/lib/tee' \ | 22 | -DCFG_USE_PKGCONFIG=ON \ |
| 26 | " | 23 | " |
| 24 | |||
| 25 | # libts uses /dev/tee devices too. Add a common variable to allow configuring the same group. | ||
| 26 | TEE_GROUP_NAME ?= "tee" | ||
| 27 | |||
| 28 | EXTRA_OECMAKE += " -DCFG_ENABLE_SYSTEMD=On -DSYSTEMD_UNIT_DIR=${systemd_system_unitdir}/" | ||
| 29 | EXTRA_OECMAKE += " -DCFG_ENABLE_UDEV=On -DUDEV_UDEV_DIR=${nonarch_base_libdir}/udev/rules.d/" | ||
| 30 | EXTRA_OECMAKE += " -DCFG_TEE_GROUP=${TEE_GROUP_NAME} -DCFG_TEEPRIV_GROUP=teepriv" | ||
| 31 | |||
| 27 | EXTRA_OECMAKE:append:toolchain-clang = " -DCFG_WERROR=0" | 32 | EXTRA_OECMAKE:append:toolchain-clang = " -DCFG_WERROR=0" |
| 28 | 33 | ||
| 29 | do_install:append() { | 34 | do_install:append() { |
| 30 | install -D -p -m0644 ${UNPACKDIR}/tee-supplicant@.service ${D}${systemd_system_unitdir}/tee-supplicant@.service | 35 | if ${@bb.utils.contains('DISTRO_FEATURES', 'sysvinit', 'true', 'false', d)}; then |
| 31 | install -D -p -m0755 ${UNPACKDIR}/tee-supplicant.sh ${D}${sysconfdir}/init.d/tee-supplicant | 36 | install -D -p -m0755 ${UNPACKDIR}/tee-supplicant.sh ${D}${sysconfdir}/init.d/tee-supplicant |
| 32 | 37 | sed -i -e s:@sysconfdir@:${sysconfdir}:g \ | |
| 33 | sed -i -e s:@sysconfdir@:${sysconfdir}:g \ | 38 | -e s:@sbindir@:${sbindir}:g \ |
| 34 | -e s:@sbindir@:${sbindir}:g \ | 39 | -e s:@supluser@:teesuppl:g \ |
| 35 | ${D}${systemd_system_unitdir}/tee-supplicant@.service \ | 40 | -e s:@suplgroup@:teesuppl:g \ |
| 36 | ${D}${sysconfdir}/init.d/tee-supplicant | 41 | ${D}${sysconfdir}/init.d/tee-supplicant |
| 42 | fi | ||
| 43 | install -o teesuppl -g teesuppl -m 0700 -d ${D}${localstatedir}/lib/tee | ||
| 37 | } | 44 | } |
| 38 | 45 | ||
| 39 | SYSTEMD_SERVICE:${PN} = "tee-supplicant@.service" | 46 | SYSTEMD_SERVICE:${PN} = "tee-supplicant@.service" |
| @@ -41,3 +48,13 @@ SYSTEMD_SERVICE:${PN} = "tee-supplicant@.service" | |||
| 41 | INITSCRIPT_PACKAGES = "${PN}" | 48 | INITSCRIPT_PACKAGES = "${PN}" |
| 42 | INITSCRIPT_NAME:${PN} = "tee-supplicant" | 49 | INITSCRIPT_NAME:${PN} = "tee-supplicant" |
| 43 | INITSCRIPT_PARAMS:${PN} = "start 10 1 2 3 4 5 . stop 90 0 6 ." | 50 | INITSCRIPT_PARAMS:${PN} = "start 10 1 2 3 4 5 . stop 90 0 6 ." |
| 51 | |||
| 52 | FILES:${PN} += "${nonarch_base_libdir}/udev/rules.d/" | ||
| 53 | |||
| 54 | # Users and groups: | ||
| 55 | # TEE_GROUP_NAME group to access /dev/tee* | ||
| 56 | # teepriv group to acess /dev/teepriv*, only tee-supplicant | ||
| 57 | # teesuppl user and group teesuppl to run tee-supplicant | ||
| 58 | USERADD_PACKAGES = "${PN}" | ||
| 59 | GROUPADD_PARAM:${PN} = "--system ${TEE_GROUP_NAME}; --system teepriv; --system teesuppl" | ||
| 60 | USERADD_PARAM:${PN} = "--system -g teesuppl --groups teepriv --home-dir ${localstatedir}/lib/tee -M --shell /sbin/nologin teesuppl;" | ||
diff --git a/recipes-security/optee-imx/optee-client/0001-tee-supplicant-Fix-non-arch-service-unit-install-pat.patch b/recipes-security/optee-imx/optee-client/0001-tee-supplicant-Fix-non-arch-service-unit-install-pat.patch new file mode 100644 index 000000000..631e08019 --- /dev/null +++ b/recipes-security/optee-imx/optee-client/0001-tee-supplicant-Fix-non-arch-service-unit-install-pat.patch | |||
| @@ -0,0 +1,35 @@ | |||
| 1 | From 5ffab66dda3e25f0b2ebc5115013c4234d048703 Mon Sep 17 00:00:00 2001 | ||
| 2 | From: Tom Hochstein <tom.hochstein@nxp.com> | ||
| 3 | Date: Mon, 21 Apr 2025 08:47:29 -0500 | ||
| 4 | Subject: [PATCH] tee-supplicant: Fix non-arch service unit install path | ||
| 5 | |||
| 6 | A 64-bit build with multilib enabled fails: | ||
| 7 | ``` | ||
| 8 | ERROR: optee-client-4.4.0-r0 do_package: Didn't find service unit 'tee-supplicant@.service', specified in SYSTEMD_SERVICE:optee-client. Also looked for service unit 'tee-supplicant@.service'. | ||
| 9 | ``` | ||
| 10 | |||
| 11 | The problem is the service unit is installed in the arch-specific folder | ||
| 12 | /usr/lib64/systemd/system, but it is non-arch and should be in | ||
| 13 | /usr/lib/systemd/system. | ||
| 14 | |||
| 15 | Upstream-Status: Pending | ||
| 16 | Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com> | ||
| 17 | --- | ||
| 18 | tee-supplicant/CMakeLists.txt | 2 +- | ||
| 19 | 1 file changed, 1 insertion(+), 1 deletion(-) | ||
| 20 | |||
| 21 | diff --git a/tee-supplicant/CMakeLists.txt b/tee-supplicant/CMakeLists.txt | ||
| 22 | index 8df9bef..3ea058c 100644 | ||
| 23 | --- a/tee-supplicant/CMakeLists.txt | ||
| 24 | +++ b/tee-supplicant/CMakeLists.txt | ||
| 25 | @@ -119,6 +119,6 @@ endif() | ||
| 26 | ################################################################################ | ||
| 27 | install(TARGETS ${PROJECT_NAME} RUNTIME DESTINATION ${CMAKE_INSTALL_SBINDIR}) | ||
| 28 | configure_file(tee-supplicant@.service.in tee-supplicant@.service @ONLY) | ||
| 29 | -install(FILES ${CMAKE_BINARY_DIR}/${PROJECT_NAME}/tee-supplicant@.service DESTINATION ${CMAKE_INSTALL_LIBDIR}/systemd/system) | ||
| 30 | +install(FILES ${CMAKE_BINARY_DIR}/${PROJECT_NAME}/tee-supplicant@.service DESTINATION lib/systemd/system) | ||
| 31 | configure_file(optee-udev.rules.in optee-udev.rules @ONLY) | ||
| 32 | install(FILES ${CMAKE_BINARY_DIR}/${PROJECT_NAME}/optee-udev.rules DESTINATION ${CMAKE_INSTALL_SYSCONFDIR}/udev/rules.d) | ||
| 33 | -- | ||
| 34 | 2.34.1 | ||
| 35 | |||
diff --git a/recipes-security/optee-imx/optee-client/optee-udev.rules b/recipes-security/optee-imx/optee-client/optee-udev.rules new file mode 100644 index 000000000..075f469c0 --- /dev/null +++ b/recipes-security/optee-imx/optee-client/optee-udev.rules | |||
| @@ -0,0 +1,6 @@ | |||
| 1 | KERNEL=="tee[0-9]*", MODE="0660", OWNER="root", GROUP="teeclnt", TAG+="systemd" | ||
| 2 | |||
| 3 | # If a /dev/teepriv[0-9]* device is detected, start an instance of | ||
| 4 | # tee-supplicant.service with the device name as parameter | ||
| 5 | KERNEL=="teepriv[0-9]*", MODE="0660", OWNER="root", GROUP="teeclnt", \ | ||
| 6 | TAG+="systemd", ENV{SYSTEMD_WANTS}+="tee-supplicant@%k.service" | ||
diff --git a/recipes-security/optee-imx/optee-client_4.4.0.imx.bb b/recipes-security/optee-imx/optee-client_4.4.0.imx.bb deleted file mode 100644 index 322f998fc..000000000 --- a/recipes-security/optee-imx/optee-client_4.4.0.imx.bb +++ /dev/null | |||
| @@ -1,4 +0,0 @@ | |||
| 1 | require optee-client-fslc-imx.inc | ||
| 2 | |||
| 3 | SRCBRANCH = "lf-6.6.52_2.2.0" | ||
| 4 | SRCREV = "d221676a58b305bddbf97db00395205b3038de8e" | ||
diff --git a/recipes-security/optee-imx/optee-client_4.6.0.imx.bb b/recipes-security/optee-imx/optee-client_4.6.0.imx.bb new file mode 100644 index 000000000..b5a185da1 --- /dev/null +++ b/recipes-security/optee-imx/optee-client_4.6.0.imx.bb | |||
| @@ -0,0 +1,4 @@ | |||
| 1 | require optee-client-fslc-imx.inc | ||
| 2 | |||
| 3 | SRCBRANCH = "lf-6.12.20_2.0.0" | ||
| 4 | SRCREV = "02e7f9213b0d7db9c35ebf1e41e733fc9c5a3f75" | ||
diff --git a/recipes-security/optee-imx/optee-fslc.inc b/recipes-security/optee-imx/optee-fslc.inc index c89746dc4..599dda522 100644 --- a/recipes-security/optee-imx/optee-fslc.inc +++ b/recipes-security/optee-imx/optee-fslc.inc | |||
| @@ -1,14 +1,16 @@ | |||
| 1 | # Copied from meta-arm/recipes-security/optee/optee.inc. | 1 | # Copied from meta-arm/recipes-security/optee/optee.inc. |
| 2 | # See: https://github.com/nxp-imx/imx-manifest/blob/imx-linux-scarthgap/imx-6.6.52-2.2.0.xml#L30 | 2 | # See: https://github.com/nxp-imx/imx-manifest/blob/imx-linux-walnascar/imx-6.12.20-2.0.0.xml#L30 |
| 3 | 3 | ||
| 4 | UPSTREAM_CHECK_GITTAGREGEX = "^(?P<pver>\d+(\.\d+)+)$" | 4 | UPSTREAM_CHECK_GITTAGREGEX = "^(?P<pver>\d+(\.\d+)+)$" |
| 5 | 5 | ||
| 6 | COMPATIBLE_MACHINE ?= "invalid" | 6 | COMPATIBLE_MACHINE ?= "invalid" |
| 7 | COMPATIBLE_MACHINE:genericarm64 ?= "genericarm64" | ||
| 7 | COMPATIBLE_MACHINE:qemuarm64 ?= "qemuarm64" | 8 | COMPATIBLE_MACHINE:qemuarm64 ?= "qemuarm64" |
| 8 | COMPATIBLE_MACHINE:qemuarm ?= "qemuarm" | 9 | COMPATIBLE_MACHINE:qemuarm ?= "qemuarm" |
| 9 | # Please add supported machines below or set it in .bbappend or .conf | 10 | # Please add supported machines below or set it in .bbappend or .conf |
| 10 | 11 | ||
| 11 | OPTEEMACHINE ?= "${MACHINE}" | 12 | OPTEEMACHINE ?= "${MACHINE}" |
| 13 | OPTEEMACHINE:genericarm64 ?= "vexpress-qemu_armv8a" | ||
| 12 | OPTEEMACHINE:aarch64:qemuall ?= "vexpress-qemu_armv8a" | 14 | OPTEEMACHINE:aarch64:qemuall ?= "vexpress-qemu_armv8a" |
| 13 | OPTEEMACHINE:arm:qemuall ?= "vexpress-qemu_virt" | 15 | OPTEEMACHINE:arm:qemuall ?= "vexpress-qemu_virt" |
| 14 | 16 | ||
diff --git a/recipes-security/optee-imx/optee-os-common-fslc-imx.inc b/recipes-security/optee-imx/optee-os-common-fslc-imx.inc index 941182fe9..ffd217099 100644 --- a/recipes-security/optee-imx/optee-os-common-fslc-imx.inc +++ b/recipes-security/optee-imx/optee-os-common-fslc-imx.inc | |||
| @@ -1,6 +1,5 @@ | |||
| 1 | # Copied from meta-imx/meta-imx-bsp/recipes-security/optee/optee-os-common-imx.inc. | 1 | # Copied from meta-imx/meta-imx-bsp/recipes-security/optee/optee-os-common-imx.inc. |
| 2 | # See: https://github.com/nxp-imx/imx-manifest/blob/imx-linux-scarthgap/imx-6.6.52-2.2.0.xml#L37 | 2 | # See: https://github.com/nxp-imx/imx-manifest/blob/imx-linux-walnascar/imx-6.12.20-2.0.0.xml#L37 |
| 3 | |||
| 4 | require optee-os-fslc.inc | 3 | require optee-os-fslc.inc |
| 5 | 4 | ||
| 6 | DEPENDS:append:arm = "u-boot-mkimage-native" | 5 | DEPENDS:append:arm = "u-boot-mkimage-native" |
| @@ -38,6 +37,7 @@ OPTEEMACHINE:mx8mnul-nxp-bsp = "imx-mx8mnevk" | |||
| 38 | OPTEEMACHINE:mx8ulp-nxp-bsp = "imx-mx8ulpevk" | 37 | OPTEEMACHINE:mx8ulp-nxp-bsp = "imx-mx8ulpevk" |
| 39 | OPTEEMACHINE:mx91-nxp-bsp = "imx-mx91evk" | 38 | OPTEEMACHINE:mx91-nxp-bsp = "imx-mx91evk" |
| 40 | OPTEEMACHINE:mx93-nxp-bsp = "imx-mx93evk" | 39 | OPTEEMACHINE:mx93-nxp-bsp = "imx-mx93evk" |
| 40 | OPTEEMACHINE:mx943-nxp-bsp = "imx-mx943evk" | ||
| 41 | OPTEEMACHINE:mx95-nxp-bsp = "imx-mx95evk" | 41 | OPTEEMACHINE:mx95-nxp-bsp = "imx-mx95evk" |
| 42 | 42 | ||
| 43 | # Strip the leading imx- | 43 | # Strip the leading imx- |
diff --git a/recipes-security/optee-imx/optee-os-fslc-imx.inc b/recipes-security/optee-imx/optee-os-fslc-imx.inc index 5fe6a75a5..f46f666ee 100644 --- a/recipes-security/optee-imx/optee-os-fslc-imx.inc +++ b/recipes-security/optee-imx/optee-os-fslc-imx.inc | |||
| @@ -1,5 +1,5 @@ | |||
| 1 | # Copied from meta-imx/meta-imx-bsp/recipes-security/optee/optee-os-imx.inc. | 1 | # Copied from meta-imx/meta-imx-bsp/recipes-security/optee/optee-os-imx.inc. |
| 2 | # See: https://github.com/nxp-imx/imx-manifest/blob/imx-linux-scarthgap/imx-6.6.52-2.2.0.xml#L37 | 2 | # See: https://github.com/nxp-imx/imx-manifest/blob/imx-linux-walnascar/imx-6.12.20-2.0.0.xml#L37 |
| 3 | 3 | ||
| 4 | require optee-os-common-fslc-imx.inc | 4 | require optee-os-common-fslc-imx.inc |
| 5 | 5 | ||
diff --git a/recipes-security/optee-imx/optee-os-fslc.inc b/recipes-security/optee-imx/optee-os-fslc.inc index c1f1f48f5..4df1617d1 100644 --- a/recipes-security/optee-imx/optee-os-fslc.inc +++ b/recipes-security/optee-imx/optee-os-fslc.inc | |||
| @@ -1,5 +1,5 @@ | |||
| 1 | # Copied from meta-arm/recipes-security/optee/optee-os.inc. | 1 | # Copied from meta-arm/recipes-security/optee/optee-os.inc. |
| 2 | # See: https://github.com/nxp-imx/imx-manifest/blob/imx-linux-scarthgap/imx-6.6.52-2.2.0.xml#L30 | 2 | # See: https://github.com/nxp-imx/imx-manifest/blob/imx-linux-walnascar/imx-6.12.20-2.0.0.xml#L30 |
| 3 | 3 | ||
| 4 | SUMMARY = "OP-TEE Trusted OS" | 4 | SUMMARY = "OP-TEE Trusted OS" |
| 5 | DESCRIPTION = "Open Portable Trusted Execution Environment - Trusted side of the TEE" | 5 | DESCRIPTION = "Open Portable Trusted Execution Environment - Trusted side of the TEE" |
| @@ -19,7 +19,6 @@ DEPENDS:append:toolchain-clang = " compiler-rt" | |||
| 19 | 19 | ||
| 20 | SRC_URI = "git://github.com/OP-TEE/optee_os.git;branch=master;protocol=https" | 20 | SRC_URI = "git://github.com/OP-TEE/optee_os.git;branch=master;protocol=https" |
| 21 | 21 | ||
| 22 | S = "${WORKDIR}/git" | ||
| 23 | B = "${WORKDIR}/build" | 22 | B = "${WORKDIR}/build" |
| 24 | 23 | ||
| 25 | EXTRA_OEMAKE += " \ | 24 | EXTRA_OEMAKE += " \ |
| @@ -27,7 +26,7 @@ EXTRA_OEMAKE += " \ | |||
| 27 | CFG_${OPTEE_CORE}_core=y \ | 26 | CFG_${OPTEE_CORE}_core=y \ |
| 28 | CROSS_COMPILE_core=${HOST_PREFIX} \ | 27 | CROSS_COMPILE_core=${HOST_PREFIX} \ |
| 29 | CROSS_COMPILE_ta_${OPTEE_ARCH}=${HOST_PREFIX} \ | 28 | CROSS_COMPILE_ta_${OPTEE_ARCH}=${HOST_PREFIX} \ |
| 30 | NOWERROR=1 \ | 29 | AFLAGS="${CFLAGS}" \ |
| 31 | ta-targets=ta_${OPTEE_ARCH} \ | 30 | ta-targets=ta_${OPTEE_ARCH} \ |
| 32 | O=${B} \ | 31 | O=${B} \ |
| 33 | " | 32 | " |
| @@ -40,7 +39,7 @@ AS[unexport] = "1" | |||
| 40 | LD[unexport] = "1" | 39 | LD[unexport] = "1" |
| 41 | 40 | ||
| 42 | do_compile:prepend() { | 41 | do_compile:prepend() { |
| 43 | PLAT_LIBGCC_PATH=$(${CC} -print-libgcc-file-name) | 42 | PLAT_LIBGCC_PATH=$(${CC} -print-libgcc-file-name) |
| 44 | } | 43 | } |
| 45 | 44 | ||
| 46 | do_compile() { | 45 | do_compile() { |
| @@ -79,8 +78,5 @@ FILES:${PN}-ta = "${nonarch_base_libdir}/optee_armtz/*" | |||
| 79 | 78 | ||
| 80 | # note: "textrel" is not triggered on all archs | 79 | # note: "textrel" is not triggered on all archs |
| 81 | INSANE_SKIP:${PN} = "textrel" | 80 | INSANE_SKIP:${PN} = "textrel" |
| 82 | # Build paths are currently embedded | ||
| 83 | INSANE_SKIP:${PN} += "buildpaths" | ||
| 84 | INSANE_SKIP:${PN}-dev = "staticdev" | 81 | INSANE_SKIP:${PN}-dev = "staticdev" |
| 85 | INHIBIT_PACKAGE_STRIP = "1" | 82 | INHIBIT_PACKAGE_STRIP = "1" |
| 86 | |||
diff --git a/recipes-security/optee-imx/optee-os-tadevkit-fslc-imx.inc b/recipes-security/optee-imx/optee-os-tadevkit-fslc-imx.inc index 18cf9a374..0b02c6908 100644 --- a/recipes-security/optee-imx/optee-os-tadevkit-fslc-imx.inc +++ b/recipes-security/optee-imx/optee-os-tadevkit-fslc-imx.inc | |||
| @@ -1,5 +1,5 @@ | |||
| 1 | # Copied from meta-imx/meta-imx-bsp/recipes-security/optee/optee-os-tadevkit-imx.inc. | 1 | # Copied from meta-imx/meta-imx-bsp/recipes-security/optee/optee-os-tadevkit-imx.inc. |
| 2 | # See: https://github.com/nxp-imx/imx-manifest/blob/imx-linux-scarthgap/imx-6.6.52-2.2.0.xml#L37 | 2 | # See: https://github.com/nxp-imx/imx-manifest/blob/imx-linux-walnascar/imx-6.12.20-2.0.0.xml#L37 |
| 3 | 3 | ||
| 4 | require optee-os-common-fslc-imx.inc | 4 | require optee-os-common-fslc-imx.inc |
| 5 | 5 | ||
| @@ -22,6 +22,3 @@ do_deploy() { | |||
| 22 | } | 22 | } |
| 23 | 23 | ||
| 24 | FILES:${PN} = "${includedir}/optee/" | 24 | FILES:${PN} = "${includedir}/optee/" |
| 25 | |||
| 26 | # Build paths are currently embedded | ||
| 27 | INSANE_SKIP:${PN}-dev += "buildpaths" | ||
diff --git a/recipes-security/optee-imx/optee-os-tadevkit_4.4.0.imx.bb b/recipes-security/optee-imx/optee-os-tadevkit_4.4.0.imx.bb deleted file mode 100644 index bb2e2cf6b..000000000 --- a/recipes-security/optee-imx/optee-os-tadevkit_4.4.0.imx.bb +++ /dev/null | |||
| @@ -1,4 +0,0 @@ | |||
| 1 | require optee-os-tadevkit-fslc-imx.inc | ||
| 2 | |||
| 3 | SRCBRANCH = "lf-6.6.52_2.2.0" | ||
| 4 | SRCREV = "60beb308810f9561a67fdb435388a64c85eb6dcb" | ||
diff --git a/recipes-security/optee-imx/optee-os-tadevkit_4.6.0.imx.bb b/recipes-security/optee-imx/optee-os-tadevkit_4.6.0.imx.bb new file mode 100644 index 000000000..92bdf00e7 --- /dev/null +++ b/recipes-security/optee-imx/optee-os-tadevkit_4.6.0.imx.bb | |||
| @@ -0,0 +1,4 @@ | |||
| 1 | require optee-os-tadevkit-fslc-imx.inc | ||
| 2 | |||
| 3 | SRCBRANCH = "lf-6.12.20_2.0.0" | ||
| 4 | SRCREV = "87964807d80baf1dcfd89cafc66de34a1cf16bf3" | ||
diff --git a/recipes-security/optee-imx/optee-os_4.4.0.imx.bb b/recipes-security/optee-imx/optee-os_4.4.0.imx.bb deleted file mode 100644 index dc6d3901d..000000000 --- a/recipes-security/optee-imx/optee-os_4.4.0.imx.bb +++ /dev/null | |||
| @@ -1,6 +0,0 @@ | |||
| 1 | # Copyright 2017-2024 NXP | ||
| 2 | |||
| 3 | require optee-os-fslc-imx.inc | ||
| 4 | |||
| 5 | SRCBRANCH = "lf-6.6.52_2.2.0" | ||
| 6 | SRCREV = "60beb308810f9561a67fdb435388a64c85eb6dcb" | ||
diff --git a/recipes-security/optee-imx/optee-os_4.6.0.imx.bb b/recipes-security/optee-imx/optee-os_4.6.0.imx.bb new file mode 100644 index 000000000..ed2557bcb --- /dev/null +++ b/recipes-security/optee-imx/optee-os_4.6.0.imx.bb | |||
| @@ -0,0 +1,6 @@ | |||
| 1 | # Copyright 2017-2024 NXP | ||
| 2 | |||
| 3 | require optee-os-fslc-imx.inc | ||
| 4 | |||
| 5 | SRCBRANCH = "lf-6.12.20_2.0.0" | ||
| 6 | SRCREV = "87964807d80baf1dcfd89cafc66de34a1cf16bf3" | ||
diff --git a/recipes-security/optee-imx/optee-test-fslc-imx.inc b/recipes-security/optee-imx/optee-test-fslc-imx.inc index ab16fd221..b4bb6031b 100644 --- a/recipes-security/optee-imx/optee-test-fslc-imx.inc +++ b/recipes-security/optee-imx/optee-test-fslc-imx.inc | |||
| @@ -1,6 +1,5 @@ | |||
| 1 | # Copied from meta-imx/meta-imx-bsp/recipes-security/optee/optee-test-imx.inc. | 1 | # Copied from meta-imx/meta-imx-bsp/recipes-security/optee/optee-test-imx.inc. |
| 2 | # See: https://github.com/nxp-imx/imx-manifest/blob/imx-linux-scarthgap/imx-6.6.52-2.2.0.xml#L37 | 2 | # See: https://github.com/nxp-imx/imx-manifest/blob/imx-linux-walnascar/imx-6.12.20-2.0.0.xml#L37 |
| 3 | |||
| 4 | require optee-test-fslc.inc | 3 | require optee-test-fslc.inc |
| 5 | 4 | ||
| 6 | DEPENDS += "openssl" | 5 | DEPENDS += "openssl" |
| @@ -14,5 +13,6 @@ OPTEE_TEST_SRC ?= "git://github.com/nxp-imx/imx-optee-test.git;protocol=https" | |||
| 14 | 13 | ||
| 15 | EXTRA_OEMAKE:append:libc-musl = " OPTEE_OPENSSL_EXPORT=${STAGING_INCDIR}" | 14 | EXTRA_OEMAKE:append:libc-musl = " OPTEE_OPENSSL_EXPORT=${STAGING_INCDIR}" |
| 16 | CFLAGS:append:libc-musl = " -Wno-error=deprecated-declarations" | 15 | CFLAGS:append:libc-musl = " -Wno-error=deprecated-declarations" |
| 16 | CFLAGS += " -Wno-error=unterminated-string-initialization" | ||
| 17 | 17 | ||
| 18 | COMPATIBLE_MACHINE = "(imx-nxp-bsp)" | 18 | COMPATIBLE_MACHINE = "(imx-nxp-bsp)" |
diff --git a/recipes-security/optee-imx/optee-test-fslc.inc b/recipes-security/optee-imx/optee-test-fslc.inc index 0fb5f878a..46d57ac41 100644 --- a/recipes-security/optee-imx/optee-test-fslc.inc +++ b/recipes-security/optee-imx/optee-test-fslc.inc | |||
| @@ -1,12 +1,11 @@ | |||
| 1 | # Copied from meta-arm/recipes-security/optee/optee-test.inc. | 1 | # Copied from meta-arm/recipes-security/optee/optee-test.inc. |
| 2 | # See: https://github.com/nxp-imx/imx-manifest/blob/imx-linux-scarthgap/imx-6.6.52-2.2.0.xml#L30 | 2 | # See:https://github.com/nxp-imx/imx-manifest/blob/imx-linux-walnascar/imx-6.12.20-2.0.0.xml#L30 |
| 3 | 3 | ||
| 4 | SUMMARY = "OP-TEE sanity testsuite" | 4 | SUMMARY = "OP-TEE sanity testsuite" |
| 5 | DESCRIPTION = "Open Portable Trusted Execution Environment - Test suite" | 5 | DESCRIPTION = "Open Portable Trusted Execution Environment - Test suite" |
| 6 | HOMEPAGE = "https://www.op-tee.org/" | 6 | HOMEPAGE = "https://www.op-tee.org/" |
| 7 | 7 | ||
| 8 | LICENSE = "BSD-2-Clause & GPL-2.0-only" | 8 | LICENSE = "BSD-2-Clause & GPL-2.0-only" |
| 9 | LIC_FILES_CHKSUM = "file://LICENSE.md;md5=daa2bcccc666345ab8940aab1315a4fa" | ||
| 10 | 9 | ||
| 11 | inherit python3native ptest | 10 | inherit python3native ptest |
| 12 | inherit deploy | 11 | inherit deploy |
| @@ -18,7 +17,6 @@ SRC_URI = "git://github.com/OP-TEE/optee_test.git;branch=master;protocol=https \ | |||
| 18 | file://run-ptest \ | 17 | file://run-ptest \ |
| 19 | " | 18 | " |
| 20 | 19 | ||
| 21 | S = "${WORKDIR}/git" | ||
| 22 | B = "${WORKDIR}/build" | 20 | B = "${WORKDIR}/build" |
| 23 | 21 | ||
| 24 | EXTRA_OEMAKE += "TA_DEV_KIT_DIR=${TA_DEV_KIT_DIR} \ | 22 | EXTRA_OEMAKE += "TA_DEV_KIT_DIR=${TA_DEV_KIT_DIR} \ |
diff --git a/recipes-security/optee-imx/optee-test_4.4.0.imx.bb b/recipes-security/optee-imx/optee-test_4.6.0.imx.bb index b4ac12714..78e933486 100644 --- a/recipes-security/optee-imx/optee-test_4.4.0.imx.bb +++ b/recipes-security/optee-imx/optee-test_4.6.0.imx.bb | |||
| @@ -9,5 +9,5 @@ LIC_FILES_CHKSUM = "file://LICENSE.md;md5=a8fa504109e4cd7ea575bc49ea4be560 \ | |||
| 9 | file://LICENSE-GPL;md5=10e86b5d2a6cb0e2b9dcfdd26a9ac58d" | 9 | file://LICENSE-GPL;md5=10e86b5d2a6cb0e2b9dcfdd26a9ac58d" |
| 10 | 10 | ||
| 11 | 11 | ||
| 12 | SRCBRANCH = "lf-6.6.52_2.2.0" | 12 | SRCBRANCH = "lf-6.12.20_2.0.0" |
| 13 | SRCREV = "dafc98ed8364d7281a9a7f0788dd0a2067844a59" | 13 | SRCREV = "010f088f05b5ebf392c6e235d6e53d391755722f" |
