diff mbox series

arm/qemuarm64-secureboot: Enable kernel TEE drivers

Message ID 20210519074044.3376104-1-sumit.garg@linaro.org
State New
Headers show
Series arm/qemuarm64-secureboot: Enable kernel TEE drivers | expand

Commit Message

Sumit Garg May 19, 2021, 7:40 a.m. UTC 
Add a config fragment to enable kernel TEE drivers.

Signed-off-by: Sumit Garg <sumit.garg@linaro.org>

---
 meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg      | 10 ++++++++++
 .../recipes-kernel/linux/linux-yocto_5.10.bbappend     |  5 ++++-
 2 files changed, 14 insertions(+), 1 deletion(-)
 create mode 100644 meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg

-- 
2.25.1

Comments

Jon Mason May 20, 2021, 3:25 p.m. UTC | #1 
On Wed, May 19, 2021 at 01:10:44PM +0530, Sumit Garg wrote:
> Add a config fragment to enable kernel TEE drivers.

> 

> Signed-off-by: Sumit Garg <sumit.garg@linaro.org>


Added to master branch

Thanks,
Jon

> ---

>  meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg      | 10 ++++++++++

>  .../recipes-kernel/linux/linux-yocto_5.10.bbappend     |  5 ++++-

>  2 files changed, 14 insertions(+), 1 deletion(-)

>  create mode 100644 meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg

> 

> diff --git a/meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg b/meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg

> new file mode 100644

> index 0000000..3de03bf

> --- /dev/null

> +++ b/meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg

> @@ -0,0 +1,10 @@

> +CONFIG_HW_RANDOM_OPTEE=y

> +CONFIG_TEE=y

> +

> +#

> +# TEE drivers

> +#

> +CONFIG_OPTEE=y

> +CONFIG_OPTEE_SHM_NUM_PRIV_PAGES=1

> +# end of TEE drivers

> +

> diff --git a/meta-arm/recipes-kernel/linux/linux-yocto_5.10.bbappend b/meta-arm/recipes-kernel/linux/linux-yocto_5.10.bbappend

> index b9995e0..3c3d36a 100644

> --- a/meta-arm/recipes-kernel/linux/linux-yocto_5.10.bbappend

> +++ b/meta-arm/recipes-kernel/linux/linux-yocto_5.10.bbappend

> @@ -14,4 +14,7 @@ SRC_URI_append_qemuarm64-sbsa = " \

>      "

>  

>  FILESEXTRAPATHS_prepend_qemuarm64-secureboot = "${ARMFILESPATHS}"

> -SRC_URI_append_qemuarm64-secureboot = " file://zone_dma_revert.patch"

> +SRC_URI_append_qemuarm64-secureboot = " \

> +    file://zone_dma_revert.patch \

> +    file://tee.cfg \

> +    "

> -- 

> 2.25.1

> 


> 

> -=-=-=-=-=-=-=-=-=-=-=-

> Links: You receive all messages sent to this group.

> View/Reply Online (#1959): https://lists.yoctoproject.org/g/meta-arm/message/1959

> Mute This Topic: https://lists.yoctoproject.org/mt/82931287/3616920

> Group Owner: meta-arm+owner@lists.yoctoproject.org

> Unsubscribe: https://lists.yoctoproject.org/g/meta-arm/unsub [jdmason@kudzu.us]

> -=-=-=-=-=-=-=-=-=-=-=-

>
Sumit Garg July 20, 2021, 5:54 a.m. UTC | #2 
On Thu, 20 May 2021 at 20:55, Jon Mason <jdmason@kudzu.us> wrote:
>

> On Wed, May 19, 2021 at 01:10:44PM +0530, Sumit Garg wrote:

> > Add a config fragment to enable kernel TEE drivers.

> >

> > Signed-off-by: Sumit Garg <sumit.garg@linaro.org>

>

> Added to master branch

>


Thanks Jon, can you apply this to the hardknott branch as well?

-Sumit

> Thanks,

> Jon

>

> > ---

> >  meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg      | 10 ++++++++++

> >  .../recipes-kernel/linux/linux-yocto_5.10.bbappend     |  5 ++++-

> >  2 files changed, 14 insertions(+), 1 deletion(-)

> >  create mode 100644 meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg

> >

> > diff --git a/meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg b/meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg

> > new file mode 100644

> > index 0000000..3de03bf

> > --- /dev/null

> > +++ b/meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg

> > @@ -0,0 +1,10 @@

> > +CONFIG_HW_RANDOM_OPTEE=y

> > +CONFIG_TEE=y

> > +

> > +#

> > +# TEE drivers

> > +#

> > +CONFIG_OPTEE=y

> > +CONFIG_OPTEE_SHM_NUM_PRIV_PAGES=1

> > +# end of TEE drivers

> > +

> > diff --git a/meta-arm/recipes-kernel/linux/linux-yocto_5.10.bbappend b/meta-arm/recipes-kernel/linux/linux-yocto_5.10.bbappend

> > index b9995e0..3c3d36a 100644

> > --- a/meta-arm/recipes-kernel/linux/linux-yocto_5.10.bbappend

> > +++ b/meta-arm/recipes-kernel/linux/linux-yocto_5.10.bbappend

> > @@ -14,4 +14,7 @@ SRC_URI_append_qemuarm64-sbsa = " \

> >      "

> >

> >  FILESEXTRAPATHS_prepend_qemuarm64-secureboot = "${ARMFILESPATHS}"

> > -SRC_URI_append_qemuarm64-secureboot = " file://zone_dma_revert.patch"

> > +SRC_URI_append_qemuarm64-secureboot = " \

> > +    file://zone_dma_revert.patch \

> > +    file://tee.cfg \

> > +    "

> > --

> > 2.25.1

> >

>

> >

> > -=-=-=-=-=-=-=-=-=-=-=-

> > Links: You receive all messages sent to this group.

> > View/Reply Online (#1959): https://lists.yoctoproject.org/g/meta-arm/message/1959

> > Mute This Topic: https://lists.yoctoproject.org/mt/82931287/3616920

> > Group Owner: meta-arm+owner@lists.yoctoproject.org

> > Unsubscribe: https://lists.yoctoproject.org/g/meta-arm/unsub [jdmason@kudzu.us]

> > -=-=-=-=-=-=-=-=-=-=-=-

> >

>
Jon Mason July 20, 2021, 2:41 p.m. UTC | #3 
On Tue, Jul 20, 2021 at 11:24:21AM +0530, Sumit Garg wrote:
> On Thu, 20 May 2021 at 20:55, Jon Mason <jdmason@kudzu.us> wrote:

> >

> > On Wed, May 19, 2021 at 01:10:44PM +0530, Sumit Garg wrote:

> > > Add a config fragment to enable kernel TEE drivers.

> > >

> > > Signed-off-by: Sumit Garg <sumit.garg@linaro.org>

> >

> > Added to master branch

> >

> 

> Thanks Jon, can you apply this to the hardknott branch as well?


I had to rework it a little, due to the zone dma hacks ever changing.
It's in hardknott-next branch and I'll push after it passes CI.

Thanks,
Jon

> 

> -Sumit

> 

> > Thanks,

> > Jon

> >

> > > ---

> > >  meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg      | 10 ++++++++++

> > >  .../recipes-kernel/linux/linux-yocto_5.10.bbappend     |  5 ++++-

> > >  2 files changed, 14 insertions(+), 1 deletion(-)

> > >  create mode 100644 meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg

> > >

> > > diff --git a/meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg b/meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg

> > > new file mode 100644

> > > index 0000000..3de03bf

> > > --- /dev/null

> > > +++ b/meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg

> > > @@ -0,0 +1,10 @@

> > > +CONFIG_HW_RANDOM_OPTEE=y

> > > +CONFIG_TEE=y

> > > +

> > > +#

> > > +# TEE drivers

> > > +#

> > > +CONFIG_OPTEE=y

> > > +CONFIG_OPTEE_SHM_NUM_PRIV_PAGES=1

> > > +# end of TEE drivers

> > > +

> > > diff --git a/meta-arm/recipes-kernel/linux/linux-yocto_5.10.bbappend b/meta-arm/recipes-kernel/linux/linux-yocto_5.10.bbappend

> > > index b9995e0..3c3d36a 100644

> > > --- a/meta-arm/recipes-kernel/linux/linux-yocto_5.10.bbappend

> > > +++ b/meta-arm/recipes-kernel/linux/linux-yocto_5.10.bbappend

> > > @@ -14,4 +14,7 @@ SRC_URI_append_qemuarm64-sbsa = " \

> > >      "

> > >

> > >  FILESEXTRAPATHS_prepend_qemuarm64-secureboot = "${ARMFILESPATHS}"

> > > -SRC_URI_append_qemuarm64-secureboot = " file://zone_dma_revert.patch"

> > > +SRC_URI_append_qemuarm64-secureboot = " \

> > > +    file://zone_dma_revert.patch \

> > > +    file://tee.cfg \

> > > +    "

> > > --

> > > 2.25.1

> > >

> >

> > >

> > > -=-=-=-=-=-=-=-=-=-=-=-

> > > Links: You receive all messages sent to this group.

> > > View/Reply Online (#1959): https://lists.yoctoproject.org/g/meta-arm/message/1959

> > > Mute This Topic: https://lists.yoctoproject.org/mt/82931287/3616920

> > > Group Owner: meta-arm+owner@lists.yoctoproject.org

> > > Unsubscribe: https://lists.yoctoproject.org/g/meta-arm/unsub [jdmason@kudzu.us]

> > > -=-=-=-=-=-=-=-=-=-=-=-

> > >

> >
Sumit Garg July 22, 2021, 8:01 a.m. UTC | #4 
On Tue, 20 Jul 2021 at 20:11, Jon Mason <jdmason@kudzu.us> wrote:
>

> On Tue, Jul 20, 2021 at 11:24:21AM +0530, Sumit Garg wrote:

> > On Thu, 20 May 2021 at 20:55, Jon Mason <jdmason@kudzu.us> wrote:

> > >

> > > On Wed, May 19, 2021 at 01:10:44PM +0530, Sumit Garg wrote:

> > > > Add a config fragment to enable kernel TEE drivers.

> > > >

> > > > Signed-off-by: Sumit Garg <sumit.garg@linaro.org>

> > >

> > > Added to master branch

> > >

> >

> > Thanks Jon, can you apply this to the hardknott branch as well?

>

> I had to rework it a little, due to the zone dma hacks ever changing.

> It's in hardknott-next branch and I'll push after it passes CI.

>


Thanks.

-Sumit

> Thanks,

> Jon

>

> >

> > -Sumit

> >

> > > Thanks,

> > > Jon

> > >

> > > > ---

> > > >  meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg      | 10 ++++++++++

> > > >  .../recipes-kernel/linux/linux-yocto_5.10.bbappend     |  5 ++++-

> > > >  2 files changed, 14 insertions(+), 1 deletion(-)

> > > >  create mode 100644 meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg

> > > >

> > > > diff --git a/meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg b/meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg

> > > > new file mode 100644

> > > > index 0000000..3de03bf

> > > > --- /dev/null

> > > > +++ b/meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg

> > > > @@ -0,0 +1,10 @@

> > > > +CONFIG_HW_RANDOM_OPTEE=y

> > > > +CONFIG_TEE=y

> > > > +

> > > > +#

> > > > +# TEE drivers

> > > > +#

> > > > +CONFIG_OPTEE=y

> > > > +CONFIG_OPTEE_SHM_NUM_PRIV_PAGES=1

> > > > +# end of TEE drivers

> > > > +

> > > > diff --git a/meta-arm/recipes-kernel/linux/linux-yocto_5.10.bbappend b/meta-arm/recipes-kernel/linux/linux-yocto_5.10.bbappend

> > > > index b9995e0..3c3d36a 100644

> > > > --- a/meta-arm/recipes-kernel/linux/linux-yocto_5.10.bbappend

> > > > +++ b/meta-arm/recipes-kernel/linux/linux-yocto_5.10.bbappend

> > > > @@ -14,4 +14,7 @@ SRC_URI_append_qemuarm64-sbsa = " \

> > > >      "

> > > >

> > > >  FILESEXTRAPATHS_prepend_qemuarm64-secureboot = "${ARMFILESPATHS}"

> > > > -SRC_URI_append_qemuarm64-secureboot = " file://zone_dma_revert.patch"

> > > > +SRC_URI_append_qemuarm64-secureboot = " \

> > > > +    file://zone_dma_revert.patch \

> > > > +    file://tee.cfg \

> > > > +    "

> > > > --

> > > > 2.25.1

> > > >

> > >

> > > >

> > > > -=-=-=-=-=-=-=-=-=-=-=-

> > > > Links: You receive all messages sent to this group.

> > > > View/Reply Online (#1959): https://lists.yoctoproject.org/g/meta-arm/message/1959

> > > > Mute This Topic: https://lists.yoctoproject.org/mt/82931287/3616920

> > > > Group Owner: meta-arm+owner@lists.yoctoproject.org

> > > > Unsubscribe: https://lists.yoctoproject.org/g/meta-arm/unsub [jdmason@kudzu.us]

> > > > -=-=-=-=-=-=-=-=-=-=-=-

> > > >

> > >
diff mbox series

Patch

diff --git a/meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg b/meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg
new file mode 100644
index 0000000..3de03bf
--- /dev/null
+++ b/meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg
@@ -0,0 +1,10 @@ 
+CONFIG_HW_RANDOM_OPTEE=y
+CONFIG_TEE=y
+
+#
+# TEE drivers
+#
+CONFIG_OPTEE=y
+CONFIG_OPTEE_SHM_NUM_PRIV_PAGES=1
+# end of TEE drivers
+
diff --git a/meta-arm/recipes-kernel/linux/linux-yocto_5.10.bbappend b/meta-arm/recipes-kernel/linux/linux-yocto_5.10.bbappend
index b9995e0..3c3d36a 100644
--- a/meta-arm/recipes-kernel/linux/linux-yocto_5.10.bbappend
+++ b/meta-arm/recipes-kernel/linux/linux-yocto_5.10.bbappend
@@ -14,4 +14,7 @@  SRC_URI_append_qemuarm64-sbsa = " \
     "
 
 FILESEXTRAPATHS_prepend_qemuarm64-secureboot = "${ARMFILESPATHS}"
-SRC_URI_append_qemuarm64-secureboot = " file://zone_dma_revert.patch"
+SRC_URI_append_qemuarm64-secureboot = " \
+    file://zone_dma_revert.patch \
+    file://tee.cfg \
+    "