Re: [meta-arm][PATCH v3 0/3] Add support for booting qemu with TFA and optee

From: "Jon Mason" <jdmason@kudzu.us>
To: Joshua Watt <JPEWhacker@gmail.com>
Cc: meta-arm@lists.yoctoproject.org
Subject: Re: [meta-arm][PATCH v3 0/3] Add support for booting qemu with TFA and optee
Date: Thu, 28 May 2020 16:30:59 -0400	[thread overview]
Message-ID: <20200528203050.GA25228@kudzu.us> (raw)
In-Reply-To: <20200521142259.15363-1-JPEWhacker@gmail.com>

On Thu, May 21, 2020 at 09:22:56AM -0500, Joshua Watt wrote:
> Adds support for booting AArch64 Qemu machines using TF-A + optee +
> u-boot. Most of the changes are applicable to any AArch64 qemu target,
> and a reference machine called qemuarm64-secureboot has been added that
> show how to enable support for it.
> 
> Testing of op-tee can be done using the qemuarm64-secureboot machine
> with the following commands:
> 
> $ cat >> conf/local.conf <<HEREDOC
> MACHINE = "qemuarm64-secureboot"
> CORE_IMAGE_EXTRA_INSTALL += "optee-test kernel-modules"
> HEREDOC
> $ bitbake core-image-minimal
> $ runqemu nographic serialstdio slirp
> ...
> root@qemuarm64-secureboot:~# xtest
> 
> V3: 
> * Remove subshell in optee-client: do_install
> * Changes assignements for compiling optee/TF-A for qemu to be weak
> * Fixed optee-os install path to respect ${BUILD_PLAT}

Thanks for doing this!  This is a great way to automate the building
and testing of these pieces.

I am seeing a weird issue of it not booting on my Debian system, but
seems to work fine on a Ubuntu VM.  So, chalk it up to all the Debian
issues YP master branch is seeing right now.

Pulled into the master branch.

Thanks,
Jon

> 
> Joshua Watt (3):
>   optee-{os,examples,client,test}: Build out of tree
>   optee-client: Add sysVinit service
>   Add support for booting qemu with TFA and optee
> 
>  .../conf/machine/qemuarm64-secureboot.conf    | 26 +++++++++++
>  .../trusted-firmware-a/trusted-firmware-a.inc | 44 ++++++++++++------
>  .../recipes-bsp/u-boot/u-boot/qemuarm64.cfg   |  4 ++
>  meta-arm/recipes-bsp/u-boot/u-boot_%.bbappend |  3 ++
>  .../linux/linux-yocto-dev.bbappend            |  4 ++
>  .../linux/linux-yocto-dev/tee.cfg             |  4 ++
>  .../optee/optee-client/tee-supplicant.service |  4 +-
>  .../optee/optee-client/tee-supplicant.sh      | 46 +++++++++++++++++++
>  .../optee/optee-client_git.bb                 | 38 +++++++++++----
>  .../optee/optee-examples_git.bb               |  8 +++-
>  .../recipes-security/optee/optee-os_git.bb    | 13 ++++--
>  .../recipes-security/optee/optee-test_git.bb  |  8 +++-
>  meta-arm/recipes-security/optee/optee.inc     |  1 +
>  meta-arm/wic/qemuarm64.wks                    |  4 ++
>  14 files changed, 175 insertions(+), 32 deletions(-)
>  create mode 100644 meta-arm/conf/machine/qemuarm64-secureboot.conf
>  create mode 100644 meta-arm/recipes-bsp/u-boot/u-boot/qemuarm64.cfg
>  create mode 100644 meta-arm/recipes-bsp/u-boot/u-boot_%.bbappend
>  create mode 100644 meta-arm/recipes-kernel/linux/linux-yocto-dev.bbappend
>  create mode 100644 meta-arm/recipes-kernel/linux/linux-yocto-dev/tee.cfg
>  create mode 100644 meta-arm/recipes-security/optee/optee-client/tee-supplicant.sh
>  create mode 100644 meta-arm/wic/qemuarm64.wks
> 
> -- 
> 2.17.1
> 

> 