[Buildroot] [PATCH v1 1/1] configs/versal2_vek385_defconfig: config atf to load optee-os

[Buildroot] [PATCH v1 1/1] configs/versal2_vek385_defconfig: config atf to load optee-os

[Neal Frager via buildroot]

Add the option to configure the atf to load the optee-os binary:
BR2_TARGET_ARM_TRUSTED_FIRMWARE_BL32_OPTEE=y

Without this, everything was still booting, and even though the versal2_plm
was loading the optee-os to its runtime location, it was never actually
loaded by the atf.

With this option enabled, atf is now properly loading optee with the boot log
below.

NOTICE:  BL31: Executing from 0xbbf00000
NOTICE:  BL31: Secure code at 0x1800000
NOTICE:  BL31: Non secure code at 0x40000000
NOTICE:  BL31: v2.14.0(release):custom
NOTICE:  BL31: Built : 08:41:36, Aug 25 2026
KATs execution completed.
In task dispatch loop
I/TC:
I/TC: Non-secure external DT found
I/TC: pl011: device parameters ignored (115200n8)
I/TC: Switching console to device: /axi/serial@f1930000
I/TC: OP-TEE version: Unknown_4.9 (gcc version 14.3.0 (Buildroot 2021.11-18033-g83947c7bb6)) #1 Mon Aug 24 08:45:53 UTC 2026 aarch64
I/TC: WARNING: This OP-TEE configuration might be insecure!
I/TC: WARNING: Please check https://optee.readthedocs.io/en/latest/architecture/porting_guidelines.html
I/TC: Primary CPU initializing
I/TC: Cluster shift early-configured: 1 (cores per cluster: 2)
I/TC: ASU initialization complete
I/TC: OP-TEE OS Running on Platform AMD Versal Gen 2
I/TC: ASU ECC: NIST_P192=SW NIST_P224=SW NIST_P256=HW
I/TC: ASU ECC: NIST_P384=SW NIST_P521=SW
I/TC: ASU RSA driver successfully initialized
I/TC: Primary CPU switching to normal world boot

Signed-off-by: Neal Frager <neal.frager@amd.com>
---
 configs/versal2_vek385_defconfig | 1 +
 1 file changed, 1 insertion(+)

diff --git a/configs/versal2_vek385_defconfig b/configs/versal2_vek385_defconfig
index 76eb455043..5fe099bc8a 100644
--- a/configs/versal2_vek385_defconfig
+++ b/configs/versal2_vek385_defconfig
@@ -25,6 +25,7 @@ BR2_TARGET_ARM_TRUSTED_FIRMWARE_CUSTOM_TARBALL=y
 BR2_TARGET_ARM_TRUSTED_FIRMWARE_CUSTOM_TARBALL_LOCATION="$(call github,Xilinx,arm-trusted-firmware,xlnx-rebase-v2.14_2026.1)/xlnx-rebase-v2.14_2026.1.tar.gz"
 BR2_TARGET_ARM_TRUSTED_FIRMWARE_PLATFORM="versal2"
 BR2_TARGET_ARM_TRUSTED_FIRMWARE_BL31_UBOOT=y
+BR2_TARGET_ARM_TRUSTED_FIRMWARE_BL32_OPTEE=y
 BR2_TARGET_ARM_TRUSTED_FIRMWARE_ADDITIONAL_VARIABLES="VERSAL2_CONSOLE=cadence1"
 BR2_TARGET_OPTEE_OS=y
 BR2_TARGET_OPTEE_OS_CUSTOM_TARBALL=y
-- 
2.25.1

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH v1 1/1] configs/versal2_vek385_defconfig: config atf to load optee-os

[Peter Korsgaard]

>>>>> "Neal" == Neal Frager <neal.frager@amd.com> writes:

 > Add the option to configure the atf to load the optee-os binary:
 > BR2_TARGET_ARM_TRUSTED_FIRMWARE_BL32_OPTEE=y

 > Without this, everything was still booting, and even though the versal2_plm
 > was loading the optee-os to its runtime location, it was never actually
 > loaded by the atf.

 > With this option enabled, atf is now properly loading optee with the boot log
 > below.

 > NOTICE:  BL31: Executing from 0xbbf00000
 > NOTICE:  BL31: Secure code at 0x1800000
 > NOTICE:  BL31: Non secure code at 0x40000000
 > NOTICE:  BL31: v2.14.0(release):custom
 > NOTICE:  BL31: Built : 08:41:36, Aug 25 2026
 > KATs execution completed.
 > In task dispatch loop
 > I/TC:
 > I/TC: Non-secure external DT found
 > I/TC: pl011: device parameters ignored (115200n8)
 > I/TC: Switching console to device: /axi/serial@f1930000
 > I/TC: OP-TEE version: Unknown_4.9 (gcc version 14.3.0 (Buildroot 2021.11-18033-g83947c7bb6)) #1 Mon Aug 24 08:45:53 UTC 2026 aarch64
 > I/TC: WARNING: This OP-TEE configuration might be insecure!
 > I/TC: WARNING: Please check https://optee.readthedocs.io/en/latest/architecture/porting_guidelines.html
 > I/TC: Primary CPU initializing
 > I/TC: Cluster shift early-configured: 1 (cores per cluster: 2)
 > I/TC: ASU initialization complete
 > I/TC: OP-TEE OS Running on Platform AMD Versal Gen 2
 > I/TC: ASU ECC: NIST_P192=SW NIST_P224=SW NIST_P256=HW
 > I/TC: ASU ECC: NIST_P384=SW NIST_P521=SW
 > I/TC: ASU RSA driver successfully initialized
 > I/TC: Primary CPU switching to normal world boot

 > Signed-off-by: Neal Frager <neal.frager@amd.com>

Committed, thanks.

-- 
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot