From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 57579C76188 for ; Wed, 5 Apr 2023 19:13:40 +0000 (UTC) Received: from mail-qt1-f180.google.com (mail-qt1-f180.google.com [209.85.160.180]) by mx.groups.io with SMTP id smtpd.web11.139894.1680722017496700880 for ; Wed, 05 Apr 2023 12:13:37 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@kudzu-us.20210112.gappssmtp.com header.s=20210112 header.b=io1/wrK+; spf=none, err=permanent DNS error (domain: kudzu.us, ip: 209.85.160.180, mailfrom: jdmason@kudzu.us) Received: by mail-qt1-f180.google.com with SMTP id h3so9217649qtu.1 for ; Wed, 05 Apr 2023 12:13:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kudzu-us.20210112.gappssmtp.com; s=20210112; t=1680722016; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:from:to:cc:subject:date:message-id:reply-to; bh=jRV6727VTeg6Haq/3vyy3fZkLNEF5YGMRF22Hv19AT8=; b=io1/wrK+oXmMF3SAeCsD2syejEmcq+v8Bj+CFEDyOvu0Af5SUtjPhgu0LOsMmZEw0x w0DJFKycVPO6FPOSIT2z/uYKCVI7CAsKQ0R0ArSKoKC0IC4bNfkKaVcN2YMYTy9yI4Kt /a5n3k1qNHBDELy/n3yz9xmiA3fMAItw6p1ZPCW3qxiN/SmEcwef17eR5teEXHfMFvz4 pk8jjmonISOhg040QopAxIKs3+rw8hHoh9LOjbr8/MKhF5M9wXYLORB7yfHcKTj028il XCe31UAHp1WVvkYdEseOdsvqiZodHvczHdrRvHmDBwPUWCi523aw4op7iRerUit9QAJS NqeA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1680722016; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=jRV6727VTeg6Haq/3vyy3fZkLNEF5YGMRF22Hv19AT8=; b=DTAu1phMV1xFHKX1SoHhkm07vPiCZIFGhSXY9tbg8F44s7vvn00pVxJB+9UGkCFBaD 0RIA8iTUhl01XAcuaFGvW2NmtKY6fbj2ERXfXG55xLFX2sFQPtDJkBPQVRBOHU3wThK4 M4aO1i0gZY8AY/VbbYea03zNzdwocD2jMhHM9t3Ao9pGF9b/aKFJKUA3KVz6MLRHZumb jHgMWwRzc56+l7uB/KZcFGvVTH6GbUYM9RPnaJmpI1jZBI1Jmxj35ZKV3DUbNerZth7U g2RGDBRjT6ippmxDCfmXczHRIaoN1+ozz7Y5l4DwbQp14WLeL+XP1ZIwdQqTlEXucV4D fH2A== X-Gm-Message-State: AAQBX9fa9VPSTO4VKA0LWAIb1FeuWtlSbyKT4cMOLzHvYp6+k8/hg4nz tUn2QA/RNulDdGkxxL9ZUoSmSw== X-Google-Smtp-Source: AKy350bhb4xuxl21Nv9Cf4ICQ8e2OhrJAMXS/PW9AeWxdgAQ1i+RW7NpkOILAvHirDQPXfxz9hzz/Q== X-Received: by 2002:ac8:5fce:0:b0:3b9:b6e3:c78e with SMTP id k14-20020ac85fce000000b003b9b6e3c78emr6749501qta.8.1680722016475; Wed, 05 Apr 2023 12:13:36 -0700 (PDT) Received: from kudzu.us ([2605:a601:a600:7900:15a6:cff9:108:de91]) by smtp.gmail.com with ESMTPSA id e14-20020ac8670e000000b003e38d6c013dsm4153780qtp.60.2023.04.05.12.13.35 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 05 Apr 2023 12:13:35 -0700 (PDT) Date: Wed, 5 Apr 2023 15:13:33 -0400 From: Jon Mason To: Denys Dmytriyenko Cc: Adam Johnston , "meta-arm@lists.yoctoproject.org" , Ross Burton , nd , Jon Mason , Yocto TSC Subject: Re: [meta-arm] [PATCH 1/1] arm-bsp/optee: Update OP-TEE TA devkit to 3.20 for N1SDP Message-ID: References: <20230403154306.3422-1-adam.johnston@arm.com> <20230403154306.3422-2-adam.johnston@arm.com> <20230404000559.GA9226@denix.org> <20230404161414.GC9226@denix.org> <20230405150847.GD9226@denix.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20230405150847.GD9226@denix.org> List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 05 Apr 2023 19:13:40 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/meta-arm/message/4546 On Wed, Apr 05, 2023 at 11:08:47AM -0400, Denys Dmytriyenko wrote: > On Wed, Apr 05, 2023 at 08:02:52AM +0000, Adam Johnston wrote: > > Ross/Jon might be able to provide more insight here. > > > > AFAIK they drive the versions supported based on what the component team (in > > this case OP-TEE) have released. > > > > The complexity for components like OP-TEE, which require platform > > adaptation, is that updating the recipe for a specific platform is gated by > > when the adaptation (or OoT patches) can be updated and validated by the > > relevant platform team. > > At the TSC meetings recently we've discussed the possibility of migrating > Trusted Firmware and OP-TEE components from meta-arm to oe-core in order to > reduce dependencies on these core components by other BSPs. > > In meta-ti BSP we've been updating OPTEE (and TF-A to a lesser extent) > regularly to the very latest release and often ahead of meta-arm, even though > meta-arm is upstream to meta-ti for those components - usually latest versions > add new features or new platform support. TI policy for OPTEE and TF-A is to > work directly with upstream and hence there are no local patches. Please send patches when there is the delta you describe. Or, let me know and I'll do the patches. I try to stay on top of the latest releases as they come out, but sometimes I don't notice for a bit. > I was wondering how ARM reference platforms in meta-arm-bsp and platforms in > other BSPs handle this and whether there's extra work required updating local > patches or adaptations for regular version bumps. If OPTEE and TF-A go to > oe-core, would that negatively affect meta-arm? It is not known by me who needs the latest versions of the packages in a cadence more frequent than what has been occurring. To my knowledge, meta-arm always has the latest version when the releases are cut. If this is not the case, please do hold me accountable. Thanks, Jon > > ________________________________ > > From: Denys Dmytriyenko > > Sent: Tuesday, April 4, 2023 5:14:14 PM > > To: Adam Johnston > > Cc: meta-arm@lists.yoctoproject.org ; Ross Burton ; nd > > Subject: Re: [meta-arm] [PATCH 1/1] arm-bsp/optee: Update OP-TEE TA devkit to 3.20 for N1SDP > > > > On Tue, Apr 04, 2023 at 08:24:14AM +0000, Adam Johnston wrote: > > > The only other platform which also enables OP-TEE OS is Corstone-1000, but > > > they didn't enable OP-TEE OS TA Devkit (required for OP-TEE xtest) > > > I agree it would make sense to update/enable both at the same time for CI > > > (as long as it doesn't affect the Corstone-100 BSPs) > > > > And there are downstream BSPs using meta-arm and consuming OPTEE (OS, client, > > xtest, etc) > > > > It would be appreciated if generic recipes are also updated for everyone to > > use and not just platform-specific bbappends. Thanks. > > > > -- > > Denys > > > > > > > -----Original Message----- > > > From: Denys Dmytriyenko > > > Sent: Tuesday, April 4, 2023 1:06 AM > > > To: Adam Johnston > > > Cc: meta-arm@lists.yoctoproject.org; Ross Burton ; nd > > > Subject: Re: [meta-arm] [PATCH 1/1] arm-bsp/optee: Update OP-TEE TA devkit to 3.20 for N1SDP > > > > > > On Mon, Apr 03, 2023 at 04:43:06PM +0100, Adam Johnston wrote: > > > > From: Adam Johnston > > > > > > > > As optee-os for the N1SDP has been updated to 3.20 we need to do the > > > > same for optee-os-tavdekit. Otherwise errors will be seen if/when > > > > optee-os-tavdekit is built. > > > > > > So, why only update it for N1SDP and not for everyone globally in meta-arm? > > > > > > > > > > Signed-off-by: Adam Johnston > > > > --- > > > > .../optee/optee-os-tadevkit_3.18.0.bbappend | 1 - > > > > .../optee/optee-os-tadevkit_3.20.0.bbappend | 6 +++++ > > > > .../optee/optee-os-tadevkit_3.20.0.bb | 24 +++++++++++++++++++ > > > > 3 files changed, 30 insertions(+), 1 deletion(-) create mode 100644 > > > > meta-arm-bsp/recipes-security/optee/optee-os-tadevkit_3.20.0.bbappend > > > > create mode 100644 > > > > meta-arm/recipes-security/optee/optee-os-tadevkit_3.20.0.bb > > > > > > > > diff --git > > > > a/meta-arm-bsp/recipes-security/optee/optee-os-tadevkit_3.18.0.bbappen > > > > d > > > > b/meta-arm-bsp/recipes-security/optee/optee-os-tadevkit_3.18.0.bbappen > > > > d > > > > index 9a210832..6a22d47e 100644 > > > > --- > > > > a/meta-arm-bsp/recipes-security/optee/optee-os-tadevkit_3.18.0.bbappen > > > > d > > > > +++ b/meta-arm-bsp/recipes-security/optee/optee-os-tadevkit_3.18.0.bba > > > > +++ ppend > > > > @@ -2,6 +2,5 @@ > > > > > > > > MACHINE_OPTEE_OS_TADEVKIT_REQUIRE ?= "" > > > > MACHINE_OPTEE_OS_TADEVKIT_REQUIRE:tc = "optee-os-generic-tc.inc" > > > > -MACHINE_OPTEE_OS_TADEVKIT_REQUIRE:n1sdp = "optee-os-n1sdp.inc" > > > > > > > > require ${MACHINE_OPTEE_OS_TADEVKIT_REQUIRE} > > > > diff --git > > > > a/meta-arm-bsp/recipes-security/optee/optee-os-tadevkit_3.20.0.bbappen > > > > d > > > > b/meta-arm-bsp/recipes-security/optee/optee-os-tadevkit_3.20.0.bbappen > > > > d > > > > new file mode 100644 > > > > index 00000000..e09c4a5e > > > > --- /dev/null > > > > +++ b/meta-arm-bsp/recipes-security/optee/optee-os-tadevkit_3.20.0.bba > > > > +++ ppend > > > > @@ -0,0 +1,6 @@ > > > > +# Machine specific configurations > > > > + > > > > +MACHINE_OPTEE_OS_TADEVKIT_REQUIRE ?= "" > > > > +MACHINE_OPTEE_OS_TADEVKIT_REQUIRE:n1sdp = "optee-os-n1sdp.inc" > > > > + > > > > +require ${MACHINE_OPTEE_OS_TADEVKIT_REQUIRE} > > > > diff --git > > > > a/meta-arm/recipes-security/optee/optee-os-tadevkit_3.20.0.bb > > > > b/meta-arm/recipes-security/optee/optee-os-tadevkit_3.20.0.bb > > > > new file mode 100644 > > > > index 00000000..202caa54 > > > > --- /dev/null > > > > +++ b/meta-arm/recipes-security/optee/optee-os-tadevkit_3.20.0.bb > > > > @@ -0,0 +1,24 @@ > > > > +require optee-os_3.20.0.bb > > > > + > > > > +SUMMARY = "OP-TEE Trusted OS TA devkit" > > > > +DESCRIPTION = "OP-TEE TA devkit for build TAs" > > > > +HOMEPAGE = "https://www.op-tee.org/" > > > > + > > > > +DEPENDS += "python3-pycryptodome-native" > > > > + > > > > +do_install() { > > > > + #install TA devkit > > > > + install -d ${D}${includedir}/optee/export-user_ta/ > > > > + for f in ${B}/export-ta_${OPTEE_ARCH}/* ; do > > > > + cp -aR $f ${D}${includedir}/optee/export-user_ta/ > > > > + done > > > > +} > > > > + > > > > +do_deploy() { > > > > + echo "Do not inherit do_deploy from optee-os." > > > > +} > > > > + > > > > +FILES:${PN} = "${includedir}/optee/" > > > > + > > > > +# Build paths are currently embedded > > > > +INSANE_SKIP:${PN}-dev += "buildpaths" > > > > -- > > > > 2.38.1 > > -- > Regards, > Denys Dmytriyenko > PGP: 0x420902729A92C964 - https://denix.org/0x420902729A92C964 > Fingerprint: 25FC E4A5 8A72 2F69 1186 6D76 4209 0272 9A92 C964 >