Re: [isar-cip-core][PATCH 3/6] arm64: Switch to cip_merged_defconfig

[Sai Sree Kartheek Adivi <s-adivi@ti.com>]

On 11/24/25 16:35, Jan Kiszka wrote:
> On 24.11.25 11:36, Sai Sree Kartheek Adivi wrote:
>>
>>
>> On 11/24/25 15:27, Jan Kiszka wrote:
>>> On 24.11.25 10:31, Sai Sree Kartheek Adivi wrote:
>>>>
>>>>
>>>> On 11/17/25 22:45, Jan Kiszka wrote:
>>>>> From: Jan Kiszka <jan.kiszka@siemens.com>
>>>>>
>>>>> Allows to use the same kernel for all arm64 targets.
>>>>>
>>>>> Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>
>>>>> ---
>>>>>     conf/machine/hihope-rzg2m.conf | 4 ++--
>>>>>     conf/machine/ti-am62px-sk.conf | 2 +-
>>>>>     2 files changed, 3 insertions(+), 3 deletions(-)
>>>>>
>>>>> diff --git a/conf/machine/hihope-rzg2m.conf b/conf/machine/hihope-
>>>>> rzg2m.conf
>>>>> index 0b3acf49..485683b2 100644
>>>>> --- a/conf/machine/hihope-rzg2m.conf
>>>>> +++ b/conf/machine/hihope-rzg2m.conf
>>>>> @@ -1,7 +1,7 @@
>>>>>     #
>>>>>     # CIP Core, generic profile
>>>>>     #
>>>>> -# Copyright (c) Siemens AG, 2019
>>>>> +# Copyright (c) Siemens AG, 2019-2025
>>>>>     #
>>>>>     # Authors:
>>>>>     #  Quirin Gylstorff <quirin.gylstorff@siemens.com>
>>>>> @@ -13,7 +13,7 @@ DISTRO_ARCH = "arm64"
>>>>>       IMAGE_FSTYPES ?= "wic"
>>>>>     -KERNEL_DEFCONFIG = "cip-kernel-config/${KERNEL_DEFCONFIG_VERSION}/
>>>>> arm64/renesas_defconfig"
>>>>> +KERNEL_DEFCONFIG = "cip-kernel-config/${KERNEL_DEFCONFIG_VERSION}/
>>>>> arm64/cip_merged_defconfig"
>>>>>     USE_CIP_KERNEL_CONFIG = "1"
>>>>>     DTB_FILES = "r8a774a1-hihope-rzg2m-ex.dtb"
>>>>>     IMAGE_BOOT_FILES = "${KERNEL_IMAGE} ${DTB_FILES}"
>>>>> diff --git a/conf/machine/ti-am62px-sk.conf b/conf/machine/ti-am62px-
>>>>> sk.conf
>>>>> index 589f071e..bf3cf9ab 100644
>>>>> --- a/conf/machine/ti-am62px-sk.conf
>>>>> +++ b/conf/machine/ti-am62px-sk.conf
>>>>> @@ -23,6 +23,6 @@ IMAGE_BOOT_FILES = " \
>>>>>         /usr/lib/u-boot/${MACHINE}/tiboot3-am62px-hs-fs-
>>>>> evm.bin;tiboot3.bin"
>>>>>       USE_CIP_KERNEL_CONFIG = "1"
>>>>> -KERNEL_DEFCONFIG = "cip-kernel-config/${KERNEL_DEFCONFIG_VERSION}/
>>>>> arm64/ti_defconfig"
>>>>> +KERNEL_DEFCONFIG = "cip-kernel-config/${KERNEL_DEFCONFIG_VERSION}/
>>>>> arm64/cip_merged_defconfig"
>>>>
>>>> Jan, I'm seeing a boot issue after this change. The boot stops at
>>>> initramfs with the following log
>>>>
>>>> No tpm device exists or supports pcr_hash 'sha256' or 'ecc' - cannot
>>>> create a encrypted device!
>>>>
>>>> But the tpm2 device is available and the `tpm2 getcap algorithms`
>>>> command confirms that the device supports sha256 and ecc.
>>>>
>>>> It's working with ti_defconfig. So looks like there is some timing
>>>> issue / race condition when the tpm support is built as inbuilt instead
>>>> of module.
>>>
>>> And there is no other module missing in the initramfs that might be
>>> built-in with your config? If you re-run the encryption hook manually
>>> from the initramfs later, that will work then?
>>
>> yes. Once after the boot stops at initramfs with above error, running
>> `/scripts/local-top/crypt` manually starts encryption without any issues.
>>
>>>
>>>>
>>>> I'll run some more tests to properly identify the issue and post a fix
>>>> in here or cip-kernel-config repo.
>>>>
>>>>>       WDOG_TIMEOUT = "0"
>>>>
>>>
>>> Thanks for reporting. Finding the root cause will be important to avoid
>>> that other users will run into similar issues later on.
>>
>> Yup, actively working on it.
>>
> 
> Is initramfs-tee-ftpm-hook included in the build? That is supposed to
> wait for the ftpm to appear.

Just found out that it's not included in the build. The recipe itself is 
built but the local-top is not added to the SRC_URI.

There are 2 issues.
1. TEE_SUPPLICANT_IN_USERLAND is not set.
2. the initramfs-tee-ftpm-hook recipe has an issue. There is a missing : 
while adding supp-user to the OVERRIDES.

I'll send a patch fixing [1] in sometime. I've sent a PATCH on 
isar-users for [2] but I don't see it on the list. Will try to repost in 
sometime if I still don't find it.

Kartheek

> 
> Jan
>