From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from foss.arm.com (foss.arm.com [217.140.110.172]) by smtp.subspace.kernel.org (Postfix) with ESMTP id 06C3A2777F3; Mon, 6 Jul 2026 13:45:06 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=217.140.110.172 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1783345508; cv=none; b=lDkEcnEMmoXiGgYWkwxSxWV5SxSYF9DPVyDyPm7Tz8jL9EeT8WWtxsCSSSpmoa8oPDzRk5EUnljcWKTWA/t3zBu2GkjzS89nwoQiQHmMeHqALZcj6IUwlC7uA3eJIspMASPORhI+KLL5xfHBWMvo7WoaYvUHetqYwoOYVoFgRzM= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1783345508; c=relaxed/simple; bh=kQ7pz4P/cUhYpuGjRm2udnUEft8z8JWI3bKYkeGjZYI=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version:Content-Type; b=TVRiW7MfPVNfTuk906nVwMMo6ufkw/4ZVcRMAUTQnuwZJHXO92dBCKA27KYrIyBhfptGy6VMPCTQvc/Gf0O4aqRX8vAMJRmuMNAgIbquFig1e4snxokfKo6YruYSpNDbZDNAt8KhQW2xZMNRpJxn2DD9g21ncqeopt1HxTBbgqg= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=arm.com; spf=pass smtp.mailfrom=arm.com; dkim=pass (1024-bit key) header.d=arm.com header.i=@arm.com header.b=da4x+G2F; arc=none smtp.client-ip=217.140.110.172 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=arm.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=arm.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=arm.com header.i=@arm.com header.b="da4x+G2F" Received: from usa-sjc-imap-foss1.foss.arm.com (unknown [10.121.207.14]) by usa-sjc-mx-foss1.foss.arm.com (Postfix) with ESMTP id 15CB32BCB; Mon, 6 Jul 2026 06:45:02 -0700 (PDT) Received: from e142021.fritz.box (usa-sjc-mx-foss1.foss.arm.com [172.31.20.19]) by usa-sjc-imap-foss1.foss.arm.com (Postfix) with ESMTPSA id D02643F7B4; Mon, 6 Jul 2026 06:45:03 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=arm.com; s=foss; t=1783345506; bh=kQ7pz4P/cUhYpuGjRm2udnUEft8z8JWI3bKYkeGjZYI=; h=From:To:Cc:Subject:Date:From; b=da4x+G2F8HJ1vOtSqECuqiWcMzbk8QTrwvFQ9+KpcE/5SkTfu4mzsiTOwLZ0T2iVC NVdoprTJcVRWKvbbk7tDxxFV1CyOfMWs4mT5NJcj7+XTNj0H/YjRZA5RE1vvD+nCSc nSgEa09zVBm0yph8QHYsbbIQUW3DN9Nv7Pk/vTTc= From: Andre Przywara To: Mark Rutland , Lorenzo Pieralisi , Sudeep Holla Cc: Salman Nabi , Vedashree Vidwans , Trilok Soni , Nirmoy Das , vsethi@nvidia.com, Varun Wadekar , linux-arm-kernel@lists.infradead.org, linux-kernel@vger.kernel.org, Rob Herring , Krzysztof Kozlowski , Conor Dooley , devicetree@vger.kernel.org Subject: [PATCH v3 0/8] Arm Live Firmware Activation (LFA) support Date: Mon, 6 Jul 2026 15:44:40 +0200 Message-ID: <20260706134455.132091-1-andre.przywara@arm.com> X-Mailer: git-send-email 2.43.0 Precedence: bulk X-Mailing-List: devicetree@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Hi all, this is version 3 of the Live Firmware Activation kernel support. The device part of the code now relies on Aneesh's SMCCC bus patches[1], which solves some problems rather nicely. I also added the formerly missing sysfs ABI documentation. Based on v7.2-rc1, plus the first two patches from Aneesh's series. More detailed changelog below. ============================== This series implements the kernel side support of the Arm Live Firmware Activation (LFA) specification [2]. LFA enables the activation of updated firmware components without requiring a system reboot, reducing downtime and allowing quicker deployment of critical bug fixes in environments such as data centers and hyperscale systems. It requires explicit firmware support, both via an agent running in EL3 (for instance in TF-A, already merged), but also in the firmware component to be activated. TF-RMM recently merged support for this. Unlike the usual firmware update process (which may use tools like fwupd), LFA focuses solely on the activation of an already updated firmware component, called "pending activation" in LFA lingo. This works by signalling the LFA agent (part of the EL3 runtime firmware) via an SMC call, which then does the heavy lifting of the live update, in cooperation with the to-be-updated firmware component. Key features of the driver: * Detects LFA support in system firmware (EL3). * Lists all firmware components that support live activation, identified by their GUID. * Exposes component attributes (e.g., activation capability, and activation pending) via sysfs under /sys/firmware/lfa//. * Provides interfaces to: - Trigger activation of an updated firmware component. - Cancel an ongoing activation if required. A more detailed list of features can be found in patch 2/8. Based on v7.2-rc1. This work is conceptually similar to Intel’s Platform Firmware Runtime Update and telemetry (PFRUT) [3] and TDX module updates [4], but targets Arm platforms. The driver has been used to successfully activate a Realm Management Monitor (RMM) firmware image in a controlled test environment. RMM is analogous to Intel’s TDX module. There is effort on similar work from the OCP [5]. Future work may include integration with utilities like fwupd to automatically select the appropriate driver, based on platform architecture, for Live/Runtime firmware updates. Please have a look, test and comment! Best regards, Salman and Andre Changes in v3: - change node name in DT binding example - move SMCCC function identifiers into generic SMCCC header - rework to use the new SMCCC bus instead of a using a faux device - add missing workqueue cleanup in probe() routine - squash former patch v2 3/8 into base patch - use get_image_name() more consistently - also consider -LFA_BUSY return in activate call Changes in v2: - restrict build to arm64 (the LFA spec only supports AArch64) - rename and extend central data structure to fw_image - use separate GPR register sets for some SMC calls - provide wrapper for error messages to prevent out-of-bound access - return GUID in the "name" sysfs file when image is unknown - fix wrong attribute in pending version number show function - add missing include files and order them properly - fix memory leaks in error cleanup paths - handle lifetime using embedded kobjects and a kset - drop global lfa_lock, use kset list lock and kobject refcount instead - add DT binding documentation - add timeout and watchdog re-arming (contributed by Veda) - relax timeout period and do not block while waiting - register ACPI notification (contributed by Veda) and DT interrupt - refactor ACPI notification code to allow sharing with DT code - use faux device instead of platform driver - add auto_activate file to control automatic activation - introduce rwsem mutex to prevent using stale sequence ID - use labels and goto instead of infinite loop when retrying activation - initialise workqueue only once (thanks to Nirmoy) - various cleanups on reported messages and code formatting - rebase on top of v7.0-rc1 Changes in v1: - Updated SMCCC version 1.1 to 1.2 per the LFA specification requirement. - Changed "image_props" array to a linked list to support the dynamic removal and addition of firmware images. - Added code to refresh firmware images following a successful activation. - Added a work_queue to handle the removal of firmware image attribute from it's respective kobject "_store" handle. - Refactored prime and activate into separate functions. - Kernel config for LFA now defaults to "y" i.e. included by default. - Added individual kernel attribute files removal when removing the respective kobjects using kobject_put(). - mutex_lock added to activate_fw_image() and prime_fw_image() calls. - Renamed create_fw_inventory to update_fw_image_node. - Renamed create_fw_images_tree to update_fw_images_tree. - Added two more attributes due to specs update from bet0 to bet1: current_version: For retrieval of the current firmware's version info. pending_version: For retrieval of the pending firmware's version info. - Minor changes such as, improved firmware image names, and code comments. - do...while loops refactored to for(;;) loops. [1] https://lore.kernel.org/linux-arm-kernel/20260611130429.295516-1-aneesh.kumar@kernel.org/ [2] https://developer.arm.com/documentation/den0147/latest/ [3] https://lore.kernel.org/all/cover.1631025237.git.yu.c.chen@intel.com/ [4] https://lore.kernel.org/all/20250523095322.88774-1-chao.gao@intel.com/ [5] https://www.opencompute.org/documents/hyperscale-cpu-impactless-firmware-updates-requirements-specification-v0-7-9-29-2025-pdf Andre Przywara (5): dt-bindings: arm: Add Live Firmware Activation firmware: smccc: lfa: Add auto_activate sysfs file firmware: smccc: lfa: Register DT interrupt firmware: smccc: lfa: introduce SMC access lock firmware: smccc: lfa: add sysfs ABI documentation Salman Nabi (1): firmware: smccc: Add support for Live Firmware Activation (LFA) Vedashree Vidwans (2): firmware: smccc: lfa: Add timeout and trigger watchdog firmware: smccc: lfa: Register ACPI notification Documentation/ABI/testing/sysfs-firmware-lfa | 106 ++ .../devicetree/bindings/arm/arm,lfa.yaml | 45 + drivers/firmware/smccc/Kconfig | 10 + drivers/firmware/smccc/Makefile | 1 + drivers/firmware/smccc/lfa_fw.c | 988 ++++++++++++++++++ drivers/firmware/smccc/smccc.c | 5 + include/linux/arm-smccc.h | 15 + 7 files changed, 1170 insertions(+) create mode 100644 Documentation/ABI/testing/sysfs-firmware-lfa create mode 100644 Documentation/devicetree/bindings/arm/arm,lfa.yaml create mode 100644 drivers/firmware/smccc/lfa_fw.c base-commit: dc59e4fea9d83f03bad6bddf3fa2e52491777482 prerequisite-patch-id: 64fa2209c9eee2084861ba13f0bdfdac312b19b0 prerequisite-patch-id: fe1ca1a9aeb94623c79bf66366c76bfb8645b581 -- 2.43.0