When pushing ArmNN-required files for the ArmNN delegate,
ADB only transfers the linker file instead of the actual file.
Copying the actual file resolves this issue.

Signed-off-by: Quoc Khanh Le <QuocKhanh.Le@arm.com>

Sourcing common.config without sourcing parse_params.sh etc. beforehand
results in various environment variables not being defined. Pull in the
OpenSSL definitions we require from common.config instead of sourcing
the whole file.

Note also tidy up the file by defining TOOLS_DIR once at the start of
the file.

Signed-off-by: Jackson Cooper-Driver <jackson.cooper-driver@arm.com>

Enable INSTRUMENTATION_GFX to collect GPU counters.

This config is already enabled for Android.

Signed-off-by: Jagdish Gediya <jagdish.gediya@arm.com>

Signed-off-by: Jagdish Gediya <jagdish.gediya@arm.com>

Add script to test simpleperf. The script needs to be pushed
to /sdcard directory along with build env file on device and
run like below,

$ adb push files/android/test_simpleperf.sh /sdcard
$ adb push setup_build_env_* /sdcard/build_env.cfg
$ /system/bin/sh /sdcard/test_simpleperf.sh

Signed-off-by: Jagdish Gediya <jagdish.gediya@arm.com>

Add script to test perf, it tests commands like list, stat and
record/report.

Signed-off-by: Jagdish Gediya <jagdish.gediya@arm.com>

few test scripts requires platform and flavour information to run
e.g. test_mpmm.sh, adding build env to rootfs will be useful for such
scripts which can parse platform/flavour configuration directly from
build_env.cfg file instead of providing configuration to them on command
line.

Signed-off-by: Jagdish Gediya <jagdish.gediya@arm.com>

Ben Horgan authored Jul 26, 2024 and Jagdish Gediya committed Aug 13, 2024

Signed-off-by: Ben Horgan <ben.horgan@arm.com>
Signed-off-by: Jagdish Gediya <jagdish.gediya@arm.com>

After introducing bezel build, CONFIG_KASAN=n need to be part
inside linux kernel. Removing from build-scripts as we oberve
compilation error

=============================================================
failed: error executing KernelConfig command (from target
//common:tc_config) /bin/bash -c ... (remaining 1 argument skipped)
Use --sandbox_debug to see verbose messages from the sandbox and
retain the sandbox build root for debugging
ERROR: @//common:tc_config:
CONFIG_KASAN: actual '', expected 'CONFIG_KASAN=n' from common/totalcompute/configs/flavor_defconfig.
Are they declared in Kconfig?
Target //common:tc failed to build
==============================================================

Refactor the build command in a better way to accommodate
future changes.

Signed-off-by: Vishnu Satheesh <vishnu.satheesh@arm.com>

There is currently no reason to check for the patch level version of the
kernel, as we are trying to compare linux 5.15 with 6.1+. Updating
conditions everywhere.

In TF-A we check specifically for 6.6, or higher, so when we introduce
linux 7.0, the check there will need to be updated.

Signed-off-by: Alex Dobrescu <alex.dobrescu@arm.com>

Debian builds linux with make for 5.15 and with kleaf for 6.1
This means that for kleaf builds, the mali kernel driver is already
built during linux build, and the output just needs to be copied instead.

Now copying dma-buf-test-exporter.ko all the time, as the config
DMA_SHARED_BUFFER_TEST_EXPORTER is enabled in the kernel by default and
it is expected to be present during runtime.

Signed-off-by: Alex Dobrescu <alex.dobrescu@arm.com>

A bit more space is needed when we copy the ddk files using scp, as we
need to store both ddk files and the compressed version of them.
Allocating 4G instead of 2G, so both compressed and
decompressed mali files fit in the allocated MALI_SIZE.

Unit test framework disabled:
892M    mali.tar.xz
2.5G    mali

Unit test framework enabled:
2.1G    mali.tar.xz
5.5G    mali

debian base size - 816M

Signed-off-by: Alex Dobrescu <alex.dobrescu@arm.com>

We require support for Rootless Docker (a different method of running
docker which does not require any root privileges). For rootless docker,
all bind mounts are done in root mode which gives access errors when
attempting to run docker with the user being the non-root user.

The recommended method to get around this issue is to run docker without
passing the --user flag and therefore be the root user in the container.
Note that rootless docker will ensure that all created files have user
permissions instead of root.

We need to override the entrypoint in this case, as the default
entrypoint checks the user and prevents running as root.

Signed-off-by: Jackson Cooper-Driver <jackson.cooper-driver@arm.com>

Signed-off-by: Vishnu Satheesh <vishnu.satheesh@arm.com>

Replace 'Blackhawk' with 'Cortex X925' and 'Chaberton' with 'Cortex A725'.

Signed-off-by: Jagdish Gediya <jagdish.gediya@arm.com>

As the root cause of Control Flow Integrity (CFI) failure when
loading the GPU module in Linux Kleaf, we are removing the bypass
CFI configuration and enabling the necessary LTO configurations
required for CFI.

Signed-off-by: Quoc Khanh Le <QuocKhanh.Le@arm.com>

Add support for pvmfw in Android 13

Signed-off-by: Quoc Khanh Le <QuocKhanh.Le@arm.com>

Kleaf builds the mali kernel driver during linux kernel build. Now just
copying the .ko file instead of building again.

There are a few differences between the kernel driver for mali coming
from hwr and hwr-prebuilt. There are 2 configs that don't exist, so
excluding them from the config.

Signed-off-by: Alex Dobrescu <alex.dobrescu@arm.com>

DPE functionality is Android 14 only.

Signed-off-by: Aditya Deshpande <aditya.deshpande@arm.com>

Signed-off-by: Aditya Deshpande <aditya.deshpande@arm.com>

Tamas Ban authored Dec 08, 2023 and Aditya Deshpande committed Aug 07, 2024

Build and deploy pvmfw.img if AVB=true on Android 14 only.

Signed-off-by: Tamas Ban <tamas.ban@arm.com>
Signed-off-by: Aditya Deshpande <aditya.deshpande@arm.com>

To integrate DPE/DICE with the rest of the SW stack:
- Enable DPE support in TF-A (FVP only)
- Provide the location of the TF-A external QCBOR library

Signed-off-by: Aditya Deshpande <aditya.deshpande@arm.com>

Previously, the environment variable was set for each build script, even
those that do not use the locally compiled openssl. Remove this global
setting and instead set the environment individually when running
binaries that are built with it. This ensures that other binaries aren't
inadvertently picking up the wrong openssl dynamic libraries.

Quoc Khanh Le authored Aug 01, 2024 and Quoc Khanh Le committed Aug 02, 2024

Add the rotational scheduler self test for buildroot

Signed-off-by: Quoc Khanh Le <QuocKhanh.Le@arm.com>

After the transition to kleaf for building the linux kernel and modules,
we lost support for building with make.

Linux 5.15 has official support for kleaf, (which uses Clang) but our
development branch which has some extra patches, does not support building
with Clang.

Because of this, building tc3-android13-linux5.15 will not work with
kleaf, so adding back support for make, which will be chosen as the
build system for linux versions lower than 6.1

Also moved cloning and patching gpu ddk under it's own build-gpu-ddk.sh
file, which is sourced where needed to avoid duplication, and keep the
same build flow.

Because make is generating the Image under LINUX_OUT/arch/arm64/boot and
kleaf is flattening all the outputs under LINUX_OUT, moved the Image
from kleaf under the same path as make.

Signed-off-by: Alex Dobrescu <alex.dobrescu@arm.com>

TFlite model can't be downloaded directly, downloading tar file and untar it

Signed-off-by: Quoc Khanh Le <QuocKhanh.Le@arm.com>

Quoc Khanh Le authored Jun 27, 2024 and Alex Dobrescu committed Jul 30, 2024

Update config and bazel build command to support Mali GPU Kernel.
Add bazel-kleaf support for the linux trusted services module.

Signed-off-by: Quoc Khanh Le <QuocKhanh.Le@arm.com>
Signed-off-by: Alex Dobrescu <alex.dobrescu@arm.com>

Switch from make to kleaf build for linux kernel.

Signed-off-by: Quoc Khanh Le <quockhanh.le@arm.com>
Signed-off-by: Alex Dobrescu <alex.dobrescu@arm.com>

NI was disabled in linux-6.1, hence disabling it from the build config.

Signed-off-by: Alex Dobrescu <alex.dobrescu@arm.com>

Jackson Cooper-Driver authored Jul 22, 2024 and Davidson Kumaresan committed Jul 30, 2024

Enable branch protection in the trusted-services secure partitions. Note
that the value of 1 specifies that the 'standard' option is passed on
the compiler command line which turns on all types of branch protection
features.

Signed-off-by: Jackson Cooper-Driver <jackson.cooper-driver@arm.com>

These will be built and run when setting RSE_TESTS=true

Signed-off-by: Ben Horgan <ben.horgan@arm.com>

Signed-off-by: Ben Horgan <ben.horgan@arm.com>

This avoids downloading the rse dependencies on every clean
build. Note that mbedtls is still patched by the build
system so we can't use the same repository as the tf-a
dependency.

Signed-off-by: Ben Horgan <ben.horgan@arm.com>

openssl source code download is not working from openssl
website, the curl command used to download the source is
throwing below error,

curl: (22) The requested URL returned error: 404

so move to github release, also release 3.2.1 is not available
on github so use 3.2.2 which also works.

also delete OPENSSL_DIR before creating it, because mkdir
throws error if directory already exists which is the case
if openssl got the error during download/compilation and
setup.sh needs to be run again.

'mkdir -p' won't throw error but better to start from scratch
in case there is any error.

Signed-off-by: Jagdish Gediya <jagdish.gediya@arm.com>

Sandeep Chiluvuru authored Jul 23, 2024 and Sandeep Chiluvuru committed Jul 23, 2024

Add build options for scmi tests and tftf tests. The tests are set to
false by default.

Signed-off-by: sandeep chiluvuru <sandeep.chiluvuru@arm.com>

Sandeep Chiluvuru authored Jul 23, 2024 and Sandeep Chiluvuru committed Jul 23, 2024

This patch adds an environment variable to enable tftf tests in
build-scripts.

Signed-off-by: sandeep chiluvuru <sandeep.chiluvuru@arm.com>

save build env to source it for future builds. build env
file is created with platofm, filesystem, gpu config as
suffix.

e.g.
$ source setup_build_env_tc4_android_fvp_hwr

Signed-off-by: Jagdish Gediya <jagdish.gediya@arm.com>

Trusted services now hosted in local fork. These patch files are no
longer required.

Signed-off-by: Jackson Cooper-Driver <jackson.cooper-driver@arm.com>

Davidson Kumaresan authored Jun 24, 2024 and Jackson Cooper-Driver committed Jul 22, 2024

* Change environmental variable name from ARM_FFA_TEE to TS_LINUX_DRIVER
* Change directory name from arm-ffa-tee to linux-trusted-services as is
the name in upstream

Signed-off-by: Davidson K <davidson.kumaresan@arm.com>

Davidson Kumaresan authored Apr 24, 2024 and Jackson Cooper-Driver committed Jul 22, 2024

The linux kernel driver needed for trusted services is renamed to
arm-tstee in the latest version.

Signed-off-by: Davidson K <davidson.kumaresan@arm.com>
Signed-off-by: Jackson Cooper-Driver <jackson.cooper-driver@arm.com>