Sathyam Panda authored Aug 26, 2022 and Nuno Lopes committed Nov 07, 2023

Add kvm-unit-tests directory and kvmtool (lkvm) binary in the ext3
parition of buildroot disk image.

Signed-off-by: Sathyam Panda <sathyam.panda@arm.com>
Change-Id: I8b9fc819f64a1b4c649f0c7ed5557589fa5d2bd8

Specify the TF-A build options to be used when building the test for
tf-a-tests. This overrides the default TF-A build options specified in
the config files. This change applies to RD-N2, RD-N2-Cfg1 and RD-V2
platforms.

Change-Id: I016218c61e5c1fba598d0a43224e0e2bee8edaa5
Signed-off-by: Thomas Abraham <thomas.abraham@arm.com>

There are preset TF-A build options used by the script that builss the
tf-a-tests test case. Remove those preset build options and allow TF-A
build options to be supplied from the config file.

Signed-off-by: Thomas Abraham <thomas.abraham@arm.com>
Change-Id: Ibfc221cea6c34ac5da29f3db9378fd3b9fec71a1

Rohit Mathew authored Sep 26, 2023 and Thomas Abraham committed Sep 28, 2023

Latest WinPE releases access MPAM system registers. If the platform on
which WinPE is tested doesn't have MPAM enabled (or traps disabled from
EL3), there would be a crash on access. As RD-N2 is a platform on which
WinPE is tested, enable MPAM on the platform.

Signed-off-by: Rohit Mathew <Rohit.Mathew@arm.com>
Change-Id: I7f6ac37aa8e99b9dc2d33083d901da7bef6e5623

Nishant Sharma authored Sep 23, 2023 and Thomas Abraham committed Sep 28, 2023

Add the build flag to enable support for SP at SEL0 in
SPMC at EL3

Signed-off-by: Nishant Sharma <nishant.sharma@arm.com>

Update the config files to switch from gcc version from 11.2 to
12.3-rel1. The install_prerequisites.sh script is updated along
with these changes as well.

Signed-off-by: Thomas Abraham <thomas.abraham@arm.com>

Nuno Lopes authored May 10, 2023 and Tony Nadackal committed Jun 23, 2023

The SCP component is requiring an older version than the one found in
standard Ubuntu repositories, thus this update aligns the installation
and build system to use the toolchain from Arm Developer website in both
supported build architectures.

Signed-off-by: Nuno Lopes <nuno.lopes@arm.com>
Change-Id: Ida9cebe396e257828fbb500ee693a23d8a5e50ea

Vivek Kumar Gautam authored May 02, 2023 and Tony Nadackal committed Jun 15, 2023

A recent edk2 patch updated the memory protection policy for ArmVirtPkg:
("2997ae3873 ArmVirtPkg: make EFI_LOADER_DATA non-executable")
This removed the execute permissions from EFI_LOADER_DATA allocations by
updating the PCD PcdDxeNxMemoryProtectionPolicy from 0xC000000000007FD1
to 0xC000000000007FD5.

This change corresponds to the following change on grub:
("f82633068 efi: change heap allocation type to GRUB_EFI_LOADER_CODE")

Few distributions however may not have pulled in above mentioned grub
change and so booting these distros on platforms such as ArmVirtKvmTool
with uefi firmware that has non-executable EFI_LOADER_DATA change result
in asynchronous instruction aborts.
Add a workaround to build ArmVirtKvmTool platform by forcefully setting
PcdDxeNxMemoryProtectionPolicy to 0xC000000000007FD1.

Signed-off-by: Vivek Gautam <vivek.gautam@arm.com>
Change-Id: I2521fe42ce7e7f789c66ddac103b07d37ca6577d

Omkar Kulkarni authored Jun 02, 2023 and Tony Nadackal committed Jun 14, 2023

TF-A component has updated some of the build options. This patch adds
following support:
- replace HANDLE_EA_EL3_FIRST with HANDLE_EA_EL3_FIRST_NS macro
- replace RAS_EXTENSION build option with ENABLE_FEAT_RAS and
  RAS_FFH_SUPPORT macros

Signed-off-by: Omkar Anand Kulkarni <omkar.kulkarni@arm.com>
Change-Id: I4ea6a0f3c7116393b55e9bf1ec66b220a21ce43f

"libssl-dev" and "libelf-dev" were found to be required to build linux
kernel on AArch64 host machines. So include them in the list of packages
to be installed as prerequisites.

Signed-off-by: Thomas Abraham <thomas.abraham@arm.com>
Change-Id: Id0a1a00968b9180c6f46fa4441fb2dafc8e6a14b

Fix the path used to point to the root directory of installed
openssl.

Signed-off-by: Thomas Abraham <thomas.abraham@arm.com>
Change-Id: I4d9710ee932d062aaf0966be83c76088a715040e

For the AArch64 host platforms, disable the use of openssl for cmake
build. As openssl is optional and to avoid any unmet dependencies,
pass additional parameters to cmake configure command to disable the
use of openssl.

Signed-off-by: Thomas Abraham <thomas.abraham@arm.com>
Change-Id: Ia9c5ed146882953bc7c01fbe4bb8f5ec771d5403

Change the build configurations of RD-V1-MC based on the host machine
architecture. Environment variable BUILD_MACHINE_ARCH is used for host
specific changes in the configuration.

Signed-off-by: Tony Nadackal <tony.nadackal@arm.com>
Change-Id: I0b921dd187dece840eb2723d0d95e22b35a0c030

When building buildroot on a x86_64 host, BR2_TOOLCHAIN_EXTERNAL should
be set to y to indicate that an external toolchain should be used to
build for aarch64 target. Add a new x86_64 host specific config fragment
for buildroot and move out the x86_64 host specific config into this
file from the defconfig file.

Signed-off-by: Tony Nadackal <tony.nadackal@arm.com>
Change-Id: I78ae9d6724d5cc206aed926352a50b51e8a8bf4d

Vijayenthiran Subramaniam authored Mar 17, 2023 and Tony Nadackal committed Mar 28, 2023

srecord is required for using the `srec_cat` command while running
the upcoming build-tf-m.sh script to pack TF-M binaries. Add it to the
list of apt packages to install.

Signed-off-by: Vijayenthiran Subramaniam <vijayenthiran.subramaniam@arm.com>
Change-Id: I6a7b561a8ba2b3bcab4ebd021372376ed00c7827

Vivek Kumar Gautam authored Mar 27, 2023 and Tony Nadackal committed Mar 28, 2023

The kvm-unit-tests repository is now moved from top directory to
validation/sys-test directory to align with directory structure for
other validation test suites. So update the build script to build
kvm-unit-tests from the correct path.

Signed-off-by: Vivek Gautam <vivek.gautam@arm.com>
Change-Id: I6d1c62ea26e8587538d930a949ec91a4c013eb04

To maintain consistency with the upstream tf-a test repository [1], the
script file names and references to tftf within the scripts and
configuration files have been modified to tf-a-tests

[1]: https://git.trustedfirmware.org/TF-A/tf-a-tests.git



Signed-off-by: Tony Nadackal <tony.nadackal@arm.com>
Change-Id: I5fe7e739f22f0a35241066f92d24977151d9047d

Ryan Harkin authored Apr 22, 2022 and Thomas Abraham committed Mar 28, 2023

The libfdt build may fail if you have the following packages installed
 - libyaml-dev
 - python
 - swig

We don't need libfdt for Yaml or Python to build the rd-infra code,
so skip these sections by adding flags to the Makefile.

Signed-off-by: Ryan Harkin <ryan.harkin@arm.com>
Change-Id: I5a775c08c304cfeefce6571e711dd60d60e20f9c

As the BL31 image was too large to fit in the internal SRAM, placing it
in the DRAM.

Signed-off-by: Tony Nadackal <tony.nadackal@arm.com>
Change-Id: I1a13402f5cf76cfa252a1552f6e9c9271bdcbb2e

The macro PLAT_DRAM2_SIZE is used to configure the total memory size of
the platform. The Platform's memory space is physically divided into two
blocks. The default total memory size is 8GB, and the first block size
is 2GB. Therefore, the default value of the second block,
PLAT_DRAM2_SIZE, is calculated as 6GB. The macro PLAT_DRAM2_SIZE is
passed as a build flag and is used in both TF-A and UEFI.

This support is only available for rdv2 and variants of rdn2 platforms.
Any changes made to the PLAT_DRAM2_SIZE value will require a
corresponding change in the model-scripts.

Signed-off-by: Tony Nadackal <tony.nadackal@arm.com>
Change-Id: Iafd7045e87900aa0eb949840ddf685bd6d7a6840

Rohit Mathew authored Oct 06, 2022 and Tony Nadackal committed Mar 17, 2023

If "$LINUX_OUTDIR/tools/iommu/smmute" folder exists on the host
machine, IOMMU artifacts would be packed to be part of the ext3
partition targetted for grub ramdisk. This works fine in general cases.
However, if LINUX_TOOLS_IOMMU_BUILD is set to 0 and the previous build
is not cleaned, the scripts end up with failed access on empty
"$LINUX_OUTDIR/tools/iommu/smmute" directory. Prevent this issue from
happening by adding an additional check to see if
LINUX_TOOLS_IOMMU_BUILD is set to 1 before proceeding with adding IOMMU
artifacts.

Signed-off-by: Rohit Mathew <rohit.mathew@arm.com>
Change-Id: Ia5da464c715028e478e298925447f15f4e9bd9ff

Update arm-tf references to tf-a in script file names and its usage
inside the script and config file. This is for maintaining consistency
with Trusted Firmware-A (TF-A) and to avoid disambiguation from Trusted
Firmware-M (TF-M) [1].

BREAKING CHANGE: With this change, the build-tf-a.sh script (previously
build-arm-tf.sh) expects tf-a (instead of arm-tf) to be present in the
workspace for successful build.

[1]: https://github.com/ARM-software/arm-trusted-firmware/commit/4def07d5352893a33af18b04795f875fabff14de



Signed-off-by: Tony Nadackal <tony.nadackal@arm.com>
Signed-off-by: Vijayenthiran Subramaniam <vijayenthiran.subramaniam@arm.com>
Change-Id: I5bb7c9658641589de4269aba21285a1c0474e9b2

Update all variable references of Arm Trusted Firmware to Trusted
Firmware-A (TF-A). This is for consistency with and disambiguation from
Trusted Firmware-M (TF-M) [1].

[1]: https://github.com/ARM-software/arm-trusted-firmware/commit/4def07d5352893a33af18b04795f875fabff14de



Signed-off-by: Tony Nadackal <tony.nadackal@arm.com>
Signed-off-by: Vijayenthiran Subramaniam <vijayenthiran.subramaniam@arm.com>
Change-Id: I8de6f7212c1e5bc701bf4ad311c0b6695e66f91f

Sushant Tripathi authored Mar 15, 2023 and Tony Nadackal committed Mar 16, 2023

Install openssl in tools to avoid overriding the system ssl.
If installed globally, the system ssl gets destroyed as it's unistalled
and installed again by install_openssl3_0 function in
sgi/install_prerequisites.sh, which changes the state of the ssl. This
causes an issue in other application tasks which use ssl.

Signed-off-by: Sushant Tripathi <sushant.tripathi@arm.com>
Change-Id: I474ccb085726593b80c60dbd699f2b77c25c310c

Sushant Tripathi authored Feb 14, 2023 and Tony Nadackal committed Mar 14, 2023

gcc-6 and g++-6 are not used to build the reference platforms so can be
safely removed from the list of required packages.

Signed-off-by: Sushant Tripathi <sushant.tripathi@arm.com>
Change-Id: Ib3240100795bb7183ce3b2b2c053dd7ba80aa14c

Arnold Gabriel Benedict authored Jan 09, 2023 and Vijayenthiran Subramaniam committed Feb 13, 2023

Every instance of repo directory needs a copy of toolchain taking up
large disk space.
Now we can have single toolchain directory for multiple repo instances.
To use, define TC_PATH environment variable as the toolchain location.

Signed-off-by: Arnold Gabriel Benedict <ArnoldGabriel.Benedict@arm.com>
Change-Id: I70838a7e53676766327c8e8f0ab285af69df1132

Enable LINUX_TOOLS_IOMMU_BUILD flag to build Linux iommu tools that
builds smmute test binaries for IO virtualization tests.

Signed-off-by: Vivek Gautam <vivek.gautam@arm.com>
Change-Id: If8d1be004ee1fccb40df77e7d1029852f6724a58

The size of ext3 partition in the partition table was incorrectly set to
$((ext3_part_size-1)). The size should match the size of the allocated
parittion while creating the partition. So fix this mismatch in multiple
build scripts, viz. build-test-busybox.sh, build-test-buildroot.sh,
build-test-secureboot.sh.

Signed-off-by: Vivek Gautam <vivek.gautam@arm.com>
Change-Id: Ie5b4b42dcb98b04e66c941bcbaaf03e2d5b5f10d

Tony Nadackal authored Dec 19, 2022 and Vivek Kumar Gautam committed Dec 22, 2022

Since RD-N2-Cfg1 platform no longer supports ACS test, build script is
modified to remove its support.

Signed-off-by: Tony Nadackal <tony.nadackal@arm.com>
Change-Id: I6d368a10348dafcab6efedb25abe33ac6d61cdc9

Nishant Sharma authored Dec 16, 2022 and Vivek Kumar Gautam committed Dec 22, 2022

This patch enables SPMC at EL3 configuration for rdn2cfg2 platform.

Signed-off-by: Nishant Sharma <nishant.sharma@arm.com>
Change-Id: I5fda47ce6d3f7ffcf5cbc21d7f0df6a6cdd941c2

Nishant Sharma authored Dec 16, 2022 and Vivek Kumar Gautam committed Dec 22, 2022

This patch enables SPMC at EL3 configuration for rdn2cfg2 platform.

Signed-off-by: Nishant Sharma <nishant.sharma@arm.com>
Change-Id: Id4f2ed7a142276cfd5a07f804573d29fcf53b304

Sayanta Pattanayak authored Nov 18, 2021 and Vivek Kumar Gautam committed Dec 22, 2022

TOS_FW_CONFIG is used as configuration file for trusted services. In
Arm infrastructure reference design platforms StMM is used as secure
partition and the secure partition manager uses secure partition config
file to prepare the execution context for secure partition.
TOS_FW_CONFIG file has details about memory regions, device regions,
runtime execution configuration etc. This file will be used by EL3
Secure Partition manager before handing over control to secure
partition (StMM).
This patch includes the tos_fw_config file into FIP for use by EL3 SPMC
during TF-A execution.

Signed-off-by: Sayanta Pattanayak <sayanta.pattanayak@arm.com>
Change-Id: Ia014461278644b520b57c825f31b9e188873609f

Nishant Sharma authored Mar 31, 2022 and Tony Nadackal committed Dec 21, 2022

This patch enables SPMC at EL3 configuration for rdn2 platform.

Signed-off-by: Nishant Sharma <nishant.sharma@arm.com>
Change-Id: If6860a4084348bd6467c68a10bf84dc2e13ef693

Nishant Sharma authored Mar 26, 2022 and Tony Nadackal committed Dec 21, 2022

This patch enables SPMC at EL3 configuration for rdn2cfg1 platform.

Signed-off-by: Nishant Sharma <nishant.sharma@arm.com>
Change-Id: Ib343056daf0ba203ae68364d072144f1419733fd

Sayanta Pattanayak authored Dec 06, 2022 and Tony Nadackal committed Dec 21, 2022

Add CXL config fragment file for rdn2cfg1. Enable CXL specific kernel
configurations.

Add the config fragment file to defconfig's config list.

Signed-off-by: Sayanta Pattanayak <sayanta.pattanayak@arm.com>
Change-Id: I689a44cf6618773b5d8066637e41039098fa9721

Sayanta Pattanayak authored Mar 24, 2022 and Tony Nadackal committed Dec 21, 2022

With NUMACTL configuration enabled in buildroot, NUMA test utilities
(NUMASTAT, NUMADEMO) will be available for performing various
NUMA specific test on all available NUMA nodes in kernel.

Signed-off-by: Sayanta Pattanayak <sayanta.pattanayak@arm.com>
Change-Id: I78b303d732b49c12d4a9a2be01f4d0b71c1f1d07

Sayanta Pattanayak authored Mar 24, 2022 and Tony Nadackal committed Dec 21, 2022

Adds a build flag for enabling CXL remote memory configuration
in UEFI.

Signed-off-by: Sayanta Pattanayak <sayanta.pattanayak@arm.com>
Change-Id: Iff9fbd995f9d284d70f2665553c3dee9a2a9fc9a

Vijayenthiran Subramaniam authored Nov 10, 2022 and Tony Nadackal committed Dec 21, 2022

As per advisory for CVE-2022-3602 and CVE-2022-3786 [1][2], upgrade
openssl to 3.0.7.

[1] https://www.openssl.org/news/secadv/20221101.txt
[2] https://www.openssl.org/blog/blog/2022/11/01/email-address-overflows



Signed-off-by: Vijayenthiran Subramaniam <vijayenthiran.subramaniam@arm.com>
Change-Id: I40cfb7dcfbc6640f9596de44cba7aa6afdc37c65

Add the initial build configuration file for RD-N2-Cfg3 platform.
Support for busybox, buildroot, uefi and secure boot is enabled.

Signed-off-by: Tony K Nadackal <tony.nadackal@arm.com>
Signed-off-by: Vijayenthiran Subramaniam <vijayenthiran.subramaniam@arm.com>
Change-Id: Iae9d84131dc15b7604813e67e2e731a08577e02c

Rename the flag HANDLE_EA_EL3_FIRST to HANDLE_EA_EL3_FIRST_NS as updated
in the TFA framework.

Signed-off-by: Omkar Anand Kulkarni <omkar.kulkarni@arm.com>
Change-Id: I8a08c39cc5544b6d7c9866c5fea8d64b7af68ce0