Ibrahim Uslan authored Dec 04, 2024 and Raghuram Thammiraju committed Jan 06, 2025

To prevent root privilege escalation from within a container, rootless
docker are engouraged.

This patch include script modifications to  build and launch a
rootless container along with some generic improvements

Removed hardcoded user information from build step and moved it to
be picked up at runtime when container is launched. Added entrypoint
script to have better user experience when running containers.
Improved container.sh to support rootless feature.

Signed-off-by: Ibrahim Uslan <ibrahim.uslan@arm.com>
Change-Id: I38831c84edee17f6a9bb9beebd3bc1740a97950f

Ibrahim Uslan authored Dec 11, 2024 and Raghuram Thammiraju committed Dec 23, 2024

Install helper scripts were written at different times, with varying
argument patterns, variable naming, etc. Making them have common
calling argument patterns improves their readbility and usage.
Update the naming convention for common variables and temporary paths.
Also add usage functions to print usage help string.

- common/install-openssl.h
- common/install-gcc.h
- common/install-clang.h
- common/install-libfdt.h

Signed-off-by: Ibrahim Uslan <ibrahim.uslan@arm.com>
Change-Id: I889a91bf4aaf2f81d090c549aa489e8df2df7926

Ibrahim Uslan authored Dec 17, 2024 and Raghuram Thammiraju committed Dec 23, 2024

Consolidate all installation scripts into a common folder for better
file/folder organisation.
Move helper scripts required by dockerfiles into the common directory.

The new directory structure is as below.
setup-scripts/
├── common
│   ├── install-gcc.sh
|   |-- install-clang.sh
│   ├── install-libfdt.sh
│   └── install-openssl.sh
├── container-files
│   ├── rd-infra-amd64
│   └── rd-infra-arm64
├── container.sh

Signed-off-by: Ibrahim Uslan <ibrahim.uslan@arm.com>
Change-Id: Ib25f14881f2c6e340b1f42b281e49bc2e9c69835

Add libelf-dev to the list of packages to install.

Signed-off-by: Raghuram Thammiraju <raghuram.thammiraju@arm.com>
Change-Id: I4e33ad78303cb2fd4356162ee61524a0692e91a9

Nuno Lopes authored Sep 24, 2024 and Vijayenthiran Subramaniam committed Sep 30, 2024

Create a python-pip install section in image file and list the poetry
module. TF-A needs this module for the build to be successful.

Signed-off-by: Nuno Lopes <nuno.lopes@arm.com>
Change-Id: I8bb894a9668880c6dd473453fb61bba4e1602f80

Update container-files to address docker build warning about
legacy key value pair format.

Signed-off-by: Nitin Sharma <nitin.sharma3@arm.com>
Change-Id: Ib39533f5f3b44f710af76d502262c16d54291a3d

TC_PATH variable is replaced by TOOLCHAIN_BASE_PATH in build-scripts

Signed-off-by: Nuno Lopes <nuno.lopes@arm.com>
Change-Id: I2f5f349b4cc365422259f3faf70178c6feefe804

The SCP firmware supports both Ninja and GNU Make build systems. So, add
ninja-build to the list of dependencies to build the image.

Signed-off-by: Shriram K <shriram.k@arm.com>
Change-Id: I3ba76f17b9858e5d20c921bcad85f55f05e3a6ab

Vijayenthiran Subramaniam authored Jan 12, 2024 and Nuno Lopes committed Jan 18, 2024

Add debhelper as dependency to allow building debian packages. In
addition to debhelper, kmod and libssl-dev are build dependencies
of dpkg-buildpackage. Therefore, add them as well.

Signed-off-by: Vijayenthiran Subramaniam <vijayenthiran.subramaniam@arm.com>
Change-Id: Ia560ae80ccfbf3bddbdb56597aaf569686839600

This change is to align with build-scripts after changing the
installation base path for toolchains.

Signed-off-by: Nuno Lopes <nuno.lopes@arm.com>
Change-Id: Id0e9c6907a76a899930d822a10eaebd2189b8d52

Hafnium build system relies on this compiler

Signed-off-by: Nuno Lopes <nuno.lopes@arm.com>
Change-Id: Iffbaddbc3a2c0bf827e4a87211454ab3d6aa5c1b

Signed-off-by: Nuno Lopes <nuno.lopes@arm.com>
Change-Id: Ia6556774cf1b7839d55e5b6fc2cf7aa24de30eef

Signed-off-by: Nuno Lopes <nuno.lopes@arm.com>

Components for CY2023Q3 require this GCC version.

Signed-off-by: Nuno Lopes <nuno.lopes@arm.com>

Add an image to build the reference stacks on arm64 architecture and
update supporting scripts to handle the two supported architectures.

Signed-off-by: Nuno Lopes <nuno.lopes@arm.com>

Signed-off-by: Nuno Lopes <nuno.lopes@arm.com>

Signed-off-by: Nuno Lopes <nuno.lopes@arm.com>

* Remove buildx command to allow backwards compatibility.
* Use source mount path in destination path to allow files built inside
  the container to be debugged on the host (i.e.: with ARM-DS).

Signed-off-by: Nuno Lopes <nuno.lopes@arm.com>

Signed-off-by: Nuno Lopes <nuno.lopes@arm.com>

virtualenv is installed inside /home/$USER/.local/bin. Export this to
$PATH variable for virtualenv to be invoked correctly.

Signed-off-by: Vijayenthiran Subramaniam <vijayenthiran.subramaniam@arm.com>

KVM tool built with GCC 11 aarch64-none-linux is expecting glibc-2.34
from buildroot, but buildroot latest (as of with 2022.08 tag) builds
only glibc-2.33. This leads to failure to launch the lkvm tool from
buildroot. As a workaround, use GCC 10 instead of GCC 11.

Signed-off-by: Vijayenthiran Subramaniam <vijayenthiran.subramaniam@arm.com>

The URL of the GCC toolchain has been updated in the developer.arm.com.
If the primary url doesn't work, try the alternate url to download the
toolchain.

Signed-off-by: Vijayenthiran Subramaniam <vijayenthiran.subramaniam@arm.com>

srecord is required for using the `srec_cat` command while running the
build-tf-m.sh script. Add it to the list of apt packages to install.

Signed-off-by: Vijayenthiran Subramaniam <vijayenthiran.subramaniam@arm.com>

Checking if the user executing the script is root, throws an error.

Add the argument '--network host' to the build command is needed on vpn
connections.

Signed-off-by: Nuno Lopes <nuno.lopes@arm.com>
Change-Id: Id39443d92e27f168f49247c6a678a25b63d85582

This change configures locale information that xterm needs to allow to
launch gui terminals inside the running container.
An environment variable 'DISPLAY' is also introduced in the docker run
command, to configure a display for the container.

Signed-off-by: Nuno Lopes <nuno.lopes@arm.com>
Change-Id: I4e23fdcc2821f454abf1257cd719825651e469fc

Signed-off-by: Nuno Lopes <nuno.lopes@arm.com>
Change-Id: Iea649100c735b4d660621129111d54a5a7ddeb76

Signed-off-by: Nuno Lopes <nuno.lopes@arm.com>
Change-Id: Iacce41ea58bb75e21fe449d52d8f5ae9f8b9ba57

Signed-off-by: Nuno Lopes <nuno.lopes@arm.com>
Change-Id: Idd841fe0904c3c3555076634fa6111997a8ff0c1

Signed-off-by: Nuno Lopes <nuno.lopes@arm.com>
Change-Id: I809580ff44aa79bd674e3dde29c959ff021cfa7e