Added support for choosing either ecosystem FVP or Arm virtual hardware
FVP running in the AMI to the `run.sh` script. The ecosystem FVP is used
by default.

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

Added support for FreeRTOS TCP/IP stack and made it the default choice
of network stack.

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

Since we are integrating latest version of FreeRTOS TCP/IP stack which
relies on FreeRTOS kernel, ensure that we are using the latest released
version of FreeRTOS kernel which is `V10.6.1`.

In addtion, fix a typo and remove unused macro from `FreeRTOSConfig.h`.

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

Add a CMake variable `CONNECTIVITY_STACK`, so that the application can
select a network stack from the supported network stacks.

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

The system event helper library provides system event management, so
that the tasks can wait on the required system event to happen.

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

The socket creation is part of
`Middleware/ARM/IoT_VSocket-lib/AVH/interface/vsocket/iot_socket.c` and
hence `socket_startup.c` is redundant. In addition, `socket_startup()`
always returns 0.

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

FreeRTOS TCP/IP stack recommends `heap_4` and `BufferAllocation_2`.
https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/tree/V4.0.0-appsec#note



Since FreeRTOS manages the heap, set Mbed TLS memory APIs to use
FreeRTOS heap APIs (mbedtls_platform_set_calloc_free).

In addition, reduce allocated heap size from `0x000b0000` to
`0x00000400`, since FreeRTOS manages heap when `heap_4` configuration is
selected. Ideally, heap size should be 0, however, GNU expects linker
symbol `end` to be available. Hence, set it to `0x400`.

Also, set the FreeRTOS config `configAPPLICATION_ALLOCATED_HEAP` to 0,
indicating FreeRTOS allocates the heap based on `configTOTAL_HEAP_SIZE`
(720896 bytes).

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

Instead of directly using malloc, use FreeRTOS provided malloc API.

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

Ahmed Ismail authored Oct 09, 2023 and Devaraj Ranganna committed Oct 11, 2023

ConvertElfToBin CMake module is used to convert
provisioning data elf file to binary file.

Signed-off-by: Ahmed Ismail <Ahmed.Ismail@arm.com>

Ahmed Ismail authored Oct 06, 2023 and Devaraj Ranganna committed Oct 11, 2023

A new CMake module (MergeTfmImages.cmake) is introduced
to be used to merge Bootloader, TF-M secure, Non-secure
user application, secure and non-secure provisioning
images into one image to be loaded inside the ROM rather
than loading different images at their respective addresses.

CI is modified to archive the merged binary instead of
separate binaries which would be used the test stage of
the CI.

This change enhance re-usability and decrease code
duplication within the existing applications and applications
to be added.

Signed-off-by: Ahmed Ismail <Ahmed.Ismail@arm.com>

Ahmed Ismail authored Oct 05, 2023 and Devaraj Ranganna committed Oct 11, 2023

A new CMake module (SignTfmImage.cmake) is introduced
to add the needed sign function to be used to sign
the non-secure (application) binaries.

This change enhance re-usability and decrease code
duplication within the existing applications and applications
to be added.

Signed-off-by: Ahmed Ismail <Ahmed.Ismail@arm.com>

Ahmed Ismail authored Oct 06, 2023 and Devaraj Ranganna committed Oct 11, 2023

A new CMake module (GenerateAWSUpdateDigestAndSignature.cmake)
is introduced to be used to generate AWS update digest
and update signature to be used for AWS OTA update.

This change would enhance re-usability and decrease code
duplication within the applications.

Signed-off-by: Ahmed Ismail <Ahmed.Ismail@arm.com>

In addition, refactor `Tools/scripts/run.sh` to provide tf-m
provisioning bundle at the correct memory address based on target
selected.

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

The `pyelftools` is needed by TF-M to generate provisioning bundle.

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

The corstone-300 target supports provisioning bundle in TF-M, therefore,
disable dummy provisioning and enable provisioning bundle.

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

The latest changes in TF-M includes the possiblity to disable TF-M dummy
provisioning and enabling provisioning bundle to provision OTA update
verification key.

In addition, create a patch to fix the following cmake build error.

Direct dependency on generated_private_key_s.pem causes build failure as
the generated file is in a different location than what CMake is
expecting.

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

Bence Balogh authored Aug 07, 2023 and Devaraj Ranganna committed Sep 25, 2023

Signed-off-by: Bence Balogh <bence.balogh@arm.com>

Bence Balogh authored Aug 07, 2023 and Devaraj Ranganna committed Sep 25, 2023

Signed-off-by: Bence Balogh <bence.balogh@arm.com>

Bence Balogh authored Aug 02, 2023 and Devaraj Ranganna committed Sep 25, 2023

The .ld and .sct linker scripts for the provisioning_data
can include the provisioning_config.h this way, so the
addresses will always by in-sync.

Signed-off-by: Bence Balogh <bence.balogh@arm.com>

Bence Balogh authored Aug 02, 2023 and Devaraj Ranganna committed Sep 25, 2023

The credentials header that's used in the provisioning
binary blob is generated by the generate_credentials_header.py
python script. The script uses pem files to generate the header.
The pem files' paths can be passed with cmake definitions during
the cmake configuration.

Signed-off-by: Bence Balogh <bence.balogh@arm.com>

Bence Balogh authored Aug 01, 2023 and Devaraj Ranganna committed Sep 25, 2023

Check the provisioning magic before and after the provisioning
data to see whethet the bundle is loaded and valid.

Signed-off-by: Bence Balogh <bence.balogh@arm.com>

Bence Balogh authored Jul 31, 2023 and Devaraj Ranganna committed Sep 25, 2023

The keyCLIENT_CERTIFICATE_PEM, keyCLIENT_PRIVATE_KEY_PEM
and keyJITR_DEVICE_CERTIFICATE_AUTHORITY_PEM macros are used
in the new provisioning binary. They are loaded into a predefined
address and the dev_mode_key_provisioning.c can use it directly.

Signed-off-by: Bence Balogh <bence.balogh@arm.com>

* ci: Add `cspell.config.yaml` expected by `spell-check` job

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

* ci: Create a dictionary for spell-check job

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

* fri: Fix spelling mistakes caught by spell-chceck job

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

---------

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

Since blinky example doesn't suppport firmware update, disable the
firmware update partition and other relevant config options.

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

Jack Styles authored Aug 18, 2023 and Devaraj Ranganna committed Aug 22, 2023

Many variables that are used by TF-M can be set together
within the `TFM_CMAKE_ARGS` variable. This simplifies the
configuration options with them all being located in
one place.

Signed-off-by: Jack Styles <jack.styles@arm.com>

The commit includes following changes:

* The AMI storage requirement from 24GiB to 30GiB.
* Minimum git confiugration needed for `git am` to succeed
* Other general improvements

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

Update the git repository link from `git.gitlab.arm.com` to
`github.com`.

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

Updated `CHANGELOG.md` and `manifest.yml`

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

Third party licenses

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

---------

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>
Co-authored-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

Add missing `app-config` interface library dependency to
`freertos_config` interface library.

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

Add detailed introduction and overview of the examples in README.md.
Describe how the components are put together in aws-iot-example.md.

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>

Signed-off-by: Devaraj Ranganna <devaraj.ranganna@arm.com>