Commits · f40e77814ea80df8965b82790813c79ab50fb0f4 · SystemReady / ACS / Arm SystemReady ACS

Aug 02, 2021

security-extension: top level readme · f40e7781
Stuart Yoder authored Jul 19, 2021
```
Signed-off-by: Stuart Yoder <stuart.yoder@arm.com>
```
f40e7781
security-extension: apply patches for SCT when getting source · 4a9f7eb7
Stuart Yoder authored Jul 19, 2021
```
Signed-off-by: Stuart Yoder <stuart.yoder@arm.com>
```
4a9f7eb7
security-extension: update grub menu strings · e9956eb3
Stuart Yoder authored Jul 19, 2021
```
Signed-off-by: Stuart Yoder <stuart.yoder@arm.com>
```
e9956eb3

security-extension: remove grub initial config from common · 72e7e022

Stuart Yoder authored Jul 19, 2021



-this is now in the security-extension specific config dir

Signed-off-by: Stuart Yoder <stuart.yoder@arm.com>

72e7e022

Revert "security-extension: don't invoke kernel automatically" · a4ce6dfa

Stuart Yoder authored Jul 19, 2021



This reverts commit aeaff224f7f75a7e3651018dabed353a2b9c34db.

This commit is no longer needed since we now have a private
config directory for security-extension.

Signed-off-by: Stuart Yoder <stuart.yoder@arm.com>

a4ce6dfa

security-extension: add security-extension specific config dir · 87a4384a

Stuart Yoder authored Jul 19, 2021



-security extension has some unique files, plus needs customized
 version of others. So, it doesn't make sense to keep them in
 the common directory

Signed-off-by: Stuart Yoder <stuart.yoder@arm.com>

87a4384a

security-extension: update linux build script to fix build error · b8de0ff7

Stuart Yoder authored Jul 16, 2021



Remove unused update-path variable from Linux build script. The
variable causes build error on Ubuntu 20.04 builds due to bash
behavior.

Signed-off-by: Stuart Yoder <stuart.yoder@arm.com>

b8de0ff7

security-extension: update prerequisite packages for efitools · ba25d80f
Stuart Yoder authored Jul 16, 2021
```
add additional packages needed to build efitools

Signed-off-by: Stuart Yoder <stuart.yoder@arm.com>
```
ba25d80f
security-extension: update git branches for bbr and sct · 563505ad
Stuart Yoder authored Jul 15, 2021
```
Signed-off-by: Stuart Yoder <stuart.yoder@arm.com>
```
563505ad

security-extension: don't invoke kernel automatically · 278b4fb1

Stuart Yoder authored Jul 15, 2021



due to a firmware bug, we can't run linux directly after SCT on QEMU
so skip it for now

Signed-off-by: Stuart Yoder <stuart.yoder@arm.com>

278b4fb1

security-extension: add call to build uefi apps · 9e7fd3e7
Stuart Yoder authored Jul 15, 2021
```
Signed-off-by: Stuart Yoder <stuart.yoder@arm.com>
```
9e7fd3e7

Added support to build and automation of CapsuleApp · 9f17d7c7

G Edhaya Chandran authored Jun 22, 2021 and

Stuart Yoder committed Aug 02, 2021

Added support to build CapsuleApp.efi as part of IR and ES images
Run CapsuleApp.efi as part of image automation and store the results in
acs_results

Change-Id: I2d59bdc4df1f0b41131a0ea9877106335876d582

9f17d7c7

security-extension: update key directory name · 06e4188d
Stuart Yoder authored Jul 15, 2021
```
Signed-off-by: Stuart Yoder <stuart.yoder@arm.com>
```
06e4188d
security-extension: update name of key generation script · f2507d0e
Stuart Yoder authored Jul 15, 2021
```
Signed-off-by: Stuart Yoder <stuart.yoder@arm.com>
```
f2507d0e
security-extension: rename live image build script · d2041031
Stuart Yoder authored Jul 15, 2021
```
Signed-off-by: Stuart Yoder <stuart.yoder@arm.com>
```
d2041031
security-extension: update platform identifier · 24a955bd
Stuart Yoder authored Jul 15, 2021
```
-rename references to BBSR to "SE"

Signed-off-by: Stuart Yoder <stuart.yoder@arm.com>
```
24a955bd
security-extension: update to get from beta0 branches · 5c42be27
Stuart Yoder authored Jul 08, 2021
```
Signed-off-by: Stuart Yoder <stuart.yoder@arm.com>
```
5c42be27
security-extension: for security extension builds don't build BSA efi or Linux · 8bdeef78
Stuart Yoder authored Jun 29, 2021
```
Signed-off-by: Stuart Yoder <stuart.yoder@arm.com>
```
8bdeef78

security-extension: make_image: make BBSR parts conditional · 1d021e25

Stuart Yoder authored Jun 29, 2021



make the BBSR specific parts of the disk image conditional
based on the definition of the $BUILD_PLAT variable

Signed-off-by: Stuart Yoder <stuart.yoder@arm.com>

1d021e25

security-extension: busybox: overwrite .sig file if it already exists · 998ed522
Stuart Yoder authored Jun 29, 2021
```
Signed-off-by: Stuart Yoder <stuart.yoder@arm.com>
```
998ed522
security-extension: init.sh: add support for bbsr ini file for fwts · f27de6af
Stuart Yoder authored Jun 29, 2021
```
Signed-off-by: Stuart Yoder <stuart.yoder@arm.com>
```
f27de6af

security-extension: add support to build efitools · 619b8d15

Stuart Yoder authored Jul 15, 2021



This is needed because the latest efitools available in distros such
as Ubuntu have incompatibilities with EDK2.

Signed-off-by: Stuart Yoder <stuart.yoder@arm.com>

619b8d15

security-extension: sign linux and busybox images for secure boot · 83370002
Stuart Yoder authored Jun 21, 2021
```
Signed-off-by: Stuart Yoder <stuart.yoder@arm.com>
```
83370002

security-extension: update grub build for secure boot · 584cacbb

Stuart Yoder authored Jun 17, 2021



-when grub is used with secure boot all files that it loads
 must be signed with gpg

-secure boot requires using grub-mkstandalone instead of
 grub-mkimage.  grub-mkstandalone builds all modules into the grub
 image and they don't have to be individually signed and loaded.

-when grub-mkstandalone generates the grub image it includes a
 a file called grub-initial.cfg that is built into the image.
 grub-initial.cfg defines the $root variable, explicitly loads
 grub.cfg, and enables signature checking

-a side effect of grub-mkstandalone is that the grub_prefix.cfg
 is no longer needed since modules are not loaded from disk

-the following additional modules are used: pgp gcry_sha512 gcry_rsa

-grub.cfg is signed with gpg

Signed-off-by: Stuart Yoder <stuart.yoder@arm.com>

584cacbb

security-extension: sign Shell.efi with gpg for grub secure boot · 47c24c2c
Stuart Yoder authored Jun 17, 2021
```
Signed-off-by: Stuart Yoder <stuart.yoder@arm.com>
```
47c24c2c
security-extension: sign Shell.efi with the db key · c6f15b39
Stuart Yoder authored Jun 16, 2021
```
Signed-off-by: Stuart Yoder <stuart.yoder@arm.com>
```
c6f15b39

security-extension: add support for generating secure boot keys · 3af58796

Stuart Yoder authored Jul 15, 2021



-link in build script to generate the keys
-update make_image.sh to copy the public keys onto the disk image so
 they can be enrolled by a user

Signed-off-by: Stuart Yoder <stuart.yoder@arm.com>

3af58796

security-extension: add security-extension directory tree · 906b1209

Stuart Yoder authored Jun 30, 2021



add get_source.sh and build-bbsr-live-image.sh scripts for
the BBSR build

Signed-off-by: Stuart Yoder <stuart.yoder@arm.com>

906b1209

Jul 26, 2021
- Merge pull request #9 from chetan-rathore/main · 015083be
  Prasanth Pulla authored Jul 26, 2021
```
Added prebuilt images for v21.07_0.9_BETA
```
  015083be
- Added prebuilt images for v21.07_0.9_BETA · 77d54e72
  Chetan Rathore authored Jul 26, 2021
  
  77d54e72
- Merge pull request #8 from edhay/main · 162b5ff5
  Prasanth Pulla authored Jul 26, 2021
```
Updated to github links
```
  v21.07_0.9_BETA
  
  162b5ff5
- Updated to github links · fb83e5ff
  G Edhaya Chandran authored Jul 26, 2021
  
  fb83e5ff
- Merge pull request #7 from edhay/main · 26bb7870
  Prasanth Pulla authored Jul 26, 2021
```
Updated changelog.txt for v21.07_0.9_BETA Release
```
  26bb7870
- Updated changelog.txt for v21.07_0.9_BETA · 724896cf
  G Edhaya Chandran authored Jul 26, 2021
  
  724896cf
- Updated changelog.txt for v21.07_0.9_BETA Release · 5344f701
  G Edhaya Chandran authored Jul 26, 2021
  
  5344f701
- Merge pull request #6 from edhay/main · f9190225
  Prasanth Pulla authored Jul 26, 2021
```
SystemReady ACS v0.9 Beta Updates
```
  f9190225
- Updated TAG to v21.07_0.9_BETA · c5d5f87f
  G Edhaya Chandran authored Jul 26, 2021
  
  c5d5f87f
- SystemReady ACS v0.9 Beta Updates · 7a04605c
  G Edhaya Chandran authored Jul 26, 2021
```
Support to build ES ACS live image : build scripts and instructions in documentation
Updated the ES README.md to reflect the changes
Added a common configuration file to set external and internal software versions for build
Upgrading ACS image to v5.11 kernel
Refinement of UEFI-SCT Sequence files for IR and ES and verification
Support for CapsuleApp.efi in build and automation for ES and IR
Migrate to the version V21.06.00 + of FWTS
Migrate to 2821093d6f2b3521c453834f0657cf07c0908155 tag of SCT
General improvements in scripts
Bug Fixes

Co-authored-by: Edhaya Chandran <edhaya.chandran@arm.com>
Co-authored-by: Jeff Booher-Kaeding <jeff.booher-kaeding@arm.com>
Co-authored-by: Jiss Jose <jiss.jose@arm.com>

Signed-off-by: Edhaya Chandran <edhaya.chandran@arm.com>
```
  7a04605c
Jun 16, 2021
- Merge pull request #5 from prasanth-pulla/main · b194da61
  Prasanth Pulla authored Jun 16, 2021
```
Add aarch64 native build support
```
  b194da61
Jun 08, 2021
- Merge pull request #4 from vstehle/main · 4753eb9e
  G Edhaya Chandran authored Jun 08, 2021
```
Add support for Xilinx Zynq MPSoC to Linux config
```
  4753eb9e