Initial commit

.gitignore

@@ -0,0 +1,14 @@
+buildroot/
+hafnium/
+linux/
+mbedtls/
+optee_benchmark/
+optee_examples/
+optee_rust/
+optee_test/
+out/
+out-br/
+qemu/
+toolchains/
+trusted-firmware-a/
+u-boot/

README.md

@@ -0,0 +1 @@
+# TZmediator

build/.github/issue_template.md

@@ -0,0 +1,21 @@
+<!--
+    General guidance when creating issues:
+
+    1. Please try to remember to close the issue when you have
+       got an answer to your question.
+
+    2. It never hurts to state which commit or release tag you are using in case
+       the question is about build issues.
+
+    3. Try to use GitHub markdown formatting to make your issue more readable:
+         https://help.github.com/articles/basic-writing-and-formatting-syntax/#quoting-code
+
+    4. Try to search for the issue before posting the question:
+         -> Issues tab -> Filters
+
+    5. Check the FAQ before posting a question:
+         https://optee.readthedocs.io/en/latest/faq/faq.html
+
+    NOTE: This comment will not be shown in the issue, so no harm keeping it,
+    but feel free to remove it if you like.
+-->

build/.github/pull_request_template.md

@@ -0,0 +1,19 @@
+<!--
+    If you are new to submitting pull requests to OP-TEE, then please have a
+    look at the list below and tick them off before submitting the pull request.
+
+    1. Read our contribution guidelines:
+         https://optee.readthedocs.io/en/latest/general/contribute.html
+
+    2. Read the contribution section in Notice.md and pay extra attention to the
+       "Developer Certificate of Origin" in the contribution guidelines.
+
+    3. You should run checkpatch preferably before submitting the pull request.
+
+    4. When everything has been reviewed, you will need to squash, rebase and
+       add tags like `Reviewed-by`, `Acked-by`, `Tested-by` etc. More details
+       about this can also be found on the link provided above.
+
+    NOTE: This comment will not be shown in the pull request, so no harm keeping
+    it, but feel free to remove it if you like.
+-->

build/.github/workflows/stale_issue.yml

@@ -0,0 +1,24 @@
+name: "Close stale issues"
+on:
+  schedule:
+  - cron: "15 00 * * *"
+
+permissions:
+  issues: write
+  pull-requests: write
+
+jobs:
+  stale:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/[email protected]
+      with:
+        repo-token: ${{ secrets.GITHUB_TOKEN }}
+        stale-issue-message: 'This issue has been marked as a stale issue because it has been open (more than) 30 days with no activity. Remove the stale label or add a comment saying that you would like to have the label removed otherwise this issue will automatically be closed in 5 days. Note, that you can always re-open a closed issue at any time.'
+        stale-pr-message: 'This pull request has been marked as stale because it has been open (more than) 30 days with no activity. Remove the stale label or add a comment saying that you would like to have the label removed otherwise this pull request will automatically be closed in 5 days. Note, that you can always re-open a closed pull request at any time.'
+        exempt-issue-labels: bug,enhancement
+        exempt-pr-labels: bug,enhancement
+        days-before-stale: 30
+        days-before-close: 5
+        remove-issue-stale-when-updated: true
+        remove-pr-stale-when-updated: true

build/.gitignore

@@ -0,0 +1,8 @@
+/Makefile
+*.swp
+/serial0.log
+/serial1.log
+.gdb_history
+gdb
+pi3.cfg
+.hafnium_checkout

build/README.md

@@ -0,0 +1,13 @@
+# OP-TEE build.git
+
+This git contains makefiles etc to be able to build a full OP-TEE developer
+setup for the OP-TEE project.
+
+All official OP-TEE documentation has moved to http://optee.readthedocs.io. The
+pages that used to be here in this git can be found under [build] and [Device
+specific information] at he new location for the OP-TEE documentation.
+
+// OP-TEE core maintainers
+
+[build]: https://optee.readthedocs.io/en/latest/building/index.html
+[Device specific information]: https://optee.readthedocs.io/en/latest/building/devices/index.html

build/am43xx.mk

@@ -0,0 +1,38 @@
+###############################################################################
+# Following variables defines how the NS_USER (Non Secure User - Client
+# Application), NS_KERNEL (Non Secure Kernel), S_KERNEL (Secure Kernel) and
+# S_USER (Secure User - TA) are compiled
+###############################################################################
+override COMPILE_NS_USER   := 32
+override COMPILE_NS_KERNEL := 32
+override COMPILE_S_USER    := 32
+override COMPILE_S_KERNEL  := 32
+
+# Need to set this before including common.mk
+BR2_TARGET_GENERIC_GETTY_PORT ?= ttyS0
+
+###############################################################################
+# Includes
+###############################################################################
+include common.mk
+
+###############################################################################
+# Paths to git projects and various binaries
+###############################################################################
+STAGING_AREA    ?= $(ROOT)/out
+U-BOOT_PATH     ?= $(ROOT)/u-boot
+UBOOT_SPL       ?= $(U-BOOT_PATH)/u-boot-spl_HS_ISSW
+UBOOT_IMG       ?= $(U-BOOT_PATH)/u-boot_HS.img
+UBOOT_ENV       ?= $(BUILD_PATH)/ti/uEnv.txt
+LINUX_IMAGE     ?= $(LINUX_PATH)/arch/arm/boot/zImage
+LINUX_DTBS      ?= $(wildcard $(LINUX_PATH)/arch/arm/boot/dts/am43*.dtb)
+FIT_SOURCE      ?= $(BUILD_PATH)/ti/fitImage-am43xx.its
+FIT_MAKEFILE    ?= $(BUILD_PATH)/ti/Makefile
+OPTEE_OS_PLATFORM ?= ti-am43xx
+U-BOOT_CONFIG   ?= am43xx_hs_evm_defconfig
+CONFIG_TYPE     ?= ti_sdk_am4x_debug
+
+###############################################################################
+# Include common to TI builds
+###############################################################################
+include ti/ti-common.mk

build/am57xx.mk

@@ -0,0 +1,39 @@
+###############################################################################
+# Following variables defines how the NS_USER (Non Secure User - Client
+# Application), NS_KERNEL (Non Secure Kernel), S_KERNEL (Secure Kernel) and
+# S_USER (Secure User - TA) are compiled
+###############################################################################
+override COMPILE_NS_USER   := 32
+override COMPILE_NS_KERNEL := 32
+override COMPILE_S_USER    := 32
+override COMPILE_S_KERNEL  := 32
+
+# Need to set this before including common.mk
+BR2_TARGET_GENERIC_GETTY_PORT ?= ttyS2
+
+###############################################################################
+# Includes
+###############################################################################
+include common.mk
+
+###############################################################################
+# Paths to git projects and various binaries
+###############################################################################
+STAGING_AREA    ?= $(ROOT)/out
+U-BOOT_PATH     ?= $(ROOT)/u-boot
+UBOOT_SPL       ?= $(U-BOOT_PATH)/u-boot-spl_HS_MLO
+UBOOT_IMG       ?= $(U-BOOT_PATH)/u-boot_HS.img
+UBOOT_ENV       ?= $(BUILD_PATH)/ti/uEnv.txt
+LINUX_IMAGE     ?= $(LINUX_PATH)/arch/arm/boot/zImage
+LINUX_DTBS      ?= $(wildcard $(LINUX_PATH)/arch/arm/boot/dts/am57*.dtb)
+FIT_SOURCE      ?= $(BUILD_PATH)/ti/fitImage-am57xx.its
+FIT_MAKEFILE    ?= $(BUILD_PATH)/ti/Makefile
+OPTEE_OS_PLATFORM ?= ti-am57xx
+U-BOOT_CONFIG   ?= am57xx_hs_evm_defconfig
+# using the same configs as for DRA7xx
+CONFIG_TYPE     ?= ti_sdk_dra7x_debug
+
+###############################################################################
+# Include common to TI builds
+###############################################################################
+include ti/ti-common.mk

build/br-ext/Config.in

@@ -0,0 +1,8 @@
+source "$BR2_EXTERNAL_OPTEE_PATH/package/optee_os_ext/Config.in"
+source "$BR2_EXTERNAL_OPTEE_PATH/package/optee_client_ext/Config.in"
+source "$BR2_EXTERNAL_OPTEE_PATH/package/optee_test_ext/Config.in"
+source "$BR2_EXTERNAL_OPTEE_PATH/package/optee_examples_ext/Config.in"
+source "$BR2_EXTERNAL_OPTEE_PATH/package/optee_rust_examples_ext/Config.in"
+source "$BR2_EXTERNAL_OPTEE_PATH/package/optee_benchmark_ext/Config.in"
+source "$BR2_EXTERNAL_OPTEE_PATH/package/ftpm_optee_ext/Config.in"
+source "$BR2_EXTERNAL_OPTEE_PATH/package/linux_ftpm_mod_ext/Config.in"

build/br-ext/board/fvp/overlay/etc/profile.d/ftpm_alias.sh

@@ -0,0 +1,6 @@
+alias ftpm_mod='insmod /lib/modules/extra/tpm_ftpm_tee.ko'
+alias ftpm_getpcr='tpm2_pcrread'
+
+alias ftpm='ftpm_mod && ftpm_getpcr'
+
+alias ll='ls -al'

build/br-ext/board/fvp/overlay/mnt/host/README

@@ -0,0 +1,2 @@
+This directory is intended to be mounted onto a shared directory on the host.
+See FVP_VIRTFS_AUTOMOUNT / FVP_VIRTFS_MOUNTPOINT in build/fvp.mk.

build/br-ext/board/fvp/post-build.sh

@@ -0,0 +1,29 @@
+#!/usr/bin/env bash
+# SPDX-License-Identifier: BSD-2-Clause
+#
+# Copyright (c) 2020, Roland Nagy <[email protected]>
+# Copyright (c) 2022, Arm Limited
+
+TARGET_DIR="$1"
+VIRTFS_AUTOMOUNT="$2"
+VIRTFS_MOUNTPOINT="$3"
+
+if [[ -z $TARGET_DIR ]]; then
+	echo "TARGET_DIR missing"
+	exit 1
+fi
+
+if [[ -z $VIRTFS_AUTOMOUNT ]]; then
+	echo "VIRTFS_AUTOMOUNT missing"
+	exit 1
+fi
+
+if [[ -z $VIRTFS_MOUNTPOINT ]]; then
+	echo "VIRTFS_MOUNTPOINT missing"
+	exit 1
+fi
+
+if [[ $VIRTFS_AUTOMOUNT == "y" ]]; then
+	grep FM "$TARGET_DIR"/etc/fstab > /dev/null || \
+	echo "FM $VIRTFS_MOUNTPOINT 9p trans=virtio,version=9p2000.L 0 0" >> "$TARGET_DIR"/etc/fstab
+fi

build/br-ext/board/hikey960/overlay/etc/network/interfaces

@@ -0,0 +1,8 @@
+auto lo
+iface lo inet loopback
+
+iface wlan0 inet dhcp
+        pre-up wpa_supplicant -i wlan0 -c /etc/wpa_supplicant.conf -B \
+	       && sleep 6  # wait before starting udhcpc
+        post-down killall -q wpa_supplicant
+

build/br-ext/board/hikey960/overlay/etc/wpa_supplicant.conf

@@ -0,0 +1,6 @@
+ctrl_interface=/var/run/wpa_supplicant
+
+network={
+  ssid="Network name"
+  psk="Password"
+}

build/br-ext/board/rockpi4/post-build.sh

@@ -0,0 +1,5 @@
+#! /bin/bash
+# SPDX-License-Identifier: BSD-2-Clause
+
+sed -i -e 's/#PermitEmptyPasswords no/PermitEmptyPasswords yes/' "$TARGET_DIR"/etc/ssh/sshd_config
+sed -i -e 's/#PermitRootLogin prohibit-password/PermitRootLogin yes/' "$TARGET_DIR"/etc/ssh/sshd_config

build/br-ext/board/stmicroelectronics/stm32mp1-tz/genimage-STM32MP135F-DK.cfg

@@ -0,0 +1,34 @@
+image sdcard.img {
+	hdimage {
+		gpt = "true"
+	}
+
+	partition fsbl {
+		image = "tf-a-stm32mp135f-dk.stm32"
+		size = 256K
+	}
+
+	partition fip {
+		image = "fip.bin"
+		partition-type-uuid = L
+		size = 4M
+	}
+
+	partition u-boot-env {
+		partition-type-uuid = L
+		size = 4M
+	}
+
+	partition bootfs {
+		image = "bootfs.ext2"
+		partition-type-uuid = L
+		size = 32M
+		bootable = "yes"
+	}
+
+	partition rootfs {
+		image = "rootfs.ext2"
+		partition-type-uuid = L
+		size = 128M
+	}
+}

build/br-ext/board/stmicroelectronics/stm32mp1-tz/genimage-STM32MP157A-DHCOR-AVENGER96.cfg

@@ -0,0 +1,34 @@
+image sdcard.img {
+	hdimage {
+		gpt = "true"
+	}
+
+	partition fsbl {
+		image = "tf-a-stm32mp157a-dhcor-avenger96.stm32"
+		size = 256K
+	}
+
+	partition fip {
+		image = "fip.bin"
+		partition-type-uuid = L
+		size = 4M
+	}
+
+	partition u-boot-env {
+		partition-type-uuid = L
+		size = 4M
+	}
+
+	partition bootfs {
+		image = "bootfs.ext2"
+		partition-type-uuid = L
+		size = 32M
+		bootable = "yes"
+	}
+
+	partition rootfs {
+		image = "rootfs.ext2"
+		partition-type-uuid = L
+		size = 128M
+	}
+}

build/br-ext/board/stmicroelectronics/stm32mp1-tz/genimage-STM32MP157A-DK1.cfg

@@ -0,0 +1,34 @@
+image sdcard.img {
+	hdimage {
+		gpt = "true"
+	}
+
+	partition fsbl {
+		image = "tf-a-stm32mp157a-dk1.stm32"
+		size = 256K
+	}
+
+	partition fip {
+		image = "fip.bin"
+		partition-type-uuid = L
+		size = 4M
+	}
+
+	partition u-boot-env {
+		partition-type-uuid = L
+		size = 4M
+	}
+
+	partition bootfs {
+		image = "bootfs.ext2"
+		partition-type-uuid = L
+		size = 32M
+		bootable = "yes"
+	}
+
+	partition rootfs {
+		image = "rootfs.ext2"
+		partition-type-uuid = L
+		size = 128M
+	}
+}

build/br-ext/board/stmicroelectronics/stm32mp1-tz/genimage-STM32MP157C-DHCOM-PDK2.cfg

@@ -0,0 +1,34 @@
+image sdcard.img {
+	hdimage {
+		gpt = "true"
+	}
+
+	partition fsbl {
+		image = "tf-a-stm32mp157c-dhcom-pdk2.stm32"
+		size = 256K
+	}
+
+	partition fip {
+		image = "fip.bin"
+		partition-type-uuid = L
+		size = 4M
+	}
+
+	partition u-boot-env {
+		partition-type-uuid = L
+		size = 4M
+	}
+
+	partition bootfs {
+		image = "bootfs.ext2"
+		partition-type-uuid = L
+		size = 32M
+		bootable = "yes"
+	}
+
+	partition rootfs {
+		image = "rootfs.ext2"
+		partition-type-uuid = L
+		size = 128M
+	}
+}