Complete Yocto mirror with license table for TQMa6UL (2038-compliance)
- 264 license table entries with exact download URLs (224/264 resolved) - Complete sources/ directory with all BitBake recipes - Build configuration: tqma6ul-multi-mba6ulx, spaetzle (musl) - Full traceability for Softwarefreigabeantrag - GCC 13.4.0, Linux 6.6.102, U-Boot 2023.04, musl 1.2.4 - License distribution: GPL-2.0 (24), MIT (23), GPL-2.0+ (18), BSD-3 (16)
This commit is contained in:
Siggi (OpenClaw Agent)
12
sources/meta-freescale/recipes-bsp/atf/qoriq-atf-2.6.inc
Normal file
12
sources/meta-freescale/recipes-bsp/atf/qoriq-atf-2.6.inc
Normal file
@@ -0,0 +1,12 @@
|
||||
DESCRIPTION = "ARM Trusted Firmware"
|
||||
|
||||
LICENSE = "BSD-3-Clause"
|
||||
LIC_FILES_CHKSUM = "file://license.rst;md5=1dd070c98a281d18d9eefd938729b031"
|
||||
|
||||
ATF_BRANCH ?= "lf_v2.6"
|
||||
ATF_SRC ?= "git://github.com/nxp-qoriq/atf.git;protocol=https"
|
||||
SRC_URI = "${ATF_SRC};branch=${ATF_BRANCH}"
|
||||
SRCREV = "616a4588f333522d50a55bedd2b9a90a51474a75"
|
||||
|
||||
S = "${WORKDIR}/git"
|
||||
|
||||
@@ -0,0 +1,15 @@
|
||||
require qoriq-atf-${PV}.inc
|
||||
|
||||
DEPENDS += "openssl"
|
||||
|
||||
PV:append = "+${SRCPV}"
|
||||
|
||||
EXTRA_OEMAKE = "fiptool V=1 PLAT=lx2162aqds HOSTCC='${CC} ${CPPFLAGS} ${CFLAGS} ${LDFLAGS}'"
|
||||
|
||||
do_install () {
|
||||
install -m 0755 -d ${D}/${bindir}
|
||||
install -m 0755 ${S}/tools/fiptool/fiptool ${D}/${bindir}/
|
||||
}
|
||||
|
||||
BBCLASSEXTEND = "native"
|
||||
|
||||
@@ -0,0 +1,35 @@
|
||||
From 9ceeb0cadffee1b1476718795d0568f6b244bf44 Mon Sep 17 00:00:00 2001
|
||||
From: Jun Zhu <junzhu@nxp.com>
|
||||
Date: Mon, 31 Oct 2022 21:24:15 +0800
|
||||
Subject: [PATCH] tf-a-tests-no-warn-rwx-segments
|
||||
|
||||
Binutils 2.39 now warns when a segment has RXW permissions[1]:
|
||||
|
||||
aarch64-poky-linux-musl-ld: tftf.elf has a LOAD segment with RWX permissions
|
||||
|
||||
There is a ticket filed upstream[2], so until that is resolved just disable the warning
|
||||
[1] https://sourceware.org/git/?p=binutils-gdb.git;a=commit;h=ba951afb99912da01a6e8434126b8fac7aa75107
|
||||
[2] https://developer.trustedfirmware.org/T996
|
||||
|
||||
Upstream-Status: Backport [https://review.trustedfirmware.org/c/TF-A/trusted-firmware-a/+/19401]
|
||||
Signed-off-by: Jun Zhu <junzhu@nxp.com>
|
||||
---
|
||||
Makefile | 2 +-
|
||||
1 file changed, 1 insertion(+), 1 deletion(-)
|
||||
|
||||
diff --git a/Makefile b/Makefile
|
||||
index dccf0121d..0d082344b 100644
|
||||
--- a/Makefile
|
||||
+++ b/Makefile
|
||||
@@ -445,7 +445,7 @@ TF_LDFLAGS += --gc-sections
|
||||
# ld.lld doesn't recognize the errata flags,
|
||||
# therefore don't add those in that case
|
||||
ifeq ($(findstring ld.lld,$(notdir $(LD))),)
|
||||
-TF_LDFLAGS += $(TF_LDFLAGS_$(ARCH))
|
||||
+TF_LDFLAGS += $(TF_LDFLAGS_$(ARCH)) --no-warn-rwx-segments
|
||||
endif
|
||||
endif
|
||||
|
||||
--
|
||||
2.25.1
|
||||
|
||||
189
sources/meta-freescale/recipes-bsp/atf/qoriq-atf_2.6.bb
Normal file
189
sources/meta-freescale/recipes-bsp/atf/qoriq-atf_2.6.bb
Normal file
@@ -0,0 +1,189 @@
|
||||
require qoriq-atf-${PV}.inc
|
||||
|
||||
inherit deploy
|
||||
|
||||
DEPENDS += "u-boot-mkimage-native u-boot openssl openssl-native rcw qoriq-cst-native bc-native"
|
||||
do_compile[depends] += "u-boot:do_deploy rcw:do_deploy uefi:do_deploy"
|
||||
|
||||
PV:append = "+${SRCPV}"
|
||||
|
||||
SRC_URI += "git://github.com/ARMmbed/mbedtls;protocol=https;nobranch=1;destsuffix=git/mbedtls;name=mbedtls \
|
||||
git://github.com/nxp/ddr-phy-binary;protocol=https;nobranch=1;destsuffix=git/ddr-phy-binary;name=ddr \
|
||||
file://tf-a-tests-no-warn-rwx-segments.patch \
|
||||
"
|
||||
SRCREV_mbedtls = "0795874acdf887290b2571b193cafd3c4041a708"
|
||||
SRCREV_ddr = "fbc036b88acb6c06ffed02c898cbae9856ec75ba"
|
||||
SRCREV_FORMAT = "atf"
|
||||
|
||||
COMPATIBLE_MACHINE = "(qoriq)"
|
||||
|
||||
PACKAGE_ARCH = "${MACHINE_ARCH}"
|
||||
|
||||
PLATFORM = "${MACHINE}"
|
||||
PLATFORM:ls1088ardb-pb = "ls1088ardb"
|
||||
PLATFORM:lx2160ardb-rev2 = "lx2160ardb"
|
||||
PLATFORM_ADDITIONAL_TARGET ??= ""
|
||||
PLATFORM_ADDITIONAL_TARGET:ls1012afrwy = "ls1012afrwy_512mb"
|
||||
|
||||
RCW_FOLDER ?= "${MACHINE}"
|
||||
RCW_FOLDER:ls1088ardb-pb = "ls1088ardb"
|
||||
RCW_FOLDER:lx2160ardb = "lx2160ardb_rev2"
|
||||
RCW_FOLDER:lx2160ardb-rev2 = "lx2160ardb_rev2"
|
||||
|
||||
RCW_SUFFIX ?= ".bin"
|
||||
RCW_SUFFIX:ls1012a = "${@bb.utils.contains('DISTRO_FEATURES', 'secure', '_sben.bin', '_default.bin', d)}"
|
||||
RCW_SUFFIX:ls1043a = "${@bb.utils.contains('DISTRO_FEATURES', 'secure', '_sben.bin', '.bin', d)}"
|
||||
RCW_SUFFIX:ls1046a = "${@bb.utils.contains('DISTRO_FEATURES', 'secure', '_sben.bin', '.bin', d)}"
|
||||
|
||||
UBOOT_BINARY ?= "${@bb.utils.contains('DISTRO_FEATURES', 'secure', '${DEPLOY_DIR_IMAGE}/u-boot.bin-tfa-secure-boot', '${DEPLOY_DIR_IMAGE}/u-boot.bin-tfa', d)}"
|
||||
|
||||
SECURE_EXTENTION ?= "${@bb.utils.contains('DISTRO_FEATURES', 'secure', '_sec', '', d)}"
|
||||
|
||||
BOOTTYPE ?= "nor nand qspi flexspi_nor sd emmc"
|
||||
|
||||
chassistype ?= "ls2088_1088"
|
||||
chassistype:ls1012a = "ls104x_1012"
|
||||
chassistype:ls1043a = "ls104x_1012"
|
||||
chassistype:ls1046a = "ls104x_1012"
|
||||
|
||||
FIP_DDR ?= ""
|
||||
FIP_DDR:lx2160a = "${@bb.utils.contains('DISTRO_FEATURES', 'secure', 'fip_ddr', '', d)}"
|
||||
FIP_DDR:lx2162a = "${@bb.utils.contains('DISTRO_FEATURES', 'secure', 'fip_ddr', '', d)}"
|
||||
|
||||
# requires CROSS_COMPILE set by hand as there is no configure script
|
||||
export CROSS_COMPILE="${TARGET_PREFIX}"
|
||||
export ARCH="arm64"
|
||||
|
||||
# Let the Makefile handle setting up the CFLAGS and LDFLAGS as it is
|
||||
# a standalone application
|
||||
CFLAGS[unexport] = "1"
|
||||
LDFLAGS[unexport] = "1"
|
||||
AS[unexport] = "1"
|
||||
LD[unexport] = "1"
|
||||
|
||||
EXTRA_OEMAKE += "HOSTCC='${BUILD_CC} ${BUILD_CPPFLAGS} ${BUILD_CFLAGS} ${BUILD_LDFLAGS}'"
|
||||
EXTRA_OEMAKE += "\
|
||||
${@bb.utils.contains('COMBINED_FEATURES', 'optee', 'BL32=${RECIPE_SYSROOT}${nonarch_base_libdir}/firmware/tee_${MACHINE}.bin SPD=opteed', '', d)} \
|
||||
${@bb.utils.contains('DISTRO_FEATURES', 'secure', 'TRUSTED_BOARD_BOOT=1 CST_DIR=${RECIPE_SYSROOT_NATIVE}/usr/bin/cst', '', d)} \
|
||||
${@bb.utils.contains('DISTRO_FEATURES', 'arm-cot', 'GENERATE_COT=1 MBEDTLS_DIR=${S}/mbedtls', '', d)} \
|
||||
${@bb.utils.contains('DISTRO_FEATURES', 'fuse', 'fip_fuse FUSE_PROG=1 FUSE_PROV_FILE=fuse_scr.bin', '', d)} \
|
||||
"
|
||||
|
||||
PACKAGECONFIG ??= " \
|
||||
${@bb.utils.filter('COMBINED_FEATURES', 'optee', d)} \
|
||||
"
|
||||
PACKAGECONFIG[optee] = ",,optee-os-qoriq"
|
||||
|
||||
python() {
|
||||
if bb.utils.contains("DISTRO_FEATURES", "arm-cot", True, False, d):
|
||||
if not bb.utils.contains("DISTRO_FEATURES", "secure", True, False, d):
|
||||
bb.fatal("arm-cot needs 'secure' being set in DISTRO_FEATURES")
|
||||
}
|
||||
|
||||
do_configure[noexec] = "1"
|
||||
|
||||
do_compile() {
|
||||
if [ ! -f ${RECIPE_SYSROOT_NATIVE}/usr/bin/cst/srk.pri ]; then
|
||||
${RECIPE_SYSROOT_NATIVE}/usr/bin/cst/gen_keys 1024
|
||||
else
|
||||
cp ${RECIPE_SYSROOT_NATIVE}/usr/bin/cst/srk.pri .
|
||||
cp ${RECIPE_SYSROOT_NATIVE}/usr/bin/cst/srk.pub .
|
||||
fi
|
||||
|
||||
${RECIPE_SYSROOT_NATIVE}/usr/bin/cst/gen_fusescr \
|
||||
${RECIPE_SYSROOT_NATIVE}/usr/bin/cst/input_files/gen_fusescr/${chassistype}/input_fuse_file
|
||||
|
||||
for d in ${BOOTTYPE}; do
|
||||
case $d in
|
||||
nor)
|
||||
rcwimg="${RCWNOR}${RCW_SUFFIX}"
|
||||
uefiboot="${UEFI_NORBOOT}"
|
||||
;;
|
||||
nand)
|
||||
rcwimg="${RCWNAND}${RCW_SUFFIX}"
|
||||
;;
|
||||
qspi)
|
||||
rcwimg="${RCWQSPI}${RCW_SUFFIX}"
|
||||
uefiboot="${UEFI_QSPIBOOT}"
|
||||
if [ -n "${SECURE_EXTENTION}" ] && [ "${MACHINE}" = ls1046ardb ]; then
|
||||
rcwimg="RR_FFSSPPPH_1133_5559/rcw_1600_qspiboot_sben.bin"
|
||||
fi
|
||||
;;
|
||||
auto)
|
||||
rcwimg="${RCWAUTO}${RCW_SUFFIX}"
|
||||
;;
|
||||
sd)
|
||||
rcwimg="${RCWSD}${RCW_SUFFIX}"
|
||||
;;
|
||||
emmc)
|
||||
rcwimg="${RCWEMMC}${RCW_SUFFIX}"
|
||||
;;
|
||||
flexspi_nor)
|
||||
rcwimg="${RCWXSPI}${RCW_SUFFIX}"
|
||||
uefiboot="${UEFI_XSPIBOOT}"
|
||||
;;
|
||||
esac
|
||||
|
||||
if [ -f ${DEPLOY_DIR_IMAGE}/rcw/${RCW_FOLDER}/$rcwimg ]; then
|
||||
make V=1 realclean
|
||||
if [ -f rot_key.pem ];then
|
||||
mkdir -p build/${PLATFORM}/release/
|
||||
cp *.pem build/${PLATFORM}/release/
|
||||
fi
|
||||
|
||||
oe_runmake V=1 all fip pbl ${FIP_DDR} PLAT=${PLATFORM} BOOT_MODE=${d} RCW=${DEPLOY_DIR_IMAGE}/rcw/${RCW_FOLDER}/${rcwimg} BL33=${UBOOT_BINARY}
|
||||
cp build/${PLATFORM}/release/bl2_${d}${SECURE_EXTENTION}.pbl .
|
||||
cp build/${PLATFORM}/release/fip.bin fip_uboot${SECURE_EXTENTION}.bin
|
||||
if [ -e build/${PLATFORM}/release/fuse_fip.bin ]; then
|
||||
cp build/${PLATFORM}/release/fuse_fip.bin .
|
||||
fi
|
||||
|
||||
if [ -e build/${PLATFORM}/release/ddr_fip_sec.bin ] && [ ! -f ddr_fip_sec.bin ]; then
|
||||
cp build/${PLATFORM}/release/ddr_fip_sec.bin .
|
||||
fi
|
||||
|
||||
if [ -e build/${PLATFORM}/release/rot_key.pem ] && [ ! -f rot_key.pem ]; then
|
||||
cp build/${PLATFORM}/release/*.pem .
|
||||
fi
|
||||
|
||||
if [ -n "${PLATFORM_ADDITIONAL_TARGET}" ]; then
|
||||
make V=1 realclean
|
||||
oe_runmake V=1 all fip pbl PLAT=${PLATFORM_ADDITIONAL_TARGET} BOOT_MODE=${d} RCW=${DEPLOY_DIR_IMAGE}/rcw/${RCW_FOLDER}/${rcwimg} BL33=${UBOOT_BINARY}
|
||||
cp build/${PLATFORM_ADDITIONAL_TARGET}/release/bl2_${d}${SECURE_EXTENTION}.pbl bl2_${d}${SECURE_EXTENTION}_${PLATFORM_ADDITIONAL_TARGET}.pbl
|
||||
cp build/${PLATFORM_ADDITIONAL_TARGET}/release/fip.bin fip_uboot${SECURE_EXTENTION}_${PLATFORM_ADDITIONAL_TARGET}.bin
|
||||
if [ -e build/${PLATFORM_ADDITIONAL_TARGET}/release/fuse_fip.bin ]; then
|
||||
cp build/${PLATFORM_ADDITIONAL_TARGET}/release/fuse_fip.bin fuse_fip_${PLATFORM_ADDITIONAL_TARGET}.bin
|
||||
fi
|
||||
fi
|
||||
|
||||
if [ -z "${SECURE_EXTENTION}" -a -f "${DEPLOY_DIR_IMAGE}/uefi/${PLATFORM}/${uefiboot}" ]; then
|
||||
make V=1 realclean
|
||||
oe_runmake V=1 all fip pbl PLAT=${PLATFORM} BOOT_MODE=${d} RCW=${DEPLOY_DIR_IMAGE}/rcw/${RCW_FOLDER}/${rcwimg} BL33=${DEPLOY_DIR_IMAGE}/uefi/${PLATFORM}/${uefiboot}
|
||||
cp build/${PLATFORM}/release/fip.bin fip_uefi.bin
|
||||
fi
|
||||
fi
|
||||
rcwimg=""
|
||||
uefiboot=""
|
||||
done
|
||||
}
|
||||
|
||||
do_install() {
|
||||
install -d ${D}/boot/atf/
|
||||
cp srk.pri ${D}/boot/atf/
|
||||
cp srk.pub ${D}/boot/atf/
|
||||
cp *.pbl ${D}/boot/atf/
|
||||
if [ ! -e fuse_fip.bin ]; then
|
||||
rm -f fuse_scr.bin
|
||||
fi
|
||||
cp *.bin ${D}/boot/atf/
|
||||
chown -R root:root ${D}
|
||||
}
|
||||
|
||||
do_deploy() {
|
||||
install -d ${DEPLOYDIR}/atf/
|
||||
cp ${D}/boot/atf/* ${DEPLOYDIR}/atf/
|
||||
}
|
||||
addtask deploy after do_install
|
||||
|
||||
FILES:${PN} += "/boot"
|
||||
BBCLASSEXTEND = "native nativesdk"
|
||||
Reference in New Issue
Block a user