[PATCHv3,4/5] machine/qemuarm64-secureboot.conf: add optee-ftpm

Message ID 20211115140100.24634-4-maxim.uvarov@linaro.org
State New
Headers show
Series [PATCHv3,1/5] optee: updae optee-os.inc to support external TAs | expand

Commit Message

Maxim Uvarov Nov. 15, 2021, 2 p.m. UTC
Signed-off-by: Maxim Uvarov <maxim.uvarov@linaro.org>
---
 meta-arm/conf/machine/qemuarm64-secureboot.conf | 2 ++
 1 file changed, 2 insertions(+)

Comments

Jon Mason Nov. 15, 2021, 5:19 p.m. UTC | #1
On Mon, Nov 15, 2021 at 05:00:59PM +0300, Maxim Uvarov wrote:
> Signed-off-by: Maxim Uvarov <maxim.uvarov@linaro.org>
> ---
>  meta-arm/conf/machine/qemuarm64-secureboot.conf | 2 ++
>  1 file changed, 2 insertions(+)
> 
> diff --git a/meta-arm/conf/machine/qemuarm64-secureboot.conf b/meta-arm/conf/machine/qemuarm64-secureboot.conf
> index c45924a..b664dac 100644
> --- a/meta-arm/conf/machine/qemuarm64-secureboot.conf
> +++ b/meta-arm/conf/machine/qemuarm64-secureboot.conf
> @@ -20,4 +20,6 @@ WKS_FILE ?= "qemuarm64.wks"
>  WKS_FILE_DEPENDS = "trusted-firmware-a"
>  IMAGE_BOOT_FILES = "${KERNEL_IMAGETYPE}"
>  
> +MACHINE_FEATURES += "optee-ftpm"

I'm wondering if this wouldn't be better described as simply tpm.
Then do a check to see if one is described anywhere and if not, then
do the software tpm.  Does this make sense?

Thanks,
Jon

> +
>  PREFERRED_VERSION_linux-yocto ?= "5.10%"
> -- 
> 2.17.1
> 

> 
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#2388): https://lists.yoctoproject.org/g/meta-arm/message/2388
> Mute This Topic: https://lists.yoctoproject.org/mt/87069392/3616920
> Group Owner: meta-arm+owner@lists.yoctoproject.org
> Unsubscribe: https://lists.yoctoproject.org/g/meta-arm/unsub [jdmason@kudzu.us]
> -=-=-=-=-=-=-=-=-=-=-=-
>
Maxim Uvarov Nov. 16, 2021, 9:42 a.m. UTC | #2
On Mon, 15 Nov 2021 at 20:19, Jon Mason <jdmason@kudzu.us> wrote:
>
> On Mon, Nov 15, 2021 at 05:00:59PM +0300, Maxim Uvarov wrote:
> > Signed-off-by: Maxim Uvarov <maxim.uvarov@linaro.org>
> > ---
> >  meta-arm/conf/machine/qemuarm64-secureboot.conf | 2 ++
> >  1 file changed, 2 insertions(+)
> >
> > diff --git a/meta-arm/conf/machine/qemuarm64-secureboot.conf b/meta-arm/conf/machine/qemuarm64-secureboot.conf
> > index c45924a..b664dac 100644
> > --- a/meta-arm/conf/machine/qemuarm64-secureboot.conf
> > +++ b/meta-arm/conf/machine/qemuarm64-secureboot.conf
> > @@ -20,4 +20,6 @@ WKS_FILE ?= "qemuarm64.wks"
> >  WKS_FILE_DEPENDS = "trusted-firmware-a"
> >  IMAGE_BOOT_FILES = "${KERNEL_IMAGETYPE}"
> >
> > +MACHINE_FEATURES += "optee-ftpm"
>
> I'm wondering if this wouldn't be better described as simply tpm.
> Then do a check to see if one is described anywhere and if not, then
> do the software tpm.  Does this make sense?
>
> Thanks,
> Jon

Interesting question. Theoretically one machine can have several tpm
devices. If we just set tpm then how will we difference them in
future?
I would prefer to be more concrete here.

BR,
Maxim.
>
> > +
> >  PREFERRED_VERSION_linux-yocto ?= "5.10%"
> > --
> > 2.17.1
> >
>
> >
> > -=-=-=-=-=-=-=-=-=-=-=-
> > Links: You receive all messages sent to this group.
> > View/Reply Online (#2388): https://lists.yoctoproject.org/g/meta-arm/message/2388
> > Mute This Topic: https://lists.yoctoproject.org/mt/87069392/3616920
> > Group Owner: meta-arm+owner@lists.yoctoproject.org
> > Unsubscribe: https://lists.yoctoproject.org/g/meta-arm/unsub [jdmason@kudzu.us]
> > -=-=-=-=-=-=-=-=-=-=-=-
> >
>

Patch

diff --git a/meta-arm/conf/machine/qemuarm64-secureboot.conf b/meta-arm/conf/machine/qemuarm64-secureboot.conf
index c45924a..b664dac 100644
--- a/meta-arm/conf/machine/qemuarm64-secureboot.conf
+++ b/meta-arm/conf/machine/qemuarm64-secureboot.conf
@@ -20,4 +20,6 @@  WKS_FILE ?= "qemuarm64.wks"
 WKS_FILE_DEPENDS = "trusted-firmware-a"
 IMAGE_BOOT_FILES = "${KERNEL_IMAGETYPE}"
 
+MACHINE_FEATURES += "optee-ftpm"
+
 PREFERRED_VERSION_linux-yocto ?= "5.10%"