| DEBUG ?= 1 |
| |
| ################################################################################ |
| # Following variables defines how the NS_USER (Non Secure User - Client |
| # Application), NS_KERNEL (Non Secure Kernel), S_KERNEL (Secure Kernel) and |
| # S_USER (Secure User - TA) are compiled |
| ################################################################################ |
| COMPILE_NS_USER ?= 64 |
| override COMPILE_NS_KERNEL := 64 |
| COMPILE_S_USER ?= 64 |
| COMPILE_S_KERNEL ?= 64 |
| |
| -include common.mk |
| |
| |
| ################################################################################ |
| # Paths to git projects and various binaries |
| ################################################################################ |
| ARM_TF_PATH ?= $(ROOT)/arm-trusted-firmware |
| EDK2_PATH ?= $(ROOT)/edk2 |
| EDK2_BIN ?= $(EDK2_PATH)/Build/ArmVExpress-FVP-AArch64/RELEASE_GCC49/FV/FVP_AARCH64_EFI.fd |
| FOUNDATION_PATH ?= $(ROOT)/Foundation_Platformpkg |
| ifeq ($(wildcard $(FOUNDATION_PATH)),) |
| $(error $(FOUNDATION_PATH) does not exist) |
| endif |
| |
| ################################################################################ |
| # Targets |
| ################################################################################ |
| all: arm-tf edk2 linux optee-os optee-client optee-linuxdriver generate-dtb xtest |
| all-clean: arm-tf-clean busybox-clean edk2-clean optee-os-clean \ |
| optee-client-clean optee-linuxdriver-clean |
| |
| |
| -include toolchain.mk |
| |
| ################################################################################ |
| # ARM Trusted Firmware |
| ################################################################################ |
| ARM_TF_EXPORTS ?= \ |
| CFLAGS="-O0 -gdwarf-2" \ |
| CROSS_COMPILE="$(CCACHE)$(AARCH64_NONE_CROSS_COMPILE)" |
| |
| ARM_TF_FLAGS ?= \ |
| BL32=$(OPTEE_OS_BIN) \ |
| BL33=$(EDK2_BIN) \ |
| DEBUG=0 \ |
| ARM_TSP_RAM_LOCATION=tdram \ |
| PLAT=fvp \ |
| SPD=opteed |
| |
| arm-tf: optee-os edk2 |
| $(ARM_TF_EXPORTS) $(MAKE) -C $(ARM_TF_PATH) $(ARM_TF_FLAGS) all fip |
| |
| arm-tf-clean: |
| $(ARM_TF_EXPORTS) $(MAKE) -C $(ARM_TF_PATH) $(ARM_TF_FLAGS) clean |
| |
| ################################################################################ |
| # Busybox |
| ################################################################################ |
| BUSYBOX_COMMON_TARGET = fvp |
| BUSYBOX_CLEAN_COMMON_TARGET = fvp clean |
| |
| busybox: busybox-common |
| |
| busybox-clean: busybox-clean-common |
| |
| busybox-cleaner: busybox-cleaner-common |
| |
| ################################################################################ |
| # EDK2 / Tianocore |
| ################################################################################ |
| define edk2-call |
| GCC49_AARCH64_PREFIX=$(AARCH64_NONE_CROSS_COMPILE) \ |
| $(MAKE) -j1 -C $(EDK2_PATH) \ |
| -f ArmPlatformPkg/Scripts/Makefile EDK2_ARCH=AARCH64 \ |
| EDK2_DSC=ArmPlatformPkg/ArmVExpressPkg/ArmVExpress-FVP-AArch64.dsc \ |
| EDK2_TOOLCHAIN=GCC49 EDK2_BUILD=RELEASE \ |
| EDK2_MACROS="-n 6 -D ARM_FOUNDATION_FVP=1" |
| endef |
| |
| edk2: edk2-common |
| |
| edk2-clean: edk2-clean-common |
| |
| ################################################################################ |
| # Linux kernel |
| ################################################################################ |
| LINUX_DEFCONFIG_COMMON_ARCH := arm64 |
| LINUX_DEFCONFIG_COMMON_FILES := \ |
| $(LINUX_PATH)/arch/arm64/configs/defconfig \ |
| $(CURDIR)/kconfigs/fvp.conf |
| |
| linux-defconfig: $(LINUX_PATH)/.config |
| |
| LINUX_COMMON_FLAGS += ARCH=arm64 |
| |
| linux: linux-common |
| |
| linux-defconfig-clean: linux-defconfig-clean-common |
| |
| LINUX_CLEAN_COMMON_FLAGS += ARCH=arm64 |
| |
| linux-clean: linux-clean-common |
| |
| LINUX_CLEANER_COMMON_FLAGS += ARCH=arm64 |
| |
| linux-cleaner: linux-cleaner-common |
| |
| ################################################################################ |
| # OP-TEE |
| ################################################################################ |
| OPTEE_OS_COMMON_FLAGS += PLATFORM=vexpress-fvp |
| optee-os: optee-os-common |
| |
| OPTEE_OS_CLEAN_COMMON_FLAGS += PLATFORM=vexpress-fvp |
| optee-os-clean: optee-os-clean-common |
| |
| optee-client: optee-client-common |
| |
| optee-client-clean: optee-client-clean-common |
| |
| OPTEE_LINUXDRIVER_COMMON_FLAGS += ARCH=arm64 |
| optee-linuxdriver: optee-linuxdriver-common |
| |
| OPTEE_LINUXDRIVER_CLEAN_COMMON_FLAGS += ARCH=arm64 |
| optee-linuxdriver-clean: optee-linuxdriver-clean-common |
| |
| generate-dtb: linux |
| $(LINUX_PATH)/scripts/dtc/dtc \ |
| -O dtb \ |
| -o $(FOUNDATION_PATH)/fdt.dtb \ |
| -b 0 \ |
| -i . $(OPTEE_LINUXDRIVER_PATH)/fdts/fvp-foundation-gicv2-psci.dts |
| |
| ################################################################################ |
| # xtest / optee_test |
| ################################################################################ |
| xtest: xtest-common |
| |
| xtest-clean: xtest-clean-common |
| |
| xtest-patch: xtest-patch-common |
| |
| ################################################################################ |
| # Root FS |
| ################################################################################ |
| ifeq ($(COMPILE_NS_USER),32) |
| ROOTFS_LIBPATH ?= "/lib/arm-linux-gnueabihf" |
| endif |
| ifeq ($(COMPILE_NS_USER),64) |
| ROOTFS_LIBPATH ?= "/lib/aarch64-linux-gnu" |
| endif |
| |
| .PHONY: filelist-tee |
| filelist-tee: |
| @echo "# xtest / optee_test" > $(GEN_ROOTFS_FILELIST) |
| @find $(OPTEE_TEST_OUT_PATH) -type f -name "xtest" | sed 's/\(.*\)/file \/bin\/xtest \1 755 0 0/g' >> $(GEN_ROOTFS_FILELIST) |
| @echo "# TAs" >> $(GEN_ROOTFS_FILELIST) |
| @echo "dir /lib/optee_armtz 755 0 0" >> $(GEN_ROOTFS_FILELIST) |
| @find $(OPTEE_TEST_OUT_PATH) -name "*.ta" | \ |
| sed 's/\(.*\)\/\(.*\)/file \/lib\/optee_armtz\/\2 \1\/\2 444 0 0/g' >> $(GEN_ROOTFS_FILELIST) |
| @echo "# Secure storage dig" >> $(GEN_ROOTFS_FILELIST) |
| @echo "dir /data 755 0 0" >> $(GEN_ROOTFS_FILELIST) |
| @echo "dir /data/tee 755 0 0" >> $(GEN_ROOTFS_FILELIST) |
| @echo "# OP-TEE device" >> $(GEN_ROOTFS_FILELIST) |
| @echo "dir /lib/modules 755 0 0" >> $(GEN_ROOTFS_FILELIST) |
| @echo "dir /lib/modules/$(call KERNEL_VERSION) 755 0 0" >> $(GEN_ROOTFS_FILELIST) |
| @echo "file /lib/modules/$(call KERNEL_VERSION)/optee.ko $(OPTEE_LINUXDRIVER_PATH)/core/optee.ko 755 0 0" >> $(GEN_ROOTFS_FILELIST) |
| @echo "file /lib/modules/$(call KERNEL_VERSION)/optee_armtz.ko $(OPTEE_LINUXDRIVER_PATH)/armtz/optee_armtz.ko 755 0 0" >> $(GEN_ROOTFS_FILELIST) |
| @echo "# OP-TEE Client" >> $(GEN_ROOTFS_FILELIST) |
| @echo "file /bin/tee-supplicant $(OPTEE_CLIENT_EXPORT)/bin/tee-supplicant 755 0 0" >> $(GEN_ROOTFS_FILELIST) |
| @echo "dir $(ROOTFS_LIBPATH) 755 0 0" >> $(GEN_ROOTFS_FILELIST) |
| @echo "file $(ROOTFS_LIBPATH)/libteec.so.1.0 $(OPTEE_CLIENT_EXPORT)/lib/libteec.so.1.0 755 0 0" >> $(GEN_ROOTFS_FILELIST) |
| @echo "slink $(ROOTFS_LIBPATH)/libteec.so.1 libteec.so.1.0 755 0 0" >> $(GEN_ROOTFS_FILELIST) |
| @echo "slink $(ROOTFS_LIBPATH)/libteec.so libteec.so.1 755 0 0" >> $(GEN_ROOTFS_FILELIST) |
| |
| update_rootfs: busybox optee-client optee-linuxdriver xtest filelist-tee |
| cat $(GEN_ROOTFS_PATH)/filelist-final.txt $(GEN_ROOTFS_PATH)/filelist-tee.txt > $(GEN_ROOTFS_PATH)/filelist.tmp |
| cd $(GEN_ROOTFS_PATH); \ |
| $(LINUX_PATH)/usr/gen_init_cpio $(GEN_ROOTFS_PATH)/filelist.tmp | gzip > $(GEN_ROOTFS_PATH)/filesystem.cpio.gz |
| |
| ################################################################################ |
| # Run targets |
| ################################################################################ |
| # This target enforces updating root fs etc |
| run: all |
| $(MAKE) update_rootfs |
| $(MAKE) run-only |
| |
| run-only: |
| @ln -sf $(LINUX_PATH)/arch/arm64/boot/Image $(FOUNDATION_PATH) |
| @ln -sf $(GEN_ROOTFS_PATH)/filesystem.cpio.gz $(FOUNDATION_PATH) |
| @cd $(FOUNDATION_PATH); \ |
| $(FOUNDATION_PATH)/models/Linux64_GCC-4.7/Foundation_Platform \ |
| --cores=4 \ |
| --secure-memory \ |
| --visualization \ |
| --gicv3 \ |
| --data="$(ARM_TF_PATH)/build/fvp/release/bl1.bin"@0x0 \ |
| --data="$(ARM_TF_PATH)/build/fvp/release/fip.bin"@0x8000000 |