tools/shrinkwrap/configs/cca_da.yaml

#
# SPDX-License-Identifier: BSD-3-Clause
# SPDX-FileCopyrightText: Copyright TF-RMM Contributors.
#

%YAML 1.2
---
description: >-
  Brings together a software stack to demonstrate Arm CCA running on FVP in a
  three-world configuration with Device Assignment (DA) feature based on RMM
  specification 1.1-alp12. This overlay enables necessary config options for
  build in RMM and Linux. Enables FVP run config with extra command line
  parameters to support DA.

layers:
  # Include layers from shrinkwrap repo
  - buildroot.yaml
  # Include layers from RMM repo
  - rmm.yaml
  - rmm-debug.yaml

build:
  rmm:
    repo:
      revision: topics/da_alp12
    params:
      -DRMM_V1_1: ON
    build:
      # Copy sample_keys from libspdm that will be used as device certificates
      - cp -r ext/libspdm/unit_test/sample_key ${param:builddir}
    artifacts:
      SAMPLE_KEY: ${param:builddir}/sample_key

  linux:
    repo:
      revision: cca-1.1/da/proto/rmm-1.1-alp12/v1
    prebuild:
      - ./scripts/config --file ${param:builddir}/.config --enable CONFIG_ARM_CCA_HOST
      - ./scripts/config --file ${param:builddir}/.config --enable CONFIG_PCI_TSM
      - ./scripts/config --file ${param:builddir}/.config --enable CONFIG_ARM_CCA_GUEST_REPORTS

  kvmtool:
    repo:
      dtc:
        revision: v1.6.1
      kvmtool:
        revision: cca-1.1/da/proto/rmm-1.1-alp12/v1

run:
  rtvars:
    SAMPLE_KEY:
      type: path
      value: ${artifact:SAMPLE_KEY}

  prerun:
    # Create a sample disk image for AHCI controller
    - DISK_IMG_DIR=`mktemp -d`
    - function rm_disk_img_dir { rm -rf $$DISK_IMG_DIR; }
    - trap rm_disk_img_dir EXIT
    - dd if=/dev/zero of=$${DISK_IMG_DIR}/ahci1_disk.img bs=1M count=64 status=none

  params:
    # Enable DVSEC, IDE and support TDISP at RootPort
    -C pci.pcie_rc.rootport0.rmeda_dvsec_enable: 1
    -C pci.pcie_rc.rootport0.ide_supported: 1
    -C pci.pcie_rc.rootport0.tee_io_supported: 1
    # Enable DOE,IDE,TDISP at Endpoint
    -C pci.pcie_rc.ahci1.endpoint.doe_supported: 1
    -C pci.pcie_rc.ahci1.endpoint.ide_supported: 1
    -C pci.pcie_rc.ahci1.endpoint.tee_io_supported: 1
    # Use RSA3072 certificate bundle
    -C pci.pcie_rc.ahci1.endpoint.bit_mask_of_base_asym_alg: 4
    -C pci.pcie_rc.ahci1.endpoint.certificate_der_filename: ${rtvar:SAMPLE_KEY}/rsa3072/bundle_responder.certchain.der
    -C pci.pcie_rc.ahci1.endpoint.private_key_filename: ${rtvar:SAMPLE_KEY}/rsa3072/end_responder.key
    # Set the disk image
    -C pci.pcie_rc.ahci1.ahci.image_path: $${DISK_IMG_DIR}/ahci1_disk.img