Commit Graph

2523 Commits

Author SHA1 Message Date
Gabriel Valcazar 67cdf29f59 freescale-layer: firmware-ele-imx: install i.MX93 A0 fw from 0.1.0 package
firmware-ele-imx no longer provides a firmware file for this revision of the
SoC, so if we want to keep supporting it, we need to port the firmware file
that we were using in DEY 4.0.

https://onedigi.atlassian.net/browse/DEL-9011
https://onedigi.atlassian.net/browse/DEL-9081

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2024-10-17 13:03:37 +02:00
Gabriel Valcazar c8b8edd9e7 freescale-layer: nxp-wlan-sdk: sync with meta-imx scarthgap-6.6.23-2.0.0
Port the latest changes from meta-imx.

https://onedigi.atlassian.net/browse/DEL-9011
https://onedigi.atlassian.net/browse/DEL-9081

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2024-10-17 13:03:37 +02:00
Gabriel Valcazar 2fb01c8f3e freescale-layer: imx-atf: adapt patches for 2.10
While at it, add the "Upstream-Status" tag to the patches to avoid QA errors

https://onedigi.atlassian.net/browse/DEL-9011
https://onedigi.atlassian.net/browse/DEL-9081

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2024-10-17 13:03:37 +02:00
Gabriel Valcazar 554729c92d freescale-layer: imx-boot: sync with meta-freescale/meta-imx
Since our recipes handle native builds differently, port the latest version
of the recipes from meta-freescale to our layer while keeping our
customizations. Use the same revision for all platforms.

Adapt patches for lf-6.6.23-2.0.0 release and add the "Upstream-Status" tag to
them to avoid QA errors.

For now, use the imx-boot recipe from meta-freescale, but there's a chance we
might need to port the version of the recipe in meta-imx.

https://onedigi.atlassian.net/browse/DEL-9011
https://onedigi.atlassian.net/browse/DEL-9081

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2024-10-17 13:03:37 +02:00
Gabriel Valcazar 694cab41ff freescale-layer: imx-secure-enclave: sync with meta-imx
Port the files from the scarthgap-6.6.23-2.0.0 branch of meta-imx

https://onedigi.atlassian.net/browse/DEL-9011
https://onedigi.atlassian.net/browse/DEL-9081

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2024-10-17 13:03:37 +02:00
Gabriel Valcazar da3f86e890 freescale-layer: imx-vpu-hantro: sync with meta-imx scarthgap-6.6.23-2.0.0
Port the latest recipes from meta-imx.

https://onedigi.atlassian.net/browse/DEL-9011
https://onedigi.atlassian.net/browse/DEL-9081

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2024-10-17 13:03:37 +02:00
Gabriel Valcazar 0486ceb29f freescale-layer: udev-rules-imx: sync 10-imx.rules with meta-imx
Synchronize with the file in the scarthgap-6.6.23-2.0.0 branch of meta-imx

https://onedigi.atlassian.net/browse/DEL-9011
https://onedigi.atlassian.net/browse/DEL-9081

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2024-10-17 13:03:37 +02:00
Gabriel Valcazar 70318e2d21 freescale-layer: optee-client: sync with meta-freescale
The 4.2.0.imx recipe has been upstreamed, so merge our 4.0.0.imx and 4.2.0.imx
recipes into a single .bbappend file. Keep our systemd service fix

https://onedigi.atlassian.net/browse/DEL-9011
https://onedigi.atlassian.net/browse/DEL-9081

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2024-10-17 13:03:37 +02:00
Gabriel Valcazar 63ac1e3ad3 freescale-layer: optee-os: sync with meta-freescale
The recipe for 4.2.0.imx has been upstreamed, so merge both of our .bb files
for 4.0.0.imx and 4.2.0.imx into a single .bbappend file. Adapt our patches to
support the ccimx93 and ccimx91, and while at it, add the "Upstream-Status"
tag to them to avoid QA errors

https://onedigi.atlassian.net/browse/DEL-9011
https://onedigi.atlassian.net/browse/DEL-9081

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2024-10-17 13:03:37 +02:00
Gabriel Valcazar ab6f1a6448 freescale-layer: opencv: update to 4.9.0.imx
Port the recipe from the scarthgap-6.6.23-2.0.0 branch of meta-imx,
meta-freescale is still using 4.6.0. Add the "Upstream-Status" tag to all of
the patches to avoid QA errors.

https://onedigi.atlassian.net/browse/DEL-9011
https://onedigi.atlassian.net/browse/DEL-9081

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2024-10-17 13:03:37 +02:00
Gabriel Valcazar e19724efcd freescale-layer: remove upstreamed imx recipes and modifications
Back in Yocto 4.0, we applied some imx recipe changes exclusively for the
ccimx93 from meta-imx's rel_imx_6.1.55_2.2.0 tag, but now these changes have
been upstreamed in the meta-freescale scarthgap branch. Since there currently
isn't an NXP BSP based on scarthgap, make all platforms use the upstreamed
versions of the recipes, which are the same versions or newer as the ones
available in meta-imx

Remove the recipes for:
    * firmware-ele-imx
    * gstreamer1.0-plugins-bad
    * gstreamer1.0-plugins-base
    * gstreamer1.0-plugins-good
    * gstreamer1.0-plugins-good
    * gstreamer1.0-plugins-ugly
    * gstreamer1.0
    * imx-atf
    * imx-boot-firmware-files
    * imx-codec
    * imx-g2d-samples
    * imx-m33-demos
    * imx-m4-demos
    * imx-m7-demos
    * imx-parser
    * imx-pxp-g2d
    * libdrm
    * linux-imx-headers
    * optee-test
    * wayland
    * wayland-protocols
    * weston
    * xwayland

Apply these changes:
    * Remove ccimx93-exclusive changes in gstreamer1.0-meta-base
    * Modify imx-gst1.0-plugin bbappend so the upstream version is used in all
      platforms
    * Remove imx-alsa-plugins bbappend so the upstream version is used in all
      platforms
    * Remove firmware-nxp-wifi bbappend since the files we need to install seem
      to already be included in the meta-freescale recipe
    * Remove imx-test and imx-lib bbappends since our custom changes have
      already been included in the meta-freescale recipes

https://onedigi.atlassian.net/browse/DEL-9011
https://onedigi.atlassian.net/browse/DEL-9081

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2024-10-17 13:03:37 +02:00
Gabriel Valcazar 8e012620a9 layer.conf: switch compatibility form Yocto 4.0 (Kirkstone) to 5.0 (Scarthgap)
https://onedigi.atlassian.net/browse/DEL-9011

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2024-10-17 11:28:26 +02:00
Gabriel Valcazar bd7e84d8b3 global: reflect changes in community layer names after Yocto 5.0 migration
* meta-ml was renamed to meta-imx-ml, and its BBFILE_COLLECTIONS was renamed to
  imx-machine-learning
* meta-st-stm32mpu-ai was renamed to meta-st-x-linux-ai

https://onedigi.atlassian.net/browse/DEL-9011

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2024-10-17 11:28:26 +02:00
Gabriel Valcazar b8f865797f local.conf.sample: sync with Yocto 5.0 (Scarthgap) template in poky
https://onedigi.atlassian.net/browse/DEL-9011

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2024-10-17 11:28:26 +02:00
Gabriel Valcazar b9f46a9100 sdk: move templates to conf/templates in preparation for Yocto 5.0 (Scarthgap)
Starting in poky commit 8791c77a4098d62080ecad09d94718eccd7f1a47, there is
now a check to make sure TEMPLATECONF follows specific rules. If we don't abide
by them, an error will occur when creating a project with our mkproject.sh
script. Move the templates to the place they're supposed to be in and reflect
the change in mkproject.sh.

https://onedigi.atlassian.net/browse/DEL-9011

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2024-10-17 11:28:26 +02:00
Javier Viguera bdbe657578 Merge branch 'dey-4.0/maint' into dey-4.0/master
This merges back release 'dey-4.0-r7.2' + a few more fixes after the
tag.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-10-16 16:28:40 +02:00
Arturo Buzarra ed8113d99b meta-digi: revert revisions to AUTOREV
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-10-08 12:00:57 +02:00
Arturo Buzarra 46f15efff2 meta-digi: update revisions for dey-4.0-r7.2
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-10-08 12:00:57 +02:00
Javier Viguera 674d012e36 ccimx93: add support for single core 512M variants
https://onedigi.atlassian.net/browse/DEL-9221

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-10-03 18:13:36 +02:00
Arturo Buzarra adb6a37e61 ccmp25-dvk: fix overlay name for Sony imx335 MIPI-CSI camera
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-10-03 10:04:56 +02:00
Arturo Buzarra 81ab1ccfd9 ccmp25-dvk: add overlay to support Sony imx355 MIPI-CSI camera
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-10-02 17:03:09 +02:00
Francisco Gil d9ef21b3d0 meta-digi: revert revisions to AUTOREV
Signed-off-by: Francisco Gil <francisco.gilmartinez@digi.com>
2024-09-30 16:39:57 +02:00
Francisco Gil c179cd862c meta-digi: update revisions for dey-4.0-r7.1
Signed-off-by: Francisco Gil <francisco.gilmartinez@digi.com>
2024-09-30 16:38:44 +02:00
Hector Palacios 1624ec2bc2 optee-os-stm32: reduce verbosity of SCP firmware
The SCP firmware introduces too much verbosity (with
timestamp included) in the middle of the boot log
between the TF-A and U-Boot.
Reduce the log and remove compiler flags for errors
on unused variables (banner strings).

This removes the following messages from SCP firmware:

  [    0.000000] SCP-firmware v2.12.0-dev
  [    0.000000]
  [    0.000000] [FWK] Module initialization complete!

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-09-30 10:55:03 +02:00
Hector Palacios 33ca8bc914 optee-os-stm32mp: reduce verbosity
ST_OPTEE_DEBUG_TRACE is set to 0 if ST_DEBUG_TRACE is set to 0.
However, on the optee source code, if ST_OPTEE_DEBUG_TRACE=0 the
log level is automatically set to 3 (INFO) resulting in a very
verbose optee log.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2024-09-30 10:55:03 +02:00
Javier Viguera 570c057a59 ccimx91: disable graphical distro features
The ccimx91 is a headless platform. Disabling those distro features
prevents building/installing packages that are useless (e.g. gstreamer)

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-09-27 10:00:44 +02:00
Arturo Buzarra 5fabf75615 switch to building from maintenance branches
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-09-25 16:36:48 +02:00
Arturo Buzarra 53b9fd076d Merge branch 'dey-4.0/master' into dey-4.0/maint
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-09-25 15:53:50 +02:00
Arturo Buzarra d46b202277 linux-dey-6.1: add different SRCREV for NXP and STM platforms
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-09-25 14:34:21 +02:00
Mike Engel fe9e0d701a boot: change linux and recovery partition UUID for single mode
This commit changes the linux and recovery UUID when booting
the system in single mode.

https://onedigi.atlassian.net/browse/DEL-9244

Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2024-09-23 17:55:48 +02:00
Isaac Hermida 44f9fa0616 alsa-state: ccmp1: fix control settings
Fix the control settings as set by alsactl. There was a missmatch
and therefore the configuration applied was incorrect.

https://onedigi.atlassian.net/browse/DEL-8703
https://onedigi.atlassian.net/browse/DEL-9246

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
2024-09-20 16:52:55 +02:00
Isaac Hermida 23ff040fc1 alsa-state: ccmp25: configure settings
Some settings were incorrectly set. Align the card settings with the
same values used in our other platforms.

https://onedigi.atlassian.net/browse/DEL-8703

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
2024-09-20 16:52:55 +02:00
Arturo Buzarra 0d685efc41 ccmp25-dvk: add flag to support virtual wireless interfaces
CYW55512 Wireless chip supports concurrent modes and virtual wireless
interfaces like SotfAP and P2P.

https://onedigi.atlassian.net/browse/DEL-9237

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-09-19 13:37:01 +02:00
Gabriel Valcazar 6a6e2577f1 ccmp2: don't execute task that generates flashlayout files
These are files for programming images with STM32CubeProgrammer tool. We don't
use the tool or the files. Disable the task to avoid build warnings, just like
we do for the ccmp1 platforms.

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2024-09-19 09:56:05 +02:00
Gabriel Valcazar a481d7225d ccmp1: change the way we disable the generation of flashlayout files
Instead of manually disabling the task, use the ENABLE_FLASHLAYOUT_CONFIG
variable which is meant for that exact purpose.

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2024-09-18 18:15:35 +02:00
Hector Palacios 52eda79fb7 trustfence-stm-signtools: update recipe and package to latest versions
Updated package with latest versions from ST Ecosystem 5.1:
 - STM32MP_KeyGen_CLI		v2.17.0
 - STM32MP_SigningTool_CLI	v2.17.0

Changed dependency libraries in the package:
 - libcrypto.so.1.0.0 -> libcrypto.so.1.1
 - libQt5Core.so.6    -> libQt6Core.so.6

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2024-09-18 18:12:52 +02:00
Javier Viguera 5adb109b62 ccimx91: configure platform as headless
This removes the psplash package from "core-image" images, which
prevents this failure onn boot:

[FAILED] Failed to start Start psplash boot splash screen.
psplash[454]: Error opening /dev/fb0

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-09-17 18:24:36 +02:00
Hector Palacios d545fe0a14 ccmp25-dvk: default to use dey-image-webkit on installers
This image is the one that contains the Get Started demo.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2024-09-17 16:27:29 +02:00
Francisco Gil e183f47816 ccimx9: bootscript: add logic to emulate a ccimx91 on a ccimx93
Based on the environment variable emulate-cc91:

* Limit the ram memory to 512MB
* Enable the overlay _ov_som_emulate-ccimx91_ccimx93.dtbo
* Disable the npu node

Signed-off-by: Francisco Gil <francisco.gilmartinez@digi.com>
2024-09-17 08:29:41 +02:00
Francisco Gil 87f26ec0bc ccmp25-dvk: fix mount point for OVERLAYFS in read-only systems
Signed-off-by: Francisco Gil <francisco.gilmartinez@digi.com>
2024-09-12 08:52:59 +02:00
Isaac Hermida b5ccc9f841 ccimx93: uboot bootscript: fix NPU overlay
When consolidating the bootscript, the variable soc_type was misspelled.

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
2024-09-10 12:02:59 +02:00
Arturo Buzarra f28dd88ab0 firmware-murata-infineon: add support to CYW55512 Wifi-BT single-chip combo
This commit adds support for pre-release firmware that is not ready for
production devices.

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-09-06 10:18:07 +02:00
Mike Engel 1699adc373 sdcard: add support to create sdcard image for CCMP2
This commit adds the necessary wks file to create an SDcard
image for the CCMP2.

https://onedigi.atlassian.net/browse/DEL-9181

Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2024-09-04 11:38:34 +02:00
Mike Engel 11426fcb5b recovery: add initramfs into FIT recovery image
This commit adds the initramfs into the FIT recovery
image. If the RAM disk image is included in the FIT
image we need to create a initramfs file that doesn't
include the u-boot header, because the FIT descriptor
contains all the necessary information to use the
initramfs file.

https://onedigi.atlassian.net/browse/DEL-9168

Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2024-09-04 11:34:40 +02:00
Javier Viguera 542a9aa83e iw61x wifi: use NXP's lf-6.6.23-2.0.0 on ccimx91
Both for the driver code and the firmware files.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-08-30 16:51:40 +02:00
Javier Viguera 9c6ac2e7b8 linux-dey: add recipe for version 6.6 restricted to ccimx91
While on it, restrict recipe version 6.1 to ccimx93 so it does not get
used by ccimx91.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-08-30 16:47:33 +02:00
Francisco Gil 6399d0ef32 ccimx93-dvk: add overlay to simulate ccimx91
https://onedigi.atlassian.net/browse/DEL-9175

Signed-off-by: Francisco Gil <francisco.gilmartinez@digi.com>
2024-08-28 11:04:04 +02:00
Mike Engel 1348d80e87 wic: add support to create sign SDcard image
This commit adds support to create signed SDcard
image for the CCMP1 platform.

https://onedigi.atlassian.net/browse/DEL-9079

Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2024-08-26 10:10:49 +02:00
Francisco Gil faca2439ed ccmp25-dvk: add OVERLAYFS configs for read-only
When EXTRA_IMAGE_FEATURES += "overlayfs-etc" is added these
configurations are needed to compile. They are provided with
the default configuration to work with our software.

https://onedigi.atlassian.net/browse/DEL-9186

Signed-off-by: Francisco Gil <francisco.gilmartinez@digi.com>
2024-08-23 10:56:58 +02:00
Javier Viguera 315fcbddac install_linux_fw_uuu: update script to support ccimx91
Skip the SOC revision part, as for the ccimx91, only one imx-boot is
generated.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-08-22 17:11:42 +02:00
Javier Viguera 2dd84640ac optee: add new version 4.2.0 for ccimx91
This includes optee-os, optee-client and optee-test recipes.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-08-22 17:11:42 +02:00
Javier Viguera e8a99542f3 imx-boot: add support for ccimx91
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-08-22 15:18:37 +02:00
Javier Viguera 2c9cc2c0ff firmware-ele-imx: add new version 0.1.2 recipe for ccimx91
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-08-22 15:18:37 +02:00
Javier Viguera 63c0702508 imx-atf: add new version 2.10 recipe for ccimx91
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-08-22 15:18:37 +02:00
Javier Viguera 07646c5c57 u-boot-dey: add new version v2024.04 recipe for ccimx91
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-08-22 15:18:37 +02:00
Arturo Buzarra 795d1afbee ccmp25-dvk: add boot artifacts to deploy into the zip installer
This commit adds the boot artifacts required to perform a full firmware deploy.

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-07-30 22:15:10 +02:00
Javier Viguera 2a9e657e0f ccmp25: implement firmware deployment scripts
https://onedigi.atlassian.net/browse/DEL-9120

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-07-25 19:18:47 +02:00
Javier Viguera 5ba3466c08 ccmp25: generate symlinks to final boot artifacts
DEY generates the ccmp25 boot artifacts on subdirectories of the main
deploy folder. The firmware installation script expects to have them on
the deploy directory, so create the proper symlinks.

https://onedigi.atlassian.net/browse/DEL-9120

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-07-25 19:18:27 +02:00
Gonzalo Ruiz 0b6b220804 libubootenv: ccmp2: define same 'fw_env.config' as in ccimx9
Both CC93 and CCMP2 store the environment at the end of BOOT1 partition
and the redundant environment at the end of BOOT2 partition. Reuse the
'fw_env.config' file defined for CC93 for both platforms, and also include
CC91 in the process.

https://onedigi.atlassian.net/browse/DEL-9119

Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
2024-07-24 11:58:41 +02:00
Arturo Buzarra c7cfefc6fe u-boot-dey: ccmp25: fix boot script to correctly parse HWID
In CCMP2 the HWID is stored in 3 consecutive fuse words, now the third word has
the following scheme:

  | 31..18 | 17 |   16  |15..12|  11..7  |6..3| 2..0 |
  +--------+----+-------+------+---------+----+------+
  |   --   | BT | Wi-Fi |  RAM | Variant | HV | Cert |
  +--------+----+-------+------+---------+----+------+

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-07-23 14:10:39 +02:00
Hector Palacios c7b3d672b2 alsa-state: add default ALSA files for ccmp25-dvk
Signed-off-by: Hector Palacios <hector.palacios@digi.com>

https://onedigi.atlassian.net/browse/DEL-9020
2024-07-22 17:12:33 +02:00
Hector Palacios b4be514857 alsa-state: remove SRC_URI appends for existing asound.state
The main recipe already contains this file on the SRC_URI.
No need to append for every platform.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2024-07-22 17:12:33 +02:00
Arturo Buzarra 1d29e40d23 meta-digi: integrate ConnectCore MP25 DVK platform on common recipes
Add initial support on common DEY recipes for ConnectCore MP25 DVK platform.

https://onedigi.atlassian.net/browse/DEL-8995

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-07-22 17:12:33 +02:00
Arturo Buzarra cbc949447d linux-dey-6.1: add support to ConnectCore MP25 DVK platform
Add support based on v6.1.28 kernel version from STM release
openstlinux-6.1-yocto-mickledore-mp2-v23.12.06.

https://onedigi.atlassian.net/browse/DEL-8995

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-07-22 17:12:33 +02:00
Arturo Buzarra 380bbf3b47 stm-st-stm32mp: weston: fix check-gpu support to ConnectCore MP25 DVK platform
Add support based on STM release openstlinux-6.1-yocto-mickledore-mpu-v24.06.26.

https://onedigi.atlassian.net/browse/DEL-8995

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-07-22 17:12:33 +02:00
Arturo Buzarra b6f877ba10 stm-st-stm32mp: mesa: add support to ConnectCore MP25 DVK platform
Add open-source implementation of the OpenGL API support based on v23.0.3
version from STM release openstlinux-6.1-yocto-mickledore-mpu-v24.06.26.

https://onedigi.atlassian.net/browse/DEL-8995

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-07-22 17:12:33 +02:00
Arturo Buzarra 90f103a916 stm-st-stm32mp: gcnano: add support to ConnectCore MP25 DVK platform
Add GPU support based on v6.4.15 version from STM release
openstlinux-6.1-yocto-mickledore-mpu-v24.06.26.

https://onedigi.atlassian.net/browse/DEL-8995

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-07-22 17:12:33 +02:00
Arturo Buzarra 0ad2b42f93 stm-st-stm32mp: tf-a: add support to ConnectCore MP25 DVK platform
Add support based on v2.8 version from STM release
openstlinux-6.1-yocto-mickledore-mp2-v23.12.06.

https://onedigi.atlassian.net/browse/DEL-8995

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-07-22 17:12:33 +02:00
Arturo Buzarra 7d660349e8 stm-st-stm32mp: optee: add support to ConnectCore MP25 DVK platform
Add support based on v3.19.0 version from STM release
openstlinux-6.1-yocto-mickledore-mp2-v23.12.06.

https://onedigi.atlassian.net/browse/DEL-8995

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-07-22 17:12:33 +02:00
Arturo Buzarra 28bcfecfaf uboot: add support to ConnectCore MP25 DVK platform
Add initial support cloned from ccmp15, based on v2022.10 from STM release
openstlinux-6.1-yocto-mickledore-mp2-v23.12.06.

https://onedigi.atlassian.net/browse/DEL-8995

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-07-22 17:12:33 +02:00
Arturo Buzarra 9d5ce6c707 meta-digi-arm: add support for ConnectCore MP25 DVK platform
https://onedigi.atlassian.net/browse/DEL-8995

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-07-22 17:12:33 +02:00
Hector Palacios 22238772ee Merge tag 'dey-4.0-r6.1' into dey-4.0/master
Digi Embedded Yocto 4.0-r6.1

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2024-07-19 13:35:27 +02:00
Mike Engel d11b291f9a meta-digi: add new CCMX91 platform into DEY
This commits adds the CCMX91 platform to the DEY
build system. Furthermore, it creates generic ccimx9
support to be used for the CCiMX91 and CCiMX93
platform.

https://onedigi.atlassian.net/browse/DEL-9106

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2024-07-19 07:32:00 +02:00
Hector Palacios 9ef54b7b8e optee-os-stm32mp: use OTP HUK when TrustFence enabled
When TrustFence is enabled, use the HUK programmed on the OTP
bits for the ccmp15 platform.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>

https://onedigi.atlassian.net/browse/DEL-9121
2024-07-16 08:09:56 +02:00
Isaac Hermida 0c642ed7ec Update Digi Copyright header
Standarize the Copyright header according to company policy.

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
2024-07-15 09:28:58 +02:00
Francisco Gil bbb94ced74 docker: add missing config entry in STM platform for docker
Also some duplicated entries were removed.

https://onedigi.atlassian.net/browse/DEL-9122

Signed-off-by: Francisco Gil <francisco.gilmartinez@digi.com>
2024-07-09 11:45:29 +02:00
Francisco Gil ee26f14423 meta-digi: revert revisions to AUTOREV
Signed-off-by: Francisco Gil <francisco.gilmartinez@digi.com>
2024-07-02 12:06:59 +02:00
Francisco Gil 35cf4d61bc meta-digi: update revisions for dey-4.0-r6.1
Signed-off-by: Francisco Gil <francisco.gilmartinez@digi.com>
2024-07-02 10:19:59 +02:00
Javier Viguera 17658bdffa Merge branch 'dey-4.0/master' into dey-4.0/maint
Merges Trustfence file-based encryption support.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-06-28 12:14:26 +02:00
Gabriel Valcazar 8fad761961 ccimx6ul: install_linux_fw_uuu.sh: increase timeouts to account for large NANDs
When running the installation script on variants with larger NANDs, two of the
script's commands take longer than our intended timeouts under specific
circumstances:

    * When the variant has a NAND with 512 MiB or more and singlemtdsys is set
      to "yes", running ubivolscipt takes longer than our 10 second timeout.
      The larger the NAND storage size, the longer this command takes.
    * When the variant has a 1 GiB NAND, singlemtdsys is set to "yes" and
      dualboot is set to "no", the update of the recovery UBI volume takes
      longer than our 15 second timeout.

In both of these cases, the script fails and the installation process cannot
continue. Apply the following changes to prevent this:

    * Increase the ubivolscript timeout from 10 seconds to 30
    * Increase the recovery update timeout from 15 seconds to 20

Also, remove the command immediately before ubivolscript is run, since said
command is already being run at the beginning of ubivolscript.

https://onedigi.atlassian.net/browse/DEL-9097

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2024-06-27 17:48:10 +02:00
Javier Viguera ac23714967 optee-client: change secure storage path when TF is enabled
By default, the secure storage path in the REE is "/var/lib/tee". It is
part of the rootfs, and thus, it gets lost on a firmware update.

This commit changes that path to a different partition "/mnt/data/tee"
when Trustfence file-based encryption is enabled.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-06-27 15:41:00 +02:00
Javier Viguera 3c1f32f09a optee-os: add SDK environment script to build trusted applications
Building Optee trusted applications (TA) depends on optee_client and the TA
devkit provided by optee_os. Our toolchain provides those dependencies, but
the SDK script which configures the environment for standalone building,
is not configuring some variables needed to build trusted applications.

This commit extends the SDK environment script to allow building TAs.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-06-27 15:41:00 +02:00
Isaac Hermida fbe6481cd3 kernel-module-qualcomm: add lock file to avoid endless call to script in failure
Add a lock file to avoid to call the file continuously if the initial probe
failed.

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
2024-06-27 11:18:11 +02:00
Isaac Hermida b4f48a6361 kernel-module-nxp-wlan: rebind mmc node if wlan load failed
Occassionally, the loading the WiFi driver might fail, because of the
MMC node was not correctly initialized.
Fix that by rebinding the MMC node. This fix implements a similar workaround
as in c30b947408.

https://onedigi.atlassian.net/browse/DEL-9083

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
2024-06-27 11:18:11 +02:00
Gabriel Valcazar e0be8c3a1f ccimx6qpsbc: add missing "if" condition terminator in UUU install script
One of the conditions used to determine the U-Boot file was missing its
terminator, breaking the script.

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
(cherry picked from commit 26dc437a25)
2024-06-26 12:16:22 +02:00
Hector Palacios f55c084064 libubootenv: flush changes to fw_env.config on post inst script
On devices with NAND as storage media, a post install script
modifies the fw_env.config file basing on the NAND geometry.
This only happens once after deployment, typically on production
environments. If the power is removed soon after the post install
script runs (which is a normal procedure on manufacturing
environments), there are chances that pending file system
operations have not been flushed, which may occasionally lead
to the fw_env.config file end up empty on the next reboot.

This commit adds a sync at the end of the post-install script
to guarantee the changes are written to the file system.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>

https://onedigi.atlassian.net/browse/DEL-9059
2024-06-26 11:25:23 +02:00
Gonzalo Ruiz 731bee3498 ccimx93-dvk: rename overlay for DLC0200CCP04DF-2 MIPI display
Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
2024-06-24 12:29:19 +02:00
Gonzalo Ruiz dead98301b ccimx93-dvk: add overlay for NHD-3.5-640480EF-MSXP MIPI display
https://onedigi.atlassian.net/browse/DEL-9036

Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
2024-06-24 12:25:15 +02:00
Javier Viguera 18c0c69314 Merge branch 'dey-4.0/master' into dey-4.0/maint
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-06-21 14:44:59 +02:00
Mike Engel 994906d1de linux: add kernel fragment to enable File system encryption support
https://onedigi.atlassian.net/browse/DEL-8944

Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2024-06-18 14:31:18 +02:00
Francisco Gil 7e493b74ae install script: enable trustfence if -k is selected
Also use the name DEK_FILE for all the files.

Signed-off-by: Francisco Gil <francisco.gilmartinez@digi.com>
2024-06-18 11:56:44 +02:00
Francisco Gil 828f5da09b install script: allow -k parameter to be used without arguments
There is a corner case that wasn't cover by the script, if you
use the script using a -k -t the "-t" would be the name of the
dek.bin.

This new implementation solves the issue.

Signed-off-by: Francisco Gil <francisco.gilmartinez@digi.com>
2024-06-18 11:56:44 +02:00
Francisco Gil d86648f791 install scripts: capitalize F from TrustFence
Signed-off-by: Francisco Gil <francisco.gilmartinez@digi.com>
2024-06-18 11:56:44 +02:00
Francisco Gil 85b0895297 install script: remove extra "-" in not signed/encrypted images
By default is trying to install an artifact imx-boot--<platform>
if trustfence is not enabled.

Signed-off-by: Francisco Gil <francisco.gilmartinez@digi.com>
2024-06-18 11:56:44 +02:00
Francisco Gil 87ec014630 ccmp1X: uuu: add support to flash trustfence artifacts
https://onedigi.atlassian.net/browse/DEL-9058

Signed-off-by: Francisco Gil <francisco.gilmartinez@digi.com>
2024-06-18 11:56:44 +02:00
Francisco Gil 86b97c888a ccimx93: uuu: add support to flash trustfence artifacts
https://onedigi.atlassian.net/browse/DEL-9058

Signed-off-by: Francisco Gil <francisco.gilmartinez@digi.com>
2024-06-18 11:56:44 +02:00
Francisco Gil 0a5274e06f firmware installation scripts: correct usage of u-boot variables
Some variables in the script belong to u-boot, not to the shell
running the script. Escape those variables so the shell does not
expand them.

Signed-off-by: Francisco Gil <francisco.gilmartinez@digi.com>
2024-06-18 11:56:44 +02:00
Javier Viguera 8633a4ed49 imx-atf: prevent console output when TF secure console is enabled
https://onedigi.atlassian.net/browse/DEL-9063

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-06-14 17:51:33 +02:00
Gonzalo Ruiz 0d085e3062 ccmp15: add overlay for NHD-3.5-640480EF-MSXP MIPI display
https://onedigi.atlassian.net/browse/DEL-9036

Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
2024-06-14 10:49:11 +02:00
Mike Engel c157313de1 ccmp15: remove Cortex-M4 overlay from DEVICETREE list
This commit removes the Cortex-M4 overlay because the M4 has
been enabled now in the DTSI file.

https://onedigi.atlassian.net/browse/DEL-9056

Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2024-06-12 11:26:18 +02:00
Gabriel Valcazar 4115044590 imx-boot: apply patches to fix CVE-2023-39902 on i.MX8M platforms
The patches have been backported from the lf-6.1.36-2.1.0 release of
imx-mkimage.

https://onedigi.atlassian.net/browse/DUB-1081

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2024-06-07 13:35:21 +02:00
Gabriel Valcazar d07e68b5a2 imx-boot: apply patches to fix CVE-2023-39902 on i.MX8M platforms
The patches have been backported from the lf-6.1.36-2.1.0 release of
imx-mkimage.

https://onedigi.atlassian.net/browse/DUB-1081

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2024-06-06 14:59:26 +02:00
Mike Engel 37f5db42ac tsn: add basic Time sensitive networking (TSN)
This commit adds some basic TSN support to DEY.
It includes the kernel configuration fragment with
the IEEE 802.1 support and the some user space tools
necessary to configure the network.

https://onedigi.atlassian.net/browse/DEL-9026

Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2024-06-04 12:14:18 +02:00
Francisco Gil ecad5dba32 uuu: fix incorrect command for trustfence update from uuu
The command trustfence update doesn't require the partition argument.

Besides of that, remove extra fi on the cc8m platforms.

Signed-off-by: Francisco Gil <francisco.gilmartinez@digi.com>
2024-06-04 08:45:25 +02:00
Javier Viguera 66780aafc4 optee_os: implement Optee-based environment encryption
https://onedigi.atlassian.net/browse/DUB-1079

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-05-28 17:57:31 +02:00
Javier Viguera 720c5f7218 libubootenv: rework patchset with Digi-specific functionality
* Move Digi code out of the upstream files to minimize conflicts in
  version migrations.
* Remove all the TEE client copied code and use the libteeclient library.
* Some fixes in the Optee-based environment encryption
* Some simplifications in CAAM-based environment encryption.

https://onedigi.atlassian.net/browse/DUB-1079

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-05-28 17:57:01 +02:00
Hector Palacios 18ba3f592c ccmp15: add overlay for SOM hardware version 1
At the moment, this overlay adds RTC calibration to compensate
the drift observed in the 32kHz input frequency of hardware
version 1 of the SOM.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>

https://onedigi.atlassian.net/browse/DEL-8987
2024-05-14 16:29:08 +02:00
Gonzalo Ruiz a288a03ef5 firmware_qualcomm: ccimx8m: update US Board Data File calibration
Update BDF file used on CC8MN and CC8MM with a new calibration
(GOLDEN3) to obtain a flatter frequency response and a better EVM
performance.

Reference calibration file is obtained from 'qca6574au-le-2-2-2_qca_oem'
repo at tag 'r00005.1' under path
'wlanfw/cnss_proc/wlan/fw/target/sdio_dst/qc6174/bdwlan30.bin'
(MD5SUM: 8a40d95698825e1718bee640b1f7982a).

Target output powers tables and CTL tables remain intact.

Changes required to pass the EN 300 328 V2.2.2 blocking test also remain
intact.

New BDF file:
- bdwlan30_US.bin (86180198440e6ab53734aabf0112c6ba)

https://onedigi.atlassian.net/browse/DEL-9001

Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
2024-05-03 11:33:28 +02:00
Gonzalo Ruiz 59025531c5 ccmp15: add DT overlay for configuring a MIPI display
https://onedigi.atlassian.net/browse/DEL-8999

Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
2024-05-02 15:05:38 +02:00
Mike Engel cc8c038401 linux-dey-5.15: add RT functionality to CCMP1
This commit adds RT functionality to CCMP1. The patches
have been extracted from STM RT expansion package and
includes the maineline RT patches and the STM RT driver
patches and RT Kernel defconfig changes.

https://onedigi.atlassian.net/browse/DEL-8880

Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2024-04-29 16:13:49 +02:00
Mike Engel 2eb37cf30b linux-dey-6.1: add RT functionality to CCiMX93
This commit adds RT functionality to the CCiMX93
platform. The patches have been extracted from the
NXP real time edge BSP and include the maineline RT
patches and the NXP RT driver patches and RT Kernel
defconfig changes.

https://onedigi.atlassian.net/browse/DEL-8881

Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2024-04-29 16:13:49 +02:00
Isaac Hermida e2caf16da4 mount: use the ubi class to check for attached devices
Use the generic sys class to check if a mtd device is attached.
The virtual node may not be present in some kernel versions.

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
2024-04-26 14:10:14 +02:00
Mike Engel 55b313e7d2 trustfence: create symbolic links for all SOC revisions of the CCiMX8X
This commit creates symbolic links for all SOC revisions
of the CCiMX8X platform.

Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2024-04-24 09:56:37 +02:00
Mike Engel 041ca93cd9 ccimx8x: fix u-boot Trustfence naming for installation script
This commit fixes u-boot Trustfence naming for signed and
encrypted images used in the installation script removing
the a duplicated dash in the u-boot name.

https://onedigi.atlassian.net/browse/DEL-8271

Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2024-04-24 09:39:41 +02:00
Arturo Buzarra 8e63e52435 stm32mp: optee: add optee-client support by default
Optee-client provides the TEE Client API as defined by the GlobalPlatform TEE standard.
It is required to communicate with a Trusted Application (TA) running in a Trusted OS.

https://onedigi.atlassian.net/browse/DEL-8970

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-04-22 11:33:41 +02:00
Javier Viguera e8860f7bbf optee-client: fix package installation in the rootfs
Several things were wrong after the latest update to version 4.0: the
tee-supplicant path, some settings in the systemd unit, etc.

This commit fixes the installation so the optee test suite completes again.

https://onedigi.atlassian.net/browse/DEL-8989

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-04-17 17:55:16 +02:00
Arturo Buzarra 09e302d5ef tf-a-stm32mp: fix set_fip_sign_key() to obtain the key password
This commit fixes the set_fip_sign_key() function to match the new keys format
where there is a key_pass file for each key, no longer needing to search with
the key index.

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-04-15 09:15:25 +02:00
Arturo Buzarra 2a4108f071 trustfence: stm: fix PKI tree check for ccmp13 platform
This commit fixes a race condition where, if you have an existing PKI tree with
the new format (one key_pass file for each key), the script detects that the
PKI tree is incomplete because it is always trying to find the key_pass.txt
file with the old format. This commit adds an additional validation step to
verify the new keys format.

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-04-15 09:14:57 +02:00
Javier Viguera 3c26ef78e0 meta-digi: enable boot artifacts encryption support on ccimx93
Add a check on the existence of the "temp-fitimg-loaded" environment
variable before setting it. It is needed, as with encrypted FIT images,
we need to decrypt them before accessing the boot script. In such cases,
u-boot sets that variable to "no" so the boot script does not override it,
and the FIT image is loaded again before the final boot to the OS.

https://onedigi.atlassian.net/browse/DEL-8945

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-04-11 18:18:13 +02:00
Arturo Buzarra cc72882584 ccmp15: add DT overlay for the SV4E MIPI analyzer
https://onedigi.atlassian.net/browse/DEL-8978

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-04-08 18:41:35 +02:00
Arturo Buzarra cfd40ca02f trustfence-stm-signtools: include external libraries in the package itself
The signing tools have a dependency of libQt5Core.so.5, which implies that this
library must to be installed on the native PC. This commit includes all the
required shared libraries for the signing tools inside the own package to avoid
external dependencies. With this change there is not needed any more the qtbase
dependency at build time.
Package version has been bumped to 1.2.

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-04-08 18:02:37 +02:00
Arturo Buzarra 4b98b3f49e tf-a-stm32mp: fix set_fip_sign_key() to obtain the key password
This commit fixes the set_fip_sign_key() function to match the new keys format
where there is a key_pass file for each key, no longer needing to search with
the key index.

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-04-08 13:38:27 +02:00
Mike Engel 4b4d4b5a6b u-boot-dey: add install uboot on redundant partition
This commit adds instructions to update the redundant u-boot
partition.

https://onedigi.atlassian.net/browse/DEL-8848

Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2024-04-05 17:08:22 +02:00
Arturo Buzarra b9d9a0104b trustfence: stm: fix PKI tree check for ccmp13 platform
This commit fixes a race condition where, if you have an existing PKI tree with
the new format (one key_pass file for each key), the script detects that the
PKI tree is incomplete because it is always trying to find the key_pass.txt
file with the old format. This commit adds an additional validation step to
verify the new keys format.

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-03-26 12:37:06 +01:00
Arturo Buzarra 22429e62cb meta-digi-arm: add support for Worldwide regulatory domains
- For Qualcomm QCA65x4 platforms:

Add support to create the 'World' board data file for the QCA65x4 Wi-Fi
chip to operate on World regulatory domain.

Kernel wireless driver already supports selecting the correct file based
on the configured Regulatory Domain via Kernel command line argument
'wlan.regdmn', which allows the following parameters:
  * "US", for U.S.A. (default)
  * "World", for worldwide

- For Murata type2AE platforms:

Add World CLM blob file for the wireless interface and JRL hcd file for
the Bluetooth interface. Also add the autocountry ininitialization script
and systemd service.

World CLM blob file:
  - cyfmac4373-sdio_World.clm_blob (1abe7f3fa86d4123b0586cbbf0ec91ac)

Kernel wireless and bluetooth drivers already support selecting the correct
files based on the configured Regulatory Domain via Kernel command line
arguments 'brcmfmac.regdmn' and 'btbcm.regdmn' respectively, which allow the
following parameters:
  'brcmfmac.regdmn':
    * "US", for U.S.A. (default)
    * "World", for worldwide

  'btbcm.regdmn':
    * "FCC.CE", for U.S.A., Europe and the rest of the world (default)
    * "JRL", for Japan

https://onedigi.atlassian.net/browse/DEL-8905

Co-authored-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-03-21 09:12:25 +01:00
Gabriel Valcazar 3fc0a30115 trustfence: rename variables related to FIT image signing
Different mechanisms are used to sign FIT images on the ccmp1 platforms and the
ccimx93, and we manage each mechanism via a different variable. The variable
names don't really reflect which platform they affect, which makes maintenance
harder.

Rename the variables so that it's easier to identify the platforms/vendors they
affect:

    * Replace TRUSTFENCE_FIT_IMG with TRUSTFENCE_SIGN_FIT_STM
    * Replace TRUSTFENCE_SIGN_FIT_ARTIFACT with TRUSTFENCE_SIGN_FIT_NXP

Don't rename TRUSTFENCE_FIT_IMG_SIGN_KEYNAME

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2024-03-19 13:26:47 +01:00
Gabriel Valcazar aabf4cb72d ccmp1: u-boot-dey: merge FIT signature config fragments into a single file
Unless we have a use case in which we need to apply these fragments separately,
we can merge them both into a single fragment.

https://onedigi.atlassian.net/browse/DEL-8946

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2024-03-19 13:26:47 +01:00
Gabriel Valcazar 9ac912d289 ccmp1: remove linux/u-boot functions related to FIT image bootscript copying
This logic was fixed in commit e915a14b4b, so we
no longer have to manually copy the bootscript to generate FIT images.

https://onedigi.atlassian.net/browse/DEL-8946

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2024-03-19 13:26:47 +01:00
Gabriel Valcazar 72675e510c ccmp1: decouple FIT functionality from signed FIT functionality
We rely on FIT support to implement boot artifact authentication on ccmp1
platforms, but our implementation made it impossible to enable FIT support
outside of the context of Trustfence/secure boot.

Change this so that it's possible to enable FIT support without having to sign
the FIT artifacts. Also, modify the linux-dey 5.15 recipe so that the U-Boot
DTBs with signatures get copied only when FIT signing is enabled.

https://onedigi.atlassian.net/browse/DEL-8946

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2024-03-19 13:26:47 +01:00
Arturo Buzarra ecd77dece9 firmware-murata: update firmware binaries to version imx-kirkstone-hedorah_r1.0
This commit updates the required firmware binaries for Bluetooth and Wireless
interfaces, hostapd and wpa_supplicant recipes based on the Cypress Linux WiFi
Driver (FMAC) release v5.15.58-2023_1128 (Wireless firmware v13.10.246.334).
This change also includes a custom defconfig file for the hostapd and
wpa_supplicant recipes including the changes from the patches and the Digi
customizations.

Also are updated the Murata firmware repositories to match with the latest
Murata release imx-kirkstone-hedorah_r1.0, which is based in the same Cypress
Linux Wifi Driver release v5.15.58-2023_1128.

https://onedigi.atlassian.net/browse/DEL-8667

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-03-18 18:13:09 +01:00
Gonzalo Ruiz 67be7da934 u-boot-dey: cc6: fix typo in uuu install script
Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
2024-03-14 16:41:56 +01:00
Javier Viguera e6b67b6bf8 meta-digi: trustfence: support signing a FIT boot artifact
And enable it for the ccimx93.

https://onedigi.atlassian.net/browse/DEL-8704

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-03-12 18:13:05 +01:00
Javier Viguera 1d0631ef96 u-boot-dey: support Trustfence config options with spaces
The standard string split() function does not support splitting a string
by spaces but preserving quoted strings, so it does not work for build
options disabling functionality, as they have this format:

"# CONFIG_OPTION is not set"

On the other hand, the "shlex" module provides a split function that
allows splitting strings by spaces and, at the same time, preserves
quoted strings.

In Trustfence, we need this functionality to disable default options that
would allow the booting of non-authenticated images.

https://onedigi.atlassian.net/browse/DEL-8704

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-03-12 18:13:05 +01:00
Javier Viguera f67d59d7b8 meta-digi: support SRK revocation mask when signing boot artifacts
The script to sign the boot artifacts lacked the support to configure the
revocation mask. The at-the-moment supported platforms did not need it,
but the ccimx93 does need it, so implement it in this commit.

https://onedigi.atlassian.net/browse/DEL-8704

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-03-12 18:12:56 +01:00
Javier Viguera 15211c3133 trustfence-sign-artifact: implement support for ccimx93
https://onedigi.atlassian.net/browse/DEL-8704

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-03-12 12:18:59 +01:00
Javier Viguera 765fa48acc trustfence-sign-artifact: move srktool parameters to the platform data
With the introduction of the ccimx93 support in the following commits, the
srktool parameters not only differ for HAB/AHAB devices but also between
devices using AHAB (for example, different parameters for ccimx8x and
ccimx93). Thus, move this information to the platform-specific data table.

https://onedigi.atlassian.net/browse/DEL-8704

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-03-12 12:18:59 +01:00
Javier Viguera d8454cecc7 trustfence-sign-artifact: create a table for platform-specific data
It is a cosmetic change, as there is no change in functionality, but
convert the if..elif..fi structure to a table with the platform-specific
data, so it's easier to maintain and extend.

https://onedigi.atlassian.net/browse/DEL-8704

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-03-12 12:18:59 +01:00
Isaac Hermida d013c4c0b1 linux-virtualization: expand docker config extract
expand the docker defconfig excerpt to add more default options, as some
of them might be enable in some platform defconfigs but not in other ones,
so just set all of them, as it is safe, and nothing happens if they are
already set in the original default defconfig.

To check if all LXC/docker options are enabled for a kernel,
run lxc-checkconfig in the system.

https://onedigi.atlassian.net/browse/DEL-8924

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
2024-03-08 13:13:32 +01:00
Javier Viguera be04b21ecd ccimx93: add support to build FIT images
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-03-04 10:44:58 +01:00
Javier Viguera 3eed042d80 image_types_digi: restrict boot image artifacts using KERNEL_IMAGETYPE
When we use a fitImage kernel type, all the boot artifacts are inside the
FIT image, so there is no need to add them to the boot image additionally.

We were using TRUSTFENCE_FIT_IMG to do this filtering, which uses
a fitImage kernel type underneath. This commit uses KERNEL_IMAGETYPE
instead, as this way, we can use kernel FIT images out of Trustfence and
still prevent polluting the boot images with not-needed artifacts.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-03-04 10:44:58 +01:00
Javier Viguera e915a14b4b u-boot-dey: add /boot directory to the recipe sysroot
Other recipes may access SYSROOT_DIRS content by adding a dependence
on do_populate_sysroot.

We need this specific directory for the kernel fitImage support.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2024-03-04 10:44:58 +01:00
Mike Engel 9f9d016f5d ccmp1: fix the TFA naming with Trustfence enabled.
Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2024-02-29 12:56:28 +01:00
Mike Engel c66be227f6 u-boot-dey: fix generation of uuu script when Trustfence is enabled.
Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2024-02-29 12:56:28 +01:00
Arturo Buzarra 6e220fa079 digi-sc-firmware: update to v1.15.0.1
This update fixes an initialization issue with devices without HWID programmed.

https://onedigi.atlassian.net/browse/DUB-1066

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-02-27 09:30:51 +01:00
Gabriel Valcazar 148b4974a4 libubootenv: adapt patches to v0.3.5
https://onedigi.atlassian.net/browse/DEL-8885

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2024-02-26 17:18:23 +01:00
Arturo Buzarra 2a8403940d u-boot-tools: add the fdt_add_pubkey script to the list of files to be shipped
This commit fixes a build issue when this script is installed but not shipped
in the u-boot-tools package.

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-02-22 09:16:32 +01:00
Isaac Hermida ea35016831 firmware-murata: install all FW files
Not only install the US but all the FW files.
Apart of that, some scripts need a little adjustement such as:
 * Modify the BT baudrate to 3Mbps for EU power configuration, as it is the
    baudrate used by the btnxpuart driver.
 * Replace the way to reset the interface on each hcitool command to
    avoid missleading BT behaviour.

https://onedigi.atlassian.net/browse/DEL-8458

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
2024-02-21 18:00:34 +01:00
Arturo Buzarra 7c76b0c351 ccmp1: add support to sign different DDR3 configurations for U-Boot DTB
This commit implements the support to sign the different memory configurations for
the CCMP1 platforms, when trustfence is enabled, using FIT images.

https://onedigi.atlassian.net/browse/DEL-8752

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-02-21 10:42:12 +01:00
Arturo Buzarra e7d90794f8 ccmp1: support different DDR3 configurations
This commit implements the support to allow different memory configurations for
the CCMP1 platforms, adding support to 512MB and 1GB memory variants for the CCMP15.

https://onedigi.atlassian.net/browse/DEL-8752

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-02-20 15:34:58 +01:00
Arturo Buzarra 9778490a30 u-boot-dey: ccmp1: disable CMD_BOOTZ when secure boot with FIT image is enabled
Command 'bootz' allows boot unsigned Linux zImages, so disable it when secure
boot is enabled using FIT images.

https://onedigi.atlassian.net/browse/DEL-8769

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2024-02-20 14:24:16 +01:00