Commit Graph

2080 Commits

Author SHA1 Message Date
Isaac Hermida 7e1b8bd65d deepview-rt: fix build error when using tensorflow version 2.10
Update binary package to match backported version of tensorflow-lite.

https://onedigi.atlassian.net/browse/DEL-8137
https://onedigi.atlassian.net/browse/DEL-8563

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2023-06-26 16:16:33 +02:00
Isaac Hermida 43ea95739a tensorflow-lite: add support for version 2.10
Backport tensorflow-lite recipes from NXP's lf-6.1.1_1.0.0 release (Langdale based)

https://onedigi.atlassian.net/browse/DEL-8137
https://onedigi.atlassian.net/browse/DEL-8563

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2023-06-26 14:48:57 +02:00
Isaac Hermida 130a5c796c ccimx93: add support for NPU dtb overlay
Load the NPU overlay based on the CPU model.

https://onedigi.atlassian.net/browse/DEL-8565
https://onedigi.atlassian.net/browse/DEL-8563

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
2023-06-22 16:03:16 +02:00
Gonzalo Ruiz 82877e9840 firmware-murata: install the FCC.CE specific hcd patch
There are two different firmware files for Bluetooth on Murata's type2AE
module:

- JRL: It configures a Bluetooth TxPower of 7dB, to be used in Japan
only.
- FCC.CE: It configures a Bluetooth TxPower of 5dB, to be used in the
rest of the world.

To comply with the FCC requirement that it should not be possible to
configure different regulatory domains, or in this case configurations,
than FCC, only deploy the FCC.CE file by default:

- BCM4373A0_FCC.CE.hcd (md5sum: 1e287a3ab7f83e59352cb321315ea80f)

This file reports the following information during boot time:

 Bluetooth: hci0: 89373 UART 37.4 MHz wlbga_BU sLNA muRata Type 2EA 5dBm 20220608-0103
 Bluetooth: hci0: BCM4373A0 (001.001.025) build 0155

JRL file will be added via the Worldwide DEY patch addon that customers
can request from Digi.

https://onedigi.atlassian.net/browse/DEL-8453

Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
2023-06-21 12:51:07 +02:00
Mike Engel 1122980ab9 trustfence: add ccimx6qp platform to the sign tool
Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2023-06-20 16:46:16 +02:00
Javier Viguera 5e3896d358 optee-os: configure build platform for ccimx93
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2023-06-20 13:58:46 +02:00
Javier Viguera 4e4151fdb3 linux-dey: add recipe for version 6.1
Also move ccimx93 compatibility to the new version.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2023-06-20 13:42:33 +02:00
Javier Viguera 63b7e03574 linux-dey: no functional change, abstract more code to include file
The only user of 'linux-dey-src.inc' was the linux recipe itself, so
instead rename that file to a more generic 'linux-dey.inc' and include
more common code in that renamed file.

This is in preparation for the new linux 6.1.1 recipe for the ccimx93.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2023-06-20 13:42:33 +02:00
Javier Viguera 0cdde6679f firmware-sentinel: update to NXP's lf-6.1.1_1.0.0 release for ccimx93
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2023-06-16 16:19:28 +02:00
Javier Viguera 2f94d466c3 firmware-imx: update to NXP's lf-6.1.1_1.0.0 release for ccimx93
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2023-06-16 16:19:28 +02:00
Javier Viguera fd2f9ea2b2 imx-atf: update to NXP's lf-6.1.1_1.0.0 release for ccimx93
Remove patch file "0001-Makefile-Suppress-array-bounds-error.patch"
for ccimx93, as it is already included in the lf-6.1.1_1.0.0 revision.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2023-06-16 16:19:28 +02:00
Javier Viguera 88d7cc0a77 imx-boot, imx-mkimage: update to NXP's lf-6.1.1_1.0.0 release for ccimx93
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2023-06-16 16:19:28 +02:00
Javier Viguera 1662950b57 optee: update to NXP's lf-6.1.1_1.0.0 release for ccimx93
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2023-06-16 16:19:28 +02:00
Francisco Gil 4bc8a8df96 weston: readonly: change default log path to /tmp/
Weston is not launched in read-only filesystem because /home/root
is not a writable path.

Signed-off-by: Francisco Gil <francisco.gilmartinez@digi.com>
2023-06-15 10:48:25 +02:00
Gonzalo Ruiz ab0209f6f5 firmware-murata: add US-only CLM blob
Replace the CLM blob file from Github, which supports several countries
with a custom US-only CLM blob file. This way, default images will only
have support for US regulatory domain, therefore complying with FCC
requirements.

The Worldwide CLM blob file will be provided by Digi International on
request.

https://onedigi.atlassian.net/browse/DEL-8453

Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
2023-06-08 17:36:11 +02:00
Francisco Gil 02f7753918 udev: dualboot: include linux_a/b to partitions to be mounted as ro
Signed-off-by: Francisco Gil <francisco.gilmartinez@digi.com>
2023-06-07 16:36:54 +02:00
Francisco Gil 8fa29e7698 libubootenv: readonly: add hardcoded configuration for readonly systems
We can't run a post installation script in a readonly file system.

We need to provide a configuration file beforehand.

https://onedigi.atlassian.net/browse/DEL-8556

Signed-off-by: Francisco Gil <francisco.gilmartinez@digi.com>
2023-06-06 13:07:37 +02:00
Francisco Gil cf5abf9c62 readonly: add default configuration for overlayfs_etc
When EXTRA_IMAGE_FEATURES += "overlayfs-etc" is added these
configurations are needed to compile. They are provided with
the default configuration to work with our software.

The user can modify them in their local.conf if needed.

https://onedigi.atlassian.net/browse/DEL-8552

Signed-off-by: Francisco Gil <francisco.gilmartinez@digi.com>
2023-06-06 13:05:51 +02:00
Francisco Gil f32c53b639 read only: add rootfs_ext for read only filesystem
When the swu package is generated it needs the right
extension of the rootfs to be formed.

https://onedigi.atlassian.net/browse/DEL-8558

Signed-off-by: Francisco Gil <francisco.gilmartinez@digi.com>
2023-06-06 13:04:21 +02:00
Gabriel Valcazar 9c4bf2e744 ccimx6: define values for BOOTABLE_FILENAME and SDIMG_BOOTLOADER
These variables are used to generate .sdcard images, and without them, said
generation will fail.

https://onedigi.atlassian.net/browse/DEL-8540

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2023-06-06 10:26:41 +02:00
Gabriel Valcazar d2ec905166 dtc: backport patch to fix gcc11 compilation error
We still need to use this downgraded version of dtc to be able to build
U-Boot v2017.03, so backport this patch to be able to build dtc with the latest
version of gcc

https://onedigi.atlassian.net/browse/DEL-8540

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2023-06-06 10:26:41 +02:00
Gabriel Valcazar c0ef35cd95 linux-dey: add support for ccimx6/ccimx6qp
Like in the ccimx6ul, don't add the flag to build device tree overlays.

https://onedigi.atlassian.net/browse/DEL-8540

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2023-06-06 10:26:41 +02:00
Arturo Buzarra a44aa6e521 ccmp15: add MCA DT overlay support
This commit modifies the boot script condition to apply the overlay for MCA
based on HWID MCA field.

https://onedigi.atlassian.net/browse/DEL-8521

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2023-05-30 11:00:30 +02:00
Javier Viguera 0ef9174760 Merge branch 'dey-4.0/maint' into dey-4.0/master
This merges back tag 'dey-4.0-r3.2' + some other fixes.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2023-05-26 11:27:34 +02:00
Mike Engel 5d263c77ec machine: swap ccmp15/13 console GPIO enable pins
This commit swaps the GPIO pin used to enable
serial console when secure console is activated.

Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2023-05-23 11:21:41 +02:00
Arturo Buzarra e679d3821d meta-digi: revert revisions to AUTOREV
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2023-05-17 15:34:53 +02:00
Arturo Buzarra 04f8e54400 meta-digi: update revisions for dey-4.0-r3.2
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2023-05-17 15:30:24 +02:00
Hector Palacios 437dd8a331 tf-a-stm32mp: add 'w' permission to signed TF-A
By default, the signing script generates a file without 'w'
permission so DEY cannot remove it from the deploy dir on
a clean operation.
Add the 'w' permission so that DEY can remove it on clean
operations and generate a new signed file when required.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2023-05-15 17:09:23 +02:00
Gabriel Valcazar 90c864b4e3 ccimx93: add BOOT_DEV_NAME and ROOTFS_DEV_NAME default values
Otherwise, the sw-description used for non-dualboot systems will be missing
these values and the software update process will fail.

https://onedigi.atlassian.net/browse/DEL-8513

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2023-05-15 14:30:37 +02:00
Gabriel Valcazar 06e472abe9 ccimx8mn-dvk: fix MACHINEOVERRIDES value
We accidentally used "mx8mm" instead of "mx8mn" in commit
9b165196bb, which caused several elements to stop
working on the target (including the optee-os).

https://onedigi.atlassian.net/browse/DEL-8512

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2023-05-15 11:42:15 +02:00
Hector Palacios ca242ba0be u-boot-dey: remove extra brackets on shell condition
Signed-off-by: Hector Palacios <hector.palacios@digi.com>

https://onedigi.atlassian.net/browse/DEL-8510
2023-05-12 13:24:37 +02:00
Arturo Buzarra e45edb7f56 meta-digi: revert revisions to AUTOREV 2023-05-11 23:10:41 +02:00
Arturo Buzarra d780711b17 meta-digi: update revisions for dey-4.0-r3.1
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2023-05-11 22:58:31 +02:00
Arturo Buzarra dc2298625d switch to building from maintenance branches for dey-4.0-r3
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2023-05-11 22:57:54 +02:00
Hector Palacios e600597024 Merge branch 'dey-4.0/master' into dey-4.0/maint
Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2023-05-11 13:19:32 +02:00
Mike Engel 4265b80402 swupdate: move sw-description configuration into common include file
Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2023-05-11 12:42:49 +02:00
Mike Engel c515187ed4 ccmp1: add secure console support
Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2023-05-11 12:42:49 +02:00
Javier Viguera e7004dcaa8 ccimx93: add MIPI display overlay
Support for DLC0200CC904DF-2 panel has been added in the kernel.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2023-05-11 11:37:30 +02:00
Hector Palacios f2da72b2eb trustfence-stm-signtools: add rdepends on nativesdk-qtbase
The tools STM32MP_KeyGen_CLI and STM32MP_SigningTool_CLI have
a dependency of libQt5Core.so.5 which is provided by qtbase.
Add this dependency to avoid errors during SDK generation.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2023-05-11 11:29:02 +02:00
Mike Engel a3af0c8597 udev: disable uSD card mounting for the CCMP1
This commit disables the uSD mounting, due to issues
detected during the boot process when UBIFS starts
with the wear-leveling process to erase NAND blocks.

https://onedigi.atlassian.net/browse/DEL-8415

Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2023-05-11 09:25:29 +02:00
Hector Palacios 32f4ba9b6d tf-a-stm32mp: obtain password to use during FIP image signing process
The FIP image is signed internally by this recipe. The password must be
set in FIP_SIGN_KEY_PASS. With the signing script, the password is
randomly generated and saved in key_pass.txt.
This prefunc obtains the password(s) from the file to set FIP_SIGN_KEY_PASS
so that the FIP can be properly signed.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2023-05-10 17:33:23 +02:00
Hector Palacios d6af2d336c tf-a-stm32mp: automate the signing of TF-A image
Add as deploy postfunc, the signing of TF-A image by calling Digi signing
script.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2023-05-10 17:33:23 +02:00
Hector Palacios fa1c877758 trustfence: image_types: do not sign artifacts for STM platforms
For the moment, do not sign aditional artifacts, such as the ramdisk,
the kernel or the boot scripts for STM platforms.

In the specific case of the ramdisk, simply copy it over with the
expected filename extension.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2023-05-10 17:33:23 +02:00
Hector Palacios 13c136dbc5 trustfence: add recipe to generate the PKI tree
Several recipes depend on the PKI creation.
Create a small recipe to just run this function which
is moved from the trustfence.bbclass.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2023-05-10 17:33:23 +02:00
Hector Palacios f6738c3cb2 trustfence: add artifacts signing script for STM platforms
This script can be called stand-alone or from DEY.
Syntax is :
  trustfence-sign-artifact.sh -p <platform> [-t input-unsigned-image> <output-signed-image>]

If files are omitted, it at least generates random keys if they do not
exist.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2023-05-10 17:33:23 +02:00
Hector Palacios 762a4a8315 u-boot-dey: split do_deploy:append to postfuncs
The do_deploy:append did three things:
- adapt the U-Boot filenames to 'u-boot-<platform>-<config>.<ext>'
- sign/encrypt the U-Boot files (only for iMX6 family)
- sign the boot scripts

Convert the first two actions into functions (the third already was) and
call them conditionally as postfuncs.
Also skip the signing of U-Boot files if the platform is not based on
iMX6 family.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2023-05-10 17:33:23 +02:00
Hector Palacios 9b165196bb global: create DIGI_SOM variable and reformulate DIGI_FAMILY variable
Certain platforms share a processor family but need to be differentiated
between them. DEY was using the variable DIGI_FAMILY as the SOM name
rather than the family. It becomes useful to have both (DIGI_SOM as the
more specific, and DIGI_FAMILY as the more generic).

This is the case, for example, of:

- ccmp1 (family)
  - ccmp15 (SOM)
  - ccmp13 (SOM)
- ccimx8m (family)
  - ccimx8mm (SOM)
  - ccimx8mn (SOM)

Both variables are used on the machine overrides.
Where DIGI_FAMILY was used, use now DIGI_SOM.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2023-05-10 17:33:23 +02:00
Hector Palacios 39dd22c471 trustfence: add recipe to install STM sign tools
This recipe downloads a tarball that contains the binaries:
- STM32MP_KeyGen_CLI
- STM32MP_SigningTool_CLI

from ST Microelectronics STM32CubeProgrammer v2.12.0.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2023-05-10 17:33:23 +02:00
Hector Palacios 1a81de2c2f trustfence-sign-tools: rename sign script with SOC vendor suffix
This is in preparation of using the same script name for different SOC
vendors (NXP and STM).

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2023-05-10 17:33:23 +02:00
Hector Palacios 74ed606339 trustfence: use conditionals for NXP-specific stuff
Set TRUSTFENCE_DEK_PATH to "0" for CCMP1 (not using dek.bin), as if this
was disabled.
Set temporarily TRUSTFENCE_ENCRYPT_ENVIRONMENT to "0" for CCMP1 until
environment encryption is fully supported.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2023-05-10 17:33:23 +02:00