On 10/4/21 9:57 AM, Patrick DELAUNAY wrote:
Hi,
=> if OPTEE is loaded after SPL the U-Boot configuration change (running in secure world or not)
I am starting to work on these issues in the branch
https://github.com/u-boot/u-boot/compare/master...patrickdelaunay:spl_optee_... https://github.com/u-boot/u-boot/commit/04ad553e9c6bee62781460d2952df4962e58... https://github.com/u-boot/u-boot/commit/aebb687a1557590bf070cf5d3478544ffff2...
But it is still not working, OP-TEE is not correctly started
What do you mean by "OP-TEE is not correctly started". Here's the .its that I use for my FIT image. I hope this will be helpful.
/dts-v1/ ;/ { description = "U-Boot fitImage for stm32mp1"; #address-cells = <1>; images { optee-1 { description = "OP-TEE secure world firmware"; data = /incbin/("firmware/tee.bin"); type = "tee"; arch = "arm"; os = "tee"; compression = "none"; load = <0xddffffe4>; entry = <0xde000000>; hash-1 { algo = "sha256"; }; }; kernel-1 { description = "Linux kernel"; data = /incbin/("kernel/zImage"); type = "kernel"; arch = "arm"; os = "linux"; compression = "none"; load = <0xc2000040>; entry = <0xc2000040>; hash-1 { algo = "sha256"; }; }; fdt-stm32mp157c-ev1.dtb { description = "Flattened Device Tree blob"; data = /incbin/("kernel/stm32mp157c-ev1.dtb"); type = "flat_dt"; arch = "arm"; compression = "none"; hash-1 { algo = "sha256"; }; }; fdt-stm32mp157c-dk2.dtb { description = "Flattened Device Tree blob"; data = /incbin/("kernel/stm32mp157c-dk2.dtb"); type = "flat_dt"; arch = "arm"; compression = "none"; hash-1 { algo = "sha256"; }; }; fdt-dk2-optee.dto { description = "Flattened Device Tree blob"; data = /incbin/("firmware/dk2-optee.dto"); type = "flat_dt"; arch = "arm"; compression = "none"; hash-1 { algo = "sha256"; }; }; fdt-dk2-can1-enable.dto { description = "Flattened Device Tree blob"; data = /incbin/("firmware/dk2-can1-enable.dto"); type = "flat_dt"; arch = "arm"; compression = "none"; hash-1 { algo = "sha256"; }; }; fdt-bootargs.dto { description = "Flattened Device Tree blob"; data = /incbin/("firmware/bootargs.dto"); type = "flat_dt"; arch = "arm"; compression = "none"; hash-1 { algo = "sha256"; }; }; }; configurations { default = "secure-stm32mp157c-ev1.dtb"; secure-stm32mp157c-ev1.dtb { description = "Linux with OP-TEE for stm32mp157c-ev1.dtb"; kernel = "optee-1"; fdt = "fdt-stm32mp157c-ev1.dtb", "fdt-bootargs.dto"; loadables = "kernel-1"; hash-1 { algo = "sha256"; }; }; secure-stm32mp157c-dk2.dtb { description = "Linux with OP-TEE for stm32mp157c-dk2.dtb"; kernel = "optee-1"; fdt = "fdt-stm32mp157c-dk2.dtb", "fdt-bootargs.dto", "fdt-dk2-can1-enable.dto", "fdt-dk2-optee.dto"; loadables = "kernel-1"; hash-1 { algo = "sha256"; }; }; }; };