NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5084994d3f
kumquat-buildroot/package/optee-client/Config.in

45 lines
1.3 KiB
Plaintext
Raw Normal View History

package/optee-client: new package OP-TEE client API library and supplicant daemon from the OP-TEE project are packaged in package/optee-client. An init script launches the tee-supplicant deamon. Package is added to the Security menu of BR configuration. This change references in Buildroot the today's latest OP-TEE revision release tagged 3.4.0. Signed-off-by: Etienne Carriere <etienne.carriere@linaro.org> [Thomas: - remove version selection - add dependency on !BR2_STATIC_LIBS, as it unconditionally builds a shared library] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2019-01-30 11:47:24 +01:00
config BR2_PACKAGE_OPTEE_CLIENT
bool "optee-client"
package/optee-*: packages depend on thread support BR2_PACKAGE_OPTEE_CLIENT depends on BR2_TOOLCHAIN_HAS_THREADS. Library teec uses pthread support to protect clients state management. This change declares this dependency in package optee-client and updates dependent packages accordingly: optee-benchmark, optee-client, optee-examples and optee-test. Fixes [1] and [2] where config selected an toolchain without thread support and build failed with trace like: CMake Error at /home/buildroot/autobuild/run/instance-1/output/host/share/cmake-3.8/Modules/FindPackageHandleStandardArgs.cmake:137 (message): Could NOT find Threads (missing: Threads_FOUND) Call Stack (most recent call first): /home/buildroot/autobuild/run/instance-1/output/host/share/cmake-3.8/Modules/FindPackageHandleStandardArgs.cmake:377 (_FPHSA_FAILURE_MESSAGE) /home/buildroot/autobuild/run/instance-1/output/host/share/cmake-3.8/Modules/FindThreads.cmake:212 (FIND_PACKAGE_HANDLE_STANDARD_ARGS) libteec/CMakeLists.txt:8 (find_package) [1] http://autobuild.buildroot.net/results/ed6ffe2197da4f3a970bd3c5522291236396cc8e [2] http://autobuild.buildroot.net/results/406f90048db097580b626ef889823132f8676ba1 Signed-off-by: Etienne Carriere <etienne.carriere@linaro.org> [Thomas: fix dependencies of Config.in comment, as noticed by Baruch.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2019-03-07 16:45:28 +01:00
depends on BR2_TOOLCHAIN_HAS_THREADS
package/optee-client: add dependency on headers >= 4.3 Since upstream commit 5da4da99e0bb3d694e93046207ae4ce3b5545043, in 3.13.0, OP-TEE client unconditionally uses the MMC_IOC_MULTI_CMD ioctl(). But this ioctl() was only introduced in kernel 4.3, so earlier kernels did not have this definition. This was clearly known when upstream started using this ioctl. From the upstream commit 5da4da99e0bb3d694e93046207ae4ce3b5545043 commit log: As MMC_IOC_MULTI_CMD is available since linux 4.3, we should be safe to use it by default on read / write block operations. So let's propagate this dependency into Buildroot. Fixes: http://autobuild.buildroot.net/results/bd270a6793df499d5f52959e3de17f8a92d88305/ Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2021-08-02 22:09:11 +02:00
depends on BR2_TOOLCHAIN_HEADERS_AT_LEAST_4_3 # MMC_IOC_MULTI_CMD
package/optee-client: new package OP-TEE client API library and supplicant daemon from the OP-TEE project are packaged in package/optee-client. An init script launches the tee-supplicant deamon. Package is added to the Security menu of BR configuration. This change references in Buildroot the today's latest OP-TEE revision release tagged 3.4.0. Signed-off-by: Etienne Carriere <etienne.carriere@linaro.org> [Thomas: - remove version selection - add dependency on !BR2_STATIC_LIBS, as it unconditionally builds a shared library] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2019-01-30 11:47:24 +01:00
help
Enable the OP-TEE client package that brings non-secure
client application resources for OP-TEE support. OP-TEE
client is a component delivered by the OP-TEE project.
The client API library allows application to invoke trusted
applications hosted in the OP-TEE OS secure world. The
supplicant provides services hosted by the non-secure world
and invoked by the secure world.
https://github.com/OP-TEE/optee_client
package/optee-client: add option to configure TEE-based storage location OP-TEE provides the possibility of secure storage done by the normal world OS via tee-supplicant. The location is a compile-time value and by default it is /data/tee . As this might not be suitable for all use-cases add an option to set the CFG_TEE_FS_PARENT_PATH compile option. Default value is still /data/tee as it was before adding this option. Signed-off-by: Heiko Stuebner <heiko.stuebner@theobroma-systems.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-03-24 16:42:55 +01:00
if BR2_PACKAGE_OPTEE_CLIENT
config BR2_PACKAGE_OPTEE_CLIENT_TEE_FS_PATH
string "Path for normal world OS secure storage"
default "/data/tee"
help
Path to storage area for secure storage based on the
normal world OS providing the actual storage via
tee-supplicant.
package/optee-client: allow disabling RPMB emulation Add configuration switch BR2_PACKAGE_OPTEE_CLIENT_RPMB_EMU to define whether RPMB emulation is enabled or not. It is default enabled for backward compatibility. Signed-off-by: Etienne Carriere <etienne.carriere@linaro.org> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2021-10-25 09:34:58 +02:00
config BR2_PACKAGE_OPTEE_CLIENT_RPMB_EMU
bool "Enable RPMB emulation"
default y
help
Enable RPMB device emulation in tee-supplicant.
package/optee-client: remove dependency on BR2_STATIC_LIBS Restore support for BR2_STATIC_LIBS in optee-client, removed by [1] to overcome an issue introduced in OP-TEE 3.13.0 that mandates support for shared libraries. As OP-TEE expects to be functional on OSes without dynamic shared library support, change [2] was merged in OP-TEE tag 3.15.0 to fix the initial issue introducing new configuration switch CFG_TEE_SUPP_PLUGIN. When disabled, optee-client plugin support is not embedded and optee-client can built with static libraries support only. Link: [1] commit 321a850bc734 ("package/optee-client: add dependency on !BR2_STATIC_LIBS") Link: [2] https://github.com/OP-TEE/optee_client/commit/f59114370f267f0b3341870b6cf1e1c88d184b3f Signed-off-by: Etienne Carriere <etienne.carriere@linaro.org> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2021-10-25 09:34:57 +02:00
config BR2_PACKAGE_OPTEE_CLIENT_SUPP_PLUGINS
bool "Enable TEE supplicant plugins"
default y
depends on !BR2_STATIC_LIBS # dlfcn.h
help
Enable TEE supplicant plugin support.
package/optee-client: add option to configure TEE-based storage location OP-TEE provides the possibility of secure storage done by the normal world OS via tee-supplicant. The location is a compile-time value and by default it is /data/tee . As this might not be suitable for all use-cases add an option to set the CFG_TEE_FS_PARENT_PATH compile option. Default value is still /data/tee as it was before adding this option. Signed-off-by: Heiko Stuebner <heiko.stuebner@theobroma-systems.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-03-24 16:42:55 +01:00
endif
package/optee-client: remove dependency on BR2_STATIC_LIBS Restore support for BR2_STATIC_LIBS in optee-client, removed by [1] to overcome an issue introduced in OP-TEE 3.13.0 that mandates support for shared libraries. As OP-TEE expects to be functional on OSes without dynamic shared library support, change [2] was merged in OP-TEE tag 3.15.0 to fix the initial issue introducing new configuration switch CFG_TEE_SUPP_PLUGIN. When disabled, optee-client plugin support is not embedded and optee-client can built with static libraries support only. Link: [1] commit 321a850bc734 ("package/optee-client: add dependency on !BR2_STATIC_LIBS") Link: [2] https://github.com/OP-TEE/optee_client/commit/f59114370f267f0b3341870b6cf1e1c88d184b3f Signed-off-by: Etienne Carriere <etienne.carriere@linaro.org> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2021-10-25 09:34:57 +02:00
comment "optee-client needs a toolchain w/ threads, headers >= 4.3"
depends on !BR2_TOOLCHAIN_HAS_THREADS || \
package/optee-client: add dependency on headers >= 4.3 Since upstream commit 5da4da99e0bb3d694e93046207ae4ce3b5545043, in 3.13.0, OP-TEE client unconditionally uses the MMC_IOC_MULTI_CMD ioctl(). But this ioctl() was only introduced in kernel 4.3, so earlier kernels did not have this definition. This was clearly known when upstream started using this ioctl. From the upstream commit 5da4da99e0bb3d694e93046207ae4ce3b5545043 commit log: As MMC_IOC_MULTI_CMD is available since linux 4.3, we should be safe to use it by default on read / write block operations. So let's propagate this dependency into Buildroot. Fixes: http://autobuild.buildroot.net/results/bd270a6793df499d5f52959e3de17f8a92d88305/ Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2021-08-02 22:09:11 +02:00
!BR2_TOOLCHAIN_HEADERS_AT_LEAST_4_3
Reference in New Issue Copy Permalink