mbox series

[00/11] Add support for AM62x-SK HS-FS devices

Message ID 20231129172615.1683565-1-dario.binacchi@amarulasolutions.com
Headers show
Series Add support for AM62x-SK HS-FS devices | expand

Message

Dario Binacchi Nov. 29, 2023, 5:26 p.m. UTC
The SK-AM62B-P1 is the newest version of SK-AM62which includes
high-security field-securable (HS-FS) silicon to optionally customize keys
and encryption for security applications.
This requires enabling the BR2_TARGET_TI_K3_IMAGE_GEN_SECTYPE_HS_FS option,
which, however, was buggy. This series fixes the errors and bumps the Linux
kernel and U-Boot required for such a new device.

Dario Binacchi (11):
  boot/ti-k3-core-secdev: new package
  boot/ti-k3-image-gen: manage HS hardware
  package/python-jsonschema: add host variant
  package/python-attrs: add host variant
  package/python-referencing: add host variant
  package/python-rpds-py: add host variant
  package/python-jsonschema-specifications: add host variant
  boot/ti-k3-r5-loader: set binman environment variable
  boot/uboot: set BINMAN_INDIRS for TI K3 DM
  configs/ti_am62x_sk_defconfig: bump U-Boot version to 2023.10
  configs/ti_am62x_sk_defconfig: bump Linux version to 6.6.1

 DEVELOPERS                                    |  1 +
 board/ti/am62x-sk/genimage.cfg                |  7 ++-
 board/ti/am62x-sk/post-build.sh               | 49 +++++++++++++++++++
 board/ti/am62x-sk/post-image.sh               |  5 ++
 boot/Config.in                                |  1 +
 boot/ti-k3-core-secdev/Config.in              |  9 ++++
 boot/ti-k3-core-secdev/ti-k3-core-secdev.hash |  3 ++
 boot/ti-k3-core-secdev/ti-k3-core-secdev.mk   | 19 +++++++
 boot/ti-k3-image-gen/Config.in                |  1 +
 boot/ti-k3-image-gen/ti-k3-image-gen.mk       | 16 +++++-
 boot/ti-k3-r5-loader/ti-k3-r5-loader.mk       |  1 +
 boot/uboot/uboot.mk                           |  3 +-
 configs/ti_am62x_sk_defconfig                 | 20 ++++++--
 package/Config.in.host                        |  5 ++
 package/python-attrs/Config.in.host           |  8 +++
 package/python-attrs/python-attrs.mk          |  6 +++
 .../Config.in.host                            |  7 +++
 .../python-jsonschema-specifications.mk       |  5 ++
 package/python-jsonschema/Config.in.host      |  6 +++
 .../python-jsonschema/python-jsonschema.mk    |  6 +++
 package/python-referencing/Config.in.host     |  6 +++
 .../python-referencing/python-referencing.mk  |  7 +++
 package/python-rpds-py/Config.in.host         |  8 +++
 package/python-rpds-py/python-rpds-py.mk      |  1 +
 24 files changed, 192 insertions(+), 8 deletions(-)
 create mode 100755 board/ti/am62x-sk/post-build.sh
 create mode 100755 board/ti/am62x-sk/post-image.sh
 create mode 100644 boot/ti-k3-core-secdev/Config.in
 create mode 100644 boot/ti-k3-core-secdev/ti-k3-core-secdev.hash
 create mode 100644 boot/ti-k3-core-secdev/ti-k3-core-secdev.mk
 create mode 100644 package/python-attrs/Config.in.host
 create mode 100644 package/python-jsonschema-specifications/Config.in.host
 create mode 100644 package/python-jsonschema/Config.in.host
 create mode 100644 package/python-referencing/Config.in.host
 create mode 100644 package/python-rpds-py/Config.in.host

Comments

Francois Perrad Dec. 3, 2023, 4:19 p.m. UTC | #1
Le mer. 29 nov. 2023 à 18:26, Dario Binacchi <
dario.binacchi@amarulasolutions.com> a écrit :

> The SK-AM62B-P1 is the newest version of SK-AM62which includes
> high-security field-securable (HS-FS) silicon to optionally customize keys
> and encryption for security applications.
> This requires enabling the BR2_TARGET_TI_K3_IMAGE_GEN_SECTYPE_HS_FS option,
> which, however, was buggy. This series fixes the errors and bumps the Linux
> kernel and U-Boot required for such a new device.
>
> Dario Binacchi (11):
>   boot/ti-k3-core-secdev: new package
>   boot/ti-k3-image-gen: manage HS hardware
>

These two first patches are similar to this one: [v9,07/11]
package/ti-core-secdev-k3: new package
see
https://patchwork.ozlabs.org/project/buildroot/patch/20230622160212.2063472-8-dannenberg@ti.com/

François


>   package/python-jsonschema: add host variant
>   package/python-attrs: add host variant
>   package/python-referencing: add host variant
>   package/python-rpds-py: add host variant
>   package/python-jsonschema-specifications: add host variant
>   boot/ti-k3-r5-loader: set binman environment variable
>   boot/uboot: set BINMAN_INDIRS for TI K3 DM
>   configs/ti_am62x_sk_defconfig: bump U-Boot version to 2023.10
>   configs/ti_am62x_sk_defconfig: bump Linux version to 6.6.1
>
>  DEVELOPERS                                    |  1 +
>  board/ti/am62x-sk/genimage.cfg                |  7 ++-
>  board/ti/am62x-sk/post-build.sh               | 49 +++++++++++++++++++
>  board/ti/am62x-sk/post-image.sh               |  5 ++
>  boot/Config.in                                |  1 +
>  boot/ti-k3-core-secdev/Config.in              |  9 ++++
>  boot/ti-k3-core-secdev/ti-k3-core-secdev.hash |  3 ++
>  boot/ti-k3-core-secdev/ti-k3-core-secdev.mk   | 19 +++++++
>  boot/ti-k3-image-gen/Config.in                |  1 +
>  boot/ti-k3-image-gen/ti-k3-image-gen.mk       | 16 +++++-
>  boot/ti-k3-r5-loader/ti-k3-r5-loader.mk       |  1 +
>  boot/uboot/uboot.mk                           |  3 +-
>  configs/ti_am62x_sk_defconfig                 | 20 ++++++--
>  package/Config.in.host                        |  5 ++
>  package/python-attrs/Config.in.host           |  8 +++
>  package/python-attrs/python-attrs.mk          |  6 +++
>  .../Config.in.host                            |  7 +++
>  .../python-jsonschema-specifications.mk       |  5 ++
>  package/python-jsonschema/Config.in.host      |  6 +++
>  .../python-jsonschema/python-jsonschema.mk    |  6 +++
>  package/python-referencing/Config.in.host     |  6 +++
>  .../python-referencing/python-referencing.mk  |  7 +++
>  package/python-rpds-py/Config.in.host         |  8 +++
>  package/python-rpds-py/python-rpds-py.mk      |  1 +
>  24 files changed, 192 insertions(+), 8 deletions(-)
>  create mode 100755 board/ti/am62x-sk/post-build.sh
>  create mode 100755 board/ti/am62x-sk/post-image.sh
>  create mode 100644 boot/ti-k3-core-secdev/Config.in
>  create mode 100644 boot/ti-k3-core-secdev/ti-k3-core-secdev.hash
>  create mode 100644 boot/ti-k3-core-secdev/ti-k3-core-secdev.mk
>  create mode 100644 package/python-attrs/Config.in.host
>  create mode 100644 package/python-jsonschema-specifications/Config.in.host
>  create mode 100644 package/python-jsonschema/Config.in.host
>  create mode 100644 package/python-referencing/Config.in.host
>  create mode 100644 package/python-rpds-py/Config.in.host
>
> --
> 2.43.0
>
> _______________________________________________
> buildroot mailing list
> buildroot@buildroot.org
> https://lists.buildroot.org/mailman/listinfo/buildroot
>
Dario Binacchi Dec. 11, 2023, 4:50 p.m. UTC | #2
Hi François,

On Sun, Dec 3, 2023 at 5:19 PM François Perrad <francois.perrad@gadz.org> wrote:
>
>
>
> Le mer. 29 nov. 2023 à 18:26, Dario Binacchi <dario.binacchi@amarulasolutions.com> a écrit :
>>
>> The SK-AM62B-P1 is the newest version of SK-AM62which includes
>> high-security field-securable (HS-FS) silicon to optionally customize keys
>> and encryption for security applications.
>> This requires enabling the BR2_TARGET_TI_K3_IMAGE_GEN_SECTYPE_HS_FS option,
>> which, however, was buggy. This series fixes the errors and bumps the Linux
>> kernel and U-Boot required for such a new device.
>>
>> Dario Binacchi (11):
>>   boot/ti-k3-core-secdev: new package
>>   boot/ti-k3-image-gen: manage HS hardware
>
>
> These two first patches are similar to this one: [v9,07/11] package/ti-core-secdev-k3: new package
> see https://patchwork.ozlabs.org/project/buildroot/patch/20230622160212.2063472-8-dannenberg@ti.com/
>
Could you please be more explicit?
I have read the link and have some doubts about how to proceed. The
series you pointed out hasn't been
merged, and several months have passed. It seems to me that it can no
longer be merged because,in the
meantime, a simpler series (it did not add ti-core-secdev-k3) has been
accepted. Unlike the patch you
 indicated, I have decided to add ti-core-secdev-k3 to u-boot, rather
than the package directory, as nothing
 is installed in the rootfs but only in the binary directory. I also
believe, as requested by the review, that I have
 kept the management of this package simple.
What do you think?

Thanks and regards,
Dario

> François
>
>>
>>   package/python-jsonschema: add host variant
>>   package/python-attrs: add host variant
>>   package/python-referencing: add host variant
>>   package/python-rpds-py: add host variant
>>   package/python-jsonschema-specifications: add host variant
>>   boot/ti-k3-r5-loader: set binman environment variable
>>   boot/uboot: set BINMAN_INDIRS for TI K3 DM
>>   configs/ti_am62x_sk_defconfig: bump U-Boot version to 2023.10
>>   configs/ti_am62x_sk_defconfig: bump Linux version to 6.6.1
>>
>>  DEVELOPERS                                    |  1 +
>>  board/ti/am62x-sk/genimage.cfg                |  7 ++-
>>  board/ti/am62x-sk/post-build.sh               | 49 +++++++++++++++++++
>>  board/ti/am62x-sk/post-image.sh               |  5 ++
>>  boot/Config.in                                |  1 +
>>  boot/ti-k3-core-secdev/Config.in              |  9 ++++
>>  boot/ti-k3-core-secdev/ti-k3-core-secdev.hash |  3 ++
>>  boot/ti-k3-core-secdev/ti-k3-core-secdev.mk   | 19 +++++++
>>  boot/ti-k3-image-gen/Config.in                |  1 +
>>  boot/ti-k3-image-gen/ti-k3-image-gen.mk       | 16 +++++-
>>  boot/ti-k3-r5-loader/ti-k3-r5-loader.mk       |  1 +
>>  boot/uboot/uboot.mk                           |  3 +-
>>  configs/ti_am62x_sk_defconfig                 | 20 ++++++--
>>  package/Config.in.host                        |  5 ++
>>  package/python-attrs/Config.in.host           |  8 +++
>>  package/python-attrs/python-attrs.mk          |  6 +++
>>  .../Config.in.host                            |  7 +++
>>  .../python-jsonschema-specifications.mk       |  5 ++
>>  package/python-jsonschema/Config.in.host      |  6 +++
>>  .../python-jsonschema/python-jsonschema.mk    |  6 +++
>>  package/python-referencing/Config.in.host     |  6 +++
>>  .../python-referencing/python-referencing.mk  |  7 +++
>>  package/python-rpds-py/Config.in.host         |  8 +++
>>  package/python-rpds-py/python-rpds-py.mk      |  1 +
>>  24 files changed, 192 insertions(+), 8 deletions(-)
>>  create mode 100755 board/ti/am62x-sk/post-build.sh
>>  create mode 100755 board/ti/am62x-sk/post-image.sh
>>  create mode 100644 boot/ti-k3-core-secdev/Config.in
>>  create mode 100644 boot/ti-k3-core-secdev/ti-k3-core-secdev.hash
>>  create mode 100644 boot/ti-k3-core-secdev/ti-k3-core-secdev.mk
>>  create mode 100644 package/python-attrs/Config.in.host
>>  create mode 100644 package/python-jsonschema-specifications/Config.in.host
>>  create mode 100644 package/python-jsonschema/Config.in.host
>>  create mode 100644 package/python-referencing/Config.in.host
>>  create mode 100644 package/python-rpds-py/Config.in.host
>>
>> --
>> 2.43.0
>>
>> _______________________________________________
>> buildroot mailing list
>> buildroot@buildroot.org
>> https://lists.buildroot.org/mailman/listinfo/buildroot
Francois Perrad Dec. 11, 2023, 8:28 p.m. UTC | #3
Le lun. 11 déc. 2023 à 17:50, Dario Binacchi <
dario.binacchi@amarulasolutions.com> a écrit :

> Hi François,
>
> On Sun, Dec 3, 2023 at 5:19 PM François Perrad <francois.perrad@gadz.org>
> wrote:
> >
> >
> >
> > Le mer. 29 nov. 2023 à 18:26, Dario Binacchi <
> dario.binacchi@amarulasolutions.com> a écrit :
> >>
> >> The SK-AM62B-P1 is the newest version of SK-AM62which includes
> >> high-security field-securable (HS-FS) silicon to optionally customize
> keys
> >> and encryption for security applications.
> >> This requires enabling the BR2_TARGET_TI_K3_IMAGE_GEN_SECTYPE_HS_FS
> option,
> >> which, however, was buggy. This series fixes the errors and bumps the
> Linux
> >> kernel and U-Boot required for such a new device.
> >>
> >> Dario Binacchi (11):
> >>   boot/ti-k3-core-secdev: new package
> >>   boot/ti-k3-image-gen: manage HS hardware
> >
> >
> > These two first patches are similar to this one: [v9,07/11]
> package/ti-core-secdev-k3: new package
> > see
> https://patchwork.ozlabs.org/project/buildroot/patch/20230622160212.2063472-8-dannenberg@ti.com/
> >
> Could you please be more explicit?
> I have read the link and have some doubts about how to proceed. The
> series you pointed out hasn't been
> merged, and several months have passed. It seems to me that it can no
> longer be merged because,in the
> meantime, a simpler series (it did not add ti-core-secdev-k3) has been
> accepted. Unlike the patch you
>  indicated, I have decided to add ti-core-secdev-k3 to u-boot, rather
> than the package directory, as nothing
>  is installed in the rootfs but only in the binary directory. I also
> believe, as requested by the review, that I have
>  kept the management of this package simple.
> What do you think?
>
>
previous works were partially merged (and not with the latest version)
and the support of these TI boards becomes a little mess.

so, thanks you for this series which goes ahead.

François


> Thanks and regards,
> Dario
>
> > François
> >
> >>
> >>   package/python-jsonschema: add host variant
> >>   package/python-attrs: add host variant
> >>   package/python-referencing: add host variant
> >>   package/python-rpds-py: add host variant
> >>   package/python-jsonschema-specifications: add host variant
> >>   boot/ti-k3-r5-loader: set binman environment variable
> >>   boot/uboot: set BINMAN_INDIRS for TI K3 DM
> >>   configs/ti_am62x_sk_defconfig: bump U-Boot version to 2023.10
> >>   configs/ti_am62x_sk_defconfig: bump Linux version to 6.6.1
> >>
> >>  DEVELOPERS                                    |  1 +
> >>  board/ti/am62x-sk/genimage.cfg                |  7 ++-
> >>  board/ti/am62x-sk/post-build.sh               | 49 +++++++++++++++++++
> >>  board/ti/am62x-sk/post-image.sh               |  5 ++
> >>  boot/Config.in                                |  1 +
> >>  boot/ti-k3-core-secdev/Config.in              |  9 ++++
> >>  boot/ti-k3-core-secdev/ti-k3-core-secdev.hash |  3 ++
> >>  boot/ti-k3-core-secdev/ti-k3-core-secdev.mk   | 19 +++++++
> >>  boot/ti-k3-image-gen/Config.in                |  1 +
> >>  boot/ti-k3-image-gen/ti-k3-image-gen.mk       | 16 +++++-
> >>  boot/ti-k3-r5-loader/ti-k3-r5-loader.mk       |  1 +
> >>  boot/uboot/uboot.mk                           |  3 +-
> >>  configs/ti_am62x_sk_defconfig                 | 20 ++++++--
> >>  package/Config.in.host                        |  5 ++
> >>  package/python-attrs/Config.in.host           |  8 +++
> >>  package/python-attrs/python-attrs.mk          |  6 +++
> >>  .../Config.in.host                            |  7 +++
> >>  .../python-jsonschema-specifications.mk       |  5 ++
> >>  package/python-jsonschema/Config.in.host      |  6 +++
> >>  .../python-jsonschema/python-jsonschema.mk    |  6 +++
> >>  package/python-referencing/Config.in.host     |  6 +++
> >>  .../python-referencing/python-referencing.mk  |  7 +++
> >>  package/python-rpds-py/Config.in.host         |  8 +++
> >>  package/python-rpds-py/python-rpds-py.mk      |  1 +
> >>  24 files changed, 192 insertions(+), 8 deletions(-)
> >>  create mode 100755 board/ti/am62x-sk/post-build.sh
> >>  create mode 100755 board/ti/am62x-sk/post-image.sh
> >>  create mode 100644 boot/ti-k3-core-secdev/Config.in
> >>  create mode 100644 boot/ti-k3-core-secdev/ti-k3-core-secdev.hash
> >>  create mode 100644 boot/ti-k3-core-secdev/ti-k3-core-secdev.mk
> >>  create mode 100644 package/python-attrs/Config.in.host
> >>  create mode 100644
> package/python-jsonschema-specifications/Config.in.host
> >>  create mode 100644 package/python-jsonschema/Config.in.host
> >>  create mode 100644 package/python-referencing/Config.in.host
> >>  create mode 100644 package/python-rpds-py/Config.in.host
> >>
> >> --
> >> 2.43.0
> >>
> >> _______________________________________________
> >> buildroot mailing list
> >> buildroot@buildroot.org
> >> https://lists.buildroot.org/mailman/listinfo/buildroot
>
>
>
> --
>
> Dario Binacchi
>
> Senior Embedded Linux Developer
>
> dario.binacchi@amarulasolutions.com
>
> __________________________________
>
>
> Amarula Solutions SRL
>
> Via Le Canevare 30, 31100 Treviso, Veneto, IT
>
> T. +39 042 243 5310
> info@amarulasolutions.com
>
> www.amarulasolutions.com
>