https://github.com/l-krstic/optee-examples-yocto
This repo contains files for OP-TEE user application integration, in Embedded Linux development for Yocto distribution.
https://github.com/l-krstic/optee-examples-yocto
arm arm64 cybersecurity embedded embedded-linux imx8 imx8mm linux-kernel optee sec security trustzone trustzone-kernel yocto
Last synced: 3 months ago
JSON representation
This repo contains files for OP-TEE user application integration, in Embedded Linux development for Yocto distribution.
- Host: GitHub
- URL: https://github.com/l-krstic/optee-examples-yocto
- Owner: l-krstic
- License: gpl-2.0
- Created: 2024-02-04T15:22:49.000Z (over 1 year ago)
- Default Branch: main
- Last Pushed: 2024-03-01T20:31:50.000Z (over 1 year ago)
- Last Synced: 2025-01-22T16:23:37.043Z (5 months ago)
- Topics: arm, arm64, cybersecurity, embedded, embedded-linux, imx8, imx8mm, linux-kernel, optee, sec, security, trustzone, trustzone-kernel, yocto
- Language: Shell
- Homepage:
- Size: 34.2 KB
- Stars: 1
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# optee-examples-yocto
· Project is being done on i.MX8M Mini. Yocto version is
Hardknott 5.10.72. Host system is running Ubuntu 20.04, together
with Linux kernel 5.15.
· Required changes in conf/local.conf are:
```text
TEE_CFG_DDR_SIZE = "0x80000000"
DISTRO_FEATURES_append += " systemd"
DISTRO_FEATURES_BACKFILL_CONSIDERED += "sysvinit"
VIRTUAL-RUNTIME_init_manager = "systemd"
VIRTUAL-RUNTIME_initscripts = "systemd-compat-units"
MACHINE_FEATURES:append = " optee"
DISTRO_FEATURES:append = " optee"
IMAGE_INSTALL:append = " \
optee-os \
optee-client \
optee-test \
optee-examples \
"
```
· After creating your own layer, add it in conf/bblayers.conf,
and copy all files from meta-master/
· This layer contains .bbappend file for optee-os, together with patch
that bypass python module errors in script sign_encrypt.py.
· Also, this layer contains optee-examples recipe, and files required to
build it. This recipe also requires a patch, that passes ldflags during
linking phase.
1. **optee-examples_3.11.0.bb** with **optee-examples.inc** is recipe that builds
examples from git.
2. **optee.inc** is used for setting up build system of optee-examples.
3. **optee-examples_%.bbappend** is used when someone wants to build application,
beside those on git.
· Update path to external sources, according to your system, in file
**optee-examples_%.bbappend** !
# IMPORTANT
When building examples, ther are signed using [default key](https://github.com/OP-TEE/optee_os/tree/master):
```text
optee-os/keys/default_ta.pem
```
**NEVER deploy an optee_os binary with this key in production. Instead, REPLACE
this key as soon as possible with a public key and keep the private part of
the key offline, preferably on an HSM.**