• （三）正点原子STM32MP135移植——optee移植

    一、概述

    OP-TEE 是一个开源工程，完整的实现了一个可信执行环境。 主要包括 Secure world OS（optee_os）、normal world client（optee_client）、test suite（optee_test/xtest）以及 Linux 驱动部分。

    OP-TEE 的全称是 Open-source Portable Trusted Execution Environment，其中 TEE（可信执行环境）是基于 trustzone 技术搭建的安全执行环境。该项目最初由意法半导体（ST）和爱立信发起，是一个专门的解决方案，后来由意法半导体拥有和维护。2014年，Linaro 开始与意法半导体合作，逐步将这个专有的 TEE 解决方案转换成一个开源的 TEE 解决方案。

    ARM 公司提出的 trustzone 技术是用一根安全总线（称为 NS 位）来判断系统当前处于 secure world 还是 non-secure world 状态，状态的切换由 ATF（ARM Trusted Firmware）来完成。

    二、编译官方代码

            进入到optee的目录，里面有这几个文件

    1.optee-os-stm32mp-3.19.0-stm32mp-r1-r0.tar.xz        源码压缩包

    2.fonts.tar.gz                                                                   老实讲我不知道这是啥

    3.Makefile.sdk

    4.README.HOW_TO.txt                                                官方给的使用说明

    5.series

    6.0001-3.19.0-stm32mp-r1.patch                                        补丁

    2.1 解压源码 、打补丁

    1. /* 解压源码 */
    2. tar xf optee-os-stm32mp-3.19.0-stm32mp-r1-r0.tar.xz 
    3.  
    4. /* 进入源码目录 */
    5. cd cd optee-os-stm32mp-3.19.0-stm32mp-r1/
    6.  
    7. /* 解压不知名文件 */
    8. tar xf ../fonts.tar.gz
    9.  
    10. /* 打补丁 */
    11. for p in `ls -1 ../*.patch`; do patch -p1 < $p; done

    2.2 修改Makefile.sdk

            打开Makefile.sdk，把DEPLOYDIR目录改成这个：

    DEPLOYDIR ?= $(SRC_PATH)/../../FIP_artifacts/optee

            再把设备树改成这个：

    CFG_EMBED_DTB_SOURCE_FILE ?= stm32mp135f-dk

    2.3 配置编译环境

    1. /* 加载环境 */
    2. source /opt/st/stm32mp1/4.2.1-openstlinux-6.1-yocto-mickledore-mp1-v23.06.21/environment-setup-cortexa7t2hf-neon-vfpv4-ostl-linux-gnueabi
    3.  
    4. /* 配置环境变量 */
    5. export FIP_DEPLOYDIR_ROOT=$PWD/../../FIP_artifacts

    不要关了这个终端，它已经配置好了，关于这部分的配置，可以看上一篇关于TF-A的解释比较详细。

    2.4 编译

    make -f ../Makefile.sdk all

    最后提示我们：Missing u-boot-stm32mp135f-dk.dtb file in folder: '$FIP_DEPLOYDIR_UBOOT' or '$FIP_DEPLOYDIR_ROOT/u-boot'

    没有关系，这是因为还没有编译u-boot，optee、TF-A、u-boot最后会一起打包的，忽视这个警告即可

    三、移植

    3.1 复制官方文件

    1. /* 进入设备树目录 */
    2. cd core/arch/arm/dts/
    3.  
    4. /* 复制文件 */
    5. cp stm32mp13-pinctrl.dtsi stm32mp13-pinctrl-atk.dtsi
    6. cp stm32mp135f-dk.dts stm32mp135-atk.dts

    打开stm32mp135-atk.dts文件，第一件事先把头文件修改了

    1. // #include "stm32mp13-pinctrl.dtsi"
    2. #include "stm32mp13-pinctrl-atk.dtsi"

    3.2 修改电源

    这里和TF-A基本移植，删掉i2c4节点，然后增加我们自己的电源描述

    首先找到i2c4这个节点，不要犹豫，把它全都删了，干干净净

    1. &i2c4 {
    2. 	pinctrl-names = "default";
    3. 	pinctrl-0 = <&i2c4_pins_a>;
    4. 	i2c-scl-rising-time-ns = <185>;
    5. 	i2c-scl-falling-time-ns = <20>;
    6. 	clock-frequency = <400000>;
    7. 	status = "okay";
    8.  
    9. 	pmic: stpmic@33 {
    10. 		compatible = "st,stpmic1";
    11. 		reg = <0x33>;
    12. 		status = "okay";
    13. 		st,wakeup-pin-number = <1>;
    14. 		st,notif-it-id = <0>;
    15.  
    16. 		regulators {
    17. 			compatible = "st,stpmic1-regulators";
    18. 			buck1-supply = <&vin>;
    19. 			buck2-supply = <&vin>;
    20. 			buck3-supply = <&vin>;
    21. 			buck4-supply = <&vin>;
    22. 			ldo1-supply = <&vin>;
    23. 			ldo4-supply = <&vin>;
    24. 			ldo5-supply = <&vin>;
    25. 			ldo6-supply = <&vin>;
    26. 			vref_ddr-supply = <&vin>;
    27. 			pwr_sw1-supply = <&bst_out>;
    28. 			pwr_sw2-supply = <&v3v3_ao>;
    29.  
    30. 			vddcpu: buck1 {
    31. 				regulator-name = "vddcpu";
    32. 				regulator-min-microvolt = <1250000>;
    33. 				regulator-max-microvolt = <1350000>;
    34. 				regulator-always-on;
    35. 				regulator-over-current-protection;
    36.  
    37. 				lp-stop {
    38. 					regulator-suspend-microvolt = <1250000>;
    39. 				};
    40. 				lplv-stop {
    41. 					regulator-suspend-microvolt = <900000>;
    42. 				};
    43. 				lplv-stop2 {
    44. 					regulator-off-in-suspend;
    45. 				};
    46. 				standby-ddr-sr {
    47. 					regulator-off-in-suspend;
    48. 				};
    49. 				standby-ddr-off {
    50. 					regulator-off-in-suspend;
    51. 				};
    52. 			};
    53.  
    54. 			vdd_ddr: buck2 {
    55. 				regulator-name = "vdd_ddr";
    56. 				regulator-min-microvolt = <1350000>;
    57. 				regulator-max-microvolt = <1350000>;
    58. 				regulator-always-on;
    59. 				regulator-over-current-protection;
    60.  
    61. 				standby-ddr-off {
    62. 					regulator-off-in-suspend;
    63. 				};
    64. 			};
    65.  
    66. 			vdd: buck3 {
    67. 				regulator-name = "vdd";
    68. 				regulator-min-microvolt = <3300000>;
    69. 				regulator-max-microvolt = <3300000>;
    70. 				regulator-always-on;
    71. 				st,mask-reset;
    72. 				regulator-over-current-protection;
    73. 			};
    74.  
    75. 			vddcore: buck4 {
    76. 				regulator-name = "vddcore";
    77. 				regulator-min-microvolt = <1250000>;
    78. 				regulator-max-microvolt = <1250000>;
    79. 				regulator-always-on;
    80. 				regulator-over-current-protection;
    81.  
    82. 				lplv-stop {
    83. 					regulator-suspend-microvolt = <900000>;
    84. 				};
    85. 				lplv-stop2 {
    86. 					regulator-suspend-microvolt = <900000>;
    87. 				};
    88. 				standby-ddr-sr {
    89. 					regulator-off-in-suspend;
    90. 				};
    91. 				standby-ddr-off {
    92. 					regulator-off-in-suspend;
    93. 				};
    94. 			};
    95.  
    96. 			vdd_adc: ldo1 {
    97. 				regulator-name = "vdd_adc";
    98. 				regulator-min-microvolt = <3300000>;
    99. 				regulator-max-microvolt = <3300000>;
    100.  
    101. 				standby-ddr-sr {
    102. 					regulator-off-in-suspend;
    103. 				};
    104. 				standby-ddr-off {
    105. 					regulator-off-in-suspend;
    106. 				};
    107. 			};
    108.  
    109. 			unused1: ldo2 {
    110. 				regulator-name = "ldo2";
    111. 			};
    112.  
    113. 			unused2: ldo3 {
    114. 				regulator-name = "ldo3";
    115. 			};
    116.  
    117. 			vdd_usb: ldo4 {
    118. 				regulator-name = "vdd_usb";
    119. 				regulator-min-microvolt = <3300000>;
    120. 				regulator-max-microvolt = <3300000>;
    121.  
    122. 				standby-ddr-sr {
    123. 					regulator-off-in-suspend;
    124. 				};
    125. 				standby-ddr-off {
    126. 					regulator-off-in-suspend;
    127. 				};
    128. 			};
    129.  
    130. 			vdd_sd: ldo5 {
    131. 				regulator-name = "vdd_sd";
    132. 				regulator-min-microvolt = <3300000>;
    133. 				regulator-max-microvolt = <3300000>;
    134. 				regulator-boot-on;
    135.  
    136. 				standby-ddr-sr {
    137. 					regulator-off-in-suspend;
    138. 				};
    139. 				standby-ddr-off {
    140. 					regulator-off-in-suspend;
    141. 				};
    142. 			};
    143.  
    144. 			v1v8_periph: ldo6 {
    145. 				regulator-name = "v1v8_periph";
    146. 				regulator-min-microvolt = <1800000>;
    147. 				regulator-max-microvolt = <1800000>;
    148.  
    149. 				standby-ddr-sr {
    150. 					regulator-off-in-suspend;
    151. 				};
    152. 				standby-ddr-off {
    153. 					regulator-off-in-suspend;
    154. 				};
    155. 			};
    156.  
    157. 			vref_ddr: vref_ddr {
    158. 				regulator-name = "vref_ddr";
    159. 				regulator-always-on;
    160.  
    161. 				standby-ddr-sr {
    162. 					regulator-off-in-suspend;
    163. 				};
    164. 				standby-ddr-off {
    165. 					regulator-off-in-suspend;
    166. 				};
    167. 			};
    168.  
    169. 			bst_out: boost {
    170. 				regulator-name = "bst_out";
    171. 			};
    172.  
    173. 			v3v3_sw: pwr_sw2 {
    174. 				regulator-name = "v3v3_sw";
    175. 				regulator-active-discharge = <1>;
    176. 				regulator-min-microvolt = <3300000>;
    177. 				regulator-max-microvolt = <3300000>;
    178. 			};
    179. 		};
    180. 	};
    181. };

    再找到scmi_regu节点，不要犹豫，删他个干净

    1. &scmi_regu {
    2. 	scmi_vddcpu: voltd-vddcpu {
    3. 		reg = ;
    4. 		voltd-supply = <&vddcpu>;
    5. 	};
    6. 	scmi_vdd: voltd-vdd {
    7. 		reg = ;
    8. 		voltd-supply = <&vdd>;
    9. 	};
    10. 	scmi_vddcore: voltd-vddcore {
    11. 		reg = ;
    12. 		voltd-supply = <&vddcore>;
    13. 	};
    14. 	scmi_vdd_adc: voltd-vdd_adc {
    15. 		reg = ;
    16. 		voltd-supply = <&vdd_adc>;
    17. 	};
    18. 	scmi_vdd_usb: voltd-vdd_usb {
    19. 		reg = ;
    20. 		voltd-supply = <&vdd_usb>;
    21. 	};
    22. 	scmi_vdd_sd: voltd-vdd_sd {
    23. 		reg = ;
    24. 		voltd-supply = <&vdd_sd>;
    25. 	};
    26. 	scmi_v1v8_periph: voltd-v1v8_periph {
    27. 		reg = ;
    28. 		voltd-supply = <&v1v8_periph>;
    29. 	};
    30. 	scmi_v3v3_sw: voltd-v3v3_sw {
    31. 		reg = ;
    32. 		voltd-supply = <&v3v3_sw>;
    33. 	};
    34. };

    然后再根节点下面，vin:vin节点后面或者随便哪里，添加我们的电源，至于哪个vin和v3v3_ao要不要应该无所谓把，笔者已经把它删了

    1. vddcore: vddcore {
    2.         compatible = "regulator-fixed";
    3.         regulator-name = "vddcore";
    4.         regulator-min-microvolt = <1250000>;
    5.         regulator-max-microvolt = <1250000>;
    6.         regulator-off-in-suspend;
    7.         regulator-always-on;
    8. 	};
    9.  
    10. 	vddcpu: vddcpu {
    11. 		compatible = "regulator-fixed";
    12. 		regulator-name = "vddcpu";
    13. 		regulator-min-microvolt = <1350000>;
    14. 		regulator-max-microvolt = <1350000>;
    15.         regulator-off-in-suspend;
    16.         regulator-always-on;
    17. 	};	
    18. 	
    19. 	v3v3: v3v3 {
    20.         compatible = "regulator-fixed";
    21.         regulator-name = "v3v3";
    22.         regulator-min-microvolt = <3300000>;
    23.         regulator-max-microvolt = <3300000>;
    24.         regulator-off-in-suspend;
    25.         regulator-always-on;
    26.     };
    27.  
    28. 	vdd: vdd {
    29.         compatible = "regulator-fixed";
    30.         regulator-name = "vdd";
    31.         regulator-min-microvolt = <3300000>;
    32.         regulator-max-microvolt = <3300000>;
    33.         regulator-off-in-suspend;
    34.         regulator-always-on;
    35.     };
    36.  
    37. 	vdd_usb: vdd_usb {
    38.         compatible = "regulator-fixed";
    39.         regulator-name = "vdd_usb";
    40.         regulator-min-microvolt = <3300000>;
    41.         regulator-max-microvolt = <3300000>;
    42.         regulator-off-in-suspend;
    43.         regulator-always-on;
    44.     };

    3.3 删除其它

            usart1节点、wakeup_pin_5、tamp节点、ltdc节点、gpiob、gpiod、gpioe、gpioi，

    以及aliases节点下的serial1=&usart1。这些都可以删掉，不删掉应该也不大关系。然后根节点下model和compatible可以改成我们自己的板子的信息。

    3.4 追加hse

            在末尾追加一个节点

    1. &clk_hse {
    2. 	st,digbypass;
    3. };

    3.5 stm32mp13-pinctrl-atk.dtsi

            这个文件改不改都行，笔者直接不改也能跑，要改的话只剩一个usart4的就可以了

    四、编译

            先去Makefile.sdk里面，把设备树改成我们的板子

    CFG_EMBED_DTB_SOURCE_FILE ?= stm32mp135-atk

             还记得刚才打开没关闭的终端吗？如果关了，那就要重新设置环境变量了哦！回到2.3节的第二步，重新把环境变量设置好，然后编译

    make -f ../Makefile.sdk all

            可以看到 FIP_artifacts/optee多了三个文件：

    1.tee-header_v2-stm32mp135-atk.bin

    2.tee-pageable_v2-stm32mp135-atk.bin

    3.tee-pager_v2-stm32mp135-atk.bin

  • 相关阅读:
    一文搞懂数据仓库分层模型
    按字典序排序还是按长度排序
    12、FPGA程序的固化和下载
    Midjourney提示词-十二生肖唐装系列-2
    利用亚马逊 云服务器 EC2 和S3免费套餐搭建私人网盘
    企业架构LNMP学习笔记33
    基于Android和SSH的旅游自助系统APP设计
    Docker 自动化部署（实践）
    数据结构之线性表
    Oracle数据库使用PLSQL-Developer15导出导入Excel文件
  • 原文地址：https://blog.csdn.net/qq_42697289/article/details/133562637