Skip to content

iq-9075-evk: Add support for Open Boot firmware (TF-A, OP-TEE and U-Boot) build#2145

Open
b49020 wants to merge 10 commits into
qualcomm-linux:masterfrom
b49020:lemans-evk-open-boot-fw
Open

iq-9075-evk: Add support for Open Boot firmware (TF-A, OP-TEE and U-Boot) build#2145
b49020 wants to merge 10 commits into
qualcomm-linux:masterfrom
b49020:lemans-evk-open-boot-fw

Conversation

@b49020
Copy link
Copy Markdown
Member

@b49020 b49020 commented May 8, 2026

Add OP-TEE support for Lemans EVK platform also know as iq-9075-evk. The QTISECLIB port for lemans is still work under progress. Without QTISECLIB it is able to boot OP-TEE and U-Boot but crashes in kernel due to some access permissions issues. Our end mission is to enable functional Qcom platforms without QTISECLIB only.

However, with an internal development version of QTISECLIB, Linux boot to shell with multiple cores up and xtest running successfully.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 8, 2026

Test run workflow

Test jobs for commit 0e33bc9

qcom-distro
Pass: 7 | Fail: 1 | Total: 8
qcom-distro_linux-qcom-6.18
Pass: 194 | Fail: 4 | Total: 213
nodistro
Pass: 9 | Fail: 0 | Total: 9

@test-reporting-app
Copy link
Copy Markdown

test-reporting-app Bot commented May 8, 2026

Test Results

   99 files  ±0    528 suites  ±0   6h 26m 11s ⏱️ + 6m 29s
   98 tests +1     76 ✅  - 4   1 💤 ±0  21 ❌ +5 
4 992 runs  +4  4 920 ✅  - 2  44 💤 +9  28 ❌  - 3 

For more details on these failures, see this check.

Results for commit 9f55f6b. ± Comparison against base commit f3c9be7.

♻️ This comment has been updated with latest results.

Comment thread conf/machine/rb3gen2-core-kit-open-fw.conf
Comment thread dynamic-layers/meta-arm/recipes-security/optee/optee-test_%.bbappend Outdated
Comment thread recipes-bsp/u-boot/files/tfa-optee.cfg
b49020 added 10 commits May 12, 2026 13:12
TA devkit is package coming out of OP-TEE OS build only. Since we have our own
OP-TEE OS staging repo, it makes sense for the TA devkit to be based on that
rather that meta-arm version. This avoid build problems when bumping OP-TEE OS
version.

Signed-off-by: Sumit Garg <sumit.garg@oss.qualcomm.com>
Based on OP-TEE machine feature, let's enable OP-TEE dynamic DT fixup and
corresponding driver in U-Boot. This functionality is implemented under
OP-TEE config options.

Signed-off-by: Sumit Garg <sumit.garg@oss.qualcomm.com>
Switch TF-A recipe to depend on U-Boot Qcom staging tree. TFA_UBOOT adds a
hard dependency on 'u-boot', so let's disable that and instead manually add
dependency for u-boot-qcom including the deploy task dependency.

Signed-off-by: Sumit Garg <sumit.garg@oss.qualcomm.com>
Switch the RB3Gen2 open fw machine to use U-Boot Qcom staging tree based U-Boot
recipe. UBOOT_CONFIG is already taken care off in rb3gen2-core-kit.conf, so let's
drop that.

Signed-off-by: Sumit Garg <sumit.garg@oss.qualcomm.com>
Bump to the latest OP-TEE OS staging tree tag: qcom-next-4.10-20260507.

Signed-off-by: Sumit Garg <sumit.garg@oss.qualcomm.com>
Bump to latest TF-A staging tree tag: qcom-next-2.14-20260507, along with that
add the missing license file checksum.

Signed-off-by: Sumit Garg <sumit.garg@oss.qualcomm.com>
Add OP-TEE support for Lemans EVK platform also know as iq-9075-evk.

Signed-off-by: Sumit Garg <sumit.garg@oss.qualcomm.com>
Add TF-A support for Lemans EVK platform also know as iq-9075-evk. The
QTISECLIB port for lemans is still work under progress. Without QTISECLIB
it is able to boot OP-TEE and U-Boot but crashes in kernel due to some
access permissions issues. Our end mission is to enable functional Qcom
platforms without QTISECLIB only.

However, with an internal development version of QTISECLIB, Linux boot to
shell with multiple cores up and xtest running successfully.

Signed-off-by: Sumit Garg <sumit.garg@oss.qualcomm.com>
Add support for iq-9075-evk to be based on open boot firmware stack using
TF-A, OP-TEE and U-Boot as the boot firmware stack.

Signed-off-by: Sumit Garg <sumit.garg@oss.qualcomm.com>
Add CI build support for iq-9075-evk-open-fw machine.

Signed-off-by: Sumit Garg <sumit.garg@oss.qualcomm.com>
@b49020 b49020 force-pushed the lemans-evk-open-boot-fw branch from 0e33bc9 to 9f55f6b Compare May 12, 2026 07:43
@github-actions
Copy link
Copy Markdown

Test run workflow

Test jobs for commit 9f55f6b

qcom-distro
Pass: 206 | Fail: 2 | Total: 226
qcom-distro_linux-qcom-6.18
Pass: 180 | Fail: 2 | Total: 204
nodistro
Pass: 9 | Fail: 0 | Total: 9

@ricardosalveti
Copy link
Copy Markdown
Contributor

The QTISECLIB port for lemans is still work under progress.

I would prefer to wait for the qtiseclib release, but I know that it might still take more time, so OK to merge it now as it will at least help folks using this environment for validating the open boot stack.


SUMMARY = "OP-TEE Trusted OS TA devkit"
DESCRIPTION = "OP-TEE TA devkit for build TAs"
HOMEPAGE = "https://www.op-tee.org/"
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

For the followup: please extract the common include file for tadevkit in meta-arm and use it here.

# Enables support for TF-A based OP-TEE as the open
# source TrustZone stack on Qcom platforms
CONFIG_TEE=y
CONFIG_OPTEE=y
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we enable these two unconditionally for Qcom platforms?

COMPATIBLE_MACHINE:qcm6490 = "qcm6490"
TFA_PLATFORM:qcm6490 = "rb3gen2"

TFA_UBOOT ?= "1"
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

For the followup: plese make TFA_UBOOT accept configurable U-Boot package name.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants