On Wed, May 22, 2019 at 10:05:17AM +0200, Rouven Czerwinski wrote: > From: Sascha Hauer <s.hauer@xxxxxxxxxxxxxx> > > This adds initial support for OP-TEE, see https://www.op-tee.org/ > > barebox starts in secure mode as usual. When booting a kernel > the bootm code also loads the optee_os binary. Instead of jumping > into the kernel barebox jumps into the optee_os binary and puts > the kernel execution address into the lr register. OP-TEE then > jumps into the kernel in nonsecure mode. > > The optee_os binary is passed with the -t option to bootm or > with global.bootm.tee. > > Optionally OP-TEE can be compiled into barebox using the builtin firmware > feature. Enable the Kconfig option and place or link your tee binary as > optee.bin into the firmware directory. > > The amount of SDRAM which is kept free for OP-TEE is configurable. > > This patch was tested on a i.MX6 Nitrogen6x board. > > Signed-off-by: Sascha Hauer <s.hauer@xxxxxxxxxxxxxx> > Signed-off-by: Rouven Czerwinski <r.czerwinski@xxxxxxxxxxxxxx> > --- Applied, thanks Sascha -- Pengutronix e.K. | | Industrial Linux Solutions | http://www.pengutronix.de/ | Peiner Str. 6-8, 31137 Hildesheim, Germany | Phone: +49-5121-206917-0 | Amtsgericht Hildesheim, HRA 2686 | Fax: +49-5121-206917-5555 | _______________________________________________ barebox mailing list barebox@xxxxxxxxxxxxxxxxxxx http://lists.infradead.org/mailman/listinfo/barebox
