How to build trusted Apps for imx6ulevk

[asmaa]

Hi, 

I have imx6ulevk evaluation kit. I have followed i.MX Yocto Project User's Guide, Rev. L4.14.88-2.0.0_ga to setup build and I have also enabled optee in it. After the build is done I get tee.bin file and kernel is up and running fine. 

Now I want to build trsuted Apps for use. I dont understand how to start with.

 I have read Optee documentation, it says:

To build optee examples ,you must build optee_os as well as optee_client first.

- I already have optee_os and optee_client as bb recipe but not examples.

So how do I download optee-examples and build trusted applications.

I want to build it in yocto build itself. Please reply me on how can I implement it?

Regards,

Asma

[aminul]

Hi asmaa@questps.com.au‌

I think your starting point should be adding a new 'meta' under 'source' directory of Yocto.

You can add it like below link.

https://git.linaro.org/openembedded/meta-linaro.git/tree/meta-optee

I did not do it by myself, but another person did the build of optee with Yocto.  Please try with the 'meta-optee'. 

[asmaa]

Hi aminul@xped.com‌,

Thank you for reply. I dont find meta-optee, but can I find bb recepies under meta-fsl-bsp-receipies/im/meta-bsp/recipes-security/optee-imx.

Now my question is I have build trusted application as explained in optee documentation. pinpad_ta.c and pinpad_ta.h and Makefile. Now where shall I put them in the directory and how shall I build it along with imx6ulevk code?

Thanks,

Asma

[aminul · Accepted solution]

hi asmaa@questps.com.au‌

in my case the optee example code is located at 

~/yocto_fresh/bld-xwayland/tmp/work/imx7dsabresd-poky-linux-gnueabi/optee-examples/1.0-r0/git

"ls" command shows below files and directories.
aes Android.mk CMakeLists.txt CMakeToolchain.txt docs hello_world hotp LICENSE Makefile out random README.md

I build using command

$ bitbake optee-examples

This build command builds all optee examples 

Hope it helps.

[asmaa]

Yes that is right I found the other day. thank you so much.

[gusarambula]

Hello Asma,

You can find examples using op-teee as part of the Op-Tee documentation that may be useful:
https://optee.readthedocs.io/building/gits/optee_examples/optee_examples.html

Additionally, the NXP BSP Release has a test suite available on the imx-optee-test package. You can see the readme for this suite on the 4.14.98_2.0 BSP Release on the link below:
https://source.codeaurora.org/external/imx/imx-optee-test/tree/README.md?h=imx_4.14.98_2.0.0_ga

I hope this helps,
Regards,

[asmaa]

Thank you gusarambula‌ for reply.

I have read the first link and build examples as well. I explains you How you can make standalone examples .

Second link doesnt help me much as it describes about xtest but not about how to make trusted application in yocto build.

If you can help me with how can I make TA's in yocto buid that would be more useful.

Regards,

Asma

[aminul]

Hi Asma,

Here is some instructions to enable Optee in IMX build

https://www.nxp.com/docs/en/user-guide/i.MX_Yocto_Project_User's_Guide_Linux.pdf

But I think this is not complete guide to do that.

[asmaa]

Thank you aminul@xped.com‌ for reply.

I have already mentioned, I have enabled OPTEE. I am asking for how to make Trusted Applications after enabling OPTEE.

Where to start and how to compile in yocto.

Can someone please help me