[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Xen-devel] [PATCH v3 00/11] TEE mediator (and OP-TEE) support in XEN

From: Volodymyr Babchuk <vlad.babchuk@xxxxxxxxx>

Hello all,

Sorry for late submussion. I was busy with other projects.

Global changes from v2:

 - Use domain flags insted of domctl interface to enable optee for guests
 - Remove patch "libxc: add xc_dom_tee_enable(...) function" because
   of previous change
 - Mediator now stores own context in arch part of struct domain, so
   I removed patch "optee: add domain contexts"

Per-patch changes are described in corresponding emails.


This is v2 of patch series for OP-TEE mediator support in XEN. Changes from v1:

 - Added domctl interface, so now xl decides what domain should work with TEE
 - Removed XSM support due to change described above
 - Patch with OP-TEE mediator was splited to 7 separate patches
 - Removed patch with call_smccc() function. Now this series depend on
   Julien Grall's series "xen/arm: SMCCC fixup and improvement" [3]


This is follow for patch series [1]. There was lots of discussions
for that series and I tried to address all of them in this new patchset.

Currently, I had a working solution for OP-TEE virtualization and it is being
upstreamed right now ([2]). So, I think it is a good time to introduce support
in XEN as well.

This series include generic TEE mediator framework and full-scale OP-TEE 
which is working with mentioned chages in OP-TEE. So, multiple domains can
work simultaneously with OP-TEE.

I added XSM support, so now it is possible to control which domains can work
with TEEs. Also I changed way how TEE discovery is done. Now  it is very
generic and should support any platform.

[1] https://lists.xenproject.org/archives/html/xen-devel/2017-10/msg01451.html
[2] https://github.com/OP-TEE/optee_os/pull/2370
[3] https://lists.xenproject.org/archives/html/xen-devel/2018-08/msg02138.html

Volodymyr Babchuk (11):
  arm: add generic TEE mediator framework
  arm: add tee_enabled flag to xen_arch_domainconfig
  arm: tee: add OP-TEE header files
  optee: add OP-TEE mediator skeleton
  optee: add fast calls handling
  optee: add std call handling
  optee: add support for RPC SHM buffers
  optee: add support for arbitrary shared memory
  optee: add support for RPC commands
  xl: add "tee" option for xl.cfg
  libxl: arm: create optee firmware node in DT if tee=1

 MAINTAINERS                         |    6 +
 docs/man/xl.cfg.pod.5.in            |   10 +
 tools/libxl/libxl_arm.c             |   31 +
 tools/libxl/libxl_create.c          |    1 +
 tools/libxl/libxl_types.idl         |    1 +
 tools/xl/xl_parse.c                 |    1 +
 xen/arch/arm/Kconfig                |    9 +
 xen/arch/arm/Makefile               |    1 +
 xen/arch/arm/domain.c               |    8 +
 xen/arch/arm/domain_build.c         |    4 +
 xen/arch/arm/domctl.c               |    1 +
 xen/arch/arm/setup.c                |    1 +
 xen/arch/arm/shutdown.c             |    1 +
 xen/arch/arm/tee/Kconfig            |    4 +
 xen/arch/arm/tee/Makefile           |    2 +
 xen/arch/arm/tee/optee.c            | 1054 +++++++++++++++++++++++++++
 xen/arch/arm/tee/tee.c              |   69 ++
 xen/arch/arm/vsmc.c                 |    5 +
 xen/arch/arm/xen.lds.S              |    7 +
 xen/include/asm-arm/domain.h        |    3 +
 xen/include/asm-arm/tee/optee_msg.h |  444 +++++++++++
 xen/include/asm-arm/tee/optee_smc.h |  507 +++++++++++++
 xen/include/asm-arm/tee/tee.h       |   91 +++
 xen/include/public/arch-arm.h       |    3 +
 24 files changed, 2264 insertions(+)
 create mode 100644 xen/arch/arm/tee/Kconfig
 create mode 100644 xen/arch/arm/tee/Makefile
 create mode 100644 xen/arch/arm/tee/optee.c
 create mode 100644 xen/arch/arm/tee/tee.c
 create mode 100644 xen/include/asm-arm/tee/optee_msg.h
 create mode 100644 xen/include/asm-arm/tee/optee_smc.h
 create mode 100644 xen/include/asm-arm/tee/tee.h


Xen-devel mailing list



Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.