On Wed, Nov 04, 2015 at 02:33:26PM +0000, Yehuda Yitschak wrote:
Yes. ArmPlatformPkg/Sec/Sec.c should cover everything you need, although I must stress that a) this code is unused and thus untested, and b) it is not the recommended approach.
Thanks, I will use the Sec as an intermediate solution.
What is the suggested approach? using ATF together with EDK2 ?
Yes.
I'm just a bit worried about the flow of generating a boot image. It looks like it would require constantly syncing ATF binaries into EDK2 source. It might not be a real issue if you actually load edk2 from flash but if you compile them together .... im not sure.
It's not necessarily that bad. You can have a look at the helper scripts in Linaro's UEFI-tools: https://git.linaro.org/uefi/uefi-tools.git
I use these both for development and for our binary releases, and for platforms using ATF it builds ATF and wraps the UEFI .fd into the ".fip" format consumed by ATF.
Just specify the path to your ATF checkout on the command line with -a <path>.
Isn’t there an intention to make EDK2 a full solution (secure monitor + FW) for ARM platforms ?
I'm not even sure that is possible. Certainly, ATF needs to support additional firmware solutions to UEFI.
/ Leif