Patrick Georgi | c49d7a3 | 2020-05-08 22:50:46 +0200 | [diff] [blame] | 1 | ## SPDX-License-Identifier: GPL-2.0-only |
Daisuke Nojiri | 742fc8d | 2014-10-10 10:51:06 -0700 | [diff] [blame] | 2 | |
Bill XIE | cdf6f3a | 2019-12-17 15:56:43 +0800 | [diff] [blame] | 3 | ifeq ($(CONFIG_VBOOT_LIB),y) |
| 4 | |
Joel Kitching | ec12bd0 | 2020-02-04 17:36:49 +0800 | [diff] [blame] | 5 | bootblock-y += vboot_lib.c |
| 6 | verstage-y += vboot_lib.c |
| 7 | romstage-y += vboot_lib.c |
| 8 | ramstage-y += vboot_lib.c |
| 9 | postcar-y += vboot_lib.c |
| 10 | |
Bill XIE | cdf6f3a | 2019-12-17 15:56:43 +0800 | [diff] [blame] | 11 | vboot-fixup-includes = $(patsubst -I%,-I$(top)/%,\ |
| 12 | $(patsubst $(src)/%.h,$(top)/$(src)/%.h,\ |
| 13 | $(filter-out -I$(obj),$(1)))) |
| 14 | |
| 15 | # call with $1 = stage name to create rules for building the library |
| 16 | # for the stage and adding it to the stage's set of object files. |
| 17 | define vboot-for-stage |
| 18 | VBOOT_LIB_$(1) = $(obj)/external/vboot_reference-$(1)/vboot_fw.a |
| 19 | VBOOT_CFLAGS_$(1) += $$(call vboot-fixup-includes,$$(CPPFLAGS_$(1))) |
| 20 | VBOOT_CFLAGS_$(1) += $$(CFLAGS_$(1)) |
| 21 | VBOOT_CFLAGS_$(1) += $$(call vboot-fixup-includes,$$($(1)-c-ccopts)) |
| 22 | VBOOT_CFLAGS_$(1) += -I$(abspath $(obj)) -Wno-missing-prototypes |
| 23 | VBOOT_CFLAGS_$(1) += -DVBOOT_DEBUG |
| 24 | |
| 25 | $$(VBOOT_LIB_$(1)): $(obj)/config.h |
| 26 | printf " MAKE $(subst $(obj)/,,$(@))\n" |
| 27 | +FIRMWARE_ARCH=$$(ARCHDIR-$$(ARCH-$(1)-y)) \ |
| 28 | CC="$$(CC_$(1))" \ |
| 29 | CFLAGS="$$(VBOOT_CFLAGS_$(1))" VBOOT2="y" \ |
Sam McNally | eded500 | 2020-03-04 16:08:06 +1100 | [diff] [blame] | 30 | EC_EFS="$(CONFIG_VBOOT_EC_EFS)" \ |
Karthikeyan Ramasubramanian | 4f9853a | 2022-10-27 22:49:40 -0600 | [diff] [blame] | 31 | X86_SHA_EXT="$(if $(CONFIG_ARCH_$(call toupper,$(1))_X86_32)$(CONFIG_ARCH_$(call toupper,$(1))_X86_64),$\ |
| 32 | $(CONFIG_VBOOT_X86_SHA256_ACCELERATION))" \ |
Jeremy Compostella | b6dfcb7 | 2023-11-27 14:56:29 -0800 | [diff] [blame] | 33 | VB2_X86_RSA_ACCELERATION="$(if $(CONFIG_ARCH_$(call toupper,$(1))_X86_32)$(CONFIG_ARCH_$(call toupper,$(1))_X86_64),$\ |
| 34 | $(CONFIG_VBOOT_X86_RSA_ACCELERATION))" \ |
Yidi Lin | bd6b81d | 2023-01-31 15:18:57 +0800 | [diff] [blame] | 35 | ARMV8_CRYPTO_EXT="$(if $(CONFIG_ARCH_$(call toupper,$(1))_ARMV8_64),$$(CONFIG_VBOOT_ARMV8_CE_SHA256_ACCELERATION))" \ |
Julius Werner | 366ceee | 2024-01-05 10:40:43 -0800 | [diff] [blame] | 36 | ARM64_RSA_ACCELERATION="$(if $(CONFIG_ARCH_$(call toupper,$(1))_ARM64),$$(CONFIG_VBOOT_ARM64_RSA_ACCELERATION))" \ |
Bill XIE | cdf6f3a | 2019-12-17 15:56:43 +0800 | [diff] [blame] | 37 | $(MAKE) -C $(VBOOT_SOURCE) \ |
| 38 | BUILD=$$(abspath $$(dir $$(VBOOT_LIB_$(1)))) \ |
| 39 | V=$(V) \ |
Brian Norris | 6d301c8 | 2023-02-01 16:38:44 -0800 | [diff] [blame] | 40 | USE_FLASHROM=0 \ |
Maximilian Brune | 1d7a9de | 2022-04-14 14:54:16 +0200 | [diff] [blame] | 41 | fwlib \ |
Maximilian Brune | 5cbf45e | 2022-12-26 06:37:21 +0100 | [diff] [blame] | 42 | $(if $(CONFIG_SBOM_VBOOT),$$(abspath $$(dir $$(VBOOT_LIB_$(1))))/vboot_host.pc) |
Bill XIE | cdf6f3a | 2019-12-17 15:56:43 +0800 | [diff] [blame] | 43 | |
Julius Werner | a595478 | 2023-12-06 16:08:06 -0800 | [diff] [blame] | 44 | .PHONY: $$(VBOOT_LIB_$(1)) |
| 45 | |
Bill XIE | cdf6f3a | 2019-12-17 15:56:43 +0800 | [diff] [blame] | 46 | $(1)-srcs += $$(VBOOT_LIB_$(1)) |
| 47 | |
| 48 | endef # vboot-for-stage |
| 49 | |
| 50 | $(eval $(call vboot-for-stage,bootblock)) |
Arthur Heymans | a2bc254 | 2021-05-29 08:10:49 +0200 | [diff] [blame] | 51 | ifeq ($(CONFIG_SEPARATE_ROMSTAGE),y) |
Bill XIE | cdf6f3a | 2019-12-17 15:56:43 +0800 | [diff] [blame] | 52 | $(eval $(call vboot-for-stage,romstage)) |
Arthur Heymans | a2bc254 | 2021-05-29 08:10:49 +0200 | [diff] [blame] | 53 | endif |
Bill XIE | cdf6f3a | 2019-12-17 15:56:43 +0800 | [diff] [blame] | 54 | $(eval $(call vboot-for-stage,ramstage)) |
| 55 | $(eval $(call vboot-for-stage,postcar)) |
| 56 | |
| 57 | endif # CONFIG_VBOOT_LIB |
| 58 | |
Julius Werner | 5fc7c28 | 2017-03-17 14:29:10 -0700 | [diff] [blame] | 59 | ifeq ($(CONFIG_VBOOT),y) |
| 60 | |
Furquan Shaikh | 0325dc6 | 2016-07-25 13:02:36 -0700 | [diff] [blame] | 61 | bootblock-y += bootmode.c |
| 62 | romstage-y += bootmode.c |
| 63 | ramstage-y += bootmode.c |
| 64 | verstage-y += bootmode.c |
| 65 | postcar-y += bootmode.c |
| 66 | |
Joel Kitching | d6f71d0 | 2019-02-21 12:37:55 +0800 | [diff] [blame] | 67 | verstage-generic-ccopts += -D__VERSTAGE__ |
Daisuke Nojiri | 742fc8d | 2014-10-10 10:51:06 -0700 | [diff] [blame] | 68 | |
Furquan Shaikh | 2a12e2e | 2016-07-25 11:48:03 -0700 | [diff] [blame] | 69 | bootblock-y += vbnv.c |
| 70 | verstage-y += vbnv.c |
| 71 | romstage-y += vbnv.c |
| 72 | ramstage-y += vbnv.c |
Jakub Czapiga | 967a76b | 2022-08-19 12:25:27 +0200 | [diff] [blame] | 73 | postcar-y += vbnv.c |
Furquan Shaikh | 2a12e2e | 2016-07-25 11:48:03 -0700 | [diff] [blame] | 74 | |
Tim Wawrzynczak | d6fc557 | 2019-10-25 14:58:15 -0600 | [diff] [blame] | 75 | romstage-$(CONFIG_VBOOT_EARLY_EC_SYNC) += ec_sync.c |
| 76 | |
Furquan Shaikh | 2a12e2e | 2016-07-25 11:48:03 -0700 | [diff] [blame] | 77 | bootblock-$(CONFIG_VBOOT_VBNV_CMOS) += vbnv_cmos.c |
| 78 | verstage-$(CONFIG_VBOOT_VBNV_CMOS) += vbnv_cmos.c |
| 79 | romstage-$(CONFIG_VBOOT_VBNV_CMOS) += vbnv_cmos.c |
| 80 | ramstage-$(CONFIG_VBOOT_VBNV_CMOS) += vbnv_cmos.c |
Jakub Czapiga | 967a76b | 2022-08-19 12:25:27 +0200 | [diff] [blame] | 81 | postcar-$(CONFIG_VBOOT_VBNV_CMOS) += vbnv_cmos.c |
Furquan Shaikh | 2a12e2e | 2016-07-25 11:48:03 -0700 | [diff] [blame] | 82 | |
| 83 | bootblock-$(CONFIG_VBOOT_VBNV_CMOS_BACKUP_TO_FLASH) += vbnv_flash.c |
| 84 | verstage-$(CONFIG_VBOOT_VBNV_CMOS_BACKUP_TO_FLASH) += vbnv_flash.c |
| 85 | romstage-$(CONFIG_VBOOT_VBNV_CMOS_BACKUP_TO_FLASH) += vbnv_flash.c |
| 86 | ramstage-$(CONFIG_VBOOT_VBNV_CMOS_BACKUP_TO_FLASH) += vbnv_flash.c |
Jakub Czapiga | 967a76b | 2022-08-19 12:25:27 +0200 | [diff] [blame] | 87 | postcar-$(CONFIG_VBOOT_VBNV_CMOS_BACKUP_TO_FLASH) += vbnv_flash.c |
Furquan Shaikh | 2a12e2e | 2016-07-25 11:48:03 -0700 | [diff] [blame] | 88 | |
Furquan Shaikh | 2a12e2e | 2016-07-25 11:48:03 -0700 | [diff] [blame] | 89 | bootblock-$(CONFIG_VBOOT_VBNV_FLASH) += vbnv_flash.c |
| 90 | verstage-$(CONFIG_VBOOT_VBNV_FLASH) += vbnv_flash.c |
| 91 | romstage-$(CONFIG_VBOOT_VBNV_FLASH) += vbnv_flash.c |
| 92 | ramstage-$(CONFIG_VBOOT_VBNV_FLASH) += vbnv_flash.c |
Jakub Czapiga | 967a76b | 2022-08-19 12:25:27 +0200 | [diff] [blame] | 93 | postcar-$(CONFIG_VBOOT_VBNV_FLASH) += vbnv_flash.c |
Furquan Shaikh | 2a12e2e | 2016-07-25 11:48:03 -0700 | [diff] [blame] | 94 | |
Aaron Durbin | 17200ad | 2015-05-01 16:48:54 -0500 | [diff] [blame] | 95 | bootblock-y += vboot_loader.c |
| 96 | romstage-y += vboot_loader.c |
| 97 | ramstage-y += vboot_loader.c |
| 98 | verstage-y += vboot_loader.c |
Andrey Petrov | 60c6432 | 2016-04-14 14:12:47 -0700 | [diff] [blame] | 99 | postcar-y += vboot_loader.c |
Aaron Durbin | 17200ad | 2015-05-01 16:48:54 -0500 | [diff] [blame] | 100 | |
Furquan Shaikh | 2a12e2e | 2016-07-25 11:48:03 -0700 | [diff] [blame] | 101 | bootblock-y += vboot_common.c |
| 102 | verstage-y += vboot_common.c |
| 103 | romstage-y += vboot_common.c |
| 104 | ramstage-y += vboot_common.c |
| 105 | postcar-y += vboot_common.c |
Daisuke Nojiri | 742fc8d | 2014-10-10 10:51:06 -0700 | [diff] [blame] | 106 | |
Daisuke Nojiri | 54af625 | 2014-11-04 12:32:29 -0800 | [diff] [blame] | 107 | bootblock-y += common.c |
Julius Werner | e91d170 | 2017-03-20 15:32:15 -0700 | [diff] [blame] | 108 | verstage-y += vboot_logic.c |
Daisuke Nojiri | 5d302c7 | 2015-04-09 08:18:22 -0700 | [diff] [blame] | 109 | verstage-y += common.c |
Martin Roth | 8a3a3c8 | 2020-05-04 10:13:45 -0600 | [diff] [blame] | 110 | ifeq ($(CONFIG_VBOOT_STARTS_BEFORE_BOOTBLOCK),) |
Julius Werner | e91d170 | 2017-03-20 15:32:15 -0700 | [diff] [blame] | 111 | verstage-$(CONFIG_VBOOT_SEPARATE_VERSTAGE) += verstage.c |
Martin Roth | 8a3a3c8 | 2020-05-04 10:13:45 -0600 | [diff] [blame] | 112 | endif |
Furquan Shaikh | 2a12e2e | 2016-07-25 11:48:03 -0700 | [diff] [blame] | 113 | ifeq (${CONFIG_VBOOT_MOCK_SECDATA},y) |
Julius Werner | e91d170 | 2017-03-20 15:32:15 -0700 | [diff] [blame] | 114 | verstage-y += secdata_mock.c |
Julius Werner | f0ebaf2 | 2020-04-27 13:57:05 -0700 | [diff] [blame] | 115 | romstage-y += secdata_mock.c |
Sridhar Siricilla | 89ac87a | 2020-04-20 18:45:22 +0530 | [diff] [blame] | 116 | ramstage-y += secdata_mock.c |
Daisuke Nojiri | 5d302c7 | 2015-04-09 08:18:22 -0700 | [diff] [blame] | 117 | else |
Julius Werner | e91d170 | 2017-03-20 15:32:15 -0700 | [diff] [blame] | 118 | verstage-y += secdata_tpm.c |
Julius Werner | f0ebaf2 | 2020-04-27 13:57:05 -0700 | [diff] [blame] | 119 | romstage-y += secdata_tpm.c |
Sridhar Siricilla | 89ac87a | 2020-04-20 18:45:22 +0530 | [diff] [blame] | 120 | ramstage-y += secdata_tpm.c |
Sergii Dmytruk | efc615e | 2024-03-21 21:06:49 +0200 | [diff] [blame^] | 121 | |
| 122 | verstage-$(CONFIG_TPM1) += secdata_tpm1.c |
| 123 | romstage-$(CONFIG_TPM1) += secdata_tpm1.c |
| 124 | ramstage-$(CONFIG_TPM1) += secdata_tpm1.c |
| 125 | |
| 126 | verstage-$(CONFIG_TPM2) += secdata_tpm2.c |
| 127 | romstage-$(CONFIG_TPM2) += secdata_tpm2.c |
| 128 | ramstage-$(CONFIG_TPM2) += secdata_tpm2.c |
Daisuke Nojiri | 5d302c7 | 2015-04-09 08:18:22 -0700 | [diff] [blame] | 129 | endif |
Christian Walter | 0bd84ed | 2019-07-23 10:26:30 +0200 | [diff] [blame] | 130 | |
Kyösti Mälkki | f303b4f | 2021-05-27 19:33:57 +0300 | [diff] [blame] | 131 | verstage-$(CONFIG_TPM) += tpm_common.c |
Christian Walter | 0bd84ed | 2019-07-23 10:26:30 +0200 | [diff] [blame] | 132 | |
Joel Kitching | eb20320 | 2019-06-16 17:26:53 +0800 | [diff] [blame] | 133 | romstage-y += common.c |
Daisuke Nojiri | 742fc8d | 2014-10-10 10:51:06 -0700 | [diff] [blame] | 134 | |
Aaron Durbin | 17200ad | 2015-05-01 16:48:54 -0500 | [diff] [blame] | 135 | ramstage-y += common.c |
Andrey Petrov | 60c6432 | 2016-04-14 14:12:47 -0700 | [diff] [blame] | 136 | postcar-y += common.c |
Aaron Durbin | 17200ad | 2015-05-01 16:48:54 -0500 | [diff] [blame] | 137 | |
Shelley Chen | 9f8ac64 | 2020-10-16 12:20:16 -0700 | [diff] [blame] | 138 | romstage-$(CONFIG_MRC_SAVE_HASH_IN_TPM) += mrc_cache_hash_tpm.c |
Shelley Chen | 1fed53f | 2020-10-16 12:30:05 -0700 | [diff] [blame] | 139 | ramstage-$(CONFIG_MRC_SAVE_HASH_IN_TPM) += mrc_cache_hash_tpm.c |
Philipp Deppenwiese | 80961af | 2018-02-27 22:14:34 +0100 | [diff] [blame] | 140 | |
Matt DeVillier | 9ce755d | 2023-01-23 18:31:27 -0600 | [diff] [blame] | 141 | ramstage-$(CONFIG_SOC_AMD_GFX_CACHE_VBIOS_IN_FMAP) += vbios_cache_hash_tpm.c |
| 142 | |
Jeremy Compostella | b6dfcb7 | 2023-11-27 14:56:29 -0800 | [diff] [blame] | 143 | ifeq ($(CONFIG_VBOOT_X86_RSA_ACCELERATION),y) |
| 144 | CPPFLAGS_common += -DVB2_X86_RSA_ACCELERATION |
| 145 | endif |
| 146 | |
Julius Werner | 58c3938 | 2017-02-13 17:53:29 -0800 | [diff] [blame] | 147 | ifeq ($(CONFIG_VBOOT_SEPARATE_VERSTAGE),y) |
Furquan Shaikh | b038f41 | 2016-11-07 23:47:11 -0800 | [diff] [blame] | 148 | |
Werner Zeh | 3c6d9e1 | 2018-11-26 06:54:13 +0100 | [diff] [blame] | 149 | $(eval $(call vboot-for-stage,verstage)) |
Furquan Shaikh | b038f41 | 2016-11-07 23:47:11 -0800 | [diff] [blame] | 150 | |
Martin Roth | 8a3a3c8 | 2020-05-04 10:13:45 -0600 | [diff] [blame] | 151 | ifeq ($(CONFIG_VBOOT_STARTS_BEFORE_BOOTBLOCK),) |
Julius Werner | 58c3938 | 2017-02-13 17:53:29 -0800 | [diff] [blame] | 152 | cbfs-files-$(CONFIG_VBOOT_SEPARATE_VERSTAGE) += $(CONFIG_CBFS_PREFIX)/verstage |
Patrick Georgi | 1cab012 | 2015-11-26 16:39:23 +0100 | [diff] [blame] | 153 | $(CONFIG_CBFS_PREFIX)/verstage-file := $(objcbfs)/verstage.elf |
| 154 | $(CONFIG_CBFS_PREFIX)/verstage-type := stage |
Julius Werner | 09f2921 | 2015-09-29 13:51:35 -0700 | [diff] [blame] | 155 | $(CONFIG_CBFS_PREFIX)/verstage-compression := $(CBFS_PRERAM_COMPRESS_FLAG) |
Martin Roth | 8a3a3c8 | 2020-05-04 10:13:45 -0600 | [diff] [blame] | 156 | endif # CONFIG_VBOOT_STARTS_BEFORE_BOOTBLOCK |
Furquan Shaikh | 94b18a1 | 2016-05-04 23:25:16 -0700 | [diff] [blame] | 157 | |
Patrick Georgi | 1cab012 | 2015-11-26 16:39:23 +0100 | [diff] [blame] | 158 | ifeq ($(CONFIG_ARCH_VERSTAGE_X86_32)$(CONFIG_ARCH_VERSTAGE_X86_64),y) |
Jeremy Compostella | b7832de | 2023-08-30 15:42:09 -0700 | [diff] [blame] | 159 | $(CONFIG_CBFS_PREFIX)/verstage-options := -a 64 |
| 160 | ifeq ($(CONFIG_NO_XIP_EARLY_STAGES),y) |
| 161 | $(CONFIG_CBFS_PREFIX)/verstage-options += -S ".car.data" |
| 162 | else |
| 163 | $(CONFIG_CBFS_PREFIX)/verstage-options += -S ".car.data,.data" |
| 164 | endif |
Furquan Shaikh | 94b18a1 | 2016-05-04 23:25:16 -0700 | [diff] [blame] | 165 | |
| 166 | # If CAR does not support execution of code, verstage on x86 is expected to be |
| 167 | # xip. |
| 168 | ifneq ($(CONFIG_NO_XIP_EARLY_STAGES),y) |
| 169 | $(CONFIG_CBFS_PREFIX)/verstage-options += --xip |
| 170 | endif |
Patrick Georgi | 1cab012 | 2015-11-26 16:39:23 +0100 | [diff] [blame] | 171 | |
| 172 | endif |
Patrick Rudolph | d9c799c | 2019-02-19 10:57:16 +0100 | [diff] [blame] | 173 | $(CONFIG_CBFS_PREFIX)/verstage-options += $(TXTIBB) |
Patrick Georgi | 1cab012 | 2015-11-26 16:39:23 +0100 | [diff] [blame] | 174 | |
Julius Werner | e91d170 | 2017-03-20 15:32:15 -0700 | [diff] [blame] | 175 | else # CONFIG_VBOOT_SEPARATE_VERSTAGE |
Aaron Durbin | d1cf44c | 2015-05-08 15:58:06 -0500 | [diff] [blame] | 176 | ifeq ($(CONFIG_VBOOT_STARTS_IN_BOOTBLOCK),y) |
Julius Werner | e91d170 | 2017-03-20 15:32:15 -0700 | [diff] [blame] | 177 | postinclude-hooks += $$(eval bootblock-srcs += $$(verstage-srcs)) |
Aaron Durbin | 57e3728 | 2015-04-28 16:17:25 -0500 | [diff] [blame] | 178 | else |
Arthur Heymans | a2bc254 | 2021-05-29 08:10:49 +0200 | [diff] [blame] | 179 | ifeq ($(CONFIG_SEPARATE_ROMSTAGE),y) |
Julius Werner | e91d170 | 2017-03-20 15:32:15 -0700 | [diff] [blame] | 180 | postinclude-hooks += $$(eval romstage-srcs += $$(verstage-srcs)) |
Arthur Heymans | a2bc254 | 2021-05-29 08:10:49 +0200 | [diff] [blame] | 181 | else |
| 182 | postinclude-hooks += $$(eval bootblock-srcs += $$(verstage-srcs)) |
| 183 | endif |
Patrick Georgi | efc6aa0 | 2015-04-27 18:13:50 +0200 | [diff] [blame] | 184 | endif |
Julius Werner | 58c3938 | 2017-02-13 17:53:29 -0800 | [diff] [blame] | 185 | endif # CONFIG_VBOOT_SEPARATE_VERSTAGE |
Patrick Georgi | c8d4abd | 2016-01-20 15:54:31 +0100 | [diff] [blame] | 186 | |
Philipp Deppenwiese | a558ca9 | 2018-07-28 23:30:49 +0200 | [diff] [blame] | 187 | #RO-Partition is always there! |
| 188 | VBOOT_PARTITIONS := COREBOOT |
| 189 | # Check for RW_A partition |
| 190 | ifeq ($(CONFIG_VBOOT_SLOTS_RW_A),y) |
| 191 | VBOOT_PARTITIONS += FW_MAIN_A |
Wim Vervoorn | a1c259b | 2019-11-01 10:47:01 +0100 | [diff] [blame] | 192 | RW_PARTITIONS := FW_MAIN_A |
Philipp Deppenwiese | a558ca9 | 2018-07-28 23:30:49 +0200 | [diff] [blame] | 193 | endif |
| 194 | # Check for RW_B partition |
| 195 | ifeq ($(CONFIG_VBOOT_SLOTS_RW_AB),y) |
| 196 | VBOOT_PARTITIONS += FW_MAIN_B |
Wim Vervoorn | a1c259b | 2019-11-01 10:47:01 +0100 | [diff] [blame] | 197 | RW_PARTITIONS += FW_MAIN_B |
Philipp Deppenwiese | a558ca9 | 2018-07-28 23:30:49 +0200 | [diff] [blame] | 198 | endif |
| 199 | |
Wim Vervoorn | a1c259b | 2019-11-01 10:47:01 +0100 | [diff] [blame] | 200 | # Return the regions a specific file should be placed in. The files listed below and the ones |
Martin Roth | 6303671 | 2020-06-25 17:20:32 -0600 | [diff] [blame] | 201 | # that are specified in CONFIG_RO_REGION_ONLY, are only specified in the RO region. The files |
| 202 | # specified in the CONFIG_RW_REGION_ONLY are placed in all RW regions. Files specified |
| 203 | # in CONFIG_RWA_REGION_ONLY or CONFIG_RWB_REGION_ONLY get placed only in those sections. |
Patrick Georgi | c8d4abd | 2016-01-20 15:54:31 +0100 | [diff] [blame] | 204 | # All other files will be installed into RO and RW regions |
| 205 | # Use $(sort) to cut down on extra spaces that would be translated to commas |
| 206 | regions-for-file = $(subst $(spc),$(comma),$(sort \ |
Sridhar Siricilla | 77025b3 | 2020-07-23 23:41:36 +0530 | [diff] [blame] | 207 | $(if $(value regions-for-file-$(1)), \ |
| 208 | $(regions-for-file-$(1)), \ |
| 209 | $(if $(filter $(if $(filter y,$(CONFIG_VBOOT_STARTS_IN_ROMSTAGE)), \ |
Martin Roth | 8a3a3c8 | 2020-05-04 10:13:45 -0600 | [diff] [blame] | 210 | %/romstage,) \ |
Arthur Heymans | 75226bb | 2022-03-30 20:16:36 +0200 | [diff] [blame] | 211 | header_pointer \ |
| 212 | cbfs_master_header \ |
Patrick Georgi | c8d4abd | 2016-01-20 15:54:31 +0100 | [diff] [blame] | 213 | mts \ |
| 214 | %/verstage \ |
Patrick Georgi | eda794d | 2016-02-05 11:01:24 +0100 | [diff] [blame] | 215 | locales \ |
| 216 | locale_%.bin \ |
| 217 | font.bin \ |
| 218 | vbgfx.bin \ |
Lee Leahy | 5e34752 | 2017-01-04 08:51:52 -0800 | [diff] [blame] | 219 | rmu.bin \ |
Patrick Rudolph | 9554b26 | 2018-06-05 15:12:56 +0200 | [diff] [blame] | 220 | cmos_layout.bin \ |
| 221 | cmos.default \ |
Arthur Heymans | eeacd83 | 2021-02-19 17:14:23 +0100 | [diff] [blame] | 222 | intel_fit \ |
| 223 | intel_fit_ts \ |
Arthur Heymans | d6612a4 | 2021-05-03 13:29:22 +0200 | [diff] [blame] | 224 | fspt.bin \ |
Arthur Heymans | e714fc0 | 2023-04-05 14:24:59 +0200 | [diff] [blame] | 225 | pagetables \ |
Martin Roth | bbd5ee41 | 2017-10-05 13:53:16 -0600 | [diff] [blame] | 226 | $(call strip_quotes,$(CONFIG_RO_REGION_ONLY)) \ |
Wim Vervoorn | a1c259b | 2019-11-01 10:47:01 +0100 | [diff] [blame] | 227 | ,$(1)),COREBOOT,\ |
| 228 | $(if $(filter \ |
Sridhar Siricilla | 77025b3 | 2020-07-23 23:41:36 +0530 | [diff] [blame] | 229 | $(call strip_quotes,$(CONFIG_RWA_REGION_ONLY)) \ |
| 230 | ,$(1)), FW_MAIN_A, \ |
Martin Roth | 6303671 | 2020-06-25 17:20:32 -0600 | [diff] [blame] | 231 | $(if $(filter \ |
| 232 | $(call strip_quotes,$(CONFIG_RWB_REGION_ONLY)) \ |
| 233 | ,$(1)), FW_MAIN_B, \ |
| 234 | $(if $(filter \ |
Wim Vervoorn | a1c259b | 2019-11-01 10:47:01 +0100 | [diff] [blame] | 235 | $(call strip_quotes,$(CONFIG_RW_REGION_ONLY)) \ |
| 236 | ,$(1)), $(RW_PARTITIONS), $(VBOOT_PARTITIONS) ) \ |
Sridhar Siricilla | 77025b3 | 2020-07-23 23:41:36 +0530 | [diff] [blame] | 237 | )))))) |
Furquan Shaikh | 0325dc6 | 2016-07-25 13:02:36 -0700 | [diff] [blame] | 238 | |
Julius Werner | 58c3938 | 2017-02-13 17:53:29 -0800 | [diff] [blame] | 239 | CONFIG_GBB_HWID := $(call strip_quotes,$(CONFIG_GBB_HWID)) |
| 240 | CONFIG_GBB_BMPFV_FILE := $(call strip_quotes,$(CONFIG_GBB_BMPFV_FILE)) |
| 241 | CONFIG_VBOOT_KEYBLOCK := $(call strip_quotes,$(CONFIG_VBOOT_KEYBLOCK)) |
| 242 | CONFIG_VBOOT_FIRMWARE_PRIVKEY := $(call strip_quotes,$(CONFIG_VBOOT_FIRMWARE_PRIVKEY)) |
| 243 | CONFIG_VBOOT_KERNEL_KEY := $(call strip_quotes,$(CONFIG_VBOOT_KERNEL_KEY)) |
| 244 | CONFIG_VBOOT_FWID_MODEL := $(call strip_quotes,$(CONFIG_VBOOT_FWID_MODEL)) |
| 245 | CONFIG_VBOOT_FWID_VERSION := $(call strip_quotes,$(CONFIG_VBOOT_FWID_VERSION)) |
| 246 | |
| 247 | # bool-to-mask(var, value) |
| 248 | # return "value" if var is "y", 0 otherwise |
| 249 | bool-to-mask = $(if $(filter y,$(1)),$(2),0) |
| 250 | |
| 251 | GBB_FLAGS := $(call int-add, \ |
| 252 | $(call bool-to-mask,$(CONFIG_GBB_FLAG_DEV_SCREEN_SHORT_DELAY),0x1) \ |
| 253 | $(call bool-to-mask,$(CONFIG_GBB_FLAG_LOAD_OPTION_ROMS),0x2) \ |
| 254 | $(call bool-to-mask,$(CONFIG_GBB_FLAG_ENABLE_ALTERNATE_OS),0x4) \ |
| 255 | $(call bool-to-mask,$(CONFIG_GBB_FLAG_FORCE_DEV_SWITCH_ON),0x8) \ |
| 256 | $(call bool-to-mask,$(CONFIG_GBB_FLAG_FORCE_DEV_BOOT_USB),0x10) \ |
| 257 | $(call bool-to-mask,$(CONFIG_GBB_FLAG_DISABLE_FW_ROLLBACK_CHECK),0x20) \ |
| 258 | $(call bool-to-mask,$(CONFIG_GBB_FLAG_ENTER_TRIGGERS_TONORM),0x40) \ |
Joel Kitching | a904fd6 | 2021-02-19 18:10:58 +0800 | [diff] [blame] | 259 | $(call bool-to-mask,$(CONFIG_GBB_FLAG_FORCE_DEV_BOOT_ALTFW),0x80) \ |
Joel Kitching | 984d0c6 | 2019-12-04 15:33:57 +0800 | [diff] [blame] | 260 | $(call bool-to-mask,$(CONFIG_GBB_FLAG_RUNNING_FAFT),0x100) \ |
Julius Werner | 58c3938 | 2017-02-13 17:53:29 -0800 | [diff] [blame] | 261 | $(call bool-to-mask,$(CONFIG_GBB_FLAG_DISABLE_EC_SOFTWARE_SYNC),0x200) \ |
Joel Kitching | a904fd6 | 2021-02-19 18:10:58 +0800 | [diff] [blame] | 262 | $(call bool-to-mask,$(CONFIG_GBB_FLAG_DEFAULT_DEV_BOOT_ALTFW),0x400) \ |
Julius Werner | 58c3938 | 2017-02-13 17:53:29 -0800 | [diff] [blame] | 263 | $(call bool-to-mask,$(CONFIG_GBB_FLAG_DISABLE_PD_SOFTWARE_SYNC),0x800) \ |
| 264 | $(call bool-to-mask,$(CONFIG_GBB_FLAG_DISABLE_LID_SHUTDOWN),0x1000) \ |
Julius Werner | ae42385 | 2018-03-23 21:02:48 -0700 | [diff] [blame] | 265 | $(call bool-to-mask,$(CONFIG_GBB_FLAG_FORCE_MANUAL_RECOVERY),0x4000) \ |
| 266 | $(call bool-to-mask,$(CONFIG_GBB_FLAG_DISABLE_FWMP),0x8000) \ |
Eric Lai | 1cf2427 | 2021-01-29 16:14:37 +0800 | [diff] [blame] | 267 | $(call bool-to-mask,$(CONFIG_GBB_FLAG_ENABLE_UDC),0x10000) \ |
Julius Werner | 58c3938 | 2017-02-13 17:53:29 -0800 | [diff] [blame] | 268 | ) |
| 269 | |
| 270 | ifneq ($(CONFIG_GBB_BMPFV_FILE),) |
| 271 | $(obj)/gbb.sizetmp: $(obj)/coreboot.rom |
| 272 | $(CBFSTOOL) $< read -r GBB -f $@ |
| 273 | |
| 274 | $(obj)/gbb.stub: $(obj)/coreboot.rom $(FUTILITY) $(obj)/gbb.sizetmp |
| 275 | @printf " CREATE GBB (with BMPFV)\n" |
| 276 | $(FUTILITY) gbb_utility -c 0x100,0x1000,$(call int-subtract,$(call file-size,$(obj)/gbb.sizetmp) 0x2180),0x1000 $@.tmp |
| 277 | mv $@.tmp $@ |
| 278 | else |
| 279 | $(obj)/gbb.stub: $(obj)/coreboot.rom $(FUTILITY) |
| 280 | @printf " CREATE GBB (without BMPFV)\n" |
| 281 | $(FUTILITY) gbb_utility -c 0x100,0x1000,0,0x1000 $@.tmp |
| 282 | mv $@.tmp $@ |
| 283 | endif |
| 284 | |
Hung-Te Lin | 117453e | 2019-09-27 12:23:20 +0800 | [diff] [blame] | 285 | # Generate a test-only HWID |
| 286 | ifeq ($(CONFIG_GBB_HWID),) |
| 287 | CONFIG_GBB_HWID := $$($(top)/util/chromeos/gen_test_hwid.sh "$(CONFIG_MAINBOARD_PART_NUMBER)") |
| 288 | endif |
| 289 | |
Julius Werner | 58c3938 | 2017-02-13 17:53:29 -0800 | [diff] [blame] | 290 | $(obj)/gbb.region: $(obj)/gbb.stub |
| 291 | @printf " SETUP GBB\n" |
| 292 | cp $< $@.tmp |
| 293 | $(FUTILITY) gbb_utility -s \ |
| 294 | --hwid="$(CONFIG_GBB_HWID)" \ |
| 295 | --rootkey="$(CONFIG_VBOOT_ROOT_KEY)" \ |
| 296 | --recoverykey="$(CONFIG_VBOOT_RECOVERY_KEY)" \ |
| 297 | --flags=$(GBB_FLAGS) \ |
| 298 | $@.tmp |
| 299 | ifneq ($(CONFIG_GBB_BMPFV_FILE),) |
| 300 | $(FUTILITY) gbb_utility -s \ |
| 301 | --bmpfv="$(CONFIG_GBB_BMPFV_FILE)" \ |
| 302 | $@.tmp |
| 303 | endif |
| 304 | mv $@.tmp $@ |
| 305 | |
Raul E Rangel | 8c38a8b | 2018-08-06 16:13:14 -0600 | [diff] [blame] | 306 | $(obj)/fwid.version: |
| 307 | echo -n "$(CONFIG_VBOOT_FWID_VERSION)" > $@ |
| 308 | |
| 309 | $(obj)/fwid.region: $(obj)/fwid.version |
| 310 | printf "%s%s\0" \ |
| 311 | "$(CONFIG_VBOOT_FWID_MODEL)" \ |
Raul E Rangel | 128b0cf | 2018-08-09 12:30:39 -0600 | [diff] [blame] | 312 | "$$(cat "$(obj)/fwid.version")" > $@ |
Julius Werner | 58c3938 | 2017-02-13 17:53:29 -0800 | [diff] [blame] | 313 | |
| 314 | build_complete:: $(obj)/gbb.region $(obj)/fwid.region |
| 315 | @printf " WRITE GBB\n" |
| 316 | $(CBFSTOOL) $(obj)/coreboot.rom write -u -r GBB -i 0 -f $(obj)/gbb.region |
| 317 | $(CBFSTOOL) $(obj)/coreboot.rom write -u -r RO_FRID -i 0 -f $(obj)/fwid.region |
Philipp Deppenwiese | a558ca9 | 2018-07-28 23:30:49 +0200 | [diff] [blame] | 318 | ifeq ($(CONFIG_VBOOT_SLOTS_RW_A),y) |
Julius Werner | 58c3938 | 2017-02-13 17:53:29 -0800 | [diff] [blame] | 319 | $(CBFSTOOL) $(obj)/coreboot.rom write -u -r RW_FWID_A -i 0 -f $(obj)/fwid.region |
Philipp Deppenwiese | a558ca9 | 2018-07-28 23:30:49 +0200 | [diff] [blame] | 320 | endif |
| 321 | ifeq ($(CONFIG_VBOOT_SLOTS_RW_AB),y) |
Julius Werner | 58c3938 | 2017-02-13 17:53:29 -0800 | [diff] [blame] | 322 | $(CBFSTOOL) $(obj)/coreboot.rom write -u -r RW_FWID_B -i 0 -f $(obj)/fwid.region |
Philipp Deppenwiese | a558ca9 | 2018-07-28 23:30:49 +0200 | [diff] [blame] | 323 | endif |
Julius Werner | 58c3938 | 2017-02-13 17:53:29 -0800 | [diff] [blame] | 324 | |
| 325 | ifneq ($(shell grep "SHARED_DATA" "$(CONFIG_FMDFILE)"),) |
| 326 | build_complete:: |
| 327 | printf "\0" > $(obj)/shared_data.region |
| 328 | $(CBFSTOOL) $(obj)/coreboot.rom write -u -r SHARED_DATA -i 0 -f $(obj)/shared_data.region |
| 329 | endif |
| 330 | |
Julius Werner | 5eda52a | 2022-05-19 14:37:21 -0700 | [diff] [blame] | 331 | fmap-section-offset-cmd = $(FUTILITY) dump_fmap -p $(obj)/coreboot.rom | \ |
| 332 | grep '^$(1) ' | cut '-d ' -f2 |
Julius Werner | 39914a5 | 2022-08-01 15:04:44 -0700 | [diff] [blame] | 333 | fmap-section-size-cmd = $(FUTILITY) dump_fmap -p $(obj)/coreboot.rom | \ |
| 334 | grep '^$(1) ' | cut '-d ' -f3 |
Julius Werner | 5eda52a | 2022-05-19 14:37:21 -0700 | [diff] [blame] | 335 | |
| 336 | ifeq ($(CONFIG_VBOOT_GSCVD),y) |
| 337 | # |
| 338 | # vboot-gscvd-ranges |
| 339 | # |
| 340 | # This variable expands to the list of ranges that will be verified by the GSC |
| 341 | # before releasing the SoC from reset. It needs to cover all security-relevant |
| 342 | # ranges of the flash that CBFS verification cannot cover itself. By default |
| 343 | # this is the `GBB` FMAP section (not handled here but through the special `-G` |
| 344 | # parameter to `futility gscvd` below) and the bootblock. Here we are |
| 345 | # initializing the variable to expansions that produce ranges for both the |
| 346 | # `BOOTBLOCK` FMAP section (filled up to the real size of |
| 347 | # `$(objcbfs)/bootblock.bin`) and the `bootblock` file in the primary CBFS -- |
| 348 | # only one of those two should normally exist on a given platform. |
| 349 | # |
| 350 | # Platforms where the bootblock isn't the first and only thing loaded by the |
| 351 | # hardware or which otherwise have special security-relevant flash areas that |
| 352 | # cannot be covered normally by CBFS verification will need to manually add |
| 353 | # ranges to this variable in their own Makefiles, in the format produced by |
| 354 | # printf("%x:%x", start_offset, size). The variable is only expanded once in a |
| 355 | # recipe of the `files_added` target, so $(shell) expansions that depend on |
| 356 | # inspecting $(obj)/coreboot.rom (or any of its dependencies) are valid. |
| 357 | # |
| 358 | vboot-gscvd-ranges += $(shell ( \ |
| 359 | offset=$$($(call fmap-section-offset-cmd,BOOTBLOCK)) ;\ |
| 360 | if [ -n "$$offset" ]; then \ |
| 361 | size=$$(wc -c < $(objcbfs)/bootblock.bin) ;\ |
| 362 | printf "%x:%x" $$offset $$size ;\ |
| 363 | fi ;\ |
| 364 | )) |
| 365 | vboot-gscvd-ranges += $(shell ( \ |
| 366 | line=$$($(CBFSTOOL) $(obj)/coreboot.rom print -k | grep '^bootblock[[:space:]]') ;\ |
| 367 | if [ -n "$$line" ]; then \ |
| 368 | cbfs_start=$$($(call fmap-section-offset-cmd,COREBOOT)) ;\ |
| 369 | offset=$$(printf "$$line" | cut -f2) ;\ |
| 370 | size=$$(printf "$$line" | cut -f6) ;\ |
| 371 | printf "%x:%x" $$((cbfs_start + offset)) $$size ;\ |
| 372 | fi ;\ |
| 373 | )) |
| 374 | files_added:: $(FUTILITY) |
| 375 | @printf " WRITE GSCVD\n" |
| 376 | gscvd_range_args="$(foreach range,$(vboot-gscvd-ranges),-R $(range))" ;\ |
| 377 | if [ -z "$$gscvd_range_args" ]; then \ |
| 378 | echo "ERROR: No valid GSCVD ranges detected in image!" ;\ |
| 379 | exit 1 ;\ |
| 380 | fi ;\ |
| 381 | $(FUTILITY) gscvd -G $$gscvd_range_args -b $(CONFIG_VBOOT_GSC_BOARD_ID) \ |
| 382 | -r "$(CONFIG_VBOOT_GSCVD_ROOT_PUBKEY)" \ |
| 383 | -p "$(CONFIG_VBOOT_GSCVD_PLATFORM_PRIVKEY)" \ |
| 384 | -k "$(CONFIG_VBOOT_GSCVD_PLATFORM_KEYBLOCK)" \ |
| 385 | $(obj)/coreboot.rom |
| 386 | endif |
| 387 | |
Jakub Czapiga | 190afda | 2022-07-25 14:24:06 +0200 | [diff] [blame] | 388 | ifneq (,$(filter y,$(CONFIG_VBOOT_SLOTS_RW_A) $(CONFIG_VBOOT_SLOTS_RW_AB))) |
| 389 | files_added:: $(obj)/coreboot.rom $(FUTILITY) $(CBFSTOOL) |
| 390 | CBFSTOOL="$(CBFSTOOL)" \ |
| 391 | $(FUTILITY) sign \ |
Julius Werner | 58c3938 | 2017-02-13 17:53:29 -0800 | [diff] [blame] | 392 | --signprivate "$(CONFIG_VBOOT_FIRMWARE_PRIVKEY)" \ |
Jakub Czapiga | 190afda | 2022-07-25 14:24:06 +0200 | [diff] [blame] | 393 | --keyblock "$(CONFIG_VBOOT_KEYBLOCK)" \ |
Julius Werner | 58c3938 | 2017-02-13 17:53:29 -0800 | [diff] [blame] | 394 | --kernelkey "$(CONFIG_VBOOT_KERNEL_KEY)" \ |
Jakub Czapiga | 190afda | 2022-07-25 14:24:06 +0200 | [diff] [blame] | 395 | --version $(CONFIG_VBOOT_KEYBLOCK_VERSION) \ |
| 396 | --flags $(CONFIG_VBOOT_KEYBLOCK_PREAMBLE_FLAGS) \ |
| 397 | $(obj)/coreboot.rom |
| 398 | if [ "$(CONFIG_VBOOT_SLOTS_RW_AB)" = 'y' ]; then \ |
| 399 | printf " FLASHMAP Layout generated for RO, A and B partition.\n"; \ |
| 400 | elif [ "$(CONFIG_VBOOT_SLOTS_RW_A)" = 'y' ]; then \ |
| 401 | printf " FLASHMAP Layout generated for RO and A partition.\n"; \ |
| 402 | fi |
Philipp Deppenwiese | a558ca9 | 2018-07-28 23:30:49 +0200 | [diff] [blame] | 403 | else |
Martin Roth | 372503f | 2023-12-08 00:43:23 -0700 | [diff] [blame] | 404 | show_notices:: |
Philipp Deppenwiese | a558ca9 | 2018-07-28 23:30:49 +0200 | [diff] [blame] | 405 | @printf " FLASHMAP Layout generated for RO partition only.\n" |
| 406 | @printf " Beware that there is no failure safety in case of update now!\n" |
| 407 | endif |
Julius Werner | 58c3938 | 2017-02-13 17:53:29 -0800 | [diff] [blame] | 408 | |
Furquan Shaikh | 0325dc6 | 2016-07-25 13:02:36 -0700 | [diff] [blame] | 409 | endif # CONFIG_VBOOT |