Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

DNM: Testing PSA init in PRE_KERNEL_1 #20066

Open
wants to merge 84 commits into
base: main
Choose a base branch
from

Conversation

frkv
Copy link
Contributor

@frkv frkv commented Jan 24, 2025

Based on upmerge PR: #19720

Just for testing

test_low_level: PR-1765
test_rs: PR-1483
test_fem: PR-1483
test_ble_mesh: ble_mesh_upmerge_test
test_crypto: PR-750
test_suit_dfu: PR-450
test_tfm: PR-194
test_secdom_samples_public: NCSDK-NONE_upmerge_jan2025
test_audio: PR-294

ArekBalysNordic and others added 28 commits January 29, 2025 13:34
The cpuapp_ram0x_region has been changed in the global dtsi file in
Zephyr and we need to align all dts overlay entries to that change.

Signed-off-by: Arkadiusz Balys <[email protected]>
In upstream zephyr BT_LE_CS_INITIATOR_SNR_CONTROL_NOT_USED
and BT_LE_CS_REFLECTOR_SNR_CONTROL_NOT_USED have been
replaced with a common BT_LE_CS_SNR_CONTROL_NOT_USED.

Signed-off-by: Sean Madigan <[email protected]>
The dependencies for ISO kconfigs have changed so now we
need to manually select CONFIG_BT_CENTRAL and
CONFIG_BT_PERIPHERAL.

Signed-off-by: Sean Madigan <[email protected]>
After switching IPC to icbmsg, the `zephyr,priority` property is
no longer present in the IPC node and there is no need to adjust
the WQ priority.

Signed-off-by: Andrzej Głąbek <[email protected]>
... as it is not used anyway. This saves some flash bytes and makes
the the mcuboot image fit its partition again.

Signed-off-by: Andrzej Głąbek <[email protected]>
- Change API and defines based on changes in upstream Zephyr
- OCT-3172

Signed-off-by: Alexander Svensen <[email protected]>
The CONFIG_NRFX_GPPI symbol was only added for specific boards
but the GPPI implementation is used unconditionally on all platforms.
Align configuration files in DTM and RT to reflect this situation.

Signed-off-by: Michał Grochala <[email protected]>
To align with upstream boards that use nRF53 and nRF91 and to get
node labels for shared memory regions (cpuapp_cpunet_ipc_shm and
cpunet_cpuapp_ipc_shm) defined.

Signed-off-by: Andrzej Głąbek <[email protected]>
CONFIG_SOC_ENABLE_LFXO has been deprecated in zephyr in
favour of a DT_NODE, so update the handling of this in
empty_app_core sample.

Signed-off-by: Sean Madigan <[email protected]>
Now the function requires additional parameter with the socket number.

Signed-off-by: Andrzej Głąbek <[email protected]>
This sample uses the nrfx_gppi helper (see timed_led_toggle.c) but does
not enable it in its configuration. For nRF52 and nRF53, this module is
enabled by the UART driver, but this is not the case for nRF54H.
Enable the module explicitly to avoid such discrepancies.

Signed-off-by: Andrzej Głąbek <[email protected]>
This option was deprecated and has been finally removed.
See Zephyr PR 82722.

Signed-off-by: Andrzej Głąbek <[email protected]>
Since the dependencies of `BT_ISO_CENTRAL/PERIPHERAL` options have
changed and they no longer select `BT_CENTRAL/PERIPHERAL` options
but rather depend on them, the latter must be explicitly enabled.

Also enable the nrfx_gppi helper explicitly as the sample uses it
(see controller_time_*.c). For nRF54H it will not be enabled by
the UART driver like it happens for nRF52 and nRF53.

Signed-off-by: Andrzej Głąbek <[email protected]>
The BUILD_ONLY flag name has been unified in upstream zephyr.
Update the flags in downstream accordingly.

Signed-off-by: Ravi Dondaputi <[email protected]>
-Previously there may have been a CONFIG_HOSTAP_CRYPTO_LEGACY_PSA config
 but this is causing build-failures. This commit updates
 shell-sample to use CONFIG_HOSTAP_CRYPTO_ALT_LEGACY_PSA as extra_args

Signed-off-by: Frank Audun Kvamtrø <[email protected]>
-Adds des-internal.c if CONFIG_HOSTAP_CRYPTO_ENTERPRISE is set

Signed-off-by: Frank Audun Kvamtrø <[email protected]>
-Setting the Mbed TLS named configuration for server name indication
 MBEDTLS_SSL_SERVER_NAME_INDICATION for WIFI enterprise.

-Note that Zephyr has a misnamed configuration
 MBEDTLS_SERVER_NAME_INDICATION (missing infix label SSL_)

Signed-off-by: Frank Audun Kvamtrø <[email protected]>
Enable the nrfx_gppi helper via the NRFX_GPPI option as this will cause
all available PPI, DPPI, and PPIB instances to be enabled in respective
drivers.

Signed-off-by: Andrzej Głąbek <[email protected]>
Settings configuration should be done explicitly otherwise trusted
storage fails to build.

Signed-off-by: alperen sener <[email protected]>
-Changing from using CONFIG_BT_MESH_USES_TINYCRYPT to
 CONFIG_BT_MESH_USES_MBEDTLS_PSA for mesh tests because TinyCrypt is
 deprecated
-Adding boards/native_sim.conf for mesh tests to enable usage of
 builtin Mbed TLS (nrf_security not supported):
 -light_ctrl
 -light_hue
 -scheduler_model/action_planning
 -scheduler_model/message_validity
 -scheduler_model/timing

Signed-off-by: Frank Audun Kvamtrø <[email protected]>
-Fixes issues with some zephyr-located tests for BLE mesh.

Signed-off-by: Frank Audun Kvamtrø <[email protected]>
-QEMU target is not setting SOC_FAMILY_NORDIC_NRF so it doesn't
 build with PSA crypto enabled. Disabling qemu_cortex_m3 for:
 -light_ctrl
 -light_hue
 -sensor_subsys
 -silvair_enocean_model

Signed-off-by: Frank Audun Kvamtrø <[email protected]>
Application `applications.connectivity_bridge` reports FLASH overflow.

Refers: NCSDK-31534

Signed-off-by: Katarzyna Giądła <[email protected]>
The dfu_target uses suit_dfu library and does not use SSF services
directly.

Ref: NCSDK-31359

Signed-off-by: Tomasz Chyrowicz <[email protected]>
Since envelope info library includes directly the platform error header,
it is far easier to link them in CMake than
remember to manually link platform error with each file that uses
envelope info interface.

Ref: NCSDK-31359

Signed-off-by: Tomasz Chyrowicz <[email protected]>
The test uses SSF interface mock instead, so disable the SSF to avoid
two implementations of the same interface.

Ref: NCSDK-31359

Signed-off-by: Tomasz Chyrowicz <[email protected]>
Those fail to build due to RAM overflows.

Signed-off-by: Andrzej Głąbek <[email protected]>
-Adds sdk-zephyr PR nrfconnect#2447.
-Include manifest-update for adding usage of SYS_INIT to execute
 psa_crypto_init() in PRE_KERNEL_1 (before entropy_psa_crypto).
-Extended to work with nrf_security by adding the same file
 used by MBEDTLS_BUILTIN.

Note that zephyr_init.c is not used by nrf_security

Signed-off-by: Frank Audun Kvamtrø <[email protected]>
@frkv frkv force-pushed the psa_init_pre_kernel branch from 56ef933 to 0407962 Compare January 30, 2025 12:54
@frkv frkv requested a review from a team as a code owner January 30, 2025 12:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
ble mesh Label for ble mesh PRbot. Add this if PR is related to ble mesh and you need to get review. DNM doc-required PR must not be merged without tech writer approval. manifest manifest-dragoon manifest-find-my manifest-mcuboot manifest-nrfxlib manifest-sidewalk manifest-suit-processor manifest-zephyr
Projects
None yet
Development

Successfully merging this pull request may close these issues.