1# Default configuration values for OP-TEE core (all platforms). 2# 3# Platform-specific overrides are in core/arch/arm32/plat-*/conf.mk. 4# Some subsystem-specific defaults are not here but rather in */sub.mk. 5# 6# Configuration values may be assigned from multiple sources. 7# From higher to lower priority: 8# 9# 1. Make arguments ('make CFG_FOO=bar...') 10# 2. The file specified by $(CFG_OPTEE_CONFIG) (if defined) 11# 3. The environment ('CFG_FOO=bar make...') 12# 4. The platform-specific configuration file: core/arch/arm32/plat-*/conf.mk 13# 5. This file 14# 6. Subsystem-specific makefiles (*/sub.mk) 15# 16# Actual values used during the build are output to $(out-dir)/conf.mk 17# (CFG_* variables only). 18 19# Cross-compiler prefix and suffix 20CROSS_COMPILE ?= arm-linux-gnueabihf- 21CROSS_COMPILE32 ?= $(CROSS_COMPILE) 22CROSS_COMPILE64 ?= aarch64-linux-gnu- 23COMPILER ?= gcc 24 25# For convenience 26ifdef CFLAGS 27CFLAGS32 ?= $(CFLAGS) 28CFLAGS64 ?= $(CFLAGS) 29endif 30 31# Compiler warning level. 32# Supported values: undefined, 1, 2 and 3. 3 gives more warnings. 33WARNS ?= 3 34 35# Define NOWERROR=1 so that warnings are not treated as errors 36# NOWERROR=1 37 38# Define DEBUG=1 to compile with -g option 39# DEBUG=1 40 41# If 1, debug mode of the tee firmware (CPU restart, Core Status) 42CFG_TEE_CORE_DEBUG ?= 0 43 44# Max level of the tee core traces. 0 means disable, 4 is max. 45# Supported values: 0 (no traces) to 4 (all traces) 46# If CFG_TEE_DRV_DEBUGFS is set, the level of traces to print can be 47# dynamically changes via debugfs in the range 1 => CFG_TEE_CORE_LOG_LEVEL 48CFG_TEE_CORE_LOG_LEVEL ?= 1 49 50# TA and TEECore log level 51# Supported values: 0 (no traces) to 4 (all traces) 52# If CFG_TEE_DRV_DEBUGFS is set, the level of traces to print can be 53# dynamically changes via debugfs in the range 1 => CFG_TEE_TA_LOG_LEVEL 54CFG_TEE_TA_LOG_LEVEL ?= 1 55 56# TA enablement 57# When defined to "y", TA traces are output according to 58# CFG_TEE_TA_LOG_LEVEL. Otherwise, they are not output at all 59CFG_TEE_CORE_TA_TRACE ?= y 60 61# Define TEE_Panic as a macro to help debugging panics caused by calls to 62# TEE_Panic. This flag can have a different value when later compiling the 63# TA 64CFG_TEE_PANIC_DEBUG ?= y 65 66# If 1, enable debug features in TA memory allocation. 67# Debug features include check of buffer overflow, statistics, mark/check heap 68# feature. 69CFG_TEE_CORE_USER_MEM_DEBUG ?= 1 70 71# If y, enable memory leak detection feature in bget memory allocator. 72CFG_TEE_CORE_MALLOC_DEBUG ?= n 73CFG_TEE_TA_MALLOC_DEBUG ?= n 74 75# All message with level equal or higher to the following value will be 76# prefixed with long debugging information (severity, thread ID, component 77# name, function name, line number). Otherwise a short prefix is used 78# (severity and component name only). 79# Levels: 0=none 1=error 2=info 3=debug 4=flow 80CFG_MSG_LONG_PREFIX_THRESHOLD ?= 3 81 82# PRNG configuration 83# If CFG_WITH_SOFTWARE_PRNG is enabled, crypto provider provided 84# software PRNG implementation is used. 85# Otherwise, you need to implement hw_get_random_byte() for your platform 86CFG_WITH_SOFTWARE_PRNG ?= y 87 88# Number of threads 89CFG_NUM_THREADS ?= 2 90 91# API implementation version 92CFG_TEE_API_VERSION ?= GPD-1.1-dev 93 94# Implementation description (implementation-dependent) 95CFG_TEE_IMPL_DESCR ?= OPTEE 96 97# Trusted OS implementation version 98TEE_IMPL_VERSION ?= $(shell git describe --always --dirty=-dev 2>/dev/null || echo Unknown) 99# The following values are not extracted from the "git describe" output because 100# we might be outside of a Git environment, or the tree may have been cloned 101# with limited depth not including any tag, so there is really no guarantee 102# that TEE_IMPL_VERSION contains the major and minor revision numbers. 103CFG_OPTEE_REVISION_MAJOR ?= 2 104CFG_OPTEE_REVISION_MINOR ?= 0 105 106# Trusted OS implementation manufacturer name 107CFG_TEE_MANUFACTURER ?= LINARO 108 109# Trusted firmware version 110CFG_TEE_FW_IMPL_VERSION ?= FW_IMPL_UNDEF 111 112# Trusted OS implementation manufacturer name 113CFG_TEE_FW_MANUFACTURER ?= FW_MAN_UNDEF 114 115# Encrypted File System Support 116# Applies to both the default and the RPMB filesystems 117CFG_ENC_FS ?= y 118 119# File System Block Cache Support 120# Does not apply to the RPMB FS 121CFG_FS_BLOCK_CACHE ?= n 122 123# RPMB file system support 124# When enabled, replaces the default (REE-based) FS 125CFG_RPMB_FS ?= n 126 127# Device identifier used when CFG_RPMB_FS = y. 128# The exact meaning of this value is platform-dependent. On Linux, the 129# tee-supplicant process will open /dev/mmcblk<id>rpmb 130CFG_RPMB_FS_DEV_ID ?= 0 131 132# Embed public part of this key in OP-TEE OS 133TA_SIGN_KEY ?= keys/default_ta.pem 134 135# Include lib/libutils/isoc in the build? Most platforms need this, but some 136# may not because they obtain the isoc functions from elsewhere 137CFG_LIBUTILS_WITH_ISOC ?= y 138 139# Enables floating point support for user TAs 140# ARM32: EABI defines both a soft-float ABI and a hard-float ABI, 141# hard-float is basically a super set of soft-float. Hard-float 142# requires all the support routines provided for soft-float, but the 143# compiler may choose to optimize to not use some of them and use 144# the floating-point registers instead. 145# ARM64: EABI doesn't define a soft-float ABI, everything is hard-float (or 146# nothing with ` -mgeneral-regs-only`) 147# With CFG_TA_FLOAT_SUPPORT enabled TA code is free use floating point types 148CFG_TA_FLOAT_SUPPORT ?= y 149 150# Enable stack unwinding for aborts from kernel mode if CFG_TEE_CORE_DEBUG 151# is enabled 152ifeq ($(CFG_TEE_CORE_DEBUG),1) 153CFG_CORE_UNWIND ?= y 154endif 155 156# Enable support for dynamically loaded user TAs 157CFG_WITH_USER_TA ?= y 158 159# Use small pages to map user TAs 160CFG_SMALL_PAGE_USER_TA ?= y 161