12fae4b1eSJeenu Viswambharan# 28c105290SAlexei Fedorov# Copyright (c) 2016-2020, ARM Limited and Contributors. All rights reserved. 32fae4b1eSJeenu Viswambharan# 482cb2c1aSdp-arm# SPDX-License-Identifier: BSD-3-Clause 52fae4b1eSJeenu Viswambharan# 62fae4b1eSJeenu Viswambharan 72fae4b1eSJeenu Viswambharan# Default, static values for build variables, listed in alphabetic order. 82fae4b1eSJeenu Viswambharan# Dependencies between build options, if any, are handled in the top-level 92fae4b1eSJeenu Viswambharan# Makefile, after this file is included. This ensures that the former is better 102fae4b1eSJeenu Viswambharan# poised to handle dependencies, as all build variables would have a default 112fae4b1eSJeenu Viswambharan# value by then. 122fae4b1eSJeenu Viswambharan 138fd9d4d5SAntonio Nino Diaz# Use T32 by default 148fd9d4d5SAntonio Nino DiazAARCH32_INSTRUCTION_SET := T32 158fd9d4d5SAntonio Nino Diaz 162fae4b1eSJeenu Viswambharan# The AArch32 Secure Payload to be built as BL32 image 172fae4b1eSJeenu ViswambharanAARCH32_SP := none 182fae4b1eSJeenu Viswambharan 192fae4b1eSJeenu Viswambharan# The Target build architecture. Supported values are: aarch64, aarch32. 202fae4b1eSJeenu ViswambharanARCH := aarch64 212fae4b1eSJeenu Viswambharan 22c877b414SJeenu Viswambharan# ARM Architecture major and minor versions: 8.0 by default. 23c877b414SJeenu ViswambharanARM_ARCH_MAJOR := 8 24c877b414SJeenu ViswambharanARM_ARCH_MINOR := 0 25c877b414SJeenu Viswambharan 262fae4b1eSJeenu Viswambharan# Base commit to perform code check on 272fae4b1eSJeenu ViswambharanBASE_COMMIT := origin/master 282fae4b1eSJeenu Viswambharan 29b1d27b48SRoberto Vargas# Execute BL2 at EL3 30b1d27b48SRoberto VargasBL2_AT_EL3 := 0 31b1d27b48SRoberto Vargas 327d173fc5SJiafei Pan# BL2 image is stored in XIP memory, for now, this option is only supported 337d173fc5SJiafei Pan# when BL2_AT_EL3 is 1. 347d173fc5SJiafei PanBL2_IN_XIP_MEM := 0 357d173fc5SJiafei Pan 36b90f207aSHadi Asyrafi# Do dcache invalidate upon BL2 entry at EL3 37b90f207aSHadi AsyrafiBL2_INV_DCACHE := 1 38b90f207aSHadi Asyrafi 399fc59639SAlexei Fedorov# Select the branch protection features to use. 409fc59639SAlexei FedorovBRANCH_PROTECTION := 0 419fc59639SAlexei Fedorov 422fae4b1eSJeenu Viswambharan# By default, consider that the platform may release several CPUs out of reset. 432fae4b1eSJeenu Viswambharan# The platform Makefile is free to override this value. 442fae4b1eSJeenu ViswambharanCOLD_BOOT_SINGLE_CPU := 0 452fae4b1eSJeenu Viswambharan 463429c77aSJulius Werner# Flag to compile in coreboot support code. Exclude by default. The coreboot 473429c77aSJulius Werner# Makefile system will set this when compiling TF as part of a coreboot image. 483429c77aSJulius WernerCOREBOOT := 0 493429c77aSJulius Werner 502fae4b1eSJeenu Viswambharan# For Chain of Trust 512fae4b1eSJeenu ViswambharanCREATE_KEYS := 1 522fae4b1eSJeenu Viswambharan 532fae4b1eSJeenu Viswambharan# Build flag to include AArch32 registers in cpu context save and restore during 542fae4b1eSJeenu Viswambharan# world switch. This flag must be set to 0 for AArch64-only platforms. 552fae4b1eSJeenu ViswambharanCTX_INCLUDE_AARCH32_REGS := 1 562fae4b1eSJeenu Viswambharan 572fae4b1eSJeenu Viswambharan# Include FP registers in cpu context 582fae4b1eSJeenu ViswambharanCTX_INCLUDE_FPREGS := 0 592fae4b1eSJeenu Viswambharan 605283962eSAntonio Nino Diaz# Include pointer authentication (ARMv8.3-PAuth) registers in cpu context. This 615283962eSAntonio Nino Diaz# must be set to 1 if the platform wants to use this feature in the Secure 625283962eSAntonio Nino Diaz# world. It is not needed to use it in the Non-secure world. 635283962eSAntonio Nino DiazCTX_INCLUDE_PAUTH_REGS := 0 645283962eSAntonio Nino Diaz 652fae4b1eSJeenu Viswambharan# Debug build 662fae4b1eSJeenu ViswambharanDEBUG := 0 672fae4b1eSJeenu Viswambharan 682fae4b1eSJeenu Viswambharan# Build platform 692fae4b1eSJeenu ViswambharanDEFAULT_PLAT := fvp 702fae4b1eSJeenu Viswambharan 719e4609f1SChristoph Müllner# Disable the generation of the binary image (ELF only). 729e4609f1SChristoph MüllnerDISABLE_BIN_GENERATION := 0 739e4609f1SChristoph Müllner 74209a60ccSSoby Mathew# Enable capability to disable authentication dynamically. Only meant for 75209a60ccSSoby Mathew# development platforms. 76209a60ccSSoby MathewDYN_DISABLE_AUTH := 0 77209a60ccSSoby Mathew 785f835918SJeenu Viswambharan# Build option to enable MPAM for lower ELs 795f835918SJeenu ViswambharanENABLE_MPAM_FOR_LOWER_ELS := 0 805f835918SJeenu Viswambharan 813bd17c0fSSoby Mathew# Flag to Enable Position Independant support (PIE) 823bd17c0fSSoby MathewENABLE_PIE := 0 833bd17c0fSSoby Mathew 842fae4b1eSJeenu Viswambharan# Flag to enable Performance Measurement Framework 852fae4b1eSJeenu ViswambharanENABLE_PMF := 0 862fae4b1eSJeenu Viswambharan 872fae4b1eSJeenu Viswambharan# Flag to enable PSCI STATs functionality 882fae4b1eSJeenu ViswambharanENABLE_PSCI_STAT := 0 892fae4b1eSJeenu Viswambharan 902fae4b1eSJeenu Viswambharan# Flag to enable runtime instrumentation using PMF 912fae4b1eSJeenu ViswambharanENABLE_RUNTIME_INSTRUMENTATION := 0 922fae4b1eSJeenu Viswambharan 9351faada7SDouglas Raillard# Flag to enable stack corruption protection 9451faada7SDouglas RaillardENABLE_STACK_PROTECTOR := 0 9551faada7SDouglas Raillard 9621b818c0SJeenu Viswambharan# Flag to enable exception handling in EL3 9721b818c0SJeenu ViswambharanEL3_EXCEPTION_HANDLING := 0 9821b818c0SJeenu Viswambharan 999fc59639SAlexei Fedorov# Flag to enable Branch Target Identification. 1009fc59639SAlexei Fedorov# Internal flag not meant for direct setting. 1019fc59639SAlexei Fedorov# Use BRANCH_PROTECTION to enable BTI. 1029fc59639SAlexei FedorovENABLE_BTI := 0 1039fc59639SAlexei Fedorov 1049fc59639SAlexei Fedorov# Flag to enable Pointer Authentication. 1059fc59639SAlexei Fedorov# Internal flag not meant for direct setting. 1069fc59639SAlexei Fedorov# Use BRANCH_PROTECTION to enable PAUTH. 107b86048c4SAntonio Nino DiazENABLE_PAUTH := 0 108b86048c4SAntonio Nino Diaz 1092fae4b1eSJeenu Viswambharan# Build flag to treat usage of deprecated platform and framework APIs as error. 1102fae4b1eSJeenu ViswambharanERROR_DEPRECATED := 0 1112fae4b1eSJeenu Viswambharan 1121a7c1cfeSJeenu Viswambharan# Fault injection support 1131a7c1cfeSJeenu ViswambharanFAULT_INJECTION_SUPPORT := 0 1141a7c1cfeSJeenu Viswambharan 1151c75d5dfSMasahiro Yamada# Byte alignment that each component in FIP is aligned to 1161c75d5dfSMasahiro YamadaFIP_ALIGN := 0 1171c75d5dfSMasahiro Yamada 1182fae4b1eSJeenu Viswambharan# Default FIP file name 1192fae4b1eSJeenu ViswambharanFIP_NAME := fip.bin 1202fae4b1eSJeenu Viswambharan 1212fae4b1eSJeenu Viswambharan# Default FWU_FIP file name 1222fae4b1eSJeenu ViswambharanFWU_FIP_NAME := fwu_fip.bin 1232fae4b1eSJeenu Viswambharan 1242fae4b1eSJeenu Viswambharan# For Chain of Trust 1252fae4b1eSJeenu ViswambharanGENERATE_COT := 0 1262fae4b1eSJeenu Viswambharan 12774dce7faSJeenu Viswambharan# Hint platform interrupt control layer that Group 0 interrupts are for EL3. By 12874dce7faSJeenu Viswambharan# default, they are for Secure EL1. 12974dce7faSJeenu ViswambharanGICV2_G0_FOR_EL3 := 0 13074dce7faSJeenu Viswambharan 13176454abfSJeenu Viswambharan# Route External Aborts to EL3. Disabled by default; External Aborts are handled 13276454abfSJeenu Viswambharan# by lower ELs. 13376454abfSJeenu ViswambharanHANDLE_EA_EL3_FIRST := 0 13476454abfSJeenu Viswambharan 1353c251af3SJeenu Viswambharan# Whether system coherency is managed in hardware, without explicit software 1363c251af3SJeenu Viswambharan# operations. 1373c251af3SJeenu ViswambharanHW_ASSISTED_COHERENCY := 0 1383c251af3SJeenu Viswambharan 1392091755cSSoby Mathew# Set the default algorithm for the generation of Trusted Board Boot keys 1402091755cSSoby MathewKEY_ALG := rsa 1412091755cSSoby Mathew 1428c105290SAlexei Fedorov# Option to build TF with Measured Boot support 1438c105290SAlexei FedorovMEASURED_BOOT := 0 1448c105290SAlexei Fedorov 1452fae4b1eSJeenu Viswambharan# NS timer register save and restore 1462fae4b1eSJeenu ViswambharanNS_TIMER_SWITCH := 0 1472fae4b1eSJeenu Viswambharan 14877f1f7a1SVarun Wadekar# Include lib/libc in the final image 14977f1f7a1SVarun WadekarOVERRIDE_LIBC := 0 15077f1f7a1SVarun Wadekar 1512fae4b1eSJeenu Viswambharan# Build PL011 UART driver in minimal generic UART mode 1522fae4b1eSJeenu ViswambharanPL011_GENERIC_UART := 0 1532fae4b1eSJeenu Viswambharan 1542fae4b1eSJeenu Viswambharan# By default, consider that the platform's reset address is not programmable. 1552fae4b1eSJeenu Viswambharan# The platform Makefile is free to override this value. 1562fae4b1eSJeenu ViswambharanPROGRAMMABLE_RESET_ADDRESS := 0 1572fae4b1eSJeenu Viswambharan 15873308618SAntonio Nino Diaz# Flag used to choose the power state format: Extended State-ID or Original 1592fae4b1eSJeenu ViswambharanPSCI_EXTENDED_STATE_ID := 0 1602fae4b1eSJeenu Viswambharan 16114c6016aSJeenu Viswambharan# Enable RAS support 16214c6016aSJeenu ViswambharanRAS_EXTENSION := 0 16314c6016aSJeenu Viswambharan 1642fae4b1eSJeenu Viswambharan# By default, BL1 acts as the reset handler, not BL31 1652fae4b1eSJeenu ViswambharanRESET_TO_BL31 := 0 1662fae4b1eSJeenu Viswambharan 1672fae4b1eSJeenu Viswambharan# For Chain of Trust 1682fae4b1eSJeenu ViswambharanSAVE_KEYS := 0 1692fae4b1eSJeenu Viswambharan 170b7cb133eSJeenu Viswambharan# Software Delegated Exception support 171b7cb133eSJeenu ViswambharanSDEI_SUPPORT := 0 172b7cb133eSJeenu Viswambharan 1732fae4b1eSJeenu Viswambharan# Whether code and read-only data should be put on separate memory pages. The 1742fae4b1eSJeenu Viswambharan# platform Makefile is free to override this value. 1752fae4b1eSJeenu ViswambharanSEPARATE_CODE_AND_RODATA := 0 1762fae4b1eSJeenu Viswambharan 177f8578e64SSamuel Holland# Put NOBITS sections (.bss, stacks, page tables, and coherent memory) in a 178f8578e64SSamuel Holland# separate memory region, which may be discontiguous from the rest of BL31. 179f8578e64SSamuel HollandSEPARATE_NOBITS_REGION := 0 180f8578e64SSamuel Holland 1811dcc28cfSDaniel Boulby# If the BL31 image initialisation code is recalimed after use for the secondary 1821dcc28cfSDaniel Boulby# cores stack 1831dcc28cfSDaniel BoulbyRECLAIM_INIT_CODE := 0 1841dcc28cfSDaniel Boulby 1852fae4b1eSJeenu Viswambharan# SPD choice 1862fae4b1eSJeenu ViswambharanSPD := none 1872fae4b1eSJeenu Viswambharan 1883f3c341aSPaul Beesley# Enable the Management Mode (MM)-based Secure Partition Manager implementation 1893f3c341aSPaul BeesleySPM_MM := 0 1902d7b9e5eSAntonio Nino Diaz 1912fae4b1eSJeenu Viswambharan# Flag to introduce an infinite loop in BL1 just before it exits into the next 1922fae4b1eSJeenu Viswambharan# image. This is meant to help debugging the post-BL2 phase. 1932fae4b1eSJeenu ViswambharanSPIN_ON_BL1_EXIT := 0 1942fae4b1eSJeenu Viswambharan 1952fae4b1eSJeenu Viswambharan# Flags to build TF with Trusted Boot support 1962fae4b1eSJeenu ViswambharanTRUSTED_BOARD_BOOT := 0 1972fae4b1eSJeenu Viswambharan 198e23e057eSAntonio Nino Diaz# Build option to choose whether Trusted Firmware uses Coherent memory or not. 1992fae4b1eSJeenu ViswambharanUSE_COHERENT_MEM := 1 2002fae4b1eSJeenu Viswambharan 2010ca3913dSOlivier Deprez# Build option to add debugfs support 2020ca3913dSOlivier DeprezUSE_DEBUGFS := 0 2030ca3913dSOlivier Deprez 2040a6e7e3bSLouis Mayencourt# Build option to fconf based io 2050a6e7e3bSLouis MayencourtUSE_FCONF_BASED_IO := 0 2060a6e7e3bSLouis Mayencourt 207e23e057eSAntonio Nino Diaz# Build option to choose whether Trusted Firmware uses library at ROM 2085accce5bSRoberto VargasUSE_ROMLIB := 0 2095accce5bSRoberto Vargas 210*60e8f3cfSPetre-Ionut Tudor# Build option to choose whether the xlat tables of BL images can be read-only. 211*60e8f3cfSPetre-Ionut Tudor# Note that this only serves as a higher level option to PLAT_RO_XLAT_TABLES, 212*60e8f3cfSPetre-Ionut Tudor# which is the per BL-image option that actually enables the read-only tables 213*60e8f3cfSPetre-Ionut Tudor# API. The reason for having this additional option is to have a common high 214*60e8f3cfSPetre-Ionut Tudor# level makefile where we can check for incompatible features/build options. 215*60e8f3cfSPetre-Ionut TudorALLOW_RO_XLAT_TABLES := 0 216*60e8f3cfSPetre-Ionut Tudor 2173bff910dSSandrine Bailleux# Chain of trust. 2183bff910dSSandrine BailleuxCOT := tbbr 2193bff910dSSandrine Bailleux 220bb41eb7aSMasahiro Yamada# Use tbbr_oid.h instead of platform_oid.h 221e23e057eSAntonio Nino DiazUSE_TBBR_DEFS := 1 222bb41eb7aSMasahiro Yamada 2232fae4b1eSJeenu Viswambharan# Build verbosity 2242fae4b1eSJeenu ViswambharanV := 0 225bcc3c49cSSoby Mathew 226bcc3c49cSSoby Mathew# Whether to enable D-Cache early during warm boot. This is usually 227bcc3c49cSSoby Mathew# applicable for platforms wherein interconnect programming is not 228bcc3c49cSSoby Mathew# required to enable cache coherency after warm reset (eg: single cluster 229bcc3c49cSSoby Mathew# platforms). 230bcc3c49cSSoby MathewWARMBOOT_ENABLE_DCACHE_EARLY := 0 231d832aee9Sdp-arm 232c776deedSDimitris Papastamos# Build option to enable/disable the Statistical Profiling Extensions 233d832aee9Sdp-armENABLE_SPE_FOR_LOWER_ELS := 1 234d832aee9Sdp-arm 235c776deedSDimitris Papastamos# SPE is only supported on AArch64 so disable it on AArch32. 236d832aee9Sdp-armifeq (${ARCH},aarch32) 237d832aee9Sdp-arm override ENABLE_SPE_FOR_LOWER_ELS := 0 238d832aee9Sdp-armendif 2390319a977SDimitris Papastamos 2409dd94382SJustin Chadwell# Include Memory Tagging Extension registers in cpu context. This must be set 2419dd94382SJustin Chadwell# to 1 if the platform wants to use this feature in the Secure world and MTE is 2429dd94382SJustin Chadwell# enabled at ELX. 2439dd94382SJustin ChadwellCTX_INCLUDE_MTE_REGS := 0 2449dd94382SJustin Chadwell 2450319a977SDimitris PapastamosENABLE_AMU := 0 2461a853370SDavid Cunado 2471a853370SDavid Cunado# By default, enable Scalable Vector Extension if implemented for Non-secure 2481a853370SDavid Cunado# lower ELs 2491a853370SDavid Cunado# Note SVE is only supported on AArch64 - therefore do not enable in AArch32 2501a853370SDavid Cunadoifneq (${ARCH},aarch32) 2511a853370SDavid Cunado ENABLE_SVE_FOR_NS := 1 2521a853370SDavid Cunadoelse 2531a853370SDavid Cunado override ENABLE_SVE_FOR_NS := 0 2541a853370SDavid Cunadoendif 2551f461979SJustin Chadwell 2561f461979SJustin ChadwellSANITIZE_UB := off 257c97cba4eSSoby Mathew 258c97cba4eSSoby Mathew# For ARMv8.1 (AArch64) platforms, enabling this option selects the spinlock 259c97cba4eSSoby Mathew# implementation variant using the ARMv8.1-LSE compare-and-swap instruction. 260c97cba4eSSoby Mathew# Default: disabled 261c97cba4eSSoby MathewUSE_SPINLOCK_CAS := 0 262edbce9aaSzelalem-aweke 263edbce9aaSzelalem-aweke# Enable Link Time Optimization 264edbce9aaSzelalem-awekeENABLE_LTO := 0 265