[v2,1/1] configs/stm32mp157*_dk*: bump TF-A to 2.10, Linux to 6.12.22 and U-Boot to 2025.04
Commit Message
The patch bumps Arm Trusted Firmware (TF-A) to version 2.10 LTS the Linux
kernel to version 6.12.22 and U-Boot to version 2025.04.
The new version of U-Boot has added EFI Capsule support, which depends on
GnuTLS, thus requiring the activation of BR2_TARGET_UBOOT_NEEDS_GNUTLS.
Tested on STM32MP157C-DK2 Discovery Board.
Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
---
Changes v1 -> v2:
- Update U-Boot from 2025.01 to 2025.04
- Update Linux from 6.12.13 to 6.12.22
.../arm-trusted-firmware/arm-trusted-firmware.hash | 2 --
.../common/stm32mp1xx/patches/linux/linux.hash | 2 +-
.../common/stm32mp1xx/patches/uboot/uboot.hash | 1 +
configs/stm32mp157a_dk1_defconfig | 10 +++++-----
configs/stm32mp157c_dk2_defconfig | 10 +++++-----
5 files changed, 12 insertions(+), 13 deletions(-)
delete mode 100644 board/stmicroelectronics/common/stm32mp1xx/patches/arm-trusted-firmware/arm-trusted-firmware.hash
Comments
Le 11/04/2025 à 10:58, Dario Binacchi a écrit :
> The patch bumps Arm Trusted Firmware (TF-A) to version 2.10 LTS the Linux
> kernel to version 6.12.22 and U-Boot to version 2025.04.
> The new version of U-Boot has added EFI Capsule support, which depends on
> GnuTLS, thus requiring the activation of BR2_TARGET_UBOOT_NEEDS_GNUTLS.
>
> Tested on STM32MP157C-DK2 Discovery Board.
>
> Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Hi Dario,
This patch tests fine on STM32MP15. However it breaks the build on
STM32MP13. Now that STM32MP15 and STM32MP13 have been tied through this
patch[1] and the introduction of the later board [2], Linux and U-Boot
components need to be updated on both platforms at the same time.
Based on your changes, I tested TF-A 2.12 + U-Boot 2025.04 + Linux
6.12.22 on STM32MP13 and it did alright.
Can you update the STM32MP13 config ? Doing so will also remove the
second linux.hash and uboot.hash.
Thanks :)
Regards,
Raphaël
[1]
https://git.buildroot.net/buildroot/commit/?id=f21db2bd83bf3073a50b8bcd79af6e7aed6fb000
[2]
https://git.buildroot.net/buildroot/commit/?id=9802fa0b5baa0b68fbc67bc07a2e4206012f7306
To unsubscribe from this group and stop receiving emails from it, send an email to linux-amarula+unsubscribe@amarulasolutions.com.
Hello Raphael,
On Fri, Apr 11, 2025 at 4:12 PM Raphaël Gallais-Pou
<rgallaispou@gmail.com> wrote:
>
>
>
> Le 11/04/2025 à 10:58, Dario Binacchi a écrit :
> > The patch bumps Arm Trusted Firmware (TF-A) to version 2.10 LTS the Linux
> > kernel to version 6.12.22 and U-Boot to version 2025.04.
> > The new version of U-Boot has added EFI Capsule support, which depends on
> > GnuTLS, thus requiring the activation of BR2_TARGET_UBOOT_NEEDS_GNUTLS.
> >
> > Tested on STM32MP157C-DK2 Discovery Board.
> >
> > Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
>
> Hi Dario,
>
> This patch tests fine on STM32MP15. However it breaks the build on
> STM32MP13.
As far as I know, my patch doesn't break the STM32MP13 configuration build.
Instead, I noticed that this configuration shows hash errors for OP-TEE.
I’ve sent a patch for that:
https://patchwork.ozlabs.org/project/buildroot/patch/20250413095900.1940373-1-dario.binacchi@amarulasolutions.com/
Could you let me know what kind of error you saw?"
> Now that STM32MP15 and STM32MP13 have been tied through this
> patch[1] and the introduction of the later board [2], Linux and U-Boot
> components need to be updated on both platforms at the same time.
As far as I know, I don't think it's necessary.
Different sha256sums can be used within the same file.
Anyway, I’ve also updated the STM32MP13 configuration regarding
U-Boot and Linux as you requested.
https://patchwork.ozlabs.org/project/buildroot/patch/20250413095900.1940373-2-dario.binacchi@amarulasolutions.com/
Thanks and regards,
Dario
>
> Based on your changes, I tested TF-A 2.12 + U-Boot 2025.04 + Linux
> 6.12.22 on STM32MP13 and it did alright.
>
> Can you update the STM32MP13 config ? Doing so will also remove the
> second linux.hash and uboot.hash.
>
> Thanks :)
>
> Regards,
> Raphaël
>
>
> [1]
> https://git.buildroot.net/buildroot/commit/?id=f21db2bd83bf3073a50b8bcd79af6e7aed6fb000
> [2]
> https://git.buildroot.net/buildroot/commit/?id=9802fa0b5baa0b68fbc67bc07a2e4206012f7306
deleted file mode 100644
@@ -1,2 +0,0 @@
-# Locally calculated
-sha256 72df0928138de111bf5e75fae47f88a4d1b4930ad52b7902e2b53e117be650c8 arm-trusted-firmware-v2.9-git4.tar.gz
@@ -1,3 +1,3 @@
# Locally calculated
-sha256 f048267b7b88316c9ca708c68d15a9ae802dcfc943c3188c1273eb958c433281 linux-6.9.8.tar.xz
sha256 c954f60197008f1e1f32a1e77293903cf3801d2543ec4bf521f5651eb7f133ce linux-6.11.6.tar.xz
+sha256 ab48800ab49985a78d2318ae8ac5f28fd3e123ea17357ef21498105a53337336 linux-6.12.22.tar.xz
@@ -1,2 +1,3 @@
# Locally calculated
sha256 f591da9ab90ef3d6b3d173766d0ddff90c4ed7330680897486117df390d83c8f u-boot-2024.07.tar.bz2
+sha256 439d3bef296effd54130be6a731c5b118be7fddd7fcc663ccbc5fb18294d8718 u-boot-2025.04.tar.bz2
@@ -1,13 +1,13 @@
BR2_arm=y
BR2_cortex_a7=y
-BR2_PACKAGE_HOST_LINUX_HEADERS_CUSTOM_6_9=y
+BR2_PACKAGE_HOST_LINUX_HEADERS_CUSTOM_6_12=y
BR2_GLOBAL_PATCH_DIR="board/stmicroelectronics/common/stm32mp1xx/patches"
BR2_DOWNLOAD_FORCE_CHECK_HASHES=y
BR2_ROOTFS_OVERLAY="board/stmicroelectronics/stm32mp157a-dk1/overlay/"
BR2_ROOTFS_POST_IMAGE_SCRIPT="board/stmicroelectronics/common/stm32mp1xx/post-image.sh"
BR2_LINUX_KERNEL=y
BR2_LINUX_KERNEL_CUSTOM_VERSION=y
-BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.9.8"
+BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.12.22"
BR2_LINUX_KERNEL_USE_CUSTOM_CONFIG=y
BR2_LINUX_KERNEL_CUSTOM_CONFIG_FILE="board/stmicroelectronics/stm32mp157a-dk1/linux.config"
BR2_LINUX_KERNEL_DTS_SUPPORT=y
@@ -18,8 +18,7 @@ BR2_TARGET_ROOTFS_EXT2_4=y
BR2_TARGET_ROOTFS_EXT2_SIZE="120M"
# BR2_TARGET_ROOTFS_TAR is not set
BR2_TARGET_ARM_TRUSTED_FIRMWARE=y
-BR2_TARGET_ARM_TRUSTED_FIRMWARE_CUSTOM_VERSION=y
-BR2_TARGET_ARM_TRUSTED_FIRMWARE_CUSTOM_VERSION_VALUE="v2.9"
+BR2_TARGET_ARM_TRUSTED_FIRMWARE_LATEST_LTS_2_10_VERSION=y
BR2_TARGET_ARM_TRUSTED_FIRMWARE_PLATFORM="stm32mp1"
BR2_TARGET_ARM_TRUSTED_FIRMWARE_FIP=y
BR2_TARGET_ARM_TRUSTED_FIRMWARE_BL31=y
@@ -31,10 +30,11 @@ BR2_TARGET_ARM_TRUSTED_FIRMWARE_NEEDS_DTC=y
BR2_TARGET_UBOOT=y
BR2_TARGET_UBOOT_BUILD_SYSTEM_KCONFIG=y
BR2_TARGET_UBOOT_CUSTOM_VERSION=y
-BR2_TARGET_UBOOT_CUSTOM_VERSION_VALUE="2024.07"
+BR2_TARGET_UBOOT_CUSTOM_VERSION_VALUE="2025.04"
BR2_TARGET_UBOOT_BOARD_DEFCONFIG="stm32mp15_trusted"
BR2_TARGET_UBOOT_NEEDS_PYLIBFDT=y
BR2_TARGET_UBOOT_NEEDS_OPENSSL=y
+BR2_TARGET_UBOOT_NEEDS_GNUTLS=y
# BR2_TARGET_UBOOT_FORMAT_BIN is not set
BR2_TARGET_UBOOT_FORMAT_DTB=y
BR2_TARGET_UBOOT_FORMAT_CUSTOM=y
@@ -1,13 +1,13 @@
BR2_arm=y
BR2_cortex_a7=y
-BR2_PACKAGE_HOST_LINUX_HEADERS_CUSTOM_6_9=y
+BR2_PACKAGE_HOST_LINUX_HEADERS_CUSTOM_6_12=y
BR2_GLOBAL_PATCH_DIR="board/stmicroelectronics/common/stm32mp1xx/patches"
BR2_DOWNLOAD_FORCE_CHECK_HASHES=y
BR2_ROOTFS_OVERLAY="board/stmicroelectronics/stm32mp157c-dk2/overlay/"
BR2_ROOTFS_POST_IMAGE_SCRIPT="board/stmicroelectronics/common/stm32mp1xx/post-image.sh"
BR2_LINUX_KERNEL=y
BR2_LINUX_KERNEL_CUSTOM_VERSION=y
-BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.9.8"
+BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.12.22"
BR2_LINUX_KERNEL_USE_CUSTOM_CONFIG=y
BR2_LINUX_KERNEL_CUSTOM_CONFIG_FILE="board/stmicroelectronics/stm32mp157c-dk2/linux.config"
BR2_LINUX_KERNEL_DTS_SUPPORT=y
@@ -18,8 +18,7 @@ BR2_TARGET_ROOTFS_EXT2_4=y
BR2_TARGET_ROOTFS_EXT2_SIZE="120M"
# BR2_TARGET_ROOTFS_TAR is not set
BR2_TARGET_ARM_TRUSTED_FIRMWARE=y
-BR2_TARGET_ARM_TRUSTED_FIRMWARE_CUSTOM_VERSION=y
-BR2_TARGET_ARM_TRUSTED_FIRMWARE_CUSTOM_VERSION_VALUE="v2.9"
+BR2_TARGET_ARM_TRUSTED_FIRMWARE_LATEST_LTS_2_10_VERSION=y
BR2_TARGET_ARM_TRUSTED_FIRMWARE_PLATFORM="stm32mp1"
BR2_TARGET_ARM_TRUSTED_FIRMWARE_FIP=y
BR2_TARGET_ARM_TRUSTED_FIRMWARE_BL31=y
@@ -31,10 +30,11 @@ BR2_TARGET_ARM_TRUSTED_FIRMWARE_NEEDS_DTC=y
BR2_TARGET_UBOOT=y
BR2_TARGET_UBOOT_BUILD_SYSTEM_KCONFIG=y
BR2_TARGET_UBOOT_CUSTOM_VERSION=y
-BR2_TARGET_UBOOT_CUSTOM_VERSION_VALUE="2024.07"
+BR2_TARGET_UBOOT_CUSTOM_VERSION_VALUE="2025.04"
BR2_TARGET_UBOOT_BOARD_DEFCONFIG="stm32mp15_trusted"
BR2_TARGET_UBOOT_NEEDS_PYLIBFDT=y
BR2_TARGET_UBOOT_NEEDS_OPENSSL=y
+BR2_TARGET_UBOOT_NEEDS_GNUTLS=y
# BR2_TARGET_UBOOT_FORMAT_BIN is not set
BR2_TARGET_UBOOT_FORMAT_DTB=y
BR2_TARGET_UBOOT_FORMAT_CUSTOM=y