Update kvmtool to be compatible with KVM CCA v6 and v7.

Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>

Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>

This version adds support for DMA address aliasing

Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>

Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>

This version is compatible with the KVM host postings v6

Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>

Update cca-workload-attestation to pick up the port change

Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>

Update to the latest version (with attestation support)

Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>

Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>

Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>

Updating the sha in this repo helps buildroot know when to download
updates. If we just give the 'main' branch, then updates to main aren't
downloaded by buildroot and the user needs to remove the buildroot/dl/*
cache manually.

Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>

Not the most elegant solution, but gives us a bit of freedom for
personalization, and allows to centralize the various hacks we've had to
apply on the QEMU build, enable more features (9p) etc.

When updating, copy the buildroot source and s/QEMU_/QEMU_CCA_/g, and
apply the ./configure changes to qemu.mk.

Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>

Copy the kvmtool and qemu packages from buildroot, so we can personalize
them.

Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>

Accidentally committed extra config changes that aren't normally needed
and take lots of space. Revert them.

Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>

Only I can access the git address...

Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>

debugfs is useful for debug and trace. Mount it automatically.

Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>

Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>

libfdt, used by kvmtool and QEMU, generates non-zero padding bytes due
to the way it inserts new properties. This results in DTB that an
external tool cannot predict. Ensure the padding bytes are zeroed (as
mandated by the device tree spec).

Also clear the trailing bytes caused by shrinking the DTB. It's likely
there are more places in libfdt where the string block is moved left,
but for now this seems to be sufficient...

Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>

Ensure we use the buildroot packages and not the host's

Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>

Build the keybroker demo app

Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>

Copy some options from the optee configuration. Notable change is to
increase the rootfs from the default 60MB, so users can include
additional data.

Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>

Try to generate the same initrd every time, so we only need to provision
the verifier once.

Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>

Create a macvtap interface on boot, ready to be used by a VMM. In
particular cloud-hypervisor doesn't do user networking and always
requires a tap interface.

Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>

Modify a couple of /etc/ files in the buildroot images to help boot and
attest a realm.

Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>

Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>

Signed-off-by: Mathieu Poirier <mathieu.poirier@linaro.org>
Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>

Signed-off-by: Mathieu Poirier <mathieu.poirier@linaro.org>
Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>

See buildroot/docs/manual/customize-outside-br.adoc

Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>