[Hafnium] Re: Hafnium with QEMU and OP-TEE

Hello Olivier,

On Fri, 10 Feb 2023 at 18:20, Olivier Deprez Olivier.Deprez@arm.com wrote:

Hi Jens,

I reproduced this setup and works well! Thanks for this brilliant work!

I still had to add --enable-slirp to qemu build for some reason..

I'm thinking of adding PAuth to the picture. BTI might be another one, but I guess it's not easy to enable (for TAs) if it requires a bti powered toolchain.

Already enabled in optee_os CI :) along with MTE and PAuth, see https://github.com/OP-TEE/optee_os/blob/5ddda749c60d/.github/workflows/ci.ym...

The BTI-enabled toolchain comes with the Docker image, it is build like so: https://github.com/jforissier/docker_optee_os_ci/blob/60d8c0105fa2/Dockerfil... (crosstool-ng is a fantastic tool!)

Cheers,