Hi Rahul,

Notice Hafnium as an hypervisor (in the normal world) is no longer a 'supported' configuration. It's still mainly maintained as legacy and for test purposes. The project focuses on the SPM (aka Hafnium in the secure world). Adding an hypervisor is a bit beyond the scope of the project.

The best reference for you is perhaps to reproduce the Total Compute platform: https://gitlab.arm.com/arm-reference-solutions/arm-reference-solutions-docs/...

If you build the BSP part (no Android), you get this setup: linux (NS EL1/0), no hypervisor, TF-A at EL3, Hafnium at SEL2, OP-TEE at SEL1.

You can run the optee xtest suite from linux console which reaches OP-TEE as a secure partition through Hafnium.

Regards, Olivier.

________________________________________ From: Rahul Kumar Yadav rahulkumar.yadav@nxp.com Sent: 23 February 2022 10:45 To: Olivier Deprez Subject: RE: [Hafnium] Re: [EXT] Re: Hafnium Getting Started

Hi Olivier,

I wanted to try Hafnium with FVP but could not find the clear instructions like the ones available for Hafnium with QEMU. In Hafnium Documentation, I was able to run tests with FVP with following command:

$ make && kokoro/test.sh --fvp

But I could not find instructions to run Hafnium and primary VM with Linux on FVP separately from Testing purposes, like in case of QEMU.

If Hafnium with QEMU is not going to work in secure world, from where can I find instructions for running Hafnium with VMs (Linux, OPTEE) on FVP in normal and secure world?

Regards, Rahul

-----Original Message----- From: Olivier Deprez via Hafnium hafnium@lists.trustedfirmware.org Sent: Wednesday, February 23, 2022 2:38 PM To: hafnium@lists.trustedfirmware.org Subject: [Hafnium] Re: [EXT] Re: Hafnium Getting Started

Caution: EXT Email

Hi Rahul,

TF-A + SEL2/Hafnium isn't supported on qemu.

All our testing is done on Arm's FVP, or Total Compute platform.

Regards, Olivier.

________________________________________ From: Rahul Kumar Yadav rahulkumar.yadav@nxp.com Sent: 23 February 2022 10:00 To: Olivier Deprez Subject: RE: [EXT] [Hafnium] Re: Hafnium Getting Started

Hi Olivier,

Thanks for helping.

Also, I want to run Hafnium with QEMU in secure world. From where can I get the instructions for that purpose?

Regards, Rahul

-----Original Message----- From: Olivier Deprez via Hafnium hafnium@lists.trustedfirmware.org Sent: Wednesday, February 23, 2022 2:22 PM To: hafnium@lists.trustedfirmware.org Subject: [EXT] [Hafnium] Re: Hafnium Getting Started

Caution: EXT Email

Hi,

In your experiment, everything runs in the normal world. Hafnium at NS EL2. The primary VM hosting linux at NS EL1.

Regards, Olivier.

________________________________________ From: Rahul Kumar Yadav via Hafnium hafnium@lists.trustedfirmware.org Sent: 23 February 2022 09:16 To: hafnium@lists.trustedfirmware.org Subject: [Hafnium] Hafnium Getting Started

Hi,

I have just started to learn about Hafnium and I am following Getting Started steps of it.

I built DTB with

/dts-v1/;

/ { hypervisor { compatible = "hafnium,hafnium"; vm1 { debug_name = "Linux VM"; kernel_filename = "vmlinuz"; ramdisk_filename = "initrd.img"; }; }; };

And after setting up RAM disk, I was able to boot into Linux VM with following command:

qemu-system-aarch64 -M virt,gic_version=3 -cpu cortex-a57 -nographic -machine virtualization=true -kernel out/reference/qemu_aarch64_clang/hafnium.bin -initrd initrd.img -append "rdinit=/sbin/init"

But I am unable to understand whether Hafnium and Linux are running in Normal World or Secure World or At which Level (EL1, EL2, S-EL1 or S-EL2...) Hafnium and Linux are running.

Can I please get some help in understanding this?

Regards, Rahul -- Hafnium mailing list -- hafnium@lists.trustedfirmware.org To unsubscribe send an email to hafnium-leave@lists.trustedfirmware.org -- Hafnium mailing list -- hafnium@lists.trustedfirmware.org To unsubscribe send an email to hafnium-leave@lists.trustedfirmware.org -- Hafnium mailing list -- hafnium@lists.trustedfirmware.org To unsubscribe send an email to hafnium-leave@lists.trustedfirmware.org