Hi Xiangyi Xu

For some reason your email was discarded by mailman, did you miss registering to the list?

See few comments inline [OD]

Regards, Olivier.

________________________________________ From: xiangyi xu xuxiangyi666@gmail.com Sent: 27 November 2021 14:13 To: hafnium@lists.trustedfirmware.org Subject: Virtualising OP-TEE with Hafnium at S-EL2

HI ALL: I am trying to setup Hafnium environment which loads OP-TEE in Security World and Linux in Normal World. I follow this instruction: https://lists.trustedfirmware.org/pipermail/hafnium/2021-January/000130.html. I can load the OP-TEE test successfully. But the BL33 payload is TF-A-tests example (BL33=../tf-a-tests/build/fvp/debug/tftf.bin). Could you share with us the tutorial to boot linux including the FF-A driver in the NS world while loading OP-TEE with Hafnium S-EL2? The presentation PPT is here: https://static.linaro.org/connect/lvc21/presentations/lvc21-305.pdf.

[OD] The mentioned presentation is in context of the Total Compute platform (as opposed to FVP). It works great for what you want to do, and you can reproduce by following the user manual: https://gitlab.arm.com/arm-reference-solutions/arm-reference-solutions-docs/...

There is also work in progress at Linaro to provide a similar environment using the FVP. @Jens, are there public instructions on how to build the end to end scenario targeting the FVP incl. Linux, FF-A driver, TF-A, Hafnium, OP-TEE ? If not, I reckon this is in your mid term roadmap?

Secondly, I can boot Linux with QEMU and Hafnium. But it seems Hafnium only supports NS world partition while using QEMU. Is any instruction to boot OP_TEE in Security world with Hafnium S-EL2. Since, QEMU 6.0 already supports S-EL2. However, I could not compile ATF successfully with SPD=spmd CTX_INCLUDE_EL2_REGS=1 PLAT=qemu ...

[OD] qemu is not 'officially' supported for booting Hafnium at S-EL2. Although I have few changes in progress which may help. This is not a priority from Arm perspective, but let me come back on this.

By following https://teaclave.apache.org/trustzone-sdk-docs/getting-started-with-optee-fo... , I can boot Linux in NS and OP-TEE in Trustzone with QEMU, but it doesn't work when I add Hafnium. Thanks!

Xiangyi Xu