diff options
author | Jia Zhang <zhang.jia@linux.alibaba.com> | 2018-06-06 10:00:55 -0400 |
---|---|---|
committer | Jia Zhang <zhang.jia@linux.alibaba.com> | 2018-06-06 10:03:28 -0400 |
commit | 7d4f711413205d796187e1e53fbea5affd365cd8 (patch) | |
tree | f9dc996c7740a18c9a7642585b63ba1d86ec1fa0 | |
parent | b50b53dad27652773dac8f09dd2883c6fe49c654 (diff) | |
download | meta-secure-core-7d4f711413205d796187e1e53fbea5affd365cd8.tar.gz |
meta-intel-sgx: Initial support of linux-sgx-driver
As the initial support, linux-sgx-driver is integrated into this
layer. SDK and PSW will be provided soon.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
-rw-r--r-- | meta-intel-sgx/README.md | 23 | ||||
-rw-r--r-- | meta-intel-sgx/conf/layer.conf | 18 | ||||
-rw-r--r-- | meta-intel-sgx/recipes-kernel/intel-sgx-driver/intel-sgx-driver_2.1.bb | 34 |
3 files changed, 75 insertions, 0 deletions
diff --git a/meta-intel-sgx/README.md b/meta-intel-sgx/README.md new file mode 100644 index 0000000..d1b8444 --- /dev/null +++ b/meta-intel-sgx/README.md | |||
@@ -0,0 +1,23 @@ | |||
1 | ### Overview | ||
2 | This layer provides the support of Intel Software Guard Extensions | ||
3 | (Intel SGX), which is an Intel technology for application developers | ||
4 | seeking to protect select code and data from disclosure or modification. | ||
5 | |||
6 | The Linux SGX software stack is comprised of the Intel SGX driver, the | ||
7 | Intel SGX SDK, and the Intel SGX Platform Software. | ||
8 | |||
9 | ### Intel SGX Driver | ||
10 | The recipe sgx-driver provides a out-of-tree driver for the Linux Intel | ||
11 | SGX software stack, which will be used until the driver upstreaming process | ||
12 | is complete. | ||
13 | |||
14 | ### Intel SGX SDK and PSW | ||
15 | The recipes are still in development. | ||
16 | |||
17 | ### Hardware Support | ||
18 | Please check [this site](https://github.com/ayeks/SGX-hardware) for the | ||
19 | latest information. | ||
20 | |||
21 | ### Reference | ||
22 | - [SGX driver](https://github.com/intel/linux-sgx-driver) | ||
23 | - [SGX SDK and PSW](https://github.com/intel/linux-sgx) | ||
diff --git a/meta-intel-sgx/conf/layer.conf b/meta-intel-sgx/conf/layer.conf new file mode 100644 index 0000000..6c09840 --- /dev/null +++ b/meta-intel-sgx/conf/layer.conf | |||
@@ -0,0 +1,18 @@ | |||
1 | # We have a conf and classes directory, add to BBPATH | ||
2 | BBPATH .= ":${LAYERDIR}" | ||
3 | |||
4 | # We have recipes-* directories, add to BBFILES | ||
5 | BBFILES += "${LAYERDIR}/recipes-*/*/*.bb \ | ||
6 | ${LAYERDIR}/recipes-*/*/*.bbappend" | ||
7 | |||
8 | BBFILE_COLLECTIONS += "intel-sgx" | ||
9 | BBFILE_PATTERN_intel-sgx = "^${LAYERDIR}/" | ||
10 | BBFILE_PRIORITY_intel-sgx = "10" | ||
11 | |||
12 | BBLAYERS_LAYERINDEX_NAME_intel-sgx = "meta-intel-sgx" | ||
13 | |||
14 | LAYERDEPENDS_intel-sgx = "\ | ||
15 | core \ | ||
16 | " | ||
17 | |||
18 | LAYERSERIES_COMPAT_intel-sgx = "sumo" | ||
diff --git a/meta-intel-sgx/recipes-kernel/intel-sgx-driver/intel-sgx-driver_2.1.bb b/meta-intel-sgx/recipes-kernel/intel-sgx-driver/intel-sgx-driver_2.1.bb new file mode 100644 index 0000000..b1abcd5 --- /dev/null +++ b/meta-intel-sgx/recipes-kernel/intel-sgx-driver/intel-sgx-driver_2.1.bb | |||
@@ -0,0 +1,34 @@ | |||
1 | SUMMARY = "Intel SGX Linux DDDriver" | ||
2 | DESCRIPTION = "Intel(R) Software Guard Extensions (Intel(R) SGX) \ | ||
3 | is an Intel technology for application developers seeking to \ | ||
4 | protect select code and data from disclosure or modification." | ||
5 | HOMEPAGE = "https://github.com/intel/linux-sgx-driver" | ||
6 | |||
7 | LICENSE = "GPLv2" | ||
8 | LIC_FILES_CHKSUM = "file://License.txt;md5=b54f8941f6087efb6be3deb0f1e617f7" | ||
9 | |||
10 | DEPENDS = "virtual/kernel" | ||
11 | |||
12 | PV = "2.1+git${SRCPV}" | ||
13 | |||
14 | SRC_URI = "\ | ||
15 | git://github.com/intel/linux-sgx-driver.git \ | ||
16 | " | ||
17 | SRCREV = "2a509c203533f9950fa3459fe91864051bc021a2" | ||
18 | |||
19 | S = "${WORKDIR}/git" | ||
20 | |||
21 | inherit module | ||
22 | |||
23 | EXTRA_OEMAKE += "KDIR='${STAGING_KERNEL_DIR}'" | ||
24 | |||
25 | MODULE_NAME = "isgx" | ||
26 | |||
27 | do_install () { | ||
28 | dir="${D}/lib/modules/${KERNEL_VERSION}/kernel/${MODULE_NAME}" | ||
29 | |||
30 | install -d "$dir" | ||
31 | install -m 0644 "${MODULE_NAME}.ko" "$dir" | ||
32 | } | ||
33 | |||
34 | RPROVIDES_${PN} += "kernel-module-${MODULE_NAME}" | ||