blob: 683d7ac9faa3abb9a61b2b069a056aa7689ebe3a [file] [log] [blame]
Jeenu Viswambharan615ff392016-10-24 14:31:51 +01001#
Daniel Boulby928747f2021-05-25 18:09:34 +01002# Copyright (c) 2016-2022, Arm Limited. All rights reserved.
Jeenu Viswambharan615ff392016-10-24 14:31:51 +01003#
dp-armfa3cf0b2017-05-03 09:38:09 +01004# SPDX-License-Identifier: BSD-3-Clause
Jeenu Viswambharan615ff392016-10-24 14:31:51 +01005#
6
7# Default, static values for build variables, listed in alphabetic order.
8# Dependencies between build options, if any, are handled in the top-level
9# Makefile, after this file is included. This ensures that the former is better
10# poised to handle dependencies, as all build variables would have a default
11# value by then.
12
Antonio Nino Diaz80914a82018-08-08 16:28:43 +010013# Use T32 by default
14AARCH32_INSTRUCTION_SET := T32
15
Jeenu Viswambharan615ff392016-10-24 14:31:51 +010016# The AArch32 Secure Payload to be built as BL32 image
17AARCH32_SP := none
18
19# The Target build architecture. Supported values are: aarch64, aarch32.
20ARCH := aarch64
21
Alexei Fedorov132e6652020-12-07 16:38:53 +000022# ARM Architecture feature modifiers: none by default
23ARM_ARCH_FEATURE := none
24
Jeenu Viswambharanfca76802017-01-16 16:52:35 +000025# ARM Architecture major and minor versions: 8.0 by default.
26ARM_ARCH_MAJOR := 8
27ARM_ARCH_MINOR := 0
28
Jeenu Viswambharan615ff392016-10-24 14:31:51 +010029# Base commit to perform code check on
30BASE_COMMIT := origin/master
31
Roberto Vargase0e99462017-10-30 14:43:43 +000032# Execute BL2 at EL3
33BL2_AT_EL3 := 0
34
Balint Dobszay719ba9c2021-03-26 16:23:18 +010035# Only use SP packages if SP layout JSON is defined
36BL2_ENABLE_SP_LOAD := 0
37
Jiafei Pan43a7bf42018-03-21 07:20:09 +000038# BL2 image is stored in XIP memory, for now, this option is only supported
39# when BL2_AT_EL3 is 1.
40BL2_IN_XIP_MEM := 0
41
Hadi Asyrafi461f8f42019-08-20 15:33:27 +080042# Do dcache invalidate upon BL2 entry at EL3
43BL2_INV_DCACHE := 1
44
Alexei Fedorov90f2e882019-05-24 12:17:09 +010045# Select the branch protection features to use.
46BRANCH_PROTECTION := 0
47
Jeenu Viswambharan615ff392016-10-24 14:31:51 +010048# By default, consider that the platform may release several CPUs out of reset.
49# The platform Makefile is free to override this value.
50COLD_BOOT_SINGLE_CPU := 0
51
Julius Wernerb624ae02017-06-09 15:17:15 -070052# Flag to compile in coreboot support code. Exclude by default. The coreboot
53# Makefile system will set this when compiling TF as part of a coreboot image.
54COREBOOT := 0
55
Jeenu Viswambharan615ff392016-10-24 14:31:51 +010056# For Chain of Trust
57CREATE_KEYS := 1
58
59# Build flag to include AArch32 registers in cpu context save and restore during
60# world switch. This flag must be set to 0 for AArch64-only platforms.
61CTX_INCLUDE_AARCH32_REGS := 1
62
63# Include FP registers in cpu context
64CTX_INCLUDE_FPREGS := 0
65
Antonio Nino Diaz594811b2019-01-31 11:58:00 +000066# Include pointer authentication (ARMv8.3-PAuth) registers in cpu context. This
67# must be set to 1 if the platform wants to use this feature in the Secure
68# world. It is not needed to use it in the Non-secure world.
69CTX_INCLUDE_PAUTH_REGS := 0
70
Arunachalam Ganapathydd3ec7e2020-05-28 11:57:09 +010071# Include Nested virtualization control (Armv8.4-NV) registers in cpu context.
72# This must be set to 1 if architecture implements Nested Virtualization
73# Extension and platform wants to use this feature in the Secure world
74CTX_INCLUDE_NEVE_REGS := 0
75
Jeenu Viswambharan615ff392016-10-24 14:31:51 +010076# Debug build
77DEBUG := 0
78
Sumit Garg392e4df2019-11-15 10:43:00 +053079# By default disable authenticated decryption support.
80DECRYPTION_SUPPORT := none
81
Jeenu Viswambharan615ff392016-10-24 14:31:51 +010082# Build platform
83DEFAULT_PLAT := fvp
84
Christoph Müllner4f088e42019-04-24 09:45:30 +020085# Disable the generation of the binary image (ELF only).
86DISABLE_BIN_GENERATION := 0
87
Javier Almansa Sobrinof3a4c542020-11-23 18:38:15 +000088# Disable MTPMU if FEAT_MTPMU is supported. Default is 0 to keep backwards
89# compatibility.
90DISABLE_MTPMU := 0
91
Soby Mathew9fe88042018-03-26 12:43:37 +010092# Enable capability to disable authentication dynamically. Only meant for
93# development platforms.
94DYN_DISABLE_AUTH := 0
95
Jeenu Viswambharan2da918c2018-07-31 16:13:33 +010096# Build option to enable MPAM for lower ELs
97ENABLE_MPAM_FOR_LOWER_ELS := 0
98
Chris Kay03be39d2021-05-05 13:38:30 +010099# Enable the Maximum Power Mitigation Mechanism on supporting cores.
100ENABLE_MPMM := 0
101
102# Enable MPMM configuration via FCONF.
103ENABLE_MPMM_FCONF := 0
104
Soby Mathew078f1a42018-08-28 11:13:55 +0100105# Flag to Enable Position Independant support (PIE)
106ENABLE_PIE := 0
107
Jeenu Viswambharan615ff392016-10-24 14:31:51 +0100108# Flag to enable Performance Measurement Framework
109ENABLE_PMF := 0
110
111# Flag to enable PSCI STATs functionality
112ENABLE_PSCI_STAT := 0
113
Zelalem Aweke4d37db82021-07-11 18:33:20 -0500114# Flag to enable Realm Management Extension (FEAT_RME)
115ENABLE_RME := 0
116
Jeenu Viswambharan615ff392016-10-24 14:31:51 +0100117# Flag to enable runtime instrumentation using PMF
118ENABLE_RUNTIME_INSTRUMENTATION := 0
119
Douglas Raillard306593d2017-02-24 18:14:15 +0000120# Flag to enable stack corruption protection
121ENABLE_STACK_PROTECTOR := 0
122
Jeenu Viswambharan10a67272017-09-22 08:32:10 +0100123# Flag to enable exception handling in EL3
124EL3_EXCEPTION_HANDLING := 0
125
Alexei Fedorov90f2e882019-05-24 12:17:09 +0100126# Flag to enable Branch Target Identification.
127# Internal flag not meant for direct setting.
128# Use BRANCH_PROTECTION to enable BTI.
129ENABLE_BTI := 0
130
131# Flag to enable Pointer Authentication.
132# Internal flag not meant for direct setting.
133# Use BRANCH_PROTECTION to enable PAUTH.
Antonio Nino Diaz25cda672019-02-19 11:53:51 +0000134ENABLE_PAUTH := 0
135
Jayanth Dodderi Chidanand13ae0f42021-11-25 14:59:30 +0000136# Flag to enable access to the HAFGRTR_EL2 register
137ENABLE_FEAT_AMUv1 := 0
138
Jayanth Dodderi Chidanand9461a892022-01-17 18:57:17 +0000139# Flag to enable AMUv1p1 extension.
140ENABLE_FEAT_AMUv1p1 := 0
141
142# Flag to enable CSV2_2 extension.
143ENABLE_FEAT_CSV2_2 := 0
144
145# Flag to enable access to the HCRX_EL2 register by setting SCR_EL3.HXEn.
146ENABLE_FEAT_HCX := 0
147
Jayanth Dodderi Chidanand70c9c0b2021-12-15 16:52:10 +0000148# Flag to enable access to the HDFGRTR_EL2 register
149ENABLE_FEAT_FGT := 0
150
151# Flag to enable access to the CNTPOFF_EL2 register
152ENABLE_FEAT_ECV := 0
153
Daniel Boulby928747f2021-05-25 18:09:34 +0100154# Flag to enable use of the DIT feature.
155ENABLE_FEAT_DIT := 0
156
Jayanth Dodderi Chidanand9461a892022-01-17 18:57:17 +0000157# Flag to enable access to Privileged Access Never bit of PSTATE.
158ENABLE_FEAT_PAN := 0
159
160# Flag to enable access to the Random Number Generator registers
161ENABLE_FEAT_RNG := 0
162
Juan Pablo Conde42305f22022-07-12 16:40:29 -0400163# Flag to enable support for EL3 trapping of reads of the RNDR and RNDRRS
164# registers, by setting SCR_EL3.TRNDR.
165ENABLE_FEAT_RNG_TRAP := 0
166
Jayanth Dodderi Chidanand9461a892022-01-17 18:57:17 +0000167# Flag to enable Speculation Barrier Instruction
168ENABLE_FEAT_SB := 0
169
170# Flag to enable Secure EL-2 feature.
171ENABLE_FEAT_SEL2 := 0
172
173# Flag to enable Virtualization Host Extensions
174ENABLE_FEAT_VHE := 0
175
Jayanth Dodderi Chidanand4b5489c2022-03-28 15:28:55 +0100176# Flag to enable delayed trapping of WFE instruction (FEAT_TWED)
177ENABLE_FEAT_TWED := 0
178
Sumit Gargeec52442019-11-14 16:33:45 +0530179# By default BL31 encryption disabled
180ENCRYPT_BL31 := 0
181
182# By default BL32 encryption disabled
183ENCRYPT_BL32 := 0
184
185# Default dummy firmware encryption key
186ENC_KEY := 1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef
187
188# Default dummy nonce for firmware encryption
189ENC_NONCE := 1234567890abcdef12345678
190
Jeenu Viswambharan615ff392016-10-24 14:31:51 +0100191# Build flag to treat usage of deprecated platform and framework APIs as error.
192ERROR_DEPRECATED := 0
193
Jeenu Viswambharanf00da742017-12-08 12:13:51 +0000194# Fault injection support
195FAULT_INJECTION_SUPPORT := 0
196
Jayanth Dodderi Chidanand9461a892022-01-17 18:57:17 +0000197# Flag to enable architectural features detection mechanism
198FEATURE_DETECTION := 0
199
Masahiro Yamada4d87eb42016-12-25 13:52:22 +0900200# Byte alignment that each component in FIP is aligned to
201FIP_ALIGN := 0
202
Jeenu Viswambharan615ff392016-10-24 14:31:51 +0100203# Default FIP file name
204FIP_NAME := fip.bin
205
206# Default FWU_FIP file name
207FWU_FIP_NAME := fwu_fip.bin
208
Sumit Gargeec52442019-11-14 16:33:45 +0530209# By default firmware encryption with SSK
210FW_ENC_STATUS := 0
211
Jeenu Viswambharan615ff392016-10-24 14:31:51 +0100212# For Chain of Trust
213GENERATE_COT := 0
214
Jeenu Viswambharanc06f05c2017-09-22 08:32:09 +0100215# Hint platform interrupt control layer that Group 0 interrupts are for EL3. By
216# default, they are for Secure EL1.
217GICV2_G0_FOR_EL3 := 0
218
Manish Pandey0e3379d2022-10-10 11:43:08 +0100219# Route NS External Aborts to EL3. Disabled by default; External Aborts are handled
Jeenu Viswambharan96c7df02017-11-30 12:54:15 +0000220# by lower ELs.
Manish Pandey0e3379d2022-10-10 11:43:08 +0100221HANDLE_EA_EL3_FIRST_NS := 0
Jeenu Viswambharan96c7df02017-11-30 12:54:15 +0000222
Alexei Fedorovf11aeb72020-10-06 15:54:12 +0100223# Secure hash algorithm flag, accepts 3 values: sha256, sha384 and sha512.
224# The default value is sha256.
225HASH_ALG := sha256
226
Jeenu Viswambharana10d64e2017-01-04 13:51:42 +0000227# Whether system coherency is managed in hardware, without explicit software
228# operations.
229HW_ASSISTED_COHERENCY := 0
230
Soby Mathew13b16052017-08-31 11:49:32 +0100231# Set the default algorithm for the generation of Trusted Board Boot keys
232KEY_ALG := rsa
233
Leonardo Sandoval849f7af2020-06-18 17:32:55 -0500234# Set the default key size in case KEY_ALG is rsa
235ifeq ($(KEY_ALG),rsa)
236KEY_SIZE := 2048
237endif
238
Alexei Fedorov913cb7e2020-01-23 14:27:38 +0000239# Option to build TF with Measured Boot support
240MEASURED_BOOT := 0
241
Jeenu Viswambharan615ff392016-10-24 14:31:51 +0100242# NS timer register save and restore
243NS_TIMER_SWITCH := 0
244
Varun Wadekar3f9002c2019-01-31 09:22:30 -0800245# Include lib/libc in the final image
246OVERRIDE_LIBC := 0
247
Jeenu Viswambharan615ff392016-10-24 14:31:51 +0100248# Build PL011 UART driver in minimal generic UART mode
249PL011_GENERIC_UART := 0
250
251# By default, consider that the platform's reset address is not programmable.
252# The platform Makefile is free to override this value.
253PROGRAMMABLE_RESET_ADDRESS := 0
254
Antonio Nino Diaz56b68ad2019-02-28 13:35:21 +0000255# Flag used to choose the power state format: Extended State-ID or Original
Jeenu Viswambharan615ff392016-10-24 14:31:51 +0100256PSCI_EXTENDED_STATE_ID := 0
257
Jeenu Viswambharan9a7ce2f2018-04-04 16:07:11 +0100258# Enable RAS support
259RAS_EXTENSION := 0
260
Jeenu Viswambharan615ff392016-10-24 14:31:51 +0100261# By default, BL1 acts as the reset handler, not BL31
262RESET_TO_BL31 := 0
263
Jorge Ramirez-Ortiz7538ef92022-04-15 11:46:47 +0200264# By default, clear the input registers when RESET_TO_BL31 is enabled
265RESET_TO_BL31_WITH_PARAMS := 0
266
Jeenu Viswambharan615ff392016-10-24 14:31:51 +0100267# For Chain of Trust
268SAVE_KEYS := 0
269
Jeenu Viswambharan04e3a7f2017-10-16 08:43:14 +0100270# Software Delegated Exception support
johpow019baade32021-07-08 14:14:00 -0500271SDEI_SUPPORT := 0
Jeenu Viswambharan04e3a7f2017-10-16 08:43:14 +0100272
Jayanth Dodderi Chidanand7c7faff2022-10-11 17:16:07 +0100273# True Random Number firmware Interface support
johpow019baade32021-07-08 14:14:00 -0500274TRNG_SUPPORT := 0
Jimmy Brisson26c5b5c2020-06-22 14:18:42 -0500275
Jeremy Linton90cbf522020-11-18 10:12:41 -0600276# SMCCC PCI support
johpow019baade32021-07-08 14:14:00 -0500277SMC_PCI_SUPPORT := 0
Jeremy Linton90cbf522020-11-18 10:12:41 -0600278
Jeenu Viswambharan615ff392016-10-24 14:31:51 +0100279# Whether code and read-only data should be put on separate memory pages. The
280# platform Makefile is free to override this value.
281SEPARATE_CODE_AND_RODATA := 0
282
Samuel Holland31a14e12018-10-17 21:40:18 -0500283# Put NOBITS sections (.bss, stacks, page tables, and coherent memory) in a
284# separate memory region, which may be discontiguous from the rest of BL31.
285SEPARATE_NOBITS_REGION := 0
286
Jiafei Pan0824b452022-02-24 10:47:33 +0800287# Put BL2 NOLOAD sections (.bss, stacks, page tables) in a separate memory
288# region, platform Makefile is free to override this value.
289SEPARATE_BL2_NOLOAD_REGION := 0
290
Daniel Boulby468f0d72018-09-18 11:45:51 +0100291# If the BL31 image initialisation code is recalimed after use for the secondary
292# cores stack
293RECLAIM_INIT_CODE := 0
294
Jeenu Viswambharan615ff392016-10-24 14:31:51 +0100295# SPD choice
296SPD := none
297
Paul Beesleyfe975b42019-09-16 11:29:03 +0000298# Enable the Management Mode (MM)-based Secure Partition Manager implementation
299SPM_MM := 0
Antonio Nino Diaz8cd7ea32018-10-30 11:08:08 +0000300
Marc Bonniciabaac162021-12-01 18:00:40 +0000301# Use the FF-A SPMC implementation in EL3.
302SPMC_AT_EL3 := 0
303
Max Shvetsove7fd80e2020-02-25 13:55:00 +0000304# Use SPM at S-EL2 as a default config for SPMD
305SPMD_SPM_AT_SEL2 := 1
306
Jeenu Viswambharan615ff392016-10-24 14:31:51 +0100307# Flag to introduce an infinite loop in BL1 just before it exits into the next
308# image. This is meant to help debugging the post-BL2 phase.
309SPIN_ON_BL1_EXIT := 0
310
311# Flags to build TF with Trusted Boot support
312TRUSTED_BOARD_BOOT := 0
313
Antonio Nino Diazd8d734c2018-09-25 09:41:08 +0100314# Build option to choose whether Trusted Firmware uses Coherent memory or not.
Jeenu Viswambharan615ff392016-10-24 14:31:51 +0100315USE_COHERENT_MEM := 1
316
Olivier Deprezcb4c5622019-09-19 17:46:46 +0200317# Build option to add debugfs support
318USE_DEBUGFS := 0
319
Louis Mayencourtbadcac82019-10-24 15:18:46 +0100320# Build option to fconf based io
Balint Dobszayd0dbd5e2019-12-18 15:28:00 +0100321ARM_IO_IN_DTB := 0
322
323# Build option to support SDEI through fconf
Madhukar Pappireddy02cc3ff2020-06-02 09:26:30 -0500324SDEI_IN_FCONF := 0
325
326# Build option to support Secure Interrupt descriptors through fconf
327SEC_INT_DESC_IN_FCONF := 0
Louis Mayencourtbadcac82019-10-24 15:18:46 +0100328
Antonio Nino Diazd8d734c2018-09-25 09:41:08 +0100329# Build option to choose whether Trusted Firmware uses library at ROM
330USE_ROMLIB := 0
Roberto Vargase92111a2018-05-22 16:05:42 +0100331
Petre-Ionut Tudore5a6fef2019-11-07 15:18:03 +0000332# Build option to choose whether the xlat tables of BL images can be read-only.
333# Note that this only serves as a higher level option to PLAT_RO_XLAT_TABLES,
334# which is the per BL-image option that actually enables the read-only tables
335# API. The reason for having this additional option is to have a common high
336# level makefile where we can check for incompatible features/build options.
337ALLOW_RO_XLAT_TABLES := 0
338
Sandrine Bailleuxd4c1d442020-01-15 10:23:25 +0100339# Chain of trust.
340COT := tbbr
341
Masahiro Yamadaa27c1662017-05-22 12:11:24 +0900342# Use tbbr_oid.h instead of platform_oid.h
Antonio Nino Diazd8d734c2018-09-25 09:41:08 +0100343USE_TBBR_DEFS := 1
Masahiro Yamadaa27c1662017-05-22 12:11:24 +0900344
Jeenu Viswambharan615ff392016-10-24 14:31:51 +0100345# Build verbosity
346V := 0
Soby Mathew043fe9c2017-04-10 22:35:42 +0100347
348# Whether to enable D-Cache early during warm boot. This is usually
349# applicable for platforms wherein interconnect programming is not
350# required to enable cache coherency after warm reset (eg: single cluster
351# platforms).
352WARMBOOT_ENABLE_DCACHE_EARLY := 0
dp-armee3457b2017-05-23 09:32:49 +0100353
Dimitris Papastamos9da09cd2017-10-13 15:07:45 +0100354# Build option to enable/disable the Statistical Profiling Extensions
dp-armee3457b2017-05-23 09:32:49 +0100355ENABLE_SPE_FOR_LOWER_ELS := 1
356
Dimitris Papastamos9da09cd2017-10-13 15:07:45 +0100357# SPE is only supported on AArch64 so disable it on AArch32.
dp-armee3457b2017-05-23 09:32:49 +0100358ifeq (${ARCH},aarch32)
johpow019baade32021-07-08 14:14:00 -0500359 override ENABLE_SPE_FOR_LOWER_ELS := 0
dp-armee3457b2017-05-23 09:32:49 +0100360endif
Dimitris Papastamosfcedb692017-10-16 11:40:10 +0100361
Justin Chadwell1c7c13a2019-07-18 14:25:33 +0100362# Include Memory Tagging Extension registers in cpu context. This must be set
363# to 1 if the platform wants to use this feature in the Secure world and MTE is
364# enabled at ELX.
johpow01fa59c6f2020-10-02 13:41:11 -0500365CTX_INCLUDE_MTE_REGS := 0
Justin Chadwell1c7c13a2019-07-18 14:25:33 +0100366
Dimitris Papastamosfcedb692017-10-16 11:40:10 +0100367ENABLE_AMU := 0
Chris Kay925fda42021-05-25 10:42:56 +0100368ENABLE_AMU_AUXILIARY_COUNTERS := 0
Chris Kayf11909f2021-08-19 11:21:52 +0100369ENABLE_AMU_FCONF := 0
johpow01fa59c6f2020-10-02 13:41:11 -0500370AMU_RESTRICT_COUNTERS := 0
David Cunadoce88eee2017-10-20 11:30:57 +0100371
johpow019baade32021-07-08 14:14:00 -0500372# Enable SVE for non-secure world by default
373ENABLE_SVE_FOR_NS := 1
Yann Gautier7d917672021-11-19 11:35:46 +0100374# SVE is only supported on AArch64 so disable it on AArch32.
375ifeq (${ARCH},aarch32)
376 override ENABLE_SVE_FOR_NS := 0
377endif
johpow019baade32021-07-08 14:14:00 -0500378ENABLE_SVE_FOR_SWD := 0
379
Mark Brown64869972022-04-20 18:14:32 +0100380# Default SVE vector length to maximum architected value
381SVE_VECTOR_LEN := 2048
382
johpow019baade32021-07-08 14:14:00 -0500383# SME defaults to disabled
384ENABLE_SME_FOR_NS := 0
385ENABLE_SME_FOR_SWD := 0
386
387# If SME is enabled then force SVE off
388ifeq (${ENABLE_SME_FOR_NS},1)
389 override ENABLE_SVE_FOR_NS := 0
390 override ENABLE_SVE_FOR_SWD := 0
David Cunadoce88eee2017-10-20 11:30:57 +0100391endif
Justin Chadwell83e04882019-08-20 11:01:52 +0100392
393SANITIZE_UB := off
Soby Mathewad042012019-09-25 14:03:41 +0100394
395# For ARMv8.1 (AArch64) platforms, enabling this option selects the spinlock
396# implementation variant using the ARMv8.1-LSE compare-and-swap instruction.
397# Default: disabled
398USE_SPINLOCK_CAS := 0
zelalem-aweked5f45272019-11-12 16:20:17 -0600399
400# Enable Link Time Optimization
401ENABLE_LTO := 0
Max Shvetsovbdf502d2020-02-25 13:56:19 +0000402
403# Build flag to include EL2 registers in cpu context save and restore during
404# S-EL2 firmware entry/exit. This flag is to be used with SPD=spmd option.
405# Default is 0.
406CTX_INCLUDE_EL2_REGS := 0
Manish V Badarkhe75c972a2020-03-22 05:06:38 +0000407
408# Enable Memory tag extension which is supported for architecture greater
409# than Armv8.5-A
410# By default it is set to "no"
411SUPPORT_STACK_MEMTAG := no
Manish V Badarkhe2801ed42020-04-28 04:53:32 +0100412
413# Select workaround for AT speculative behaviour.
johpow019baade32021-07-08 14:14:00 -0500414ERRATA_SPECULATIVE_AT := 0
Varun Wadekar92234852020-06-12 10:11:28 -0700415
Manish Pandey7c6fcb42022-09-27 14:30:34 +0100416# Trap RAS error record access from Non secure
417RAS_TRAP_NS_ERR_REC_ACCESS := 0
Manish V Badarkhead339892020-06-29 10:32:53 +0100418
419# Build option to create cot descriptors using fconf
420COT_DESC_IN_DTB := 0
Manish V Badarkhe3589b702020-07-29 10:58:44 +0100421
Juan Pablo Conde3539c742022-10-25 19:41:02 -0400422# Build option to provide OpenSSL directory path
Manish V Badarkhe3589b702020-07-29 10:58:44 +0100423OPENSSL_DIR := /usr
Madhukar Pappireddy7a554a12020-08-12 13:18:19 -0500424
Salome Thirot0b35da32022-07-14 16:14:15 +0100425# Select the openssl binary provided in OPENSSL_DIR variable
426ifeq ("$(wildcard ${OPENSSL_DIR}/bin)", "")
427 OPENSSL_BIN_PATH = ${OPENSSL_DIR}/apps
428else
429 OPENSSL_BIN_PATH = ${OPENSSL_DIR}/bin
430endif
431
Madhukar Pappireddy7a554a12020-08-12 13:18:19 -0500432# Build option to use the SP804 timer instead of the generic one
433USE_SP804_TIMER := 0
Manish V Badarkhe2bb45ff2021-03-16 10:01:27 +0000434
435# Build option to define number of firmware banks, used in firmware update
436# metadata structure.
437NR_OF_FW_BANKS := 2
438
439# Build option to define number of images in firmware bank, used in firmware
440# update metadata structure.
441NR_OF_IMAGES_IN_FW_BANK := 1
Manish V Badarkhe99575e42021-06-25 23:28:59 +0100442
443# Disable Firmware update support by default
444PSA_FWU_SUPPORT := 0
Manish V Badarkhe20df29c2021-07-02 09:10:56 +0100445
446# By default, disable access of trace buffer control registers from NS
447# lower ELs i.e. NS-EL2, or NS-EL1 if NS-EL2 implemented but unused
448# if FEAT_TRBE is implemented.
449# Note FEAT_TRBE is only supported on AArch64 - therefore do not enable in
450# AArch32.
451ifneq (${ARCH},aarch32)
johpow019baade32021-07-08 14:14:00 -0500452 ENABLE_TRBE_FOR_NS := 0
Manish V Badarkhe20df29c2021-07-02 09:10:56 +0100453else
johpow019baade32021-07-08 14:14:00 -0500454 override ENABLE_TRBE_FOR_NS := 0
Manish V Badarkhe20df29c2021-07-02 09:10:56 +0100455endif
Manish V Badarkhef356f7e2021-06-29 11:44:20 +0100456
johpow0181865962022-01-28 17:06:20 -0600457# By default, disable access to branch record buffer control registers from NS
458# lower ELs i.e. NS-EL2, or NS-EL1 if NS-EL2 implemented but unused
459# if FEAT_BRBE is implemented.
460ENABLE_BRBE_FOR_NS := 0
461
Manish V Badarkhef356f7e2021-06-29 11:44:20 +0100462# By default, disable access of trace system registers from NS lower
463# ELs i.e. NS-EL2, or NS-EL1 if NS-EL2 implemented but unused if
464# system register trace is implemented.
465ENABLE_SYS_REG_TRACE_FOR_NS := 0
Manish V Badarkhe51a97112021-07-08 09:33:18 +0100466
467# By default, disable trace filter control registers access to NS
468# lower ELs, i.e. NS-EL2, or NS-EL1 if NS-EL2 implemented but unused
469# if FEAT_TRF is implemented.
470ENABLE_TRF_FOR_NS := 0
Jayanth Dodderi Chidanand4b5489c2022-03-28 15:28:55 +0100471
472# In v8.6+ platforms with delayed trapping of WFE being supported
473# via FEAT_TWED, this flag takes the delay value to be set in the
474# SCR_EL3.TWEDEL(4bit) field, when FEAT_TWED is implemented.
475# By default it takes 0, and need to be updated by the platforms.
476TWED_DELAY := 0
Tamas Banc9ccc272022-01-18 16:20:47 +0100477
478# By default, disable the mocking of RSS provided services
479PLAT_RSS_NOT_SUPPORTED := 0
Manish V Badarkhe191a5fc2022-03-02 12:06:35 +0000480
481# Dynamic Root of Trust for Measurement support
482DRTM_SUPPORT := 0
Okash Khawaja037b56e2022-11-04 12:38:01 +0000483
484# Check platform if cache management operations should be performed.
485# Disabled by default.
486CONDITIONAL_CMO := 0