mirror of
https://github.com/NixOS/nixos-hardware.git
synced 2025-11-07 02:18:47 +08:00
- Move openssl to nativeBuildInputs in ATF build for proper cross-compilation - Add explicit SILICON validation with clear error messages in firmware build - Fix fragile wildcard patterns in firmware DDR file copying - Replace mutable branch URLs with pinned commit hashes for patch stability - Add U-Boot config merge step (make olddefconfig) after extra config - Fix cross-compilation toolchain coherence (cpp in optee-os) - Standardize license format (single value instead of single-element list) - Update maintainer references with inline name/email format - Fix typos and grammar in documentation and comments
65 lines
1.3 KiB
Nix
65 lines
1.3 KiB
Nix
{
|
|
lib,
|
|
fetchFromGitHub,
|
|
stdenv,
|
|
buildPackages,
|
|
pkgsCross,
|
|
openssl,
|
|
}:
|
|
|
|
let
|
|
target-board = "imx95";
|
|
in
|
|
stdenv.mkDerivation rec {
|
|
pname = "imx95-atf";
|
|
version = "2.13.0";
|
|
platform = target-board;
|
|
enableParallelBuilding = true;
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "nxp-imx";
|
|
repo = "imx-atf";
|
|
rev = "28affcae957cb8194917b5246276630f9e6343e1";
|
|
sha256 = "sha256-a8F+Lf8pwML+tCwawS0N/mrSXWPmFhlUeOg0MCRK3VE=";
|
|
};
|
|
|
|
# Compiler dependencies
|
|
depsBuildBuild = [ buildPackages.stdenv.cc ];
|
|
nativeBuildInputs = [
|
|
pkgsCross.aarch64-embedded.stdenv.cc
|
|
openssl
|
|
];
|
|
|
|
makeFlags = [
|
|
"HOSTCC=$(CC_FOR_BUILD)"
|
|
"CROSS_COMPILE=${pkgsCross.aarch64-embedded.stdenv.cc.targetPrefix}"
|
|
"PLAT=${platform}"
|
|
"SPD=opteed"
|
|
"bl31"
|
|
"LDFLAGS=-no-warn-rwx-segments"
|
|
];
|
|
|
|
installPhase = ''
|
|
runHook preInstall
|
|
mkdir -p $out
|
|
cp build/${target-board}/release/bl31.bin $out
|
|
runHook postInstall
|
|
'';
|
|
|
|
hardeningDisable = [ "all" ];
|
|
dontStrip = true;
|
|
|
|
meta = with lib; {
|
|
homepage = "https://github.com/nxp-imx/imx-atf";
|
|
description = "Reference implementation of secure world software for ARMv8-A";
|
|
license = licenses.bsd3;
|
|
maintainers = [
|
|
{
|
|
name = "Govind Singh";
|
|
email = "govind.singh@tii.ae";
|
|
}
|
|
];
|
|
platforms = [ "aarch64-linux" ];
|
|
};
|
|
}
|