整体工程目录
bash
test0923@test0923-PC:~/workspace/optee400$ tree -L 1
.
├── build
├── buildroot
├── hafnium
├── linux
├── mbedtls
├── optee_benchmark
├── optee_client
├── optee_examples -> ../optee_examples_AG519M/
├── optee_examples.bak
├── optee_os
├── optee_rust
├── optee_test
├── out
├── out-br
├── qemu
├── toolchains
├── trusted-firmware-a
└── u-boot
18 directories, 0 files
test0923@test0923-PC:~/workspace/optee400$ 构建 export-ca_arm64
bash
test0923@test0923-PC:~/workspace/optee400/optee_client/build$ cmake -DCMAKE_C_COMPILER=/home/test0923/workspace/optee400/toolchains/aarch64/bin/aarch64-linux-gnu-gcc -DCMAKE_INSTALL_PREFIX=/home/test0923/workspace/optee400/optee_client/export-ca_arm64/ ..
-- The C compiler identification is GNU 11.3.1
-- Detecting C compiler ABI info
-- Detecting C compiler ABI info - done
-- Check for working C compiler: /home/test0923/workspace/optee400/toolchains/aarch64/bin/aarch64-linux-gnu-gcc - skipped
-- Detecting C compile features
-- Detecting C compile features - done
-- Looking for pthread.h
-- Looking for pthread.h - found
-- Performing Test CMAKE_HAVE_LIBC_PTHREAD
-- Performing Test CMAKE_HAVE_LIBC_PTHREAD - Success
-- Found Threads: TRUE
-- Found PkgConfig: /usr/bin/pkg-config (found version "0.29.2")
-- Checking for module 'uuid'
-- Found uuid, version 2.37.2
-- Configuring done
-- Generating done
-- Build files have been written to: /home/test0923/workspace/optee400/optee_client/build
test0923@test0923-PC:~/workspace/optee400/optee_client/build$ make
[ 3%] Building C object libteec/CMakeFiles/teec.dir/src/tee_client_api.c.o
[ 7%] Building C object libteec/CMakeFiles/teec.dir/src/teec_trace.c.o
[ 10%] Linking C static library libteec.a
[ 10%] Built target teec
[ 14%] Building C object tee-supplicant/CMakeFiles/tee-supplicant.dir/src/handle.c.o
[ 17%] Building C object tee-supplicant/CMakeFiles/tee-supplicant.dir/src/hmac_sha2.c.o
[ 21%] Building C object tee-supplicant/CMakeFiles/tee-supplicant.dir/src/rpmb.c.o
[ 25%] Building C object tee-supplicant/CMakeFiles/tee-supplicant.dir/src/sha2.c.o
[ 28%] Building C object tee-supplicant/CMakeFiles/tee-supplicant.dir/src/tee_supp_fs.c.o
[ 32%] Building C object tee-supplicant/CMakeFiles/tee-supplicant.dir/src/tee_supplicant.c.o
[ 35%] Building C object tee-supplicant/CMakeFiles/tee-supplicant.dir/src/teec_ta_load.c.o
[ 39%] Building C object tee-supplicant/CMakeFiles/tee-supplicant.dir/src/tee_socket.c.o
[ 42%] Building C object tee-supplicant/CMakeFiles/tee-supplicant.dir/src/prof.c.o
[ 46%] Building C object tee-supplicant/CMakeFiles/tee-supplicant.dir/src/plugin.c.o
[ 50%] Linking C executable tee-supplicant
[ 50%] Built target tee-supplicant
[ 53%] Building C object libckteec/CMakeFiles/ckteec.dir/src/pkcs11_api.c.o
[ 57%] Building C object libckteec/CMakeFiles/ckteec.dir/src/ck_debug.c.o
[ 60%] Building C object libckteec/CMakeFiles/ckteec.dir/src/ck_helpers.c.o
[ 64%] Building C object libckteec/CMakeFiles/ckteec.dir/src/invoke_ta.c.o
[ 67%] Building C object libckteec/CMakeFiles/ckteec.dir/src/pkcs11_processing.c.o
[ 71%] Building C object libckteec/CMakeFiles/ckteec.dir/src/pkcs11_token.c.o
[ 75%] Building C object libckteec/CMakeFiles/ckteec.dir/src/serializer.c.o
[ 78%] Building C object libckteec/CMakeFiles/ckteec.dir/src/serialize_ck.c.o
[ 82%] Linking C static library libckteec.a
[ 82%] Built target ckteec
[ 85%] Building C object libteeacl/CMakeFiles/teeacl.dir/src/group.c.o
[ 89%] Building C object libteeacl/CMakeFiles/teeacl.dir/src/tee_uuid.c.o
[ 92%] Linking C static library libteeacl.a
[ 92%] Built target teeacl
[ 96%] Building C object libseteec/CMakeFiles/seteec.dir/src/se.c.o
[100%] Linking C static library libseteec.a
[100%] Built target seteec
test0923@test0923-PC:~/workspace/optee400/optee_client/build$ make install
Consolidate compiler generated dependencies of target teec
[ 10%] Built target teec
Consolidate compiler generated dependencies of target tee-supplicant
[ 50%] Built target tee-supplicant
Consolidate compiler generated dependencies of target ckteec
[ 82%] Built target ckteec
Consolidate compiler generated dependencies of target teeacl
[ 92%] Built target teeacl
Consolidate compiler generated dependencies of target seteec
[100%] Built target seteec
Install the project...
-- Install configuration: ""
-- Installing: /home/test0923/workspace/optee400/optee_client/export-ca_arm64/lib/libteec.a
-- Installing: /home/test0923/workspace/optee400/optee_client/export-ca_arm64/include
-- Installing: /home/test0923/workspace/optee400/optee_client/export-ca_arm64/include/teec_trace.h
-- Installing: /home/test0923/workspace/optee400/optee_client/export-ca_arm64/include/tee_plugin_method.h
-- Installing: /home/test0923/workspace/optee400/optee_client/export-ca_arm64/include/tee_client_api.h
-- Installing: /home/test0923/workspace/optee400/optee_client/export-ca_arm64/include/tee_bench.h
-- Installing: /home/test0923/workspace/optee400/optee_client/export-ca_arm64/include/tee_client_api_extensions.h
-- Installing: /home/test0923/workspace/optee400/optee_client/export-ca_arm64/lib/pkgconfig/libteec.pc
-- Installing: /home/test0923/workspace/optee400/optee_client/export-ca_arm64/sbin/tee-supplicant
-- Set runtime path of "/home/test0923/workspace/optee400/optee_client/export-ca_arm64/sbin/tee-supplicant" to "/usr/lib/tee-supplicant/plugins/"
-- Installing: /home/test0923/workspace/optee400/optee_client/export-ca_arm64/lib/libckteec.a
-- Installing: /home/test0923/workspace/optee400/optee_client/export-ca_arm64/include/ck_debug.h
-- Installing: /home/test0923/workspace/optee400/optee_client/export-ca_arm64/include/pkcs11.h
-- Installing: /home/test0923/workspace/optee400/optee_client/export-ca_arm64/include/pkcs11_ta.h
-- Installing: /home/test0923/workspace/optee400/optee_client/export-ca_arm64/lib/libteeacl.a
-- Up-to-date: /home/test0923/workspace/optee400/optee_client/export-ca_arm64/include
-- Installing: /home/test0923/workspace/optee400/optee_client/export-ca_arm64/include/teeacl.h
-- Installing: /home/test0923/workspace/optee400/optee_client/export-ca_arm64/lib/libseteec.a
-- Installing: /home/test0923/workspace/optee400/optee_client/export-ca_arm64/include/se_tee.h
test0923@test0923-PC:~/workspace/optee400/optee_client/build$
test0923@test0923-PC:~/workspace/optee400/optee_client/build$
test0923@test0923-PC:~/workspace/optee400/optee_client/build$ cd ..
test0923@test0923-PC:~/workspace/optee400/optee_client$ ls
android_flags.mk ci config.mk libckteec libteec README.md typedefs.checkpatch
Android.mk CMakeLists.txt export-ca_arm64 libseteec LICENSE scripts
build CMakeToolchain.txt flags.mk libteeacl Makefile tee-supplicant
test0923@test0923-PC:~/workspace/optee400/optee_client$
test0923@test0923-PC:~/workspace/optee400/optee_client$
test0923@test0923-PC:~/workspace/optee400/optee_client$
test0923@test0923-PC:~/workspace/optee400/optee_client$ cd build/
test0923@test0923-PC:~/workspace/optee400/optee_client/build$ ls
CMakeCache.txt cmake_install.cmake libckteec libteeacl Makefile
CMakeFiles install_manifest.txt libseteec libteec tee-supplicant
test0923@test0923-PC:~/workspace/optee400/optee_client/build$ cd ..
test0923@test0923-PC:~/workspace/optee400/optee_client$ ls
android_flags.mk ci config.mk libckteec libteec README.md typedefs.checkpatch
Android.mk CMakeLists.txt export-ca_arm64 libseteec LICENSE scripts
build CMakeToolchain.txt flags.mk libteeacl Makefile tee-supplicant
test0923@test0923-PC:~/workspace/optee400/optee_client$ cd libckteec/
test0923@test0923-PC:~/workspace/optee400/optee_client/libckteec$ ls
CMakeLists.txt include Makefile src
test0923@test0923-PC:~/workspace/optee400/optee_client/libckteec$ cd ..
test0923@test0923-PC:~/workspace/optee400/optee_client$ ls
android_flags.mk ci config.mk libckteec libteec README.md typedefs.checkpatch
Android.mk CMakeLists.txt export-ca_arm64 libseteec LICENSE scripts
build CMakeToolchain.txt flags.mk libteeacl Makefile tee-supplicant
test0923@test0923-PC:~/workspace/optee400/optee_client$ cd export-ca_arm64/
test0923@test0923-PC:~/workspace/optee400/optee_client/export-ca_arm64$ ls
include lib sbin
test0923@test0923-PC:~/workspace/optee400/optee_client/export-ca_arm64$ 在optee_examples顶层CMakeLists.txt增加 export-ca_arm64 引用
add include_directories()
add link_directories()
bash
cmake_minimum_required (VERSION 3.2)
project (optee_examples C)
# https://cmake.org/Wiki/CMake_Useful_Variables
set (CMAKE_TOOLCHAIN_FILE CMakeToolchain.txt)
include_directories(/home/test0923/workspace/optee400/optee_client/export-ca_arm64/include)
link_directories(/home/test0923/workspace/optee400/optee_client/export-ca_arm64/lib)
include(GNUInstallDirs)
add_compile_options (-Wall)构建 ca
bash
test0923@test0923-PC:~/workspace/optee400/optee_examples$ cd build/
test0923@test0923-PC:~/workspace/optee400/optee_examples/build$ cmake -DCMAKE_C_COMPILER=/home/test0923/workspace/optee400/toolchains/aarch32/bin/arm-linux-gnueabihf-gcc ..
-- The C compiler identification is GNU 11.3.1
-- Detecting C compiler ABI info
-- Detecting C compiler ABI info - done
-- Check for working C compiler: /home/test0923/workspace/optee400/toolchains/aarch32/bin/arm-linux-gnueabihf-gcc - skipped
-- Detecting C compile features
-- Detecting C compile features - done
-- Configuring done
-- Generating done
-- Build files have been written to: /home/test0923/workspace/optee400/optee_examples/build
test0923@test0923-PC:~/workspace/optee400/optee_examples/build$
# 32bit
test0923@test0923-PC:~/workspace/optee400/optee_examples/build$ cmake -DCMAKE_C_COMPILER=/home/test0923/workspace/optee400/toolchains/aarch32/bin/arm-linux-gnueabihf-gcc ..
-- The C compiler identification is GNU 11.3.1
-- Detecting C compiler ABI info
-- Detecting C compiler ABI info - done
-- Check for working C compiler: /home/test0923/workspace/optee400/toolchains/aarch32/bin/arm-linux-gnueabihf-gcc - skipped
-- Detecting C compile features
-- Detecting C compile features - done
-- Configuring done
-- Generating done
-- Build files have been written to: /home/test0923/workspace/optee400/optee_examples/build
# or 64bit
test0923@test0923-PC:~/workspace/optee400/optee_examples/build$ cmake -DCMAKE_C_COMPILER=/home/test0923/workspace/optee400/toolchains/aarch64/bin/aarch64-linux-gnu-gcc ..
-- The C compiler identification is GNU 11.3.1
-- Detecting C compiler ABI info
-- Detecting C compiler ABI info - done
-- Check for working C compiler: /home/test0923/workspace/optee400/toolchains/aarch64/bin/aarch64-linux-gnu-gcc - skipped
-- Detecting C compile features
-- Detecting C compile features - done
-- Configuring done
-- Generating done
-- Build files have been written to: /home/test0923/workspace/optee400/optee_examples/build
test0923@test0923-PC:~/workspace/optee400/optee_examples/build$ make
[ 5%] Building C object acipher/CMakeFiles/optee_example_acipher.dir/host/main.c.o
[ 11%] Linking C executable optee_example_acipher
[ 11%] Built target optee_example_acipher
[ 16%] Building C object aes/CMakeFiles/optee_example_aes.dir/host/main.c.o
[ 22%] Linking C executable optee_example_aes
[ 22%] Built target optee_example_aes
[ 27%] Building C object hello_world/CMakeFiles/optee_example_hello_world.dir/host/main.c.o
[ 33%] Linking C executable optee_example_hello_world
[ 33%] Built target optee_example_hello_world
[ 38%] Building C object hotp/CMakeFiles/optee_example_hotp.dir/host/main.c.o
[ 44%] Linking C executable optee_example_hotp
[ 44%] Built target optee_example_hotp
[ 50%] Building C object plugins/CMakeFiles/optee_example_plugins.dir/host/main.c.o
[ 55%] Linking C executable optee_example_plugins
[ 55%] Built target optee_example_plugins
[ 61%] Building C object plugins/syslog/CMakeFiles/96bcf744-4f72-4866-bf1d-8634fd9c65e5.plugin.dir/syslog_plugin.c.o
[ 66%] Linking C shared library 96bcf744-4f72-4866-bf1d-8634fd9c65e5.plugin.so
[ 66%] Built target 96bcf744-4f72-4866-bf1d-8634fd9c65e5.plugin
[ 72%] Building C object random/CMakeFiles/optee_example_random.dir/host/main.c.o
[ 77%] Linking C executable optee_example_random
[ 77%] Built target optee_example_random
[ 83%] Building C object secure_storage/CMakeFiles/optee_example_secure_storage.dir/host/main.c.o
[ 88%] Linking C executable optee_example_secure_storage
[ 88%] Built target optee_example_secure_storage
[ 94%] Building C object tbox_keystore/CMakeFiles/optee_example_tbox_keystore.dir/host/keystore_client.c.o
[100%] Linking C executable optee_example_tbox_keystore
[100%] Built target optee_example_tbox_keystore构建 ta
bash
test0923@test0923-PC:~/workspace/optee400/optee_examples/tbox_keystore/ta$ export ARCH=arm
test0923@test0923-PC:~/workspace/optee400/optee_examples/tbox_keystore/ta$ export PATH=/home/test0923/workspace/optee400/toolchains/aarch64/bin:$PATH
test0923@test0923-PC:~/workspace/optee400/optee_examples/tbox_keystore/ta$ export CROSS_COMPILE=aarch64-linux-gnu-
test0923@test0923-PC:~/workspace/optee400/optee_examples/tbox_keystore/ta$ export PLATFORM=vexpress-qemu_virt
test0923@test0923-PC:~/workspace/optee400/optee_examples/tbox_keystore/ta$ export TA_DEV_KIT_DIR=/home/test0923/workspace/optee400/optee_os/out/arm/export-ta_arm64
test0923@test0923-PC:~/workspace/optee400/optee_examples/tbox_keystore/ta$ make
CC entry.o
CC pin_mgr.o
...
cc1: note: unrecognized command-line option '-Wno-c2x-extensions' may have been intended to silence earlier diagnostics
CC user_ta_header.o
CPP ta.lds
GEN dyn_list
UPD dyn_list
LD f8e9209a-3c7d-4d6b-a15e-7f328b11c049.elf
OBJDUMP f8e9209a-3c7d-4d6b-a15e-7f328b11c049.dmp
OBJCOPY f8e9209a-3c7d-4d6b-a15e-7f328b11c049.stripped.elf
SIGN f8e9209a-3c7d-4d6b-a15e-7f328b11c049.ta
test0923@test0923-PC:~/workspace/optee400/optee_examples/tbox_keystore/ta$ ls
acl.c entry.c f8e9209a-3c7d-4d6b-a15e-7f328b11c049.ta pin_mgr.o
acl.o entry.o include sub.mk
Android.mk f8e9209a-3c7d-4d6b-a15e-7f328b11c049.dmp keystore.c ta.lds
crypto_ops.c f8e9209a-3c7d-4d6b-a15e-7f328b11c049.elf keystore.o user_ta_header_defines.h
crypto_ops.o f8e9209a-3c7d-4d6b-a15e-7f328b11c049.map Makefile user_ta_header.o
dyn_list f8e9209a-3c7d-4d6b-a15e-7f328b11c049.stripped.elf pin_mgr.c
test0923@test0923-PC:~/workspace/optee400/optee_examples/tbox_keystore/ta$ file f8e9209a-3c7d-4d6b-a15e-7f328b11c049.elf
f8e9209a-3c7d-4d6b-a15e-7f328b11c049.elf: ELF 64-bit LSB pie executable, ARM aarch64, version 1 (SYSV), static-pie linked, with debug_info, not stripped运行 qemu
bash
test0923@test0923-PC:~/workspace/optee400/build$ make -f qemu_v8.mk all -j4
...
rootdir=/home/test0923/workspace/optee400/out-br/build/buildroot-fs/tar/target
table='/home/test0923/workspace/optee400/out-br/build/buildroot-fs/full_devices_table.txt'
rootdir=/home/test0923/workspace/optee400/out-br/build/buildroot-fs/cpio/target
table='/home/test0923/workspace/optee400/out-br/build/buildroot-fs/full_devices_table.txt'
PATH="/home/test0923/workspace/optee400/out-br/host/bin:/home/test0923/workspace/optee400/out-br/host/sbin:/home/test0923/.nvm/versions/node/v22.23.0/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin:/snap/bin" gzip -9 -c -n /home/test0923/workspace/optee400/out-br/images/rootfs.cpio > /home/test0923/workspace/optee400/out-br/images/rootfs.cpio.gz
make[1]: Leaving directory '/home/test0923/workspace/optee400/out-br'
ln -sf /home/test0923/workspace/optee400/build/../out-br/images/rootfs.cpio.gz /home/test0923/workspace/optee400/build/../out/bin
/home/test0923/workspace/optee400/build/../u-boot/tools/mkimage -A arm64 \
-T ramdisk \
-C gzip \
-a 0x45000000 \
-e 0x45000000 \
-n "Root file system" \
-d /home/test0923/workspace/optee400/build/../out/bin/rootfs.cpio.gz /home/test0923/workspace/optee400/build/../out/bin/rootfs.cpio.uboot
Image Name: Root file system
Created: Sun Jul 19 21:16:53 2026
Image Type: AArch64 Linux RAMDisk Image (gzip compressed)
Data Size: 8968470 Bytes = 8758.27 KiB = 8.55 MiB
Load Address: 45000000
Entry Point: 45000000
CALL scripts/checksyscalls.sh
make[1]: Leaving directory '/home/test0923/workspace/optee400/linux'
mkdir -p /home/test0923/workspace/optee400/build/../out/bin
ln -sf /home/test0923/workspace/optee400/build/../linux/arch/arm64/boot/Image /home/test0923/workspace/optee400/build/../out/bin
/home/test0923/workspace/optee400/build/../toolchains/aarch64/bin/aarch64-linux-gnu-objcopy -O binary \
-R .note \
-R .comment \
-S /home/test0923/workspace/optee400/build/../linux/vmlinux \
/home/test0923/workspace/optee400/build/../out/bin/linux.bin
/home/test0923/workspace/optee400/build/../u-boot/tools/mkimage -A arm64 \
-O linux \
-T kernel \
-C none \
-a 0x42200000 \
-e 0x42200000 \
-n "Linux kernel" \
-d /home/test0923/workspace/optee400/build/../out/bin/linux.bin /home/test0923/workspace/optee400/build/../out/bin/uImage
Image Name: Linux kernel
Created: Sun Jul 19 21:17:13 2026
Image Type: AArch64 Linux Kernel Image (uncompressed)
Data Size: 38783488 Bytes = 37874.50 KiB = 36.99 MiB
Load Address: 42200000
Entry Point: 42200000
test0923@test0923-PC:~/workspace/optee400/build$
test0923@test0923-PC:~/workspace/optee400/build$ make -f qemu_v8.mk run-only
ln -sf /home/test0923/workspace/optee400/build/../out-br/images/rootfs.cpio.gz /home/test0923/workspace/optee400/build/../out/bin/
* QEMU is now waiting to start the execution
* Start execution with either a 'c' followed by <enter> in the QEMU console or
* attach a debugger and continue from there.
*
* To run OP-TEE tests, use the xtest command in the 'Normal World' terminal
* Enter 'xtest -h' for help.
cd /home/test0923/workspace/optee400/build/../out/bin && /home/test0923/workspace/optee400/build/../qemu/build/aarch64-softmmu/qemu-system-aarch64 \
-nographic \
-serial tcp:127.0.0.1:54320 -serial tcp:127.0.0.1:54321 \
-smp 2 \
-s -S -machine virt,acpi=off,secure=on,mte=off,gic-version=3,virtualization=false \
-cpu max,sme=on,pauth-impdef=on \
-d unimp -semihosting-config enable=on,target=native \
-m 1057 \
-bios bl1.bin \
-initrd rootfs.cpio.gz \
-kernel Image \
-append 'console=ttyAMA0,38400 keep_bootcon root=/dev/vda2 ' \
\
-object rng-random,filename=/dev/urandom,id=rng0 -device virtio-rng-pci,rng=rng0,max-bytes=1024,period=1000 -netdev user,id=vmnic -device virtio-net-device,netdev=vmnic
QEMU 8.0.0 monitor - type 'help' for more information
(qemu) c
(qemu) q
test0923@test0923-PC:~/workspace/optee400/build$
test0923@test0923-PC:~/workspace/optee400/build$
test0923@test0923-PC:~/workspace/optee400/build$Normal World
bash
buildroot login: root
#
# cd /usr/bin/
# ./optee_example_
optee_example_acipher optee_example_plugins
optee_example_aes optee_example_random
optee_example_hello_world optee_example_secure_storage
optee_example_hotp optee_example_tbox_keystore
# ./optee_example_tbox_keystore --init-pin a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6
PIN initialized.
#