- Tf-openci - lists.trustedfirmware.org

[Maintenance] LAVA instances downtime on Thursday 20/03 13:30

by Luís Tonicha

Hello all, This*Thursday, 20th March at 13:30 UTC* we will be doing some Kubernetes cluster maintenance where the following LAVA instances run: * "staging.validation.linaro.org" * "lkft-staging.validation.linaro.org" * "validation.linaro.org" * "lava.morello-project.org" * "ledge.validation.linaro.org" * "tf.validation.linaro.org" * "lkft.validation.linaro.org" * "iotil.validation.linaro.org" * "demo-rh.lavacloud.io" This*does not modify the instances nor their workers in any way*, just the underlying infra/. /During the process the instances/API endpoints might not be reachable. This is a major upgrade and its duration will be lengthier than usual - around *1h to 1h30m*. Apologies for the last minute announcement - this is an urgent operation related to a recent AWS release. As usual we will give a heads up once it's finished. Thanks for your collaboration. Regards, -- Luís Tonicha<luis.tonicha(a)linaro.org>

10 months, 1 week

1
1
0 0

Trusted Firmware v2.12 release announcement

by Olivier Deprez

Hi All, We are pleased to announce the formal release of Trusted Firmware-A version 2.12 bundle of project deliverables. This includes Trusted Firmware-A, Trusted Firmware-A Tests, Hafnium, RMM, Trusted Services, and TF-A OpenCI scripts/jobs components. These went live on Nov, 21st 2024. Please find references to tags and change logs at the end of this email. Many thanks to the trustedfirmware.org community for the active engagement in delivering this release! Notable features of the release version 2.12 are as follows: TF-A/EL3 * New CPUs support: Cortex-A320 (Arcadia), Cortex-A720AE. * Arch extensions: : FEAT_THE, FEAT_LS64_ACCDATA, FEAT_Debugv8p9, FEAT_SCTLR2, FEAT_FGT2 ; Arm 9.4 : FEAT_D128 support. * Context management: Asymmetric CPU features, EL3 execution context, SVE S/R support. * RME: GPT contiguous descriptor (or GPT large mappings support). * Arm CCA: added attestation generic library, el3 attestation token signing support. Boot flow * Tools: * Introduced the Transfer List Compiler (TLC) Host Tool supporting the FW hand-off specification. * Introduced CoT Device Tree to C File (DT2C) tool. * mbedTLS Improvements: * Resolved random authentication failures with ECDSA. * Enhanced mbedTLS configuration selection. * Maximize usage of mbedTLS library APIs in TF-A. * Upgraded to mbedTLS v3.6.1. * Feature addition/support: * Support for the ECDSA P-384 curve with the PSA Crypto implementation. * Documentation: * Added the DPE Design and Threat Model document to TF-A readthedocs. Errata (CPU/GIC) * Cortex-A720, Cortex-A520, Cortex-X4 errata. TF-A platforms support * New platforms added: TC4, RD-1 AE, RK3566/RK3568. * Platform fixes: FPGA, FVP, Neoverse-RD, TC, Corstone-1000, Allwinner, AST2700, Poplar, Agilex, A3K, MT8188, iMX8M, S32G274A, qemu, Rpi3, Rockchip, STM32MP1, STM32MP2, Versal, ZynqMP. Hafnium/SPM (S-EL2) * FF-A features additions * FF-A v1.2 FFA_MSG_WAIT RX buffer ownership flag. * FF-A v1.2 FFA_VERSION endpoint restriction. * FF-A v1.1 VM availability messages. * Architectural support * vCPU IPI signaling. * Arch timer virtualization. * RME: GPF support and memcpy hardening. * Secure Interrupt Handling for UP S-EL1 partitions. TF-RMM (R-EL2) * REL0 RMM 1.0 support. * Support for alternative attestation token signing via EL3. * Various improvements and bugfixes as listed in the change log. TF-A Tests * Arm arch. extensions: AMU, FEAT_FGT2, LS64_ACCDATA, FEAT_Debugv8p9, LS64 64-byte load/store. * Asymmetric feature testing (FEAT_SPE, FEAT_TRBE, FEAT_TCR2). * EL1 and EL2 context switch tests. * FF-A: v1.2 support, S-EL2 arch timer virtualization, S-EL2+RME hardening, EL3 SPMC TFTF test suite, EL3 SVE test coverage. * RME: RMM v1.0 testing support, PCIe DOE support, RMI support for FEAT_LPA2, SIMD, PAuth. * Platforms: AMD Versal Gen 2 added, Neoverse-RD refactoring, FVP PCIe support. Release tags across repositories: https://git.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/r… https://git.trustedfirmware.org/plugins/gitiles/TF-A/tf-a-tests/+/refs/tags… https://git.trustedfirmware.org/plugins/gitiles/ci/tf-a-ci-scripts/+/refs/t… https://git.trustedfirmware.org/plugins/gitiles/ci/tf-a-job-configs/+/refs/… https://git.trustedfirmware.org/plugins/gitiles/hafnium/hafnium/+/refs/tags… https://git.trustedfirmware.org/plugins/gitiles/ci/hafnium-ci-scripts/+/ref… https://git.trustedfirmware.org/plugins/gitiles/ci/hafnium-job-configs/+/re… https://git.trustedfirmware.org/plugins/gitiles/TF-RMM/tf-rmm/+/refs/tags/t… https://git.trustedfirmware.org/plugins/gitiles/TS/trusted-services/+/refs/… Change logs: https://trustedfirmware-a.readthedocs.io/en/v2.12.0/change-log.html#id1 https://trustedfirmware-a-tests.readthedocs.io/en/latest/change-log.html#ve… https://hafnium.readthedocs.io/en/v2.12.0/change-log.html#v2-12 https://tf-rmm.readthedocs.io/en/latest/about/change-log.html#v0-6-0 Regards, Olivier.

1 year, 2 months

1
0
0 0

[Maintenance] TF LAVA instance upgrade Thursday 14/11 at 10:30AM UTC

by Luís Tonicha

Hello all, We will be upgrading the TF LAVA instance to the latest 2024.09 release this Thursday (14/11) at 10:30AM UTC. Both the server and workers will be upgraded. Expected downtime is around 30 minutes. We will let you know once everything is back online. Thanks for your collaboration. Regards, -- Luís Tonicha <luis.tonicha(a)linaro.org>

1 year, 2 months

1
1
0 0

Apologies for spam from developer.trustedfirmware.org

by Kelley Spoon

Hello all, I'd like to apologize for any spam email messages you may have received from 'developer.trustedfirmware.org' recently. This was a server that had been retired several months that used to house the project's wiki. In an attempt to recover a document the server was put back online a short while ago. Unfortunately the mail service was left operational, and the web application began catching up on a backlog of messages and notifications. Once the problem was discovered, I shutdown the mail daemon on the server and have blocked all outbound mail traffic while I attempt to remove additional unsent messages. I apologize for the oversight that let this happen, and want to assure you that this was a unique event. Please reach out to me if you have any concerns. Thanks, -- Kelley Spoon <kelley.spoon(a)linaro.org>

1 year, 2 months

1
0
0 0

[Maintenance] TF LAVA instance downtime in 10 minutes

by Luís Tonicha

Hello all, We are currently undergoing infrastructure (Kubernetes) maintenance currently, which will affect the LAVA instance. The instance will be taken down in about 10 minutes and the expected downtime should be of around 45 minutes. Thanks for your collaboration. Once the maintenance is finished, we will announce. Regards, -- Luís Tonicha <luis.tonicha(a)linaro.org>

1 year, 5 months

1
1
0 0

Trusted Firmware v2.10 Release Announcement

by Olivier Deprez

Hi All, We are pleased to announce the formal release of Trusted Firmware-A version 2.10 bundle of project deliverables. This includes Trusted Firmware-A, Trusted Firmware-A Tests, Hafnium, RMM and TF-A OpenCI Scripts/Jobs 2.10 releases involving the tagging of multiple repositories. These went live on 22nd November 2023. Please find references to tags and change logs at the end of this email. Many thanks to the community for the active engagement in delivering this release! Notable Features of the Version 2.10 Release are as follows: TF-A/EL3 Root World * New Features: * Firmware handoff library support * Improvements to BL31 runtime exception handling * Context management refactoring for RME/4 worlds * Gelas, Nevis & Travis CPUs support * V8.9 features enabled (FEAT_ HAFT, RPRFM, LRCPC3, MTE_PERM) TF-A Boot BL1/BL2 * New Features * Trusted Boot support for ECDSA (Elliptic Curve Digital Signature Algorithm) * Migrated to PSA crypto API’s * Improved the GUID Partition Table (GPT) parser. * Various security Improvements and threat Model updates for ARM CCA * Signer id extraction Implementation Hafnium/SEL2 SPM * New Features: * FF-A v1.2: FFA_YIELD with time-out; EL3 SPMDs LSPs communication; memory sharing updates. * Memory region relative base address field support in SP manifests. * Interrupt re-configuration hypervisor calls. * Memory management: S2 PT NS/S IPA split * SMCCCv1.2+ compliance fixes. * Feature parity test improvements, EL3 SPMC and Hafnium (S-EL2 SPMC) TF-RMM/REL2 * New Feature/Support * Fenimore v1.0 EAC5 aligned implementation. * TFTF Enhancements for RME testing * Initial CBMC support * NS SME support in RMM * BTI support for RMM Errata * Errata implemented (1xCortex-X2/ Matterhorn-ELP, 1xCortex-A710/Matterhorn, 1xNeoverse N2/Perseus, 2xNeoverse V2/Demeter, Makalu ELP/Cortex X3, Klein/Cortex-A510) * Fix some minor defects with version in a few errata that applies for some follow up revisions of the CPUs. (Neoverse V1, Cortex-X2, Cortex-A710) TF-A Tests * Core * Added errata management firmware interface tests. * Added firmware handoff tests. * Introduced RAS KFH support test. * SPM/FF-A * Support SMCCCv1.2 extended GP registers set. * Test SMCCC compliance at the non-secure physical instance. * Test secure eSPI interrupt handling. * Test FF-A v1.2 FFA_PARTITION_INFO_GET_REGS interface. * RMM * Added FPU/SVE/SME tests * Added multiple REC single CPU tests. * Added PAuth support in Realms tests. * Added PMU tests. Platform Support * New platforms added: * Aspeed AST2700, NXP IMX93, Intel Agilex5, Nuvoton NPCM845x, QTI MDM9607, MSM8909, MSM8939, ST STM32MP2 Release tags across repositories: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/tag/?h=v2.10 https://git.trustedfirmware.org/TF-A/tf-a-tests.git/tag/?h=v2.10 https://git.trustedfirmware.org/ci/tf-a-ci-scripts.git/tag/?h=v2.10 https://git.trustedfirmware.org/ci/tf-a-job-configs.git/tag/?h=v2.10 https://git.trustedfirmware.org/hafnium/hafnium.git/tag/?h=v2.10 https://git.trustedfirmware.org/ci/hafnium-ci-scripts.git/tag/?h=v2.10 https://git.trustedfirmware.org/ci/hafnium-job-configs.git/tag/?h=v2.10 https://git.trustedfirmware.org/TF-RMM/tf-rmm.git/tag/?h=tf-rmm-v0.4.0 Change logs: https://trustedfirmware-a.readthedocs.io/en/v2.10/change-log.html#id1 https://trustedfirmware-a-tests.readthedocs.io/en/v2.10/change-log.html#ver… https://hafnium.readthedocs.io/en/latest/change-log.html#v2-10 https://tf-rmm.readthedocs.io/en/tf-rmm-v0.4.0/about/change-log.html#v0-4-0 Regards, Olivier.

1 year, 7 months

1
1
0 0

unannounced downtime on review.trustedfirmware.org

by Kelley Spoon

Greetings, Yesterday the gerrit server on review.trustedfirmware.org experienced significant downtime outside of any announced or scheduled maintenance windows starting around 5pm UTC. The downtime was caused by ansible deployment that was run to make some configuration changes and install a plugin. The deployment made several unintentional upgrades to other external plugins which were incompatible with our environment and prevented gerrit from restarting. As a result, for a 12 hour period the gerrit server was either off line or highly unstable. As of 5am UTC today, gerrit had been returned to its original state and resumed stable operation. I apologize for the unannounced downtime and any inconvenience that it caused, and we are reviewing the events to ensure a similar situation doesn't occur again, Regards, -- Kelley Spoon <kelley.spoon(a)linaro.org>

1 year, 11 months

1
0
0 0

OpenCI FVP Tuxsuite AWS Performance testing

by Joanna Farley

FYI at the weekend I ran an OpenCI Performance test to see if the Tuxsuite AWS changes for running FVP based TF-A tests helps with the management of load and execution times over running the FVP tests on physical servers. In short it does help! See https://discord.com/channels/1106321706588577904/1210643193834508338 for details and analysis. Joanna IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.

1 year, 11 months

1
0
0 0

[Maintenance] - tf.validation.linaro.org down on 2023-02-09 9:30AM

by Luís Tonicha

Hello all, My name is Luís and I'm part of the Deployments team. We will be migrating the TF LAVA instance from its current deployment to our new, Kubernetes-based platform, this Friday (09/02) at 9:30 (AM) UTC. This means that the tf.validation.linaro.org service will be down for the expected downtime of 2 to 3 hours. This is just a migration so no down/upgrades or configuration changes to LAVA will happen. Once the service is back online we'll announce it. Thanks for your collaboration. Regards, -- Luís Tonicha <luis.tonicha(a)linaro.org>

1 year, 11 months

1
2
0 0

[Maintenance] - urgent downtime for all Jenkins servers today 2024-01-29

by Kelley Spoon

Greetings All, The Jenkins servers on ci-staging.trustedfirmware ci.trustedfirmware.org and mbedtls.trustedfirmware.org will all be put into safe mode in a few moments in preparation for a shutdown around 6pm UTC today. The purpose of this is to perform an upgrade to the server to address a critical CVE discovered for the version of Jenkins running on all servers. Regards, -- Kelley Spoon <kelley.spoon(a)linaro.org>

1 year, 11 months

1
1
0 0

2026

2025

2024

2023

2022

Tf-openci