wolfSSL / meta-wolfssl

wolfSSL layer for OpenEmbedded and Yocto, containing product recipes, examples, and bbappend files.
https://www.wolfssl.com
GNU General Public License v2.0
30 stars 22 forks source link

How can I build wolftpm examples with Yocto? #91

Open pclass-isolated opened 2 months ago

pclass-isolated commented 2 months ago

How can I enable the wolftpm examples? I am looking to build the examples found here: https://github.com/wolfSSL/wolfTPM/tree/master/examples

In my own layer, I created my own recipes-wolfssl/wolftpm/wolftpm_%.bbappend and added the following:

EXTRA_OECONF += " --enable-infineon --enable-examples "

I can see that the --enable-examples and --enable-infineon flags are used in the build - however I see no examples built in the output 'image' directory or root file system in the final image.

run.do_configure.1073921: bbnote "Running $cfgscript --build=x86_64-linux --host=aarch64-poky-linux --target=aarch64-poky-linux --prefix=/usr --exec_prefix=/usr --bindir=/usr/bin --sbindir=/usr/sbin --libexecdir=/usr/libexec --datadir=/usr/share --sysconfdir=/etc --sharedstatedir=/com --localstatedir=/var --libdir=/usr/lib --includedir=/usr/include --oldincludedir=/usr/include --infodir=/usr/share/info --mandir=/usr/share/man --disable-silent-rules --disable-dependency-tracking --with-libtool-sysroot=/home/developer/company-nxp-bsp/build-imx8plus/tmp/work/armv8a-poky-linux/wolftpm/3.2.0-r0/recipe-sysroot --with-wolfcrypt=/home/developer/company-nxp-bsp/build-imx8plus/tmp/sysroots-components/armv8a/wolfssl/usr --enable-infineon --enable-examples --disable-static $@"

dgarske commented 2 months ago

Hi @pclass-isolated ,

It looks like we will have to add support for that. Which wolfTPM examples are you interested in having built and installed with Yocto?

Can you tell us more about your project and use-case?

Thanks, David Garske, wolfSSL

pclass-isolated commented 2 months ago

Hi @dgarske,

Thanks for the response. I am interested specifically in these attestation examples: https://github.com/wolfSSL/wolfTPM/tree/master/examples/attestation

However, I think the entire TPM examples directory would be great to have to evaluate the library against my TPM.

I am working on an arm64 based embedded Linux project that needs to interact with the TPM pretty extensively and remote attestation is one of the goals.

Thanks, Phil

dgarske commented 1 month ago

Hi @pclass-isolated ,

We have made some progress getting the TPM examples added. The current development branch is here -> https://github.com/aidangarske/meta-wolfssl/blob/yoctoSupport/recipes-wolfssl/wolftpm/wolftpm_%25.bbappend We should have a PR up soon.

Thanks, David Garske, wolfSSL

pclass-isolated commented 1 month ago

@dgarske - Awesome! Thanks for updating me on this.

aidangarske commented 1 month ago

Hi @pclass-isolated,

There is a pr up now for wolfTPM example support with yocto found here --> #92 Please give it a try and let me know how it works with your tpm!

Thank you, Aidan Garske, wolfSSL