Skip to end of banner
Go to start of banner

May - August 2024

Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 5 Next »

Mikko Rapeli

  • Upstream TRS secure boot and TPM based encryption

    • meta-arm merges our fTPM/tf-a patches

    • poky merges our uki.bbclass and tests

    • meta-security merges our dm-verity, systemd initramfs patches

    • improve systemd TPM module loading support

  • Minimal support for TRS

    • TRS builds latest poky, meta-arm etc upstream main/master branches

    • Regressions get fixed and submitted back to upstream projects

  • TS maintenance

    • TS 0.5 release

    • TS builds latest poky, meta-arm etc main/master branches

    • Regressions get get fixed and submitted back to upstream project

Jens Wiklander

  • OP-TEE maintenance

    • OP-TEE patch reviews and merges

    • OP-TEE releases

  • OP-TEE supplicant moved in kernel

    • Enhance Linux userspace and make it easier for distros to use Secure UEFI variables and TPMs

    • Merge patches in kernel upstream

  • U-Boot Memory Tagging extensions PoC

    • Provide out of tree patches that enable MTE support

    • Decide if it’s worth merging those upstream

  • Dynamic memory support for OP-TEE

    • OP-TEE improved memory usage

    • Patches merged in OP-TEE

  • XEN & FF-A async notifications

    • FF-A improved support for XEN

    • Patches merged to XEN and/or OP-TEE

Caleb Connolly

  • ACS conformance for RB2

    • Capsule update support for RB2 merged in U-Boot

    • ACS passing successfully on RB2

    • Fedora support for RB2 – Fedora public .iso installs on RB2 boards

  • U-Boot enhancements

    • Dynamic UUIDs for capsule updates

    • USB support for RB5

    • Patches merged upstream

Raymond Mao

  • Add mbedTLS support in U-Boot

    • Patches merged upstream

  • mbedTLS improvements

    • Add MSCode and multiple certs support in MBedtls PKCS7 library needed for UEFI Secure Boot

    • Secure Boot selftests passing in U-Boot

    • Patches merged upstream

  • No labels