blob: a211f66068b5565612119c3d606bed1fb2caa6c1 [file] [log] [blame]
Jeenu Viswambharan2fae4b12016-10-24 14:31:51 +01001#
Sandrine Bailleux3bff9102020-01-15 10:23:25 +01002# Copyright (c) 2016-2020, ARM Limited and Contributors. All rights reserved.
Jeenu Viswambharan2fae4b12016-10-24 14:31:51 +01003#
dp-arm82cb2c12017-05-03 09:38:09 +01004# SPDX-License-Identifier: BSD-3-Clause
Jeenu Viswambharan2fae4b12016-10-24 14:31:51 +01005#
6
7# Default, static values for build variables, listed in alphabetic order.
8# Dependencies between build options, if any, are handled in the top-level
9# Makefile, after this file is included. This ensures that the former is better
10# poised to handle dependencies, as all build variables would have a default
11# value by then.
12
Antonio Nino Diaz8fd9d4d2018-08-08 16:28:43 +010013# Use T32 by default
14AARCH32_INSTRUCTION_SET := T32
15
Jeenu Viswambharan2fae4b12016-10-24 14:31:51 +010016# The AArch32 Secure Payload to be built as BL32 image
17AARCH32_SP := none
18
19# The Target build architecture. Supported values are: aarch64, aarch32.
20ARCH := aarch64
21
Jeenu Viswambharanc877b412017-01-16 16:52:35 +000022# ARM Architecture major and minor versions: 8.0 by default.
23ARM_ARCH_MAJOR := 8
24ARM_ARCH_MINOR := 0
25
Jeenu Viswambharan2fae4b12016-10-24 14:31:51 +010026# Base commit to perform code check on
27BASE_COMMIT := origin/master
28
Roberto Vargasb1d27b42017-10-30 14:43:43 +000029# Execute BL2 at EL3
30BL2_AT_EL3 := 0
31
Jiafei Pan7d173fc2018-03-21 07:20:09 +000032# BL2 image is stored in XIP memory, for now, this option is only supported
33# when BL2_AT_EL3 is 1.
34BL2_IN_XIP_MEM := 0
35
Hadi Asyrafib90f2072019-08-20 15:33:27 +080036# Do dcache invalidate upon BL2 entry at EL3
37BL2_INV_DCACHE := 1
38
Alexei Fedorov9fc59632019-05-24 12:17:09 +010039# Select the branch protection features to use.
40BRANCH_PROTECTION := 0
41
Jeenu Viswambharan2fae4b12016-10-24 14:31:51 +010042# By default, consider that the platform may release several CPUs out of reset.
43# The platform Makefile is free to override this value.
44COLD_BOOT_SINGLE_CPU := 0
45
Julius Werner3429c772017-06-09 15:17:15 -070046# Flag to compile in coreboot support code. Exclude by default. The coreboot
47# Makefile system will set this when compiling TF as part of a coreboot image.
48COREBOOT := 0
49
Jeenu Viswambharan2fae4b12016-10-24 14:31:51 +010050# For Chain of Trust
51CREATE_KEYS := 1
52
53# Build flag to include AArch32 registers in cpu context save and restore during
54# world switch. This flag must be set to 0 for AArch64-only platforms.
55CTX_INCLUDE_AARCH32_REGS := 1
56
57# Include FP registers in cpu context
58CTX_INCLUDE_FPREGS := 0
59
Antonio Nino Diaz52839622019-01-31 11:58:00 +000060# Include pointer authentication (ARMv8.3-PAuth) registers in cpu context. This
61# must be set to 1 if the platform wants to use this feature in the Secure
62# world. It is not needed to use it in the Non-secure world.
63CTX_INCLUDE_PAUTH_REGS := 0
64
Jeenu Viswambharan2fae4b12016-10-24 14:31:51 +010065# Debug build
66DEBUG := 0
67
68# Build platform
69DEFAULT_PLAT := fvp
70
Christoph Müllner9e4609f2019-04-24 09:45:30 +020071# Disable the generation of the binary image (ELF only).
72DISABLE_BIN_GENERATION := 0
73
Soby Mathew209a60c2018-03-26 12:43:37 +010074# Enable capability to disable authentication dynamically. Only meant for
75# development platforms.
76DYN_DISABLE_AUTH := 0
77
Jeenu Viswambharan5f835912018-07-31 16:13:33 +010078# Build option to enable MPAM for lower ELs
79ENABLE_MPAM_FOR_LOWER_ELS := 0
80
Soby Mathew3bd17c02018-08-28 11:13:55 +010081# Flag to Enable Position Independant support (PIE)
82ENABLE_PIE := 0
83
Jeenu Viswambharan2fae4b12016-10-24 14:31:51 +010084# Flag to enable Performance Measurement Framework
85ENABLE_PMF := 0
86
87# Flag to enable PSCI STATs functionality
88ENABLE_PSCI_STAT := 0
89
90# Flag to enable runtime instrumentation using PMF
91ENABLE_RUNTIME_INSTRUMENTATION := 0
92
Douglas Raillard51faada2017-02-24 18:14:15 +000093# Flag to enable stack corruption protection
94ENABLE_STACK_PROTECTOR := 0
95
Jeenu Viswambharan21b818c2017-09-22 08:32:10 +010096# Flag to enable exception handling in EL3
97EL3_EXCEPTION_HANDLING := 0
98
Alexei Fedorov9fc59632019-05-24 12:17:09 +010099# Flag to enable Branch Target Identification.
100# Internal flag not meant for direct setting.
101# Use BRANCH_PROTECTION to enable BTI.
102ENABLE_BTI := 0
103
104# Flag to enable Pointer Authentication.
105# Internal flag not meant for direct setting.
106# Use BRANCH_PROTECTION to enable PAUTH.
Antonio Nino Diazb86048c2019-02-19 11:53:51 +0000107ENABLE_PAUTH := 0
108
Jeenu Viswambharan2fae4b12016-10-24 14:31:51 +0100109# Build flag to treat usage of deprecated platform and framework APIs as error.
110ERROR_DEPRECATED := 0
111
Jeenu Viswambharan1a7c1cf2017-12-08 12:13:51 +0000112# Fault injection support
113FAULT_INJECTION_SUPPORT := 0
114
Masahiro Yamada1c75d5d2016-12-25 13:52:22 +0900115# Byte alignment that each component in FIP is aligned to
116FIP_ALIGN := 0
117
Jeenu Viswambharan2fae4b12016-10-24 14:31:51 +0100118# Default FIP file name
119FIP_NAME := fip.bin
120
121# Default FWU_FIP file name
122FWU_FIP_NAME := fwu_fip.bin
123
124# For Chain of Trust
125GENERATE_COT := 0
126
Jeenu Viswambharan74dce7f2017-09-22 08:32:09 +0100127# Hint platform interrupt control layer that Group 0 interrupts are for EL3. By
128# default, they are for Secure EL1.
129GICV2_G0_FOR_EL3 := 0
130
Jeenu Viswambharan76454ab2017-11-30 12:54:15 +0000131# Route External Aborts to EL3. Disabled by default; External Aborts are handled
132# by lower ELs.
133HANDLE_EA_EL3_FIRST := 0
134
Jeenu Viswambharan3c251af2017-01-04 13:51:42 +0000135# Whether system coherency is managed in hardware, without explicit software
136# operations.
137HW_ASSISTED_COHERENCY := 0
138
Soby Mathew20917552017-08-31 11:49:32 +0100139# Set the default algorithm for the generation of Trusted Board Boot keys
140KEY_ALG := rsa
141
Jeenu Viswambharan2fae4b12016-10-24 14:31:51 +0100142# NS timer register save and restore
143NS_TIMER_SWITCH := 0
144
Varun Wadekar77f1f7a2019-01-31 09:22:30 -0800145# Include lib/libc in the final image
146OVERRIDE_LIBC := 0
147
Jeenu Viswambharan2fae4b12016-10-24 14:31:51 +0100148# Build PL011 UART driver in minimal generic UART mode
149PL011_GENERIC_UART := 0
150
151# By default, consider that the platform's reset address is not programmable.
152# The platform Makefile is free to override this value.
153PROGRAMMABLE_RESET_ADDRESS := 0
154
Antonio Nino Diaz73308612019-02-28 13:35:21 +0000155# Flag used to choose the power state format: Extended State-ID or Original
Jeenu Viswambharan2fae4b12016-10-24 14:31:51 +0100156PSCI_EXTENDED_STATE_ID := 0
157
Jeenu Viswambharan14c60162018-04-04 16:07:11 +0100158# Enable RAS support
159RAS_EXTENSION := 0
160
Jeenu Viswambharan2fae4b12016-10-24 14:31:51 +0100161# By default, BL1 acts as the reset handler, not BL31
162RESET_TO_BL31 := 0
163
164# For Chain of Trust
165SAVE_KEYS := 0
166
Jeenu Viswambharanb7cb1332017-10-16 08:43:14 +0100167# Software Delegated Exception support
168SDEI_SUPPORT := 0
169
Jeenu Viswambharan2fae4b12016-10-24 14:31:51 +0100170# Whether code and read-only data should be put on separate memory pages. The
171# platform Makefile is free to override this value.
172SEPARATE_CODE_AND_RODATA := 0
173
Samuel Hollandf8578e62018-10-17 21:40:18 -0500174# Put NOBITS sections (.bss, stacks, page tables, and coherent memory) in a
175# separate memory region, which may be discontiguous from the rest of BL31.
176SEPARATE_NOBITS_REGION := 0
177
Daniel Boulby1dcc28c2018-09-18 11:45:51 +0100178# If the BL31 image initialisation code is recalimed after use for the secondary
179# cores stack
180RECLAIM_INIT_CODE := 0
181
Jeenu Viswambharan2fae4b12016-10-24 14:31:51 +0100182# SPD choice
183SPD := none
184
Paul Beesley3f3c3412019-09-16 11:29:03 +0000185# Enable the Management Mode (MM)-based Secure Partition Manager implementation
186SPM_MM := 0
Antonio Nino Diaz2d7b9e52018-10-30 11:08:08 +0000187
Jeenu Viswambharan2fae4b12016-10-24 14:31:51 +0100188# Flag to introduce an infinite loop in BL1 just before it exits into the next
189# image. This is meant to help debugging the post-BL2 phase.
190SPIN_ON_BL1_EXIT := 0
191
192# Flags to build TF with Trusted Boot support
193TRUSTED_BOARD_BOOT := 0
194
Antonio Nino Diaze23e0572018-09-25 09:41:08 +0100195# Build option to choose whether Trusted Firmware uses Coherent memory or not.
Jeenu Viswambharan2fae4b12016-10-24 14:31:51 +0100196USE_COHERENT_MEM := 1
197
Olivier Deprez0ca39132019-09-19 17:46:46 +0200198# Build option to add debugfs support
199USE_DEBUGFS := 0
200
Antonio Nino Diaze23e0572018-09-25 09:41:08 +0100201# Build option to choose whether Trusted Firmware uses library at ROM
202USE_ROMLIB := 0
Roberto Vargas5accce52018-05-22 16:05:42 +0100203
Sandrine Bailleux3bff9102020-01-15 10:23:25 +0100204# Chain of trust.
205COT := tbbr
206
Masahiro Yamadabb41eb72017-05-22 12:11:24 +0900207# Use tbbr_oid.h instead of platform_oid.h
Antonio Nino Diaze23e0572018-09-25 09:41:08 +0100208USE_TBBR_DEFS := 1
Masahiro Yamadabb41eb72017-05-22 12:11:24 +0900209
Jeenu Viswambharan2fae4b12016-10-24 14:31:51 +0100210# Build verbosity
211V := 0
Soby Mathewbcc3c492017-04-10 22:35:42 +0100212
213# Whether to enable D-Cache early during warm boot. This is usually
214# applicable for platforms wherein interconnect programming is not
215# required to enable cache coherency after warm reset (eg: single cluster
216# platforms).
217WARMBOOT_ENABLE_DCACHE_EARLY := 0
dp-armd832aee2017-05-23 09:32:49 +0100218
Dimitris Papastamosc776dee2017-10-13 15:07:45 +0100219# Build option to enable/disable the Statistical Profiling Extensions
dp-armd832aee2017-05-23 09:32:49 +0100220ENABLE_SPE_FOR_LOWER_ELS := 1
221
Dimitris Papastamosc776dee2017-10-13 15:07:45 +0100222# SPE is only supported on AArch64 so disable it on AArch32.
dp-armd832aee2017-05-23 09:32:49 +0100223ifeq (${ARCH},aarch32)
224 override ENABLE_SPE_FOR_LOWER_ELS := 0
dp-armd832aee2017-05-23 09:32:49 +0100225endif
Dimitris Papastamos0319a972017-10-16 11:40:10 +0100226
Justin Chadwell9dd94382019-07-18 14:25:33 +0100227# Include Memory Tagging Extension registers in cpu context. This must be set
228# to 1 if the platform wants to use this feature in the Secure world and MTE is
229# enabled at ELX.
230CTX_INCLUDE_MTE_REGS := 0
231
Dimitris Papastamos0319a972017-10-16 11:40:10 +0100232ENABLE_AMU := 0
David Cunado1a853372017-10-20 11:30:57 +0100233
234# By default, enable Scalable Vector Extension if implemented for Non-secure
235# lower ELs
236# Note SVE is only supported on AArch64 - therefore do not enable in AArch32
237ifneq (${ARCH},aarch32)
238 ENABLE_SVE_FOR_NS := 1
239else
240 override ENABLE_SVE_FOR_NS := 0
241endif
Justin Chadwell1f461972019-08-20 11:01:52 +0100242
243SANITIZE_UB := off
Soby Mathewc97cba42019-09-25 14:03:41 +0100244
245# For ARMv8.1 (AArch64) platforms, enabling this option selects the spinlock
246# implementation variant using the ARMv8.1-LSE compare-and-swap instruction.
247# Default: disabled
248USE_SPINLOCK_CAS := 0
zelalem-awekeedbce9a2019-11-12 16:20:17 -0600249
250# Enable Link Time Optimization
251ENABLE_LTO := 0