building trusty tee

[Aaron Simmons]

I'm trying to build AOSP along with the Trusty TEE.  However, the build falls down due to OpenSSL:

building /home/paleozogt/Development/trusty/build-root/build-generic-arm64/host_tests/obj/storage_test/trusty/user/app/storage/test/../block_cache.o

trusty/user/app/storage/test/../block_cache.c:27:10: fatal error: 'openssl/crypto.h' file not found

#include <openssl/crypto.h>

         ^~~~~~~~~~~~~~~~~~

1 error generated.

Any ideas on how to get Trusty TEE to build?  I'd report this as a bug, but I'm not sure where to file Trusty bugs.

[Matthew Maurer]

The host tests currently rely on the host version of openssl to do testing. If you're on a debian derivative, install 'libssl-dev' or a compatible library. Other distributions may have this available labeled as an openssl "development" package.

If you do not wish to install that library, you may instead edit

trusty/vendor/google/aosp/scripts/test-map

and remove the host test lines, as they are not vital to building a Trusty kernel.

[Aaron Simmons]

Ah it looks like I needed to install libssl-dev.  Since AOSP brings in a truckload of its third-party dependencies, I assumed that's how Trusty TEE would build also.

[Aaron Simmons]

That worked-- thanks!

[Weitian Xing]

Hi, do you know how to build Android image with trusty os? What should we do with the generated "lk.bin"? Can this little kernel file run with qemu? Thanks in advance!

[Aaron Simmons]

I'm having the same problem and asked about it here.  Now that I've built the Trusty TEE image, I don't know what to do with it.  There's no documentation for how to deploy Trusty to a real dev board.

[Semw]

Trusty is included in AOSP (according to Trusty working documentation) when you built it but need to find out where it is included. Whether it is included as lk.bin or as source code which gets compiled when aosp gets compiled. I am also working on it.

[Fox Knue]

I am also working on Trusty and hit the same wall.

Haven't been able to track any 'lk.bin' for Trusty in AOSP. Perhaps it is included either as a Source code or by a different file name.

Kudos in advance to the one who resolves this!!

[Aaron Simmons]

I found a reference to Trusty on the bootloader/partitions page here, where it says:

The tos partition stores the binary image of the Trusty OS and is only used if the device includes Trusty.

So I think that may be where we put lk.bin.  

[Jesse Wei]

Any update on this? I know it's been a while, but the Trusty docs still don't really explain the process. Is there someone at Google I could email about this?