meta-bgn-essa

BG Network's Embedded Security Software Architecture (ESSA), a collection of scripts, recipes, configurations, and documentation for Linux, enhances cybersecurity for IoT devices, including secure boot, encryption, authentication, and secure software updates. The ESSA enables engineers to extend a hardware root of trust to secure U-Boot, the Linux kernel, and applications in the root file system.

This repository enables NXP's HAB features on UEI PDNASX6 hardware.

Supported Board

The following board is the only board tested in this release.

• UEI PDNA SX6

Quick Start Guide

See the Quick Start Guide for instructions on installing repo.

Build

NOTE: This integration is tested for imx-image-minimal

source setup-environment <build_folder>
bitbake imx-image-minimal

Detailed Guide

To download a detailed guide to BG Networks ESSA click here.

Contributing

To contribute to the development of this BSP and/or submit patches for new boards please feel free to create pull requests.

Building test image

To enable a developer/tester to easily flash multiple variations/boards, the test image is concentrating on the following aspects:

• Minimal size
• Minimal build time
• Traceability (build time)
• Easy access to components (No U-Boot & Linux passwords)

1. Use the latest BGN-ESSA layer

2. Add the following lines on conf/local.conf file:

   TEST_BUILD = "1"

3. Run the bitbake core-image-minimal command

Docker build

Yocto gatesgarth posing build issues on Ubuntu 22.04 (as on 19 May 2022), hence running in a container:

mkdir -p /yocto_test
docker run --name uei_builder --rm -it -v ~/:/yocto_test crops/poky:ubuntu-20.04 --workdir=/yocto_test
# On other terminal/tab
docker exec -u root $(docker ps -aqf "name=^uei_builder$") apt-get install -y xxd bison
# Usual bitbake commands

NOTE: Though this method is only tested on Ubuntu as of now, it can be even used in Windows for building Yocto images

Changing IP Address

UEI configures the cube with static IP address and to work with local network we need to set the IP address as follows:

ifconfig eth0 192.168.1.41
# Setting subnet mask
ifconfig eth0 192.168.1.41 netmask 255.255.255.0

NOTE: eth0 is the NIC 1, the above commands can also be used with NIC 2 by replacing eth0 with eth1

Maintainer(s)

The author(s) and maintainer(s) of this layer is(are):

• Daniel Selvan D - daniel.selvan@jasmin-infotech.com - danie007