optee: add gen_ekb.py script

The gen_ekb.py script from the nv-optee source is a useful utility for generating EKB images.
anduril · Nov 18, 2024 · f6f993c · f6f993c
1 parent 7d5ff42
commit f6f993c
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 0 deletions.
diff --git a/overlay.nix b/overlay.nix
@@ -68,6 +68,7 @@ in
       stdenv = prev.gcc9Stdenv;
       inherit (self) bspSrc gitRepos l4tVersion;
     }) buildTOS buildOpteeTaDevKit opteeClient;
+    genEkb = self.callPackage ./pkgs/optee/gen-ekb.nix { };
 
     flash-tools = self.callPackage ./pkgs/flash-tools { };
 

diff --git a/pkgs/optee/gen-ekb.nix b/pkgs/optee/gen-ekb.nix
@@ -0,0 +1,21 @@
+{ gitRepos, l4tVersion, stdenv, python3 }:
+
+stdenv.mkDerivation {
+  pname = "gen_ekb.py";
+  src = gitRepos."tegra/optee-src/nv-optee";
+  version = l4tVersion;
+  dontBuild = true;
+  buildInputs = [
+    (python3.withPackages (p: with p; [
+      cryptography
+      pycryptodome
+    ]))
+  ];
+  installPhase = ''
+    runHook preInstall
+    install -D optee/samples/hwkey-agent/host/tool/gen_ekb/gen_ekb.py \
+      $out/bin/gen_ekb.py
+    patchShebangs --host $out/bin/gen_ekb.py
+    runHook postInstall
+  '';
+}