The following changes since commit ad2b0f0ef2a2a6bae1896e493e98734e37a3f1eb:
Merge patch series "dm: gpio: read GPIOs in of_to_plat(), request them in probe()" (2026-09-29 10:36:18 -0600) are available in the Git repository at: https://git.u-boot-project.org/u-boot/custodians/u-boot-tpm.git tags/optee-next-30092026 for you to fetch changes up to 0871cc74cbd97c00f96bd50b483f102316ea2f29: cmd: optee_rpmb: make it usable by scripts (2026-09-30 12:23:09 +0300) The CI seems to agree https://git.u-boot-project.org/u-boot/custodians/u-boot-tpm/-/pipelines/1411 Please pull! /Ilias ---------------------------------------------------------------- Jan added support for the new PTA_CMD_GET_DEVICES_RPMB (introduced in OP-TEE 4.4.0). OP-TEE exposes devices as 'services' on a TEE bus. Prior to that version all services that depended on the supplicant where added on the bus by PTA_CMD_GET_DEVICES_SUPP. commit f0c8431568eede ("optee: probe RPMB device using RPMB subsystem") in the linux kernel explains the reasoning for adding an RPMB specific command. In short the kernel can nowadays short circuit the device accesses directly via the RPMB subsystem and doesn't need the supplicant. Although in U-Boot the supplicant is always present and the RPMB device will eventually be probed during a read or a write the new command is needed to discover and add the services on the discoverable TEE bus (e.g an fTPM). The PTA_CMD_GET_DEVICES_SUPP doesn't expose it anymore unless OP-TEE is compiled with CFG_RPMB_ANNOUNCE_PROBE_CAP=n. But doing that will force the linux kernel to go via the supplicant. Rasmus updated the cmd line interface for accessing an RPMB via OP-TEE making it easier and saner to fetch stored values. That involves an update to OP-TEE which is already merged upstream. ---------------------------------------------------------------- Jan Kiszka (6): tee: optee: Factor out service enumeration and binding functions tee: optee: Avoid binding a service twice tee: optee: Add support for enumerating services that only need RPMB tee: optee: Do not warn about TEE_ERROR_STORAGE_NOT_AVAILABLE mmc: Call back to optee after a successful mmc_init mmc: Make "MMC Device not found" a debug output Rasmus Villemoes (5): cmd: optee_rpmb: sanitize TEE_ERROR -> E* translations optee_ta_avb.h: add TA_AVB_CMD_READ_PERSIST_VALUE2 define tee: sandbox: support new TA_AVB_CMD_READ_PERSIST_VALUE2 cmd: optee_rpmb: allocate large enough buffer when reading persistent value cmd: optee_rpmb: make it usable by scripts cmd/optee_rpmb.c | 70 +++++++++++++++++++++++++++------------ drivers/mmc/mmc-uclass.c | 2 +- drivers/mmc/mmc.c | 4 +++ drivers/mmc/mmc_legacy.c | 2 +- drivers/tee/optee/core.c | 64 ++++++++++++++++++----------------- drivers/tee/optee/optee_private.h | 24 ++++++++++++++ drivers/tee/optee/rpmb.c | 20 +++++++++++ drivers/tee/sandbox.c | 20 +++++++++-- include/tee/optee.h | 6 ++++ include/tee/optee_ta_avb.h | 12 +++++++ 10 files changed, 169 insertions(+), 55 deletions(-)
