OE4T Meeting Notes 2022 07 14

Video

https://youtu.be/T5SqQFxWhHw

Attendees

6

Topics

• Gitter vs Slack
  • Plan to switch over to this for the next month, will go read only on slack general channel to force conversation to move there.
• Jetpack 5 and GA
  • NVIDIA is gearing up for GA release, did a private EA build which isn't yet integrated on private git sources.
    • Need to go through the slog of updating a private repo with new BSP and check to see what’s broken.
    • Not sure it’s worth the payoff to get the EA up to date when the GA drops publicly, might save a day or two but won’t be significant.
  • NVIDIA is publicly saying GA for Jetpack 5 in the next month or so.
  • Ridgerun plans to work on this.
  • Has A/B support with UEFI, but we need to update our tools to handle the new format to tell EFI about what it should be booting. Haven’t checked into NVIDIA’s release and tools to see if they work.
  • Typically just need to modify boot order EFI variables. Standard naming convention for those, just switch the boot order. Haven’t looked into whether this still maps the same way it does with x86.
  • Secure boot and LUKS encryption might be what is missing and might not be ready for GA.
• Secure Boot
  • Tim presenting at OSS Europe 2022 regarding crypto and Tegra: See https://sched.co/15z5e
  • Intent is to take the RFC that Matt reviewed and send PRs out for everything that should go to the correct places in OE4T.
  • Tim only has the AGX Xavier platform implemented/tested thus far. Don’t have other platforms to test on. If others are using secureboot and LUKS may be a community effort to figure out how to get other platforms for test.
  • Want to talk in Gitter about how to make the passphrase querying the engine, whether using keystore or lukserv ap, make it a configuration. Will need to know what the arguments are. Have that elsewhere.
  • Secure boot won’t work without burning fuses but it should be possible to test and run LUKS support without burning fuses.
  • Current plan is to implement secureboot on L4T 32.7.2, wait for GA on Jetpack 5 before implementing/testing there..
  • Would prefer starting with 32.7 branch. Should be possible to backport but don’t plan to do this initially (see future plans discussions below).
  • TX2-NX is a recent project and recently supported, may want to include this in the test matrix for secure boot.
• Future plans
  • At some point should start deprecating dunfell for platforms which can be supported with Jetpack 5.
  • We also need to determine whether kirkstone goes to Jetpack 5 or stays at 32.7. Planning to revisit this after Jetpack 5 GA.
  • From a resource standpoint may be better off to only do PRs on Kirkstone and 32.7.
    • Gotcha is ROS, nobody actively working on Yocto side. Tim has done some POC to make sure it works but there may be things which aren’t working in that stack.
    • Plan to not officially support 32.6.1 on new features like Secure Boot. If someone really needs it we can revisit. Don’t spend time dragging PRs into 32.6 when we are likely to have a lot of work coming up with Jetpack 5.
  • Planning to wait for promotion of jetpack 5 to master before GA. Want to keep master available for testing against oe-core master.
• Discussed camera issues open in https://github.com/OE4T/tegra-demo-distro/discussions/212 - nobody has any other ideas.
• NVIDIA is adding a layer with dGPU support for Clara - planning to release this today in an new meta-tegra-clara-holoscan-mgx repository on github