{"id":1,"date":"2011-09-02T23:56:53","date_gmt":"2011-09-02T23:56:53","guid":{"rendered":"http:\/\/blog.le-vert.net\/?p=1"},"modified":"2011-09-03T02:41:14","modified_gmt":"2011-09-03T00:41:14","slug":"hello-world","status":"publish","type":"post","link":"https:\/\/blog.le-vert.net\/?p=1","title":{"rendered":"OCF-Linux on Debian [Part I]"},"content":{"rendered":"
\n\t\t\t\t\tTweet<\/a>\n\t\t\t\t<\/div><\/div>

Hi there,<\/p>\n

1. Introduction<\/span><\/strong><\/p>\n

My first blog post will be about getting hardware accelerated aes-128-cbc cipher on my ALIX<\/a> board, running a Geode LX. This processor can only handle aes-128-cbc so it’s basically useless, unless you plan to configure every service to only use this specific cipher. Anyway, I’ll do it nevertheless !<\/span><\/p>\n

Unlike VIA chips (padlock), the Geode doesn’t come with any native acceleration on Linux. It’s however possible using OCF<\/a> (Open Crypto Framework) which has been ported from BSD to Linux. It’ll provide in-kernel hardware acceleration exported to userland using \/dev\/crypto device node.<\/p>\n

2. Rebuilding Debian’s kernel with OCF-Linux patch<\/strong><\/p>\n

Sadly, OCF requiere little changes into the kernel and cannot (for now) be built as a module.<\/p>\n

\/!\\ <\/strong>If you plan to build a 32 bits kernel from a 64 bits environment, use a 32 bits chroot !<\/p>\n

Install a bunch of\u00a0dependencies:\u00a0<\/p>\n

aptitude install devscripts wget vim libncurses5-dev pbuilder<\/pre>\n
Download and extract current Debian’s latest kernel:\u00a0<\/p>\n
dget -x http:\/\/ftp.de.debian.org\/debian\/pool\/main\/l\/linux-2.6\/linux-2.6_3.0.0-3.dsc<\/pre>\n
(If there’s a GPG sign error or something, run dpkg-source -x *.dsc<\/em>)<\/p>\n
Download latest OCF-Linux package:<\/p>\n
wget 'http:\/\/heanet.dl.sourceforge.net\/project\/ocf-linux\/ocf-linux\/20110720\/ocf-linux-20110720.tar.gz'<\/pre>\n
Generate OCF kernel patch:<\/p>\n
tar xvzf ocf-linux-20110720.tar.gz\r\ncd ocf-linux-20110720\/ocf\/\r\nmake patch\r\ncd ..\/..<\/pre>\n
Let’s get started…<\/p>\n
cd linux-2.6-3.0.0\/<\/pre>\n
Bump Debian’s package ABI by editing debian\/config\/defines<\/em>:<\/p>\n
abiname: 1 become abiname: 1+alix.1<\/pre>\n
Copy OCF Linux kernel patch:<\/p>\n
cp ..\/ocf-linux-20110720\/ocf\/ocf-linux-26.patch debian\/patches\/features\/all\/<\/pre>\n
Create a quilt patch “series” file:
\n\/!\\<\/strong> 3+alix.1 must be be the version according to debian\/changelog.
\nIn my example, package version is 3.0.0-3, mine will be 3.0.0-3+alix.1<\/strong>.<\/p>\n
echo \"+ features\/all\/ocf-linux-26.patch\" >> debian\/patches\/series\/3+alix.1<\/pre>\n
Install build dependencies (with some pbuilder’s magic!):<\/p>\n
\/usr\/lib\/pbuilder\/pbuilder-satisfydepends<\/pre>\n
Clean and prepare the source package:<\/p>\n
make -f debian\/rules clean\r\nmake -f debian\/rules source-all<\/pre>\n
It will probably fails because the patch contains some “fuzz”. If so, go to debian\/build\/source, duplicate this directory, apply the patch, diff again and replace ocf-linux-26.patch). Run both commands again.<\/p>\n
Create a new changelog entry:<\/p>\n
dch --local +alix.<\/pre>\n
Set target to UNRELEASED instead on unstable (first line).
\nFill the changelog, here’s mine:<\/p>\n
  * Add OCF Linux kernel patch.\r\n  * Change CPU type to Geode LX.<\/pre>\n
Setup the right kernel flavor (refer to official documentation on Debian’s wiki for more information):<\/p>\n
make -f debian\/rules.gen setup_i386_none_486\r\ncd debian\/build\/build_i386_none_486\/<\/pre>\n
Configure it!<\/p>\n
make menuconfig<\/pre>\n
Change CPU type to Geode LX\/GX (will enable a few optimization, dunno if it really matters).
\nEnable OCF in kernel configuration but disable the following hardware chip drivers (they fail to build): Micronas 7108, cryptocteon, XP4xx, Kirkwood, Talitos and Hifn. AMD Geode doesn’t require any driver: upstream provide geode_aes kernel module which only need a way to be accessed from userland, so you may disable everything except cryptosoft (software fallback for unsupported ciphers) and crytodev (userland link).<\/p>\n
BUILD!<\/p>\n
cd ..\/..\/..\r\nmake -f debian\/rules.gen binary-arch_i386_none_486 binary-indep DEBIAN_KERNEL_JOBS=4<\/pre>\n
Once you see linux-headers and linux-image deb package, you can stop the build by hitting Ctrl+c (generating documentation packages takes ages).<\/p>\n
We need linux-headers-common as well:<\/p>\n
make -f debian\/rules.gen binary-arch_i386_none_real<\/pre>\n
That’s it for the kernel part…<\/p>\n
Stay tuned !<\/p>\n","protected":false},"excerpt":{"rendered":"
Hi there, 1. Introduction My first blog post will be about getting hardware accelerated aes-128-cbc cipher on my ALIX board, running a Geode LX. This processor can only handle aes-128-cbc so it’s basically useless, unless you plan to configure every … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/blog.le-vert.net\/index.php?rest_route=\/wp\/v2\/posts\/1"}],"collection":[{"href":"https:\/\/blog.le-vert.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.le-vert.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.le-vert.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.le-vert.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1"}],"version-history":[{"count":19,"href":"https:\/\/blog.le-vert.net\/index.php?rest_route=\/wp\/v2\/posts\/1\/revisions"}],"predecessor-version":[{"id":23,"href":"https:\/\/blog.le-vert.net\/index.php?rest_route=\/wp\/v2\/posts\/1\/revisions\/23"}],"wp:attachment":[{"href":"https:\/\/blog.le-vert.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.le-vert.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.le-vert.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}