optee: share TA binaries through a global UUID map - #1142

Merged
Sangho Lee (sangho2) merged 9 commits into
microsoft:mainfrom
praveen-pk:global_ta_uuid
Aug 18, 2026
Merged

optee: share TA binaries through a global UUID map#1142
Sangho Lee (sangho2) merged 9 commits into
microsoft:mainfrom
praveen-pk:global_ta_uuid

Conversation

@praveen-pk

@praveen-pkPraveen K Paladugu (praveen-pk) commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Move the TA UUID-to-binary map out of individual shim instances so TA binaries can be registered once and reused across instances. This global map is required to support Dyanamically Loading TAs and using them across sessions.

Protect the map with a spin-based RwLock and expose shim methods for storing and retrieving TA binaries.

Register the LVBS runner's embedded TA during BSP initialization and resolve new TA instances through the shared map.

@praveen-pkPraveen K Paladugu (praveen-pk) changed the title optee: share TA binaries through a global UUID map[Draft] optee: share TA binaries through a global UUID mapAug 6, 2026
sangho2
Sangho Lee (sangho2) reviewed Aug 7, 2026
View reviewed changes

@sangho2Sangho Lee (sangho2) left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for your effort! Yes, we should differentiate shim-global from runner-global. I left some comments/suggestions.

Comment threadlitebox_runner_lvbs/src/lib.rs
Comment threadlitebox_runner_lvbs/src/lib.rs Outdated
Comment threadlitebox_runner_lvbs/src/lib.rs Outdated
Comment threadlitebox_shim_optee/src/lib.rs
Comment threadlitebox_shim_optee/src/lib.rs Outdated
Comment threadlitebox_shim_optee/src/lib.rs Outdated
Comment threadlitebox_shim_optee/src/lib.rs Outdated
@praveen-pk
Praveen K Paladugu (praveen-pk)force-pushed the global_ta_uuid branch 2 times, most recently from 7881679 to 321b69fCompareAugust 11, 2026 19:55
@praveen-pk

Praveen K Paladugu (praveen-pk) commented Aug 12, 2026

Copy link
Copy Markdown
ContributorAuthor

I confirmed that static TAs continue to function with this change.

$ sudo /usr/share/optee_examples/optee_example_hello_world
Invoking TA to increment 42
TA incremented value to 43

sangho2
Sangho Lee (sangho2) approved these changes Aug 12, 2026
View reviewed changes

@sangho2Sangho Lee (sangho2) left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me. Please take a look at the new comment.

Feel free to drop "[Draft]" from the title if it is ready to merge and replace optee with OP-TEE or OP-TEE shim. Thanks!

Comment threadlitebox_runner_lvbs/src/lib.rs Outdated
@praveen-pk
optee: share TA binaries through a global UUID map
c3637a9
Move the TA UUID-to-binary map out of individual shim instances
so TA binaries can be registered once and reused across instances.
This global map is required to support Dyanamically Loading TAs and
using them across sessions.
Protect the map with a spin-based RwLock and expose shim methods for
storing and retrieving TA binaries.
Register the LVBS runner's embedded TA during BSP initialization and
resolve new TA instances through the shared map.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
Drop the redundant call_once while registering TAs
29eaa94
Restore TA_BINARIES, to keep supporting mulitple embedded binaries
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
drop Arc from global TaUuidMap Singleton
1539154
TaUuidMap is already sychronized with an interior RwLock. An Arc
wrapping adds un-necessary reference counting overhead.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
optee: store shared TA binaries in Arc
c25825f
This drops the need for deep copy while getting a binary.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
optee: re-introduce ta_uuid_map in Shim Object
389fbc7
Now references to ta_uuid_map in shim object will be scoped to the lifetime
of the shim object.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
ci: ratchet fix in litebox_shim_optee
488c795
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pkPraveen K Paladugu (praveen-pk) changed the title [Draft] optee: share TA binaries through a global UUID mapoptee: share TA binaries through a global UUID mapAug 13, 2026
@praveen-pk
optee: Don't store TA during ldelf
9b9c595
ldelf stores TA in the UUID Map while loading it. Drop this redundant
step.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
Praveen K Paladugu (praveen-pk)force-pushed the global_ta_uuid branch 2 times, most recently from e41b33d to e681468CompareAugust 13, 2026 21:22
@praveen-pk
optee: Drop ta_bin from ldelf in Linux Userland
efb0854
Drop ta_bin arg in ldelf casls from Linux Userland.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
cleanup: Drop unused find_ta_binary method
d25d45f
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@sangho2
Sangho Lee (sangho2) added this pull request to the merge queueAug 18, 2026
Merged via the queue into microsoft:main with commit e33f6ffAug 18, 2026
8 checks passed
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@sangho2Sangho Lee (sangho2)sangho2 approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@praveen-pk@sangho2
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all 
 blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '

Skip to content
optee: share TA binaries through a global UUID map - #1142
Merged
Sangho Lee (sangho2) merged 9 commits into
microsoft:mainfrom 
praveen-pk:global_ta_uuid
Aug 18, 2026
Merged
optee: share TA binaries through a global UUID map#1142
Sangho Lee (sangho2) merged 9 commits into
microsoft:mainfrom 
praveen-pk:global_ta_uuid
Conversation
@praveen-pk
@praveen-pkPraveen K Paladugu (praveen-pk)
commented
Aug 6, 2026

Copy link


Copy Markdown

Contributor
Move the TA UUID-to-binary map out of individual shim instances so TA binaries can be registered once and reused across instances. This global map is required to support Dyanamically Loading TAs and using them across sessions.
Protect the map with a spin-based RwLock and expose shim methods for storing and retrieving TA binaries.
Register the LVBS runner's embedded TA during BSP initialization and resolve new TA instances through the shared map.
@praveen-pkPraveen K Paladugu (praveen-pk)
changed the title
optee: share TA binaries through a global UUID map[Draft] optee: share TA binaries through a global UUID mapAug 6, 2026
sangho2
Sangho Lee (sangho2)
reviewed
Aug 7, 2026
View reviewed changes
@sangho2Sangho Lee (sangho2)
left a comment


Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for your effort! Yes, we should differentiate shim-global from runner-global. I left some comments/suggestions.
Comment threadlitebox_runner_lvbs/src/lib.rs
Comment threadlitebox_runner_lvbs/src/lib.rs
Outdated

Comment threadlitebox_runner_lvbs/src/lib.rs
Outdated

Comment threadlitebox_shim_optee/src/lib.rs
Comment threadlitebox_shim_optee/src/lib.rs
Outdated

Comment threadlitebox_shim_optee/src/lib.rs
Outdated

Comment threadlitebox_shim_optee/src/lib.rs
Outdated

@praveen-pk
Praveen K Paladugu (praveen-pk)force-pushed
the
global_ta_uuid
branch
2 times, most recently
from
7881679 to
321b69fCompareAugust 11, 2026 19:55
@praveen-pk
Praveen K Paladugu (praveen-pk)
commented
Aug 12, 2026

Copy link


Copy Markdown

ContributorAuthor
I confirmed that static TAs continue to function with this change.
$ sudo /usr/share/optee_examples/optee_example_hello_world
Invoking TA to increment 42
TA incremented value to 43

sangho2
Sangho Lee (sangho2)
approved these changes
Aug 12, 2026
View reviewed changes
@sangho2Sangho Lee (sangho2)
left a comment


Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me. Please take a look at the new comment.
Feel free to drop "[Draft]" from the title if it is ready to merge and replace optee with OP-TEE or OP-TEE shim. Thanks!
Comment threadlitebox_runner_lvbs/src/lib.rs
Outdated

@praveen-pk
optee: share TA binaries through a global UUID map
c3637a9
Move the TA UUID-to-binary map out of individual shim instances
so TA binaries can be registered once and reused across instances.
This global map is required to support Dyanamically Loading TAs and
using them across sessions.
Protect the map with a spin-based RwLock and expose shim methods for
storing and retrieving TA binaries.
Register the LVBS runner's embedded TA during BSP initialization and
resolve new TA instances through the shared map.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
Drop the redundant call_once while registering TAs
29eaa94
Restore TA_BINARIES, to keep supporting mulitple embedded binaries
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
drop Arc from global TaUuidMap Singleton
1539154
TaUuidMap is already sychronized with an interior RwLock. An Arc
wrapping adds un-necessary reference counting overhead.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
optee: store shared TA binaries in Arc
c25825f
This drops the need for deep copy while getting a binary.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
optee: re-introduce ta_uuid_map in Shim Object
389fbc7
Now references to ta_uuid_map in shim object will be scoped to the lifetime
of the shim object.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
ci: ratchet fix in litebox_shim_optee
488c795
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pkPraveen K Paladugu (praveen-pk)
changed the title
[Draft] optee: share TA binaries through a global UUID mapoptee: share TA binaries through a global UUID mapAug 13, 2026
@praveen-pk
optee: Don't store TA during ldelf
9b9c595
ldelf stores TA in the UUID Map while loading it. Drop this redundant
step.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
Praveen K Paladugu (praveen-pk)force-pushed
the
global_ta_uuid
branch
2 times, most recently
from
e41b33d to
e681468CompareAugust 13, 2026 21:22
@praveen-pk
optee: Drop ta_bin from ldelf in Linux Userland
efb0854
Drop ta_bin arg in ldelf casls from Linux Userland.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
cleanup: Drop unused find_ta_binary method
d25d45f
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@sangho2
Sangho Lee (sangho2)
added this pull request to the merge queueAug 18, 2026

Merged
via the queue into
microsoft:main
with commit e33f6ffAug 18, 2026

8 checks passed

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers

@sangho2Sangho Lee (sangho2)sangho2 approved these changes

Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

2 participants

@praveen-pk@sangho2

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix");
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
optee: share TA binaries through a global UUID map - #1142
Merged
Sangho Lee (sangho2) merged 9 commits into
microsoft:mainfrom 
praveen-pk:global_ta_uuid
Aug 18, 2026
Merged
optee: share TA binaries through a global UUID map#1142
Sangho Lee (sangho2) merged 9 commits into
microsoft:mainfrom 
praveen-pk:global_ta_uuid
Conversation
@praveen-pk
@praveen-pkPraveen K Paladugu (praveen-pk)
commented
Aug 6, 2026

Copy link


Copy Markdown

Contributor
Move the TA UUID-to-binary map out of individual shim instances so TA binaries can be registered once and reused across instances. This global map is required to support Dyanamically Loading TAs and using them across sessions.
Protect the map with a spin-based RwLock and expose shim methods for storing and retrieving TA binaries.
Register the LVBS runner's embedded TA during BSP initialization and resolve new TA instances through the shared map.
@praveen-pkPraveen K Paladugu (praveen-pk)
changed the title
optee: share TA binaries through a global UUID map[Draft] optee: share TA binaries through a global UUID mapAug 6, 2026
sangho2
Sangho Lee (sangho2)
reviewed
Aug 7, 2026
View reviewed changes
@sangho2Sangho Lee (sangho2)
left a comment


Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for your effort! Yes, we should differentiate shim-global from runner-global. I left some comments/suggestions.
Comment threadlitebox_runner_lvbs/src/lib.rs
Comment threadlitebox_runner_lvbs/src/lib.rs
Outdated

Comment threadlitebox_runner_lvbs/src/lib.rs
Outdated

Comment threadlitebox_shim_optee/src/lib.rs
Comment threadlitebox_shim_optee/src/lib.rs
Outdated

Comment threadlitebox_shim_optee/src/lib.rs
Outdated

Comment threadlitebox_shim_optee/src/lib.rs
Outdated

@praveen-pk
Praveen K Paladugu (praveen-pk)force-pushed
the
global_ta_uuid
branch
2 times, most recently
from
7881679 to
321b69fCompareAugust 11, 2026 19:55
@praveen-pk
Praveen K Paladugu (praveen-pk)
commented
Aug 12, 2026

Copy link


Copy Markdown

ContributorAuthor
I confirmed that static TAs continue to function with this change.
$ sudo /usr/share/optee_examples/optee_example_hello_world
Invoking TA to increment 42
TA incremented value to 43

sangho2
Sangho Lee (sangho2)
approved these changes
Aug 12, 2026
View reviewed changes
@sangho2Sangho Lee (sangho2)
left a comment


Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me. Please take a look at the new comment.
Feel free to drop "[Draft]" from the title if it is ready to merge and replace optee with OP-TEE or OP-TEE shim. Thanks!
Comment threadlitebox_runner_lvbs/src/lib.rs
Outdated

@praveen-pk
optee: share TA binaries through a global UUID map
c3637a9
Move the TA UUID-to-binary map out of individual shim instances
so TA binaries can be registered once and reused across instances.
This global map is required to support Dyanamically Loading TAs and
using them across sessions.
Protect the map with a spin-based RwLock and expose shim methods for
storing and retrieving TA binaries.
Register the LVBS runner's embedded TA during BSP initialization and
resolve new TA instances through the shared map.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
Drop the redundant call_once while registering TAs
29eaa94
Restore TA_BINARIES, to keep supporting mulitple embedded binaries
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
drop Arc from global TaUuidMap Singleton
1539154
TaUuidMap is already sychronized with an interior RwLock. An Arc
wrapping adds un-necessary reference counting overhead.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
optee: store shared TA binaries in Arc
c25825f
This drops the need for deep copy while getting a binary.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
optee: re-introduce ta_uuid_map in Shim Object
389fbc7
Now references to ta_uuid_map in shim object will be scoped to the lifetime
of the shim object.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
ci: ratchet fix in litebox_shim_optee
488c795
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pkPraveen K Paladugu (praveen-pk)
changed the title
[Draft] optee: share TA binaries through a global UUID mapoptee: share TA binaries through a global UUID mapAug 13, 2026
@praveen-pk
optee: Don't store TA during ldelf
9b9c595
ldelf stores TA in the UUID Map while loading it. Drop this redundant
step.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
Praveen K Paladugu (praveen-pk)force-pushed
the
global_ta_uuid
branch
2 times, most recently
from
e41b33d to
e681468CompareAugust 13, 2026 21:22
@praveen-pk
optee: Drop ta_bin from ldelf in Linux Userland
efb0854
Drop ta_bin arg in ldelf casls from Linux Userland.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
cleanup: Drop unused find_ta_binary method
d25d45f
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@sangho2
Sangho Lee (sangho2)
added this pull request to the merge queueAug 18, 2026

Merged
via the queue into
microsoft:main
with commit e33f6ffAug 18, 2026

8 checks passed

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers

@sangho2Sangho Lee (sangho2)sangho2 approved these changes

Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

2 participants

@praveen-pk@sangho2

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms");
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
optee: share TA binaries through a global UUID map - #1142
Merged
Sangho Lee (sangho2) merged 9 commits into
microsoft:mainfrom 
praveen-pk:global_ta_uuid
Aug 18, 2026
Merged
optee: share TA binaries through a global UUID map#1142
Sangho Lee (sangho2) merged 9 commits into
microsoft:mainfrom 
praveen-pk:global_ta_uuid
Conversation
@praveen-pk
@praveen-pkPraveen K Paladugu (praveen-pk)
commented
Aug 6, 2026

Copy link


Copy Markdown

Contributor
Move the TA UUID-to-binary map out of individual shim instances so TA binaries can be registered once and reused across instances. This global map is required to support Dyanamically Loading TAs and using them across sessions.
Protect the map with a spin-based RwLock and expose shim methods for storing and retrieving TA binaries.
Register the LVBS runner's embedded TA during BSP initialization and resolve new TA instances through the shared map.
@praveen-pkPraveen K Paladugu (praveen-pk)
changed the title
optee: share TA binaries through a global UUID map[Draft] optee: share TA binaries through a global UUID mapAug 6, 2026
sangho2
Sangho Lee (sangho2)
reviewed
Aug 7, 2026
View reviewed changes
@sangho2Sangho Lee (sangho2)
left a comment


Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for your effort! Yes, we should differentiate shim-global from runner-global. I left some comments/suggestions.
Comment threadlitebox_runner_lvbs/src/lib.rs
Comment threadlitebox_runner_lvbs/src/lib.rs
Outdated

Comment threadlitebox_runner_lvbs/src/lib.rs
Outdated

Comment threadlitebox_shim_optee/src/lib.rs
Comment threadlitebox_shim_optee/src/lib.rs
Outdated

Comment threadlitebox_shim_optee/src/lib.rs
Outdated

Comment threadlitebox_shim_optee/src/lib.rs
Outdated

@praveen-pk
Praveen K Paladugu (praveen-pk)force-pushed
the
global_ta_uuid
branch
2 times, most recently
from
7881679 to
321b69fCompareAugust 11, 2026 19:55
@praveen-pk
Praveen K Paladugu (praveen-pk)
commented
Aug 12, 2026

Copy link


Copy Markdown

ContributorAuthor
I confirmed that static TAs continue to function with this change.
$ sudo /usr/share/optee_examples/optee_example_hello_world
Invoking TA to increment 42
TA incremented value to 43

sangho2
Sangho Lee (sangho2)
approved these changes
Aug 12, 2026
View reviewed changes
@sangho2Sangho Lee (sangho2)
left a comment


Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me. Please take a look at the new comment.
Feel free to drop "[Draft]" from the title if it is ready to merge and replace optee with OP-TEE or OP-TEE shim. Thanks!
Comment threadlitebox_runner_lvbs/src/lib.rs
Outdated

@praveen-pk
optee: share TA binaries through a global UUID map
c3637a9
Move the TA UUID-to-binary map out of individual shim instances
so TA binaries can be registered once and reused across instances.
This global map is required to support Dyanamically Loading TAs and
using them across sessions.
Protect the map with a spin-based RwLock and expose shim methods for
storing and retrieving TA binaries.
Register the LVBS runner's embedded TA during BSP initialization and
resolve new TA instances through the shared map.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
Drop the redundant call_once while registering TAs
29eaa94
Restore TA_BINARIES, to keep supporting mulitple embedded binaries
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
drop Arc from global TaUuidMap Singleton
1539154
TaUuidMap is already sychronized with an interior RwLock. An Arc
wrapping adds un-necessary reference counting overhead.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
optee: store shared TA binaries in Arc
c25825f
This drops the need for deep copy while getting a binary.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
optee: re-introduce ta_uuid_map in Shim Object
389fbc7
Now references to ta_uuid_map in shim object will be scoped to the lifetime
of the shim object.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
ci: ratchet fix in litebox_shim_optee
488c795
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pkPraveen K Paladugu (praveen-pk)
changed the title
[Draft] optee: share TA binaries through a global UUID mapoptee: share TA binaries through a global UUID mapAug 13, 2026
@praveen-pk
optee: Don't store TA during ldelf
9b9c595
ldelf stores TA in the UUID Map while loading it. Drop this redundant
step.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
Praveen K Paladugu (praveen-pk)force-pushed
the
global_ta_uuid
branch
2 times, most recently
from
e41b33d to
e681468CompareAugust 13, 2026 21:22
@praveen-pk
optee: Drop ta_bin from ldelf in Linux Userland
efb0854
Drop ta_bin arg in ldelf casls from Linux Userland.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
cleanup: Drop unused find_ta_binary method
d25d45f
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@sangho2
Sangho Lee (sangho2)
added this pull request to the merge queueAug 18, 2026

Merged
via the queue into
microsoft:main
with commit e33f6ffAug 18, 2026

8 checks passed

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers

@sangho2Sangho Lee (sangho2)sangho2 approved these changes

Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

2 participants

@praveen-pk@sangho2

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links");
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '

Skip to content
optee: share TA binaries through a global UUID map - #1142
Merged
Sangho Lee (sangho2) merged 9 commits into
microsoft:mainfrom 
praveen-pk:global_ta_uuid
Aug 18, 2026
Merged
optee: share TA binaries through a global UUID map#1142
Sangho Lee (sangho2) merged 9 commits into
microsoft:mainfrom 
praveen-pk:global_ta_uuid
Conversation
@praveen-pk
@praveen-pkPraveen K Paladugu (praveen-pk)
commented
Aug 6, 2026

Copy link


Copy Markdown

Contributor
Move the TA UUID-to-binary map out of individual shim instances so TA binaries can be registered once and reused across instances. This global map is required to support Dyanamically Loading TAs and using them across sessions.
Protect the map with a spin-based RwLock and expose shim methods for storing and retrieving TA binaries.
Register the LVBS runner's embedded TA during BSP initialization and resolve new TA instances through the shared map.
@praveen-pkPraveen K Paladugu (praveen-pk)
changed the title
optee: share TA binaries through a global UUID map[Draft] optee: share TA binaries through a global UUID mapAug 6, 2026
sangho2
Sangho Lee (sangho2)
reviewed
Aug 7, 2026
View reviewed changes
@sangho2Sangho Lee (sangho2)
left a comment


Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for your effort! Yes, we should differentiate shim-global from runner-global. I left some comments/suggestions.
Comment threadlitebox_runner_lvbs/src/lib.rs
Comment threadlitebox_runner_lvbs/src/lib.rs
Outdated

Comment threadlitebox_runner_lvbs/src/lib.rs
Outdated

Comment threadlitebox_shim_optee/src/lib.rs
Comment threadlitebox_shim_optee/src/lib.rs
Outdated

Comment threadlitebox_shim_optee/src/lib.rs
Outdated

Comment threadlitebox_shim_optee/src/lib.rs
Outdated

@praveen-pk
Praveen K Paladugu (praveen-pk)force-pushed
the
global_ta_uuid
branch
2 times, most recently
from
7881679 to
321b69fCompareAugust 11, 2026 19:55
@praveen-pk
Praveen K Paladugu (praveen-pk)
commented
Aug 12, 2026

Copy link


Copy Markdown

ContributorAuthor
I confirmed that static TAs continue to function with this change.
$ sudo /usr/share/optee_examples/optee_example_hello_world
Invoking TA to increment 42
TA incremented value to 43

sangho2
Sangho Lee (sangho2)
approved these changes
Aug 12, 2026
View reviewed changes
@sangho2Sangho Lee (sangho2)
left a comment


Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me. Please take a look at the new comment.
Feel free to drop "[Draft]" from the title if it is ready to merge and replace optee with OP-TEE or OP-TEE shim. Thanks!
Comment threadlitebox_runner_lvbs/src/lib.rs
Outdated

@praveen-pk
optee: share TA binaries through a global UUID map
c3637a9
Move the TA UUID-to-binary map out of individual shim instances
so TA binaries can be registered once and reused across instances.
This global map is required to support Dyanamically Loading TAs and
using them across sessions.
Protect the map with a spin-based RwLock and expose shim methods for
storing and retrieving TA binaries.
Register the LVBS runner's embedded TA during BSP initialization and
resolve new TA instances through the shared map.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
Drop the redundant call_once while registering TAs
29eaa94
Restore TA_BINARIES, to keep supporting mulitple embedded binaries
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
drop Arc from global TaUuidMap Singleton
1539154
TaUuidMap is already sychronized with an interior RwLock. An Arc
wrapping adds un-necessary reference counting overhead.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
optee: store shared TA binaries in Arc
c25825f
This drops the need for deep copy while getting a binary.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
optee: re-introduce ta_uuid_map in Shim Object
389fbc7
Now references to ta_uuid_map in shim object will be scoped to the lifetime
of the shim object.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
ci: ratchet fix in litebox_shim_optee
488c795
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pkPraveen K Paladugu (praveen-pk)
changed the title
[Draft] optee: share TA binaries through a global UUID mapoptee: share TA binaries through a global UUID mapAug 13, 2026
@praveen-pk
optee: Don't store TA during ldelf
9b9c595
ldelf stores TA in the UUID Map while loading it. Drop this redundant
step.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
Praveen K Paladugu (praveen-pk)force-pushed
the
global_ta_uuid
branch
2 times, most recently
from
e41b33d to
e681468CompareAugust 13, 2026 21:22
@praveen-pk
optee: Drop ta_bin from ldelf in Linux Userland
efb0854
Drop ta_bin arg in ldelf casls from Linux Userland.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
cleanup: Drop unused find_ta_binary method
d25d45f
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@sangho2
Sangho Lee (sangho2)
added this pull request to the merge queueAug 18, 2026

Merged
via the queue into
microsoft:main
with commit e33f6ffAug 18, 2026

8 checks passed

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers

@sangho2Sangho Lee (sangho2)sangho2 approved these changes

Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

2 participants

@praveen-pk@sangho2

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default");
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
optee: share TA binaries through a global UUID map - #1142
Merged
Sangho Lee (sangho2) merged 9 commits into
microsoft:mainfrom 
praveen-pk:global_ta_uuid
Aug 18, 2026
Merged
optee: share TA binaries through a global UUID map#1142
Sangho Lee (sangho2) merged 9 commits into
microsoft:mainfrom 
praveen-pk:global_ta_uuid
Conversation
@praveen-pk
@praveen-pkPraveen K Paladugu (praveen-pk)
commented
Aug 6, 2026

Copy link


Copy Markdown

Contributor
Move the TA UUID-to-binary map out of individual shim instances so TA binaries can be registered once and reused across instances. This global map is required to support Dyanamically Loading TAs and using them across sessions.
Protect the map with a spin-based RwLock and expose shim methods for storing and retrieving TA binaries.
Register the LVBS runner's embedded TA during BSP initialization and resolve new TA instances through the shared map.
@praveen-pkPraveen K Paladugu (praveen-pk)
changed the title
optee: share TA binaries through a global UUID map[Draft] optee: share TA binaries through a global UUID mapAug 6, 2026
sangho2
Sangho Lee (sangho2)
reviewed
Aug 7, 2026
View reviewed changes
@sangho2Sangho Lee (sangho2)
left a comment


Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for your effort! Yes, we should differentiate shim-global from runner-global. I left some comments/suggestions.
Comment threadlitebox_runner_lvbs/src/lib.rs
Comment threadlitebox_runner_lvbs/src/lib.rs
Outdated

Comment threadlitebox_runner_lvbs/src/lib.rs
Outdated

Comment threadlitebox_shim_optee/src/lib.rs
Comment threadlitebox_shim_optee/src/lib.rs
Outdated

Comment threadlitebox_shim_optee/src/lib.rs
Outdated

Comment threadlitebox_shim_optee/src/lib.rs
Outdated

@praveen-pk
Praveen K Paladugu (praveen-pk)force-pushed
the
global_ta_uuid
branch
2 times, most recently
from
7881679 to
321b69fCompareAugust 11, 2026 19:55
@praveen-pk
Praveen K Paladugu (praveen-pk)
commented
Aug 12, 2026

Copy link


Copy Markdown

ContributorAuthor
I confirmed that static TAs continue to function with this change.
$ sudo /usr/share/optee_examples/optee_example_hello_world
Invoking TA to increment 42
TA incremented value to 43

sangho2
Sangho Lee (sangho2)
approved these changes
Aug 12, 2026
View reviewed changes
@sangho2Sangho Lee (sangho2)
left a comment


Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me. Please take a look at the new comment.
Feel free to drop "[Draft]" from the title if it is ready to merge and replace optee with OP-TEE or OP-TEE shim. Thanks!
Comment threadlitebox_runner_lvbs/src/lib.rs
Outdated

@praveen-pk
optee: share TA binaries through a global UUID map
c3637a9
Move the TA UUID-to-binary map out of individual shim instances
so TA binaries can be registered once and reused across instances.
This global map is required to support Dyanamically Loading TAs and
using them across sessions.
Protect the map with a spin-based RwLock and expose shim methods for
storing and retrieving TA binaries.
Register the LVBS runner's embedded TA during BSP initialization and
resolve new TA instances through the shared map.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
Drop the redundant call_once while registering TAs
29eaa94
Restore TA_BINARIES, to keep supporting mulitple embedded binaries
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
drop Arc from global TaUuidMap Singleton
1539154
TaUuidMap is already sychronized with an interior RwLock. An Arc
wrapping adds un-necessary reference counting overhead.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
optee: store shared TA binaries in Arc
c25825f
This drops the need for deep copy while getting a binary.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
optee: re-introduce ta_uuid_map in Shim Object
389fbc7
Now references to ta_uuid_map in shim object will be scoped to the lifetime
of the shim object.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
ci: ratchet fix in litebox_shim_optee
488c795
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pkPraveen K Paladugu (praveen-pk)
changed the title
[Draft] optee: share TA binaries through a global UUID mapoptee: share TA binaries through a global UUID mapAug 13, 2026
@praveen-pk
optee: Don't store TA during ldelf
9b9c595
ldelf stores TA in the UUID Map while loading it. Drop this redundant
step.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
Praveen K Paladugu (praveen-pk)force-pushed
the
global_ta_uuid
branch
2 times, most recently
from
e41b33d to
e681468CompareAugust 13, 2026 21:22
@praveen-pk
optee: Drop ta_bin from ldelf in Linux Userland
efb0854
Drop ta_bin arg in ldelf casls from Linux Userland.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
cleanup: Drop unused find_ta_binary method
d25d45f
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@sangho2
Sangho Lee (sangho2)
added this pull request to the merge queueAug 18, 2026

Merged
via the queue into
microsoft:main
with commit e33f6ffAug 18, 2026

8 checks passed

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers

@sangho2Sangho Lee (sangho2)sangho2 approved these changes

Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

2 participants

@praveen-pk@sangho2

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers");
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
optee: share TA binaries through a global UUID map - #1142
Merged
Sangho Lee (sangho2) merged 9 commits into
microsoft:mainfrom 
praveen-pk:global_ta_uuid
Aug 18, 2026
Merged
optee: share TA binaries through a global UUID map#1142
Sangho Lee (sangho2) merged 9 commits into
microsoft:mainfrom 
praveen-pk:global_ta_uuid
Conversation
@praveen-pk
@praveen-pkPraveen K Paladugu (praveen-pk)
commented
Aug 6, 2026

Copy link


Copy Markdown

Contributor
Move the TA UUID-to-binary map out of individual shim instances so TA binaries can be registered once and reused across instances. This global map is required to support Dyanamically Loading TAs and using them across sessions.
Protect the map with a spin-based RwLock and expose shim methods for storing and retrieving TA binaries.
Register the LVBS runner's embedded TA during BSP initialization and resolve new TA instances through the shared map.
@praveen-pkPraveen K Paladugu (praveen-pk)
changed the title
optee: share TA binaries through a global UUID map[Draft] optee: share TA binaries through a global UUID mapAug 6, 2026
sangho2
Sangho Lee (sangho2)
reviewed
Aug 7, 2026
View reviewed changes
@sangho2Sangho Lee (sangho2)
left a comment


Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for your effort! Yes, we should differentiate shim-global from runner-global. I left some comments/suggestions.
Comment threadlitebox_runner_lvbs/src/lib.rs
Comment threadlitebox_runner_lvbs/src/lib.rs
Outdated

Comment threadlitebox_runner_lvbs/src/lib.rs
Outdated

Comment threadlitebox_shim_optee/src/lib.rs
Comment threadlitebox_shim_optee/src/lib.rs
Outdated

Comment threadlitebox_shim_optee/src/lib.rs
Outdated

Comment threadlitebox_shim_optee/src/lib.rs
Outdated

@praveen-pk
Praveen K Paladugu (praveen-pk)force-pushed
the
global_ta_uuid
branch
2 times, most recently
from
7881679 to
321b69fCompareAugust 11, 2026 19:55
@praveen-pk
Praveen K Paladugu (praveen-pk)
commented
Aug 12, 2026

Copy link


Copy Markdown

ContributorAuthor
I confirmed that static TAs continue to function with this change.
$ sudo /usr/share/optee_examples/optee_example_hello_world
Invoking TA to increment 42
TA incremented value to 43

sangho2
Sangho Lee (sangho2)
approved these changes
Aug 12, 2026
View reviewed changes
@sangho2Sangho Lee (sangho2)
left a comment


Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me. Please take a look at the new comment.
Feel free to drop "[Draft]" from the title if it is ready to merge and replace optee with OP-TEE or OP-TEE shim. Thanks!
Comment threadlitebox_runner_lvbs/src/lib.rs
Outdated

@praveen-pk
optee: share TA binaries through a global UUID map
c3637a9
Move the TA UUID-to-binary map out of individual shim instances
so TA binaries can be registered once and reused across instances.
This global map is required to support Dyanamically Loading TAs and
using them across sessions.
Protect the map with a spin-based RwLock and expose shim methods for
storing and retrieving TA binaries.
Register the LVBS runner's embedded TA during BSP initialization and
resolve new TA instances through the shared map.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
Drop the redundant call_once while registering TAs
29eaa94
Restore TA_BINARIES, to keep supporting mulitple embedded binaries
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
drop Arc from global TaUuidMap Singleton
1539154
TaUuidMap is already sychronized with an interior RwLock. An Arc
wrapping adds un-necessary reference counting overhead.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
optee: store shared TA binaries in Arc
c25825f
This drops the need for deep copy while getting a binary.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
optee: re-introduce ta_uuid_map in Shim Object
389fbc7
Now references to ta_uuid_map in shim object will be scoped to the lifetime
of the shim object.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
ci: ratchet fix in litebox_shim_optee
488c795
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pkPraveen K Paladugu (praveen-pk)
changed the title
[Draft] optee: share TA binaries through a global UUID mapoptee: share TA binaries through a global UUID mapAug 13, 2026
@praveen-pk
optee: Don't store TA during ldelf
9b9c595
ldelf stores TA in the UUID Map while loading it. Drop this redundant
step.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
Praveen K Paladugu (praveen-pk)force-pushed
the
global_ta_uuid
branch
2 times, most recently
from
e41b33d to
e681468CompareAugust 13, 2026 21:22
@praveen-pk
optee: Drop ta_bin from ldelf in Linux Userland
efb0854
Drop ta_bin arg in ldelf casls from Linux Userland.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
cleanup: Drop unused find_ta_binary method
d25d45f
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@sangho2
Sangho Lee (sangho2)
added this pull request to the merge queueAug 18, 2026

Merged
via the queue into
microsoft:main
with commit e33f6ffAug 18, 2026

8 checks passed

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers

@sangho2Sangho Lee (sangho2)sangho2 approved these changes

Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

2 participants

@praveen-pk@sangho2

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode");
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();

Skip to content
optee: share TA binaries through a global UUID map - #1142
Merged
Sangho Lee (sangho2) merged 9 commits into
microsoft:mainfrom 
praveen-pk:global_ta_uuid
Aug 18, 2026
Merged
optee: share TA binaries through a global UUID map#1142
Sangho Lee (sangho2) merged 9 commits into
microsoft:mainfrom 
praveen-pk:global_ta_uuid
Conversation
@praveen-pk
@praveen-pkPraveen K Paladugu (praveen-pk)
commented
Aug 6, 2026

Copy link


Copy Markdown

Contributor
Move the TA UUID-to-binary map out of individual shim instances so TA binaries can be registered once and reused across instances. This global map is required to support Dyanamically Loading TAs and using them across sessions.
Protect the map with a spin-based RwLock and expose shim methods for storing and retrieving TA binaries.
Register the LVBS runner's embedded TA during BSP initialization and resolve new TA instances through the shared map.
@praveen-pkPraveen K Paladugu (praveen-pk)
changed the title
optee: share TA binaries through a global UUID map[Draft] optee: share TA binaries through a global UUID mapAug 6, 2026
sangho2
Sangho Lee (sangho2)
reviewed
Aug 7, 2026
View reviewed changes
@sangho2Sangho Lee (sangho2)
left a comment


Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for your effort! Yes, we should differentiate shim-global from runner-global. I left some comments/suggestions.
Comment threadlitebox_runner_lvbs/src/lib.rs
Comment threadlitebox_runner_lvbs/src/lib.rs
Outdated

Comment threadlitebox_runner_lvbs/src/lib.rs
Outdated

Comment threadlitebox_shim_optee/src/lib.rs
Comment threadlitebox_shim_optee/src/lib.rs
Outdated

Comment threadlitebox_shim_optee/src/lib.rs
Outdated

Comment threadlitebox_shim_optee/src/lib.rs
Outdated

@praveen-pk
Praveen K Paladugu (praveen-pk)force-pushed
the
global_ta_uuid
branch
2 times, most recently
from
7881679 to
321b69fCompareAugust 11, 2026 19:55
@praveen-pk
Praveen K Paladugu (praveen-pk)
commented
Aug 12, 2026

Copy link


Copy Markdown

ContributorAuthor
I confirmed that static TAs continue to function with this change.
$ sudo /usr/share/optee_examples/optee_example_hello_world
Invoking TA to increment 42
TA incremented value to 43

sangho2
Sangho Lee (sangho2)
approved these changes
Aug 12, 2026
View reviewed changes
@sangho2Sangho Lee (sangho2)
left a comment


Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me. Please take a look at the new comment.
Feel free to drop "[Draft]" from the title if it is ready to merge and replace optee with OP-TEE or OP-TEE shim. Thanks!
Comment threadlitebox_runner_lvbs/src/lib.rs
Outdated

@praveen-pk
optee: share TA binaries through a global UUID map
c3637a9
Move the TA UUID-to-binary map out of individual shim instances
so TA binaries can be registered once and reused across instances.
This global map is required to support Dyanamically Loading TAs and
using them across sessions.
Protect the map with a spin-based RwLock and expose shim methods for
storing and retrieving TA binaries.
Register the LVBS runner's embedded TA during BSP initialization and
resolve new TA instances through the shared map.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
Drop the redundant call_once while registering TAs
29eaa94
Restore TA_BINARIES, to keep supporting mulitple embedded binaries
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
drop Arc from global TaUuidMap Singleton
1539154
TaUuidMap is already sychronized with an interior RwLock. An Arc
wrapping adds un-necessary reference counting overhead.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
optee: store shared TA binaries in Arc
c25825f
This drops the need for deep copy while getting a binary.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
optee: re-introduce ta_uuid_map in Shim Object
389fbc7
Now references to ta_uuid_map in shim object will be scoped to the lifetime
of the shim object.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
ci: ratchet fix in litebox_shim_optee
488c795
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pkPraveen K Paladugu (praveen-pk)
changed the title
[Draft] optee: share TA binaries through a global UUID mapoptee: share TA binaries through a global UUID mapAug 13, 2026
@praveen-pk
optee: Don't store TA during ldelf
9b9c595
ldelf stores TA in the UUID Map while loading it. Drop this redundant
step.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
Praveen K Paladugu (praveen-pk)force-pushed
the
global_ta_uuid
branch
2 times, most recently
from
e41b33d to
e681468CompareAugust 13, 2026 21:22
@praveen-pk
optee: Drop ta_bin from ldelf in Linux Userland
efb0854
Drop ta_bin arg in ldelf casls from Linux Userland.
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@praveen-pk
cleanup: Drop unused find_ta_binary method
d25d45f
Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
@sangho2
Sangho Lee (sangho2)
added this pull request to the merge queueAug 18, 2026

Merged
via the queue into
microsoft:main
with commit e33f6ffAug 18, 2026

8 checks passed

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers

@sangho2Sangho Lee (sangho2)sangho2 approved these changes

Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

2 participants

@praveen-pk@sangho2