MA-11015 Support Trusty OS on imx8qm/qxp

The Trusty OS binary will be installed into
container.img and loaded into  0x84000000.

Due Trusty OS addresss is in 0xfe000000 which
ROM cannot reach, so use ATF to copy it into
the target address.
Mapped the BL32 code into MMU due the Trusty
SPD need to check the code status and decide
the CPU executing mode.

To reserve and protect the memory for secure
world, modify the partition code to keep
BL32 spaces in secure_part.

Signed-off-by: Haoran.Wang <>
Reviewed-by: Ye Li <>
(cherry picked from commit d305ece47bf3e90b5008bf5932583ee2a772650b)
4 files changed