Pengutronix at FOSDEM 2018
As in the previous years a bunch of Pengutronix developers attended the FOSDEM Open Source conference in Brussels to stay up-to-date with the latest developments in the context of embedded Linux, graphics and media, electronics and lots of other interesting topics.
With his talk Facing the Challenges of Updating Complex Systems Pengutronix developer Enrico Jörns looked at the updating topic beyond the basic considerations about redundancy, atomicity, simple verification and A/B setups that are luckily solved by most nowadays Open Source updating frameworks such as RAUC.
Instead, he pointed out, designing a robust update system does not mean assembling unrelated building blocks but instead requires fine-tuned configuration of all system components from the bootloader to the deployment software to smoothly interact.
While installing updates itself is solved by standard frameworks by now, handling target selection in the bootloader still requires error-prone custom scripting in many cases. With bootchooser Pengutronix brought a framework for this to the Barebox bootloader, making it an ideal candidate for redundant system designs. Enrico also noted that UEFI provides a similar mechanism with its boot target handling as well.
One of the other noteworthy topics covered in his talk was the possible benefit of using the casync content chunking tool for embedded system updates over limited data connections. With this, it is possible to reuse local data chunks that are identical between the update and the current system and download only those which differ over the network connection. Thus, future versions of RAUC will support casync-based bundles.
Thanks to the folks from OpenEmbedded we were able to bring our over-the-air updating demo to their stand at FOSDEM. This was a great opportunity for us to discuss with hackers from all different fields of interest about reproducible embedded system builds and the closely related importance of safe and secure update strategies in a growing world of embedded and IoT devices.
Beside our popular black pencils also our new Pengutronix penguin stickers and project/job cards that we got ready right in time before FOSDEM enjoyed great popularity.
Thanks to the entire FOSDEM team for organization, support and video recordings!
In its current master branch, RAUC now supports encrypted Bundles. This tutorial will introduce you to the basics of using encryption in RAUC and show how to use it in a simplified Yocto setup with the meta-rauc Layer.
Unter dem Motto "Voll verteilt" finden die Chemnitzer Linux Tage auch 2022 im virtuellen Raum statt. Wie auch im letzten Jahr, könnt ihr uns in der bunten Pixelwelt des Workadventures treffen und auf einen Schnack über Linux, Open Source, oder neue Entwicklungen vorbei kommen.
Moderne Linux Systeme müssen häufig zwecks Authentifizierung bei einer Cloud- basierten Infrastruktur oder einer On-Premise Maschine eigene kryptografische Schlüssel speichern. Statt der Verwendung eines Trusted Platform Modules (TPM), bieten moderne ARM Prozessoren die TrustZone-Technologie an, auf deren Basis ebenfalls Schlüssel oder andere Geheimnisse gespeichert werden können. Dieses Paper zeigt die Nutzung des Open Portable Trusted Execution Environments (OP- TEE) mit der Standardkonformen PKCS#11 Schnittstellen und i.MX6 Prozessoren von NXP als Beispiel.
Besides the improvements around embedded Linux software and ongoing development of Linux kernel components, the Pengutronix team took the corona pandemic as an opportunity: Last year, many conferences were accessible via internet, so we joined from the comfort of our home offices and shared our experiences and ideas with the community.
"Hey Marie, how do I schedule my vacation dates again?", since I'm working in the management division of Pengutronix, I know these kind of questions very well. Writing down the processes enables me to answer "RTFM". Processes are organizational tasks that need to be performed over and over again, sometimes based on a fixed interval - sometimes on demand.
Wir wollen zum Bundesweiten Digitaltag am 18.6.2021 das Thema "Smarte Städte" ein bisschen von der technischen Seite beleuchten, aber keine Angst: es bleibt für alle verständlich.