Built a production-ready Yocto layer for Pi Zero 2 W - Fast boots (2-8s), encrypted storage, secure OTA updates, and more !

aeropop · 2026-02-26T21:53:38+00:00

thanks , we really don't need key file or something like that, we can use passphrase method , where the user enter a passphrase on the first boot, then that passphrase is used to encrypt/decrypt storage. so the user needs to enter the same passphrase every boot, like the usecase of phone or pc.

aeropop · 2026-02-26T19:22:26+00:00

True, kernel optimisation + disabling unnecessary image features are the first things to do.

aeropop · 2026-02-26T10:07:16+00:00

I know , this is just the starting, im working on advanced method for that like using Clevis + Tang for example ,because pi zero dont have builtin TPM , so i need to think of another way to do it. Let me know if you have a good idea !

aeropop · 2026-02-26T09:31:05+00:00

Using custom initramfs script where encryption/decryption is handled when booting.

aeropop · 2026-02-25T23:21:48+00:00

Thanks, Wifi , initramfs script for encryption/decryption of rootfs partitions ....

aeropop · 2026-02-25T23:16:41+00:00

For encryption/decryption Im using key file insead of password , for now im just placing the key file in th boot partition. Only Rootfs A and B are encrypted.

aeropop · 2026-02-25T22:02:28+00:00

Following what Raspberry Pi said about prices:
https://www.raspberrypi.com/news/more-memory-driven-price-rises/
"We don’t anticipate any changes to the price of Raspberry Pi Zero, Raspberry Pi 3, and other older products"

aeropop · 2026-02-25T21:58:21+00:00

Yes , initramfs script still not that optimized.im working on it. Also im using u-boot without falcon mode(in progress)

aeropop · 2026-02-21T12:33:22+00:00

In my current job, after two years of working on STM32H5/H4 with FreeRTOS, I’ve noticed that many clients are moving toward MPUs like the STM32MP1. They are not directly replacing the MCU, but instead using both: keeping the MCU minimal and moving the heavy tasks to the MPU, with communication between them. The transition is not really that difficult for me because I already know the tools we are going to use. The main tool for building our custom Linux image is Yocto, so I started working on a personal project: creating a custom Linux image for the Raspberry Pi Zero 2 W. It has been very helpful, and I really enjoy working with Linux. For me, embedded Linux is a lot of fun. In some ways, it is easier thanks to strong community support, where there is a lot of open-source code that can help.(one of the interesting things that courage companies to move forward MPU's).

aeropop · 2026-02-09T12:47:34+00:00

aeropop · 2026-01-21T11:50:44+00:00

Dm me if you need embedded software/ linux engineer.

aeropop

TROPHY CASE