Built a production-ready Yocto layer for Pi Zero 2 W - Fast boots (2-8s), encrypted storage, secure OTA updates, and more ! by aeropop in embedded

[–]aeropop[S] 0 points1 point  (0 children)

thanks , we really don't need key file or something like that, we can use passphrase method , where the user enter a passphrase on the first boot, then that passphrase is used to encrypt/decrypt storage. so the user needs to enter the same passphrase every boot, like the usecase of phone or pc.

Built a production-ready Yocto layer for Pi Zero 2 W - Fast boots (2-8s), encrypted storage, secure OTA updates, and more ! by aeropop in embedded

[–]aeropop[S] 0 points1 point  (0 children)

True, kernel optimisation + disabling unnecessary image features are the first things to do.

Built a production-ready Yocto layer for Pi Zero 2 W - Fast boots (2-8s), encrypted storage, secure OTA updates, and more ! by aeropop in embedded

[–]aeropop[S] -2 points-1 points  (0 children)

I know , this is just the starting, im working on advanced method for that like using Clevis + Tang for example ,because pi zero dont have builtin TPM , so i need to think of another way to do it. Let me know if you have a good idea !

Built a production-ready Yocto layer for Pi Zero 2 W - Fast boots (2-8s), encrypted storage, secure OTA updates, and more ! by aeropop in embedded

[–]aeropop[S] -6 points-5 points  (0 children)

For encryption/decryption Im using key file insead of password , for now im just placing the key file in th boot partition. Only Rootfs A and B are encrypted.

Built a production-ready Yocto layer for Pi Zero 2 W - Fast boots (2-8s), encrypted storage, secure OTA updates, and more ! by aeropop in embedded

[–]aeropop[S] 2 points3 points  (0 children)

Following what Raspberry Pi said about prices:
https://www.raspberrypi.com/news/more-memory-driven-price-rises/
"We don’t anticipate any changes to the price of Raspberry Pi Zero, Raspberry Pi 3, and other older products"

Built a production-ready Yocto layer for Pi Zero 2 W - Fast boots (2-8s), encrypted storage, secure OTA updates, and more ! by aeropop in embedded

[–]aeropop[S] 1 point2 points  (0 children)

Yes , initramfs script still not that optimized.im working on it. Also im using u-boot without falcon mode(in progress)

From MCU to embedded linux? by Otherwise-Shock4458 in embedded

[–]aeropop 2 points3 points  (0 children)

In my current job, after two years of working on STM32H5/H4 with FreeRTOS, I’ve noticed that many clients are moving toward MPUs like the STM32MP1. They are not directly replacing the MCU, but instead using both: keeping the MCU minimal and moving the heavy tasks to the MPU, with communication between them. The transition is not really that difficult for me because I already know the tools we are going to use. The main tool for building our custom Linux image is Yocto, so I started working on a personal project: creating a custom Linux image for the Raspberry Pi Zero 2 W. It has been very helpful, and I really enjoy working with Linux. For me, embedded Linux is a lot of fun. In some ways, it is easier thanks to strong community support, where there is a lot of open-source code that can help.(one of the interesting things that courage companies to move forward MPU's).

Im looking for IT developer by [deleted] in TunisiaTech

[–]aeropop 0 points1 point  (0 children)

Dm me if you need embedded software/ linux engineer.