Supported Build Recipes and Package Formats

Supported Build Recipes and Package Formats

Embedded Device Security: Protecting Linux Systems with Modern Tools

CNXSoft: This is a guest port by Erik Wierich, Senior Engineer at RISCstar Solutions, demonstrating a practical security implementation for embedded devices using standard Linux tools like dm-verity and TPM 2.0. It covers threat models, filesystem security, and TPM-based encryption with working code examples. Nowadays, it is (rightfully) impossible to put an embedded device into the market without comprehensive embedded device security measures. Most new devices store private data that we do not want to see leaked in dark corners of the Internet. We also want to avoid our device ending up as part of a botnet. Linux has a large set of tools to help us with security. What has historically been lacking is a simple, off-the-shelf way to integrate these tools into a secure-by-default configuration. This post will demonstrate how modern tools simplify deployments while ensuring strong security. Embedded Device Security Scope When talking about embedded system security,

mkosi — Build Bespoke OS Images