GyroidOS virtualization solution aims to secure embedded devices, ease cybersecurity certification
Designed by Fraunhofer AISEC, GyroidOS is an open-source, multi-arch OS-level virtualization solution designed for embedded devices with hardware security features, and aiming to support security certification processes such as Common Criteria (ISO/IEC 15408), DIN SPEC 27070 - IDS Trust Security profile, and IEC-62443 cybersecurity standards. The virtualization layer is based on Linux-specific features like namespaces, cgroups, and capabilities to provide isolation of different guest operating system stacks on top of a single, shared Linux kernel. It offers a much smaller footprint and additional separation of privileged instances compared to other container solutions, such as Docker. GyroidOS security features Container isolation based on a modularized OS-level virtualization layer Secure boot (e.g., UEFI on x86) Kernel module signing Signed GuestOSes (containers) Measured boot and remote attestation Full disk encryption coupled to TPM and secure boot Restriction of superuser in containers with Linux capabilities Fine-grained device access with device cgroups whitelists Secure Element
Linux 6.19 Release – Main changes, Arm, RISC-V, and MIPS architectures
Linus Torvalds has just released Linux 6.19 on the Linux Kernel Mailing List (LKML): No big surprises anywhere last week, so 6.19 is out as expected - just as the US prepares to come to a complete standstill later today watching the latest batch of televised commercials. The betting man would expect them all to be AI-generated, but maybe some enterprising company decides to buck the trend? Doubtful, but there's always a slight chance. But for anybody outside the US, maybe taking the newest kernel out for a spin instead is an option? I have more than three dozen pull requests for when the merge window opens tomorrow - thank you to all the early maintainers. And as people have mostly figured out, I'm getting to the point where I'm being confused by large numbers (almost running out of fingers and toes again), so the next kernel is going to
Here is one of our bespoke builds for Micro Semi in action. The parts are orientated and fed into the laser where they are then marked and pushed out into a collection bin.
#Custom #Bespoke#LaserMachine
#Laser #MicroSemi #ThinkLaser
Release v1.0.0 release · trabucayre/openFPGALoader
Evolution summary:
core
new
common: added function to split a string to a vector by using a delimiter
jtag: added method to retrieves number of devices in the JTAG chain
main: added detect_flash i...
Die Microsemi-Erweiterungsplatine mit PolarFire-FPGA bringt dem HiFive Unleashed mit 64-Bit-RISC-V-CPU Schnittstellen wie PCI Express, SATA, USB, SD-Karte und HDMI.
www.heise.de/newsticker/meldun… #
FPGA #
Linux #
Microsemi #
OpenSource #
PolarFire #
Prozessoren #
RISC-VFPGA-Erweiterung fürs RISC-V-Linux-Entwicklerboard
Die Microsemi-Erweiterungsplatine mit PolarFire-FPGA bringt dem HiFive Unleashed mit 64-Bit-RISC-V-CPU Schnittstellen wie PCI Express, SATA, USB, SD-Karte und HDMI.
cnx-software.com
Thinklaser
FLF
heise online (inoffiziell)