.png){kind=small}
Intro
Another quarter is ahead of us. It was a profitable time in 3mdeb during which we were focusing on development of secure and maintainable firmware and software. During all this time we were in touch with the community, sharing good news as well as frustrating issues that have cost us a lot of struggle. The time has passed quickly, many issues has been solved and many patches has been released. We are glad that we can again share our contributions to the open source project, summing up recent three months of our open work. Let’s have a look!
2020’Q2 - the open code matters
In the second 3 months of 2020, we contributed 4352 lines of code (except the
patches that have not been merged yet) getting in total over 17,5k
SLOC in 35 unique
projects so far.
Our contributions
-
coreboot is an extended firmware framework that delivers a lightning fast and secure boot experience on modern computers and embedded systems. As an Open Source project it provides auditability and maximum control over technology.
Full list of 2020’Q2 patches:
| Author | Category | Patch | URL |
|---|---|---|---|
| Michał Żygowski | payloads/external | Pass hardware IRQ option to SeaBIOS Makefile | link |
| Piotr Kleinschmidt | pcengines/apu1 | Unset UsbRxMode to avoid platform reset issue | link |
| Piotr Kleinschmidt | pcengines/apu2 | Unify hexadecimal notation using capital letters | link |
| Michał Żygowski | protectli/vault_kbl | Enable Intel PTT | link |
| Piotr Kleinschmidt | pcengines/apu1 | Reorder includes | link |
-
TrenchBoot is a framework that allows individuals and projects to build security engines to perform launch integrity actions for their systems. The framework builds upon Boot Integrity Technologies (BITs) that establish one or more Roots of Trust (RoT) from which a degree of confidence that integrity actions were not subverted.
Full list of 2020’Q2 patches:
| Author | Category | Patch | URL |
|---|---|---|---|
| Krystian Hebel | Build | Support kernels with embedded initramfs | link |
| Krystian Hebel | Build | TPM unmerge | link |
Code for TPM support no longer consists of one big, merged file, it uses the original form of tpmlib instead. It is included as a git submodule, which should make it easier to keep up to date.
-
ChirpStack Gateway OS is an open-source Linux based embedded OS which can run on various LoRa® gateway models. The goal is to make it easy to get started with LoRaWAN® and the ChirpStack open-source LoRaWAN Network Server stack with the minimum steps required to setup your gateway(s).
Patch released in 2020’Q2:
| Author | Category | Patch | URL |
|---|---|---|---|
| Maciej Pijanowski | Build | Update to dunfell | link |
We have updated the chirpstack-gateway-os to the latest Yocto release (dunfell) and improved chirpstack Golang Yocto recipes in order to avoid shipping binaries.
In the future
We are keep progressing, having interesting merge and pull requests that are in the review state or marked as work in progress. We will be developing TrenchBoot/landing-zone project, working on Multiboot2, Event log, and Headers redesign.
Do you want to read more about our contribution? Feeling that you are missing information about open projects that we are developing and maintaining? You will find open source related activities and achievements on opensource.3mdeb.com. If you are looking for open source containers, check our newly created subdomain that is full of docker containers maintained by our team or forked from Open Source projects with additional useful adjustments: containers.3mdeb.com.
Summary
Do you still hesitate to be a part of the open source community? By contribution you not only share valuable code but also improve your software through review of experienced community members. Take part in the act of learning and teaching by explaining how you do things in the example project and build a reputation around people who are interested in similar things. Do not wait and join the open source family!
If you think we can help in improving the security of your firmware or you
looking for someone who can boost your product by leveraging advanced features
of a used hardware platform, feel free to
book a call with us or
drop us email to contact<at>3mdeb<dot>com. If you are interested in similar
content feel free to sign up for our newsletter
