Overview

• Introduction

• Security framework overview

• Microservice framework overview

redpesk OS releases

• OS roadmap

• OS releases

• OS upcoming

• OS migration arz-1.0 to arz-1.1.1

Security updates

• Security CVE / errata

Redpesk OS Tips and Tricks

• Third Party Repository

• Install EPEL and Rocky repositories

• OCI docker/podman

Application Framework Manager

• Introduction

• Permissions

Administration

• afm-util tool

• Application manager daemons

• Installation process

Application Framework Binder

• Overview

• Getting the binder

• Setting HTTPS up

• Debugging binder and its bindings

• WebSocket protocol x-afb-ws-json1

• Binder's vocabulary

• Binder's man page

• Binder's library above libafb

APIs & Services

• Services list

Security manager

• Architecture presentation

• Compilation Guide

• Usage Guide

• Permissions definition

• SMACK Explanation

• SELinux Explanation

OP-TEE within redpesk

• How to deploy OP-TEE OS

• Run OP-TEE client (tee-supplicant)

• Test TEE/REE communication

Trusted Boot

• ARM & x86 SoC approaches

• U-Boot's security advices

• ARM TrustZone emulation

• Experiments on boards

Recovery features

• Understanding recovery mode

• Recovery tools mechanisms

• Restoring redpesk OS guide

• Web application rebuild

redpak

• Introduction

• Concept

• Configuration

• Usage Guide

• Config yaml files good practices

• Troubleshooting

• Using cgroups

Minimal image

• Reduce image size

Optimizing boot time

• Measures methodology

• Why to optimize boot time

• Managing boot strategies

• Measures before and after optimization

Kernel fragments description

• Introduction to Linux Kernel Configuration

• 01 Disable IPC, Timers and Audit

• 02 Disable Kconfig, Scheduler and Initrd

• 03 Disable Perf, Profiling and Errata

• 04 Disable EFI, Power Management Debug and Energy Model

• 05 Disable Schedutil, CPUFreq Governors and Virtualization

• 06 Disable Kprobes and Jump Labels

• 07 Disable GCC Plugins and Function Alignment

• 08 Disable Partition Parsers

• 09 Enable Inline Spinlocks and Kernel Operations

• 10 Disable Swap, Memory Hotplug and KSM

• 11 Disable Networking IPv4, IPv6, Netfilter

• 12 Disable SCTP, VLAN, TIPC, BATMAN

• 13 Disable Wireless, Bluetooth, CAN and RFKILL

• 14 Disable PCI and Firmware

• 15 Disable GNSS and ProcEvents

• 16 Disable Block Storage NBD and AoE

• 17 Disable EEPROM and Misc Drivers

• 18 Disable Network Device Drivers

• 19 Disable PHY Drivers

• 20 Disable PPP, WLAN Coexistence, and Failover

• 21 Disable Input Devices

• 22 Disable Serial, TTY and TPM

• 23 Disable I2C, Power and Sensor Drivers

• 24 Disable MFD, Display and Media Drivers

• 25 Disable USB, Sound, RTC and VirtIO

• 26 Disable Filesystem Encodings and Compatibility

• 27 Enable Minimal Cryptographic Core with SHA3 and XTS

• 28 Disable Hardware Cryptography, Keep DRBG and Jitter Entropy

• 29 Disable Kernel Debugging Features

• 30 Disable Filesystem Verity and SecurityFS

Zephyr in Redpesk

• Introduction

• Zephyr releases

• Usage Guide

PERM-CHECK extension

• Overview

• Example for Zephyr permission check

Mender redpesk (OTA)

• Mender redpesk

Hardware support

• Download images

• Image metrics

• Trusted Boot

Boards - ARM64

• BeagleBoard - BeaglePlay

• NXP - iMX8 Nitrogen 8M

• NXP - iMX8 QuadXPlus MEK

• NXP - S32G2 Vehicle Networking

• Phytec - phyBoard AM62x

• Raspberry Pi

• Renesas - Gen3

• SolidRun - Hummingboard IIOT

• SolidRun - Hummingboard Pulse

• SolidRun - SolidSense

Boards - x86_64

• Intel Up-Board

Boards - Virtual

• Qemu

• VM (VirtualBox)

Miscs

• Useful command lines

• Cellular connection