Cloud Native Computing Foundation KubeCon + CloudNativeCon China 2019 (Shanghai), 5 Jul 2019

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Using Open Source Software to Build an Industrial-grade Embedded Linux Platform... SZ Lin

Description

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

Using Open Source Software to Build an Industrial-grade
Embedded Linux Platform from Scratch - SZ Lin, Moxa

Building an embedded Linux platform is like a puzzle; placing the suitable software components in the right positions will constitute an optimal platform. However, selecting suitable components is difficult since it depends on different application scenarios. The basic components of an embedded Linux platform include the bootloader, Linux kernel, toolchain, root filesystem, it also needs the tools for image generation, upgrade, and testing. There are abundant resources in the Linux ecosystem with these components and tools; however, selecting the suitable modules and tools is still a key challenge for system designers. In this presentation, SZ Lin will analyze the features in each component and compare common open source software with each tool. In addition, he will also share the experiences in selecting each component and tools for industrial-grade embedded Linux platform.

https://sched.co/NruZ

A

So today, I would like to present Toby's using open-source software to building industrial grade and readiness performance track scratch easily.

A

What Formosa.

A

Talon company, and also cybersecurity from the Mentos specialist and event, if you can reach me in this website,.

A

Before this presentation, I would like to make a survey. How many people is familiar with industrial?

A

Could you show your head.

A

So actually, this topic- or this presentation is quite difficult for me, because I met over 200 slides. My first version ah I try hard and I caught it into several slides, so I will I'll, try to escape and finish this presentation in time. First, we'll perform such like H industrial computing and network.

A

According to the industrial application, spirits such Lycans RL, smart grid and some energy and those of this type of products quite wire wrench. We can have a microcontroller or a silver level, so we might all have a lot of choices this so before using open-source software, something we should know nowadays copywriting pattern. Copyright is very, very important for the open source and which related to the open source license.

A

Another is better so well, the obey those copyright. Luckily, the Nina's foundation cradle project and open check its identify key recommended process for effective, more resource management. We can easily to manage our open source beyond this project. It's our tutors how to manage how to control our usage with the open source. Another is opening venture New York, it's a short, evasive peasant pool that can protect our ninos.

A

So again we have to take your open-source copyright very carry. We have to use the process tooling and support. We have open chain and speedy x4, so large, both of them are. You know, foundation projects we use open chain to control, manage the open source. We use SPD X to exchange the software package. We use for Sailaja to scanning the license.

A

Ok, back to the topic. Nostril harsh environment, such like cereals, with transport, all factory automation, gas,.

A

There are some common basic features, such like longevity, stability and security, and there are also some advanced features such like performance. We also have resource, limited and search.

A

The way of that are some of the feature needs a special power, so we need to reevaluate in the very beginning.

A

Okay, this is a lifecycle of industrial-grade and bad news for evil. As you can see, we have a development phase, maintenance phase in the development phase. We have a system preparation and you didn't intestine in his face. We have a long-term test and regular optic for the industrial product in the prey. Focus is very important in this place. That is because the lifecycle natural are playful, usually more than 10 years. So we need to take care about the maintenance phase very carefully in the human in the development phase.

A

As you can see, this is the row type for embedded device. We have power, we have architecture depend from where such like.

A

Some BIOS and those we have loaded colonel. You know: I'm sis system call interface inside Philip, see a new cistern and user application drying the roof assist. So we have use of space like Kuro space.

A

First of all, we have to choose the proper Road. The brooder is tried to unique, initiated, Howard and load. The rotor inside the DeRay then load the second road to again initialize others and are loading the Linux kernel and then the Nina's gone already the compressor itself.

A

So there are some category for the broad. Typically, we will use that new boots in um product and the Jub x86 product, but for some experts they were used a cold boot or if5.

A

In Colonel there are two main Colonel: the process name is Colonel and the second is plaintiff. Archie Colonel, the minister, no typical, are suitable for the performance and the resources limited target application before I.

A

Before maybe ten years ago, in resource-limited application, we usually use the micros in Enochs, but in the reason, Lina's cannot support no I'm a new architecture and support the tiny kernel and those we can use an investor in some resources, limited playful and for real-time kernel is suitable for real-time culture, safety and resources, limited target application by the way I have listed some rivers for real-time vacation, such like Sonoma or rtai.

A

Okay. If once we decided the type of kernel, we have to get the kernel, so there are many sauce. The fridge is awesome, both Support Package kernel, that is PSP kernel, though this kernel was provided by ISO surrender.

A

If we use that Colonel is caused, some issues like differences in my use, different version of Colonel. That means we have more than 10 SOC. We might maintain 10 version of Colonel in the same time, the most important guards. The last time you sang sure.

A

So, let's take a look at a note: yes, don't I support a long-term, stable kernel, as you can see, the Greg and Ben Hodgins maintain ferry kernels here by Virgil kernel, so the longest tummy is about six years.

A

It's attend the Supra of time for stable kernel only accepts bug, fixes and security pitches, but six years is not enough for us, especially in the industrial application. So we have another choice of studies. No chairs are long, Tran support initiative. This is a conditioned corporation, called collaborative project, his peers on their chairs and it auto test a framework. It also adds some new features inside Chrome, the Nexus cipc severe infrastructure. Pray for this is also the Nina's foundation cooperative project.

A

We also joined this project because we want to support the nearest corner more than 10 years, so we have a supportive strategy. We have Auto test framework. Our goal is to maintain the nearest car no more than changes.

A

This is also the project information. So this is a big figure. That's you can see. Nina's Colonel, you know tears. I can see IP relationship.

A

This is the table version. As you can see in the Pantanal spirit, the offenders are no notice to cross the SS to pass. Is there because Templars, my father features nice awesome, USB and obvious, except that fixes and security fixes, but in ltsi it accept new features. So doesn't react eternal, so the latest version, the wealthiest kernel, is 4.19 and service 4.19, but no tears eyes, 4.14 or the real-time kernel supported only CIB kernel support a real-time kernel, so that is a conversion.

A

Just like I mentioned, there are many application touch like the performance period. Time is that mutual exists. Yes, some of you enable the real time is, may decrease your performance. So what if I want to enable Prada with different application.

A

To fulfill the maribor scenarios in on best, we can use the evite a random entry. These formulas can support the devices to support different kernel and different application.

A

As you can say, this is an example. You can list the image here and another image below, so we can have multiple kernel, multi modify system in the same product and those we can configure this product to fulfill the target application.

A

The necklace userspace I want to address the realeza. These are safety critical systems Roger. This is also the Nina's foundation collaborative project. This project aims to provide the solution in functional safety application, so it's user cell to limb, XMP and real-time kernel insights to fulfill the ISIS 61508 standard. So if you are focused functional safety, you can have a look in this project and co2. You know SMP and go tanker.

A

Well are those the driver? It is a very important solar system. There are some open source project there, for example, gilepsy micro, Sealab, C and G next generation and muscle their lasers are quite different and, as you can see, they also have some different features. Very simple, GFC suppose table ABI. There was comparable for simple fringing some security feature and for Michael Steele ABS. The energy is mainly to support no I'm a new architecture and for tiny size. So if your application is for resources limited, you can consider to use them micro celebs.

A

The next generation is too, and the muscle is also suitable for resource-limited application and security application.

A

But please be aware of that: the year 2038 problem: this is the issue similar with year 2000. The 32-bit system can be reprinted dates from 1901 and 2038. As you can see when you, where we get the data of this time who the integer overflow in 32-bit architecture you may come, you may mention that there are still 19 years from now, but, as I mentioned, the industrial appraisal usually have a very long life cycle, so should have focus this issue now, otherwise is hard to fix.

A

So when you choose the celebrity, you should consider this problem. Also, okay, next any system in this system, the first application which will be suited like the kernel, is managing our application and services. There are some open source tools here, for example, busy boxes. We need system do Grassi. Typically, in the past the embedded system, we use the busy box because it's very tiny and easy to use.

A

However, the industrial, a peripheral, unnatural internet in search, and so many devices were used like system D of open and C. So you can choose your own in assistant. Account depends on your application, so I also list the server library supported by simple, beat debauch support. My go say: there's next generation and drops a muscle and for system D, only suppose drop C. So if you want to use the magazine unit, ng system is not suitable for you.

A

The next one is to choose the proper of Rufai system.

A

There are many open-source projects to provide the Roofus system, for example busybox lacto you root and Debbie. You may mention that reactor is not a loofah system. Rato is judge a tool. Yes exactly so it's depends on the meta layer. This can provide a roofing system, so busy box contain 300 to 400 fabricate. So it's another package with just inside the pizza box, so it could be a very tiny but a functional limited. It's also only supporter magazine, lab, see and GFC and knocked off the famous project in nuna's foundation.

A

The lefthand is only support previous to releases and the celebri only supported Europe's, a muscle Oh be roots, the famous tart roof assistant and used tool in embedded system. The maintainer spirit is only aware. The number of pellets is more than 2,000 his support of gilepsy muscle in my cozy lepsy next generation and the last one is stadia Debian. The maintenance of feminists maintain a spirit of deviance fight, five years for specific architecture. They support more than 15,000 package in daily. It's also supposed lobster muscle and yep. There is some miss.

A

You may say: Libya is very heavy and yet very depth very, very thin, not very hard to customize. That is not true. You can customize the debian into a tiny profile enjoy, so we can create a very tiny roof assistant for Debian in our embedded Mina's, so yeah we have Rhoda, we have Colonel work, roof assisting and something like that. So we have to have assistant development tools like, let's all be roots of some devious, the best of tools. As you can see, look- and you say yeah to to build a busy box requisition.

A

You can use the new route to build up your roots to face it. You can use many tools to build a Debian resistant, so I also look list the Trojan supported here and the license below. So you can choose what you want and I want to mention that last view is very power tool for deviant development. Many a directive of attribution used to left me to customize the Damien. That's like a collie okay, so we use Damien. Why?

A

Because their abilities as a procedure that a stable test in stable scalability from laptop server to embed devices will see system security. The Debian has secured tracker Ron Kerner profile years, multiple architecture and the N is more than 50,000 package inside.

A

In the building tested, this is very important for industrial rifle. So if you want to get more information, you can check this in rivets.

A

This is our testing and development. As you can see the developer, your kit and there's some changes after it will send the patches to send a cool request. After that these were jump. Choose the ICD automatic release pipeline. This pipeline will result.

A

Yes or no to how to our team and we can no pass or nuts.

A

This is the CI CD automated release. My Plan C I mean continuous integration, C sitting in Cantonese employment.

A

So we have our CI say they city, you did deploy, tested and release.

A

So we know Sonia lab and Jenkins to go into the status of the branch. There are some changes. We were triggered a triangle drinkies, the celeb node will do some static program analysis.

A

We use the drinking's to manage the static testing cases so yup. As you know, the nearest corner is quite a lot a lot of time in comparing.

A

We used up the stupid compared to reduce the Templeton this time. I do we use ice cream was created by Susan, so we use the distributive al to reduce our tank and those we can have more time to do so test.

A

So, as you can see, we have the beautiful.

A

So in the delivery we use a lava. This is a tool made by Nauru. We can use this tool to make some deployment to our testing form. Once we get binary and the image from the Jenkins, we were sent a job file via the XML RPC and this time lava master. It was, it would dispatch job field 0 and Q. Then we will download the image from the Jenkins sender image to the devices, an accent we will trigger a testicle walk, and this temp in several ways sent the test cases I started to test.

A

We have several tests such lag and dynamic program, analysis and probe on test to ensure our quality of the product. Though there is a I'm gonna testify look I would like to address. This is free. A go. We're going in Spanish means fire. This is a test framework for testing and Betty Nina's, so well, just progr, which is a mineral foundation. Collaborators project use this framework to make a test and they are over 100 pre packaged tests already.

A

So, after that, we can get the results and send to the developer. Okay, the nexus maintenance phase in the maintenance phase. We have a long time test, don't contest. Me is long, so much testing, reliable testing, robustness, testing and secure skinny. We have to do this test on 24 hour seven days because we are, we have a very, very long life cycle from our pod, so the test cases are managed by the test framework.

A

The first is the wrong Georgie. It's mainly to change the horror, so we have endurance, ankle mobility test the next wiser robustness. We have a fuzzing test and I also list the test tour in the end.

A

The next one is the reliable reliability test. We have a power failure test with both test and regression test. You might be clueless, that's why we have to reboot to test our product, because we have several issue before. Sometimes the system we had during the reboot and the glucose is that the driver or the application has some airlock issue in some situations. So it's work, it's costal devices and the platform to be happy, and the last is a security test.

A

We have the daily test for CVE, so, as you can see, we were scanned pray for every day to generate security report. As you know, the last week we have a suck-ass SDK security issue in colonel, so we can easily to get the result in each pray form that still and used to be inside and for stable condom antennas. We will have the colonel say yet to test our colonel, this automatic Nina's Colonel testing.

A

So it's were detect basic reporting, Victor regression of string kernel trees before release we have, we can have more confidence before releasing the kernel, so it's a short test of many configuration. That means we can test many boards, many SOC many devices via the colonel CI, to make sure that which changes is okay. The next one is reproducible build. This is a very amazing project. Is there also the open-source project is greater independent variable, then verifiable path from source to binary is ensured.

A

The Butte have identical results and then we can prove the source code has has not been tempered on modified, it's very important for than secured so I also list the open-source testing tool. You know you can have some look so the CIC d-o-t our concepts of software engineering instead of tours of the procedures, because the tools of our procedures could be face out. So we need to focus on this of concept of software engineering.

A

Okay, we come to. The next step is a regular updates. As I mentioned before the industrial pray for the programs, we have a very, very long, a life cycle. So if we want to obtain the security issue of some ducklings, we have to update the devices remotely because the in the industrial application, the pre phone usually to put in humorless press. So we need to have the subject to fulfill the demand. Like pie-faces security pieces new feature over ten years.

A

At least some component might be updated. For example, the peripheral devices are for were older, the vestry Colonel roof, our system system configuration and replication. Typically, we update the application all over and some nearest Colonel depends on the situation, but I also list some risk in updating the software.

A

We are failed to update the device, says my become the stone so at least some requirement here for industrial units playful, for example, the hash environment you know of nowhere. There was limited, multiple versions, supported multiple devices and named John George. These are no more requirement for the industrial playful, so the media of the sobriety. We can use the walk, able OT a portable, shorted, storage or outside, but typically we don't use. This solution is too much cost I also list of some software update requirement here.

A

Four basic features: we should have a fair, safe, Roback size, reduction, signature, a multiple storage support, your system, integration, bring more access for additional future such like online and offline updates, encryption data updates, successful update and detention and projects update.

A

And for the cultural embedded devices approach, we can use the image broadly, but best is a quite large size, but is much simple and firebase package pass and database you can choose what you want depends on your demand and I've got the reputation.

A

You need to consider the partition architecture here, so you can have some design in your bed device and also you can make the best up there mechanism.

A

There are some si here, for example, a symmetric and symmetric from web tip. This is the symmetric object of design. This is a symmetric from way of death design. For this design.

A

We will have some downtime because we only have the main OS, but once we must go again dead, we have a recovery voice, so we have self yourself, but for the symmetric from the update, we have pickup voice, so we will keep a life always, but the drawback is that we have double copy of always. So we you can choose your design based on your application. So typically in the very low-end devices we will use this design, but in some high-end application on devices we will use the symmetric design.

A

It depends on your storage and build mechanism, so I list some open source project for soap, update, yeah, Esther regard nothing, super updates and I. You see Austria, so superb 10, RUC support yourself and robic feature. They all also support their child updates signature for secured.

A

It support multiple storage, oh yeah, and we reach in and my experience, I used took update because this is very easy to use and suitable for embedded devices. So there are some compression for others. Co-Op. Do you I? You see support a symmetric, antisymmetric updates, they're supporting me image percent by obeys. Allah says, is GPO and Algeria.

A

Okay. This is my conclusion that we have to plan our of design and target application.

A

The industrial application is from Java the stability and security we need to calibrate with the community, so we use many open-source and that's. Why is we cannot the best the solution, but the suitable solution for our application?

A

That is my presentation. Thank you. So yep do you have any question I'll present very quickly because yeah many slides.

A

You're having a question.

A

Okay, thank you.

A