Burkhard Stubert

EU CRA: Essential Requirements Related to Product Properties

by Burkhard Stubert
2025/01/172025/01/17
2 Comments

Every manufacturer must implement the essential requirements in Annex 1 Part 1 of the EU CRA in their products. They must also document how they comply with the essential requirements in a conformity assessment. The wording of the essential requirements is very generic and hard to understand. Germany’s Federal Office of Information Security (BSI) published a Technical Guideline (PDF) that translates the legalese of the EU CRA into concrete and actionable requirements. I will add lots of examples from my work with embedded Linux devices to illustrate the requirements.

Embedded Devices Covered by EU Cyber Resilience Act (CRA)

by Burkhard Stubert
2024/11/192024/11/20

Which devices are covered by the EU Cyber Resilience Act (EU CRA)?

An X-ray fluorescence (XRF) analyser connected with the Internet over WiFi.
A metal-sheet bending machine with an Ethernet port, which will only be used in the future.
The harvester ECUs connected over CAN bus.
A camera trap without any connectivity, where updates and photos are exchanged via SD card.
A full-body 3D X-ray scanner used by doctors.

The commands for updating u-boot using an A/B strategy

Updating U-Boot with an A/B Strategy

by Burkhard Stubert
2024/05/132024/05/13
2 Comments

Unlike consumer devices, machines, ECUs or medical devices are in the field for 15 or more years. There inevitably comes the time in their life, when you must update their boot loader. I’ll show you how to do this from an embedded Linux system running on an NXP iMX8M Plus. You can adapt the method to other SoCs and use it for OTA updates, as well.

by Burkhard Stubert
2024/03/122024/11/12

How hard can it be to write a Yocto recipe for building a Qt application with CMake? Actually, it turns out to be pretty hard. I have seen my fair share of slow-and-dirty workarounds (nothing is ever quick with Yocto, not even the diry workarounds) how to force the Qt application into the Linux image and onto the device. Over the years, I turned my own slow-and-dirty workarounds into a hopefully quick-and-clean solution. Here it comes.

Ports-and-Adapters Architecture: The Pattern

by Burkhard Stubert
2023/08/242023/12/03
1 Comment

The ports-and-adapters architecture should be the standard architecture for HMI applications. Its parts are loosely coupled, cohesive, easy to test and easy to extend. We can apply the reverse Conway manoeuvre to create self-dependent teams with minimal dependencies on other teams. I’ll motivate the ports-and-adapters or hexagonal architecture with USB ports and adapters and look at the architecture pattern from the production, testing and team perspective. I’ll apply the architecture to the HMI terminal of a harvester.

by Burkhard Stubert
2023/03/202023/03/20
3 Comments

We keep the source code of our applications and libraries in private repositories. Quite a few SoM and terminal makers do the same with their Yocto layers and their additional software. We typically use a Docker container to build the whole embedded Linux system with Yocto. Hence, we must be able to clone and update private repositories from the container.