embedded Linux

EU CRA: Essential Requirements Related to Vulnerability Handling

by Burkhard Stubert
2025/04/282025/04/28
4 Comments

According to Annex I Part II of the EU CRA, manufacturers must actively search for vulnerabilities in their embedded devices, fix them and publicly disclose them to their users and the cybersecurity authorities. Manufacturers must implement a process to release their devices without any know vulnerabilities and to keep their devices free of vulnerabilities during the whole product lifetime by providing security updates in a timely manner.

Embedded Devices Covered by EU Cyber Resilience Act (CRA)

by Burkhard Stubert
2024/11/192025/04/28

Which devices are covered by the EU Cyber Resilience Act (EU CRA)?

An X-ray fluorescence (XRF) analyser connected with the Internet over WiFi.
A metal-sheet bending machine with an Ethernet port, which will only be used in the future.
The harvester ECUs connected over CAN bus.
A camera trap without any connectivity, where updates and photos are exchanged via SD card.
A full-body 3D X-ray scanner used by doctors.

The commands for updating u-boot using an A/B strategy

Updating U-Boot with an A/B Strategy

by Burkhard Stubert
2024/05/132024/05/13
5 Comments

Unlike consumer devices, machines, ECUs or medical devices are in the field for 15 or more years. There inevitably comes the time in their life, when you must update their boot loader. I’ll show you how to do this from an embedded Linux system running on an NXP iMX8M Plus. You can adapt the method to other SoCs and use it for OTA updates, as well.

by Burkhard Stubert
2024/03/122024/11/12

How hard can it be to write a Yocto recipe for building a Qt application with CMake? Actually, it turns out to be pretty hard. I have seen my fair share of slow-and-dirty workarounds (nothing is ever quick with Yocto, not even the diry workarounds) how to force the Qt application into the Linux image and onto the device. Over the years, I turned my own slow-and-dirty workarounds into a hopefully quick-and-clean solution. Here it comes.

by Burkhard Stubert
2023/02/042023/02/04
3 Comments

We can build the Qt versions from 6.2 to 6.5 with the meta-qt6 layer for the Yocto versions 3.1 to 4.1. This is a big time saver.

Creating A Custom Yocto Layer

by Burkhard Stubert
2022/11/072022/11/07

After having built the reference Linux image from a SoM, SoC or terminal maker and having run it on the board, we must inevitably custom-tailor this image to our needs. We must create our own Yocto layer. We must remove all the unnecessary packages and make our core application start automatically on power-up. Here is a step-by-step guide how to turn the application layer for a Toradex Verdin iMX8M Plus board into our own custom layer. The guide should also work for other boards.