Until RISC-V becomes viable the only escape out of this mess is to go ARM on one of the open source friendly boards.
If you have something you need to keep highly secure the solution is to just one use of those. Unless you have a huge budget. If then then one of the Talos POWER workstations.
Here is a good place to start.
Pick one of the OSHW approved devices.
Maybe something like this one. Although I haven't tried it yet so I don't know.
The reason for this is because these ARM systems are still primitive enough that it hasn't been poluted by all the proprietary firmwares that infect more powerful systems. No ACPI, no IPMI, no BIOS, no UEFI.
Instead the 'bootloader' does the low-level initialization of the hardware. It performs the same functions that low level firmware for POST, the BIOS, and the boot loader perform on x86 and it's open source.
That's really about as good as it gets Freedom-wise for now. You give up a lot, but it's still a extremely powerful computer as far as historical Unix systems are concerned and can still run virtually all open source software. If you love your minimalist Linux environment then you might as well as get minimalist hardware to go with it.
What's more... they are cheap. Little plastic case + board + cheap display + keyboard means you can get a fully functional Linux workstation for about 100 bucks.
Looking forward to RISC-V machines.
According to this, it's 100Mbit LAN https://www.olimex.com/Products/OLinuXino/A10/A10-OLinuXino-LIME/open-source-hardware. Still looks cool though. Does it have hardware accelerated video decoding? Could be a great XBMC device. My Pi works OK, but it chokes when subtitles have to be displayed (wife's Japanese so we watch everything with subtitles).
Personally I don't know why this gets as much coverage as it does when there is stuff like the OLinuXino-LIME.
https://www.olimex.com/Products/OLinuXino/A10/A10-OLinuXino-LIME/open-source-hardware
Olimex A20 All the way :
i have this board and i'm pretty happy wih it :
https://www.olimex.com/Products/OLinuXino/A20/A20-OLinuXino-MICRO-4GB/open-source-hardware
*fanless *1gb ram *4gb nand (no need for usb boot) *full fledged sata on board *160 (!!) GPIO *HDMI + vga
Runs debian w/ accelerated wid = https://olimex.wordpress.com/2014/03/07/building-a20-olinuxino-micro-debian-image-with-hardware-accelerated-video/
cheers
this device seems pointless security wise. When you input the password for your ssh, the host can log it and is inside with you. It lacks a video output: you can obtain one using their USB host + one USB-to-HDMI dongle (total cost: 200$ without case). But then, you have the host, the keyboard and the video output on the same serial bus which I doubt is safe at all.
Better would be to go with one of its open source hardware competitors, like an A20 Olinuxino Lime2 + case (total cost: 50€). Now you can arrive with your credit card sized case, hook up the keyboard and the screen and you have a truly safe computer. Plus: GPIOs, SATA, USBotg, Lan connector, possibility to power it by battery..
And you can grab a smartcard reader + a smartcard, or better, a yubikey (neo for NFC capabilities) (50$), that can contain your gpg key, which cannot be extracted, with all the gpg crypto happening inside that key.
I am personally no expert in the degree of openness, though I always had a high opinion of the Olimex OLinuXino line, simply because their PCB files are open-source and I always wanted to build my own custom SoC and considered those a great basis to start from.
They use an Allwinner A20 CPU (Cortex-A7), which seems to be reasonably libre. I however don't know about their WiFi chip. Hope this helps.
Check out the A20 OLinuXino here: https://www.olimex.com/Products/OLinuXino/A20/open-source-hardware
Raspberrypi 3 is good if you don't mind the blob needed to boot.
The common allwinner A20 based board have free/gpl video encoding/decoding. https://www.crowdsupply.com/eoma68/micro-desktop/updates/cedrus https://linux-sunxi.org/Cedrus
If you dont want to wait for EMOA-68 board to arrive the Olinuxino boards are nice and openhardware. https://www.olimex.com/Products/OLinuXino/A20/A20-OLinuXIno-LIME2/open-source-hardware
Maybe a iMX233-OLinuXino-NANO with an Ethernet adapter? Have a look at the rest of the OLinuXino series!
OLinuXino-LIME2 has 2 UART and eMMC or NAND storage, and good mainline support (apart from 3D acceleration). Might be worth contacting them, as they have a range of industrial boards that might have more UARTs.
I'm considering moving away from the RPi to something from OLIMEX such as this:
https://www.olimex.com/Products/OLinuXino/A10/A10-OLinuXino-LIME/open-source-hardware
It's similarly priced to the RPi with better specs as well as libre/open hardware and software.
Here's a guide to get going with osdev on such a device:
I wouldn't put my whole trust into RPi to use it as a means to secure my privacy with so small computing power it has. As a hobby and doing some fun innovations, it might be great like e.g. making Onion Pi or doing some pentesting with Kali Linux. Remember, their basic goal is "to promote the teaching of basic computer science in schools and in developing countries" ^[1] Secondly, if you really care about FOSS and what not, you should already know that RPi has a Broadband ARM chip which is proprietary and its firmware is closed source. "There has been criticism of the Pi for having parts which are closed source, however given that the aim of the Pi is education of children, open sourcing everything is not seen as a priority." ^[2] If you are doing some serious stuff, the alternative is OLinuXino.
A Raspberry Pi is not a good idea for anything networking-related. Its Etherent port is connected via the USB port, causing an unnecessary overhead.
If you want a cheap RPi-like board, check the OlinuXino boards by Olimex. You can even directly plug a SATA hard-drive to most of them.
E. g. A20-LIME and A20-LIME2
https://www.olimex.com/Products/OLinuXino/A20/A20-OLinuXino-LIME/open-source-hardware https://www.olimex.com/Products/OLinuXino/A20/A20-OLinuXIno-LIME2/open-source-hardware
I would probably keep the 1043ND as the router and buy a A20-LIME2-4GB. Install the operating system in the 4 GB flash and you've got yourself a low-power, quite powerful seedbox that you can unplug from the network at your will:
https://www.olimex.com/Products/OLinuXino/A20/A20-OLinuXIno-LIME2-4GB/open-source-hardware
This, although it seems that many are not willing to spend...
I quoted someone $15k for schematic capture + PCB layout of a board on the below level of complexity over a month term (which comes out to around $94 at 40hr/week but I saw it taking a larger commitment of time at maybe 60hr/week) and was ghosted lol. People aren't willing to pay for the knowledge of designing boards like that while accounting for DFM, DFA, FCC/CE, etc.
https://www.olimex.com/Products/OLinuXino/A64/A64-OLinuXino/open-source-hardware
Olimex makes SBCs with fully open source hardware:
https://www.olimex.com/Products/OLinuXino/A20/A20-OLinuXino-LIME/open-source-hardware
https://www.olimex.com/Products/OLinuXino/open-source-hardware
I've not personally tested any of their boards.
For a desktop I'd probably pick up an OLinuXino-LIME2. They have the Allwinner A20, which is pretty well supported from sunxi. They have a SATA interface, and they are open-hardware. (Cubieboards are also pretty good, but not open-hardware (they use the same chips)).
I'd also likely order a battery with it, as it'll act as a UPS.
I haven't heard the best stuff on hardkernel, so I'd want to look more in to that before picking up an odroid.
For people with limited Linux experience I'd be more likely to recommend the RPi2, just because the community is so large that there's probably a forum post to directly answer any questions you might have.
Yeah, what gets me is that they still went ahead with loading uboot from an sd card in their open Novena laptop. Most arm socs have a tiny, immutable brom embedded that can't even fully initialize the ram on its own--it can just find and launch uboot. I wish they had added some raw nand instead. Mainline Linux will soon support raw nand chips. Most work in that regard is I think being done on the sunxi devices like,
https://www.olimex.com/Products/OLinuXino/A20/A20-OLinuXino-MICRO-4GB/open-source-hardware
We're still 4 months out from the beta units shipping and 7 months from the first proper production batch. There's not much to talk about yet, other than speculation.
As for emulation, you could probably set up a roughly-equivalent environment under QEMU. Folks have done it for the RPi2, and that's about as close as you're going to get without a copy of the actual debian version shipping with the CHIP. It should be close enough for any purely software-based fiddling. Anything you can get running in that environment should compile for the CHIP and run just as well.
If you wanted to play on actual hardware, olmex makes a dev board that uses the same A13 core that the CHIP will use.
i've been thinking about doing this - part of me balks at spending the price of a desktop monitor (or quad core tablet) on a 7 or 10 inch screen
flaky sd cards also put me off
you could check out the olimex boards - they have onboard nand flash and an lcd connector, and run linux & android
https://www.olimex.com/Products/OLinuXino/A20/open-source-hardware
There are lots of single board computers http://pcengines.ch, http://routerboard.com to mention just a few sources. Maybe this is the device you are looking for: https://www.olimex.com/Products/OLinuXino/A20/A20-OLinuXIno-LIME2-4GB/open-source-hardware?
I challenge you sir and will go bulgarian on you !
main dufferences with bananapi in bold when olimex is better, italic when BPi is.
Allwinner A20 dual core Cortex-A7 processor, each core typically running at 1GHz and dual-core Mali 400 GPU
512MB DDR3 RAM memory (Bpi 1Gb)
SATA connector with 5V SATA power jack
HDMI connector with FullHD support (1080p)
2 x USB High-speed host with power control and current limiter
USB-OTG with power control and current limiter
100MBit native Ethernet (BPi 1Gb)
LiPo Battery connector with battery-charging capabilities
LCD connector compatible with with 4.3", 7.0", 10.1" LCD modules from Olimex (Bpi have camera connector instead)
160 GPIOs on four GPIO connectors
MicroSD card connector
DEBUG-UART connector for console debug with USB-SERIAL-CABLE-F
GPIO LED
Battery charge status LED (Bpi don't have a lipo connector i think)
Power LED
2KB EEPROM for MAC address storage and more
3 BUTTONS with ANDROID functionality + RESET button
4 mount holes
5V input power supply, noise immune design
PCB dimensions: 84 x 60 mm
Also Olimex board : 33€ , BPi 45€
it's not radically better but the nbr of GPIOs really cuts the thing for me, while the < memory ain't (again, for me) much a big deal
also take a look a the cubie family
You might also want to take a look at the Olimex OLinuXIno LIME2.
Dual core Cortex-A7, 1GB DDR3, SATA, HDMI, GBIT ethernet..
I suggest your speakers to not be Bluetooth enabled themselves but to all be connected to a centralised sound system which would than have a Bluetooth input. But in general it seems to me like most of what you want to automate is a media centre. I say you do it with a Raspberry Pi which would obviously output to the speakers being the player and switch the lights or anything else on and off while being controlled by you via an app over WiFi.
I think you would use relays rated appropriately for current and voltage to switch on and of stuff with raspberry. If you want to control things in your apartment to far from your media centre to be controlled by the raspberry directly you'll want to use microcontrollers on little control boards which you could very well design yourself paired with one of these little Rf modules http://store.iteadstudio.com/index.php?main_page=product_info&cPath=7&products_id=53.
I could get 10 of these on eBay for 10 €, I'm in Germany. Your raspberry would have one and would control everything else in the house which would than be controlled by you on your smartphone or tablet or computer. At last I'll say that you probably shouldn't use a raspberry but one of its rivals which have mor features in general. https://www.olimex.com/Products/OLinuXino/A20/A20-OLinuXino-MICRO-4GB/open-source-hardware
A10-OLinuXino-LIME is EUR 30, you have 10/100Mbit Ethernet, HDMI, USB x2, SATA and consumes 1.5W, with build in LiPo charger and step up it will work hours from LiPo battery https://www.olimex.com/Products/OLinuXino/A10/A10-OLinuXino-LIME/open-source-hardware
Attach them to Olimex Lime boards, make yourself a gluster/ceph cluster. You'll have to find a way to get 12V power to the 3.5" drives but that can't be too hard.
I came across a list of single board computers, and whether or not they require proprietary boot code (like the rpi) but I can't find it. Could swear it was the FSF or GNU...
Anyway there's also the OLinuXino which is quite a bit cheaper, and also respects freedom.
~~I don't think he used any of their dev boards, some are incredibly expensive.~~
edit: I was wrong he did pick up some.
https://www.olimex.com/Products/OLinuXino/A33/A33-OLinuXino/open-source-hardware
If you really need a linux based soc, look into the OLinuxIno platform from Olimex:
https://www.olimex.com/Products/OLinuXino/open-source-hardware
Otherwise ESP32 as suggested by others is the best choice.
Sadismus ist doch in Ordnung, solange er mit mündigem Einvernehmen ausgelebt wird. Das kann sogar Spaß machen.
Aber abgesehen davon und auch abgesehen vom offensichtlich schlechten Stand der marktüblichen Drucker muss eine günstige Lösung doch nicht schlecht sein. Wenn man sich nicht Microsoft Windows installiert und mit Google Chrome WebApps©®™ ~~benutzt werden~~ benutzen will, dann tut es z.B. auch eine Einplatinenuniversalmaschine wie dem sehr offenen A20-OLinuXino-Lime2 mit Bildschirm und Eingabegeräten. Universelle Maschinen auf Basis des i.MX8 sind auch zu gebrauchen, und sobald offene Maschinensätze auf Basis von RISC-V erscheinen, sind sie ein offensichtlicher Kandidat.
I took a look at them. I saw Olimex has a board with an I.MX chip, and it's QFP too! To be honest a leading factor for why I choose the Plus One, is that it was listed as chip of the week on the Amp Hour podcast (on top of the form factor and usability).
This may be showing my lack of knowledge around BGA, but for example the clock signal for ethernet transceivers is 25MHz. Personally I'm a little weary of routing that kind of frequency under a CPU, I'd feel much more comfortable routing it surrounded by solid ground plane to the transceiver. I know this is nonsense, because people must do it all the time and it works out fine; but if I had problems on my first rev, I'd be paranoid that my clock signal is jumping around my board.
As others have said, starting something like this from scratch is a very difficult task, even for those with experience. What you can do though is take an existing open source hardware design and customise the layout and connectors based on the capabilities of the ARM SoC (System on a Chip) processing unit.
Olimex produce a large number of SBCs that run Linux (and others). Check out their page here. There are other manufacturers that also open source both the hardware design and other important things like bootloaders. Even if you build a board such as the RPi, it will be useless without these normally closed source pieces of firmware, etc.
Even with all these resources at your disposal, it's very likely your first SBC will just not work. They are crazy complicated, and if you don't yet understand things like Ohm's Law and other electrical/electronic engineering concepts you may never get it to work. There are courses available online to learn everything, with sites like Pluralsight (get a 1 month free trial by signing up as a Visual Studio developer over here), Lynda/LinkedIn Learning all offering free trials that will give you enough time to learn so much.
BeagleBoards, Olimex OLinuxino Boards and Cubieboards are the only ones i know with open-hardware and free firmware.
I think its pretty high on the rankings.
The Olimex boards like the LIME2 are about the same, though they would not get the certification from the FSF because they "recommend" the closed MALI drivers. There are also GTA04, beaglebones, GnuBee, Novena ...
I don't know if this helps at all, and it doesn't really answer your question, but I'll throw it out there anyway.
I'd suggest you may want to evaluate boards with eMMC/NAND.
You may have a good grasp on either network booting, or using read-only filesystems to reduce corruption, but the Pis can at times eat SD cards.
Personally I'm a fan of the OlinuXio board by olimex. You can get them rated for industrial temperatures ( (-45+85)°C), or with gigabit ethernet.
They also use barrel jacks for power, and can take 6v-16v, so maybe that would be easier to power for you.
Anyway, not trying to derail the Pi idea, just wanted to throw the idea out there in case you hadn't considered it. I did also find what looks like it might be what you're looking for, so they apparently at least exist:
https://www.olimex.com/Products/OLinuXino/RT5350F/ RT5350F-OLinuXino Open Source Software and Open Source Hardware, low cost Linux computer. It runs OpenWrt. It has 2.4Ghz WIFI 801.11n 150Mb, USB, UART, 20+ GPIOs and x5 100Mb Ethernet ports.
We're running on the Arm A20 on this hardware:
Development is on a normal desktop PC, runnning ubuntu
Banana and Orange Pi are AllWinner. So is OLinuXino.
These probably have better support than the "pi's". Olimex has some of the most "open-source" of the "open-source" boards. https://www.fsf.org/resources/hw/single-board-computers
SI te interesa tengo una placa del mismo tipo, pero otra marca. Si tiene mucho más periféricos:
Corre Debian y Arch Linux sin ningún problema. Tengo dos ahí tiradas.
Sino está éste sitio
>If you're using BIP38, it can be weaker because a hardened hash is used, and unless someone has the actual paper wallet there is nothing for them to try to crack.
If they don't have the paper you can put your brainwallet passphrase on it and remove some pieces as you memorize them.
>If you're worried about malicious hardware, generate it offline in a room with TEMPEST shielding and use dice to generate the private key.
Assume your dice are rigged, your keyboard is logging everything you type, and your screen is being recorded.
My idea is to give the malware nowhere to write the secret. I believe some AllWinner SBCs don't have any microcode and the firmware is all on removable SD card or the NAND is fully writable from USB (so it is easy to unbrick and completely overwrite the firmware). The air gap is only bridged with QR codes when transmitting raw transactions. If the transaction is valid there shouldn't be room for it to transmit a secret.
>Very few people have a threat model that requires this level of paranoia.
Casper validators might need it. It only hurts when you are learning.
I can show you many examples of malware, people losing encrypted wallets, or forgetting computer generated passwords. For example, your "offline" computer could have been infected with LightEater or a USB drive exploit which can be done even if you are moving just the flash card instead of a USB drive. The operating system (or any other software) may be infected when you download it or when you buy the computer new.
Now, can you show me one cracked password that is 5 words that a human picked from a dictionary? Is it "paranoid" to use dice and make brainwallets longer than five words if we have never seen one cracked?
Not perfectly open, but have you checked out the Olimex boards?
I have one of the A20's (https://www.olimex.com/Products/OLinuXino/A20/open-source-hardware) from a project that went nowhere and if I recall correctly other than the GPU (Mali) it's open source.
The Allwinner A20 CPU (for example on https://www.olimex.com/Products/OLinuXino/A20/A20-OLinuXIno-LIME2/open-source-hardware which has a spot for the NAND) can access NAND directly and I used it before for that. Driver also already exists.
There are cheaper ones that can too, but this one has the tracks already.
Modern NAND chips are SMD so it's quite difficult to solder them on there (need a solder station, solder paste, needles, a microscope and hours of work; probably an adapter too for today's microsd modules).
Something running linux and able to do usb host would be the cheapest way, then you could use a 3g dongle to do cellular. However, this probably falls down on the low power part.
After a quick look, that puts you with somewhere around the Pi a+, or https://www.olimex.com/Products/OLinuXino/iMX233/iMX233-OLinuXino-NANO/open-source-hardware, or https://www.olimex.com/Products/OLinuXino/RT5350F/RT5350F-OLinuXino/open-source-hardware
That second one looks like it has lipo charging and such, which would let you charge the battery from the panel. You might have to add something to turn it on and off, but you might be able to do with with the hardware that's already there?
Thanks for taking the time to hear my argument.
I guess I should add as disclaimer that I don't claim ORDROID-C1 to be the best SBC for NAS duties, its just the one I happen to use.
There may be others that are better fit for the job. Like the Olinuxinos with a native SATA port, or maybe the Banana Pi.
My point is: There is a whole lot of different RPi like computers out there, all with their own strengths and weaknesses.
It is often worth it to explore the different options and find one that is best fit for the job you want it to do.
The CPU on the Rpi doesn’t support parallel flash or SATA. The options are a bit limited to an SD card or an USB stick. A USB to Sata converter is possible but hard to design yourself.
If you want something like an Rpi but with Sata have a look at something like this: https://www.olimex.com/Products/OLinuXino/A20/A20-OLinuXino-MICRO/open-source-hardware
It's somewhere in between an Rpi and an Rpi 2 in CPU speed, GPU speed is also not too bad and it supports SATA for an HDD or parallel flash. This is a version with 4GB of onboard flash: https://www.olimex.com/Products/OLinuXino/A20/A20-OLinuXino-MICRO-4GB/open-source-hardware
The PCB and schematic are open source and made in Eagle so you can download them and have a look inside them and they even sell the CPU separate, although soldering a 256 pins BGA is challenging :)
The FreedomBox wiki has a somewhat comprehensive list. The added benefit of choosing a board with ✔ in the OSHW field is that you don't (or won't at some point in the future) need any non-mainline or proprietary code for the kernel and bootloader.
I have a Olimex A20-OLinuXIno-LIME2 and it's working great on 3.19.
OLinuXino?
I vote for these boards because they're open hardware and a member of OSHWA. If I was buying today I'd probably buy the https://www.olimex.com/Products/OLinuXino/A20/A20-OLinuXIno-LIME2/open-source-hardware (or the one with 4G nand if needed)
I would have gone with more something like this for the screen -- I'm not sure if it's compatible with the Pi (though I personally dig the Olimex hardware cuz it's all open source), but it gives way more resolution and a lot more screen real estate to work with.
Spinning a board is going to be a challenge for a beginner, are you a beginner?
Anyways, I've looked into this before, and it seems like Olimex has some open source boards that you can look at https://www.olimex.com/Products/OLinuXino/
These boards are completely open source and don't need hot air tools to solder, most of them don't use any BGA. Then make sure that you can actually obtain one of the CPUs being used and you should be good to go from there.
Copying a design first is a good first step because if something doesn't work, it's easy to figure out what the difference between your version and their version is.
The Allwinnder A10 and A20 SoCs have a built in stereo CODEC. I have heard they work pretty well for messing about with linux-audio especially the A20 which is dual-core. I haven't had time to play with my Olinuxino A20 board yet though.
The Olimex LIME has a similar price to the RaspberryPi, better hardware and open hardware/software. Olimex makes others with better ethernet etc, for a somewhat higher price (check the sidebar under "OLinuXino"):
https://www.olimex.com/Products/OLinuXino/open-source-hardware