Troubleshooting and FAQ

Troubleshooting tips and FAQ

Supported Platforms and Operating Systems

It is highly recommended to use a Pi with at least 4GB of RAM. Bootware requires approximately 700MB of RAM overhead for image verification and encryption. For HTTPS endpoints, the image must be 700MB smaller than your total RAM.

Pre-installed SCM Operating Systems

The SCM ships with a pre-installed with the following options for Operating System:

• Raspberry Pi OS Lite (bookworm 64bit)
• Raspberry Pi OS Lite (bullseye 64bit)
• Ubuntu Server LTS 22.04 (jammy 64bit)

Precautions

• Important boot files to not delete.

  • Boot.scr
  • zboot.enc
  • u-boot.bin
  • config.txt
  • [After bootware update] usr-kernel.enc
  • [Before bootware] cmdline.txt
  • [Before bootware] kernel8.img for rpiOS and vmlinuz for ubuntu

• The /boot filesystem should be partitioned for 512MB of space or more. Our default configuration as shipped uses a /boot partition of 512MB. Ubuntu in particular creates backups of all files on updates that may exceed free space with Bootware.

• In config.txt, otg_mode=1 cannot be set. DWC2 needs to be enabled. This is set at our factory and by bootware (and is the default with ubuntu), but if changed, the system will not boot.

• Non Bootware: Ubuntu requires the initrd.img on the system to boot up. Be wary of replacing this file or removing it.

• Be cautious around the policies set in the supervised boot and the files put in the manifest. This follows hardware not images. This also applies to the other tamper policies.

Issues

• Fixed Issue #145: Fixed in Bootware 1.2: Switching OS with Zymkey does not properly set GPIO WAKE PIN. For instance, if you install on Bookworm, the WAKE PIN is set at installation time to 516. If you then load a bullseye zi, bullseye with older kernels wants the WAKE PIN at 4. Bootware needs to take this into account. Workaround is to setup your Zymkey with the operating system you intend to use and create your Bootware zi image within that OS.

• Issue #147: Bootware: Needs to identify the kernel file to be loaded for custom kernels named something other than kernel8.img or vmlinuz. Needed for supporting custom kernel versions. Workaround is to copy or link your custom kernel to either kernel8.img for Raspberry Pi based OS, or vmlinuz for Ubuntu based OS.

Changes to our standard images

The table below summarizes changes made to the standard image coinciding with the release of Bootware 1.2.