Make your own Read-Only Device with NetBSD

[stefano@mastodon.bsd.cafe]

Make your own Read-Only Device with NetBSD

One detail that is often overlooked when dealing with embedded (or remote) devices is a key point of vulnerability: the file system.

Make your own Read-Only Device with NetBSD

Learn how to configure a reliable read-only root file system on NetBSD, improving system stability and reducing the risk of corruption in embedded and remote setups.

IT Notes (it-notes.dragas.net)

#NetBSD #RunBSD #EmbeddedDevices #OwnYourData #ITNotes

[mjack@mastodon.bsd.cafe]

@stefano Could this work on a Raspberry Pi? The photo looks like an older model.

[stefano@mastodon.bsd.cafe]

@mjack the photo is a generic one. This will work with any device supported by NetBSD.
I'm using it on my Raspberry Pi Zero W and the Raspberry PI A that is managing my heating system

[mjack@mastodon.bsd.cafe]

@stefano Nice, new project then!

[linus@telegrafverket.cc]

@stefano this article links to https://it-notes.dragas.net/2024/05/31/freebsd-tips-and-tricks-native-ro-rootfs/ which made me wonder, how do you stop /var for example from filling up ram when it's tmpfs? Do you just set "size" in fstab?

[stefano@mastodon.bsd.cafe]

@linus if correctly configured, log rotation will do its job. I've had situations where this led to problems, mainly for the /var/mail/root filled up with e-mails from crons.

[seuros@mastodon.bsd.cafe]

@stefano LOL you trying to rebuild the Apple Timecapsule .. ?