How-to Guides¶
How-to guides provide step-by-step instructions for specific tasks. They assume a working build environment. For first-time setup, start with Build the ToloMEO Reference Image.
Development¶
| Guide | Covers |
|---|---|
| Configure the dev environment | sstate cache mirror, external cache directories, performance tuning, troubleshooting |
| Configure passwords | root and admin password generation for production images |
Update¶
| Guide | Covers |
|---|---|
| Configure update modes | enable OTA file, OTA streaming, and USB update modes via DISTRO_FEATURES |
| Generate a signed update package | RSA key management, SWUpdate configuration, and package build |
| Generate a delta update | incremental (rdiff) update packages with binary diffs |
| Generate an encrypted artifact | AES-256-CBC encrypted .swu packages |
QEMU¶
| Guide | Covers |
|---|---|
| Run standalone | run a ToloMEO image in QEMU without the devcontainer |
| Test updates in QEMU | trigger OTA streaming and USB updates against a QEMU instance |
Offline¶
| Guide | Covers |
|---|---|
| Enable offline capabilities | licensed access token, opt-in build, layer-dependency use, the gating mechanism |
Security¶
| Guide | Covers |
|---|---|
| Generate a HAB4 PKI tree | CST keys, SRK table, and eFuse programming (i.MX8M) |
| Generate an AHAB PKI tree | SPSDK keys, SRK hash, and eFuse programming (i.MX9) |
| Export SBOM and VEX | CycloneDX SBOM/VEX generation, kernel CVE enrichment, supplier setup |
| Manage the CVE database | NVD database fetch, API key, backup seeding, and scheduled refresh |
| Enable NXP authenticated boot | HAB4 and AHAB boot image signing for i.MX8M and i.MX9 |
| Enable FIT image signing | RSA signing of the Linux kernel FIT image |
Configuration¶
| Guide | Covers |
|---|---|
| Configure meta-tolomeo for your machine | override the TLM_ interface, redirect OTA paths, machine configuration checklist |