How-to Guides¶

How-to guides provide step-by-step instructions for specific tasks. They assume a working build environment. For first-time setup, start with the First Build tutorial.

Development¶

Guide	Covers
Configure the dev environment	sstate cache mirror, external cache directories, performance tuning, troubleshooting
Configure passwords	root and admin password generation for production images

Update¶

Guide	Covers
Configure update modes	enable OTA file, OTA streaming, and USB update modes via `DISTRO_FEATURES`
Generate a signed update package	RSA key management, SWUpdate configuration, and package build
Generate a delta update	incremental (rdiff) update packages with binary diffs
Generate an encrypted artifact	AES-256-CBC encrypted `.swu` packages

QEMU¶

Guide	Covers
Run standalone	run a ToloMEO image in QEMU without the devcontainer
Test updates in QEMU	trigger OTA streaming and USB updates against a QEMU instance

Security¶

Guide	Covers
Export SBOM and VEX	CycloneDX SBOM/VEX generation, kernel CVE enrichment, supplier setup
Manage the CVE database	NVD database fetch, API key, backup seeding, and scheduled refresh
Enable NXP authenticated boot	HAB4 and AHAB boot image signing for i.MX8M and i.MX9
Enable FIT image signing	RSA signing of the Linux kernel FIT image