- Shell 88.4%
- Makefile 9.2%
- Python 1.7%
- Dockerfile 0.4%
- Batchfile 0.3%
| Filename | Latest commit message | Latest commit date |
|---|---|---|
932fe45bf9* Fix mtools partition syntax in post-image scripts The ::1 suffix is not a valid partition specifier for mtools; it's interpreted as a drive letter mapping (C:), causing mmd to fail with exit code 2. Remove the ::1 so mtools auto-detects the first MBR partition on seedsigner_os.img. * Use :p1 partition syntax for mtools instead of bare image * Fix mtools: use @@offset syntax with dynamic MBR partition read The :p1 suffix is not valid mtools command-line syntax. The correct approach is to read the partition 1 start sector from the MBR (byte 454, little-endian uint32) and pass it as @@OFFSET to mtools' -i flag. Also adds tests/test_post_image_mtools.sh which creates a synthetic MBR+FAT32 disk image and validates all 5 post-image scripts against it. * Add AGENTS.md with build and testing guidelines |
||
| .devcontainer | ||
| .github/workflows | ||
| docs | ||
| images | ||
| opt | ||
| tests | ||
| .gitignore | ||
| .gitmodules | ||
| AGENTS.md | ||
| docker-compose.yml | ||
| Dockerfile | ||
| LICENSE.md | ||
| README.md | ||
| temp.cap | ||
SeedSigner OS
- Overview
- Building
- Building (without Docker)
- SeedSigner OS structure
- Dev workflow
- Customizing Buildroot
JUMP STRAIGHT TO: 🔥🔥🔥🛠 Quickstart: SeedSigner Reproducible Build! 🛠🔥🔥🔥
Overview
A custom linux based operating system built to manage software running on airgapped Bitcoin signing device. SeedSigner is both the project name and application running on airgapped hardware. This custom operating system, like all operating systems, manages the hardware resources and provides them to the application code. It's currently designed to run on common Raspberry Pi hardware with accessories. The goal of SeedSigner OS is to provide an easy, fast, and secure way to build microSD card image to securely run SeedSigner code.
⚙️ Under the Hood
SeedSigner OS is built using Buildroot. Buildroot is a simple, efficient and easy-to-use tool to generate embedded Linux systems through cross-compilation. SeedSigner OS does not fork Buildroot, but uses Buildroot with custom configurations to build microSD card images tailor made for running SeedSigner.
🛂 Security
SeedSigner OS is built to reduce the attack surface area and enable additional application functionality. The OS is an order of magnitude smaller in size than Raspberry Pi OS (which is what typically is used to run software on a Pi device). Here are a list of some security and functional advantages of using SeedSigner OS.
- Boots 100% from RAM. This means, once you see the SeedSigner splash screen, you can remove the microSD card because no disk I/O is needed after boot!
- One FAT32 partition on the microSD card
- Removes these standard Raspberry Pi OS Kernel modules:
- Networking and Bluetooth
- SWAP
- I2C
- Serial
- USB
- Pulse-Width Modulation (PWM)
- NO HDMI support
- NO Serial connection TTL support
- NO Software supporting any wireless or networking chips
- A single read only zImage file on the boot partition containing the entire Linux kernel and filesystem