Booting Automotive ECUs Really Fast with Modern Security Features
summary
Goal is to boot automotive ECUs to meet a ~2 second rear‑view camera KPI while keeping dm-verity, secure boot, SELinux and IPsec enabled. Uses Yocto/Poky, systemd with a custom early target, UFS/eMMC layout tuning and AB partitioning, plus kernel modularization and hotplug RAM. Measured wins: ~300 ms from preallocating block devices, ~200 ms total from scheduler tuning (P-ELT), ~500 ms saved only by suspend-to-RAM in practice, and a ~1 s blocker from polkit leading to a drop‑in smallkit replacement. Containers stay LXC for speed.
AI-written summary · about
chapters (14)
- 0:00BMW CARIT
- 3:15WHY DO WE NEED TO START FAST?
- 5:09WHAT DO WE MEAN BY MODERN SECURITY?
- 7:21FIRST-CHEAT!
- 10:04WHAT ARE THE HIGH LEVEL ISSUES?
- 10:53TIMELINE OF BOOT SEQUENCE
- 11:45SECURE BOOT ISN'T EVEN SLOW
- 12:59MODERN FLASH IS SUPER FAST
- 17:05A/B PARTITIONING DOESN'T SLOW YOU DOWN!
- 19:09LOADING THE KERNEL
- 22:09EXTENDING THE CHAIN OF TRUST TO THE ROOTPS
- 25:02THE ISSUE WITH TRUSTZONE
- 30:21SYSTEMD-UDEVIS TOO NOISY
- 35:03CONTAINERS!
related talks
41mResolve and standardize early access to hardware for automotive industry with Linux
49mEmbedded Linux BOF
33mBoot time optimization for embedded devices
21mAccelerating Boot Time: Lessons from a New Platform
48mUnified Boot Time Measurement: A Precise, Scalable Framework for Multi-Processor Systems
46mStatus of Embedded Linux
33mU-Boot's New Standard Boot and What's Next
30mQuick booting a software defined rear view camera