[cip-dev] CIP embedded platform Internet connection?

[cip-dev] CIP embedded platform Internet connection?

[Mohammed Billoo]

[-- Attachment #1.1: Type: text/plain, Size: 505 bytes --]

Hi,

This question stems from the thread titled "The security of NTP". If we do
go with NTS, it looks like we're going to need an Internet connection to
the embedded platform. Is that acceptable? The work that I've seen so far
related to CIP SWUpdate has assumed that the Hawkbit server is on the local
network. It isn't obvious if that has been an intentional decision (due to
security requirements) or just to ease development.

-- 
Mohammed A Billoo
Founder
MAB Labs, LLC
www.mab-labs.com
201-338-2022

[-- Attachment #1.2: Type: text/html, Size: 871 bytes --]

[-- Attachment #2: Type: text/plain, Size: 419 bytes --]

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#5029): https://lists.cip-project.org/g/cip-dev/message/5029
Mute This Topic: https://lists.cip-project.org/mt/75823534/4520388
Group Owner: cip-dev+owner@lists.cip-project.org
Unsubscribe: https://lists.cip-project.org/g/cip-dev/leave/8129055/727948398/xyzzy  [cip-dev@archiver.kernel.org]
-=-=-=-=-=-=-=-=-=-=-=-

Re: [cip-dev] CIP embedded platform Internet connection?

[Daniel Sangorrin]

[-- Attachment #1: Type: text/plain, Size: 764 bytes --]

Hi Mohammed,

> -----Original Message-----
> From: cip-dev@lists.cip-project.org <cip-dev@lists.cip-project.org> On Behalf Of Mohammed Billoo
> This question stems from the thread titled "The security of NTP". If we do go with NTS, it looks like we're going to need an Internet
> connection to the embedded platform. Is that acceptable? The work that I've seen so far related to CIP SWUpdate has assumed that the
> Hawkbit server is on the local network. It isn't obvious if that has been an intentional decision (due to security requirements) or just to ease
> development.

There is nothing in CIP SWUpdate that assumes the Hawkbit server is on a local network.
Perhaps the README is using a local serve for demonstration purposes?

Thanks,
Daniel

[-- Attachment #2: Type: text/plain, Size: 419 bytes --]

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#5052): https://lists.cip-project.org/g/cip-dev/message/5052
Mute This Topic: https://lists.cip-project.org/mt/75823534/4520388
Group Owner: cip-dev+owner@lists.cip-project.org
Unsubscribe: https://lists.cip-project.org/g/cip-dev/leave/8129055/727948398/xyzzy  [cip-dev@archiver.kernel.org]
-=-=-=-=-=-=-=-=-=-=-=-

Re: [cip-dev] CIP embedded platform Internet connection?

[Mohammed Billoo]

[-- Attachment #1.1: Type: text/plain, Size: 1740 bytes --]

Daniel,

Thanks for getting back. I realized that the configuration of the embedded
platform and Hawkbit server may be specific for the SWUpdate demo.
Suzuki-san, is that correct? If so, is it OK if these parameters are in
files or would you want them in a less permanent form (e.g. environment
variables)? The advantage of the latter would be that if I need to change
the network configuration for my own set up (since my localhost external IP
is different from what's in the BBB customization), I don't have to manage
two different network configurations. I can set the appropriate environment
variable (for example) and the build, if set up correctly, would pick up
the environment variables and configure the BBB image correctly. Is there
any strong conviction for either way?

Thanks

Mohammed A Billoo
Founder
MAB Labs, LLC
www.mab-labs.com
201-338-2022

On Wed, Jul 29, 2020, 7:52 PM Daniel Sangorrin <
daniel.sangorrin@toshiba.co.jp> wrote:

> Hi Mohammed,
>
> > -----Original Message-----
> > From: cip-dev@lists.cip-project.org <cip-dev@lists.cip-project.org> On
> Behalf Of Mohammed Billoo
> > This question stems from the thread titled "The security of NTP". If we
> do go with NTS, it looks like we're going to need an Internet
> > connection to the embedded platform. Is that acceptable? The work that
> I've seen so far related to CIP SWUpdate has assumed that the
> > Hawkbit server is on the local network. It isn't obvious if that has
> been an intentional decision (due to security requirements) or just to ease
> > development.
>
> There is nothing in CIP SWUpdate that assumes the Hawkbit server is on a
> local network.
> Perhaps the README is using a local serve for demonstration purposes?
>
> Thanks,
> Daniel
> 
>

[-- Attachment #1.2: Type: text/html, Size: 2616 bytes --]

[-- Attachment #2: Type: text/plain, Size: 419 bytes --]

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#5054): https://lists.cip-project.org/g/cip-dev/message/5054
Mute This Topic: https://lists.cip-project.org/mt/75823534/4520388
Group Owner: cip-dev+owner@lists.cip-project.org
Unsubscribe: https://lists.cip-project.org/g/cip-dev/leave/8129055/727948398/xyzzy  [cip-dev@archiver.kernel.org]
-=-=-=-=-=-=-=-=-=-=-=-

Re: [cip-dev] CIP embedded platform Internet connection?

[Akihiro Suzuki]

[-- Attachment #1.1: Type: text/plain, Size: 2684 bytes --]

Hi Mohammed,

> I realized that the configuration of the embedded platform and Hawkbit server may be specific for the SWUpdate demo. Suzuki-san, is that correct?
Yes. It is specific for the SWUpdate demo.

> is it OK if these parameters are in files or would you want them in a less permanent form (e.g. environment variables)?
If possible, I prefer the latter.
Current cip-sw-updates-demo repository has many inconvenient points.
If you have time, could you fix them?

Thanks,
Suzuki

From: cip-dev@lists.cip-project.org <cip-dev@lists.cip-project.org> On Behalf Of Mohammed Billoo
Sent: Thursday, July 30, 2020 9:32 AM
To: cip-dev@lists.cip-project.org
Subject: Re: [cip-dev] CIP embedded platform Internet connection?

Daniel,

Thanks for getting back. I realized that the configuration of the embedded platform and Hawkbit server may be specific for the SWUpdate demo. Suzuki-san, is that correct? If so, is it OK if these parameters are in files or would you want them in a less permanent form (e.g. environment variables)? The advantage of the latter would be that if I need to change the network configuration for my own set up (since my localhost external IP is different from what's in the BBB customization), I don't have to manage two different network configurations. I can set the appropriate environment variable (for example) and the build, if set up correctly, would pick up the environment variables and configure the BBB image correctly. Is there any strong conviction for either way?

Thanks
Mohammed A Billoo
Founder
MAB Labs, LLC
www.mab-labs.com<http://www.mab-labs.com>
201-338-2022

On Wed, Jul 29, 2020, 7:52 PM Daniel Sangorrin <daniel.sangorrin@toshiba.co.jp<mailto:daniel.sangorrin@toshiba.co.jp>> wrote:
Hi Mohammed,

> -----Original Message-----
> From: cip-dev@lists.cip-project.org<mailto:cip-dev@lists.cip-project.org> <cip-dev@lists.cip-project.org<mailto:cip-dev@lists.cip-project.org>> On Behalf Of Mohammed Billoo
> This question stems from the thread titled "The security of NTP". If we do go with NTS, it looks like we're going to need an Internet
> connection to the embedded platform. Is that acceptable? The work that I've seen so far related to CIP SWUpdate has assumed that the
> Hawkbit server is on the local network. It isn't obvious if that has been an intentional decision (due to security requirements) or just to ease
> development.

There is nothing in CIP SWUpdate that assumes the Hawkbit server is on a local network.
Perhaps the README is using a local serve for demonstration purposes?

Thanks,
Daniel

--
Mohammed Billoo
MAB Labs, LLC
www.mab-labs.com<http://www.mab-labs.com>

[-- Attachment #1.2: Type: text/html, Size: 8078 bytes --]

[-- Attachment #2: Type: text/plain, Size: 419 bytes --]

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#5060): https://lists.cip-project.org/g/cip-dev/message/5060
Mute This Topic: https://lists.cip-project.org/mt/75823534/4520388
Group Owner: cip-dev+owner@lists.cip-project.org
Unsubscribe: https://lists.cip-project.org/g/cip-dev/leave/8129055/727948398/xyzzy  [cip-dev@archiver.kernel.org]
-=-=-=-=-=-=-=-=-=-=-=-

Re: [cip-dev] CIP embedded platform Internet connection?

[Mohammed Billoo]

[-- Attachment #1.1: Type: text/plain, Size: 2850 bytes --]

Hi Suzuki,

Sure. I can make the necessary changes.

Mohammed A Billoo
Founder
MAB Labs, LLC
www.mab-labs.com
201-338-2022

On Thu, Jul 30, 2020, 4:31 AM <akihiro27.suzuki@toshiba.co.jp> wrote:

> Hi Mohammed,
>
>
>
> > I realized that the configuration of the embedded platform and Hawkbit
> server may be specific for the SWUpdate demo. Suzuki-san, is that correct?
>
> Yes. It is specific for the SWUpdate demo.
>
>
>
> > is it OK if these parameters are in files or would you want them in a
> less permanent form (e.g. environment variables)?
>
> If possible, I prefer the latter.
>
> Current cip-sw-updates-demo repository has many inconvenient points.
>
> If you have time, could you fix them?
>
>
>
> Thanks,
>
> Suzuki
>
>
>
> *From:* cip-dev@lists.cip-project.org <cip-dev@lists.cip-project.org> *On
> Behalf Of *Mohammed Billoo
> *Sent:* Thursday, July 30, 2020 9:32 AM
> *To:* cip-dev@lists.cip-project.org
> *Subject:* Re: [cip-dev] CIP embedded platform Internet connection?
>
>
>
> Daniel,
>
>
>
> Thanks for getting back. I realized that the configuration of the embedded
> platform and Hawkbit server may be specific for the SWUpdate demo.
> Suzuki-san, is that correct? If so, is it OK if these parameters are in
> files or would you want them in a less permanent form (e.g. environment
> variables)? The advantage of the latter would be that if I need to change
> the network configuration for my own set up (since my localhost external IP
> is different from what's in the BBB customization), I don't have to manage
> two different network configurations. I can set the appropriate environment
> variable (for example) and the build, if set up correctly, would pick up
> the environment variables and configure the BBB image correctly. Is there
> any strong conviction for either way?
>
>
>
> Thanks
>
> Mohammed A Billoo
> Founder
> MAB Labs, LLC
> www.mab-labs.com
> 201-338-2022
>
>
>
> On Wed, Jul 29, 2020, 7:52 PM Daniel Sangorrin <
> daniel.sangorrin@toshiba.co.jp> wrote:
>
> Hi Mohammed,
>
> > -----Original Message-----
> > From: cip-dev@lists.cip-project.org <cip-dev@lists.cip-project.org> On
> Behalf Of Mohammed Billoo
> > This question stems from the thread titled "The security of NTP". If we
> do go with NTS, it looks like we're going to need an Internet
> > connection to the embedded platform. Is that acceptable? The work that
> I've seen so far related to CIP SWUpdate has assumed that the
> > Hawkbit server is on the local network. It isn't obvious if that has
> been an intentional decision (due to security requirements) or just to ease
> > development.
>
> There is nothing in CIP SWUpdate that assumes the Hawkbit server is on a
> local network.
> Perhaps the README is using a local serve for demonstration purposes?
>
> Thanks,
> Daniel
>
>
> --
> Mohammed Billoo
> MAB Labs, LLC
> www.mab-labs.com
>

[-- Attachment #1.2: Type: text/html, Size: 7005 bytes --]

[-- Attachment #2: Type: text/plain, Size: 419 bytes --]

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#5075): https://lists.cip-project.org/g/cip-dev/message/5075
Mute This Topic: https://lists.cip-project.org/mt/75823534/4520388
Group Owner: cip-dev+owner@lists.cip-project.org
Unsubscribe: https://lists.cip-project.org/g/cip-dev/leave/8129055/727948398/xyzzy  [cip-dev@archiver.kernel.org]
-=-=-=-=-=-=-=-=-=-=-=-