diff --git a/hardware/cables/README.md b/hardware/cables/README.md new file mode 100644 index 0000000..57d9d5f --- /dev/null +++ b/hardware/cables/README.md @@ -0,0 +1,20 @@ +# Cubo Libre Cables + +* RF secure keyboard cable. + +* RF secure mouse cable. + +* RF secure video cable. + +* RF secure power cable. + +* RF secure GPS cable. + +* RF secure microphone cable. + +* RF secure speaker cable. + +* RF secure misc cabling (e.g. USB webcam). + +* Hardware cut off of cables. + diff --git a/hardware/clock/README.md b/hardware/clock/README.md new file mode 100644 index 0000000..fbd6341 --- /dev/null +++ b/hardware/clock/README.md @@ -0,0 +1,57 @@ +# Cubo Libre Clock + +Time source will come from Internet NTP and external GPS antenna for +confirmation. Other external time sources will be considered. + +## Precision Time Protocol (PTP) + +Use precision time protocol within the cluster. + +* Mellanox SN2100 / SN2700 (Spectrum silicon) switches with MLNX-OS/ONYX (in GA since 3.6.5011) for PTP IEEE-1588 (SMPTE ST2059-2 profile)[41] or with Cumulus Linux (from version 3.6) with the ptp4l Linux package.[42] + +## Network Time Protocol (NTP) + +Network Time Protocol is used for time sync from the Internet. + +* Run time server on cluster firewall. + +## GPS + +* External GPS with serial connection to cluster firewall. + +## WWVB + +* WWVB +https://en.wikipedia.org/wiki/WWVB +303-499-7111 +https://www.nist.gov/time-distribution/radio-station-wwvb +https://github.com/TaaviE/radioclkd2 + +BPSK new signal on WWVB since 2012 (?) +http://everset-tech.com/signal/ +http://everset-tech.com/wp-content/uploads/2014/11/CMOSBPSKReceiver.pdf + + +## CDMA + +* CDMA time server + http://beaglesoft.com/celsynhome.htm + Garmin CDMA35 + Multitech CDMA + +## ACTS + +* The NIST transmits in its own standard Automated Computer Timer Service (ACTS). It is contacted via TCP/IP on port 13 + + +## Misc + +* Explore SDR/FPGA possibilities. + +* Very particular about very good computer time: +"The International Occultation Timing Association" +http://www.lunar-occultations.com/iota/iotandx.htm +http://beaglesoft.com/radsynreceiver.htm + +* IRIG-B + diff --git a/hardware/cubolibre-bom.ods b/hardware/cubolibre-bom.ods index 10e4ca4..88bb7e1 100644 Binary files a/hardware/cubolibre-bom.ods and b/hardware/cubolibre-bom.ods differ diff --git a/hardware/keyboard/README.md b/hardware/keyboard/README.md new file mode 100644 index 0000000..e69de29 diff --git a/hardware/monitor/README.md b/hardware/monitor/README.md new file mode 100644 index 0000000..a5bd9ec --- /dev/null +++ b/hardware/monitor/README.md @@ -0,0 +1,16 @@ +# Cubo Libre Monitor + +* XXX Not libre hardware XXX + +* RF/EMI secure monitor. + +* 1920 x 1080 pixels. + +* Secure cables. + +* No microphone. + +* No speakers. + +* Make sure GPDI behaves. + diff --git a/hardware/mouse/README.md b/hardware/mouse/README.md new file mode 100644 index 0000000..e69de29 diff --git a/hardware/network/README.md b/hardware/network/README.md index e69de29..a76ae94 100644 --- a/hardware/network/README.md +++ b/hardware/network/README.md @@ -0,0 +1,15 @@ +# Cubo Libre Network + +The Cubo Libre mini-cluster will have a simple network design. + +* Each motherboard has one 1 gig copper ethernet port. + +* Each motherboard plugs into copper ethernet switch. + +* Firewall has only external network connection, using 10G fiber. + +* RF from internal copper network communication will be contained in the cabinet. + +* Network switch will likely be non-free hardware with ARM processor +running free software. + diff --git a/hardware/random/README.md b/hardware/random/README.md new file mode 100644 index 0000000..5accbf3 --- /dev/null +++ b/hardware/random/README.md @@ -0,0 +1,7 @@ +# Cubo Libre Hardware Random Numbers + +How random numbers are generated on Cubo Libre. + +## Entropy + +Entropy sources. diff --git a/hardware/usb/README.md b/hardware/usb/README.md new file mode 100644 index 0000000..df4437e --- /dev/null +++ b/hardware/usb/README.md @@ -0,0 +1,23 @@ +# Cubo Libre USB + +## Hardware Firewall + +See: + +* https://code.forksand.com/forksand/usb-firewall + +* Provide mechanical port blockers for unused ports. + +* Device only pass certain USB IDs, HID, etc. + +## Authentication + +* Nitrokey +https://www.nitrokey.com/ + +* Yubi. + +* Purism key. + +* Ledger. + diff --git a/hardware/video/README.md b/hardware/video/README.md new file mode 100644 index 0000000..4e7b65c --- /dev/null +++ b/hardware/video/README.md @@ -0,0 +1,14 @@ +# Cubo Libre Video + +* XXX Not libre hardware XXX + +* Radeon RX550. + +* GPDI (HDMI) video out. + +* DVI video out. + +* DP video out. + +* Confirm libre stack. + diff --git a/software/apps/README.md b/software/apps/README.md index e69de29..f578957 100644 --- a/software/apps/README.md +++ b/software/apps/README.md @@ -0,0 +1,11 @@ +# Cubo Libre Applications + +Secure applications. + +* User applications will run on the Debian GNU/Linux operating +system GUI and compute nodes. + +* Application load processing will be spread out in the cluster. + +* Possibly pre-seed with requested blockchains. + diff --git a/software/os/README.md b/software/os/README.md index e69de29..1397e8c 100644 --- a/software/os/README.md +++ b/software/os/README.md @@ -0,0 +1,33 @@ +# Cubo Libre Operating Systems +The main operating systems for the Cubo Libre mini-cluster +are Debian and OpenBSD. Debian is used for compute and +GUI nodes. OpenBSD is used for the firewall. + +## Debian +Debian has a well advanced port of 64-bit RISC-V already. + +* https://www.debian.org + +## OpenBSD +OpenBSD is known for being "the most" secure. +It will be used for the firewall. + +* https://www.openbsd.org + +* All network traffic in and out of the cluster passes through +the firewall. + +* Time source. +Network Time Protocol (NTP) and/or +Precision Time Protocol (PTP) server. + +* Random number generation seeds. + +* PF firewall. + +* Openbsd-current. + +* Proxy all traffic to external data center. + +* Generate entropy for other systems. +