en.Wedoany.com Reported - SYSGO has launched the next-generation version of its industrial-grade Linux platform for critical embedded systems, ELinOS 8. Targeting industrial automation, transportation, aerospace, defense, medical, and critical infrastructure sectors, this version integrates cybersecurity mechanisms, regulatory compliance, and software supply chain transparency features.

The key innovation in ELinOS 8 is the native integration of a Software Bill of Materials (SBOM), automatically generated in the industry-standard SPDX v3 JSON format at each compilation. This provides a complete list of all software components, libraries, files, and versions within the embedded system. This feature aids in managing software components, identifying vulnerabilities, verifying open-source licenses, tracking dependencies, and meeting documentation requirements from customers and regulatory bodies. Each ELinOS project automatically generates an SBOM that accurately reflects the deployed system's content. Additionally, the platform's integrated tools and workflows enable manufacturers to meet the requirements of the European Cyber Resilience Act (CRA) through a fully visible software supply chain and detailed security reports.

In terms of system security, ELinOS 8 includes several enhancements. A verification test suite compliant with the recommendations of the French National Agency for the Security of Information Systems (ANSSI) automatically assesses the system's configuration hardening level and generates reports indicating applied rules and providing technical recommendations for improving security. The platform enables GCC Level 3 hardening across all software packages to enhance protection against memory overflow and related vulnerabilities. It also includes audit support for the RISC-V platform, reproducible builds of the Linux kernel and root filesystem, and timestamps independent of the build machine through the use of fixed dates.

Based on the Linux 6.12 LTS (Long Term Support) kernel, ELinOS 8 offers up to ten years of maintenance and security updates, meeting the long lifecycle requirements of devices in industrial automation, transportation, aerospace, medical equipment, defense, and critical infrastructure. David Engraf, Director of Product Development at SYSGO, stated that this version integrates automatic SBOM generation, security hardening verification compliant with ANSSI recommendations, reproducible builds, the Linux 6.12 LTS kernel, and expanded hardware compatibility to address growing cybersecurity and regulatory compliance demands, while simplifying embedded Linux development for Intel, ARM, and RISC-V architectures.

The new version expands hardware compatibility by introducing new Board Support Packages (BSPs) from companies such as NXP, Toradex, TQ-Systems, and AMD Xilinx, and decouples BSP maintenance from the OS major version cycle. Users can install security or maintenance updates without modifying specific board or project adaptations. This architecture accelerates new hardware integration and reduces maintenance workload. The platform provides a unified development environment for Intel, ARM, and RISC-V architectures, allowing teams to use the same tools, workflows, and configuration methods regardless of the target hardware platform, fostering team collaboration, reducing integration efforts, and simplifying the development of product families based on different architectures. ELinOS also employs a feature-based configuration approach, implemented through a graphical configuration wizard, offering over 400 pre-compiled software packages for users to select based on project needs. It simultaneously configures the Linux kernel and user space to generate a system containing only necessary features, thereby reducing the attack surface, memory footprint, and system complexity. ELinOS 8 also provides long-term support, professional cybersecurity services, and technical assistance from SYSGO experts throughout the development and maintenance lifecycle.

The market for industrial Linux distributions for embedded systems also includes Wind River Linux, Ubuntu Core, and various commercial distributions based on the Yocto Project. Key comparison criteria involve support lifecycle, cybersecurity regulatory compliance, SBOM generation, security hardening mechanisms, reproducible builds, and hardware compatibility. Features of ELinOS 8 include automatic SBOM generation in SPDX v3 format, tools for CRA compliance, hardening verification based on ANSSI recommendations, up to ten years of Linux 6.12 LTS kernel support, and a unified development environment for Intel, ARM, and RISC-V architectures. These characteristics meet the needs of manufacturers with high requirements for security and traceability.