TC installed

[Yleisajattelija]

Rasperry Pi 3 Model B first installation with Tinycore, no problems (yet...).

Next server & embedded process applications.

I guess, TC has driver for that GPIO expansion unit?

https://datasheets.raspberrypi.com/rpi3/raspberry-pi-3-b-reduced-schematics.pdf

Is Apache server installation standard linux-implementation (or some TC spesific features)?

[Juanito]

I’ve never used gpio, but I assume it works - if you search this forum there was a recent chain of posts on the subject.

There’s an apache2.4 extension in the repo.

[Yleisajattelija]

I’ve never used gpio, but I assume it works - if you search this forum there was a recent chain of posts on the subject.

There’s an apache2.4 extension in the repo.

...or is  Lighttpd better? What is "TC-community recommendation"? (light, minimalistic, bugfree, efficient, pro, etc.... )

https://www.difference.wiki/apache-vs-lighttpd/

...is that "URL rewriting" issue real problem? Open-sofware licence issues are problem, for sure...

[patrikg]

When it comes to choose the right web server.
I choose the one that you don't mention, the nginx server.
That because it's more easy to compile.

I think also more easy to configure, with one config file.
And you also have test option to test the config file.

But what i think it's the lightest one is the busybox one.

But when i comes to speed I choose the nginx.
That have support for spawn babies (forks it self ), for more connection ready server.

[Yleisajattelija]

Compiling in one issue, (for security especially).

Busybox has chronical problem with missing documentation , I don't want to read source code for every command parameter.

...I will check that nginx, but for first look  I did'n like it, for some reasons.

[Yleisajattelija]

Lightppd an nginx both have BSD-licence (or is there some licence level difference?). What is exact problem with lightppd compilation?

Edit: Both are BSD 2-clause licenced (2-clause=FreeBSD, I think...).

[gadget42]

in the subject...

shouldn't that be "installed" and not "istalled"?

cosmic bit-flip perhaps?

[Yleisajattelija]

in the subject...

shouldn't that be "installed" and not "istalled"?

cosmic bit-flip perhaps?

...you said that, and "modify" button, too....

[Rich]

Hi gadget42

... shouldn't that be "installed" and not "istalled"? ...

And now it's fixed.

[Yleisajattelija]

 Seems to be serious security problems with both nginx and lighppd.

Third?

[patrikg]

May I ask you what you are going to use for the web server.
What the purpose ?
If you just install python3, you could just spin up a very simple web server.

Code: (bash) [Select]

sudo python3 -m http.server 80
https://pythonbasics.org/webserver/

[Yleisajattelija]

May I ask you what you are going to use for the web server.
What the purpose ?
If you just install python3, you could just spin up a very simple web server.

Code: (bash) [Select]

sudo python3 -m http.server 80
https://pythonbasics.org/webserver/

I need general purpose http-server module. it is one of the key elements of internet security. There should be some kind of international agreement for rules in internet traffic and security. Of course I can make secure http-server module myself, but it would be a problem, which I don't want be involved.

[Yleisajattelija]

May I ask you what you are going to use for the web server.
What the purpose ?
If you just install python3, you could just spin up a very simple web server.

Code: (bash) [Select]

sudo python3 -m http.server 80
https://pythonbasics.org/webserver/

Using python is very interesting idea. My programming skills are from "stoneage" twenty-five years ago (asm, C and Java), and I have not used python. it is very popular nowdays, and for obvious reasons (easy, matlab/C expansions and graphical libraries). As security point of view source code compressing and simplicity is important advantage vs, small interpreter weakness.

For tsis Rasberry pi case busybox is choosed (for practical reasons) at least while.

[patrikg]

Seems to be serious security problems with both nginx and lighppd.

Third?

Maybe you should do it like the "new way" of doing more "secure" stuff, just bring in the small container and stuff it in there.

[Yleisajattelija]

Seems to be serious security problems with both nginx and lighppd.

Third?

Maybe you should do it like the "new way" of doing more "secure" stuff, just bring in the small container and stuff it in there.

You probably mean this for "new way"

https://solutions-portal-cms-prod-bucket.s3.amazonaws.com/Altra_Max_Rev_A1_DS_v1_05_20220728_5bf985da35.pdf

For security point of view; question is (again) drivers on system space. ARM-processors have exellent IO-performance and integral MMU. I don't know exactly how MMU is working on these chips, but whole memory space is of course visible fo MMU.

Of course, there is "worm" inside SOC-secureboot, and maybe on silicon, too. So security analysis is not straightforvard.

Can we think chip to be secure in this case?

:-)