ipmi access

Mon Jun 2 17:39:43 UTC 2014

On 2014-06-02 19:32, Nikolay Shopik wrote:
> 
> On 02/06/14 20:56, Christopher Morrow wrote:
>> so... as per usual:
>>    1) embedded devices suck rocks
>>    2) no updates or sanity expected anytime soon in same
>>    3) protect yourself, or suffer the consequences
>>
>> seems normal.
> 
> So I wonder why vendors don't publish source code of these ipmi firmware
> in first place? Like supermicro from what we know its 99% is open source
> stuff.

Source won't help too much, as upgrading the kernel will require a lot
more magic than just that.

Also, do you have time to support all the different IPMI boxes out there
while your vendor should be doing that work?

For the toolchain, see amongst others:
 http://michael.stapelberg.de/Artikel/supermicro_ipmi_openvpn

Note that the big problem with "embedded" devices (be that an Android
phone, your TV set, your dishwasher, an IPMI device, your car or one of
thousand "media players") is: they get popped in a box and they will
rarely if ever get an update after that.

The market has to change to support that, and it likely won't unless the
prices for toys are going to go up sky high to be able to pay for
somebody doing that work.

The Open Source portion only means that you are more aware that you are
running some software with horrible bugs in there. Hence: never route
them, never make them remotely publicly available.

And then start thinking about all the fun new "Cloud Connected" devices...

Greets,
 Jeroen