Apr 22, 2024 ‐ 15:00 UTC ‐ Special topic: HBOM

Host:

• Philipp Ahmann

Participants:

• Maximilian Huber
• Walt Miner
• Steven Carbno
• Alfred Strauch
• Andreas Bartelt
• Nicole Pappler

** Regrets:**

• ...

Attended Recently

• Kate Stewart
• Guy Lunardi
• Thomas Mittelstädt
• Olivier Charrier

Topics & Notes:

Special focus topic: HBOM

• HBOM = Hardware bill of material
• Steven explains how HBOM look like
• Explain also what it means for digital twins & safety
  • For digital twin you make the hardware virtual.
  • Serial numbers may also be same, in case you have a container for the virtual hardware.
• Physical HW is only available if virtual HW fails.
• Manuals, schematics and other parts may go into "externalRef" field.
• License factors and things like patents also need to be considered.
• An AI accelerator can be a physical hardware on an SoC.
• Currently only one virtual type.
  • Relations make it clear which type of virtual it is.
• What about hardware assisted virtualization.
  • consider e.g. partition layouts.
• VHDL and Verilog is still treated as software. Firmware and executable code is treated as software
  • It also has a build process as software
• DSP-1 is the audio chip of the SNES system and also virtual.
  • DSP is not a physical instance
• A core inside the FPGA would be also treated as virtual, as it is created with the FPGA elements, which emulates a CPU.
• in the QEMU example the hardware runs Zephyr in which qemu is running on top of Zephyr emulating a raspi3b with virtual hardware.
  • digital twin may look similar.
• with the virtual flake you can see where a system is similar, but does not behave 100% in the same way.
  • performance parameter could be made as comment.
• displayed slides are in an early draft.
• What about safety parts?
  • No directly in SPDX to have e.g. ASIL or certification mentioned
  • Currently this would be an external reference
• You can join branches again on physical hardware, e.g. if a hardware shares resources.
• For Safety SBOM you can have a safety qualification report as evidence.
• You can have a relationship to any kind of elements so a SPDX safety profile can also be related.

AoB

• Look for OSS NA sessions livestreams inside talks and scroll to find your position interested in.
• Look for Embedded OSS sessions livestreams inside talks and scroll to find your position interested in.