Le mercredi 19 juillet 2017 à 14:54 +0200, Alun Davies a écrit :

Dear Colleagues,

The RIPE NCC is in the process of testing hardware for the next generation of RIPE Atlas anchors. Here’s a detailed overview of the process:

You should go with the APU2.  PC Engines lead engineer used to work for Soekeris. Pc Engines hardware rocks. The APU2 is a marvelous platform and frankly you don't even need to rack it is 1U, as it looks like a embedded platform but is in fact a full Quad-code computer with up to 4Gb of RAM. It is also very stable, designed in Europe. It is relatively open, as hardware plans are available, so you know what is inside. Please also ask network card firmwares. I asked them to Pc Engines but was never able to get them (as Pc Engines might not have them, or shall not be able to distribute them).

From my memory (this has to be verified), the APU serial port is hard- wired on the motherboard itself. So you cannot disable the serial port. Everyone with access to the hardware may be able to hack it without user or password.

You should also look into the posibility to make signed kernel boot and signed partitions, so that we are sure that RIPE is not altered during shipment from your premisses to the user client. PC Engines will probably never go bust as they only produce on demand. On their website, they receive orders and only build the required platforms. So it is defenitely a good solution. Kind regards, Jean-Michel