Hacker News Reader

Comment by donalhunt | Hacker News Reader

Was responsible for trying to improve the management and operation of a large fleet of BMCs for a while. Plenty of bugs and pace of releases is slow. :(

Definitely an area where a more open ecosystem would improve the pace of innovation.

View on HN

We need a Linux for BMCs. Oxide is working on one, but I'd like to see a contender fielded from the seL4 community, along with some other folks. For example, why doesn't Wind River have one already?

Why linux? Why not *BSD?

> Why linux? Why not *BSD?

GPL can force manufacturers to cooperate with users. Of course, they can still use closed source binary modules and userland programs ...

GPL can also turn manufacturers away. I would rather have variation in the possible BMC operating systems instead of sticking linux everywhere and contributing to a monoculture.

...which you wouldn't get with BSD as they'd just close it down and ship you binary, as they would have no obligation or reason to.

The BSD "freedom" is not for the user of the software, it's for corporation to take.

And how would this affect the original open BSD-based BMC firmware which would be available? If the corporations want to maintain their own fork, it's on them.

The original BSD release will stay open and free for everyone to utilize.

How can you trust that a closed source OpenBSD fork is secure when there's no way to audit the quality (or lack thereof) in the firmware the vendor gives you?

If it's GPL you can at least interrogate the code release and make an informed decision

The same way I can trust all the binary blobs vendors stick into GPL-licensed systems. How do I make an informed decision about those?

Software diversity is a luxury customers won't pay for.

That sure sounds appealing to manufacturers.

Once it reaches critical mass it is appealing because the value you receive from the community is far greater than what you have to give back.

If the point is code diversity, what stops you producing a fork of BSD for BMCs under the GPL?

OpenBMC is the leader at this point.

Sometimes the bugs end up at a security conference.

https://airbus-seclab.github.io/ilo/BHUSA2021-Slides-hpe_ilo...

Reply on news.ycombinator.com