Thanks so much for the thoughtful reply and checking it out!
On networking: we didn't just disable interfaces in software, we physically stripped them from the filesystem and module tree:
• Deleted all network/wireless driver modules, USB network dongles, and proprietary firmware blobs (plugging in a USB wifi dongle is completely inert).
• Purged all latent network protocol modules from /lib/modules.
• Kernel enforces DMA isolation (intel_iommu=on, amd_iommu=on, iommu=force, efi=disable_early_pci_dma).
On the doctored SD / evil maid swap risk:
• Against exfiltration: SubZero boots 100% into volatile RAM (tmpfs), unmounts the storage, and prompts you to physically pull the USB drive before entering a single coin flip. Nothing touches disk.
• Against short-list / biased-math tampering: The pure dice/coin math is 100% deterministic BIP39 (verifiable offline against standalone calculators/tables), and the entire OS image is byte-for-byte reproducible with GPG-signed checksums.
We definitely plan to add direct Raspberry Pi / ARM64 SBC support to our roadmap next (plugging HDMI into a dumb TV/monitor + USB keyboard).
Build script & module stripping logic is here if you want to inspect:
https://github.com/bootlace-dev/subzero-keyosk/blob/main/scripts/build_alpine_kiosk.sh
Curious to hear how your airgapped Pi setup shapes up!
cc: @thejohnnycrypto
On networking: we didn't just disable interfaces in software, we physically stripped them from the filesystem and module tree:
• Deleted all network/wireless driver modules, USB network dongles, and proprietary firmware blobs (plugging in a USB wifi dongle is completely inert).
• Purged all latent network protocol modules from /lib/modules.
• Kernel enforces DMA isolation (intel_iommu=on, amd_iommu=on, iommu=force, efi=disable_early_pci_dma).
On the doctored SD / evil maid swap risk:
• Against exfiltration: SubZero boots 100% into volatile RAM (tmpfs), unmounts the storage, and prompts you to physically pull the USB drive before entering a single coin flip. Nothing touches disk.
• Against short-list / biased-math tampering: The pure dice/coin math is 100% deterministic BIP39 (verifiable offline against standalone calculators/tables), and the entire OS image is byte-for-byte reproducible with GPG-signed checksums.
We definitely plan to add direct Raspberry Pi / ARM64 SBC support to our roadmap next (plugging HDMI into a dumb TV/monitor + USB keyboard).
Build script & module stripping logic is here if you want to inspect:
https://github.com/bootlace-dev/subzero-keyosk/blob/main/scripts/build_alpine_kiosk.sh
Curious to hear how your airgapped Pi setup shapes up!
cc: @thejohnnycrypto
1🧡1