This topic comes up from time-to-time, but I haven't seen a satisfactory answer. I need a way to encrypt the source code on the micro SD card so that the card is useless if someone pulls it out and tries to make off with my IP. Obviously, some type of encryption key would be required by the loader …

At best you'll make it slightly inconvenient to access all of the data on the Pi. If that is good enough for you, then go for it.

It wasn't a stand-alone suggestion. Rather an extension to further enhance the security. I already suggested gluing in the card but I think that the OP has suggested that external network access may be limited so that may also not be possible.

Though doing that - and then updating via a separate USB that isn't left installed is actually one of the first deployments I did (updated the flows and extracted the logs at the same time... - good old udev script and rsync both ways. :slight_smile:

What is "niche" about wanting to encrypt flows on IoT devices that are out in the wild? Seems like a pretty general requirement to me. Feel free to reply if you have solutions to offer.

Hi @dennishvo if this is a commercial product with internet access, then Nebula by yellaUmbrella (or Nebula via Iotobox ) does precisely that, with other advantages too. Nebula enables the download of a single exe (a 'Device'), which in itself contains node-red (no dependencies, windows/mac/linux/…

We do believe that we have a complete solution for the issues raised here. Without any hardware modifications or worrying about deleting the flows. Also, with our implementation because there is no writing of the code to the SD card we also minimize the potential of the SD card going bad because of …

I just want to comment on one item: Network loading would be the best option for my use case, I think. Sounds like a non-trivial effort. Creating a network loading storage plugin (for the flow files) is actually pretty easy. The issue is securing the service that provides the flow files when yo…

I've cobbled together a solution that uses a secure web service to deliver a flow file. And you're right, it wasn't that difficult to build. My devices are now able to update themselves, and that is a huge step forward. Thanks, all, for your input.

Have you thought about changing the hardware to something else that doesn't require an SD card? An Orange Pi PC Plus for example has 8 GB of EMMC that can't be removed. The Orange Pi line is now fully supported by Armbian. Even the GPIO are accessible.

I got hit by the same topic... I have to build few prototypes for a bigger project. I've worked several days on it and I would clearly want that the code is "secure" and it cannot be cloned to another card and than use it for the next n systems. What I will do - get the MAC address of the wlan0 or…

Node-RED

Node-RED Forum

Need a means to protect my source code

Core Development Feature Requests

zenofmud 13 April 2020 22:15 36

Ummm unless they start Node-RED from the CLI using the —safe option which starts NR with out running it......

1 Like

Topic		Replies	Views
Auto-destruction function General	9	921	14 June 2020
Flows Disappeared General	48	7371	27 July 2020
Securing flow file in production General	5	969	23 March 2021
Configuring Public Node-RED Server on RPi General	29	1735	23 July 2020
Flows disappear after a few hours! General	45	982	7 February 2024

Copyright OpenJS Foundation and Node-RED contributors. All rights reserved. The OpenJS Foundation has registered trademarks and uses trademarks. For a list of trademarks of the OpenJS Foundation, please see our Trademark Policy and Trademark List. Trademarks and logos not indicated on the list of OpenJS Foundation trademarks are trademarks™ or registered® trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.

Need a means to protect my source code

Related topics