privkeyio/seedsigner-os
Watch
2
0
Fork
You've already forked seedsigner-os
 0
mirror of https://github.com/privkeyio/seedsigner-os.git synced 2026-10-23 17:04:10 +00:00
Code Issues Projects Releases Packages Wiki Activity
SeedSigner OS built with embit carrying the unified opt-in signature hash. Unofficial, not audited.
314 commits 2 branches 0 tags 3.9 MiB
  • Shell 93.4%
  • Makefile 6%
  • Dockerfile 0.6%
Find a file
Exact
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Kyle 🐆 793a723f2b
 deps: pin embit 0.8.0-unified-sighash.4 (#1) 
The committed script type byte was derived from which PSBT fields were present
rather than from the spent output's script, so a legacy input carried as
witness_utxo was signed with a byte consensus cannot accept.

build.sh deletes the app's requirements.txt and installs embit from this
package, so bumping the app pin alone would leave the images on .3.
2026-09-04 15:01:27 -04:00
.devcontainer removing unnecessary comments from dev container 2023-08-25 20:20:32 +00:00
docs update rsync example script to include .git minimum files for version display in app 2026-07-17 00:04:20 -04:00
images pi0 and pi02w working 2022-11-08 15:40:38 -05:00
opt deps: pin embit 0.8.0-unified-sighash.4 (#1) 2026-09-04 15:01:27 -04:00
.gitignore Adds a persistent .buildroot_dl bind-mount volume so Buildroot's download cache survives across container runs. 2026-07-12 22:13:37 -04:00
.gitmodules - Update buildroot submodule to pull from seedsigner controlled fork 2023-07-11 16:30:15 -04:00
docker-compose.yml Adds a persistent .buildroot_dl bind-mount volume so Buildroot's download cache survives across container runs. 2026-07-12 22:13:37 -04:00
Dockerfile add build.sh steps to compile mo translations files from po files 2025-06-22 14:50:27 -04:00
LICENSE.md License added 2022-05-31 20:39:19 +00:00
README.md Update README.md 2023-12-18 08:40:41 +02:00

README.md

Gitea

SeedSigner OS


JUMP STRAIGHT TO: 🔥🔥🔥🛠 Quickstart: SeedSigner Reproducible Build! 🛠🔥🔥🔥


Overview

A custom linux based operating system built to manage software running on airgapped Bitcoin signing device. SeedSigner is both the project name and application running on airgapped hardware. This custom operating system, like all operating systems, manages the hardware resources and provides them to the application code. It's currently designed to run on common Raspberry Pi hardware with accessories. The goal of SeedSigner OS is to provide an easy, fast, and secure way to build microSD card image to securely run SeedSigner code.

⚙️ Under the Hood

SeedSigner OS is built using Buildroot. Buildroot is a simple, efficient and easy-to-use tool to generate embedded Linux systems through cross-compilation. SeedSigner OS does not fork Buildroot, but uses Buildroot with custom configurations to build microSD card images tailor made for running SeedSigner.

🛂 Security

SeedSigner OS is built to reduce the attack surface area and enable additional application functionality. The OS is an order of magnitude smaller in size than Raspberry Pi OS (which is what typically is used to run software on a Pi device). Here are a list of some security and functional advantages of using SeedSigner OS.

  • Boots 100% from RAM. This means, once you see the SeedSigner splash screen, you can remove the microSD card because no disk I/O is needed after boot!
  • One FAT32 partition on the microSD card
  • Removes these standard Raspberry Pi OS Kernel modules:
    • Networking and Bluetooth
    • SWAP
    • I2C
    • Serial
    • USB
    • Pulse-Width Modulation (PWM)
  • NO HDMI support
  • NO Serial connection TTL support
  • NO Software supporting any wireless or networking chips
  • A single read only zImage file on the boot partition containing the entire Linux kernel and filesystem