Oniro Project: How to Push IoT Development to the Next Level
Investigates oniro Project: How to Push IoT Development to the Next Level and evaluates key implications for security practitioners.
Summary
## Overview
The Oniro Project is a community-driven, open-source initiative launched in October 2021 under Eclipse Foundation governance to address fragmentation and sustainability challenges in the IoT ecosystem. A software engineer from Seko, a global Industrial IoT company, presents how Oniro enables developers and device makers to build secure, interoperable, and long-lasting IoT solutions while reducing time-to-market.
## Problems Addressed
The talk identifies critical issues in current IoT development: exponential device growth lacks standardization, many devices use closed codebases and face rapid obsolescence, products from different vendors lack interoperability due to absent open standards, devices depend entirely on vendors for security updates, and services remain cloud-dependent even when devices are geographically close. This fragmentation degrades customer experience and creates unsustainable ecosystems.
## Oniro's Core Principles
The project establishes a common, open base for IoT development across all device sizes. Key principles include avoiding reinvention by leveraging existing open-source technologies, adopting open standards and interoperability protocols to prevent vendor lock-in, and maintaining vendor neutrality through Eclipse Foundation governance.
## Technical Architecture
Oniro adopts Yocto/BitBake as its build system, chosen for its ability to create customizable, cost-effective cross-platform kernels supporting diverse architectures (single-board computers and microcontrollers) and multiple kernel options (Linux and Zephyr). The core uses Clang as the toolchain. The architecture comprises layered components: kernel layer (for kernel selection and cross-architecture support), system services layer (OTA, communication, discovery, device management), framework layer (providing SDKs in multiple languages), and app layer (exposing business logic through distributed agents for local device-to-device communication without cloud dependency). Key layers include meta-oniro, meta-openembedded for upstream stability, meta-openharmony for interoperability protocols, and board-specific layers (meta-seko, meta-st, etc.).
## Infrastructure and Quality Assurance
Oniro implements comprehensive CI/CD and testing infrastructure using GitHub Runners, Lava for real hardware testing, and multiple reference boards across several labs to prevent regression. IP compliance testing follows OpenChain specifications using tools like SPDX, REUSE, and Debian license checks to enforce openness and ensure usability for all.
## Reference Hardware and Blueprints
Seko provides three industrial hardware platforms: Intel Atom-based boards with industrial peripherals, NXP dual-ethernet single-board computers, heterogeneous processors combining microcontrollers and application processors, and ARM Cortex A35 boards. Support also includes Raspberry Pi, Arduino, and virtual targets. Reference design blueprints (such as a smart vending machine) demonstrate real-world implementation of platform features.
## Key Takeaways
Oniro benefits developers and companies through co-investment among partners, shared expertise within a Europe-rooted global ecosystem, unified APIs and protocols designed natively for IoT, and shared go-to-market strategies. The project offers out-of-the-box configurations with hardened security, full customizability of every component, and detailed documentation. It is now available for download, testing, and community contribution via IRC and the Linux conference booth.
Related talks
The Linux Foundation·35 min
Modernizing the Development of Vision Sensing Applications on IoT devices with WebAs... Ryu Ishimoto
WebAs... Ryu Ishimoto
Demonstrates modernizing the Development of Vision Sensing Applications on IoT devices with WebAs... Ryu Ishimoto and evaluates key implications for security practitioners.
The Linux Foundation·40 min
Drew Moseley
Reviews why the Yocto Project for practitioner IoT Project and evaluates key implications for security practitioners.
The Linux Foundation·44 min
Eddie Dong
Examines ACRN: A Big Little Hypervisor for IoT Development and evaluates key implications for security practitioners.


