WendyOS Docs
AdvancedWendyos

Jetson

WendyOS supports the following NVIDIA Jetson targets:

Jetson

WendyOS supports the following NVIDIA Jetson targets:

BoardMachine configSoCJetPack / L4TMender OTAYocto series
Jetson AGX Orin DevKit (NVMe)jetson-agx-orin-devkit-nvme-wendyostegra234JetPack 6.2.1 / L4T 36.4.4Yesscarthgap
Jetson AGX Orin DevKit (eMMC)jetson-agx-orin-devkit-emmc-wendyostegra234JetPack 6.2.1 / L4T 36.4.4Yesscarthgap
Jetson Orin Nano DevKit (NVMe)jetson-orin-nano-devkit-nvme-wendyostegra234JetPack 6.2.1 / L4T 36.4.4Yesscarthgap
Jetson Orin Nano DevKit (SD)jetson-orin-nano-devkit-wendyostegra234JetPack 6.2.1 / L4T 36.4.4Yesscarthgap
Jetson AGX Thor DevKit (NVMe)jetson-agx-thor-devkit-nvme-wendyostegra264JetPack 7.1 / L4T 38.4.0No (Phase 1)wrynose

AGX Thor (tegra264)

The AGX Thor target uses the wrynose Yocto series. It is built from a separate layer tree cloned into repos/wrynose/ alongside the scarthgap tree used by Orin boards.

Key differences from Orin builds:

  • No Mender OTA — Mender on Thor is deferred. WENDYOS_MENDER = "0" is set automatically for tegra264. There is no A/B partition layout and no /data partition in Phase 1.
  • Flash format — produces tegraflash-tar (a compressed tar of the tegraflash package) rather than separate tegraflash + mender artefacts.
  • Bootloader — uses NVIDIA prebuilt UEFI firmware (tegra-uefi-prebuilt).
  • Image name suffix — wrynose oe-core defaults IMAGE_NAME_SUFFIX to .rootfs, which would produce deployed symlinks such as wendyos-image-${MACHINE}.rootfs.tegraflash-tar. The Thor machine config explicitly sets IMAGE_NAME_SUFFIX = "" so the deployed symlink matches the expected name wendyos-image-${MACHINE}.tegraflash-tar, consistent with all other boards.

To bootstrap a Thor build:

./bootstrap.sh --board jetson-agx-thor

See conf/template/boards/jetson-agx-thor/ in the meta-wendyos repo for the board template files.


Secure boot policy

The notes below describe the current internal policy, not a shipped, user-facing secure-boot flow. End-user secure-boot enablement is still planned work; see WDY-1237 and WDY-1238 for the surrounding security tickets.

Burning device fuses to enforce secure boot is an irreversible hardware change. WendyOS will not burn fuses on user devices as part of normal flashing. Fuse burning is reserved for sensitive, real-world production deployments where the customer explicitly opts in.

Until a full secure-boot flow is shipped, the hardening priorities are:

  • Kernel hardeningplanned, not yet shipped.
  • Removal of SUID binaries from production imagesplanned, not yet shipped (WDY-1238). Recent CVEs frequently leverage SUID binaries, so trimming them from production images is a near-term focus.
  • Image / binary signingplanned, not yet shipped. Approach differs between Jetson (tegra fuse / NVIDIA tooling) and Raspberry Pi; coordination across boards is open.

SSH is already removed from production images. Whether a general-purpose shell can also be removed is being investigated; see WDY-1238.

On this page