Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
YouTube Security VideosTechLinked: Samsung update BRICKS AI fridges(24.09.2026 um 19:36 Uhr)
•
YouTube Security VideosXDA: This Windows version was never supposed to exist(24.09.2026 um 19:15 Uhr)
•
YouTube Security VideosAndroid Police: The best smartwatch's biggest problem.(24.09.2026 um 19:30 Uhr)
••
YouTube Security VideosLinus Tech Tips: leaking the newest lttstore products...(24.09.2026 um 18:25 Uhr)
•••
YouTube Security VideosImpeller hits desktop by default in Flutter 3.47! 🖥️(24.09.2026 um 18:00 Uhr)
•
Sichere ProgrammierungChrome for Developers: 93: State queries in 2025(24.09.2026 um 20:02 Uhr)
•
YouTube Security Videosdotnet: .NET + Foundry, better together(24.09.2026 um 18:35 Uhr)
•
YouTube Security VideosTechLinked: Samsung update BRICKS AI fridges(24.09.2026 um 19:36 Uhr)
•
YouTube Security VideosXDA: This Windows version was never supposed to exist(24.09.2026 um 19:15 Uhr)
•
YouTube Security VideosAndroid Police: The best smartwatch's biggest problem.(24.09.2026 um 19:30 Uhr)
••
YouTube Security VideosLinus Tech Tips: leaking the newest lttstore products...(24.09.2026 um 18:25 Uhr)
•••
YouTube Security VideosImpeller hits desktop by default in Flutter 3.47! 🖥️(24.09.2026 um 18:00 Uhr)
•
Sichere ProgrammierungChrome for Developers: 93: State queries in 2025(24.09.2026 um 20:02 Uhr)
•
YouTube Security Videosdotnet: .NET + Foundry, better together(24.09.2026 um 18:35 Uhr)
•
Intelligence View
⚡ tsecurity.de Intelligence

Enabling SPI on Arch Linux ARM (Raspberry Pi 4, aarch64)

You add dtparam=spi=on to /boot/config.txt, reboot, and... there's no /dev/spidev*. On the AArch64 Arch Linux ARM image this is expected, and the fix isn't more config.txt tweaking. Here's the clean way. TL;DR The AArch64 ALARM…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

You add dtparam=spi=on to /boot/config.txt, reboot, and... there's no /dev/spidev*. On the AArch64 Arch Linux ARM image this is expected, and the fix isn't more config.txt tweaking. Here's the clean way.






TL;DR



The AArch64 ALARM image boots the mainline kernel via U-Boot, which ignores config.txt. Switch to the Foundation kernel (linux-rpi) and SPI + overlays work natively. One board-specific trap to watch: the shipped cmdline.txt has the wrong root=.




ℹ️ Tested on: Raspberry Pi 4B, Arch Linux ARM aarch64, /boot on a separate FAT partition.







Why dtparam=spi=on does nothing



The GPU firmware reads config.txt and patches its own device tree, but U-Boot then loads a different mainline DTB from /boot/dtbs and boots that, throwing the firmware's edit away. Forcing the firmware DTB doesn't help either: the mainline spidev driver won't bind to its compatible = "spidev" nodes.



The Foundation kernel sidesteps all of it: the firmware boots it directly and applies config.txt + overlays the way every Pi guide assumes.




⚠️ This swaps your kernel and removes U-Boot. Keep a serial/HDMI console or SD-card access handy in case of a bad boot.







0. Prep






# Note your real root partition, you'll need this exact value in step 2.
cat /proc/cmdline # grab the root=PARTUUID=... part
lsblk -o NAME,PARTUUID,MOUNTPOINT

# Back up /boot and cache the current packages for rollback.
sudo tar czf /root/boot-backup.tar.gz -C /boot .
sudo pacman -Sw linux-aarch64 uboot-raspberrypi









1. Install the Foundation kernel






sudo pacman -S linux-rpi






It conflicts with uboot-raspberrypi and linux-aarch64 and removes both, that's expected. It drops in the Foundation kernel as /boot/kernel8.img, ~360 overlays, and fresh config.txt / cmdline.txt.






2. Fix cmdline.txt, the one guaranteed gotcha



The shipped /boot/cmdline.txt hardcodes root=/dev/mmcblk0p2. If your card enumerates differently (mine is mmcblk1), that's an instant no-boot. Replace the root= with your value from step 0:




# /boot/cmdline.txt  (single line)
root=PARTUUID=xxxxxxxx-02 rw rootwait fsck.repair=yes console=serial0,115200 console=tty1






Use blkid to determine UUID.






3. Re-enable SPI in config.txt



The new config.txt ships with SPI commented out. Add:




# /boot/config.txt
enable_uart=1
dtparam=spi=on









4. Sanity-check before rebooting



Can't hurt to run mkinitcpio -p linux-rpi again.




ls -l /boot/kernel8.img            # multi-MB = Foundation kernel (U-Boot was ~700 KB)
grep root= /boot/cmdline.txt # YOUR PARTUUID, not mmcblk0p2
grep -E 'spi|initramfs' /boot/config.txt
ls -l /boot/initramfs-linux.img # freshly rebuilt
ls /lib/modules/ # e.g. 6.x-rpi









5. Reboot & verify






sudo reboot
# once it's back:
uname -r # ...-rpi
ls -l /dev/spidev* # spidev0.0 spidev0.1









6. Optional: use SPI without root






# /etc/udev/rules.d/99-spi.rules
SUBSYSTEM=="spidev", GROUP="spi", MODE="0660"









sudo groupadd -f spi && sudo usermod -aG spi "$USER"   # re-login to apply






Quick loopback test: jumper pin 19 ↔ pin 21 (MOSI↔MISO) and run spidev_test, TX should equal RX.






SPI0 pinout (40-pin header)






































Signal BCM Pin
MOSI GPIO10 19
MISO GPIO9 21
SCLK GPIO11 23
CE0 GPIO8 24 → spidev0.0
CE1 GPIO7 26 → spidev0.1





Rollback



If it won't boot: pull the SD card, restore /boot from boot-backup.tar.gz, and reinstall linux-aarch64 + uboot-raspberrypi from the pacman cache.



Bonus: now that the firmware honors config.txt, other peripherals are one line away too, dtparam=i2c_arm=on for I2C, or any overlay in /boot/overlays via dtoverlay=.... No device-tree surgery required.

CTI Threat Relationship Graph2 Knoten / 1 Relationen
CVE / Incident Software MITRE ATT&CK CWE Weakness IoC
SOC Incident Playbook: Vulnerability Remediation & Verification
title: Detect Exploitation - Enabling SPI on Arch Linux ARM (Raspberry Pi 4, aarch64)
id: 4f38d1fb-5d1b-4462-87d4-5853fe44bfda
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "Enabling SPI on Arch Linux ARM" ascii wide
    condition:
        any of them
}
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich Enabling SPI on Arch Linux ARM (Raspberr.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten Enabling SPI on Arch Linux ARM (Raspberry Pi 4, aarch64)

Thematisch verwandte Begriffe: Enabling, Arch, Linux, Raspberry · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-57175 | Python Social Auth is a social authentication/registration mechanism. Pr…
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel • Rechts: nächster Artikel • unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel TTP ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...
↗ Original-Quelle