A Browser Only Linux OS!
Browser based HMIs create lightweight, flexible and scalable deployments for control systems. It also reduces the hardware and software dependences on the local device that is accessing the web based service. As most users of groov View or the Ignition Edge perspective module know; the beauty of web based tech is that it is device agnostic, you can get to your service on any device that is capable of running a modern web browser.
Most HMIs or Industrial PCs still ship with Windows, I avoid Windows everywhere I can (sorry PAC Control, I still love you) but there are a lot of rocks in the world that can break a window and there are fewer leopard seals out there that can catch a penguin if you get what I mean. The tide is changing as many IPC company’s offer common Linux Distros like Debian or Ubuntu as a option from the factory.
This is great but still overkill as all of the before mentioned operation systems are full functioned and contain many programs and background services that are unnecessary for critical control system HMIs. Then requiring extra work to “Clean Up and Lock down the HMI”
What if there was a OS designed specifically to only run a modern web browser and allowed customizable configuration on instillation of the OS? What if it was Linux?
Enter Porteus Kiosk
Porteus Kiosk is a Gentoo base Linux Distro that is extremely lightweight (250mb for the OS and 1gb ram) for x86_64 processors(no ARM support). It was designed for public internet kiosk or digital signage. When the kiosk boots it automatically opens Firefox or Google Chrome browser to your chosen homepage. I can be customized to run on a “dark” control network and locked down by whitelisting allowed services.
I have deployed this on small IPC and tablets in a few of our facilities and it has been amazing.
Here are some highlights I have noticed:
- Boot time is less then 20 seconds from off to SCADA HMI.
- Opens to multiple tabs so operation staff never has to open a program or navigate to the HMI its just there as soon as they power up.
- Secure. Whitelisting and blacklisting in the configuration file prevents network traversal. There is no way for anyone to access the command line and the OS is read only. You can even hide the address bar to secure your IP addresses or host names.
- Lightweight and robust. Nothing but the necessities is running on the device and after boot the entire OS runs entirely on ram this prevents file corruption if power is lost.
- Highly customizable!
I am happy to help anyone interested in trying this out! Anyone else out there using something like this for groov View or Ignition perspective?
-G