RTEMS has become popular in the Space Domain due to its free availability, its small footprint, its quality (ECSS qualified) and its multicore (SMP) option.

RTEMS Space Qualification

RTEMS is the first Open Source OS that has been pre-qualified by the European Space Agency (ESA). The qualification is based on technology developed by embedded brains for most efficient delta qualifications.

Space

RTEMS Qualification Data Packages

Our RTEMS Space Products

Board (Chip)
Manufacturer
Board (SoC)SDK BasicSDK QualifiableQDP
fentISSXtratuM / XNG Hypervisor23on demand(YES +)on demand
AMD XilinxZC702 (Zynq XC7Z020)YESYESYES
AMD XilinxZCU104 (UltraScale+ ZU7EV)YESYESYES
AMD XilinxVersal Adaptive SoCYESYESYES
GaislerGR712RCYESNOYES(public)
GaislerGR716A and GR716Bon demandon demandon demand
GaislerGR740YESNOYES(public)
GaislerGR765YESon demandon demand
GaislerNoel-VYESon demandon demand
GaislerUT699/UT699E/UT700YESon demandon demand
MicrochipIcicle (PolarFire MPFS250T-FCVG484E)YESon demandon demand
MicrochipSAMRH707 – Radiation HardnessYESon demandon demand
MicrochipSAMRH71F20-EK (SAMRH71F20)YESon demandon demand
MicrochipSAMV71Q21RT – Radiation ToleranceYESon demandon demand
MicrochipSAM V, SAM E & SAM S MCUsYESon demandon demand
NanoXploreNG-ULTRAYESon demandon demand
TeledyneLS1046-SpaceYESYESon demand
NXPFreeway-LS1046A (LS1046A)YESYESon demand
TeledyneQorIQ P-Series and QorIQ T-SeriesYESYESon demand
Texas InstrumentsTMS570LC4357, TMS570LS3137YESon demandon demand
VoragoVA 41600on demandon demandon demand
VoragoVA 41620on demandon demandon demand
VoragoVA 41628on demandon demandon demand
VoragoVA 41629on demandon demandon demand
VoragoVA 41630on demandon demandon demand
DSIOBC (LEON-3FT dual core)on demandon demandon demand
ZINSBCFA1000 (SAMRH71)on demandon demandon demand
Xiphos (AMD Xilinx)Xiphos Q7 (Zynq-7000)YESYESon demand
Xiphos (AMD Xilinx)Q8 (Zynq-Ultrascale+)on demandon demandon demand
Drivers / Interfaces / Features BSP QDP
POSIX API, OpenMP, LwIP on request
Drivers (e.g. CAN, SpaceWire, MIL-STD-1553) ✔ / on request on request
NASA cFS, micro-ROS, Klepsydra AI ✔ / on request ✔ / on request

Development Tool Support

All our products come along with comprehensive support to integrate RTEMS into a customer specific development workflow (e.g. Visual Studio Code, Github and Gitlab structures, continuous integration using simulators and real hardware) as well as support for advanced diagnose tools like Trace Compass to optimize scheduling or time critical procedures.

Further Advantages of our QDPs

  • Customization of the QDPs to your specific circumstances
  • Coordination of the source code with the RTEMS community and the RTEMS community git repo
  • RTEMS code bug tracking
  • Gnu toolchain bug tracking
  • Long-term availability and maintenance
  • Fast development and qualification processes

FAQ

The European Space Agency ESA, as well as other certifiers, require that software development is compliant with the ECSS standards ECSS-E-ST-40C and ECSS-Q-ST-80C Rev.1. Here, RTEMS is considered a “reusable software component.” The Qualification Data Package (QDP) consists of a set of documents proving that RTEMS has been developed according to ECSS requirements and verified on the target hardware. The requirements vary depending on the safety category (A-D), in which case independent secondary verification is sometimes required). The ECSS standard is comparable to other safety standards, such as IEC 61508, ISO 26262, DO-178, DO-330, DO-333 and the Galileo Software Standard (GSWS).

Beyond the formal requirements, compliance with the ECSS standard is very useful for optimizing operational and functional safety. In addition to the functional tests, you also receive detailed performance measurements that can be used to estimate and optimize the runtime characteristics of your application.

The basic RTEMS code is similar for both versions, however some features have been removed for the qualified RTMES. This is true for dynamic memory re-allocation, file systems, and for the POSIX API. On demand such functions can be included, though.

The QDP delivered is ready to be submitted to ESA and complies to the same standards as the ESA reference QDP for the Gaisler processors. ESA may require to run the tests on your hardware. We can do this to generate the QDP as well (normally via remote access).
Finally you will have to add your application software to be qualified on top of RTEMS – what is a story on its own. This is why RTEMS is labelled “pre-qualified”: The OS on its own meets the qualification requirements, but the final qualification would have to include the application software. We will asist you for all steps in this process.

How our QDP is produced

Safety Certification with Turbo

In many domains, safety certification is necessary, for example in aerospace, medical technology, and automotive engineering. This process is very time-consuming, since all possible system states and reactions must be mapped and all possible errors must be handled in a controlled manner. Certification often costs much more effort than the actual programming — and it is therefore rarely updated. Open source software in contrast, however, stands for rapid development and fast bug fixing.

embedded brains, with the support of ESA (European Space Agency), has developed a maximally automated qualification process. Based on a complex concatenation of definitions, requirements and individual tests, which communicate by means of a formalized “language”, the qualification can be performed largely automatically. This does not replace formal definitions and test procedures, but it simplifies delta qualifications enormously. This means that adaptations and additions to the source code can be carried out very quickly — and thus cost-effectively.

Verifications Performed

  • Static Code Checker Results from Coverity, CLANG, and CppCheck
  • Product and process metrics
  • Evaluation of test and validation activities
  • Problem and non-conformance reports
  • 100% Code & Branch Coverage
EB