Vasu's Va-super's Blog

Fixing a hyprland shared library issue in omarchy

Wed, 03 Sep 2025 00:00:00 +0000

A short story of fixing a shared library hyprland issue on omarchy

My Tutorial for Securing AWS Greengrass with TPM2 is live!

Wed, 09 Jul 2025 00:00:00 +0000

x509 certs secured with through the TPM2 chip so that no-one can steal it.

Resume

Mon, 28 Apr 2025 00:00:00 +0000

Vasudevan Perumal

vasu3797@gmail.com | www.linkedin.com/in/vasuper | 773-707-1927 | vasuper.vasu3797.workers.dev

Experience

System Development Engineer II | Amazon OpsTech & Robotics | Austin, TX | Dec 2023 - Present (1 yr 5 mos)

Led the development of the OS Bakery, a CI mechanism for OS builds, and a toolchain of dev-tools for local builds. Fully automating git merge to build, and publish of OS artifacts to device deployment.
Designed a framework of abstractions for OS customization in the Amazon context, making OS customization accessible to cloud-native engineers, reducing time to prototype for teams, from days to a couple of hours.
Spearheaded development of AmazonEdgeOS, first ever custom Linux distribution at Amazon Robotics. Security and reliability as core tenets, we implemented A/B Updates, TPM2 full disk encryption, etc.
Designed a virtual OS testing service enabling developers and integration testing frameworks, to spin up test instances, run tests, and teardown instances on-demand, built with libvirt, vagrant, and pytest.
Developed abstractions, for teams to leverage TPM2 root of trust for Cloud service and Wifi EAP registration.

System Development Engineer I | Amazon OpsTech & Robotics | Austin, TX | Jul 2021 - Dec 2023 (2 yrs 6 mos)

Setting up Cloudwatch Cross Account Observability with CDK

Sat, 22 Feb 2025 00:00:00 +0000

Cross Account Cross Region(XAXR) Cloudwatch Observability has been a feature that has been around for a while, it was introduced by AWS in 2022.

Let’s consider this scenario, you work in a company, that uses AWS. You are in a team that vends constructs/templates to other internal teams in your company. These internal teams are your customers. You vend your solution as an abstraction, that solves an undifferentiated problem for your customer. This let’s your customer focus on what makes their beer taste better.

Curated List of FOSDEM 2025 Talks for Linux Distribution Builders

Mon, 17 Feb 2025 00:00:00 +0000

FOSDEM is a free and non-commercial event organised by the community for the community. The full form is Free and Open Source Developers European Meeting, you can learn more about it’s history here.

My day to day involves working with Linux, and maintaining a Linux Distribution for my company and building new features for the distribution. FOSDEM is great conference for Linux builders and even users to learn about the latest greatest happening in the community.

Leveraging Container Registry APIs for your benefit.

Wed, 27 Nov 2024 00:00:00 +0000

If you have ever run docker pull or pulled a container using the favorite container runtime tool of your choice, you’ve probably interacted with a container registry.

A container registry does not only provide mechanisms to store and distribute container images, it also exposes APIs that clients can use to perform other actions like fetching the container’s metadata without pulling the entire container.

At work, I had a problem to solve, which is when I thought why not leverage these APIs to solve my problem. In this post we’ll see how I leveraged the Container Registry APIs for my benefit and possibly how you the reader can use it as well.

Using UV to manage a python project

Fri, 18 Oct 2024 00:00:00 +0000

1. Motivation

I wanted to put up a small snippet of code I did at work as a public github project, as it seemed like a common usage pattern that other folks can use of the shelf or copy from.

Within Amazon, we have our own python project management and dependency management tooling that automates away a lot of the boilerplate setup in defining and distributing a Python project.

They abstract away the setup and usage for tools and configurations like pyproject.toml, venv, mypy, black, pytest, etc. They essentially run these tools under the hood, but we as developers don’t need to care about setting these up every time we start a new project.

My notes on the Trusted Platform Modules

Mon, 10 Jun 2024 03:25:52 +0000

Notes on the basic concepts of trusted compute, the TPM architecture and features

My Notes while learning about Greengrass

Sun, 09 Jun 2024 17:25:08 -0500

Greengrass Concepts Basics

GG is a edge runtime with a deployment and management mechanism for the egde runtime

AWS IoT thing: A device or logic entity

Greengrass core device: Device running greengrass core software

Greengrass client device: A device that connects to and communicates with a greengrass core device over MQTT.

client device and core device could the same device or could be separated, with a sort of master slave relationship. client devices are meant for small footprint device that run embedded linux or RTOS maybe?

About me

Sun, 09 Jun 2024 00:00:00 +0000

Hello, My name is Vasudevan Perumal.

I’m an computer systems generalist, with a some battle scars(aka experience) in Linux distribution engineering, and building systems to provision and manage devices at scale using cloud-native technologies. Right now, I build cloud-native endpoints for robotics systems at Amazon. What is a cloud-native endpoint you might ask?

Cloud-native endpoints are devices that can be deployed from anywhere. They receive their applications and configurations dynamically from the cloud, and can easily be reset or restored. These systems don’t generally require a direct connection to any on-premises resources for usability or management.

Build your own Customized Live Debian Distro using Debootstrap

Mon, 02 Jan 2023 08:23:29 -0600

In this guide, we’ll be going over the steps involved to build a LiveCD Debian distribution using debootstrap with both legacy BIOS and UEFI boot support using GRUB2. Why build your own distribution, you ask? There are scenarios and use cases that necessitate packages, certificates or other artifacts are already installed in the OS Image that’s distributed in the machines that are shipped, this guide will go over the steps involved to build that image.

Building Yocto Based Linux Image for AMD Ryzen Embedded v1000 Series SoCs with AWS Agents installed.

Sun, 30 Oct 2022 17:25:08 -0500

This guide outlines the steps involved to build a linux distribution using Yocto for AMD Ryzen Embedded v1000 Series SoCs with AWS SDKs, services, and software from the meta-aws layer.

Prerequisites:

To follow the steps image build section, you will need:

A Supported Linux Distribution: You should have a reasonably current Linux-based host system. You will have the best results with a recent release of Fedora, openSUSE, Debian, Ubuntu, or CentOS as these releases are frequently tested against the Yocto Project® and officially supported. I’ve tried building this with both Ubuntu 20.04 and Pop_OS! 22.04.