Commercializing a product with Ubuntu on MediaTek Genio

Ubuntu makes commercial Genio product development accessible to teams without embedded Linux expertise. The Ubuntu BSP from MediaTek gives you hardware acceleration, the familiar apt ecosystem, and a known quantity for security updates. The commercialization path — long-term support, update mechanisms, regulatory compliance tooling — is well-defined through Canonical’s Ubuntu Pro program.

Key Insights

• Ubuntu 22.04 LTS + MediaTek BSP is the validated starting point — the BSP adds Mali GPU, NeuroPilot NPU, VPU, and camera ISP drivers on top of standard Ubuntu
• Ubuntu Pro for Devices extends security updates to 10 years and adds compliance tooling — relevant for products with 5+ year field life
• Snap packages are the Canonical-recommended application delivery mechanism for IoT — self-contained, automatically updated, confined
• EFI capsule updates in the MediaTek BSP enable firmware-level OTA without a custom bootloader update mechanism
• Canonical certification for Genio hardware is available and can be a differentiator for enterprise and industrial buyers

MediaTek Ubuntu BSP

MediaTek distributes Ubuntu BSP packages for Genio through their partner portal. The BSP adds hardware driver packages on top of a standard Ubuntu 22.04 LTS ARM64 base:

Package category	What it includes
GPU driver	Mali-G57 userspace libraries (EGL, OpenGL ES, OpenCL, Vulkan)
VPU	Hardware video decode/encode GStreamer plugins
NPU	NeuroPilot runtime (TFLite delegate, ONNX NeuronExecutionProvider)
Camera ISP	V4L2 + libcamera integration (public tier)
Display	Weston Wayland compositor with Mali acceleration
Tools	genio-flash firmware update tool

Installation on a base Ubuntu 22.04 image:

# Add the MediaTek BSP apt repository
curl -fsSL https://mediatek-iot.ubuntu.com/key.gpg | sudo apt-key add -
echo "deb https://mediatek-iot.ubuntu.com/apt jammy main" | \
  sudo tee /etc/apt/sources.list.d/mediatek-iot.list

sudo apt update
sudo apt install mtk-genio-bsp

Ubuntu Pro for Devices

Standard Ubuntu 22.04 LTS support ends April 2027 (5 years). For products that ship today and stay in the field for 5–10 years, Ubuntu Pro for Devices is the commercial support tier.

What Ubuntu Pro for Devices adds:

Feature	Standard Ubuntu	Ubuntu Pro for Devices
Security updates	5 years	10 years
Kernel live patching	No	Yes (Livepatch)
FIPS 140-2 compliance	No	Yes
CIS benchmark hardening	No	Tooling included
Canonical support SLA	Community	Commercial
Extended hardware security	No	Yes (ESM for all packages)

Pricing: Ubuntu Pro for Devices is licensed per device. Contact Canonical for volume pricing. For low-volume products (<1000 units), the cost is typically a few dollars per device per year.

When you need it:

• Products with a field life past April 2027 (Ubuntu 22.04 standard EOL)
• Industrial, medical, or defense applications with compliance requirements (FIPS, IEC 62443)
• Products sold to enterprise buyers who require documented security maintenance

# Enable Ubuntu Pro on a deployed device
ubuntu-pro attach <token>
ubuntu-pro status

Application packaging with snap

Snap is Canonical’s containerized application format for IoT. A snap is a compressed filesystem image with a manifest that defines interfaces (hardware access, network, files). Snap applications update automatically from the Snap Store or a private Snap Store.

Why snap for IoT products

• Self-contained — all dependencies bundled, no apt dependency drift
• Automatic updates — devices check for updates on a schedule; rollback is automatic on failure
• Confined — snap interfaces control exactly what hardware and system resources the app can access
• Private Snap Store — for commercial products, a private store allows controlled deployments to registered devices only

Build a snap for your Genio app

snapcraft.yaml at the root of your project:

name: my-genio-app
base: core22
version: "1.0"
summary: My Genio application
description: |
  Production app for Genio deployment

grade: stable
confinement: strict

parts:
  my-app:
    plugin: python
    source: .
    python-packages:
      - numpy
      - tflite-runtime

apps:
  my-genio-app:
    command: bin/my-app
    daemon: simple
    restart-condition: always
    plugs:
      - hardware-observe
      - raw-usb
      - camera

Build and install:

# Install snapcraft
snap install snapcraft --classic

# Build for arm64
snapcraft --target-arch arm64

# Install on device
snap install my-genio-app_1.0_arm64.snap --dangerous

Private Snap Store setup

For a commercial product, you want control over which snap version is on which device. Canonical’s IoT App Store (branded Snap Store) provides:

• Private channel management (stable/candidate/beta/edge)
• Device serial assertions for fleet management
• Over-the-air update control per device group

Contact Canonical to set up a private store. The setup involves registering your Genio device model and installing an IoT gateway snap.

OTA firmware updates (EFI capsule)

The MediaTek Ubuntu BSP includes EFI capsule update support, which is the standard mechanism for updating U-Boot, TF-A, and the kernel from userspace without special recovery tooling.

# Install fwupd (EFI capsule update client)
apt install fwupd

# Check device firmware information
fwupdmgr get-devices

# Refresh firmware metadata
fwupdmgr refresh

# Install pending firmware updates
fwupdmgr update

For custom firmware images, create a capsule file from your BSP output:

# Generate capsule (MediaTek provides a capsule generation script in the BSP)
./gen_capsule.sh \
  --input build/output/bl2.bin \
  --guid <your-device-guid> \
  --output my-firmware.cap

# Deploy to device
fwupdmgr install my-firmware.cap --allow-older

Canonical hardware certification

Canonical’s Ubuntu Certified Hardware program validates that Ubuntu runs correctly on a specific hardware platform. Certification is available for commercial Genio products.

Benefits of certification:

• Listed on ubuntu.com/certified (searchable by enterprise buyers)
• Canonical validates that Ubuntu updates don’t break your hardware
• Required by some enterprise procurement processes

The certification process:

1. Run the Ubuntu Hardware Certification Test Suite on your board
2. Submit results to Canonical
3. Canonical reviews and issues certification
4. Certification is listed against your specific Ubuntu version

For products built on the Genio EVK with the MediaTek Ubuntu BSP, the base hardware is already certified — you may only need to certify carrier board modifications.

Security hardening checklist for Ubuntu on Genio

Before shipping:

# 1. Disable root SSH login
sed -i 's/PermitRootLogin yes/PermitRootLogin no/' /etc/ssh/sshd_config

# 2. Enable UFW firewall
ufw enable
ufw default deny incoming
ufw allow ssh

# 3. Enable automatic security updates
apt install unattended-upgrades
dpkg-reconfigure unattended-upgrades

# 4. Remove development tools from production image
apt remove --purge build-essential gcc make git

# 5. Enable AppArmor
systemctl enable apparmor
systemctl start apparmor

For comparison with the Yocto-based approach and guidance on which to choose for your project, see Ubuntu vs Yocto on MediaTek Genio. For on-device AI deployment that works on both Ubuntu and Yocto, see on-device AI without the cloud on Genio.

FAQ

Can I ship a commercial product using Ubuntu on MediaTek Genio?

Yes. Ubuntu is commercially viable for embedded products. Canonical and MediaTek have a partnership that includes Ubuntu BSP support for Genio. For products requiring 10-year security support, Ubuntu Pro for Devices is the commercial offering.

What is Ubuntu Pro for Devices and do I need it?

Ubuntu Pro for Devices extends Ubuntu LTS security updates from 5 years to 10 years and adds kernel live patching and compliance tooling. You need it if your product has a field life beyond 5 years or if your industry requires certified security maintenance.

How do I update software on a shipped Genio Ubuntu product?

Snap packages with automatic updates are the recommended path for Canonical-supported IoT products. Alternatively, use apt with a private package mirror for controlled updates. The MediaTek Ubuntu BSP includes EFI capsule update support for firmware-level updates.

Does MediaTek provide Ubuntu BSP support for all Genio platforms?

MediaTek provides Ubuntu BSP packages for Genio 510, 520, 700, 720, and 1200 targeting Ubuntu 22.04 LTS. Genio 350 and 360 have limited or community-only Ubuntu support.

---