Is it possible to use some (signing) service from the rpi itself that would allow us to make sure of 2 things?
- Code is running on a raspberry
- Code is running on a certain raspberry box and not another (using the serial number and stuff).
I know there's the serial number in /proc/cpuinfo but reading it could be "faked" on a python script by just modifying it and hard-code whatever we wanted on it but if there were some kind of low-level signing service available this hampering could be detected because rpi signature would fail.
My goal is to make sure that messages that reach my server are being generated from a given rpi and not
1 - another rpi or
2 - some other box (a normal x86 PC).
Assume that the boxes can be physically reached by a person... so it's about detecting if someone has copied the content of the SDCard into another computer (an rpi or otherwise) and run my (python) code.