Working under hardening
Boot and recovery
The Linux 6.1 development line has a repeatable boot, recovery and A/B rollback path. Public installation remains gated on release documentation and tester validation.
Community hardware liberation project
Free the hardware.
Keep the voice.
LibreEcho is building an open operating system for Amazon Echo Gen 2βturning capable, locked-down hardware into a useful, hackable platform.
Linux 6.1 development Β· Developer Preview preparation
Release status: LibreEcho is preparing a bounded Developer Preview. Open Beta has not launched, and no public download should be treated as a stable consumer release.
- MT8163MediaTek platform
- Gen 2Initial hardware target
- OpenCode and research
AirPlay, now supported
No cloud account needed
Music equalizer built in
Local-first voice control
No subscription, ever
OPEN SOURCE β¦ REPAIRABLE β¦ LOCAL-FIRST β¦ COMMUNITY-LED β¦ HARDWARE REUSE β¦
01 / Overview
From black box to open platform.
Statuses separate what is implemented from what is supported; a working component is not automatically a supported feature.
Working under hardening
Wi-Fi and networking
Association, DHCP and gateway-liveness supervision are implemented. Driver-state recovery and longer-duration acceptance remain active work.
Working under hardening
Bluetooth media
Bluetooth SDP, A2DP sink and AVRCP service paths are implemented. Client compatibility and pairing hardening remain release work.
Working under hardening
Audio and AirPlay
AirPlay playback is hardware-validated through the current PCM path. Stream-start volume precedence remains an open safety investigation.
LibreEcho is active Linux 6.1 development for a specific Echo Gen 2 target β not a general-purpose upstream Linux port and not an unrestricted Open Beta.
02 / Features
What is implemented, and what is not promised.
Last reviewed .
Beta-supportedWorking under hardeningExperimental / developer-onlyPlannedUnsupported
| Area | Status | Current status |
|---|---|---|
| Boot, recovery and A/B slots | Working under hardening | Validated on the development target; public installation and recovery guides are required before preview. |
| Wi-Fi association and local networking | Working under hardening | Association and gateway supervision work; prolonged recovery and driver-state issues remain open. |
| AirPlay playback | Working under hardening | Hardware playback validated; stream-start volume safety is not yet a release claim. |
| Bluetooth A2DP / AVRCP | Working under hardening | Service records and playback path exist; client pairing compatibility is still being hardened. |
| Wake word, local STT and TTS | Experimental / developer-only | Implemented development service chain; not a supported voice-quality or privacy guarantee. |
| Assistant provider integration | Experimental / developer-only | Provider choice controls what leaves the device; see the privacy section before enabling it. |
| Microphone capture and physical mute | Experimental / developer-only | Do not treat software state or a UI indicator as proof of a hardware-derived privacy boundary. |
| LED control and Web Control Centre | Working under hardening | Local UI/API and LED paths are implemented; physical-control integration remains under review. |
| Signed A/B OTA | Working under hardening | Signed update flow exists; release identity, payload identity and recovery gates remain mandatory. |
| SSH and Home Assistant | Planned | Not required for the bounded Developer Preview and not a current support promise. |
Developer Preview warning: only install on hardware you can recover. Do not expose the device control plane to the public Internet, and do not upload owner-local firmware, credentials, serials, MAC addresses or private diagnostics.
03 / Supported hardware
Start with the exact target.
Initial development targets the Amazon Echo Gen 2 family on the MT8163 platform. A similar chipset, product name or enclosure does not prove compatibility.
Before downloading
- Confirm that the device is an Amazon Echo Gen 2, not an Echo Dot, Show or another generation.
- Record the model and board revision privately; never post the serial or MAC address.
- Have a known-good USB data cable, a Linux/macOS/Windows host with documented USB tools, and a recovery path.
- Back up owner-local state and connectivity firmware before any destructive operation.
Other Echo generations and unverified board revisions are unsupported. Hardware compatibility must be proven against the exact board and artifact, not inferred from marketing names.
Support contract
- Supported target
- Amazon Echo Gen 2 / MT8163 development target.
- Supported release state
- Bounded Developer Preview preparation; Open Beta has not launched.
- Untested
- Other Echo, Dot and Show generations; unverified board revisions; unsupported host/cable combinations.
- Recovery expectation
- Users must retain the ability to restore the original device state before experimenting.
03a / Hardware roadmap
One platform today. More hardware next.
This compatibility matrix separates hardware LibreEcho already runs on from devices with boot access, promising SoC reuse, or entirely new platform work. It is a porting roadmap, not a promise that every listed device will be supported.
β
LibreEcho workingπ’ Access implementedπ‘ Potential β supported SoCπ Research candidateβͺ New platform
Show the full hardware compatibility matrix
| Codename | Product | SoC | LibreEcho / porting status | Access / research basis |
|---|---|---|---|---|
radar / Puffin platform | Amazon Echo 2nd Gen | MediaTek MT8163V | β LibreEcho working β current reference platform | LibreEcho-Build |
biscuit | Amazon Echo Dot 2nd Gen | MediaTek MT8163V | π’ Access implemented β strongest next LibreEcho port | Amonet mt8163-biscuit / amonet-koboreru |
sonar | Amazon Echo Plus 1st Gen | MediaTek MT8163V | π‘ Potential β supported SoC | amonet-koboreru β MT8163 platform |
rook | Amazon Echo Spot 1st Gen | MediaTek MT8163V | π’ Access implemented | Amonet mt8163-rook / amonet-koboreru |
checkers | Amazon Echo Show 5 1st Gen | MediaTek MT8163 | π’ Access implemented β strong first display-equipped target | Amonet mt8163-checkers / amonet-koboreru |
crown | Amazon Echo Show 8 1st Gen | MediaTek MT8163 | π’ Access implemented | Amonet mt8163-crown / amonet-koboreru |
cronos | Amazon Echo Show 5 2nd Gen | MediaTek MT8163 | π’ Access implemented | Amonet mt8163-cronos / amonet-koboreru |
donut | Amazon Echo Dot 3rd Gen β Rev 1 | MediaTek MT8516BAAA | π’ Access implemented β establishes MT8516 as a viable second LibreEcho SoC family | amonet-koboreru |
crumpet | Amazon Echo Dot 3rd Gen β Rev 2 / refresh | MediaTek MT8516BAAA | π’ Access implemented | amonet-koboreru |
cupcake | Amazon Echo Input | MediaTek MT8516BAAA | π’ Access implemented | amonet-koboreru |
cupcake | Amazon Echo Input Portable | MediaTek MT8516 family | π‘ Strong potential β supported SoC/platform family | amonet-koboreru |
lidar | Amazon Echo Plus 2nd Gen | MediaTek MT8516B | π‘ Potential β supported SoC β high-value speaker target | amonet-koboreru β MT8516 platform |
pascal | Amazon Echo 3rd Gen | MediaTek MT8516 | π‘ Potential β supported SoC β high-priority full-size Echo candidate | amonet-koboreru β MT8516 platform |
octave | Amazon Echo Studio β 2019 | MediaTek MT8516 family | π‘ Potential β supported SoC β high-value target | amonet-koboreru β MT8516 platform |
octave | Amazon Echo Studio β 2022 refresh | MediaTek MT8516 family | π‘ Potential β supported SoC | amonet-koboreru β MT8516 platform |
doebrite | Amazon Echo Dot with Clock 3rd Gen | MediaTek MT8516BAAA | π‘ Strong potential β supported SoC, closely related to donut / crumpet | amonet-koboreru β MT8516 platform |
croissant | Amazon Echo Flex | MediaTek MT8516BAAA | π‘ Potential β supported SoC | amonet-koboreru β MT8516 platform |
sapphire | Amazon Echo Link | MediaTek MT8516B | π‘ Potential β supported SoC | amonet-koboreru β MT8516 platform |
kyanite | Amazon Echo Link Amp | MediaTek MT8516B | π‘ Potential β supported SoC | amonet-koboreru β MT8516 platform |
pablo | Amazon Echo Sub | MediaTek MT8516B | π‘ Potential β supported SoC | amonet-koboreru β MT8516 platform |
douglas | Amazon Fire HD 8 7th Gen | MediaTek MT8163 | π’ Access implemented β useful MT8163 reference/test platform, not primary LibreEcho product | amonet-koboreru |
karnak | Amazon Fire HD 8 8th Gen | MediaTek MT8163 | π‘ Potential β supported SoC | amonet-koboreru β MT8163 platform |
mustang | Amazon Fire 7 9th Gen | MediaTek MT8163V/B | π‘ Potential β supported SoC | amonet-koboreru β MT8163 platform |
laser | Amazon Echo 4th Gen | MediaTek MT8512 + Amazon AZ1 | π Research candidate β investigate whether the MediaTek bl2_ext verification weakness applies; not proven on Echo | Fenrir β bl2_ext research / Sprig |
brownie | Amazon Echo Dot 4th Gen | MediaTek MT8512BAAV | π Research candidate β investigate Fenrir applicability; not proven on Echo | Fenrir β bl2_ext research / Sprig |
ganache | Amazon Echo Dot with Clock 4th Gen | MediaTek MT8512BAAV | π Research candidate β investigate Fenrir applicability; not proven on Echo | Fenrir β bl2_ext research / Sprig |
cannoli | Amazon Echo Dot 5th Gen | MediaTek MT8519 + Amazon AZ2 | π Research candidate β investigate Fenrir applicability; no Echo-specific access proven | Fenrir β bl2_ext research |
churro | Amazon Echo Pop | MediaTek MT8519 + Amazon AZ2 | π Research candidate β investigate Fenrir applicability; no Echo-specific access proven | Fenrir β bl2_ext research |
baklava | Amazon Echo Spot 2024 / 2nd Gen | MediaTek MT8519 + Amazon AZ2 | π Research candidate β investigate Fenrir applicability; no Echo-specific access proven | Fenrir β bl2_ext research |
maverick | Amazon Fire HD 10 (2019) | MediaTek MT8183 | π Research candidate β Kaeru has MT8183/Amazon LK groundwork; initial access still needs proving | Kaeru β MT8183 + Amazon groundwork |
persimmon | Amazon Echo Studio 2025 | Amazon AZ3 Pro platform | βͺ Entirely new platform β unrelated to the promising MT8516 Studio platform | No relevant current R0rt1z2 Echo access implementation |
SoC family summary
- MT8163 / MT8163V: established LibreEcho platform family with multiple device-specific access targets.
- MT8516 / MT8516B / MT8516BAAA: strongest candidate for LibreEchoβs second platform family; device-specific access exists on several Echo products.
- MT8183: active research family; Kaeru contains explicit MT8183 support and Amazon-specific LK groundwork, but an Echo initial-access route still needs proving.
- MT8512: active boot-chain research candidate; investigate whether
bl2_extverification behaviour is susceptible to the Fenrir technique. - MT8519: active boot-chain research candidate for the same reason; no Echo-specific access implementation is currently proven.
- AZ3 Pro: substantially different newer Amazon platform with no relevant access route currently identified.
Suggested porting priority
- Echo Dot 2nd Gen (
biscuit) - Echo Dot 3rd Gen (
donut/crumpet) - Echo 3rd Gen (
pascal) - Echo Plus 2nd Gen (
lidar) - Echo Studio (
octave) - Accessible MT8163 display devices, then other MT8516 products
- MT8512 and MT8519 generations
Access support is not the same as a LibreEcho port. Every target still needs device-specific kernel, display/audio, recovery, packaging and runtime validation work. Links point to the relevant external bootloader/access projects and are provided as technical references.
04 / Install and recover
A safe path before a fast path.
The public release page will contain the downloadable release inventory when the next release is ready. The steps below explain the owner-facing installation and recovery process; destructive commands remain release-specific.
Prepare and back up
Confirm the supported model, host tools, cable and recovery method. Save original boot/recovery-critical state and owner-local calibration/connectivity inputs in a private, backed-up location.
Verify the release
Download only from the linked GitHub release. Verify the *-SHA256SUMS file and the published OTA public key before extracting or writing anything. Never use a raw image from a chat, branch or private path.
Install deliberately
Follow the release-specific partition and slot instructions. Stop if model, partition geometry, checksum, signing identity or owner-local inputs do not match. Destructive writes must name the exact target and require explicit confirmation.
First boot checklist
Confirm the product version, active slot, expected services, local Web UI response, read-write userdata and basic network/audio health. A Linux banner or ADB connection alone does not count as acceptance.
Update and rollback
Use the signed A/B updater only for an already-running compatible image. Keep the confirmed opposite slot. If health confirmation fails, preserve logs and use the documented recovery path; do not improvise a direct fastboot write.
Report safely
Include the exact public release identity, a smallest reliable reproduction and a redacted diagnostic bundle. Remove Wi-Fi secrets, provider tokens, serials, MACs, IPs, SSIDs, private paths and signing material.
Installation is not open yet: the public installation bundle and two independent first-time dry runs are still in progress. This guide explains the safety boundary; the Developer Preview is not yet open for general installation.
05 / Live demo
Explore the interface without a device.
This is a browser-local simulation. It does not connect to LibreEcho hardware, send configuration off-device or prove hardware capability.
Open the browser demoView demo source
Real-hardware proof: boot, media and voice captures from real hardware are not published yet.
06 / Privacy and data flow
Local-first is not the same as local-only.
LibreEcho can keep substantial processing on-device, but configured providers and network services can receive data. Choose integrations deliberately and treat the Web Control Centre as a local network service.
Wake word and DSPIntended to run locally in the device service chain; quality and hardware privacy acceptance remain experimental.
STTLocal STT is an experimental development path. A configured external STT provider receives audio or transcript data according to that provider's contract.
AssistantProvider requests can contain the transcript, context or selected configuration. Review the provider before enabling it.
TTS and mediaLocal TTS payloads and AirPlay/Bluetooth media are separate paths; external sender/provider traffic follows its own network boundary.
Web UI, diagnostics and OTAKeep the control plane on a trusted LAN. Exports and diagnostics must exclude passwords, tokens and private telemetry; verify release signatures before updates.
Physical microphone privacy
Current state: physical mute is not a beta-supported privacy guarantee. The end-to-end hardware-derived input, capture-disable boundary, LED state and restart behavior remain release-gate work.
Software mute, a UI label or a daemon status field must not be interpreted as proof that the microphone hardware is disconnected or that capture cannot occur.
Secret handling
- Use local account/session controls and protect credential files with restrictive permissions.
- Do not place Wi-Fi credentials, provider tokens or signing keys in backups, issues or diagnostics.
- Never expose the device API directly to the public Internet.
07 / Releases and verification
One page for what is public.
Publication, host verification, hardware acceptance and beta support are separate states.
Public GitHub releases
Releases are being refreshed
There are no public downloads available right now.
Weβre tidying up the release line before the next public images and OTA bundles are posted. Weβre also actively working on a one-shot installer to make setup easier alongside the public release. Check the GitHub Releases page for updates.
Coming soon
The next public release will be posted here when ready.
Checksums included
Future downloads will include checksums and release notes.
Hardware notes
Each release will include the relevant validation status.
Open Beta
Not launched yet; preview and tester gates remain open.
For now, please use the product repository for project updates and discussion. Private candidates and development artifacts are not public downloads.
08 / Security and support
Send the right report to the right place.
Public issues are for reproducible, non-sensitive bugs. Never publish credentials, exploit details, OTA keys, private diagnostics or device identifiers in an issue.
Product bugReproducible behavior with redacted logs and public release identity.Question or design ideaUse Discussions when enabled; keep actionable defects in Issues.Join us on DiscordMeet the community, ask questions and follow the projectβs development.Security vulnerabilityUse GitHub's private advisory route. Do not open a public issue for a vulnerability.
Bug report checklist
- Product version, release tag and channel.
- Generic Echo model/revision, without serial or MAC.
- Smallest reliable reproduction and whether reboot/recovery changes it.
- Redacted diagnostics with passwords, tokens, SSIDs, IPs and private paths removed.
- Expected versus actual behavior and whether the issue is on the public release or a development build.
Support boundary
This is a volunteer Developer Preview project. There is no guaranteed response time, and direct public-Internet exposure of the device control plane is unsupported.
If GitHub does not show private advisory reporting for this repository, do not disclose the vulnerability publicly; wait for the maintainer-announced private route.
09 / Licensing
Different components have different terms.
The website and LibreEcho-authored code use their stated open-source licences. That does not relicense Linux, third-party audio components, models, voices, owner-local firmware or vendor boot-chain material.
LibreEcho-authored source and siteUse the licence file in the relevant public repository.
Linux and PlatformPreserve the applicable GPL/LGPL and upstream notices; corresponding-source obligations remain component-specific.
TTS voiceCC-BY-SA attribution and ShareAlike obligations apply separately.
Wake-word modelCC-BY-NC-SA means the community-noncommercial payload is not cleared for unrestricted commercial reuse.
Owner-local firmware and AmonetExtracted from and retained by the owner; LibreEcho does not upload or redistribute those materials.
Audio FPGA bitstreamFollow the documented provenance record for this component.
Source, notices and relink requests
Use the public Product repository as the release coordination entry point. Exact source, notices, SBOM and relink materials for a release are provided against the release record and matched to its immutable identity.
The UI repository is currently private and is not presented here as a logged-out source download. Its public-safety and licence review is still tracked before Developer Preview publication.
Product source and release tracker10 / Developer Preview
For recoverable hardware and careful testers.
The first cohort is bounded, technical and feedback-oriented. It is not a consumer launch.
Suitable testers
- Own the specifically supported Echo Gen 2 target.
- Can use command-line tools and USB recovery without maintainer-only access.
- Have a backup and a known recovery path before changing the device.
- Use a trusted local network and will not expose the control plane publicly.
- Can submit redacted diagnostics and structured reproduction reports.
Entry acknowledgement
Installation may require recovery or reflashing and can cause data loss. Read the supported-hardware, privacy, known-issues and release pages first; verify checksums; preserve owner-local inputs; and understand that experimental voice, Bluetooth, physical mute and networking behavior may change.
Participation can be paused or withdrawn without deleting the public documentation. Open Beta will follow independent installation, recovery, OTA and stability evidence.
Feedback loop
- Record the public release identity and generic hardware scope.
- Reproduce with the smallest safe test.
- Collect and redact diagnostics.
- Use the product issue tracker for ordinary defects and the private security route for vulnerabilities.
- Link any release-blocking behavior to the current known-issues tracker.
Enrolment state: Developer Preview opening soon. The independent tester and release gates are still in progress.
11 / Contribute
Put each change in the right repository.
The Product repository is the public coordination entry point. The layer map below keeps kernel, platform, UI, documentation and private release orchestration separate.
LibreEchoProduct, releases, support and cross-repository issuesLibreEcho-Linux-6.1Linux 6.1 kernel, DTS, configuration and driversLibreEcho-PlatformARM32 initramfs, packaging, OTA and product toolingLibreEcho-DocsProduction website and public documentationLibreEcho-Docs-devDevelopment documentation and browser demoLibreEcho-UIWeb Control Centre and service daemons β currently private pending public-safety review
Keep the lights on.
Donations fund the device lab, build infrastructure and the kernel time that keep validation moving on real hardware. Every contribution goes directly into the next milestone.
Buy LibreEcho a beer
Join the community.
Chat with other LibreEcho users and contributors, ask questions and follow development.
Join LibreEcho on DiscordDonate hardware.
Spare Echo Gen 2 units, compatible board revisions or test cables accelerate compatibility coverage and independent validation. If you have hardware to donate, get in touch through the product repository before shipping anything.
Offer hardware