Fedora IoT device onboarding with FDO and Ignition
summary
Fedora IoT supports two concrete onboarding flows: FDO for zero‑touch, late binding provisioning that builds a chain of trust using an Ownership Voucher and Rendezvous/serviceinfo modules (can push SSH keys, copy files, enable disk encryption), and Ignition as a first‑boot JSON config (typically authored via the butane transpiler) for users, systemd units and file setup. Images are produced with Image Builder/composer as simplified‑installer ISOs or raw images; both approaches are implemented and used in Fedora IoT today.
AI-written summary · about
chapters (6)
- 0:00Introduction to onboarding
- 0:41Onboarding challenges
- 4:24FDO protocol overview
- 14:22Ignition and butane
- 21:27Future directions
- 24:43Q&A session
related talks
24mCan You Create a Secure IoT Platform Using a Common Linux Distro?
25mFIDO Automotive applications
40mTrusted Internet of Things Device Onboarding and Lifecycle Management
23mBorderline: Examining the edge cases of FIDO
22mSecure and Massive IoT Device Factory Provisioning
38mBoot to Cloud Security Considerations with IoT
39mZero touch secure device onboarding and management
30mSupply Chain Security for IoT Devices