Aktualizr-lite: Be Secure and Never use /bin/dd Again
summary
Foundries.io’s aktualizr-lite implements secure OTA by delivering OSTree updates verified with TUF instead of full Uptane, removing repeated /bin/dd flashes. It ties into OTA Connect and a small OTA compose helper to stand up servers fast, supports tagged rollout streams for CI (examples: build 606/607), and renders signed docker app descriptors into docker‑compose on device. The system runs in production workflows and demonstrably updates devices and CI fleets.
AI-written summary · about
chapters (16)
- 0:00Intro
- 0:32The problem
- 1:30Update systems
- 4:36Aktualizr
- 9:47Backend
- 15:28Docker Apps
- 17:20How is it working
- 23:52Docker Compose
- 29:10Update Command
- 30:05OSTree
- 30:50Docker Notary
- 31:48Obtain
- 34:00Tough
- 35:15Not for work
- 36:00In the future
- 37:53Conclusion
related talks
31mHow to Leverage an Open Update Protocol to Drive Your Embedded Devices from Any Cloud OTA Provider
43mOTA Updates in the Wild: Lessons from the Field
56mComparison of Linux Software Update Technologies
09mLightning Talk: Delta Firmware Over The Air (DFOTA) Update: Optim...
40mDevice Management and Delta Update for Embedded Devices with SWUpdate and TUF
52mSafer Apps from Docker Security Building Blocks
30mHow Secure Is Your Build/Server?
45mBehind the Scenes of an Update Framework: RAUC