Aktualizr-lite: Secure OSTree Updates for Embedded Devices

Discover how to implement secure and efficient updates for embedded devices using Aktualizr-lite in this informative conference talk. Learn about the Aktualizr project and its new tool, aktualizr-lite, which enables secure OSTree updates without relying on traditional methods like "dd" commands. Explore the benefits of OSTree updates for embedded devices, including improved manageability, reliable testing, and trustworthy development processes. Gain insights into incorporating OSTree into Open Embedded systems and leveraging Aktualizr for handling updates. Delve into topics such as the Uptane specification, TUF verification, and the advantages of aktualizr-lite for various use cases. Follow along as the speakers discuss the inner workings of the update system, including backend operations, Docker apps, and Docker Compose. Understand the update command process, OSTree functionality, and the role of Docker Notary in ensuring security. Conclude with a look at future developments and potential applications of this innovative update solution.

Intro
The problem
Update systems
Aktualizr
Backend
Docker Apps
How is it working
Docker Compose
Update Command
OSTree
Docker Notary
Obtain
Tough
Not for work
In the future
Conclusion