Software Update for IoT: The Current State of Play
summary
A Mirai 600 Gbps DDoS motivates secure update paths and the claim that package updates are not atomic so embedded updates use image-based strategies instead. Practical tools covered include swupdate and rauc for image installs, Hawkbit for server control, and end‑to‑end services Mender (client open source, server closed) and Resin (container updates plus hybrid A/B image updates). Core requirements are atomic, robust and secure updates, achieved with redundant partitions, boot-count rollback and a hardware watchdog to force recovery when installs fail.
AI-written summary · about
chapters (22)
- 0:00Introduction
- 0:35About me
- 1:07About this talk
- 1:50Why is this important
- 2:57Two problems
- 3:59What are you looking for
- 8:57Server vs Embedded
- 10:28symmetric update
- 13:05root filesystem
- 13:50update agent
- 14:39SWUpdate
- 15:39SWUpdate Stefan
- 17:34Route Robos
- 19:14Update Client
- 21:17Update Server
- 23:13Authentication Security
- 25:02Recovery
- 29:34The Update Client
- 37:10Updating the Kernel
- 38:08Simultaneous Updates
- 39:35Overhead
- 44:54Wrapup
related talks
44mUpdating an Embedded System with SWUpdate Framework
51mUsing SWUpdate to Upgrade Your System
31mUpdating the Edge
22mUpdate Strategies for the Edge
01h 00mOpen Software Updates for IoT
30mDevOps Patterns and Antipatterns for Continuous Software Updates
36mFullMetalUpdate - A Fully Integrated Solution to Update Your IoT Devices
35mThe Dawn of Liquid Software