FOUNDRIES.IO INSIGHTS

Technologies, News and Demonstrations

FoundriesFactory TUF Keys Rotation

By Marc Streeter in fota

March 5, 2020

Built on a vision that the latest software is the most secure, software updates are central to the FoundriesFactory security story. What happens, however, when software delivery is compromised? Is recovery complicated? Enter TUF key rotation!

Continue reading


FoundriesFactory: Modern tooling for Embedded Linux

By Tyler Baker in fota

November 18, 2019

The days of building monolithic embedded Linux systems are coming to an end. Security vulnerabilities, both on the software and hardware side are driving the embedded industry to adopt new ways to develop these systems. The writing has been on the walls for a while now, and this shift away from monolithic applications to microservices has been happening in the cloud for many years. The “internet of things” and “edge” computing have brought cloud developers closer to embedded systems than ever before.

Continue reading


Docker App Support in Aktualizr

By Andy Doan in fota

September 23, 2019

Aktualizr has gained support for Docker Apps. This is a powerful feature, but hasn’t really been described well … until now!

Continue reading


Introducing Aktualizr-lite

By Andy Doan in fota

September 8, 2019

Earlier this year, I found myself pushing the idea of an “anonymous mode“ for the Aktualizr project which is the OTA agent running in the LMP. This turned into “aktualizr-lite” and has recently become the default OTA agent used by the LMP. This article explains what aktualizr-lite is and why we are using it.

Continue reading


Adding a REST API to OTA Connect

By Andy Doan in fota

August 9, 2018

The OTA blog series left users with a secured OTA Connect server. This article will describe how you can deploy an easy-to-use REST API to manage your devices.

Continue reading


Securing OTA Connect

By Andy Doan in fota

July 12, 2018

Part three of this blog series showed how to deploy an OTA Connect service in Google Kubernetes Engine that had a few security holes. This article will describe how to secure it.

Continue reading


Deploying OTA Connect

By Andy Doan in fota

June 27, 2018

Continuing with the OTA blog series part one and part two, this article shows you how to deploy OTA Connect using the OTA Community Edition into Google’s Kubernetes Engine (GKE). After completion of these instructions, you’ll have an OTA Connect server available on the internet with a single QEMU device registered to it.

Continue reading


What Is OTA Connect

Continuing with the OTA blog series, this article will explain what OTA Connect is and how it implements the TUF/Uptane/OSTree specifications.

Continue reading


How We Chose a Software Update System

One of the first big decisions we had to make for the Linux microPlatform was our Over-The-Air Update (OTA) strategy. This decision required a lot of time, meetings, beer, and coffee. This article is the first of a small series explaining our recommended approach to OTA for the LMP. This article explains how and why we ultimately chose OTA Connect and its open source deployment project OTA Community Edition.

Continue reading


Zephyr microPlatform, Zephyr OTA via DFU/mcumgr

In this blog we describe how to use the Zephyr microPlatform and the in-tree Zephyr samples to build, flash and perform an over the air (OTA) update of a Zephyr application over Bluetooth Low Energy (BLE). This demonstration uses the DFU support within Zephyr provided by mcumgr.

Continue reading