Rouven Czerwinski

Rouven started working with Pengutronix in 2016, initially focusing on testing embedded Linux systems.
Since then he has worked on securing embedded Linux platforms using verified boot and also enabled platforms to provide secret key storage for cloud-connectivity. Nowadays he focuses on the embedded Linux media and graphics stack, debugging performance issues and improving the quality of upstream media pipelines.


Session

09-14
15:15
40min
Exploring RAUC: A Flexible Building Block for Image-Based Updates
Rouven Czerwinski

Recently, atomic updates via image based systems have become more relevant for
servers and desktops, as they allow predictable management of large fleets. In the
embedded Linux space, this approach has been the default for many years and
proven updaters exist already.

In this talk, we will delve into RAUC and look at how its design and features
have been driven by the requirements for robust, atomic updates.
The presentation will introduce the fundamental concepts surrounding A/B fallback
and update signing in the context of embedded Linux updates.
We will then explore the commonalities and differences between RAUC and systemd's
sysupdate.

The discussion will progress to cover RAUC's bundle-based update system, which
allows for comprehensive system updates without the need for local storage,
thanks to HTTP streaming. Additionally, we will demonstrate how adaptive updates
minimize download sizes without necessitating version-specific patch management.

Main Hall