TUF
The Update Framework
The Update Framework, a CNCF graduated specification for secure software update systems. Separate roles (root, targets, snapshot and timestamp) sign expiring metadata with threshold keys, so a compromised key or mirror cannot serve malicious, outdated or rolled-back updates.
- Defined in
- The Update Framework specification
Covered in
Guide
Protect package publication and the update channel
Constrain release identities, verify what consumers receive, and prepare for publisher or update-key compromise.
Guide
Design firmware updates that can recover safely
Connect trusted boot, update authorization, rollback policy and end-of-life behavior to the device’s actual failure modes.
Practice: Local project: Recover from failed firmware updates with A/B slots