Fleet Provisioning and Management

10 Lektionen in dieser Stufe

1. Device Identity: Serial Numbers, Keys and Certificates
   Give every device a unique, verifiable identity. · Lab: Generate a key pair on each device at first boot and sign a certificate from your own authority.
2. Zero-Touch Provisioning on First Boot
   Turn a generic image into an enrolled device automatically. · Lab: Write a first-boot service that sets hostname, creates identity and registers with the server.
3. Configuration Management with Ansible
   Describe device state in playbooks and apply it repeatably. · Lab: Write a playbook that installs packages, deploys a unit and can be run twice with no changes the second time.
4. Keeping a Fleet Inventory and Device Registry
   Record what exists, where it is and what it runs. · Lab: Build a small registry with serial, location, hardware revision and software version.
5. Remote Access at Scale Through a WireGuard Hub
   Reach any device behind any network through one audited entry point. · Lab: Enrol devices in a hub-and-spoke VPN with per-device keys and firewall rules.
6. Fleet Command and Telemetry Topics over MQTT
   Design per-device and group topics with access control. · Lab: Implement telemetry, command and response topics with certificate-based access rules.
7. Per-Device Configuration and Feature Flags
   Change behaviour remotely without shipping a new image. · Lab: Deliver a signed configuration document and toggle a feature on one device.
8. Rotating Credentials and Revoking a Stolen Device
   Replace keys on schedule and cut off a compromised unit. · Lab: Rotate one device's certificate and revoke another so broker and VPN both reject it.
9. Collecting Remote Diagnostics Without SSH
   Gather the evidence support needs in one bundle. · Lab: Implement a command that uploads logs, versions and health data as a single archive.
10. Decommissioning, Wiping and Replacing Units
    Retire hardware securely and swap in a replacement with the same role. · Lab: Wipe a device, remove its identity and provision a replacement that inherits its configuration.

Abschlussprojekt

A three-device fleet that provisions itself on first boot, appears in your inventory, is configured by Ansible, reports telemetry and can be individually revoked and replaced.

Teile für diese Stufe

• 3 × Raspberry Pi 5, Pi 4 or Zero 2 W boards as fleet devices
• 3 × microSD card 32 GB
• 3 × Power supplies for each board
• 1 × Second computer or Pi as management server
• 1 × Label printer or printed QR labels

In jeder Lektion legst du die passenden Teile direkt in den Warenkorb. Raspberry Pi →