Automated provisioning of secure boot, encrypted storage and OS images for fleets of Raspberry Pi devices.
software
Knowledge about rpi-sb-provisioner
Building your own Raspberry Pi OS image for a device fleet: rpi-image-gen and pi-gen-microrecommendation · unverified · Instead of hand-configuring each SD card, build a reproducible image from declarative config. rpi-image-gen builds customised images from Raspberry Pi OS packages (with SBOM/CVE reports and secure-boot integration); pi-gen-micro builds tiny embedded systems.
Raspberry Pi secure boot is permanent: plan keys before using rpi-sb-provisionerwarning · unverified · Enabling secure boot programs OTP fuses: it can't be disabled and the key can't be changed afterwards. rpi-sb-provisioner automates secure boot, full-disk encryption and OS deployment for fleets, with a no-security mode for development.