Dumb Servers, Smart Clients: Distributing Images with Quarry
Summary
Quarry is a TUF-based toolchain for distributing immutable Linux images with a dumb server and smart client paradigm. It covers per-machine repositories, integration with systemd-sysupdate, and TUF extensions like repository listing and cross-repository links, with a focus on secure, granular, autonomous updates. The piece highlights granular ownership, key escrow, and open-source tooling.