Mender
Robust, atomic over-the-air updates for embedded Linux fleets, with automatic rollback when things go wrong.
About
Mender is an open-source over-the-air (OTA) update manager for IoT and embedded Linux devices, built by Northern.tech. Its headline feature is robust, atomic updates: the new image is written to an inactive partition, the bootloader switches to it, and if the new image fails to boot or fails its health check, the device rolls back to the known-good partition. A bad update never bricks a remote device.
Beyond full root-filesystem images, Mender handles application, file, and containerized updates, plus delta updates to save bandwidth, dynamic device grouping, and phased rollouts. The client is open source (the mendersoftware/mender repo shows ~1.2k stars), and the management server has a community open-source edition alongside commercial hosted and on-prem tiers. The ecosystem includes integrations with Azure IoT Hub and AWS IoT Core, plus troubleshooting extensions: remote terminal access, port forwarding, file transfer, and device configuration. The Yocto Project integration is the natural path for custom Linux builds.
What it can do
- Atomic A/B updates with automatic rollback on failure
- Full rootfs, application, file, and containerized update types
- Delta updates to minimize bandwidth
- Dynamic grouping and phased rollouts
- Remote terminal, port forwarding, and file transfer troubleshooting
- Device configuration management and monitoring
- Azure IoT Hub and AWS IoT Core integrations
- Self-hostable open-source server or commercial hosted tiers
Setup
Install the Mender client on your Linux device (via Yocto layer, Debian package, or manual install), point it at a Mender server (self-hosted open source or hosted.mender.io), then create Artifacts and schedule deployments to device groups.
Prerequisites
An embedded Linux device with a dual-partition (A/B) layout for atomic updates; a Mender server instance; build tooling (Yocto for custom images).
Use cases
Works with
Trust score — 8/10
Scored 8/10 (metrics tier, metrics-v1). Evidence: the mendersoftware/mender README documents the A/B rollback design, artifact types, delta updates, phased rollouts, and the Azure/AWS integrations; the repo shows ~1.2k stars with active 2026 commits; the server repo confirms an open-source edition exists. Strengths: the reference open-source OTA updater for embedded Linux, rollback design is genuinely safe, self-hostable. Docked for: (1) modest community size for a critical-infrastructure tool; (2) dual-partition requirement constrains existing device designs; (3) commercial tiers gate some advanced fleet features. License: Apache-2.0 (client); server has open-source community and commercial editions.
★ 1,237 GitHub stars
How the trust score is built
Full methodology →- Adoption · stars/downloads, log-scaled vs peers
- 7.0/10
- Maintenance · recency, releases, issue load
- 8.0/10
- Openness · license + docs
- 8.0/10
- Manual review · sanity read + red-flag check
- 8.0/10
- · mendersoftware/mender ~1.2k stars, active 2026 commits
- · A/B rollback, artifacts, delta updates, phased rollouts confirmed in README
- · Azure IoT Hub + AWS IoT Core integrations confirmed
Sources
Every fact above was checked against these sources. Where a claim comes from the provider and couldn't be independently verified, the text says so.