This presentation discusses secure software management for IoT devices using bundles and software updates. It introduces the Ostro project, which provides tools and images to help OEMs/ODMs build customized IoT distributions. Ostro leverages Clear Linux's software update mechanism using bundles to deploy and update software components. The presentation outlines Ostro's disk layout and process for safely updating the EFI application through alternate partitions without disrupting the system. Future work includes consolidating Ostro's image handling and software update approach with upstream projects like OpenEmbedded.