Rollouts

A rollout distributes a clone image to a set of clients on a schedule. Use it to install a baseline on new devices, push updates to already-provisioned clients, roll out in waves (pilot group first, production after) or roll back to an older version.

Overview

The Rollouts menu lists all running, scheduled and completed rollouts in a table — with status, name, target (group or client list), image version, method, progress (X / Y clients done) and start time. Clicking a row opens the detail page.

Rollout overview
The rollout overview with a running deployment and per-client status.

Creating a rollout

Use "+ New rollout" at the top right. The dialog walks you through four steps:

  1. Basics — name (e.g. 2026-04-15 security patch Branch North) and description.
  2. Target — a group (only its directly assigned clients) or a freely picked client list.
  3. Image + method — choose a clone from the version tree and pick the distribution method.
  4. Schedule — start now, schedule for a date/time (e.g. 23:00), or save as a draft and start later by hand.
Wake-on-LAN: Available only for a scheduled rollout — the target devices are then powered on automatically 1–60 minutes before the start via a magic packet (PXE boot required). Without a set time the WoL option is unavailable.
New rollout dialog
The "New rollout" dialog: target (group, multiple groups or individual clients), clone, distribution method, post-deploy action and schedule.

Distribution methods

  • Unicast — each client downloads directly from the server. Simple and always available; with more than around 50 clients on the same LAN the server uplink becomes the bottleneck.
  • Multicast — the server streams the image once and all clients receive it in parallel. Ideal for large rollouts in the same subnet, but LAN only.
  • BitTorrent — clients share bandwidth among themselves. Good for many clients on the same LAN. Only one BitTorrent rollout runs at a time.
UnicastMulticastBitTorrent
NetworkLAN onlyLAN onlyLAN only
Scale~50 clientshundredshundreds
Parallel rolloutsyesyes (per subnet)no
Missing clientsno problemmust boot at the right momentcan join later

Delta updates

While the three distribution methods roll out full clone images on the LAN, the Updates tab distributes only the differences between two versions. The update chain shows the deltas from version to version, long chains can be combined into a merge, and the assignments decide which groups or clients receive a delta. Delta updates are the only update path that also works over the VPN — so devices in home offices or branch sites receive changes as a delta rather than a full re-clone.

Delta updates
Delta updates over the VPN: the update chain between versions, mergeable merges and the assignment to groups or clients.

Detail page and actions

The detail page shows status and progress, every client with its own status (pending, deploying, done, failed, cancelled), the live logs for the rollout and a timeline of events. From the header bar you control the rollout:

  • Cancel — ends the rollout. Clients already deployed stay on the new version; running installations are interrupted (manual reboot recommended).
  • Rollback — sends all clients already updated by this rollout back to the previous version and creates a reverse rollout for that.
Rollback tab
The Rollback area lists performed rollbacks with target version and progress.

Progress and troubleshooting

  • Clients stuck deploying → most likely a network issue (a firewall blocking the download or a service unreachable). Check the services on the Dashboard and the Tasks & Logs.
  • Failed clients → a click on the client opens its history with the error message (commonly: disk too small, wrong partition table). Fix it and re-roll the client via a single-client rollout.
  • Reach only a subset → choose a client list instead of a group, or create a temporary wave group.
Note: The three distribution methods distribute full clone images and run only on the local network (LAN). Over VPN, only delta updates are supported — clients in home office / branch sites receive changes as a delta, not as a full re-clone.