ALPON X4 OS
Learn about supported operating systems and configuration for the ALPON X4. Set up your system for reliable edge deployment.
ALPON X4 OS
ALPON X4 ships with a pre-installed, Sixfab-maintained 64-bit Debian image tuned for the Raspberry Pi CM4 and the integrated LTE Cat 4 cellular stack. This reference covers what's included in the image, how to access the device on first boot, and how to keep it up to date in production. Built on Raspberry Pi.
ALPON X4 runs ALPON X4 OS, a Sixfab-maintained 64-bit Debian image based on Raspberry Pi OS Lite (Debian Bookworm) for the Raspberry Pi CM4. The image is factory-flashed and includes Docker and Docker Compose, the Sixfab Connect agent for remote management through ALPON Cloud at connect.sixfab.com, and the LTE Cat 4 and Wi-Fi 5 connectivity stack. Applications target arm64.
Overview
ALPON X4 OS is a minimal Debian image maintained by Sixfab. It builds on Raspberry Pi OS Lite and uses the apt package manager. This guide covers initial user access, local Wi-Fi configuration, and package updates; it is not a complete deployment-hardening policy. Review your application's permissions, network exposure, and update process before production use.
What's pre-installed
The factory image includes the following components. Register and activate the device in ALPON Cloud before using cloud-managed services:
- Sixfab Connect agent for ALPON Cloud fleet management and the browser-based remote terminal.
- Docker & Docker Compose pre-installed and enabled, ready for container deployments through ALPON Cloud or your own tooling.
- ModemManager & NetworkManager with the LTE Cat 4 cellular and dual-band Wi-Fi 5 stack pre-configured.
- OpenSSH server for local and remote shell access on port 22.
-
mDNS / Avahi so the device is reachable as
alpon-<MAC>.localon the local network. - VPN client for the tunnel to ALPON Cloud services; application traffic is not necessarily routed through that tunnel.
- Hardware watchdog for reset on loss of its required heartbeat while enabled. Use one heartbeat owner: do not run a watchdog daemon and application heartbeat simultaneously. See DIP switches & watchdog for timing and polarity.
Unlike a stock Raspberry Pi OS install, ALPON X4 OS ships with Docker and Docker Compose pre-installed. You can deploy containers immediately with your own tooling, or use Deploy Applications on ALPON Cloud, which orchestrates the container layer for you across the entire fleet.
Uninstalling the Sixfab Connect agent, the cellular modem services, or the alpon system user will break remote management and OTA updates. Install and remove your own packages freely, but leave the Sixfab-maintained components in place.
Architecture compatibility
ALPON X4 runs on a 64-bit ARM architecture (arm64 / aarch64). All custom binaries, container images, and third-party packages must target arm64. x86 / amd64 binaries are not supported.
Prefer multi-arch images, or pin the platform explicitly: docker pull --platform linux/arm64 <image>. Most official images on Docker Hub publish arm64 variants.
First boot & setup
On boot, the device starts its networking and system services. Complete registration and activation in the Quickstart, then verify ALPON Cloud connectivity before using the remote terminal. Boot and provisioning duration vary with network conditions.
Default credentials
Every ALPON X4 ships with a factory-configured system user. Use these credentials for initial login only, then change the password before deploying to production.
Default username
alponDefault password
sixfabThe default alpon / sixfab pair is shared across devices. Change the password before connecting to any untrusted network, even if you also create a separate admin user. Do not delete the alpon account: the Sixfab Connect agent and other system services use it.
Device hostname
Each ALPON X4 has a unique hostname derived from its primary MAC address:
The MAC address is printed on the device label. From an existing shell, run hostname to see the exact hostname. If mDNS is available on your LAN, append .local to that hostname; otherwise use the device's IP address.
Set up user access
Register and activate the device in ALPON Cloud
For remote access, register the device to your ALPON Cloud account, connect power and networking, then activate the asset. Complete the ALPON X4 Quickstart if you have not done so. Local HDMI console access does not require cloud access.
Open a shell on the device
Pick an access method. The remote terminal requires an active, connected asset; use a local console when cloud access is unavailable.
Remote terminal
Open ALPON Cloud, select the connected device, and click Open Remote Terminal. No direct LAN connection from your computer is needed.
SSH over LAN
If the device is on your local network, connect over mDNS using alpon-<MAC>.local (see Step 5).
HDMI + keyboard
Attach an HDMI display and a USB keyboard to the device for a local console login.
Change the default alpon password
Run passwd on the device shell. You will be asked for the current password (sixfab), then prompted for the new password twice.
# 1. Change the password for the current user (alpon) passwd
Do not delete the alpon account — the Sixfab Connect agent and system services depend on it.
Create a separate admin user Recommended
For production fleets, create a dedicated admin account alongside the alpon service user, and add it to the sudo group:
# 1. Create the new user (you will be prompted for a password) sudo useradd -m -s /bin/bash <username> sudo passwd <username> # 2. Grant sudo (administrative) privileges sudo usermod -aG sudo <username>
Replace <username> with your chosen account name (for example, ops).
Connect via SSH
Once the user exists, connect from any machine on the same network using mDNS, or fall back to the device IP:
# 1. Connect by hostname (mDNS) ssh <username>@alpon-<MAC>.local # 2. Or by IP address ssh <username>@<DEVICE_IP>
alpon for the default account.
alpon-<MAC>.local — the MAC address is printed on the device label.
22 (default SSH).
If your network blocks mDNS, use the IP address directly. Find it in your router's DHCP lease list or run ip -br address from an existing device shell.
Connect a local display Optional
Plug an HDMI display and a USB keyboard into the device to log in locally. The HDMI 2.0 port supports up to 4Kp30 output. Connect the display before powering on.
Local configuration
Two device-local tasks that are not part of cloud onboarding: joining a Wi-Fi network as a client, and driving the programmable RGB LED.
Connect to local Wi-Fi
ALPON X4 OS uses NetworkManager and its nmcli client, also used in the ALPON Wi-Fi hotspot tutorial. The procedure below joins an existing personal Wi-Fi network; it does not create a hotspot or configure an enterprise EAP network.
- With the device unpowered, attach the Wi-Fi antenna to the
WRP-SMA connector. Power on using one supported input. - Open a local console or an existing Ethernet-connected shell. Keep that access available: changing Wi-Fi can interrupt a remote session, and connecting as a client replaces any hotspot using the same radio.
- List interfaces and nearby networks, then connect using the commands below. Replace
<WIFI_INTERFACE>with the interface whose TYPE iswifiin the first command, andYOUR_SSIDwith your network name. Enter the Wi-Fi password at the prompt, not in the command line.
nmcli device status sudo nmcli radio wifi on nmcli device wifi list ifname <WIFI_INTERFACE> sudo nmcli --ask device wifi connect "YOUR_SSID" ifname <WIFI_INTERFACE> nmcli device show <WIFI_INTERFACE> nmcli connection show --active
Confirm the Wi-Fi interface is connected and has an IP address. Keep Ethernet connected until you can reach the device over the Wi-Fi address from the same network. A Wi-Fi association does not by itself prove internet or ALPON Cloud access; verify the cloud status separately. If no Wi-Fi interface appears, or the network needs enterprise authentication or a captive portal, consult your network administrator and the NetworkManager reference rather than changing cloud or service settings speculatively.
Hardware-controlled peripherals
The programmable RGB LED is controlled through an I²C GPIO expander, not direct CM4 GPIO outputs. Use the documented interface in Physical Layout & I/O. Confirm the hardware revision and supported control method before writing to the expander.
System updates
ALPON X4 OS uses standard Debian package tooling. Apply security patches with apt, and manage deployed applications separately through Deploy Applications on ALPON Cloud.
Update ALPON X4 OS
Refresh the package index and apply available upgrades:
# 1. Refresh package lists sudo apt update # 2. Apply available upgrades sudo apt upgrade -y # 3. Reboot if a kernel or firmware package was upgraded sudo reboot
When updating a fleet, apply an update to a representative device first and verify your workload and ALPON Cloud connectivity before proceeding. This reduces exposure to regressions; it does not guarantee an upgrade will be compatible.
Update deployed applications
Application updates are independent of OS updates. Pick the path that matches how the application was deployed:
Containers via ALPON Cloud
Follow Deploy Applications to update cloud-managed containers. Verify the new version on a representative device before a wider rollout.
Containers via local Docker
Docker is pre-installed on ALPON X4 OS. Pull a new tag and recreate the container with your tooling, for example docker pull followed by docker compose up -d.
Individual system packages
Upgrade a single package without touching others: sudo apt install --only-upgrade <package>.
Firmware and modem updates
Use apt for installed package updates. For modem firmware or device-specific recovery, obtain the procedure for your hardware revision from Sixfab support; do not assume an OS package upgrade also updates every firmware component.
apt autoremove on Sixfab packages
If autoremove lists sixfab-*, modemmanager, or docker-* as removable, cancel the operation. Removing these packages disconnects the device from ALPON Cloud and breaks deployed applications.
Quick command reference
Common ALPON X4 OS administration commands. Run them in a device shell over SSH, the local console, or ALPON Cloud's remote terminal.
passwd
sudo useradd -m -s /bin/bash <username>
sudo passwd <username>
sudo usermod -aG sudo <username>
sudo apt update
sudo apt upgrade -y
sudo apt install --reinstall <package>
sudo reboot
docker ps
mmcli -L
journalctl -xe
OS image & recovery
The ALPON X4 OS image is pre-installed at the factory and is not distributed as a public download. Shipping the OS on the device avoids the hardware-specific edge cases that come with end-user flashing of an industrial edge computer image.
If you believe your device needs to be re-flashed (for example, after a failed upgrade or a recovery-blocking misconfiguration), contact Sixfab support. Support will confirm whether a re-flash is actually needed and provide the recovery procedure for your device's serial.
Many "broken OS" symptoms are recoverable from a working shell:
- Try the ALPON Cloud remote terminal if the device remains connected to the cloud, even when local SSH access is unavailable. An active cellular link alone does not prove the agent or cloud service is reachable.
- If a recent upgrade broke something, run
journalctl -xefor diagnostics, thensudo apt install --reinstall <package>on the offending package.
Need to recover the OS? Contact Sixfab support.
Have your device serial number ready. Support will verify the fault and walk you through the recovery procedure for your hardware revision.
Updated 8 days ago
