System Update - Revision history

Thomas Perrot: Update RAUC features

2025-07-29T12:04:54Z

Update RAUC features

← Older revision		Revision as of 12:04, 29 July 2025
Line 152:		Line 152:
	\| archives full (compressed) image per build		\| archives full (compressed) image per build
	\| download and write full (compressed) image		\| download and write full (compressed) image
	\| integrated rollback (requires bootloader support)		\| integrated rollback and/or rescue (requires bootloader support)
	\| some customization required		\| some customization required
	\| reboot required		\| reboot required

Thomas Perrot at 11:56, 29 July 2025

2025-07-29T11:56:51Z

← Older revision		Revision as of 11:56, 29 July 2025
Line 157:		Line 157:
	\| X509-signed update bundles		\| X509-signed update bundles
	\| LGPL-2.1-only		\| LGPL-2.1-only
	\| HTTP(S) server		\| [https://github.com/eclipse/hawkbit hawkBit] or HTTP(S) server (for example lighttpd) or USB Stick
	\|}		\|}

Kristian Amlie: /* Comparison */

2024-06-13T12:02:40Z

Comparison

← Older revision		Revision as of 12:02, 13 June 2024
Line 122:		Line 122:
	\| HTTPS enforced, [https://docs.mender.io/artifacts/signing-and-verification signed images]		\| HTTPS enforced, [https://docs.mender.io/artifacts/signing-and-verification signed images]
	\| Apache 2.0		\| Apache 2.0
	\| [~~Hosted Mender](~~https://hosted.mender.io) or self-hosted Mender server		\| [https://hosted.mender.io/ Hosted Mender] or self-hosted Mender server
	\|-		\|-
	! [https://github.com/ostreedev/ostree OSTree]		! [https://github.com/ostreedev/ostree OSTree]

Kristian Amlie: /* Comparison */

2024-06-13T12:01:39Z

Comparison

← Older revision		Revision as of 12:01, 13 June 2024
Line 122:		Line 122:
	\| HTTPS enforced, [https://docs.mender.io/artifacts/signing-and-verification signed images]		\| HTTPS enforced, [https://docs.mender.io/artifacts/signing-and-verification signed images]
	\| Apache 2.0		\| Apache 2.0
	\| Mender ~~management~~ server		\| [Hosted Mender](https://hosted.mender.io) or self-hosted Mender server
	\|-		\|-
	! [https://github.com/ostreedev/ostree OSTree]		! [https://github.com/ostreedev/ostree OSTree]

Adrian Freihofer: /* Comparison */

2023-10-09T16:00:11Z

Comparison

← Older revision		Revision as of 16:00, 9 October 2023
Line 48:		Line 48:
	;Security		;Security
	: Compatibility with other technology, protection of the update mechanism itself.		: Compatibility with other technology, protection of the update mechanism itself.
			;License
			: License of the client running on the target device.
			;Backend
			: Back end solution for rolling out software updates.

	{\| class="wikitable"		{\| class="wikitable"
Line 63:		Line 67:
	! rowspan="2"\|Downtime		! rowspan="2"\|Downtime
	! rowspan="2"\|Security		! rowspan="2"\|Security
			! rowspan="2"\|License
			! rowspan="2"\|Backend
	\|-		\|-
	! on server		! on server
Line 81:		Line 87:
	\| minimal, reboot optional		\| minimal, reboot optional
	\| Compatible with Linux IMA, Smack, SELinux. Signed update data, HTTPS transfer protection.		\| Compatible with Linux IMA, Smack, SELinux. Signed update data, HTTPS transfer protection.
			\| GPL-2.0-or-later
			\|
	\|-		\|-
	! [https://github.com/sbabic/swupdate sbabic's swupdate]		! [https://github.com/sbabic/swupdate sbabic's swupdate]
Line 89:		Line 97:
	\| depends on setup		\| depends on setup
	\| Code relatively stable, 6 months release cycle		\| Code relatively stable, 6 months release cycle
	\| [https://github.com/sbabic/meta-swupdate meta-swupdate]		\| [https://github.com/sbabic/meta-swupdate meta-swupdate], [https://github.com/sbabic/meta-swupdate-boards meta-swupdate-boards]
	\| archives full image per build		\| archives full image per build
	\| download and write full (compressed) image, zero-copy		\| download and write full (compressed) image, zero-copy
	\| integrated rollback (requires bootloader support)		\| integrated rollback (requires bootloader support)
	\| easy to use (but ~~requires customization!?~~)		\| easy to use (but also very customizable)
	\| reboot required		\| reboot required
	\| signed and encrypted images, HTTPS		\| signed and encrypted images, HTTPS
			\| GPL-2.0-only
			\| [https://github.com/eclipse/hawkbit hawkBit], [https://github.com/siemens/wfx wfx], HTTP(S) server
	\|-		\|-
	! [https://github.com/mendersoftware Mender]		! [https://github.com/mendersoftware Mender]
Line 111:		Line 121:
	\| reboot required		\| reboot required
	\| HTTPS enforced, [https://docs.mender.io/artifacts/signing-and-verification signed images]		\| HTTPS enforced, [https://docs.mender.io/artifacts/signing-and-verification signed images]
			\| Apache 2.0
			\| Mender management server
	\|-		\|-
	! [https://github.com/ostreedev/ostree OSTree]		! [https://github.com/ostreedev/ostree OSTree]
Line 126:		Line 138:
	\| reboot required		\| reboot required
	\| GPG-signed commits		\| GPG-signed commits
			\| LGPL-2.0-or-later
			\| rpm-ostree?
	\|-		\|-
	\|-		\|-
Line 142:		Line 156:
	\| reboot required		\| reboot required
	\| X509-signed update bundles		\| X509-signed update bundles
			\| LGPL-2.1-only
			\| HTTP(S) server
	\|}		\|}

Josef Holzmayr: /* Comparison */ link mender bullet to github, to match style of other bullets

2022-01-28T21:53:13Z

Comparison: link mender bullet to github, to match style of other bullets

← Older revision		Revision as of 21:53, 28 January 2022
Line 97:		Line 97:
	\| signed and encrypted images, HTTPS		\| signed and encrypted images, HTTPS
	\|-		\|-
	! [https://~~mender~~.io/ Mender]		! [https://github.com/mendersoftware Mender]
	\| block-based / file based		\| block-based / file based
	\| [https://docs.mender.io/Devices/Partition-layout flexible (minimum four partitions)], U-Boot or GRUB as boot loader		\| [https://docs.mender.io/Devices/Partition-layout flexible (minimum four partitions)], U-Boot or GRUB as boot loader

Stefano Babic at 11:47, 4 March 2020

2020-03-04T11:47:50Z

← Older revision		Revision as of 11:47, 4 March 2020
Line 85:		Line 85:
	\| block-based / file based		\| block-based / file based
	\| flexible		\| flexible
	\| depends on setup		\| depends on setup (read-only supported)
	\| local and remote (plain HTTP(S) or custom server)		\| local and remote (plain HTTP(S) or custom server)
	\| depends on setup		\| depends on setup
	\| Code relatively stable, 3 months release cycle		\| Code relatively stable, 6 months release cycle
	\| [https://github.com/sbabic/meta-swupdate meta-swupdate]		\| [https://github.com/sbabic/meta-swupdate meta-swupdate]
	\| archives full image per build		\| archives full image per build
	\| download and write full image		\| download and write full (compressed) image, zero-copy
	\| ~~no builtin mechanism, to be added as part of system~~		\| integrated rollback (requires bootloader support)
	\| easy to use (but requires customization!?)		\| easy to use (but requires customization!?)
	\| reboot required		\| reboot required
Line 186:		Line 186:
	:* local provisioning : USB, SD, etc.		:* local provisioning : USB, SD, etc.
	:* generic URL : HTTP(S), FTP. It uses the libcurl library and supports what libcurl provides.		:* generic URL : HTTP(S), FTP. It uses the libcurl library and supports what libcurl provides.
	:* Webserver : SWUpdate integrates a Webserver (~~moongoose~~)		:* Webserver : SWUpdate integrates a Webserver (mongoose)
	:* External Backend connector (suricatta mode) to bind with an external backend server. Currently, the Hawkbit server is supported https://github.com/eclipse/hawkbit. Open to further backends.		:* External Backend connector (suricatta mode) to bind with an external backend server. Currently, the Hawkbit server is supported https://github.com/eclipse/hawkbit. Open to further backends.
			:* Custom Protocol: SWUPdate provides a library (LGPLv2.1) in case of custom protocol.
	;Updates what		;Updates what
	:		:
Line 196:		Line 197:
	;* provide interface to update FPGAs, external microcontrollers, etc.		;* provide interface to update FPGAs, external microcontrollers, etc.
	;* custom handlers: an interface allows to add own installers written in C or in LUA.		;* custom handlers: an interface allows to add own installers written in C or in LUA.
			;* system update: atomic update of network connected devices as they are just one.
	;Resources on client		;Resources on client
	:		:
Line 201:		Line 203:
	:* '''dual-copy''' : Needs active/passive rootfs partition, and bandwidth to download compressed rootfs image. No additional space is required if the image is directly streamed to the stand-by copy.		:* '''dual-copy''' : Needs active/passive rootfs partition, and bandwidth to download compressed rootfs image. No additional space is required if the image is directly streamed to the stand-by copy.
	;Failure resilience		;Failure resilience
	: ~~There are no recovery mechanism built in. If the bootloader has the capability~~ to ~~check if a boot failed~~, it ~~could boot in maintenance mode again~~.		: SWUpdate provides interface to bootloaders (U-Boot, GRUB, EFIBootGuard). Update can be marked good or bad and it starts a fallback (support from bootloader required).
	; Downtime		; Downtime
	:		:
Line 209:		Line 211:
	:		:
	:* Connection with HTTPS to the external the server.		:* Connection with HTTPS to the external the server.
	:* Signed images : it is possible to sign the images used for the update in order to check its integrity.		:* Signed images : it is possible to sign the images used for the update in order to check its integrity. X.509 cryptography (CMS) or RSA keys.
	:* Split in several processes: connection to the internet can run with a different userid / groupid as the installer. The installer runs often with high privileges because it has to write the hardware.		:* Split in several processes: connection to the internet can run with a different userid / groupid as the installer (privilege separation). The installer runs often with high privileges because it has to write the hardware.
	:* Support for encrypted artifacts		:* Support for encrypted artifacts
			:* Signing / Encryption with openSSL or MbedTLS.

Kristian Amlie: /* Comparison */

2020-02-12T08:25:03Z

Comparison

← Older revision		Revision as of 08:25, 12 February 2020
Line 100:		Line 100:
	\| block-based / file based		\| block-based / file based
	\| [https://docs.mender.io/Devices/Partition-layout flexible (minimum four partitions)], U-Boot or GRUB as boot loader		\| [https://docs.mender.io/Devices/Partition-layout flexible (minimum four partitions)], U-Boot or GRUB as boot loader
	\| ~~conceptually~~ read-only		\| supports read-write and read-only
	\| remote using Mender management server ([https://docs.mender.io/Architecture/Overview#modes-of-operation managed mode]) or local using CLI ([https://docs.mender.io/Architecture/Overview#modes-of-operation standalone mode])		\| remote using Mender management server ([https://docs.mender.io/Architecture/Overview#modes-of-operation managed mode]) or local using CLI ([https://docs.mender.io/Architecture/Overview#modes-of-operation standalone mode])
	\| Complete rootfs, including kernel (built-in). Customizable with [https://docs.mender.io/artifacts/update-modules Update Modules].		\| Complete rootfs, including kernel (built-in). Customizable with [https://docs.mender.io/artifacts/update-modules Update Modules].

Eystein Stenberg: /* Comparison */

2020-01-11T13:29:50Z

Comparison

← Older revision		Revision as of 13:29, 11 January 2020
Line 98:		Line 98:
	\|-		\|-
	! [https://mender.io/ Mender]		! [https://mender.io/ Mender]
	\| block-based		\| block-based / file based
	\| [https://docs.mender.io/Devices/Partition-layout flexible (minimum four partitions)], U-Boot or GRUB as boot loader		\| [https://docs.mender.io/Devices/Partition-layout flexible (minimum four partitions)], U-Boot or GRUB as boot loader
	\| conceptually read-only		\| conceptually read-only

Kristian Amlie: /* Mender */

2019-03-28T10:42:54Z

Mender

← Older revision		Revision as of 10:42, 28 March 2019
Line 224:		Line 224:
	: manual provisioning : local file system/URL, e.g. USB, SD, HTTP(S) ([https://docs.mender.io/architecture/overview#modes-of-operation standalone mode])		: manual provisioning : local file system/URL, e.g. USB, SD, HTTP(S) ([https://docs.mender.io/architecture/overview#modes-of-operation standalone mode])
	;Update what		;Update what
	: Built-in support for rootfs update, including kernel. Can be customized via Update Modules to update files, packages or external components.		: Built-in support for rootfs update, including kernel. Can be customized via [https://docs.mender.io/artifacts/update-modules Update Modules] to update files, packages or external components.
	;Code stability		;Code stability
	: Stable release. Upgrade path fully supported and tested.		: Stable release. Upgrade path fully supported and tested.