Re: [RAUC] Bootloader updates

2017-05-18 Thread Jan Lübbe
our system boots from an eMMC, you can usually also make the bootloader update atomic (but not with fallback) by using the special boot partitions. Regards, Jan Lübbe -- Pengutronix e.K. | | Industrial Linux Solutions | http://ww

Re: [RAUC] Partition resize

2017-08-02 Thread Jan Lübbe
Hi Caglar, On Wed, 2017-08-02 at 11:53 +, Kilimci, Caglar wrote: > I have a question or a missing point. After the successful update, my > partition size is reduced. If I extend it, it would be as expected. > Like this: > > Before update: > root@phyboard-regor-am335x-1:~# df -h > Filesystem  

Re: [RAUC] [casync] delta update

2018-02-19 Thread Jan Lübbe
Hi, On Mon, 2018-02-19 at 12:38 +0100, David GARRIOU wrote: > I just have a look to Fosdem talk by Enrico. > My question deals with casync. > According to the tallk, it seems to already be implemented in the > last release of Rauc, but I did not see this information in the > documentation. > Can y

Re: [RAUC] [PATCH] config_file: bootchooser: add barebox-statename parameter

2018-03-13 Thread Jan Lübbe
Hi Andreas, On Sun, 2018-03-11 at 17:00 +0100, Andreas Schmidt wrote: > Name of the barebox boot state can be set by user in bootchooser > framework. barebox-state application has -n parameter to change > boot state name. This patch add possibility to change barebox boot > state name over rauc con

Re: [RAUC] [PATCH] src/mark: fix double freeing

2018-03-13 Thread Jan Lübbe
On Mon, 2018-03-12 at 20:28 +0100, Andreas Schmidt wrote: > While calling `rauc status mark-xxx ` rauc crashs, > because of double freeing of GError struct. This patch fix this. > > Signed-off-by: Andreas Schmidt > --- >  src/mark.c | 1 - >  1 file changed, 1 deletion(-) > > diff --git a/src/mar

Re: [RAUC] [PATCH v2 0/2] Add barebox-statename parameter

2018-03-16 Thread Jan Lübbe
Hi Andreas, On Thu, 2018-03-15 at 20:13 +0100, Andreas Schmidt wrote: > Hi Jan, > thanks for comments. I' afraid my English not good enough for > documentation. > My colleague made the documentation patch additionally to already > send source code patch. Thanks! I've applied your patches: https:

Re: [RAUC] RAUC bundle encryption, design question

2018-08-21 Thread Jan Lübbe
Hi Evan, thanks for starting this discussion! On Mon, 2018-08-20 at 11:39 -0700, Evan Edstrom wrote: > I am using RAUC for a commercial product, and one of the things we > need to accomplish is to encrypt our update bundles. I've manually > created an encrypted rauc bundle using a LUKS container.

Re: [RAUC] RAUC bundle encryption, design question

2018-08-23 Thread Jan Lübbe
On Wed, 2018-08-22 at 13:27 -0700, Evan Edstrom wrote: > On Tue, Aug 21, 2018 at 1:03 AM, Jan Lübbe wrote: > > On Mon, 2018-08-20 at 11:39 -0700, Evan Edstrom wrote: > > > I am using RAUC for a commercial product, and one of the things we > > > need to accomplish is to

Re: [RAUC] U-Boot Offset for RAW Image on Slot Update

2019-04-23 Thread Jan Lübbe
On Tue, 2019-04-23 at 09:38 +0200, Steffen Kothe wrote: > RAUC handles the eMMC correctly, so I think, I just have to modify > the > offset address properly. If I do the update manually with "dd" , > following command line is used > > dd if=u-boot.imx of=/dev/mmcblk3boot0 bs=512 seek=2 > > If yo

Re: [RAUC] rauc with a remote signing service

2020-01-20 Thread Jan Lübbe
hing? As long as your crypto appliance supports PKCS#11, it should work: https://rauc.readthedocs.io/en/latest/advanced.html#pkcs-11-support Regards, Jan Lübbe -- Pengutronix e.K. | Dipl.-Inform. Jan Lübbe | Steuerwalder Str. 21| https://www.pengu

Re: [RAUC] problems verifying a bundle

2020-04-28 Thread Jan Lübbe
Hi, On Tue, 2020-04-28 at 19:55 +0200, Diego González wrote: > Hello, > > I am having issues when I try to verify a bundle downloaded on the > device. I am using rauc 1.3 through the meta-rauc for Yocto. We added support for certificate key usage/purpose in 1.3. Is this a regression compared to

Re: [RAUC] Backwards/forwards compatibility of bundle format

2020-06-04 Thread Jan Lübbe
Hi, On Thu, 2020-06-04 at 15:02 -0400, Matt Campbell wrote: > I'm looking into RAUC for a product, and I was wondering if there are > any project goals around the stability of the RAUC bundle format. > Specifically, it would be great if all future versions of the rauc > binary was compatible will

Re: [RAUC] boot-mbr-switch from u-boot

2020-11-26 Thread Jan Lübbe
On Thu, 2020-11-26 at 12:18 +, Martin Hollingsworth wrote: > Hello Michael, > thanks for the quick response. > > > How do you tell Linux, what is contained in the FPGA firmware? Linux should > > not make any assumptions about the loaded FPGA firmware. > > Through dtb entries the FPGA IP cores

Re: [RAUC] Robust u-boot environment with RAUC

2021-03-25 Thread Jan Lübbe
Hi, On Thu, 2021-03-25 at 15:22 +, Einar Vading wrote: > We have a Raspberry Pi 4 system set up using RAUC for updates and u-boot for > booting. For some systems in the field we have the u-boot environment on the > FAT boot partition and we mount that in fstab so that RAUC can access it with >

Re: [RAUC] [NEWSLETTER]Re: Robust u-boot environment with RAUC

2021-03-26 Thread Jan Lübbe
Hi, On Fri, 2021-03-26 at 05:48 +, Einar Vading wrote: > > > Hi, > > > > > > On Thu, 2021-03-25 at 15:22 +, Einar Vading wrote: > > > > We have a Raspberry Pi 4 system set up using RAUC for updates and u-boot > > > > for > > > > booting. For some systems in the field we have the u-boot en

Re: [RAUC] Create bundles from command line outside of yocto?

2021-05-24 Thread Jan Lübbe
On Mon, 2021-05-24 at 22:54 -0400, Brian Hutchinson wrote: Hi, I've been looking at Leon Anavi's RAUC Rpi4 example.  He's got his own meta-rauc layer where bundles are created in Yocto recipe ... but I need to create bundles with command line outside of Yocto system. I've basically got tar files

Re: [RAUC] Stumped, have a appfs partition that is encrypted, how to get RAUC to update it

2021-07-22 Thread Jan Lübbe
On Thu, 2021-07-22 at 08:11 -0400, Brian Hutchinson wrote: > Hello again, Hi! > I'm wanting to have a rootfs that is read-only SquashFS and a appfs that is > encrypted. I assume you want to have a A/B appfs. How do you encrypt your appfs? dm-crypt or fscrypt? > And I'm kind of stumped.  I've s

Re: [RAUC] Stumped, have a appfs partition that is encrypted, how to get RAUC to update it

2021-07-23 Thread Jan Lübbe
Hi Brian, On Thu, 2021-07-22 at 08:55 -0400, Brian Hutchinson wrote: > Hi Jan, > > On Thu, Jul 22, 2021 at 8:16 AM Jan Lübbe wrote: > > On Thu, 2021-07-22 at 08:11 -0400, Brian Hutchinson wrote: > > > I'm wanting to have a rootfs that is read-only SquashFS and a

Re: [RAUC] Stumped, have a appfs partition that is encrypted, how to get RAUC to update it

2021-07-30 Thread Jan Lübbe
Hi Brian, On Fri, 2021-07-30 at 10:20 -0400, Brian Hutchinson wrote: > > 100% Installing failed. > > LastError: Installation error: Failed updating slot appfs.1: failed to run > > mkfs.ext4: Child process exited with code 1 > > Installing `/tmp/./update-myboard.raucb` failed > > > > But yet I can

Re: [RAUC] Stumped, have a appfs partition that is encrypted, how to get RAUC to update it

2021-08-02 Thread Jan Lübbe
On Mon, 2021-08-02 at 11:22 -0400, Brian Hutchinson wrote: > Hi Jan, > > Yes!  Thanks. Good. :) > Now my problem is I have a very small 32M NOR flash and I have a 11M SquashFS > rootfs based off core-image-minimal.  I added packagegroup-luks and it blew > size > up to 47M.  I then just tried to

Re: [RAUC] Buildroot + RAUC Example

2022-01-25 Thread Jan Lübbe
Hi Charles, On Sat, 2022-01-22 at 07:23 -0600, Charles Steinkuehler wrote: > I have created a "works out of the box" example integrating RAUC with > Buildroot to create a baseline system targeting the RPi 4 / cm4io that > supports: > > * U-Boot bootloader with redundant environment storage > *

Re: [RAUC] RAUC update systems with release keys

2022-03-14 Thread Jan Lübbe
Hi Reyhaneh, On Mon, 2022-03-14 at 08:08 +, Yazdani, Reyhaneh wrote: > Hello, >   > Currently we have some devices which are programmed with development keys in > the past. > Now, we need to use them as final devices with bundle signed with release > keys. > I copied cert file manually to the

Re: [RAUC] RAUC update systems with release keys

2022-03-14 Thread Jan Lübbe
On Mon, 2022-03-14 at 09:40 +, Yazdani, Reyhaneh wrote: > Hi Jan, > > Thanks for quick response. > > > -Ursprüngliche Nachricht- > > Von: Jan Lübbe > > Gesendet: Montag, 14. März 2022 09:39 > > An: Yazdani, Reyhaneh ; rauc@pengutronix.de > &g

Re: [RAUC] resign a bundle with new intermediate certificate

2022-03-16 Thread Jan Lübbe
Hi, On Wed, 2022-03-16 at 08:36 +, Yazdani, Reyhaneh wrote: > Hello, >   > I have a bundle, which is signed with keys in the past. > Now, I have new keys, which are created with a new ica-certificate. When I > want to resign the bundle with new keys, I face this error: >   > Failed to resign b

Re: [RAUC] pass PEM passphrase in Yocto build

2022-03-18 Thread Jan Lübbe
Hi, On Fri, 2022-03-18 at 10:32 +, Yazdani, Reyhaneh wrote: > Hi everyone, >   > I am getting the below error when I was building the bundle by Yocto with > encrypted Root CA and ICA certificate. > … > | 139843920926528:error:0906406D:PEM routines:PEM_def_callback:problems > getting password:

Re: [RAUC] pass PEM passphrase in Yocto build

2022-03-18 Thread Jan Lübbe
Hi Reyhaneh, On Fri, 2022-03-18 at 11:03 +, Yazdani, Reyhaneh wrote: > > Yes. So far, nobody has implemented support for passing a private key > > password to RAUC, as the security benefits are minimal compared to the > > effort. > [Reyhaneh] I asked here, since I wanted to be sure nothing has

Re: [RAUC] Non reduntant bootloader update

2023-01-03 Thread Jan Lübbe
Hi, On Tue, 2023-01-03 at 09:31 +0100, Ahmad Fatoum wrote: > Hello Bernd, > > On 03.01.23 09:17, BAUER Bernd wrote: > > Hi! > > > > I have an IMX8MN system and want to use RAUC to update the bootloader. > > The BL is on the EMMC (no partition) and is not redundant. > > Why would you not place i

Re: [RAUC] Non reduntant bootloader update

2023-01-03 Thread Jan Lübbe
Hi again, On Tue, 2023-01-03 at 10:39 +0100, Jan Lübbe wrote: > Hi, > > On Tue, 2023-01-03 at 09:31 +0100, Ahmad Fatoum wrote: > > Hello Bernd, > > > > On 03.01.23 09:17, BAUER Bernd wrote: > > > Hi! > > > > > > I have an IMX8MN system an

Re: [RAUC] Future update method tree-rsync-checksum

2023-04-12 Thread Jan Lübbe
nix.de). Alternatively, we'd of course also take a PR adding support for these from the community. Best regards, Jan Lübbe [1] https://github.com/WayneD/rsync/discussions/423 -- Pengutronix e.K. | | Steuerwalder Str. 21