Updates: install new releases automatically, without asking #52

New Issue

2026-10-06T13:08:26Z

twisla commented

2026-10-06 13:08:26 +00:00

Idea

An option for the device to install a newer release by itself, at night or when idle, instead of announcing it and waiting (#6, Q173).

Why

The first version only announces an update and installs on request. For a device that sits on a desk, "always on the latest" may be what's wanted.

What's known

Probation and rollback already protect a bad image: a release that doesn't hold for 30 s with Wi-Fi up goes back by itself, and #6 doesn't re-announce a version that rolled back.
It must never restart the device while something is being typed, recorded or written: a Track, a Capture, a Note with unsaved changes, a copy in the Storage App, an open IRC session the user is in.
It changes what runs on the device without anyone looking. That wants an explicit setting, off by default, and a record of what was installed and when.

Questions

When is it safe to restart: idle for how long, screen off, nothing recording?
Only patch releases, or any newer one?
A delay after a release is published, to give time to pull a bad one?

## Idea An option for the device to install a newer release by itself, at night or when idle, instead of announcing it and waiting (#6, Q173). ## Why The first version only announces an update and installs on request. For a device that sits on a desk, "always on the latest" may be what's wanted. ## What's known - Probation and rollback already protect a bad image: a release that doesn't hold for 30 s with Wi-Fi up goes back by itself, and #6 doesn't re-announce a version that rolled back. - It must never restart the device while something is being typed, recorded or written: a Track, a Capture, a Note with unsaved changes, a copy in the Storage App, an open IRC session the user is in. - It changes what runs on the device without anyone looking. That wants an explicit setting, off by default, and a record of what was installed and when. ## Questions 1. When is it safe to restart: idle for how long, screen off, nothing recording? 2. Only patch releases, or any newer one? 3. A delay after a release is published, to give time to pull a bad one? ## Related `docs/milestones/R1.md` (Q165, Q173), #6, `docs/milestones/OTA.md`.

twisla added this to the R1 Releases milestone 2026-10-06 13:08:26 +00:00

twisla added the

concern/security area/gitea labels 2026-10-06 13:08:26 +00:00

twisla referenced this issue

2026-10-06 14:18:20 +00:00