twisla/roro9stack
Public Access
1
0
Fork 0
Code Issues 49 Pull Requests Actions Packages Releases 16 Activity

Updates: check Gitea for new releases and install them #6

New Issue
Closed
opened 2026-10-05 09:37:58 +00:00 by twisla · 1 comment
twisla commented 2026-10-05 09:37:58 +00:00
Owner
Copy Link
Copy Source

Idea

The device checks the project's latest Gitea release, says when a newer version is out, and installs it on request. It uses the same signed Update Files and the same Probation and rollback as Wi-Fi and SD updates.

Why

This is the end of the OTA story: no computer needed at all.

What's known

  • It's blocked by #5: there are no releases to check yet.

  • GET /repos/twisla/roro9stack/releases/latest gives the tag and the asset URLs. Compare that with the running version and the version in the other slot.

  • The download is about 1.7 MB over HTTPS. Two options:

    • Stream it to /updates/ on the card, then install it with the existing Update from SD path.
    • Write it straight into the inactive slot, as UpdateService does over TCP.

    Either way, the signature is checked before anything boots it.

  • The TLS root of trust is the same as in #4. That part should be built once and shared.

  • A Debug Build should be offered the +debug image, and a release build the release image.

Questions for the design round

  1. Should it check when asked, at boot, or once a day while on Wi-Fi?
  2. Should it download to the card first (safer, and you can retry) or straight into the slot (no card needed)?
  3. Should it offer only newer versions, or also let you go back to an older release?
  4. Should it be in Settings > Firmware, or the Issues App (#4), or both?
## Idea The device checks the project's latest Gitea release, says when a newer version is out, and installs it on request. It uses the same signed Update Files and the same Probation and rollback as Wi-Fi and SD updates. ## Why This is the end of the OTA story: no computer needed at all. ## What's known - It's blocked by #5: there are no releases to check yet. - `GET /repos/twisla/roro9stack/releases/latest` gives the tag and the asset URLs. Compare that with the running version and the version in the other slot. - The download is about 1.7 MB over HTTPS. Two options: - Stream it to `/updates/` on the card, then install it with the existing Update from SD path. - Write it straight into the inactive slot, as UpdateService does over TCP. Either way, the signature is checked before anything boots it. - The TLS root of trust is the same as in #4. That part should be built once and shared. - A Debug Build should be offered the `+debug` image, and a release build the release image. ## Questions for the design round 1. Should it check when asked, at boot, or once a day while on Wi-Fi? 2. Should it download to the card first (safer, and you can retry) or straight into the slot (no card needed)? 3. Should it offer only newer versions, or also let you go back to an older release? 4. Should it be in Settings > Firmware, or the Issues App (#4), or both?
twisla added a new dependency 2026-10-05 09:37:58 +00:00
#5 CI: build, sign and publish firmware releases on Gitea
twisla added this to the R1 Releases milestone 2026-10-05 20:14:09 +00:00
twisla added
status
needs-design
 and removed
status
blocked
 labels 2026-10-06 11:51:31 +00:00
twisla commented 2026-10-06 11:51:31 +00:00
Author
Owner
Copy Link
Copy Source

No longer blocked: #5 is done. Every tag has a Gitea release with a signed roro9stack-<version>.ota, and GET /repos/twisla/roro9stack/releases/latest answers. Ready for its design round.

No longer blocked: #5 is done. Every tag has a Gitea release with a signed `roro9stack-<version>.ota`, and `GET /repos/twisla/roro9stack/releases/latest` answers. Ready for its design round.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
area/apps
Launcher and the apps in src/apps
 area/audio
Microphone, speaker, the codec, recording and playback
 area/build
PlatformIO, Docker, scripts, partitions, sdkconfig
 area/cluster
AtomS3 co-processors on Grove and the link protocol
 area/gemini
GeminiService, the Gemini App, Saved Pages
 area/gitea
The Gitea client: issues, releases, its TLS and its token
 area/gnss
GnssService, the GNSS App, Tracks
 area/ir
The infrared LED and the IR Remote
 area/irc
IrcService and the IRC App
 area/lora
The Cap LoRa-1262 radio and the mesh
 area/ota-debug
Updates, Probation, Safe Mode, Debug Console, crash reports
 area/power
Battery, PowerService, sleep
 area/scripting
Lua Apps from the SD card and their API
 area/ssh
The SSH client and its terminal
 area/storage
StorageService, the SD card, Storage page
 area/ui
Canvas, widgets, dialogs, Toasts, fonts, keyboard
 area/vpn
The WireGuard tunnel
 area/website
The project website and its docs
 area/wifi
WifiService, Wi-Fi Settings, Wi-Fi Tools
 concern/memory
May push the heap towards its floors; measure on the device
 concern/security
TLS, signing, the debug token, trust on first use
kind
bug
Something that doesn't work as it should
kind
chore
Refactors, tooling, CI, scripts
kind
docs
README, CONTEXT, milestones, ADRs
kind
feature
Something new the device can do
priority
high
Next up
priority
low
Some day
priority
medium
Soon
status
blocked
Waiting on something else
status
needs-design
Needs a question round (Qnn) before code
status
ready
Designed; can be started
No labels area/gitea area/ota-debug concern/security
kind
feature
priority
low
status
needs-design
Milestone
No items
No Milestone R1 Releases
Assignees
Clear assignees
twisla (Clément Martin)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Depends on
#5 CI: build, sign and publish firmware releases on Gitea
twisla/roro9stack
Reference: twisla/roro9stack#6