Board-level Linux integration, U-Boot, device trees, kernel drivers and peripheral bring-up. Separate power and hardware checks from software adaptation, and define a recoverable boot path.
Route OTA and local service requests through one admission owner, and keep ownership until the actual installation outcome is reconciled. A client timeout, expired management lease or closed technician window does not establish that the installer has stopped. Letting a second actor take over on that assumption creates ambiguous writes and misleading completion reports. The…
Diagnose the file-access failure before changing the bundle or its permissions. A local bundle can have the expected signature yet still be unsafe to consume if another actor can change its contents. For removable-media updates, qualify where the installer reads the file, who can write it, and which operation is failing. This guide is pinned…
Partition recipients into bounded subsets, then distribute the correct recipient-specific bundle while reusing the same encrypted payload. The release system needs separate identities for payload content, recipient membership and the complete downloadable object. Treating all three as one filename makes both size budgeting and delivery errors harder to detect. This article uses RAUC 1.13 crypt…
Put an update into a visible thermal hold when the required operating conditions are not established. Release that hold only after fresh, correctly mapped temperature evidence satisfies the product’s qualified recovery rule. Bound the waiting period so an installation cannot cycle forever between “retrying” and “too hot.” This article defines an original updater eligibility state…
Use separate power gates for acquiring an update and entering the stage that must finish without a safe pause. A device may have enough reserve to download a bounded chunk while lacking the qualified reserve for image programming, boot-state changes and recovery. Recheck immediately before that critical stage; an earlier battery reading is not a…
RAUC adaptive updates can reuse matching local blocks while retaining the complete image in the bundle. Qualify this as an optional transfer optimization, including the cost of building missing indexes and the possibility of a full-copy fallback. It is not a delta that can only reconstruct one specific predecessor image. This guide is pinned to…
A RAUC install-check hook takes responsibility for compatibility acceptance. It does not simply add another condition after the ordinary compatible-string check. If the hook returns success without enforcing the required compatibility policy, a guard that the product previously relied on can disappear. This guide is pinned to RAUC v1.14 source and documentation. It qualifies a…
Design explainable, versioned crash fingerprints while preserving failed-build boundaries, uncertain reports, and separate artifact and incident counts.
Map early-boot evidence milestones, distinguish backend registration from mounting, and expose gaps that pstore cannot cover retrospectively.
Turn Linux 6.12 max_reason and always_kmsg_dump behavior into an event matrix that distinguishes panic, Oops, emergency restart, and shutdown.