Skip to content

dbus: rauc: replace tacd-based update polling with native update polling#90

Merged
hnez merged 34 commits into
linux-automation:mainfrom
hnez:rauc-polling
May 19, 2026
Merged

dbus: rauc: replace tacd-based update polling with native update polling#90
hnez merged 34 commits into
linux-automation:mainfrom
hnez:rauc-polling

Conversation

@hnez

@hnez hnez commented Apr 2, 2025 •
edited
Loading

Copy link
Copy Markdown
Member

This uses the native RAUC update polling support introduced in rauc/rauc#1672 to replace the tacd-internal update polling.

Among the various benefits of this approach are the following:

  • ETag-based check for changed bundles on the server. This means unchanged bundles do not have to be inspect on every poll.
  • Automatic installation and boot into new bundles.

Other PRs related to this one:

TODO before un-drafting:

  • Write proper commit messages

@hnez hnez marked this pull request as ready for review April 3, 2025 07:19
@hnez hnez requested a review from jluebbe April 3, 2025 07:22
@hnez

hnez commented Apr 3, 2025

Copy link
Copy Markdown
Member Author

Hi @jluebbe,

I'd suggest you go first and review the polling integration first and maybe in a next step we ask @KarlK90 to have a look from a Rust point of view?

This was referenced Apr 3, 2025
Open
Merged
@jluebbe

jluebbe commented May 13, 2025

Copy link
Copy Markdown
Member

I've created a RAUC feature request to support service config reloading: rauc/rauc#1709

jluebbe
jluebbe requested changes May 13, 2025
View reviewed changes
Comment thread src/dbus/rauc/system_conf.rs Outdated
Comment thread src/dbus/rauc/system_conf.rs Outdated
Comment thread src/dbus/rauc/system_conf.rs Outdated
@hnez

hnez commented Feb 20, 2026

Copy link
Copy Markdown
Member Author

I have decided to base this PR on #105 so I do not have to worry about conflicting changes too much.
Since that PR is a draft - because it is currently untested - I will also mark this PR as draft until I had a chance to change that.

@hnez hnez marked this pull request as draft February 20, 2026 12:18
hnez
hnez commented Feb 20, 2026
View reviewed changes
Comment thread src/dbus/rauc.rs
@hnez hnez force-pushed the rauc-polling branch 3 times, most recently from 989ed7d to e3e26fc Compare February 24, 2026 09:36
@hnez hnez marked this pull request as ready for review February 24, 2026 09:36
@hnez

hnez commented Feb 24, 2026

Copy link
Copy Markdown
Member Author

I think we could review and merge this and carry the RAUC changes as patches in meta-lxatac for a bit, until we are sure that we like the API and how it works in RAUC.
What do you think @jluebbe?

@hnez

hnez commented Mar 5, 2026

Copy link
Copy Markdown
Member Author

We need to get this reviewed. Who could do that? @jluebbe for the RAUC integration and @KarlK90 for the rest?

jluebbe
jluebbe previously requested changes Mar 23, 2026
View reviewed changes
Comment thread src/dbus/rauc.rs Outdated
Comment thread src/dbus/rauc/update_channels.rs
}

#[cfg(not(feature = "demo_mode"))]
pub(super) fn update_from_poll_status(&mut self, poll_status: zvariant::Dict) -> Result<bool> {

@jluebbe jluebbe Mar 23, 2026

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This would benefit from some documentation. How do we find the channel to update from the RAUC status information?

@hnez hnez Mar 23, 2026

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I will add some text.

@hnez hnez Apr 8, 2026

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Added some text

Comment thread src/dbus/rauc/system_conf.rs Outdated
Comment thread src/dbus/rauc/system_conf.rs Outdated
hnez
hnez commented Mar 23, 2026
View reviewed changes
Comment thread src/dbus/rauc/system_conf.rs Outdated
hnez
hnez commented Mar 23, 2026
View reviewed changes
Comment thread src/inhibit.rs Outdated
hnez
hnez commented Mar 24, 2026
View reviewed changes
Comment thread src/dbus/rauc/update_channels.rs Outdated
@hnez hnez force-pushed the rauc-polling branch 2 times, most recently from d9272db to adb2b67 Compare April 8, 2026 14:14
hnez added 25 commits May 11, 2026 09:44
@hnez
dbus: rauc: system_conf: write runtime RAUC config with polling section
e617873 
This configures RAUC to poll for updates on our behalf.
We do not use the information yet or enable automatic installation but
those are next steps.
We also need to trigger RAUC to re-read the file for this to be useful.
All of these features are added in follow-up commits.

Signed-off-by: Leonard Göhrs <l.goehrs@pengutronix.de>
@hnez
dbus: systemd: make the Service struct remember the unit name
ab46488 
We will need that in the future to implement cleaner service restarts.

Signed-off-by: Leonard Göhrs <l.goehrs@pengutronix.de>
@hnez
dbus: rauc: reload rauc daemon when required
4a03845 
This triggers RAUC systemd service reload or restart (currently RAUC does
not support reloads, so it will be a restart) and waits for the result.

Signed-off-by: Leonard Göhrs <l.goehrs@pengutronix.de>
@hnez
dbus: rauc: trigger a single poll for updates after reloading the daemon
e3cbaf0 
Signed-off-by: Leonard Göhrs <l.goehrs@pengutronix.de>
@hnez
dbus: rauc: forward poller status to broker
f6fb4e3 
RAUC native polling provides us with information about the recent poll
attempts. This includes information about the bundle version and wether
it is an update over what is currently running on the device.

In other words: it gives us everything we need to show update
notifications again. Forward this information to the same places we used
with the tacd-based update polling.

Signed-off-by: Leonard Göhrs <l.goehrs@pengutronix.de>
@hnez
dbus: rauc: add manifest_hash und effective_url to UpstreamBundle
de38d6f 
The RAUC native polling interface provides more information than
just the basic `compatible` and `version` fields.
Among these extra informations are the following:

  - `manifest_hash`

    By using the `manifest_hash` in the `InstallBundle` call we can
    (cryptographically) ensure that the exact bundle (content) that the
    user agreed to install is actually being installed and that no switch
    has happened in between.

  - `effective_url`

    This is the bundle URL after all HTTP redirects have been followed.
    This is e.g. relevant when a "clever" update server is used that
    redirects poll requests to specific bundles to e.g. implement staged
    rollouts or prevents updates from incompatible bundle versions.

    By using this one can ensure that the bundle URL used matches
    the `manifest_hash` provided and that the redirects did not change
    (e.g. because the next step in a staged update was reached)
    between the last poll and the user accepting an update.

The update dialog on the LCD is updated to use this mechanism now,
while the web interface will be updated later.

Signed-off-by: Leonard Göhrs <l.goehrs@pengutronix.de>
@hnez
dbus: rauc: add support for enabling the auto install feature
9d87e12 
Automatic installation and boot of updates can be useful when managing a
fleet of devices. This is however a feature that requires strict user
consent, hence why it is off by default.

Add backend-support for enabling this feature. Frontent support in the
web interface will be added later.

We always enable auto-reboot together with auto-install,
since the migration scripts only run once at the end of the installation.
A system that is updated, but not rebooted, would thus accumulate changes
that are not migrated to the other slot.

Signed-off-by: Leonard Göhrs <l.goehrs@pengutronix.de>
@hnez
dbus: rauc: implement forced polling via update channel files
7701a36 
Users managing a fleet of devices with custom-built update bundles and
update channel may want to automatically enable update polling and
automatic installation of updates without having to do so explicitly via
the web ui. (At least we at Pengutronix do).

Enable this usecase by adding optional `force_polling` and
`force_auto_install` config options to the update channel definition
files.

Signed-off-by: Leonard Göhrs <l.goehrs@pengutronix.de>
@hnez
dbus: rauc: allow configuring the *_criteria in channel files
b5aa790 
The native RAUC polling feature allows configuring when a new update
bundle is even considered as an update candidate (`candidate_criteria`),
when it is considered for automatic installation (`install_criteria`)
and under which conditions to auto-boot into another slot after
installation (`reboot_criteria`).

The defaults we have chosen in previous commits generally make sense,
but allow users with custom update channels to customize them if they
deem it necessary.

Signed-off-by: Leonard Göhrs <l.goehrs@pengutronix.de>
@hnez
dbus: rauc: split the Rauc struct into config and status topics
6ba4212 
The struct itself and also the functions that take parts of it as
parameters (in particular `channel_list_update_task`) are getting
unwieldy.

Adding another parameter to `channel_list_update_task` would cross cargo
clippy's threshold on "too many arguments".

Work around that by splitting the Rauc struct and just passing the config
part of it to `channel_list_update_task` as a whole.

Signed-off-by: Leonard Göhrs <l.goehrs@pengutronix.de>
@hnez
inhibit: create and remove inhibit file based on setup_mode status
b718080 
When in setup mode we do not want the system to auto-install updates and
suddenly reboot without user input, as that would lead to a bad first
experience with the TAC.

Instead use an inhibit file to delay the first RAUC update poll to when
the setup mode is exited.

This commit does not yet make use of the inhibit file, it only generates
and removes it.

Signed-off-by: Leonard Göhrs <l.goehrs@pengutronix.de>
@hnez
inhibit: create/remove an inhibt file based on DUT power state
5c9e992 
If a DUT is currently powered by the TAC it is unlikely that we should
reboot for an update.

This commit does not yet make use of the generated inhibit file.
It only creates and removes it based on the DUT power state.

Signed-off-by: Leonard Göhrs <l.goehrs@pengutronix.de>
@hnez
dbus: rauc: pause auto updating while the TAC is in setup mode
aba1570 
It would be quite surprising (in the negative sense) if the TAC would
reboot without a warning while you are setting it up after unboxing.
Instead wait for the setup to complete before looking for updates.

Signed-off-by: Leonard Göhrs <l.goehrs@pengutronix.de>
@hnez
dbus: rauc: also pause auto updating while the DUT power is on
0ebdca9 
Ideally we would not want to auto-reboot when the TAC is in use,
but deciding when that is, is not easy.
One piece of information we do have is if the DUT is currently powered.
In that case we very likely do not want to reboot right now.

Signed-off-by: Leonard Göhrs <l.goehrs@pengutronix.de>
@hnez
dbus: rauc: break out flatten_slot_status()
9fcc102 
The return value from InstallerProxy::get_slot_status() needs some
post-processing.
Break that out into a separate function, because we will need to call
`get_slot_status` from another place soon.

Signed-off-by: Leonard Göhrs <l.goehrs@pengutronix.de>
@hnez
dbus: rauc: break out booted_slot_other_slot()
a211534 
This function looks up the two rootfs slots and aranges them based on
which one is booted and which one is not.
This is currently only used in one place, but will be used in another
soon.

Signed-off-by: Leonard Göhrs <l.goehrs@pengutronix.de>
@hnez
dbus: rauc: use Err(anyhow!(...)) instead of bail!(...)
44fc816 
I like this better now, because it makes the control flow more obvious
(bail! returns right there, while Err(anyhow!(...))) follows the normal
control flow.

Signed-off-by: Leonard Göhrs <l.goehrs@pengutronix.de>
@hnez
dbus: rauc: mark the booted slot good again after RAUC restart
6e0a68a 
At least for now the RAUC service will only poll for updates if the booted
slot was marked good during the current runtime of the service.
We restart the service to dynamically update the configuration.
This means we have to mark the booted slot as good again if we want polling.

Signed-off-by: Leonard Göhrs <l.goehrs@pengutronix.de>
@hnez
web: setup: inform the user about additional headers that are sent now
9bf6fbb 
We include the `boot-id` and `uptime` options in the RAUC `send-headers`
config in the hopes of detecting boot-loops during update roll-out.
This was not anticipated when writing the setup page, so we add it now.

Signed-off-by: Leonard Göhrs <l.goehrs@pengutronix.de>
@hnez
web: indicate to the user when a channel is enabled but not primary
34c5cf9 
The channel list in the web interface now contains a "Upgrade" column
with one of the following:

  - "Not enabled" for channels which are not enabled, which means bundles
    from it can not be installed for it.
  - "Not primary" (this one is new) for channels which are enabled,
    but are not the primary one and are thus not polled by the native RAUC
    polling feature.
  - "Polling disabled" if the polling feature is not enabled.
  - A spinner if we do not know the status yet.
  - "Up to date" if the TAC is in sync with this update channel.
  - "Upgrade" (a button) if an update is available.

Signed-off-by: Leonard Göhrs <l.goehrs@pengutronix.de>
@hnez
web: MqttComponents: add MqttHider which conditionally hides its chil…
c243881 
…dren

This allows us to only show some configuration options when a condition is
met.

Signed-off-by: Leonard Göhrs <l.goehrs@pengutronix.de>
@hnez
web: add toggle switches to enable automatic installation of updates
92ed1af 
Only make the toggle visible when polling is enabled, since auto-update
without polling does nothing.

Signed-off-by: Leonard Göhrs <l.goehrs@pengutronix.de>
@hnez
web: use manifest_hash and effective_url when triggering an install
36c24c0 
This ensures that the exact bundle (content) that the user agreed to
install is actually installed.

Signed-off-by: Leonard Göhrs <l.goehrs@pengutronix.de>
@hnez
web: TacComponents: UpdateChannels: update for single primary channel
ec5b1be 
With the change to native RAUC update polling only the primary update
channel is checked for updates, not all update channels as before.

Signed-off-by: Leonard Göhrs <l.goehrs@pengutronix.de>
@hnez
web: TacComponents: UpdateConfig: make the DUT Power inhibt configurable
372687d 
This is an advanced config options that most users should not actually
need, so hide it behind an expandable section (and only show it if polling
is active).

Signed-off-by: Leonard Göhrs <l.goehrs@pengutronix.de>
@hnez hnez dismissed jluebbe’s stale review May 19, 2026 07:40

We think the PR is good enough to merge it and get some real world experience.

@hnez hnez merged commit ee2ae81 into linux-automation:main May 19, 2026
14 checks passed
@hnez hnez deleted the rauc-polling branch May 19, 2026 07:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jluebbe jluebbe jluebbe left review comments

@KarlK90 KarlK90 KarlK90 approved these changes

Assignees

@jluebbe jluebbe

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@hnez @jluebbe @KarlK90