WIP: Start impl auto switch feature #811
No reviewers
Labels
No Label
OPS TODO
api change
breaking api change
bug
documentation
duplicate
feature
help wanted
invalid
question
wontfix
No Milestone
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: eive/eive-obsw#811
Loading…
Reference in New Issue
Block a user
No description provided.
Delete Branch "auto-switch-image-feature"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
TMTC PR: https://egit.irs.uni-stuttgart.de/eive/eive-tmtc/pulls/246/files
WIP: Start impl auto switch featureto Start impl auto switch featureChangelog missing.
Also not sure what this is. To me it looks like the OBSW will always boot to the Target Image, no matter what. Am I missing something? Or is the mechanism not finished yet?
Added changelog entry. For more information, also see new redmine entry: https://egit.irs.uni-stuttgart.de/redmine/projects/eive-flight-manual/wiki/OBC_Auto_Switch_Image
This mechanism will only trigger once it has been activated explicitely. It is also self-clearing / one-shot: The key value pair triggering the mechanism will be cleared after the reboot.
I do understand how it works, I am just not sure it is usefull like this. If we update 0 0, what information do we gain about the updated image with this feature, if it reboots more or less instantly.
Also this way a manual reboot SELF will lead to 2 reboots to the same image.
It's not about information, it is about safety. If the 0 0 image OBSW binary is updated, but not the firmware/dtb (HPC, connection loss, cosmic snipe whatever..) , the Linux/OBSW might crash horribly. We still have the other reboot mechanism, but I do not 100 % trust only this mechanism. The auto switch image would be a one-shot fallback to just prevent the OBC from booting a (temporarily) broken image. After successfully updating everythng (nominal case unless we're terribly unlucky), we clear the flag and test the image normally. It's just a temporary safety layer for the 0 0 update I guess.
Start impl auto switch featureto WIP: Start impl auto switch featureno plan on implementing this anytime soon
Pull request closed