Over-the-Air Updates¶

ToloMEO edge devices receive OTA updates via SWUpdate. Update packages are signed compound archives containing a manifest, its cryptographic signature, and the update images. Two package types are available: full updates and delta updates.

Once built Updates can be uploaded directly through the PMS following the update flow

A/B partitioning¶

The device uses an A/B partition layout. Updates are written to the inactive partition, and the bootloader switches to it only after a successful post-boot validation. If validation fails, the device rolls back to the previously active partition automatically.

Full update¶

A full update replaces the complete root filesystem and other system components. Use it for major updates or recovery scenarios.

Delta update¶

A delta update packages only the binary differences between two versions using rdiff patches. It reduces the necessary bandwidth regular OTA releases on the field.

Signing keys¶

Update packages must be signed with a private RSA key. The corresponding public key is embedded in the image during the build and used by SWUpdate to verify incoming packages. Keys for automatic builds in the Embedded Manager are handled through secure pathways. See Hardening and Secure Boot for how to generate and configure signing keys for local builds.