In collaboration with @dangowrt the server makes use of `ucert`. Active
workers sign created firmware and clients check if the signature is
valid. Certs of *hacked* or inactive workers can be revoked. Private CA
key is **not** stored on the upgrade server.
Only for devices already supporting ucert via firmware metadata.
Signed-off-by: Paul Spooren <mail@aparcar.org>
due to various clients and the existence of rpcd-mod-rpcsys the package
rpcd-mod-attendedsysupgrade is superflous.
From now on the attendedsysupgrade-common package should be dependencie
of all kinds of clients.
Currently active or planned:
- luci-app-attendedsysupgrade
- attendedsysupgrade cli in shell
- attendedsysupgrade cli in c
Signed-off-by: Paul Spooren <paul@spooren.de>
call it upgrade instead of update
added client options:
auto_search - start upgrade search on login
advanced_mode - offer more options like package_editing
message before sysupgrade
more verbose Makefile
moved acls to client
Signed-off-by: Paul Spooren <paul@spooren.de>
add uci option to set "update_packages". this options will lead the
luci-app-attendedsysupgrade to tell the update server to check for
package updates as well (not only release upgrades)
Signed-off-by: Paul Spooren <paul@spooren.de>
add ubus call to perform a sysupgrade and acl file for the attended
sysupgrade use case as well uci defaults.
Package is a part of the GSoC 17 project implementing easy
sysupgrade functionality.
Signed-off-by: Paul Spooren <paul@spooren.de>
Paul Spooren
Paul Spooren