Skip to content

V1.0.0 - beta

Choose a tag to compare

View all tags
@thezenox thezenox released this 20 Apr 06:49
· 10 commits to main since this release
V1.0.0
8a28186
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Beta Testing

This is currently under beta. It should run stable, but some features may change. If you encounter any problems, please report them.

This is a major release with fundamental changes, requiring some more attention:

  • New 16kb Bootloader with Over-The-Air Update support. Requires bootloader Upgrade (see below)
  • Settings file moved to bootloader. No confusing dual flash drives anymore, just one. To now edit settings, double press the reset button.
  • Fully signed Over-The-Air updates send out by BreezedudeGS groundstations.

How to upgrade

  • Backup your settings file
  • To upgrade the bootloader, double press reset and drop update-bootloader-breezedude-4.1.6-from-v3.16.uf2 onto the BreezeBOOT drive.
    From this point on you need to use V1 firmware and newer. Old firmware and bootloader downgrade (with uf2) will not work (downgrade is possible, contact me if you require).
  • Restore your settings file (just drag it onto the drive and overwrite)
  • Install V1 firmware by dragging it onto the Breezedude drive

How OTA updates work

When a device announces its current firmware version, the GS checks the (closed source) breezedude backend for a newer release, downloads the firmware, and transfers it to the inactive flash slot on the device. After the transfer is complete, the device validates the received image and only then activates the update.

Groundstation requirements

  • For the Breezedude groundstation at least version 0.6.1 is required, wich currently is only available for manual install and beta channel auto update.

Security

The OTA process is designed to be secure:

  • update metadata is digitally signed
  • the device verifies this signature on-device
  • the transferred firmware is checked against CRC32 and SHA-256
  • only a fully verified image is accepted and marked bootable

This means the GS acts only as a transport bridge. A modified or corrupted firmware image will be rejected by the device and will not be installed. With this, nobody can hijack your breezdude remotley, even if the full sourcecode is public.

Remote management

OTA firmware and settings management web interface will follow soon.

Assets 4
Loading