rauc

Safe and secure software updates for embedded Linux

Github stars Tracking Chart

.. image:: rauc_logo_small.png
:alt: RAUC logo
:align: center

RAUC - Robust Auto-Update Controller
====================================, LGPLv2.1, Travis_branch, Codecov_branch, Coverity, lgtm, Documentation, Matrix, RAUC controls the update process on embedded Linux systems. It is both a target
application that runs as an update client and a host/target tool
that allows you to create, inspect and modify installation artifacts.

Source Code: https://github.com/rauc/rauc

Documentation: https://rauc.readthedocs.org/

Chat: IRC channel #rauc on freenode (bridged to the
Matrix channel #rauc:matrix.org <https://riot.im/app/#/room/#rauc:matrix.org>_)

Features

  • Fail-Safe & Atomic:

    • An update may be interrupted at any point without breaking the running
      system.
    • Update compatibility check
  • Cryptographic signing and verification of updates using OpenSSL (signatures
    based on x.509 certificates)

    • Keys and certificates on PKCS#11 tokens (HSMs) are supported
  • Flexible and customizable redundancy/storage setup

    • Symmetric setup (Root-FS A & B)
    • Asymmetric setup (recovery & normal)
    • Application partition, Data Partitions, ...
    • Allows grouping of multiple slots (rootfs, appfs) as update targets
  • Network streaming mode using casync

    • chunk-based binary delta updates
    • significantly reduce download size
    • no extra storage required
  • Bootloader support:

    • grub <https://www.gnu.org/software/grub/>_
    • barebox <http://barebox.org/>_
    • u-boot <http://www.denx.de/wiki/U-Boot>_
    • EFI <https://de.wikipedia.org/wiki/Unified_Extensible_Firmware_Interface>_
  • Storage support:

    • ext4 filesystem
    • eMMC boot partitions (atomic update)
    • vfat filesystem
    • UBI volumes
    • UBIFS
    • raw NAND (using nandwrite)
    • squashfs
    • MBR partition table
  • Independent from updates source

    • USB Stick
    • Software provisioning server (e.g. Hawkbit)
  • Controllable via D-Bus interface

  • Supports Data migration

  • Network protocol support using libcurl (https, http, ftp, ssh, ...)

  • Several layers of update customization

    • Update-specific extensions (hooks)
    • System-specific extensions (handlers)
    • fully custom update script

Host Features


*  Create update bundles
*  Sign/resign bundles
*  Inspect bundle files

Target Features
  • Run as a system service (d-bus interface)
  • Install bundles
  • View system status information
  • Change status of symmetric/asymmetric/custom slots

Target Requirements

  • Boot state storage

    • GRUB: environment file on SD/eMMC/SSD/disk
    • Barebox: State partition on EEPROM/FRAM/MRAM or NAND flash
    • U-Boot: environment variable
    • EFI: EFI variables
  • Boot target selection support in the bootloader

  • Enough mass storage for two symmetric/asymmetric/custom slots

  • For normal bundle mode:

    • Enough storage for the compressed bundle file (in memory, in a temporary
      partition or on an external storage device)
  • For casync bundle mode:

    • No additional storage needed
    • Network interface
  • Hardware watchdog (optional, but recommended)

  • RTC (optional, but recommended)

Usage

Please see the documentation <https://rauc.readthedocs.org/>__ for
details.

Prerequisites

Host (Build) Prerequisites


-  automake
-  libtool
-  libdbus-1-dev
-  libglib2.0-dev
-  libcurl3-dev
-  libssl-dev

::

   sudo apt-get install automake libtool libdbus-1-dev libglib2.0-dev libcurl3-dev libssl-dev

If you intend to use json-support you also need

::

    sudo apt-get install libjson-glib-dev

Target Prerequisites
~~~~~~~~~~~~~~~~~~~~

Required kernel options:

-  ``CONFIG_BLK_DEV_LOOP=y``
-  ``CONFIG_SQUASHFS=y``

For using tar archive in RAUC bundles with Busybox tar, you have to enable the
following Busybox feature:

-  ``CONFIG_FEATURE_TAR_AUTODETECT=y``
-  ``CONFIG_FEATURE_TAR_LONG_OPTIONS=y``

Depending on the actual storage type and/or filesystem used, further target
tools might be required.
The documentation chapter
`Required Target Tools <http://rauc.readthedocs.io/en/latest/integration.html#required-target-tools>`_
gives a more detailed list on these.

Building from Sources
---------------------

.. note:: RAUC is intended to be built both as a host tool as well as a target
   tool (service). Therefore it is fully prepared for `automake cross-compilation
   <https://www.gnu.org/software/automake/manual/html_node/Cross_002dCompilation.html>`_

::

    git clone https://github.com/rauc/rauc
    cd rauc
    ./autogen.sh
    ./configure
    make

Manual Installation
-------------------

.. note:: To prepare RAUC for the target device, it is highly recommended to
  use an embedded Linux distribution build suite such as Yocto/OE, PTXdist or
  Buildroot.

On the host system RAUC can be used directly from the build dir, or optionally
be installed. On the target instead, installing is highly recommended as it
also unpacks service and D-Bus configuration files required to run RAUC
properly::

    make install

Running the Test Suite
----------------------

::

    sudo apt-get install user-mode-linux slirp squashfs-tools
    # Optional to run all tests:
    # sudo apt-get install faketime casync grub-common softhsm2 opensc opensc-pkcs11 libengine-pkcs11-openssl
    make check
    ./uml-test

Creating a Bundle (Host)
------------------------

Create a directory with the content that should be installed::

    mkdir content-dir/
    cp $SOURCE/rootfs.ext4 content-dir/

Create a manifest describing which image to install where together with some
meta info::

    cat >> content-dir/manifest.raucm << EOF
    [update]
    compatible=FooCorp Super BarBazzer
    version=2019.01-1
    [image.rootfs]
    filename=rootfs.ext4
    EOF

Let RAUC create a bundle from this::

    rauc --cert autobuilder.cert.pem --key autobuilder.key.pem bundle content-dir/ update-2019.01-1.raucb

Starting the RAUC Service (Target)
----------------------------------

Create a system configuration file in ``/etc/rauc/system.conf`` and start the
service process in background::

    rauc service &

Installing a Bundle (Target)
----------------------------

To install the bundle on your target device, run::

    rauc install update-2019.01-1.raucb

Contributing
------------

Fork the repository and send us a pull request.

Please read the Documentation's
`Contributing <http://rauc.readthedocs.io/en/latest/contributing.html>`_
section for more details.

.., LGPLv2.1, image:: https://img.shields.io/badge/license-LGPLv2.1-blue.svg
   :target: https://raw.githubusercontent.com/rauc/rauc/master/COPYING
.., Travis_branch, image:: https://img.shields.io/travis/com/rauc/rauc/master.svg
   :target: https://travis-ci.com/rauc/rauc
.., Codecov_branch, image:: https://codecov.io/gh/rauc/rauc/branch/master/graph/badge.svg
   :target: https://codecov.io/gh/rauc/rauc
.., Coverity, image:: https://img.shields.io/coverity/scan/5085.svg
   :target: https://scan.coverity.com/projects/5085
.., Documentation, image:: https://readthedocs.org/projects/rauc/badge/?version=latest
   :target: http://rauc.readthedocs.org/en/latest/?badge=latest
.., Matrix, image:: https://matrix.to/img/matrix-badge.svg
   :target: https://riot.im/app/#/room/#rauc:matrix.org
.., lgtm, image:: https://img.shields.io/lgtm/grade/cpp/g/rauc/rauc.svg?logo=lgtm&logoWidth=18
   :target: https://lgtm.com/projects/g/rauc/rauc/context:cpp

Overview

Name With Ownerrauc/rauc
Primary LanguageC
Program languageShell (Language Count: 8)
Platform
License:GNU Lesser General Public License v2.1
Release Count24
Last Release Namev1.11.3 (Posted on 2024-03-15 10:16:20)
First Release Namev0 (Posted on 2015-05-18 12:55:19)
Created At2015-05-09 15:02:56
Pushed At2024-05-15 20:16:13
Last Commit At2024-05-15 22:16:13
Stargazers Count749
Watchers Count40
Fork Count188
Commits Count3.6k
Has Issues Enabled
Issues Count337
Issue Open Count58
Pull Requests Count890
Pull Requests Open Count16
Pull Requests Close Count78
Has Wiki Enabled
Is Archived
Is Fork
Is Locked
Is Mirror
Is Private
To the top