Mitchell R 0fa797adfa feat(os-ota): install RAUC + system.conf + boot backend in pi-gen image ... Phase 2b. Bake the runtime side of RAUC into the curated image so a freshly-flashed kiosk can accept .raucb bundles immediately: - Add `rauc` + `dosfstools` to the apt package list. - Drop deploy/rauc/system.conf to /etc/rauc/system.conf (already declares the A/B slot layout that repartition-image.sh produces). - Drop deploy/rauc/betterframe-rauc-boot.sh to /usr/local/sbin/betterframe-rauc-boot.sh — the custom bootloader backend that flips the BF_BOOTSEL autoboot.txt to point at the freshly-installed slot via Pi 5 tryboot. - Drop deploy/rauc/ca-cert.pem (operator-supplied, committed) to /etc/rauc/keyring.pem so rauc can verify CMS signatures. If the cert isn't committed yet, image build emits a workflow warning and the kiosk image installs but refuses every bundle — image still flashes, just no OS OTA until the cert is committed. - Enable BF_ENABLE_OS_OTA=1 in /etc/default/betterframe-kiosk so the kiosk Rust consumer actually polls for bundles. Set to 0 to pin OS version for a specific kiosk. mark-good was already wired (deploy/systemd/betterframe-rauc-mark-good.{service,sh}). The kiosk's heartbeat loop also calls `rauc status mark-good` as a belt+suspenders backup; both are idempotent.		2026-05-21 11:09:10 +02:00
..
build.yml	feat(os-ota): install RAUC + system.conf + boot backend in pi-gen image	2026-05-21 11:09:10 +02:00
release.yml	fix(ci): bump patch for all release channels	2026-05-21 02:02:20 +02:00