mirror of
https://github.com/BetterCorp/BetterFrame.git
synced 2026-05-26 22:26:33 +00:00
659670b494
Phase 3 of the OS OTA pipeline. New module kiosk/src/os_update.rs polls /api/kiosk/os/check with the kiosk's compatibility string and current OS version (read from /etc/betterframe/os-compatibility + /etc/betterframe/os-version, both written by the image build), downloads the bundle, sha256-verifies the transport, and hands off to `rauc install`. RAUC takes it from there: CMS signature verify against /etc/rauc/keyring.pem, copy into inactive A/B slot, arm tryboot via the custom bootloader backend, return. We then post /api/kiosk/os/applied and `systemctl reboot` into the new slot. Wired into the existing 60s heartbeat loop in ui.rs, gated by BF_ENABLE_OS_OTA=1 (default OFF so dev kiosks on non-A/B images don't keep trying + failing). Runs BEFORE the kiosk-binary check on each tick so an OS bundle that ships an updated kiosk binary doesn't race the firmware path. On clean-boot heartbeat success we now also call `rauc status mark-good` so the boot-attempts counter resets — three bad boots in a row will auto-roll back without us needing a separate rollback path. What's NOT in this commit: - A/B partition layout in the pi-gen image (task #6, blocks actual deployment — bundles can be served + accepted but `rauc install` will refuse without two valid slots). - Admin UI for managing releases + rollouts (task #4).
49 lines
1.3 KiB
TOML
49 lines
1.3 KiB
TOML
[package]
|
|
name = "betterframe-kiosk"
|
|
version = "0.1.0"
|
|
edition = "2024"
|
|
description = "BetterFrame kiosk — multi-camera display with GTK4 + GStreamer"
|
|
license = "AGPL-3.0-only OR Commercial"
|
|
|
|
[dependencies]
|
|
# GTK4 for windowing/layout. v4_14 = Debian Trixie / Pi OS Trixie stock
|
|
# libgtk-4 — pi-gen defaults to trixie, so build chain + image are aligned.
|
|
gtk4 = { version = "0.9", features = ["v4_14"] }
|
|
|
|
# GStreamer for RTSP decode
|
|
gstreamer = "0.23"
|
|
gstreamer-video = "0.23"
|
|
gst-plugin-gtk4 = "0.13"
|
|
|
|
# HTTP client for server API
|
|
reqwest = { version = "0.12", features = ["json", "blocking"] }
|
|
|
|
# JSON
|
|
serde = { version = "1", features = ["derive"] }
|
|
serde_json = "1"
|
|
|
|
# Async runtime
|
|
tokio = { version = "1", features = ["rt-multi-thread", "macros", "time", "fs"] }
|
|
|
|
# Misc
|
|
dirs = "6"
|
|
tracing = "0.1"
|
|
tracing-subscriber = { version = "0.3", features = ["env-filter"] }
|
|
hostname = "0.4"
|
|
tokio-tungstenite = { version = "0.24", features = ["native-tls"] }
|
|
futures-util = "0.3"
|
|
url = "2"
|
|
webkit6 = "0.4"
|
|
gpiod = "0.3"
|
|
|
|
# OTA firmware update: sha256 + Ed25519 signature verify
|
|
sha2 = "0.10"
|
|
ed25519-dalek = { version = "2", features = ["pem"] }
|
|
base64 = "0.22"
|
|
urlencoding = "2"
|
|
|
|
# Local HTTP server on kiosk (LAN GET-only layout switch + admin proxy)
|
|
axum = "0.7"
|
|
tower = "0.5"
|
|
hex = "0.4"
|
|
rand = "0.8"
|