Link Search Menu Expand Document

Update unsigned images

It is possible to update the BitBoxBase with unsigned update artefacts, but this is disabled by default for security reasons.

At the moment, it’s only possible to enable this feature from the command line (e.g. over SSH):

sudo enable unsigned_updates

After that, an update artefact can be installed from a USB flashdrive. The file must be located in the root folder and be named update.base. To mount the flashdrive, use the following commands that are also used for backup purposes.

$ sudo flashdrive check

$ sudo flashdrive mount /dev/sda1
FLASHDRIVE MOUNT: mounted /dev/sda1 to /mnt/backup

$ sudo mender-update install flashdrive

The setting unsigned_updates is not persisted over updates on purpose, so if the new image was built with the setting turned off, it needs to be enabled again for a next update.