4 ms·
Unfortunate you'd need to weave that all the way through the whole product stack in order not to end up in a state that looks like it's working at first glance
by bmicraft 2y ago
Unfortunate you'd need to weave that all the way through the whole product stack in order not to end up in a state that looks like it's working at first glance but actually isn't doing what it is supposed to - like everything running but not showing an image, or everything running except networking is dead (-> also no further updates possible), or (remote) input devices, etc etc
- gavinsyancey 2y agoFrom the manufacturer's point of view, a sufficient "safe" state is "can receive and apply a firmware update" -- worst case scenario you can always push out a new re-signed and renumbered version of the older working version.
- deleted 2y ago[deleted]
- ymyms 2y agoNetwork connectivity would need to be in the set of checks to determine if an update was successful. Also, there should hopefully be QA. If you only have one smoke-test for a firmware image it should be whether or not it can upgrade/downgrade a new image from that one.