diff options
author | Patrick Vacek <patrickvacek@gmail.com> | 2018-10-31 13:33:23 +0100 |
---|---|---|
committer | GitHub <noreply@github.com> | 2018-10-31 13:33:23 +0100 |
commit | d1a709a28fb4a708681bc3b2d868551b1910f1f3 (patch) | |
tree | b54d5d4577c01f269ea85ceff45934def6717e5b /README.adoc | |
parent | 405c54c8effd39f8bd8a6a77d3ecd298b5196f25 (diff) | |
parent | f7c8b67ecf9b4983b380d107de98113f2af4d0cf (diff) | |
download | meta-updater-d1a709a28fb4a708681bc3b2d868551b1910f1f3.tar.gz |
Merge pull request #415 from advancedtelematic/refactor/rocko/rm-implicit-writer
Refactor/rocko/rm implicit writer
Diffstat (limited to 'README.adoc')
-rw-r--r-- | README.adoc | 11 |
1 files changed, 6 insertions, 5 deletions
diff --git a/README.adoc b/README.adoc index d648774..0eb0451 100644 --- a/README.adoc +++ b/README.adoc | |||
@@ -210,15 +210,16 @@ oe-selftest --run-tests updater | |||
210 | For more information about oe-selftest, including details about how to run individual test modules or classes, please refer to the https://wiki.yoctoproject.org/wiki/Oe-selftest[Yocto Project wiki]. | 210 | For more information about oe-selftest, including details about how to run individual test modules or classes, please refer to the https://wiki.yoctoproject.org/wiki/Oe-selftest[Yocto Project wiki]. |
211 | 211 | ||
212 | == Manual provisoning | 212 | == Manual provisoning |
213 | |||
213 | As described in <<sota-related-variables-in-localconf,SOTA-related variables in local.conf>> section you can set `SOTA_DEPLOY_CREDENTIALS` to `0` to prevent deploying credentials to the built `wic` image. In this case you get a generic image that you can use e.g. on a production line to flash a series of devices. The cost of this approach is that this image is half-baked and should be provisioned before it can connect to the backend. | 214 | As described in <<sota-related-variables-in-localconf,SOTA-related variables in local.conf>> section you can set `SOTA_DEPLOY_CREDENTIALS` to `0` to prevent deploying credentials to the built `wic` image. In this case you get a generic image that you can use e.g. on a production line to flash a series of devices. The cost of this approach is that this image is half-baked and should be provisioned before it can connect to the backend. |
214 | 215 | ||
215 | Provisioning procedure depends on your provisioning recipe, i.e. the value of `SOTA_CLIENT_PROV` (equal to `aktualizr-auto-prov` by default). | 216 | Provisioning procedure depends on your provisioning recipe, i.e. the value of `SOTA_CLIENT_PROV` (equal to `aktualizr-auto-prov` by default): |
216 | 217 | ||
217 | * For `aktualizr-auto-prov` put your `credentials.zip` to `/var/sota/sota_provisioning_credentials.zip` on the filesystem of a running device. If you have the filesystem of our device mounted to your build machine, prefix all paths with `/ostree/deploy/poky` as in `/ostree/deploy/poky/var/sota/sota_provisioning_credentials.zip`. | 218 | * For `aktualizr-auto-prov` put your `credentials.zip` to `/var/sota/sota_provisioning_credentials.zip` on the filesystem of a running device. If you have the filesystem of our device mounted to your build machine, prefix all paths with `/ostree/deploy/poky` as in `/ostree/deploy/poky/var/sota/sota_provisioning_credentials.zip`. |
218 | * For `aktualizr-ca-implicit-prov` | 219 | * For `aktualizr-ca-implicit-prov` |
219 | ** put URL to the used backend (together with protocol prefix and port number) to `/var/sota/gateway.url`. If you're using HERE OTA Connect, you can find the URL in `autoprov.url` file in your credentials archive. | 220 | ** put URL to the backend server (together with protocol prefix and port number) at `/var/sota/gateway.url`. If you're using HERE OTA Connect, you can find the URL in the `autoprov.url` file in your credentials archive. |
220 | ** put client certificate, private key and root CA certificate (for the *server*, not for the *device*) to `/var/sota/import/client.pem`, `/var/sota/import/pkey.pem` and `/var/sota/import/root.crt` respectively. | 221 | ** put client certificate, private key and root CA certificate (for the *server*, not for the *device*) at `/var/sota/import/client.pem`, `/var/sota/import/pkey.pem` and `/var/sota/import/root.crt` respectively. |
221 | * For `aktualizr-hsm-prov` | 222 | * For `aktualizr-hsm-prov` |
222 | ** put URL to the used backend (together with protocol prefix and port number) to `/var/sota/gateway.url`. If you're using HERE OTA Connect, you can find the URL in `autoprov.url` file in your credentials archive. | 223 | ** put URL to the server backend (together with protocol prefix and port number) at `/var/sota/gateway.url`. If you're using HERE OTA Connect, you can find the URL in the `autoprov.url` file in your credentials archive. |
223 | ** put root CA certificate (for the *server*, not for the *device*) to `/var/sota/import/root.crt`. | 224 | ** put root CA certificate (for the *server*, not for the *device*) at `/var/sota/import/root.crt`. |
224 | ** put client certificate and private key to slots 1 and 2 of the PKCS#11-compatible device. | 225 | ** put client certificate and private key to slots 1 and 2 of the PKCS#11-compatible device. |