Skip to content

Check the latest GitHub release and use local hints for updating the components#65

Open
arrdalan wants to merge 1 commit intomainfrom
determine-update-time
Open

Check the latest GitHub release and use local hints for updating the components#65
arrdalan wants to merge 1 commit intomainfrom
determine-update-time

Conversation

@arrdalan
Copy link
Copy Markdown
Collaborator

Previously, non-server components such as the camera_hub checked the server version in order to determine when to update. That allows a malicious server to keep these components outdated. Instead, we will now have all the components check the latest GitHub release to decide if they should update or not.

These checks, however, are not frequent, e.g., every 30 minutes in the image we build with our deploy tool. This could create a large downtime for the camera as there can be version mismatch with the server for up to 30 minutes every time we update the server. To address this, when the client_lib http code (used in the camera_hub) sees a version mismatch with the server, it provides a hint to the updater. The updater checks for the hint more frequently, e.g., every minute. If it sees a hint, it checks the latest GitHub release and updates if needed.

This PR also updates the deploy tool accordingly.

@jkaczman jkaczman self-requested a review April 19, 2026 21:42
Copy link
Copy Markdown
Collaborator

@jkaczman jkaczman left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the PR!

I would suggest making the server use the hint write/check as well.
There's also merge conflicts.

Otherwise, looks good!

@arrdalan arrdalan force-pushed the determine-update-time branch from 78e6716 to e488ca8 Compare April 20, 2026 08:35
@arrdalan
Copy link
Copy Markdown
Collaborator Author

Good suggestion. I added the use of local hints for the server as well.

I fixed the conflict too.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants