2 Commits

Include renames

Author	SHA1	Message	Date
ScottW514	1097184e13	installer v2: single-stage slot install; slotmigrate legacy reclaim ... install-forgefirm.sh is now single-stage and never repartitions: run from factory firmware, it archives every factory slot version plus the recovery boot partitions to /data/forgefirm/archive (manifest with md5s), verifies the signed forgefirm.fw against the embedded ForgeFIRM pubkey (raw 32-byte form for the factory's fwup 0.14.2; dev key until the production key ceremony), applies it to the INACTIVE slot with the factory's own fwup, post-verifies the written rootfs, installs /data/ffboot, and flips the saved env with read-back verification. The booted factory slot stays installed and bootable; /data is untouched beyond the archive. Fixed release asset name forgefirm.fw (version in the fwup metadata and release tag). slotmigrate (new recipe, rcS before mountall) reclaims the legacy layout on eMMC-slot boots: deletes p4, grows p3 to the end of the disk (sfdisk + partx BLKPG - works with a sibling partition as root), then e2fsck+resize2fs. Every step is keyed off the actual disk state, so interrupted runs resume and factory-layout disks are a no-op; SD boots never touch the eMMC.	2026-08-08 12:26:33 -04:00
ScottW514	888e51d84e	docs: eMMC boot/recovery architecture + install/update system plan ... BRINGUP: the measured eMMC map (factory MBR, U-Boot in boot0 at 1KiB, saved env at user-area 0x80000/0x82000, default-env recovery boot, the boot0/boot1 recovery images, factory .fw/fwup internals) and the traced SD kernel-load path. UPDATE-SYSTEM: phased plan for the factory A/B slot scheme end-to-end - fwup-packaged signed releases, single-stage installer, GUI update manager, offline factory restore, legacy-p4 migration, recovery refresh; invariants and decision gates.	2026-08-08 11:34:08 -04:00