search

advancedtelematic / aktualizr

C++ SOTA Client
Mozilla Public License 2.0
144 stars 60 forks source link

Device initialization fails after successful provisioning #1757

Open msatpathy26 opened 4 years ago

msatpathy26 commented 4 years ago

Hi,

I am getting the following error message 

# systemctl status aktualizr
[[0;1;32m*[[0m aktualizr.service - Aktualizr SOTA Client
     Loaded: loaded (/usr/lib/systemd/system/aktualizr.service; enabled; vendor preset: enabled)
    Drop-In: /usr/lib/systemd/system/aktualizr.service.d
             `-10-resource-control.conf
     Active: [[0;1;32mactive (running)[[0m since Sun 2020-09-13 19:20:19 UTC; 12min ago
   Main PID: 403 (aktualizr)
         IP: 386.7K in, 561.6K out
      Tasks: 5 (limit: 4915)
     Memory: 2.7M (high: 100.0M max: 3.0G)
        CPU: 11.721s
     CGroup: /system.slice/aktualizr.service
             `-403 /usr/bin/aktualizr

Sep 13 19:31:57 raspberrypi4 aktualizr[403]: Director metadata update failed: Failed to fetch role root in director repository.
Sep 13 19:31:58 raspberrypi4 aktualizr[403]: got PutManifestComplete event

Running at loglevel 0 I get the following logs:

root@raspberrypi4:/var/rootdirs/home/root# aktualizr --loglevel 0
Aktualizr version 2020.8-59-g753c2d73c starting
Reading config: "/etc/sota/conf.d/20-sota-device-cred.toml"
Reading config: "/etc/sota/conf.d/30-rollback.toml"
Reading config: "/etc/sota/conf.d/40-hardware-id.toml"
Final configuration that will be used: 
[logger]
loglevel = 0

[p11]
module = ""
pass = ""
uptane_key_id = ""
tls_ca_id = ""
tls_pkey_id = ""
tls_clientcert_id = ""

[tls]
server = "https://ota-ce.uptanedemo.com:8443"
server_url_path = "/var/sota/import/gateway.url"
ca_source = "file"
pkey_source = "file"
cert_source = "file"

[provision]
server = "https://ota-ce.uptanedemo.com:8443"
p12_password = ""
expiry_days = "36000"
provision_path = ""
device_id = ""
primary_ecu_serial = ""
primary_ecu_hardware_id = "raspberrypi4"
ecu_registration_endpoint = "https://ota-ce.uptanedemo.com:8443/director/ecus"
mode = "DeviceCred"

[uptane]
polling_sec = 10
director_server = "https://ota-ce.uptanedemo.com:8443/director"
repo_server = "https://ota-ce.uptanedemo.com:8443/repo"
key_source = "file"
key_type = "RSA2048"
force_install_completion = false
secondary_config_file = ""
secondary_preinstall_wait_sec = 600

[pacman]
type = "ostree"
os = ""
sysroot = ""
ostree_server = "https://ota-ce.uptanedemo.com:8443/treehub"
images_path = "/var/sota/images"
packages_file = "/usr/package.manifest"
fake_need_reboot = false

[storage]
type = "sqlite"
path = "/var/sota"
sqldb_path = "sql.db"
uptane_metadata_path = "metadata"
uptane_private_key_path = "ecukey.der"
uptane_public_key_path = "ecukey.pub"
tls_cacert_path = "root.crt"
tls_pkey_path = "pkey.pem"
tls_clientcert_path = "client.pem"

[import]
base_path = "/var/sota/import"
uptane_private_key_path = ""
uptane_public_key_path = ""
tls_cacert_path = "root.crt"
tls_pkey_path = "pkey.pem"
tls_clientcert_path = "client.pem"

[telemetry]
report_network = true
report_config = true

[bootloader]
rollback_mode = "uboot_masked"
reboot_sentinel_dir = "/var/run/aktualizr-session"
reboot_sentinel_name = "need_reboot"
reboot_command = "/sbin/reboot"

Current directory: /var/rootdirs/home/root
Use existing SQL storage: "/var/sota/sql.db"
No serial found in database for this ECU, defaulting to empty serial
Checking if device is provisioned...
post request body:{
        "ecus" : 
        [
                {
                        "clientKey" : 
                        {
                                "keytype" : "RSA",
                                "keyval" : 
                                {
                                        "public" : "-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny7rs5/EVXydpZgmqnzM\n/7CT"
                                }
                        },
                        "ecu_serial" : "61aa9788c93a4ffe654ccf474a5f4feb072430b7aabbb9f313aad3c471c36625",
                        "hardware_identifier" : "raspberrypi4"
                }
        ],
        "primary_ecu_serial" : "61aa9788c93a4ffe654ccf474a5f4feb072430b7aabbb9f313aad3c471c36625"
}
*   Trying 104.154.69.64:8443...
* Connected to ota-ce.uptanedemo.com (104.154.69.64) port 8443 (#0)
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /tmp/aktualizr-35a0-b3b0-5456-e83d/7971-39b3-tls-ca
  CApath: /etc/ssl/certs
* SSL connection using TLSv1.2 / ECDHE-ECDSA-AES256-GCM-SHA384
* ALPN, server accepted to use http/1.1
* Server certificate:
*  subject: CN=ota-gateway
*  start date: Sep 13 14:17:47 2020 GMT
*  expire date: Sep 11 14:17:47 2030 GMT
*  subjectAltName: host "ota-ce.uptanedemo.com" matched cert's "ota-ce.uptanedemo.com"
*  issuer: CN=ota-server-CA
*  SSL certificate verify ok.
> POST /director/ecus HTTP/1.1
Host: ota-ce.uptanedemo.com:8443
User-Agent: Aktualizr/2020.8-59-g753c2d73c
Accept: */*
Content-Type: application/json
Content-Length: 730

* upload completely sent off: 730 out of 730 bytes
* Mark bundle as not supporting multiuse
< HTTP/1.1 200 OK
< Server: nginx/1.13.7
< Date: Sun, 13 Sep 2020 19:18:42 GMT
< Content-Type: application/json
< Content-Length: 2
< Connection: keep-alive
< x-ats-version: director/0.8.0-30-ge3aca46
< 
* Connection #0 to host ota-ce.uptanedemo.com left intact
response http code: 200
response: {}
ECUs have been successfully registered with the server.
Primary ECU serial: 61aa9788c93a4ffe654ccf474a5f4feb072430b7aabbb9f313aad3c471c36625 with hardware ID: raspberrypi4
Device ID: 48fd1cf6-c4e0-420a-ae0d-a4dad2cda591
Device Gateway URL: https://ota-ce.uptanedemo.com:8443
Certificate subject: CN=48fd1cf6-c4e0-420a-ae0d-a4dad2cda591
Certificate issuer: CN=ota-devices-CA
Certificate valid from: Sep 13 18:42:00 2020 GMT until: Sep 13 18:42:00 2021 GMT
... provisioned OK
No pending updates, continuing with initialization
hardware_info hash not present in db
Reporting default hardware information
put request body:{
        "children" : 
        [
                {
                        "capabilities" : 
                        {
                                "brcm_bcm2711" : true,
                                "raspberrypi_4-model-b" : true
                        },
                        "children" : 
                        [
                                {
                                        "businfo" : "cpu@0",
                                        "capabilities" : 
                                        {
                                                "cpufreq" : "CPU Frequency scaling"
                                        },
                                        "capacity" : 1500000000,
                                        "claimed" : true,
                                        "class" : "processor",
                                        "description" : "CPU",
                                        "id" : "cpu:0",
                                        "physid" : "0",
                                        "product" : "cpu",
                                        "size" : 600000000,
                                        "units" : "Hz"
                                },
                                {
                                        "businfo" : "cpu@1",
                                        "capabilities" : 
                                        {
                                                "cpufreq" : "CPU Frequency scaling"
                                        },
                                        "capacity" : 1500000000,
                                        "claimed" : true,
                                        "class" : "processor",
                                        "description" : "CPU",
                                        "disabled" : true,
                                        "id" : "cpu:1",
                                        "physid" : "1",
                                        "product" : "cpu",
                                        "size" : 600000000,
                                        "units" : "Hz"
                                },
                                {
                                        "businfo" : "cpu@2",
                                        "capabilities" : 
                                        {
                                                "cpufreq" : "CPU Frequency scaling"
                                        },
                                        "capacity" : 1500000000,
                                        "claimed" : true,
                                        "class" : "processor",
                                        "description" : "CPU",
                                        "disabled" : true,
                                        "id" : "cpu:2",
                                        "physid" : "2",
                                        "product" : "cpu",
                                        "size" : 600000000,
                                        "units" : "Hz"
                                },
                                {
                                        "businfo" : "cpu@3",
                                        "capabilities" : 
                                        {
                                                "cpufreq" : "CPU Frequency scaling"
                                        },
                                        "capacity" : 1500000000,
                                        "claimed" : true,
                                        "class" : "processor",
                                        "description" : "CPU",
                                        "disabled" : true,
                                        "id" : "cpu:3",
                                        "physid" : "3",
                                        "product" : "cpu",
                                        "size" : 600000000,
                                        "units" : "Hz"
                                },
                                {
                                        "claimed" : true,
                                        "class" : "memory",
                                        "description" : "System memory",
                                        "id" : "memory",
                                        "physid" : "4",
                                        "size" : 4094156800,
                                        "units" : "bytes"
                                }
                        ],
                        "claimed" : true,
                        "class" : "bus",
                        "description" : "Motherboard",
                        "id" : "core",
                        "physid" : "0"
                },
                {
                        "capabilities" : 
                        {
                                "1000bt" : "1Gbit/s",
                                "1000bt-fd" : "1Gbit/s (full duplex)",
                                "100bt" : "100Mbit/s",
                                "100bt-fd" : "100Mbit/s (full duplex)",
                                "10bt" : "10Mbit/s",
                                "10bt-fd" : "10Mbit/s (full duplex)",
                                "autonegotiation" : "Auto-negotiation",
                                "ethernet" : true,
                                "mii" : "Media Independant Interface",
                                "physical" : "Physical interface",
                                "tp" : "twisted pair"
                        },
                        "capacity" : 1000000000,
                        "claimed" : true,
                        "class" : "network",
                        "configuration" : 
                        {
                                "autonegotiation" : "on",
                                "broadcast" : "yes",
                                "driver" : "bcmgenet",
                                "driverversion" : "v2.0",
                                "duplex" : "full",
                                "ip" : "192.168.1.4",
                                "link" : "yes",
                                "multicast" : "yes",
                                "port" : "MII",
                                "speed" : "100Mbit/s"
                        },
                        "description" : "Ethernet interface",
                        "id" : "network",
                        "logicalname" : "eth0",
                        "physid" : "1",
                        "serial" : "dc:a6:32:86:b2:2e",
                        "size" : 100000000,
                        "units" : "bit/s"
                }
        ],
        "claimed" : true,
        "class" : "system",
        "description" : "Computer",
        "id" : "raspberrypi4",
        "product" : "Raspberry Pi 4 Model B",
        "serial" : "10000000af00e081",
        "width" : 32
}
*   Trying 104.154.69.64:8443...
* Connected to ota-ce.uptanedemo.com (104.154.69.64) port 8443 (#0)
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /tmp/aktualizr-35a0-b3b0-5456-e83d/7971-39b3-tls-ca
  CApath: /etc/ssl/certs
* SSL connection using TLSv1.2 / ECDHE-ECDSA-AES256-GCM-SHA384
* ALPN, server accepted to use http/1.1
* Server certificate:
*  subject: CN=ota-gateway
*  start date: Sep 13 14:17:47 2020 GMT
*  expire date: Sep 11 14:17:47 2030 GMT
*  subjectAltName: host "ota-ce.uptanedemo.com" matched cert's "ota-ce.uptanedemo.com"
*  issuer: CN=ota-server-CA
*  SSL certificate verify ok.
> PUT /system_info HTTP/1.1
Host: ota-ce.uptanedemo.com:8443
User-Agent: Aktualizr/2020.8-59-g753c2d73c
Accept: */*
Content-Type: application/json
Content-Length: 2108

* upload completely sent off: 2108 out of 2108 bytes
* Mark bundle as not supporting multiuse
< HTTP/1.1 405 Not Allowed
< Server: nginx/1.13.7
< Date: Sun, 13 Sep 2020 19:18:43 GMT
< Content-Type: text/html
< Content-Length: 173
< Connection: keep-alive
< 
* Connection #0 to host ota-ce.uptanedemo.com left intact
response http code: 405
response: <html>
<head><title>405 Not Allowed</title></head>
<body bgcolor="white">
<center><h1>405 Not Allowed</h1></center>
<hr><center>nginx/1.13.7</center>
</body>
</html>
installed_packages hash not present in db
Reporting installed packages
put request body:[
        {
                "name" : "adwaita-icon-theme-symbolic",
                "version" : "3.34.3"
        },
        {
                "name" : "aktualizr",
                "version" : "1.0+git0+753c2d73c3"
        },
        {
                "name" : "aktualizr-configs",
                "version" : "1.0+git0+753c2d73c3"
        },
        {
                "name" : "aktualizr-device-prov",
                "version" : "1.0"
        },
        {
                "name" : "aktualizr-hwid",
                "version" : "1.0"
        },
        {
                "name" : "aktualizr-info",
                "version" : "1.0+git0+753c2d73c3"
        },
        {
                "name" : "aktualizr-lib",
                "version" : "1.0+git0+753c2d73c3"
        },
        {
                "name" : "aktualizr-resource-control",
                "version" : "1.0+git0+753c2d73c3"
        },
        {
                "name" : "aktualizr-uboot-env-rollback",
                "version" : "1.0"
        },
        {
                "name" : "base-files",
                "version" : "3.0.14"
        },
        {
                "name" : "base-passwd",
                "version" : "3.5.29"
        },
        {
                "name" : "boost-log",
                "version" : "1.72.0"
        },
        {
                "name" : "busybox",
                "version" : "1.31.1"
        },
        {
                "name" : "busybox-syslog",
                "version" : "1.31.1"
        },
        {
                "name" : "busybox-udhcpc",
                "version" : "1.31.1"
        },
        {
                "name" : "ca-certificates",
                "version" : "20190110"
        },
        {
                "name" : "curl",
                "version" : "7.69.1"
        },
        {
                "name" : "dbus-1",
                "version" : "1.12.16"
        },
        {
                "name" : "desktop-file-utils",
                "version" : "0.24"
        },
        {
                "name" : "e2fsprogs-e2fsck",
                "version" : "1.45.4"
        },
        {
                "name" : "fit-conf",
                "version" : "1.0"
        },
        {
                "name" : "fontconfig-utils",
                "version" : "2.13.1"
        },
        {
                "name" : "glibc-gconv",
                "version" : "2.31"
        },
        {
                "name" : "glibc-gconv-iso8859-1",
                "version" : "2.31"
        },
        {
                "name" : "gnupg",
                "version" : "2.2.20"
        },
        {
                "name" : "gnupg-gpg",
                "version" : "2.2.20"
        },
        {
                "name" : "gpgme",
                "version" : "1.13.1"
        },
        {
                "name" : "hicolor-icon-theme",
                "version" : "0.17"
        },
        {
                "name" : "init-ifupdown",
                "version" : "1.0"
        },
        {
                "name" : "initscripts",
                "version" : "1.0"
        },
        {
                "name" : "initscripts-functions",
                "version" : "1.0"
        },
        {
                "name" : "kbd",
                "version" : "2.2.0"
        },
        {
                "name" : "kbd-consolefonts",
                "version" : "2.2.0"
        },
        {
                "name" : "kbd-keymaps",
                "version" : "2.2.0"
        },
        {
                "name" : "kernel-4.19.126-v7l",
                "version" : "4.19.126+git0+f6b3ac28f0"
        },
        {
                "name" : "kernel-module-ipv6-4.19.126-v7l",
                "version" : "4.19.126+git0+f6b3ac28f0"
        },
        {
                "name" : "kernel-module-overlay-4.19.126-v7l",
                "version" : "4.19.126+git0+f6b3ac28f0"
        },
        {
                "name" : "kernel-module-sch-fq-codel-4.19.126-v7l",
                "version" : "4.19.126+git0+f6b3ac28f0"
        },
        {
                "name" : "keymaps",
                "version" : "1.0"
        },
        {
                "name" : "kmod",
                "version" : "26"
        },
        {
                "name" : "ldconfig",
                "version" : "2.31+git0+1094741224"
        },
        {
                "name" : "libacl1",
                "version" : "2.2.53"
        },
        {
                "name" : "libarchive",
                "version" : "3.4.2"
        },
        {
                "name" : "libassuan0",
                "version" : "2.5.3"
        },
        {
                "name" : "libatk-1.0-0",
                "version" : "2.34.1"
        },
        {
                "name" : "libatk-bridge-2.0-0",
                "version" : "2.34.1"
        },
        {
                "name" : "libatspi0",
                "version" : "2.34.0"
        },
        {
                "name" : "libattr1",
                "version" : "2.4.48"
        },
        {
                "name" : "libblkid1",
                "version" : "2.35.1"
        },
        {
                "name" : "libboost-filesystem1.72.0",
                "version" : "1.72.0"
        },
        {
                "name" : "libboost-program-options1.72.0",
                "version" : "1.72.0"
        },
        {
                "name" : "libboost-regex1.72.0",
                "version" : "1.72.0"
        },
        {
                "name" : "libboost-thread1.72.0",
                "version" : "1.72.0"
        },
        {
                "name" : "libbz2-1",
                "version" : "1.0.8"
        },
        {
                "name" : "libc6",
                "version" : "2.31+git0+1094741224"
        },
        {
                "name" : "libcairo-gobject2",
                "version" : "1.16.0"
        },
        {
                "name" : "libcairo2",
                "version" : "1.16.0"
        },
        {
                "name" : "libcap2",
                "version" : "2.32"
        },
        {
                "name" : "libcom-err2",
                "version" : "1.45.4"
        },
        {
                "name" : "libcrypt2",
                "version" : "4.4.15"
        },
        {
                "name" : "libcrypto1.1",
                "version" : "1.1.1g"
        },
        {
                "name" : "libcurl4",
                "version" : "7.69.1"
        },
        {
                "name" : "libdbus-1-3",
                "version" : "1.12.16"
        },
        {
                "name" : "libdrm2",
                "version" : "2.4.101"
        },
        {
                "name" : "libe2p2",
                "version" : "1.45.4"
        },
        {
                "name" : "libepoxy0",
                "version" : "1.5.4"
        },
        {
                "name" : "liberation-fonts",
                "version" : "2.00.1"
        },
        {
                "name" : "libexpat1",
                "version" : "2.2.9"
        },
        {
                "name" : "libext2fs2",
                "version" : "1.45.4"
        },
        {
                "name" : "libffi7",
                "version" : "3.3"
        },
        {
                "name" : "libfontconfig1",
                "version" : "2.13.1"
        },
        {
                "name" : "libfreetype6",
                "version" : "2.10.1"
        },
        {
                "name" : "libfribidi0",
                "version" : "1.0.9"
        },
        {
                "name" : "libgcc1",
                "version" : "9.3.0"
        },
        {
                "name" : "libgcrypt",
                "version" : "1.8.5"
        },
        {
                "name" : "libgdk-pixbuf-2.0-0",
                "version" : "2.40.0"
        },
        {
                "name" : "libgdk-pixbuf-2.0-loader-gif",
                "version" : "2.40.0"
        },
        {
                "name" : "libgdk-pixbuf-2.0-loader-jpeg",
                "version" : "2.40.0"
        },
        {
                "name" : "libgdk-pixbuf-2.0-loader-png",
                "version" : "2.40.0"
        },
        {
                "name" : "libgdk-pixbuf-2.0-loader-xpm",
                "version" : "2.40.0"
        },
        {
                "name" : "libgl-mesa",
                "version" : "20.0.2"
        },
        {
                "name" : "libglapi0",
                "version" : "20.0.2"
        },
        {
                "name" : "libglib-2.0-0",
                "version" : "2.62.4"
        },
        {
                "name" : "libglib-2.0-utils",
                "version" : "2.62.4"
        },
        {
                "name" : "libgmp10",
                "version" : "6.2.0"
        },
        {
                "name" : "libgnutls30",
                "version" : "3.6.14"
        },
        {
                "name" : "libgpg-error",
                "version" : "1.37"
        },
        {
                "name" : "libgtk-3.0",
                "version" : "3.24.14"
        },
        {
                "name" : "libharfbuzz0",
                "version" : "2.6.4"
        },
        {
                "name" : "libice6",
                "version" : "1.0.10"
        },
        {
                "name" : "libidn2-0",
                "version" : "2.3.0"
        },
        {
                "name" : "libjitterentropy2",
                "version" : "2.2.0"
        },
        {
                "name" : "libjpeg62",
                "version" : "2.0.4"
        },
        {
                "name" : "libkmod2",
                "version" : "26"
        },
        {
                "name" : "libksba8",
                "version" : "1.3.5"
        },
        {
                "name" : "liblzma5",
                "version" : "5.2.4"
        },
        {
                "name" : "liblzo2-2",
                "version" : "2.10"
        },
        {
                "name" : "libmount1",
                "version" : "2.35.1"
        },
        {
                "name" : "libncursesw5",
                "version" : "6.2"
        },
        {
                "name" : "libnpth0",
                "version" : "1.6"
        },
        {
                "name" : "libnss-myhostname2",
                "version" : "244.3"
        },
        {
                "name" : "libpcap1",
                "version" : "1.9.1"
        },
        {
                "name" : "libpcre1",
                "version" : "8.44"
        },
        {
                "name" : "libpixman-1-0",
                "version" : "0.38.4"
        },
        {
                "name" : "libpng16-16",
                "version" : "1.6.37"
        },
        {
                "name" : "libreadline8",
                "version" : "8.0"
        },
        {
                "name" : "libsm6",
                "version" : "1.2.3"
        },
        {
                "name" : "libsodium23",
                "version" : "1.0.18"
        },
        {
                "name" : "libsqlite3-0",
                "version" : "3.31.1"
        },
        {
                "name" : "libssl1.1",
                "version" : "1.1.1g"
        },
        {
                "name" : "libstdc++6",
                "version" : "9.3.0"
        },
        {
                "name" : "libsysfs2",
                "version" : "2.1.0"
        },
        {
                "name" : "libsystemd0",
                "version" : "244.3"
        },
        {
                "name" : "libtinfo5",
                "version" : "6.2"
        },
        {
                "name" : "libubootenv-bin",
                "version" : "0.2+git0+f4b9cde381"
        },
        {
                "name" : "libubootenv0.2",
                "version" : "0.2+git0+f4b9cde381"
        },
        {
                "name" : "libunistring2",
                "version" : "0.9.10"
        },
        {
                "name" : "libuuid1",
                "version" : "2.35.1"
        },
        {
                "name" : "libx11-6",
                "version" : "1.6.9"
        },
        {
                "name" : "libx11-locale",
                "version" : "1.6.9"
        },
        {
                "name" : "libx11-xcb1",
                "version" : "1.6.9"
        },
        {
                "name" : "libxau6",
                "version" : "1.0.9"
        },
        {
                "name" : "libxcb-dri2-0",
                "version" : "1.13.1"
        },
        {
                "name" : "libxcb-dri3-0",
                "version" : "1.13.1"
        },
        {
                "name" : "libxcb-glx0",
                "version" : "1.13.1"
        },
        {
                "name" : "libxcb-present0",
                "version" : "1.13.1"
        },
        {
                "name" : "libxcb-render0",
                "version" : "1.13.1"
        },
        {
                "name" : "libxcb-shm0",
                "version" : "1.13.1"
        },
        {
                "name" : "libxcb-sync1",
                "version" : "1.13.1"
        },
        {
                "name" : "libxcb-xkb1",
                "version" : "1.13.1"
        },
        {
                "name" : "libxcb1",
                "version" : "1.13.1"
        },
        {
                "name" : "libxcomposite1",
                "version" : "0.4.5"
        },
        {
                "name" : "libxcursor1",
                "version" : "1.2.0"
        },
        {
                "name" : "libxdamage1",
                "version" : "1.1.5"
        },
        {
                "name" : "libxdmcp6",
                "version" : "1.1.3"
        },
        {
                "name" : "libxext6",
                "version" : "1.3.4"
        },
        {
                "name" : "libxfixes3",
                "version" : "5.0.3"
        },
        {
                "name" : "libxft2",
                "version" : "2.3.3"
        },
        {
                "name" : "libxi6",
                "version" : "1.7.10"
        },
        {
                "name" : "libxkbcommon",
                "version" : "0.10.0"
        },
        {
                "name" : "libxml2",
                "version" : "2.9.10"
        },
        {
                "name" : "libxrandr2",
                "version" : "1.5.2"
        },
        {
                "name" : "libxrender1",
                "version" : "0.9.10"
        },
        {
                "name" : "libxshmfence1",
                "version" : "1.3"
        },
        {
                "name" : "libxt6",
                "version" : "1.2.0"
        },
        {
                "name" : "libxtst6",
                "version" : "1.2.3"
        },
        {
                "name" : "libxxf86vm1",
                "version" : "1.1.4"
        },
        {
                "name" : "libz1",
                "version" : "1.2.11"
        },
        {
                "name" : "libzip",
                "version" : "1.6.1"
        },
        {
                "name" : "lshw",
                "version" : "02.17"
        },
        {
                "name" : "mesa-megadriver",
                "version" : "20.0.2"
        },
        {
                "name" : "modutils-initscripts",
                "version" : "1.0"
        },
        {
                "name" : "ncurses-terminfo-base",
                "version" : "6.2"
        },
        {
                "name" : "netbase",
                "version" : "6.1"
        },
        {
                "name" : "nettle",
                "version" : "3.5.1"
        },
        {
                "name" : "networkd-dhcp-conf",
                "version" : "1.0"
        },
        {
                "name" : "openssh",
                "version" : "8.2p1"
        },
        {
                "name" : "openssh-keygen",
                "version" : "8.2p1"
        },
        {
                "name" : "openssh-scp",
                "version" : "8.2p1"
        },
        {
                "name" : "openssh-ssh",
                "version" : "8.2p1"
        },
        {
                "name" : "openssh-sshd",
                "version" : "8.2p1"
        },
        {
                "name" : "openssl-bin",
                "version" : "1.1.1g"
        },
        {
                "name" : "openssl-conf",
                "version" : "1.1.1g"
        },
        {
                "name" : "os-release",
                "version" : "1.0"
        },
        {
                "name" : "ostree",
                "version" : "2020.3"
        },
        {
                "name" : "ostree-kernel",
                "version" : "0.0.1"
        },
        {
                "name" : "ostree-switchroot",
                "version" : "2020.3"
        },
        {
                "name" : "packagegroup-core-boot",
                "version" : "1.0"
        },
        {
                "name" : "pango",
                "version" : "1.44.7"
        },
        {
                "name" : "pinentry",
                "version" : "1.1.0"
        },
        {
                "name" : "rng-tools",
                "version" : "6.9"
        },
        {
                "name" : "run-postinsts",
                "version" : "1.0"
        },
        {
                "name" : "shadow",
                "version" : "4.8.1"
        },
        {
                "name" : "shadow-base",
                "version" : "4.8.1"
        },
        {
                "name" : "shadow-securetty",
                "version" : "4.6"
        },
        {
                "name" : "shared-mime-info",
                "version" : "1.15"
        },
        {
                "name" : "systemd",
                "version" : "244.3"
        },
        {
                "name" : "systemd-compat-units",
                "version" : "1.0"
        },
        {
                "name" : "systemd-conf",
                "version" : "244.3"
        },
        {
                "name" : "systemd-extra-utils",
                "version" : "244.3"
        },
        {
                "name" : "systemd-journald-persistent",
                "version" : "1.0"
        },
        {
                "name" : "systemd-serialgetty",
                "version" : "1.0"
        },
        {
                "name" : "systemd-vconsole-setup",
                "version" : "244.3"
        },
        {
                "name" : "tcpdump",
                "version" : "4.9.3"
        },
        {
                "name" : "udev",
                "version" : "244.3"
        },
        {
                "name" : "udev-hwdb",
                "version" : "244.3"
        },
        {
                "name" : "update-alternatives-opkg",
                "version" : "0.4.2"
        },
        {
                "name" : "update-rc.d",
                "version" : "0.8"
        },
        {
                "name" : "util-linux-agetty",
                "version" : "2.35.1"
        },
        {
                "name" : "util-linux-fsck",
                "version" : "2.35.1"
        },
        {
                "name" : "util-linux-mount",
                "version" : "2.35.1"
        },
        {
                "name" : "util-linux-sulogin",
                "version" : "2.35.1"
        },
        {
                "name" : "util-linux-umount",
                "version" : "2.35.1"
        },
        {
                "name" : "vim",
                "version" : "8.2"
        },
        {
                "name" : "vim-common",
                "version" : "8.2"
        },
        {
                "name" : "vim-help",
                "version" : "8.2"
        },
        {
                "name" : "vim-syntax",
                "version" : "8.2"
        },
        {
                "name" : "vim-tutor",
                "version" : "8.2"
        },
        {
                "name" : "vim-vimrc",
                "version" : "8.2"
        },
        {
                "name" : "volatile-binds",
                "version" : "1.0"
        },
        {
                "name" : "wayland",
                "version" : "1.18.0"
        }
]
*   Trying 104.154.69.64:8443...
* Connected to ota-ce.uptanedemo.com (104.154.69.64) port 8443 (#0)
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /tmp/aktualizr-35a0-b3b0-5456-e83d/7971-39b3-tls-ca
  CApath: /etc/ssl/certs
* SSL connection using TLSv1.2 / ECDHE-ECDSA-AES256-GCM-SHA384
* ALPN, server accepted to use http/1.1
* Server certificate:
*  subject: CN=ota-gateway
*  start date: Sep 13 14:17:47 2020 GMT
*  expire date: Sep 11 14:17:47 2030 GMT
*  subjectAltName: host "ota-ce.uptanedemo.com" matched cert's "ota-ce.uptanedemo.com"
*  issuer: CN=ota-server-CA
*  SSL certificate verify ok.
> PUT /core/installed HTTP/1.1
Host: ota-ce.uptanedemo.com:8443
User-Agent: Aktualizr/2020.8-59-g753c2d73c
Accept: */*
Content-Type: application/json
Content-Length: 8741

* upload completely sent off: 8741 out of 8741 bytes
* Mark bundle as not supporting multiuse
< HTTP/1.1 204 No Content
< Server: nginx/1.13.7
< Date: Sun, 13 Sep 2020 19:18:45 GMT
< Connection: keep-alive
< x-ats-version: device-registry/0.3.0-2-g5aa199e
< 
* Connection #0 to host ota-ce.uptanedemo.com left intact
response http code: 204
response: 
network_info hash not present in db
Reporting network information
put request body:{
        "hostname" : "raspberrypi4",
        "local_ipv4" : "192.168.1.4",
        "mac" : "dc:a6:32:86:b2:2e"
}
*   Trying 104.154.69.64:8443...
* Connected to ota-ce.uptanedemo.com (104.154.69.64) port 8443 (#0)
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /tmp/aktualizr-35a0-b3b0-5456-e83d/7971-39b3-tls-ca
  CApath: /etc/ssl/certs
* SSL connection using TLSv1.2 / ECDHE-ECDSA-AES256-GCM-SHA384
* ALPN, server accepted to use http/1.1
* Server certificate:
*  subject: CN=ota-gateway
*  start date: Sep 13 14:17:47 2020 GMT
*  expire date: Sep 11 14:17:47 2030 GMT
*  subjectAltName: host "ota-ce.uptanedemo.com" matched cert's "ota-ce.uptanedemo.com"
*  issuer: CN=ota-server-CA
*  SSL certificate verify ok.
> PUT /system_info/network HTTP/1.1
Host: ota-ce.uptanedemo.com:8443
User-Agent: Aktualizr/2020.8-59-g753c2d73c
Accept: */*
Content-Type: application/json
Content-Length: 80

* upload completely sent off: 80 out of 80 bytes
* Mark bundle as not supporting multiuse
< HTTP/1.1 404 Not Found
< Server: nginx/1.13.7
< Date: Sun, 13 Sep 2020 19:18:46 GMT
< Content-Type: application/json
< Content-Length: 124
< Connection: keep-alive
< x-ats-version: device-registry/0.3.0-2-g5aa199e
< 
* Connection #0 to host ota-ce.uptanedemo.com left intact
response http code: 404
response: {"code":"missing_device","description":"device doesn't exist","cause":null,"errorId":"e3d6a0e8-ecda-491f-98ee-b4b022806e09"}
configuration hash not present in db
Reporting libaktualizr configuration
*   Trying 104.154.69.64:8443...
* Connected to ota-ce.uptanedemo.com (104.154.69.64) port 8443 (#0)
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /tmp/aktualizr-35a0-b3b0-5456-e83d/7971-39b3-tls-ca
  CApath: /etc/ssl/certs
* SSL connection using TLSv1.2 / ECDHE-ECDSA-AES256-GCM-SHA384
* ALPN, server accepted to use http/1.1
* Server certificate:
*  subject: CN=ota-gateway
*  start date: Sep 13 14:17:47 2020 GMT
*  expire date: Sep 11 14:17:47 2030 GMT
*  subjectAltName: host "ota-ce.uptanedemo.com" matched cert's "ota-ce.uptanedemo.com"
*  issuer: CN=ota-server-CA
*  SSL certificate verify ok.
> POST /system_info/config HTTP/1.1
Host: ota-ce.uptanedemo.com:8443
User-Agent: Aktualizr/2020.8-59-g753c2d73c
Accept: */*
Content-Type: application/toml
Content-Length: 1757

* upload completely sent off: 1757 out of 1757 bytes
* Mark bundle as not supporting multiuse
< HTTP/1.1 404 Not Found
< Server: nginx/1.13.7
< Date: Sun, 13 Sep 2020 19:18:47 GMT
< Content-Type: text/html
< Content-Length: 169
< Connection: keep-alive
< 
* Connection #0 to host ota-ce.uptanedemo.com left intact
response http code: 404
response: <html>
<head><title>404 Not Found</title></head>
<body bgcolor="white">
<center><h1>404 Not Found</h1></center>
<hr><center>nginx/1.13.7</center>
</body>
</html>
got SendDeviceDataComplete event
network_info hash not present in db
Reporting network information
put request body:{
        "hostname" : "raspberrypi4",
        "local_ipv4" : "192.168.1.4",
        "mac" : "dc:a6:32:86:b2:2e"
}
*   Trying 104.154.69.64:8443...
* Connected to ota-ce.uptanedemo.com (104.154.69.64) port 8443 (#0)
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /tmp/aktualizr-35a0-b3b0-5456-e83d/7971-39b3-tls-ca
  CApath: /etc/ssl/certs
* SSL connection using TLSv1.2 / ECDHE-ECDSA-AES256-GCM-SHA384
* ALPN, server accepted to use http/1.1
* Server certificate:
*  subject: CN=ota-gateway
*  start date: Sep 13 14:17:47 2020 GMT
*  expire date: Sep 11 14:17:47 2030 GMT
*  subjectAltName: host "ota-ce.uptanedemo.com" matched cert's "ota-ce.uptanedemo.com"
*  issuer: CN=ota-server-CA
*  SSL certificate verify ok.
> PUT /system_info/network HTTP/1.1
Host: ota-ce.uptanedemo.com:8443
User-Agent: Aktualizr/2020.8-59-g753c2d73c
Accept: */*
Content-Type: application/json
Content-Length: 80

* upload completely sent off: 80 out of 80 bytes
* Mark bundle as not supporting multiuse
< HTTP/1.1 404 Not Found
< Server: nginx/1.13.7
< Date: Sun, 13 Sep 2020 19:18:48 GMT
< Content-Type: application/json
< Content-Length: 124
< Connection: keep-alive
< x-ats-version: device-registry/0.3.0-2-g5aa199e
< 
* Connection #0 to host ota-ce.uptanedemo.com left intact
response http code: 404
response: {"code":"missing_device","description":"device doesn't exist","cause":null,"errorId":"e3d6a0e8-ecda-491f-98ee-b4b022806e09"}
No device installation result in db
No installation result to report in manifest
put request body:{
        "signatures" : 
        [
                {
                        "keyid" : "61aa9788c93a4ffe654ccf474a5f4feb072430b7aabbb9f313aad3c471c36625",
                        "method" : "rsassa-pss",
                        "sig" : "Mob+DtXIyKu9nT2kRs+YNG27PvYJu8vJj8JdeUxOZGbSv9bWUjBof8cMzQvYSdNP5p6JZ7WsNyjZtODgzQP5INRQRGTNTqIp8VsYLS9pAmNUyt0+6OcM/"
                }
        ],
        "signed" : 
        {
                "ecu_version_manifests" : 
                {
                        "61aa9788c93a4ffe654ccf474a5f4feb072430b7aabbb9f313aad3c471c36625" : 
                        {
                                "signatures" : 
                                [
                                        {
                                                "keyid" : "61aa9788c93a4ffe654ccf474a5f4feb072430b7aabbb9f313aad3c471c36625",
                                                "method" : "rsassa-pss",
                                                "sig" : "eCbQAvjguuXxZAoYtVtWRA1lwYVHd20kjleYXjPUorPkKk8IhdhXrlo0VQUts2MqhoE+7PrM4IFYI4QUHCEPvywC4iS0s"
                                        }
                                ],
                                "signed" : 
                                {
                                        "attacks_detected" : "",
                                        "ecu_serial" : "61aa9788c93a4ffe654ccf474a5f4feb072430b7aabbb9f313aad3c471c36625",
                                        "installed_image" : 
                                        {
                                                "fileinfo" : 
                                                {
                                                        "hashes" : 
                                                        {
                                                                "sha256" : "d955ae3d8a3f398402853925c0674821a80c2046ea41a227b6a735b62f10c4cf"
                                                        },
                                                        "length" : 0
                                                },
                                                "filepath" : "uptane-demo-d955ae3d8a3f398402853925c0674821a80c2046ea41a227b6a735b62f10c4cf"
                                        },
                                        "previous_timeserver_time" : "1970-01-01T00:00:00Z",
                                        "report_counter" : "1",
                                        "timeserver_time" : "1970-01-01T00:00:00Z"
                                }
                        }
                },
                "primary_ecu_serial" : "61aa9788c93a4ffe654ccf474a5f4feb072430b7aabbb9f313aad3c471c36625"
        }
}
*   Trying 104.154.69.64:8443...
* Connected to ota-ce.uptanedemo.com (104.154.69.64) port 8443 (#0)
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /tmp/aktualizr-35a0-b3b0-5456-e83d/7971-39b3-tls-ca
  CApath: /etc/ssl/certs
* SSL connection using TLSv1.2 / ECDHE-ECDSA-AES256-GCM-SHA384
* ALPN, server accepted to use http/1.1
* Server certificate:
*  subject: CN=ota-gateway
*  start date: Sep 13 14:17:47 2020 GMT
*  expire date: Sep 11 14:17:47 2030 GMT
*  subjectAltName: host "ota-ce.uptanedemo.com" matched cert's "ota-ce.uptanedemo.com"
*  issuer: CN=ota-server-CA
*  SSL certificate verify ok.
> PUT /director/manifest HTTP/1.1
Host: ota-ce.uptanedemo.com:8443
User-Agent: Aktualizr/2020.8-59-g753c2d73c
Accept: */*
Content-Type: application/json
Content-Length: 1575

* upload completely sent off: 1575 out of 1575 bytes
* Mark bundle as not supporting multiuse
< HTTP/1.1 200 OK
< Server: nginx/1.13.7
< Date: Sun, 13 Sep 2020 19:18:50 GMT
< Content-Type: application/json
< Content-Length: 2
< Connection: keep-alive
< x-ats-version: director/0.8.0-30-ge3aca46
< 
* Connection #0 to host ota-ce.uptanedemo.com left intact
response http code: 200
response: {}
Root metadata not present
GET https://ota-ce.uptanedemo.com:8443/director/1.root.json
*   Trying 104.154.69.64:8443...
* Connected to ota-ce.uptanedemo.com (104.154.69.64) port 8443 (#0)
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /tmp/aktualizr-35a0-b3b0-5456-e83d/7971-39b3-tls-ca
  CApath: /etc/ssl/certs
* SSL connection using TLSv1.2 / ECDHE-ECDSA-AES256-GCM-SHA384
* ALPN, server accepted to use http/1.1
* Server certificate:
*  subject: CN=ota-gateway
*  start date: Sep 13 14:17:47 2020 GMT
*  expire date: Sep 11 14:17:47 2030 GMT
*  subjectAltName: host "ota-ce.uptanedemo.com" matched cert's "ota-ce.uptanedemo.com"
*  issuer: CN=ota-server-CA
*  SSL certificate verify ok.
> GET /director/1.root.json HTTP/1.1
Host: ota-ce.uptanedemo.com:8443
User-Agent: Aktualizr/2020.8-59-g753c2d73c
Accept: */*

* Mark bundle as not supporting multiuse
< HTTP/1.1 424 Failed Dependency
< Server: nginx/1.13.7
< Date: Sun, 13 Sep 2020 19:18:51 GMT
< Content-Type: application/json
< Content-Length: 154
< Connection: keep-alive
< x-ats-version: director/0.8.0-30-ge3aca46
< 
* Connection #0 to host ota-ce.uptanedemo.com left intact
response http code: 424
response: {"code":"root_role_not_found","description":"root role was not found in upstream key store","cause":null,"errorId":"65242ca8-12f5-4202-be1c-}
Director metadata update failed: Failed to fetch role root in director repository.
No device installation result in db
No installation result to report in manifest
put request body:{
        "signatures" : 
        [
                {
                        "keyid" : "61aa9788c93a4ffe654ccf474a5f4feb072430b7aabbb9f313aad3c471c36625",
                        "method" : "rsassa-pss",
                        "sig" : "RSy6ZNKPFIkE3aurwufVDULsh7wCSc/rg3OI5VNaJgskl1haz+87BHvtw8PpZqqbhNufBoDyYuY2uLyi4sbcei6HKzlunbWni4wiWCln+LzgbqH5HKw4q"
                }
        ],
        "signed" : 
        {
                "ecu_version_manifests" : 
                {
                        "61aa9788c93a4ffe654ccf474a5f4feb072430b7aabbb9f313aad3c471c36625" : 
                        {
                                "signatures" : 
                                [
                                        {
                                                "keyid" : "61aa9788c93a4ffe654ccf474a5f4feb072430b7aabbb9f313aad3c471c36625",
                                                "method" : "rsassa-pss",
                                                "sig" : "QsJtNl9X6UCj6Q5wWJNS+eo8zfGyXEpsDYf8ZhpKt140UydCd3EJDhYUJzKlMbdri6ZBJpAOQ9VXx5LL3iy9F9Yerc2GE"
                                        }
                                ],
                                "signed" : 
                                {
                                        "attacks_detected" : "",
                                        "ecu_serial" : "61aa9788c93a4ffe654ccf474a5f4feb072430b7aabbb9f313aad3c471c36625",
                                        "installed_image" : 
                                        {
                                                "fileinfo" : 
                                                {
                                                        "hashes" : 
                                                        {
                                                                "sha256" : "d955ae3d8a3f398402853925c0674821a80c2046ea41a227b6a735b62f10c4cf"
                                                        },
                                                        "length" : 0
                                                },
                                                "filepath" : "uptane-demo-d955ae3d8a3f398402853925c0674821a80c2046ea41a227b6a735b62f10c4cf"
                                        },
                                        "previous_timeserver_time" : "1970-01-01T00:00:00Z",
                                        "report_counter" : "2",
                                        "timeserver_time" : "1970-01-01T00:00:00Z"
                                }
                        }
                },
                "primary_ecu_serial" : "61aa9788c93a4ffe654ccf474a5f4feb072430b7aabbb9f313aad3c471c36625"
        }
}

Can I get some idea what's going wrong here ?

msatpathy26 commented 4 years ago

Adding below a less detailed summary of the error as well for a quick look.

root@raspberrypi4:/var/rootdirs/home/root# aktualizr -c /var/sota/ --loglevel 1
Aktualizr version 2020.9-0-gd4811f900 starting
Reading config: "/var/sota/sota.toml"
Current directory: /var/rootdirs/home/root
Use existing SQL storage: "/var/sota/sql.db"
Checking if device is provisioned...
All ECUs are already registered with the server.
Primary ECU serial: c708c67a484afaa6dc1c1fdc394ee9929fb54d8bc8bee946a63fd86604681409 with hardware ID: raspberrypi4
Device ID: 60fc6bbd-fd15-441b-b17f-fce4197988f4
Device Gateway URL: https://ota-ce.uptanedemo.com:8443
Certificate subject: CN=60fc6bbd-fd15-441b-b17f-fce4197988f4
Certificate issuer: CN=ota-devices-CA
Certificate valid from: Sep 14 11:21:11 2020 GMT until: Sep 14 11:21:11 2021 GMT
... provisioned OK
No pending updates, continuing with initialization
Reporting default hardware information
Reporting network information
Reporting libaktualizr configuration
got SendDeviceDataComplete event
Reporting network information
No installation result to report in manifest
GET https://ota-ce.uptanedemo.com:8443/director/1.root.json
Director metadata update failed: Failed to fetch role root in director repository.
pattivacek commented 4 years ago

It looks like you are using the Community Edition, which is not very actively supported at the moment. Something must be wrong with your backend. The device thinks it is provisioned yet is getting 405s on PUT /system_info and lots of concerning messages like this:

response http code: 404
response: {"code":"missing_device","description":"device doesn't exist","cause":null,"errorId":"e3d6a0e8-ecda-491f-98ee-b4b022806e09"}

This also looks bad:

response http code: 424
response: {"code":"root_role_not_found","description":"root role was not found in upstream key store","cause":null,"errorId":"65242ca8-12f5-4202-be1c-}
Director metadata update failed: Failed to fetch role root in director repository.

If you can't even fetch the first Root metadata from the Director, something is clearly not right with the Director. Note that libaktualizr will always try to fetch newer versions of the Root metadata, and if there isn't a newer one, it will complain, but that isn't necessary a problem. This, however, is the first Root.

msatpathy26 commented 4 years ago

Thanks for the reply @patrickvacek

Speaking about the director, the latest version in community edition is using director-v2, however I am still using director. Can I get an idea what's the basic difference ?

pattivacek commented 4 years ago

Director was completely reimplemented to be more efficient, to drop unused features, and to make it easier to maintain. I don't know much about the details. I highly recommend using the new version.

It also occurs to me that it is possible that you are using an old enough version of Director that still expects libaktualizr to fetch the unnumbered Root metadata. That requirement was dropped months ago (I don't know when exactly), so we removed that: https://github.com/advancedtelematic/aktualizr/pull/1661. (See https://github.com/advancedtelematic/aktualizr/pull/1501 for some more context.)

msatpathy26 commented 4 years ago

@patrickvacek thanks for the useful input. My Director version is 5 month's old where as aktualizr is the most recent version. I would try to use a more recent version and see how it goes.

msatpathy26 commented 4 years ago

@patrickvacek I upgraded to the latest configuration and now it throws error 400. What does this error code imply ?

root@raspberrypi4:/var/rootdirs/home/root# aktualizr -c /var/sota/ --loglevel 1
Aktualizr version 2020.9-0-gd4811f900 starting
Reading config: "/var/sota/sota.toml"
Current directory: /var/rootdirs/home/root
Bootstrap empty SQL storage
Bootstraping DB to version 25
Unable to load previous device ID.
Successfully imported client certificate from "/var/sota/import/client.pem"
Successfully imported server CA certificate from "/var/sota/import/root.crt"
Successfully imported client TLS key from "/var/sota/import/pkey.pem"
No serial found in database for this ECU, defaulting to empty serial
Could not find Primary ECU serial, set to lazy init mode
Successfully imported installed versions from "/var/sota/import/installed_versions"
Checking if device is provisioned...
Initializer error: Server error: Error registering device: 400 {"code":"invalid_entity","description":"public-key length is wrong: DownField(110860ed8}
pattivacek commented 4 years ago

Sorry, but I've never seen that error before and I don't know much about the backend. Possibly @jochenschneider or @houcros might be able to say more about the device gateway and/or director's behavior here.

msatpathy26 commented 4 years ago

@patrickvacek , thanks for the pointers. As I wait to hear from anyone about any fix to the issue, would it be possible to know anything about the versions of server components (similar to this ) that you use for your test environment. For months I have been struggling to find the best match that can work together with recent version of aktualizr. I donot see any clear information available with aktualizr's release note stating the required versions of server components that must be available to work correctly.

pattivacek commented 4 years ago

Unfortunately we do not have a chart of compatible versions. The aktualizr and meta-updater CIs use whatever is running on our production server, and we do most internal testing against an internal instance that is pretty similar. I don't have many details there but @alexhumphreys or @SusVlaAlex might.

alexhumphreys commented 4 years ago

I've added the file config/latest-images.yaml in ota-community-edition. This file should get automatically updated when we change the versions running on our production server. It's not exactly a compatibility chart with aktualizr, but it'll at least give an idea of what server versions were running at what dates.