Re: [Fud] Charter Text

Hannes Tschofenig <> Thu, 10 August 2017 11:47 UTC

Return-Path: <>
Received: from localhost (localhost []) by (Postfix) with ESMTP id CCDAD132695 for <>; Thu, 10 Aug 2017 04:47:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -4.9
X-Spam-Status: No, score=-4.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-2.8, RCVD_IN_SORBS_SPAM=0.5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id nmppCvV7EzlQ for <>; Thu, 10 Aug 2017 04:47:47 -0700 (PDT)
Received: from ( []) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by (Postfix) with ESMTPS id C68A213250B for <>; Thu, 10 Aug 2017 04:47:46 -0700 (PDT)
Received: from [] ([]) by (mrgmx003 []) with ESMTPSA (Nemesis) id 0Lpbqo-1dAZW328la-00fOA1; Thu, 10 Aug 2017 13:47:37 +0200
To: Olaf Bergmann <>
Cc: Emmanuel Baccelli <>,
References: <> <> <> <> <>
From: Hannes Tschofenig <>
Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9
Message-ID: <>
Date: Thu, 10 Aug 2017 13:47:36 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.2.1
MIME-Version: 1.0
In-Reply-To: <>
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: 8bit
X-Provags-ID: V03:K0:qEMntA7IDjcD5naPhj30H5mKtulA+ht7sF2ulDT2refXLUBsVhE tTK3JHA9/SIz5zH+7GfEEvG3SQjPJ16QhonPsTypdQl/nebRLyWP9RPT1yGaAC6A/seA2yp Azc4k2buGrvikLK7qqZ2HGTCrf2PQtiDRlS53O3X+2iR5+AbJrqAyY99T7OiowfAVXsxBPk ag7UhswbRhe7VM+Xsac9Q==
X-UI-Out-Filterresults: notjunk:1;V01:K0:jIeYrI1znwI=:QIVhAV4+BkAfLVvpsb2Z+n mbx4QVcFMmgLBPlswVNHGd5ZwgpE5qSMa4LP3Dz73TYiXbwhfVLzL65QH8b64j4uFsINdGkVn Y6rbX3pSXqQnF2Oryg+zWRtiU8u/1OuePjFxCNfw8IaOU6Ruvj2dDqdy+Z+yckcnnFvNHKD/j yJAbDfIH8rmCwvwGLE8ULF5h4ReF1CZSKw4ryqvISqfuUmKY4bvBoS9ACyvqKNCzPj6SMEOOj QcwwMmk/rbeXbcIhgLFGEU04AKLCHuAnAd6HO2xBcVI3DvN8FnwEGcv+l5ouytO6QgQiUQupQ 0SaAGaTmI18yWMTfkySAZJOJgHF2NQzbl2pUfJvg0wgeO7MSpkswNec4S1/oJzd0ZOEk47eSG qJ5I2fWr9tvwnX041d3W9ie5KaN/x+nxE6tFpqGfz3d+mYMClfOWUqcNVF4lYXIxs0yDcm3np z8/yF7J3PpQecqKUI96FmE1+nzIOXbgEOX6ICM0hTftFLGgXCfugQWf35Q1ptd9BguPLBLsLR UeR5H5VDteV9v7ecqy0i/PU41fJtiKd7DX/qM/LwLCdqYrhb1c19uiURJ3QtnffjkxJwNVSun H3NndU6qrvoGHjaXCOpyutoPyKsCGAep5u10Rn7IvWROQbcILWck1h6do8Seq6FteI4xsOORw fUz5YBgPzJzVe7VTOCBX7wNeSYN41qxdzqU9WuNhrHCzYjvZOYzt6b0zz8fq9y3Ge+Yi/aDbk N2+pAz2yLwUEHhHz9YkYWr8lXO7sil9ncbdQPbhNNTqHNJtng7NlhfbIkoQexUxtTO8E4RZOo cabxr9U5Rv3AKHzNODS2k2jgQ+a38SB9FNtzTjc57qm1xndNiw=
Archived-At: <>
Subject: Re: [Fud] Charter Text
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: FUD - Firmware Updating Description <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Thu, 10 Aug 2017 11:47:49 -0000

Hi Olaf,

a few remarks below.

On 08/08/2017 12:50 PM, Olaf Bergmann wrote:
> Hi Hannes,
> Hannes Tschofenig <> writes:
>> I believe Emmanuel needs to tell us a bit more about the use case he has
>> in mind.
> And of course others as well. Hannes did a good outline of what he
> thinks should be addressed. Those who have use cases that are not
> covered by this should speak up.


>> The use cases I would like to cover are:
>> - a developer creates a single firmware image, which may consist of
>> source code from various parties and may also contain binaries from
>> third parties.
>> - a developer creates multiple firmware images (since the device has
>> multiple microcontrollers that need to be updated).
>> In this model the update service on a microcontroller gets code from a
>> single source only (at least for the device it appears so since it does
>> not know whether an included library was written by a different developer).
> Yes, I agree in principle.
> What we have seen (not only at the IOTSU workshop but also on existing
> devices such as VoIP phones) is that firmware updates typically do not
> come as a monolithic package but that in modules that can be updated
> separately (the most common---and desirable---split is between the OS
> and the basic bootloader). I think that at least this should be
> addressed here.

FWIW I would not consider VoIP phones in scope of the devices we would
be looking at.

I also recall discussions at the IoTSU workshop but I remember that
there was some confusion between the concept of a monolithic firmware
images and what is actually sent over the wire (full image vs.
differential updates). I don't think we ever talked about bootloaders
vs. the rest of the OS.

>> What I specifically want to exclude is a model like JavaScript where you
>> can get code from multiple different sources dynamically during code
>> execution.
> I agree as well.
> Grüße
> Olaf