As Garden Linux administrator I may want to perform in-place upgrades within the instance (Virtual Machine). I want to be able to call a single upgrade procedure/tool.

Required:

• Everything modified by the user on the instance is kept.
• The change can be triggered over a binary on the image.
• The new downloaded image should be verified before applying it to avoid corruption during download or modification by 3rd party.
• The tool should keep by default one previous version of the image in order to be able to revert to it in case of failures.
• The VM should try to boot twice before returning to last-working release.

Not in scope:

Required:

• EFI Boot
• TPM 2.0 enabled

Tasks:

Dec

• Describe in-place-update tool return codes #2504
• Perform full end-to-end testing on in-place updates #2550

Nov

• handle secboot invalid more gracefully for USI boot #2459
• Allow in-place updates without TPM #2443

Oct

• in-place update tool #2458
• Detect version from EFI vars package-gardenlinux-update#3

September

• https://github.com/gardenlinux/sap-internal/issues/23
• Enable the pulling of the UKI objects from container registry
• Prepare update tool prototype with hardcoded versions #2352
• Publish an AWS AMI manually for prototyping purposes #2353