
23 Sep
2005
23 Sep
'05
10:02 p.m.
Roberts, John wrote:
The code at the entry point needs to be small, reliable and never require an upgrade in the field. This code would run a CRC on the primary U-boot image to determine if it's safe to boot, upon CRC failure verify then run the backup image.
For remote systems we need to resolve the issue of upgrade failure without human intervention - or perhaps remote human intervention.
We have done this on our board "gth". We use a pre-loader called miniboot: http://opensource.se/projects/miniboot/index.html
Miniboot choose which of two u-boot images to boot by checking CRC.
Regards, /Thomas