linux-works
Active Member
one model of system I worked on had 3 partitions: 2 that were flashable (the A and the B parts) and a C that was ROM and a boot-of-last-resort. if you ping-ponged on A and B and then back to A (watchdog caught hangs) then it would eventually boot to C and C would be able to properly flash A or B or at least fsck it if the filesystem was not cleanly unmounted.
sadly, I have not seen that model in the car world even though I've pushed for it, many times.
the model where we had 3 parts was on microwave IP radios that you'd mount on very high commercial towers, for ISP to ISP use. apparently, a tower climb can cost $10k (really? they say so, though) and so you REALLY dont want the customer to have to suffer that if your product hung or was in a bad firmware state. so we had that 3 partition scheme and it worked out very well.
I really wish the car guys would catch on and even let us have 1 level of UNDO.
its not too much to ask. but it does mean it has to be CAR WIDE. you dont just undo one ecu, you find the dependancy tree for the new version you want to revert to and you flash everyone back that needs it.
sadly, I have not seen that model in the car world even though I've pushed for it, many times.
the model where we had 3 parts was on microwave IP radios that you'd mount on very high commercial towers, for ISP to ISP use. apparently, a tower climb can cost $10k (really? they say so, though) and so you REALLY dont want the customer to have to suffer that if your product hung or was in a bad firmware state. so we had that 3 partition scheme and it worked out very well.
I really wish the car guys would catch on and even let us have 1 level of UNDO.
its not too much to ask. but it does mean it has to be CAR WIDE. you dont just undo one ecu, you find the dependancy tree for the new version you want to revert to and you flash everyone back that needs it.