Does mcuboot support to upgrade itself?

[michaelloveyou]

Hi,

Does mcuboot support to upgrade itself via OTA?

I'm considering port to mcuboot to our project, one of the mandatory requirement for our project is that: support to upgrade the bootloader via OTA. I want to know whether the mcuboot is suitable for our project?

[almir-okato]

Hi @michaelloveyou MCUboot was not designed to support updating itself. However it does support multi-image and they are "updatable", so depending on your needs one option could be keeping MCUboot as a very light bootloader and add one more booting stage to your design (MCUboot -> first image -> main image).

[nvlsianpu]

In NCS, the fork of the mcuboot was made able to be updated. This is another option if you are goin to use nRF devices,

[d3zd3z]

Upgrading MCUboot only really makes sense if it is a secondary bootloader. No matter what in a system, to have a secure boot, there needs to be code that runs at the start that can't be modified that establishes the root of trust. The ideal is to have this code do as little as possible (since it can't be upgraded). Those minimal things generally include signature verification and image installation. MCUboot is intended to be that minimal piece of code.

You could always make MCUboot with a 2 stage, but unless your MCU has its own bootloader, the second MCUboot ends up usually just being redundant, and there isn't much benefit to doing it that way.

[github-actions[bot]]

This issue has been marked as stale because it has been open (more than) 60 days with no activity. Remove the stale label or add a comment saying that you would like to have the label removed otherwise this issue will automatically be closed in 14 days. Note, that you can always re-open a closed issue at any time.