raspberrypi/rpi-sb-provisioner v2.1.0

on GitHub

Headlines

• Automatic Boot Image Generation - Generate signed boot images and Debian packages from uploaded OS images, enabling configuration updates without full re-provisioning
• Complete Documentation Rewrite - README transformed into a beginner-friendly guide with step-by-step instructions and comprehensive troubleshooting
• Enhanced EEPROM Support - Proper EEPROM updates for naked (non-secure-boot) provisioning on Pi 4 and Pi 5
• Architecture Documentation - New workflow diagrams and detailed system design explanations

Who Should Upgrade

• All users - Important bug fixes and usability improvements
• New users - Significantly improved documentation makes getting started easier
• Naked provisioning users - EEPROM updates now work correctly for non-secure-boot devices
• Users wanting configuration updates - Deploy kernel and config.txt changes to provisioned devices without re-provisioning

What's Changed

New Features

• Boot Image Generator - Introduces rpi-sb-image-bootimg-generator tool and systemd service

  • Automatically extracts boot partition from uploaded images
  • Creates signed boot.img and boot.sig for secure boot
  • Generates installable Debian packages for pushing updates to deployed devices
  • Full logging support in /var/log/rpi-sb-provisioner/bootimg-generator/

• Enhanced EEPROM Updates

  • Non-secure-boot devices now receive proper EEPROM updates on 2711/2712
  • Improved special re-provisioning handling for Pi 5
  • Migration from custom writeSig() to standardized rpi-eeprom-digest tool
  • Better firmware version detection and logging

• API Security

  • New RPI_SB_PROVISIONER_ENABLE_PRIVATE_KEY_API configuration option
  • Pagination and ordering for service log API
  • Enhanced audit logging

Documentation

• Complete README rewrite with:
  • "What Problem Does This Solve?" introduction
  • Step-by-step getting started guide
  • Device-specific connection instructions
  • Comprehensive troubleshooting section
• New architecture documentation with workflow diagrams
• Boot image generator and Debian package guides
• Enhanced API documentation

Improvements

• Strip GNU and Bash-specific syntax for better POSIX compliance
• Better error handling and logging throughout bootstrap process
• Enhanced USB topology-based device status UI
• Improved manufacturing database accuracy (secure vs signed states)
• Fixed shell option detection in customization scripts
• Fixed regex in simg_expanded_size() function
• Fixed depmod handling for kernel modules

Dependencies

• Update rpiboot to >= 20251002~150524
• Update rpi-eeprom to >= 28.5
• Update embedded curl to 8.16.0

Breaking Changes

None. This release maintains backward compatibility with v2.0.x configurations.

Known Issues

• Special re-provisioning with boot image regeneration only supported on Pi 5 (2712)
• Boot image generator requires at least 32GB free disk space

Full Changelog: v2.0.6...v2.1.0