From mboxrd@z Thu Jan  1 00:00:00 1970
From: Thomas Lange <thomas@corelatus.se>
Date: Fri, 23 Sep 2005 22:02:27 +0200
Subject: [U-Boot-Users] Fail Safe: Redundant U-boot Images in Flash????
In-Reply-To: <5F98E47AD7B1C349895ED4E2EDF3918B01F291FF@stca209a>
References: <5F98E47AD7B1C349895ED4E2EDF3918B01F291FF@stca209a>
Message-ID: <43345F53.5010100@corelatus.se>
List-Id: <u-boot.lists.denx.de>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
To: u-boot@lists.denx.de

Roberts, John wrote:

>The code at the entry point needs to be small, reliable and never require an
>upgrade in the field. This code would run a CRC on the primary U-boot image
>to determine if it's safe to boot, upon CRC failure verify then run the
>backup image.
>
>For remote systems we need to resolve the issue of upgrade failure without
>human intervention - or perhaps remote human intervention.
>  
>
We have done this on our board "gth".
We use a pre-loader called miniboot:
http://opensource.se/projects/miniboot/index.html

Miniboot choose which of two u-boot images to boot by checking CRC.

Regards,
/Thomas