{{ :files:img_warning-line_b.png?nolink |}} {{ :en:hw:08_safety-instructions_pseudo-ISO-7010-info.png?nolink |(i)}} **Note:** \\ This article is still under development and some details can change. If you find any errors, please report them to our support team at [[support@unipi.technology|support@unipi.technology]]. Thank you. ==%hide Software updates == ====== How to install software updates ====== This article explains how to keep the software on your Unipi device up to date. Update your device **regularly** — for example as part of routine maintenance. Most fixes, including security fixes, reach the device through an ordinary update, so keeping it up to date is the single most important thing you can do for its security. For known vulnerabilities and the versions that fix them, see the [[en:sw:security|security advisories]]. {{ :files:img_warning-line_b.png?nolink |}} {{ :en:hw:08_safety-instructions_pseudo-ISO-7010-info.png?nolink |(i)}} **Note for Mervis users:** \\ Normal software updates do not affect the Mervis RT license. Only a major system upgrade (for example Debian 12 to Debian 13) can invalidate it. ===== Before you start ===== * Connect to the device over SSH — see [[en:automation:unipi-ssh-connect-hidden|How to connect via SSH]]. If you do not know the password, see [[en:sw:04-unipi-firmware:02-passwords|Passwords]]. * The device needs to reach the internet, including the Unipi [[en:sw:04-unipi-firmware:03-unipi-repo|APT repository]]. * All commands below run in the device's terminal. ''sudo'' asks for the current user's password. ===== Updating software packages - Regular maintenance ===== The standard update method installs the latest packages from both the Debian base system and the Unipi repository. This is the recommended method to stay up-to date with the newest features and security patches. * 1. Refresh the list of available packages: sudo apt update * 2. Install the available updates: sudo apt upgrade * 3. **Reboot** if the kernel, bootloader (u-boot) or IO-board firmware was updated, so the new version is used: sudo reboot {{ :files:img_warning-line_b.png?nolink |}} {{ :en:hw:08_safety-instructions_pseudo-ISO-7010-info.png?nolink |(i)}} **Note:** \\ Updating the ''unipi-firmware6'' package does not by itself reflash the IO-board firmware. See [[en:sw:04-unipi-firmware:05-update-firmware|Firmware]] for the full firmware-update procedure. {{ :files:img_warning-line_b.png?nolink |}} {{ :en:hw:09_safety-instructions_pseudo-ISO-7010-attention.png?nolink |(!)}} **Attention:** \\ Advanced users can install Unipi packages manually — for example to apply a fix on a device without internet access. Download the ''.deb'' from the [[en:sw:04-unipi-firmware:03-unipi-repo|Unipi pool]] at [[https://repo.unipi.technology/debian/pool/|repo.unipi.technology]] and install it. Manually installing dependencies may also be required. {{ :files:img_warning-line_b.png?nolink |}} {{ :en:hw:01_safety-instructions_ISO-7010-W001.png?nolink |/!\}} **Attention:** \\ If an update is not enough — a major version change, or a corrupted system — you can reflash the whole OS image. This **erases all data and settings**, so back up first. Follow the flash / backup guide for your product: [[en:flash-os-image|Flash / backup the OS]]. ===== Updating specific packages ===== For known vulnerabilities and the versions that fix them, see the [[en:sw:security|security advisories]]. It is recommended to install the newest version of packages with the guide about regular maintenance above. To find out which package version you are running — for example to compare it with a version named in an advisory: * A specific package (installed and available version): apt-cache policy PACKAGE * Full details of an installed package: dpkg -s PACKAGE To install the specific version of the package: * 1. Refresh the list of available packages: sudo apt update * 2. Install the specific version of the package: sudo apt install PACKAGE=VERSION * 3. **Reboot** if the kernel, bootloader (u-boot) or IO-board firmware was updated, so the new version is used: sudo reboot Replace ''PACKAGE'' with the package name, for example ''unipi-altboot''. ===== Platform notes ===== * **Unipi 1.1 and Unipi Lite** have no IO-board firmware, so no firmware step applies; only the OS packages are updated. * **Unipi Axon** is a discontinued product line, replaced by the Unipi Patron product line. It no longer receives security updates and is no longer actively supported; contact [[support@unipi.technology|Unipi support]] for security questions. ===== See also ===== * [[en:sw:security|Security advisories]] * [[en:sw:04-unipi-firmware:05-update-firmware|Firmware update]] * [[en:sw:04-unipi-firmware:03-unipi-repo|APT Repository]] * [[en:flash-os-image|Flash / backup the OS]]