This is an old revision of the document!
Note:
This article is still under development and some details can change. If you find any errors, please report them to our support team at [email protected]. Thank you.
Software updates
How to install software updates
This article explains how to keep the software on your Unipi device up to date. Update your device regularly — for example as part of routine maintenance. Most fixes, including security fixes, reach the device through an ordinary update, so keeping it up to date is the single most important thing you can do for its security.
For known vulnerabilities and the versions that fix them, see the security advisories.
Note for Mervis users:
Normal software updates do not affect the Mervis RT license. Only a major system upgrade (for example Debian 12 to Debian 13) can invalidate it.
Before you start
- Connect to the device over SSH — see How to connect via SSH. If you do not know the password, see Passwords.
- The device needs to reach the internet, including the Unipi APT repository.
- All commands below run in the device's terminal.
sudoasks for the current user's password.
Update the software packages of OS - Regular maintenance
A standard update installs the latest packages from both the Debian base system and the Unipi repository. This is the recommended method to stay up-to date with the newest features and security patches.
- 1. Refresh the list of available packages:
sudo apt update
- 2. Install the available updates:
sudo apt upgrade
- 3. Reboot if the kernel, bootloader (u-boot) or IO-board firmware was updated, so the new version is used:
sudo reboot
Note:
Updating the unipi-firmware6 package does not by itself reflash the IO-board firmware. See Firmware for the full firmware-update procedure.
Attention:
Advanced users can install specific Unipi package version manually — for example to apply a fix on a device without internet access. Download the .deb from the Unipi pool at repo.unipi.technology and install it. Manually installing dependencies may also be required.
![/!\](/_media/en:hw:01_safety-instructions_iso-7010-w001.png "/!\")
Attention:
If an update is not enough — a major version change, or a corrupted system — you can reflash the whole OS image. This erases all data and settings, so back up first. Follow the flash / backup guide for your product: Flash / backup the OS.
Update specific package
For known vulnerabilities and the versions that fix them, see the security advisories.
It is recommended to install the newest version of packages with the guide about regular maintenance above.
To find out what you are running — for example to compare it with a version named in an advisory:
- OS and kernel:
cat /etc/os-release
uname -a
- A specific package (installed and available version):
apt-cache policy PACKAGE
- Full details of an installed package:
dpkg -s PACKAGE
To install the specific version of the package:
- 1. Refresh the list of available packages:
sudo apt update
- 2. Install the available updates:
sudo apt install PACKAGE=VERSION
- 3. Reboot if the kernel, bootloader (u-boot) or IO-board firmware was updated, so the new version is used:
sudo reboot
Replace PACKAGE with the package name, for example unipi-altboot.
Platform notes
- Unipi 1.1 and Unipi Lite have no IO-board firmware, so no firmware step applies; only the OS packages are updated.
- Unipi Axon is a discontinued product line, replaced by the Unipi Patron product line. It no longer receives security updates and is no longer actively supported; contact Unipi support for security questions.
