Just shipped

Flash it wrong and lose nothing
A bad image takes itself back
Section titled “A bad image takes itself back”Upstream promotes a new image the moment it boots, which proves the kernel started and nothing else. Here it boots on trial and is kept only if the board comes back right. It has said no once, on purpose, to a tampered image — in about 35 seconds.

Patch the BMC, leave the cluster alone
Section titled “Patch the BMC, leave the cluster alone”Upstream power-cycles all four compute modules to update the management computer beside them. This fork leaves their rails alone, so patching the board that manages your cluster does not take the cluster down. Measured on a Turing Pi 2 v2.5; a v2.4 drives its node rails from the BMC itself, so there any BMC reboot power-cycles all four.

Every board on one page, and none of them exposed
Section titled “Every board on one page, and none of them exposed”A board that can reflash four computers should not face the internet. One page inside the cluster drives them all, with every control a board has, and it holds no credential of its own.
Why a board is never exposed →

Software that is still maintained
Section titled “Software that is still maintained”Upstream's last release was v2.1.0, in February 2025, on a kernel that is not a longterm release and a Buildroot that is end of life. This fork tracks both, and has taken out six named faults — including the one that killed this board twice in a day.
Every row, with its measurement →

v2.47.0 shipped, 7 things planned
Section titled “v2.47.0 shipped, 7 things planned”Decided by vote
7 things are planned and 21 votes have been cast. Leading: A hardware watchdog, so a hung daemon does not mean a trip to the rack.
