Found building the R2 RC candidate on the release box: os/build-image.sh passes --build-arg PITHEAD_UPDATER="${PITHEAD_UPDATER:-}", and the Containerfile only installs rauc+rauc-service when that arg equals rauc. A plain invocation therefore builds an image with no updater at all. tests/os/verify-image.sh catches it ("rauc daemon present — CLI alone cannot install", 52/53 on the first RC build), but only if the builder runs it — the failure mode it guards is a fleet that can never take another A/B update.
Fix direction: default the arg to rauc (the only updater the boot contract supports since RC13), or make build-image.sh refuse to run without an explicit choice. The silent-empty default is the only wrong option.
🤖 Generated with Claude Code
Found building the R2 RC candidate on the release box:
os/build-image.shpasses--build-arg PITHEAD_UPDATER="${PITHEAD_UPDATER:-}", and the Containerfile only installsrauc+rauc-servicewhen that arg equalsrauc. A plain invocation therefore builds an image with no updater at all.tests/os/verify-image.shcatches it ("rauc daemon present — CLI alone cannot install", 52/53 on the first RC build), but only if the builder runs it — the failure mode it guards is a fleet that can never take another A/B update.Fix direction: default the arg to
rauc(the only updater the boot contract supports since RC13), or make build-image.sh refuse to run without an explicit choice. The silent-empty default is the only wrong option.🤖 Generated with Claude Code