BlueRange OS

Updated ssh keys

Added Gateway-Version and installed Java libraries to Mender inventory attributes

Added LED blink code when a DFU is in progress (green-orange blinking)

Hardened SSH config via https://www.ssh-audit.com/hardening_guides.html. Removed RSA host key on Raspberry Pis. Host keys are now saved in /data/ssh so the fingerprint does not change anymore across reboots.

Configured ephemeral port range to 49152-60999 to not collide with BACnet’s 47808

Disable UART4 so the PoE extension board v1 works again.

Added package tzdata to automatically create file /etc/localtime. The local time is set to UTC.

Added watchdog for high CPU usage.

Added a periodic check to ensure the system clock is in sync with the time server by restarting relevant services in case of a fault.

Watchdog triggers will be logged into syslog. They are also persisted across reboots and logged again after boot.

Updated Telegraf to 1.26.3

Upgraded mender-client to 2.7.x for raspberrypi models.

(iot-gate-imx8) Removed systemd-networkd since it conflicts with ConnMan.

Improved watchdog for server and serial connection. The server watchdog now works in three stages: restart ConnMan, if the server still cannot be reached restart the Meshgateway service, and finally reboot. It will also reboot every 4 hours if it is enrolled and the server cannot be reached even after a previous reboot.

Updated Java from 12 to 17.

Adds logrotate for watchdog and modifies the previous logrotate configuration. All logrotations now use 1 rotation file with half the size instead of none. This ensures that half of the log is still present when the rotation just happened.

Support for enabling the integrated watchdog that automatically restarts malfunctioning gateway devices. With this release the feature becomes available to end users as an opt-in using a policy configuration, provided the BlueRange Gateway and Server software are updated as well.

Add library (libdontdie) that can be pre-loaded and that sets the TCP KEEP-ALIVE flag whenever `socket(2)' is called

Add support for a JVM independent mechanism to establish reverse SSH connections on request.

Using a wpa_supplicant.conf file uploaded via the gateway UI e.g. for configuration of the WiFi regulatory domain to Germany as country=DE. The OS allows replacing the build-in configuration file.

Corrects a typo in the x-health-threat mender variable that is used for reporting the boot partition health status.

Add device inventory script transferring a machine specific identifier to the Mender server as x-soc-machine if available.

Upon OS update installation time the boot partition is inspected. If it is outdated or detected as being broken, the entire partition gets rewritten as part of the update process. Once the device rebooted, the boot partition is clean and the health check inventory script introduced in [Release 2021-05-29] passes.

Add device inventory script transferring the OS version the boot partition originates from to the Mender server. That version information was added just recently to the boot partition. And yet another device inventory script that indicates the presence (and absence) of any FSCK*.REC files. When present, these files clearly indicate that lost file fragments were found by fsck so that one may assume the boot partition is actually broken.

Integrate SD-Card health status for SanDisk Industrial cards into the diagnostic script

Reduce systemd journal from 64MB to 16MB at max

Fixed problem with memory allocation for log files