Differences

This shows you the differences between two versions of the page.

--- baseraspberrypisetupbookworm [2026/09/18 00:12] – [2. Install Raspberry Pi OS] wikiadmin
+++ baseraspberrypisetupbookworm [2026/09/18 00:35] (current) – [12. Add startup cleanup and recovery] wikiadmin
@@ Line 1: / Line 1: @@
 ====== Raspberry Pi Base Setup for ErgoTech Software ======
+This article continues from [[PiFreshSetupIntructions]| Setting up Raspberry Pi for MIX or TransSECS Deployments (Bookworm)]]
 Complete this setup before installing MIX or the TransSECS built deployment.
@@ Line 199: / Line 201: @@
 These packages provide serial-port support, SQLite support, system logging, log rotation, Raspberry Pi clock recovery, ''%%.local%%'' hostname discovery, and several useful support tools.
+===== 9. Disable Automatic Software Updates =====
-===== 9. Install Java 8 =====
+For an ErgoTech system which will run continuously in production, software updates should be performed as a planned maintenance task rather than installed automatically.
+Automatic operating-system updates can change system libraries, networking components, Chromium, Java-related packages, or other software which the ErgoTech application depends on. Disabling automatic updates helps keep a tested production system in a known configuration.
+Stop and disable the unattended-upgrades service:
+<code>
+sudo systemctl disable unattended-upgrades
+sudo systemctl stop unattended-upgrades
+</code>
+Stop and disable the two automatic APT update timers:
+<code>
+sudo systemctl disable apt-daily.timer
+sudo systemctl stop apt-daily.timer
+sudo systemctl disable apt-daily-upgrade.timer
+sudo systemctl stop apt-daily-upgrade.timer
+</code>
+Prevent the system from prompting for an operating-system release upgrade.
+First make a dated backup:
+<code>
+sudo cp /etc/update-manager/release-upgrades /etc/update-manager/release-upgrades.bak.$(date +%Y%m%d_%H%M%S)
+</code>
+Open the configuration file:
+<code>
+sudo nano /etc/update-manager/release-upgrades
+</code>
+Find the line beginning with:
+<code>
+Prompt=
+</code>
+Change it to:
+<code>
+Prompt=never
+</code>
+Save and exit nano:
+  * Press **Ctrl+O** to save.
+  * Press **Enter** to confirm the filename.
+  * Press **Ctrl+X** to exit.
+==== Verify ====
+Check the automatic-update service and timers:
+<code>
+systemctl status unattended-upgrades
+systemctl status apt-daily.timer
+systemctl status apt-daily-upgrade.timer
+</code>
+The unattended-upgrades service and both APT timers should show which they are disabled or inactive. Press **q** if a status display remains open.
+Also verify the release-upgrade setting:
+<code>
+grep '^Prompt=' /etc/update-manager/release-upgrades
+</code>
+It should show:
+<code>
+Prompt=never
+</code>
+These changes do not prevent an administrator from installing updates manually later. Updates can still be performed deliberately during a maintenance period after they have been reviewed and tested.
+===== 10. Install Java 8 =====
 ErgoTech applications covered by this guide use **Java 8** unless ErgoTech support specifies otherwise.
@@ Line 248: / Line 331: @@
 Register the extracted Java 11 installation using its actual folder name and a lower priority than Java 8.
-===== 10. Keep Linux system logs from filling the SD card =====
+===== 11. Keep Linux system logs from filling the SD card =====
 Linux system logs can grow surprisingly large when a device repeatedly reports an error. A nearly full SD card can make SSH and other commands extremely slow and can eventually make the system unusable.
@@ Line 292: / Line 375: @@
 </code>
-===== 11. Add startup cleanup and recovery =====
+===== 12. Add startup cleanup and recovery =====
 ''%%/etc/rc.local%%'' is a traditional Linux startup script which runs near the end of the boot process. On a Raspberry Pi it is useful for small recovery and housekeeping tasks after a power interruption.
@@ Line 358: / Line 441: @@
 The test should complete without shell errors. The maintenance log should contain a start time, disk-usage information, and a finish time.
-The MIX kiosk article adds two browser-specific cleanup commands to this file.
+The [[SetupChromeKioskOnRpi]|MIX kiosk article]] adds two browser-specific cleanup commands to this file.
-===== 12. Timekeeping =====
+===== 13. Timekeeping =====
 ==== Raspberry Pi 5 ====
@@ Line 398: / Line 481: @@
 </code>
-If the factory network has no Internet or local time server, the clock may drift. MIX provides another convenient way to set the system time by loading **Get Pre-License Key** on the setup page.
+If the factory network has no Internet or local time server, the clock may drift. MIX provides another convenient way to set the system time by loading **Get Pre-License Key** on the setup page. In addition, for SECS/GEM tool applications, the host can also set the Pi's clock by sending the standard **S2F31 Date and Time Set Request** message. This updates the system clock in the same way which opening the MIX Get Pre-License Key page updates it from the browser.
-===== 13. Verify the base setup =====
+===== 14. Verify the base setup =====
 Reboot: