Repository navigation
pieeprom-2026-10-30: 2711: Support for http server busy (latest) - #918
Merged
Merged
Conversation
timg236
commented
Oct 30, 2026
timg236
commented
Collaborator
- Support for http server busy Handle http responses 429 / 503 with "retry-after" header. Limit of 30s retry and 3 retry attempts.
- Display http response in error message
- recovery: Add HARDWARE_INFO to the rpiboot metadata
- Refresh the boot watchdog while hashing boot.img The boot watchdog is only refreshed from the poll state machine so the SHA-256 of a large boot.img runs without a heartbeat. PM_WDOG counts at most 16.8s so a signed image above about 154 MiB (~9.6 MB/s on 2711) resets the board after "Verifying" regardless of BOOT_WATCHDOG_TIMEOUT. Fixes: Valid signed boot.img above ~154 MiB reset-loops with BOOT_WATCHDOG_TIMEOUT and SIGNED_BOOT enabled (CM4, pieeprom 2026-09-23) #914
- rpiboot: Only allow USB device boot when the ROM booted from USB
- Load the customer public key via platform_load_eeprom_file In rpiboot mode the key used to verify boot.img is read from the host (pubkey.bin) instead of SPI flash so secure-boot rpiboot works with a blank or legacy layout EEPROM.
- Update embedded MBED TLS.
* Support for http server busy Handle http responses 429 / 503 with "retry-after" header. Limit of 30s retry and 3 retry attempts. * Display http response in error message * recovery: Add HARDWARE_INFO to the rpiboot metadata * Refresh the boot watchdog while hashing boot.img The boot watchdog is only refreshed from the poll state machine so the SHA-256 of a large boot.img runs without a heartbeat. PM_WDOG counts at most 16.8s so a signed image above about 154 MiB (~9.6 MB/s on 2711) resets the board after "Verifying" regardless of BOOT_WATCHDOG_TIMEOUT. Fixes: raspberrypi#914 * rpiboot: Only allow USB device boot when the ROM booted from USB * Load the customer public key via platform_load_eeprom_file In rpiboot mode the key used to verify boot.img is read from the host (pubkey.bin) instead of SPI flash so secure-boot rpiboot works with a blank or legacy layout EEPROM. * Update embedded MBED TLS.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.