Secure upgrade

  This page is monitored by the OLPC team.

This page describes how to do a re-flash of an activated laptop.

This process destroys all the data on the internal flash memory of the laptop, wiping out all user data, and resetting the laptop to booting from a new, standard, signed operating system build.

Make sure you won't lose your activation lease

G1G1 donors do not need a lease, and should skip this section.

(Here we check to see whether your laptop has the ak flag set or an activation lease. This doesn't work if your laptop won't boot, so if you're doing this upgrade to get your laptop to start booting again, just proceed to the next section and do the upgrade.)

1. Get to a terminal on the laptop, and type: ls /security
   • On XO-1 this requires root permissions. Press the Alt+Ctrl+Mesh keys together to get to the console, log in as root and then enter the command above as stated.
   • If there is a lease.sig file, you will want to save this lease before re-flashing the laptop.
     1. To do so, insert a USB stick, wait for it to mount, and then type: cp /security/lease.sig /media/{name_of_usb_stick}
     2. Then, switch to the home view, go to the journal, mouse over the USB icon, and click unmount.
     3. Remove the USB stick from the USB slot, but make sure the lease.sig file is stored on it. You will have to boot the laptop with this USB stick inserted after the upgrade.
   • If there is no lease.sig file, your manufacturing data is probably set for pre-activation, and you probably don't need to do anything.
   • If you want to check that this is in fact true, in a terminal, type: ls /ofw/mfg-data/
   • If there is an 'ak' there, then the laptop is pre-activated.

Upgrade the Activated Laptop

To put the latest signed image on the laptop, follow these steps:

From a computer:
Go here in a web browser:
http://download.laptop.org/xo-1/os/official/latest/jffs2/

Download os###.img and fs.zip from that directory.

From the laptop:
Plug the flash drive into the laptop.
Push and hold all of the game keys on right of the laptop while powering
it on, and hold the keys for 5 seconds.

The laptop will then update itself.

Note: If the laptop is not activated, it will fail to boot; all G1G1 laptops are shipped activated. Insert the USB stick with lease.sig on it, and boot the laptop. This can be the same USB stick you used in Step 1 above. This should get you to the prompt for a name.