Iot device update failure recovery

A method for update failure recovery, comprising:

• after writing an updated release to memory, determining whether the updated release is valid, wherein the updated release includes a plurality of image binaries, and wherein determining whether the updated release is valid includes validating a signature of a trusted entity on at least one image binary of the plurality of image binaries;
• if the updated release is determined to be valid, making the updated release the current release;
• determining whether the current release is stable;
• if the updated release is determined to be unstable, performing an auto-rollback, wherein performing the auto-rollback includes, via at least one processor, automatically:
• obtaining an uncompressed backup of a previous release;
• making the uncompressed backup of the previous release the current release;
• and executing the uncompressed backup.

A processor-readable storage medium, having stored thereon process-executable code for computer network design, that, upon execution by at least one processor, enables actions, comprising:

• after writing an updated release to memory, determining whether updated the release is valid, wherein the updated release includes a plurality of image binaries, and wherein determining whether the updated release is valid includes validating a signature of a trusted entity on each image binary of the plurality of image binaries;
• if the updated release is determined to be valid, making the updated release the current release;
• after making the updated release the current release, determining whether the updated release is stable;
• if the updated release is determined to be unstable, performing an auto-rollback, wherein performing the auto-rollback includes automatically:
• obtaining an uncompressed backup of a previous release;
• making the uncompressed backup of the previous release the current release;
• and executing the uncompressed backup.