OTA Delivery Infrastructure

OVER-THE-AIR UPDATES.
VERIFIED & RESUMABLE.

System updates in Cyronix OS are cryptographically signed with private release keys, delivered via resumable HTTP 206 byte-ranges, and verified before staging to recovery.

Live Update Checker

Test your device against our public update API endpoint (/api/updates) in real-time.

Press button to query /api/updates

OTA Verification Flow

How updates are safely discovered, downloaded, verified, and applied:

1. Update Query (HTTPS)

The on-device updater (org.cyronix.updater) queries /api/updates with device, channel, version, and build date. The server returns 200 + JSON if newer, or 204 if current.

2. Resumable Byte-Range Download

Updates are downloaded to /data/cyronix_updates using standard HTTP Range headers. If a network drops, the download resumes seamlessly without starting over.

3. Cryptographic Signature Gate

Before writing anything, RecoverySystem.verifyPackage() verifies that the zip's 4096-bit RSA signature chains to the private CYRONIX release key in /system/etc/security/otacerts.zip.

4. Recovery Installation

CYRONIX Recovery OS boots, verifies the package signature a second time, executes addon.d survival scripts, writes system partitions, and reboots.