Add operational data for scheduled software updates

Neither check-update nor unattended-update left any trace beyond the
log and a login notice, so after enabling them the only way to see
that they took effect was crontab -l from the shell.

The update scripts now record the outcome of each run in a state file
that yanger folds into /system-state/software/update: when the feed
was last queried, the newest release it offered and whether that is
newer than what boots next, and the time and version of the last
unattended install.  Whether an installed image awaits a reboot is
derived from the RAUC slot data, so it also covers manual upgrades.

'show software' prints the configured triggers next to this outcome,
and the WebUI software page gets a Software Updates card.  The slot
table on that page now uses the same date format as the card.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>

Author: troglobit

board/common/rootfs/etc/tmpfiles.d/os-schedule.conf

@@ -1,2 +1,3 @@
 f  /run/os-update  0666 admin admin
+f  /run/software-update.json  0666 admin admin
 f  /run/unattended-update.lock  0666 admin admin

board/common/rootfs/usr/libexec/infix/update-common

@@ -1,6 +1,16 @@
 # Shared helpers for check-update and unattended-update.  Sourced, not run;
 # the caller sets TAG first.
 
+# Outcome of the last run, read by yanger for /system-state/software/update.
+STATE_FILE=/run/software-update.json
+
+# Apply a jq filter to the state file, extra args go to jq (--arg name value).
+# An empty or damaged file starts over from {}.
+update_state() {
+    filter=$1; shift
+    new=$(jq -n "$@" "(input? // {}) | $filter" "$STATE_FILE") && printf '%s\n' "$new" > "$STATE_FILE"
+}
+
 # Read the shared update-url (an RSS/Atom release feed) from running-config.
 # The leaf is mandatory and factory-config supplies it, so an empty result
 # means the software container is absent -- no update source is configured.
@@ -95,6 +105,25 @@ update_available() {
     newer "$LATEST_TAG" "$pending"
 }
 
+# Query the feed and record the outcome.  Same return values as
+# update_probe(); on success UPDATE_AVAILABLE tells if the latest release
+# should be applied.
+update_check() {
+    update_probe
+    rc=$?
+    case $rc in
+    0)
+        update_available && UPDATE_AVAILABLE=true || UPDATE_AVAILABLE=false
+        update_state '. + {"last-check": (now | todate), latest: $tag, "release-url": $url, available: $avail}' \
+            --arg tag "$LATEST_TAG" --arg url "$(update_release_url)" --argjson avail "$UPDATE_AVAILABLE"
+        ;;
+    2)
+        update_state '.["last-check"] = (now | todate) | del(.latest, .["release-url"], .available)'
+        ;;
+    esac
+    return $rc
+}
+
 # Print the release page URL of the latest release, for operator-facing logs.
 update_release_url() {
     [ -n "$RELEASE_BASE" ] || return 0

board/common/rootfs/usr/sbin/check-update

@@ -7,7 +7,7 @@ TAG=os-update
 
 . /usr/libexec/infix/update-common
 
-update_probe
+update_check
 rc=$?
 if [ $rc -eq 1 ]; then
     exit 1
@@ -21,7 +21,7 @@ if [ $rc -eq 3 ]; then
     exit 0
 fi
 
-if update_available; then
+if [ "$UPDATE_AVAILABLE" = true ]; then
     RELEASE_URL=$(update_release_url)
     MSG="Software update available: ${LATEST_TAG}, running ${VERSION} (see ${RELEASE_URL})"
     logger -t "$TAG" "$MSG"

board/common/rootfs/usr/sbin/unattended-update

@@ -35,7 +35,7 @@ if ! flock -n 9; then
     exit 0
 fi
 
-update_probe
+update_check
 rc=$?
 if [ $rc -eq 1 ]; then
     exit 1
@@ -49,7 +49,7 @@ if [ $rc -eq 3 ]; then
     exit 0
 fi
 
-if ! update_available; then
+if [ "$UPDATE_AVAILABLE" != true ]; then
     logger -p daemon.debug -t "$TAG" "No update available (current: $VERSION, latest: $LATEST_TAG)"
     exit 0
 fi
@@ -66,6 +66,8 @@ if ! rauc install "$BUNDLE_URL"; then
     logger -t "$TAG" "ERROR: installation of ${LATEST_TAG} failed"
     exit 1
 fi
+update_state '. + {"last-install": (now | todate), installed: $tag, available: false}' \
+    --arg tag "$LATEST_TAG"
 
 POLICY=$(read_reboot_policy)
 if [ "$POLICY" = immediate ]; then

doc/schedule.md

@@ -140,7 +140,8 @@ admin@example:~$ crontab -l
 
 An empty crontab means nothing is scheduled.  Check that the consuming
 feature is enabled, that it names the schedule correctly, and that the
-schedule itself is enabled.
+schedule itself is enabled.  For update checks and unattended updates,
+`show software` reports the trigger and the outcome of the last occurrence.
 
 > [!NOTE]
 > The crontab is generated and must not be edited by hand.  It is

doc/upgrade.md

@@ -405,8 +405,26 @@ unattended-update: Installed v26.08.1; reboot to activate the new image
 | `Skipped: failed to query latest release …`  | Feed unreachable                 |
 | `Another update is already in progress …`    | Previous occurrence still running|
 
-`show software` reports installation state, slot contents and the boot
-order, both during and after the install.
+`show software` reports the configured triggers and the outcome of the
+last occurrence, next to the slot contents and boot order:
+
+<pre class="cli"><code>admin@example:/> <b>show software</b>
+Boot order : primary secondary net
+
+NAME       STATE     VERSION                DATE
+primary    booted    v26.08.1               2026-09-28T03:02:41Z
+secondary  inactive  v26.08.0               2026-08-30T03:02:12Z
+
+Software updates
+  Source       : https://github.com/kernelkit/infix/releases.atom
+  Check        : nightly (daily at 03:00)
+  Unattended   : nightly (daily at 03:00), reboot manual
+  Last check   : 2026-09-30T03:00:12Z, latest v26.08.1, up to date
+  Last install : 2026-09-28T03:02:41Z, installed v26.08.1, reboot pending
+</code></pre>
+
+The same data is available under `/system-state/software/update` in the
+operational datastore, and on the Software page of the WebUI.
 
 > [!TIP]
 > A system running a development build has no comparable version number

src/bin/show/__init__.py

@@ -245,6 +245,11 @@ def software(args: List[str]) -> None:
         print(json.dumps(data, indent=2))
         return
     if len(args) == 0 or not args[0]:  # Treat "" as no arg.
+        # Trigger settings for the software updates section.
+        for xpath in ("/ietf-system:system/infix-system:software",
+                      "/ietf-system:system/infix-schedule:schedules"):
+            cfg = get_json(xpath, "running-config", quiet=True)
+            data.setdefault("ietf-system:system", {}).update(cfg.get("ietf-system:system", {}))
         cli_pretty(data, "show-software")
     elif len(args) == 1:
         name = args[0]

src/confd/yang/confd/infix-system-software.yang

@@ -33,7 +33,9 @@ submodule infix-system-software {
                  Add allow-prerelease.
                  Use the infix-schedule scheduled-feature grouping for
                  check-update and unattended-update, enabled now defaults
-                 to true.";
+                 to true.
+                 Add the update container to the operational data: outcome
+                 of the last update check or unattended update.";
     reference "Internal";
   }
   revision 2026-06-17 {
@@ -232,6 +234,52 @@ submodule infix-system-software {
         // }
       }
 
+      container update {
+        description
+          "Outcome of the last scheduled update check or unattended update,
+           see the check-update and unattended-update settings.";
+
+        leaf last-check {
+          type yang:date-and-time;
+          description "When the release feed was last queried.";
+        }
+
+        leaf latest {
+          type string;
+          description
+            "Newest release the feed offered at the last check, after the
+             pre-release filter.  Absent when the feed could not be read.";
+        }
+
+        leaf available {
+          type boolean;
+          description
+            "True when latest is newer than the version that boots next.";
+        }
+
+        leaf release-url {
+          type string;
+          description "Release page of the latest release.";
+        }
+
+        leaf last-install {
+          type yang:date-and-time;
+          description "When an unattended update last installed a bundle.";
+        }
+
+        leaf installed {
+          type string;
+          description "Version installed by the last unattended update.";
+        }
+
+        leaf reboot-pending {
+          type boolean;
+          description
+            "True when the slot that boots next holds another version than
+             the running one, i.e., an installed update awaits a reboot.";
+        }
+      }
+
       list slot {
         key "name";
         description

src/statd/python/cli_pretty/cli_pretty.py

@@ -2218,6 +2218,75 @@ def show_software(json, name):
             print(Decore.yellow(f"Note: the {slot.name} partition has {slot.version or 'unknown'},"
                                 f" this is {booted.version}.  Use 'upgrade' to update it."))
 
+        show_software_update(json, software.get("update", {}))
+
+
+def describe_recurrence(rec):
+    """Short form of an ietf-schedule recurrence, e.g. 'daily at 03:30'"""
+    units = {"minutely": "minute", "hourly": "hour", "daily": "day",
+             "weekly": "week", "monthly": "month", "yearly": "year"}
+    freq = rec.get('frequency', '').split(':')[-1]
+    interval = rec.get('interval', 1)
+    text = freq if interval == 1 else f"every {interval} {units.get(freq, freq)}s"
+
+    days = ",".join(d.get('weekday', '')[:3] for d in rec.get('byday', []))
+    if days:
+        text += f" on {days}"
+
+    hours = rec.get('byhour')
+    if hours:
+        minutes = rec.get('byminute', [0])
+        text += " at " + ",".join(f"{h:02}:{m:02}" for h in hours for m in minutes)
+
+    return text
+
+
+def show_software_update(json, state):
+    """Scheduled update checks and unattended updates: triggers from the
+    running configuration, outcome of the last run from operational data"""
+    cfg = get_json_data({}, json, 'ietf-system:system', 'infix-system:software')
+    if not cfg:
+        return
+    schedules = get_json_data([], json, 'ietf-system:system',
+                              'infix-schedule:schedules', 'schedule')
+
+    def trigger(feature):
+        name = feature.get('schedule')
+        if not name:
+            return "not configured"
+        if not feature.get('enabled', True):
+            return f"{name}, paused"
+        sched = next((s for s in schedules if s.get('name') == name), {})
+        text = f"{name} ({describe_recurrence(sched.get('recurrence', {}))})"
+        if not sched.get('enabled', True):
+            text += ", schedule disabled"
+        return text
+
+    unattended = cfg.get('unattended-update', {})
+    print()
+    print("Software updates")
+    print(f"  Source       : {cfg.get('update-url', 'none')}")
+    print(f"  Check        : {trigger(cfg.get('check-update', {}))}")
+    text = trigger(unattended)
+    if unattended.get('schedule'):
+        text += f", reboot {unattended.get('reboot', 'manual')}"
+    print(f"  Unattended   : {text}")
+
+    if state.get('last-check'):
+        latest = state.get('latest')
+        if not latest:
+            result = "feed unreachable"
+        elif state.get('available'):
+            result = f"{latest} available"
+        else:
+            result = f"latest {latest}, up to date"
+        print(f"  Last check   : {state['last-check']}, {result}")
+    if state.get('last-install'):
+        result = f"installed {state.get('installed', 'unknown')}"
+        if state.get('reboot-pending'):
+            result += ", reboot pending"
+        print(f"  Last install : {state['last-install']}, {result}")
+
 
 def show_services(json):
     if not json.get("ietf-system:system-state", "infix-system:services"):

src/statd/python/yanger/ietf_system.py

@@ -226,8 +226,30 @@ def add_services(out):
 
     insert(out, "infix-system:services", "service", services)
 
+def software_update(data):
+    """Outcome of the last update check or unattended update, recorded by
+    the update scripts, plus whether an installed image awaits a reboot."""
+    keys = ("last-check", "latest", "available", "release-url",
+            "last-install", "installed")
+    state = HOST.read_json("/run/software-update.json", {})
+    update = {k: state[k] for k in keys if k in state}
+
+    if data:
+        slots = {n: s for entry in data.get("slots", []) for n, s in entry.items()}
+
+        def version(slot):
+            return slot.get("slot_status", {}).get("bundle", {}).get("version")
+
+        running = next((version(s) for s in slots.values()
+                        if s.get("bootname") == data.get("booted")), None)
+        pending = version(slots.get(data.get("boot_primary"), {}))
+        update["reboot-pending"] = bool(running and pending and running != pending)
+
+    return update
+
 def add_software(out):
     software = {}
+    data = None
     try:
         data = HOST.run_json(["rauc", "status", "--detailed", "--output-format=json"], {})
         software["compatible"] = data.get("compatible", "")
@@ -254,6 +276,10 @@ def add_software(out):
         installer["progress"] = progress
     software["installer"] = installer
 
+    update = software_update(data)
+    if update:
+        software["update"] = update
+
     insert(out, "infix-system:software", software)
 
 def add_hostname(out):