Flasher: download images from production

Author: MatteoPologruto

README.md

@@ -4,40 +4,12 @@ A tool to download and flash Debian images on the board.
 
 ## Build and test it locally
 
-Build it with `task arduino-flasher-cli:build` and run `task flash:staging` to download and flash the latest image from staging.
-
-Alternatively, these are the steps to test it locally:
-
-1. download a debian image release (for example from [here](https:/downloads.oniudra.cc/debian-im/Stable/20250902-166/arduino-unoq-debian-image-20250902-166.tar.xz), then create the following structure under `arduino-flasher-cli/`:
-
-```
-arduino-flasher-cli/public/
-└── debian-im
-    └── Stable
-        ├── 20250902-166
-        │   └── arduino-unoq-debian-image-20250902-166.tar.xz
-        └── info.json
-```
-
-2. Populate `info.json`:
-
-```
-{
-  "latest": {
-    "version": "20250902-166",
-    "url": "http://127.0.0.1:3001/debian-im/Stable/20250902-166/arduino-unoq-debian-image-20250902-166.tar.xz",
-    "md5sum": "ad0aac0a9b18982e9dce0dd99808a5e5"
-  }
-}
-```
-
-3. `task debian:release-server:start`
-4. `UPDATE_URL=http://127.0.0.1:3001 ./build/arduino-flasher-cli flash latest`
-
-## Flash from staging
-
-To download and flash the latest image from staging, the tool needs cloudflare credentials. This is the command that should be used:
+Build it with `task arduino-flasher-cli:build` and run:
 
 ```sh
-CF_ACCESS_CLIENT_ID="$(aws ssm get-parameter --profile arduino-staging --with-decryption --name /devops/downloads/cloudflare_access_client_id --query Parameter.Value --output text)" CF_ACCESS_CLIENT_SECRET="$(aws ssm get-parameter --profile arduino-staging --with-decryption --name /devops/downloads/cloudflare_access_client_secret --query Parameter.Value --output text)" ./arduino-flasher-cli flash latest
+# Flash the latest release of the Debian image
+./build/arduino-flasher-cli flash latest
+
+# Flash a local image. It works with either an archived or extracted image
+./build/arduino-flasher-cli flash path/to/downloaded/image
 ```

updater/flasher.go

@@ -5,7 +5,6 @@ import (
 	"fmt"
 	"log/slog"
 	"net/url"
-	"os"
 	"runtime"
 	"strings"
 
@@ -20,31 +19,14 @@ var assets embed.FS
 
 func Flash(ctx context.Context, imagePath *paths.Path, version string, forceYes bool) error {
 	if !imagePath.Exist() {
-		updateURL := os.Getenv("UPDATE_URL")
-		if updateURL == "" {
-			// TODO: change to prod
-			updateURL = "https://downloads.oniudra.cc"
-		}
+		updateURL := "https://downloads.arduino.cc"
 
 		parsedURL, err := url.Parse(updateURL)
 		if err != nil {
 			return fmt.Errorf("invalid UPDATE_URL: %v", err)
 		}
 
-		headers := map[string]string{}
-		clientID := os.Getenv("CF_ACCESS_CLIENT_ID")
-		clientSecret := os.Getenv("CF_ACCESS_CLIENT_SECRET")
-		if clientID != "" && clientSecret != "" {
-			headers["CF-Access-Client-Id"] = clientID
-			headers["CF-Access-Client-Secret"] = clientSecret
-		}
-
-		var client *Client
-		if len(headers) == 2 {
-			client = NewClient(parsedURL, "debian-im/Stable", WithHeaders(headers))
-		} else {
-			client = NewClient(parsedURL, "debian-im/Stable")
-		}
+		client := NewClient(parsedURL, "debian-im/Stable")
 
 		tempImagePath, err := DownloadAndExtract(client, version, func(target string) (bool, error) {
 			feedback.Printf("Found Debian image version: %s", target)

updater/http_client.go

@@ -69,6 +69,7 @@ func (c *Client) GetInfoManifest() (Manifest, error) {
 		return Manifest{}, fmt.Errorf("failed to create request: %w", err)
 	}
 	c.addHeaders(req)
+	req.SetBasicAuth("arduino", "changeme")
 	// #nosec G107 -- manifestURL is constructed from trusted config and parameters
 	resp, err := c.HTTPClient.Do(req)
 	if err != nil {
@@ -98,6 +99,7 @@ func (c *Client) FetchZip(zipURL string) (io.ReadCloser, int64, error) {
 		return nil, 0, fmt.Errorf("failed to create request: %w", err)
 	}
 	c.addHeaders(req)
+	req.SetBasicAuth("arduino", "changeme")
 	// #nosec G107 -- zipURL is constructed from trusted config and parameters
 	resp, err := c.HTTPClient.Do(req)
 	if err != nil {