The Firmware tab reports the host operating system and its available security updates, and lets a superuser check for and apply them. You’ll find it under Administration → Firmware in the sidebar (route /firmware).

[!NOTE] Viewing requires the firmware.view permission. Checking for and applying updates is superuser-only — non-superusers see the status but the Check for updates and Apply updates buttons are disabled.

[!WARNING] Don’t confuse this with Media Server Config (sidebar Administration → Media Server Config, route /updates), which tunes the MediaMTX media server. See Media Server Config. This page is about host OS updates.

What you can do here

• Read the host operating system, kernel, BIOS, and distribution.
• See whether security updates are available and how many.
• Check for updates on demand and apply them.
• Toggle auto-updates (on by default).

System information

The left card lists what the backend detects about the host:

Field	Example	Notes
Operating System	Linux	From the host platform
Kernel	6.8.0-40-generic	Kernel release
BIOS	—	Shown when available
Distribution	Ubuntu 24.04 LTS	From /etc/os-release on Linux

Check and apply updates

The right card handles updates.

1. Read the Status line: Checking…, Up to date, or N updates available.
2. Click Check for updates to re-scan on demand.
3. If updates are available, click Apply updates. (It stays disabled when the status is up to date.)
4. A confirmation banner reports Updates applied successfully or a failure.

Update detection and application use the host’s native package manager:

Host	Detect	Apply
Debian / Ubuntu	apt list --upgradable	sudo apt upgrade -y
RHEL / CentOS / Fedora	dnf / yum check-update	sudo dnf/yum update -y
Windows	Get-WUList (PSWindowsUpdate)	Install-WindowsUpdate -AcceptAll

[!WARNING] Applying updates runs the host package manager with elevated privileges. Run it during a maintenance window — package upgrades can restart services.

Auto-updates

Tick Enable auto updates (Linux & Windows) to keep the host patched automatically; the setting is saved immediately and is enabled by default.

[!NOTE] Auto-update settings are stored server-side and changing them is written to the audit log.

📸 Screenshots to capture

Save this to opennvr-site/public/screenshots/ with the exact filename below:

• firmware-overview.png — the Firmware tab with the Operating System info card on the left and the Security Updates card (status line, auto-updates checkbox, Check/Apply buttons) on the right.