Rebooting Edge Device Remotely

I know this is probably far to late to help @Lucas out but hopefully someone else can get some value from it.
My team was in a situation recently that required us to push an update to a remote device that would shut down the unit or reboot it without physical access such that adding a script as suggested above was not doable.

The solution that worked for us was to us the dbus python library:

https://github.com/toradex/torizon-samples/tree/bullseye/dbus/python

In your module Dockerfile, add this:

RUN apt-get -q -y update && apt-get -q -y install dbus libdbus-1-dev  build-essential libglib2.0 libglib2.0-dev &&  rm -rf /var/lib/apt/lists/*  
RUN python3 -m pip install --upgrade pip && python3 -m pip install dbus-python  

And it's important to add this to your deployment manifest:

"createOptions": {  
                "HostConfig": {  
                  "Privileged": true,  
                  "Binds": [  
                    "/var/run/dbus:/var/run/dbus",  
                    "/usr/share/dbus-1/services:/usr/share/dbus-1/services"  
                  ]  
                }  
              }  

Finally, inside your Python module, you can reboot or shutdown like this:

def handle_event():  
    try:  
        bus = dbus.SystemBus()  
        proxy = bus.get_object('org.freedesktop.systemd1',  
                               '/org/freedesktop/systemd1')  
        props = dbus.Interface(proxy, "org.freedesktop.DBus.Properties")  
        print(str(props.GetAll("org.freedesktop.systemd1.Manager")["Version"]))  
        manager = dbus.Interface(proxy, "org.freedesktop.systemd1.Manager")  
          
        manager.PowerOff() # or manager.Reboot()  
          
  
    except Exception as e:  
        print('Error handling reboot: ', e)  

This worked for us as we couldn't find a os.system() based approach that would work.

You may want to look into OSConfig

this requires you to install the OSConfig agent on the device, which will automatically add another module (the OSCOnfig module) to the devices module list, which you can use to do these kinds of things: reboot, issue custom linux commands, read and change host configuration...

Thank you for the response!

So to my understanding, I am creating a local script that does the rebooting for me. Something like a shell script that reboots. That makes sense, but how do I interact with that script from the container. I know I can place the script in the bind point so that the container can see/access it, but whenever I run said script it runs it within the container instead of on the host. Also, how am able to communicate with the module remotely so that it triggers said script.

Thank you again, and apologies for the lack of experience!

Docker containers in general are running sandboxed. This means the logic within the container is not able to do more than allowed by docker settings.

You can see this when folders or files from the file system have to be shared (bindings, volumes) or ports have to be opened.

It is possible to elevate rights of containers but this is not recommended, especially when rebooting...

I recommend to run some script on the host system witch elevated rights which works in pair with your own containers.

For example, with the script, you can create an endpoint which can be called by the IoT Edge module when you want to reboot the device.

To prevent other logic from starting rebooting your device, you can limit the 'attack vector' to go for a local folder/file with just enough rights to rite a 'trigger'.

Either way, the reboot has to be performed outside your container.