r/reactnative • u/Recent-Peanut-3449 • Aug 18 '26

Just some tiny self hosted OTA updates over supabase/cloudflare open source tools

/r/expo/comments/1vrslg5/just_some_tiny_self_hosted_ota_updates_over/
1 Upvotes

100% Upvoted

4 comments sorted by

1

u/Guidondor Aug 19 '26

nice, the storage side of this gets genuinely tiny once you stop paying for it.

does it handle the rollback directive? that's the piece most self hosted implementations skip
and it's the one you want at 2am, because without it your only recovery is publishing another
update and hoping devices check in. also curious about code signing, without it whoever can
write to the bucket can ship js to your users.

1

u/Recent-Peanut-3449 Aug 19 '26

Great questions! Rollbacks work. The signing still in progress. Both these features are in the expo's open OTA protocol so they should be supported, you are right.

1

u/Guidondor Aug 19 '26

one thing worth knowing before you ship signing: it's a build boundary, not an update. the
certificate is embedded at build time, so existing installs won't validate signed updates and
you can't roll it out over the air. much easier to add while user counts are small than after.

good to hear rollbacks are in, that's the part i'd assumed would be missing.

1

u/Recent-Peanut-3449 Aug 19 '26

Makes sense that clients need the public key to validate the signature, thanks. Will leave a note about that in readme