AI & integration

Self-update

Signed, verified updates that install themselves without touching running VMs.

What it is

FlashVMM keeps every Linux host current, signed and verified.

flash self-update installs the latest published release from a signed, checksummed channel. A systemd timer can run it unattended. Running VMs keep going untouched.

Why it matters

A fleet stays secure when every host runs the latest release. Self-update delivers it with no extra daemon and no downtime.

  • Signed channel. Every release is verified against the key the binary trusts.
  • Zero disruption. Running VMs carry on with the image they started with.
  • Hands-free. One flag arms a timer that keeps every host current.

Runs on

  • Linux x86_64
  • Linux arm64
  • Across your fleet

How it works

The update mechanism lives inside the binary it updates.

CLI

flash self-update --status
flash self-update --show-trust
flash self-update --dry-run
flash self-update
flash self-update --install-timer --interval 15min

MCP

flash_cli(args: ["self-update", "--status"])

The result

Every Linux host runs the latest signed release, with no VM interrupted.

Updates arrive verified and install themselves. Workloads never notice.

How it works

Releases and self-updateEvery release is signed, verified and installed without touching a running VM.How it works: Releases and self-update →

Related

Guest bundlesA kernel and root filesystem in one bundle: inspect it, size its disk, run it anywhere.Explore Guest bundles →
Host capacityOne view of every VM on a machine, with room checked before any VM starts.Explore Host capacity →
The live demoEvery feature, live, in one command.Explore The live demo →

See every feature live: flash demo