Overlay file system

Partitions

A PLCnext Control usually has two data storage media:

• An internal flash memory
• An SD card

The SD card is mandatory for some controllers, and for others it is optional. Check the user manual of your PLCnext Control for more information.

Each data storage medium is divided into one or more partitions.

The PLCnext firmware uses an Overlay File System (OverlayFS) to combine contents of a read-only partition with a read-write partition. The read-only partition is always stored in the internal flash memory of the controller. This partition contains the initial firmware and is updated upon each firmware update. In fact, this is a set of 3 partitions:

• Active boot partition
  The controller boots from the active boot partition.
• Inactive boot partition
  In case of a firmware update the new firmware is copied into the inactive boot partition. When the copying process is completed, the inactive and active partitions change their roles. The firmware update is finished by booting from the updated partition.
• Recovery partition
  The recovery partition contains (a copy of) the firmware that has been installed to the PLCnext controller during its manufacturing process. The recovery partition plays a role when performing a reset to default setting type 2 (see the Resetting section below).

File handling

In an early phase of the boot process the read-only active boot partition is integrated with the read-write partition. The read-write partition is stored either at the external SD card or in a dedicated partition of the internal flash memory if no SD card is present. This integration affects the handling of files during operation of the controller as follows:

• New files (not present in the read-only partition) are stored in the read-write partition.
• Changed files are stored in the read-write partition. The initial file remains unchanged at the read-only partition. Access to the initial file is not intended.
• Removed files are indicated as deleted in the read-write partition although the initial file remains unchanged in the read-only partition. It can no longer be accessed.

This means besides its regular path, a file is also listed at one or two further paths in the file system (depending on your PLCnext Control model). These further paths indicate the partition used to store the file. Normally you neither recognize nor have to worry in which partition a certain file is stored because this is managed in the background by the OverlayFS. In rare cases it may be interesting which file is stored in the read-write partition. For these cases both partitions are mapped into the controller’s directory structure:

• /media/rfs/ro is the root of the read-only partition. Files in this partition cannot be changed but may be read for information or comparison reasons. Files in this partition are replaced (respectively removed) during a firmware update.
• /media/rfs/rw/upperdir is the root of the read-write partition, where new, changed and removed files are stored. Files in this partition are usually not changed during a firmware update. The OverlayFS integrates all files stored here into the root folder of the file system.
  Note: After manipulating files in the upperdir folder, it is recommended to reboot the controller. Otherwise it is undetermined when these changes become active.

Example on read-only and read-write partitionExample on read-only and read-write partition

Files on an SD card

In case the read-write partition is stored at the SD card, the configuration and project files can easily be transferred to another controller by removing the SD card from one controller and inserting it into another controller. Please note that licenses which are bound to the device are stored at the device. Licenses which are bound to a LIC SD card are stored at this SD card. 

Security note: The SD card can be read with a conventional SD card reader at any time, and sensitive data on the SD card can be read by unauthorized persons.

• Physically protect the SD card against unauthorized access.
• Ensure that unauthorized persons do not have access to the SD card.

Utilization monitoring

The utilization of the read-write partition is monitored by the firmware. The utilzation is shown in the cockpit pages of PLCnext Engineer and WBM.

Furthermore the utilization is shown in IEC 61131‑3 system variables:

• In case the utilization of the read-write partition exceeds 90 % an Arp.Device.Interface.UserPartitionUsage.Critical notification (severity: Warning) is emitted. At the same time, the Arp.Device.Interface.DeviceInterface emits a message “Filesystem usage critical: 90 %” (severity: WARN) to the output.log. 
• In case the utilization is decreased to 85 % or less another notification Arp.Device.Interface.UserPartitionUsage.Changed (severity: Info) is emitted.

Resetting to default setting type 1 and type 2

A detailed description of how to perform the reset to default setting type 1 or type 2 on your controller can be found in the corresponding user manual. The two reset types perform the following actions on the partitions of the controller:

Reset to default setting type 1

This process clears the read-write partition:

• all files in /media/rfs/rw/upperdir/ and /media/rfs/rw/work
• from firmware version 2023.0 LTS:
  all containers in /media/rfs/rw/var and /media/rfs/rw/data.

During the following boot process the initial files of the read-only boot partition become active again.

Reset to default setting  type 2

This process clears the read-write partition, just like reset to default setting type 1.

In addition, the firmware contained in the recovery partition is copied to the inactive boot partition. Thereafter the inactive and active partitions change their roles, and the reset to default setting type 2 is finished by booting from the updated partition.