There might not be enough space in the on-board flash, but an approach
we use in our products is to have two flash images, and we always
overwrite the one we did not boot from, and if booting an image fails,
we fall back to the other one.



I agree, product like chumby, uses two images, one as backup, if the system can't boot with the "user" image the device automatically restore the backup image in the "user".







--
Carlos Iván Camargo Bareño
Profesor Asistente
Departamento de Ingeniería Eléctrica y Electrónica
Universidad Nacional de Colombia
cicamargoba@unal.edu.co