Glossary
The terms you will meet throughout these docs, in alphabetical order. Where a term has a dedicated page, the entry links to it.
AppEngine
Pantavisor packaged to run inside a Docker container on an x86 workstation — a full device without hardware, used for development and CI. See run Pantavisor in Docker.
Auto-recovery
Per-container restart handling: when a container exits, Pantavisor retries it
according to its auto_recovery settings (retries, delay, backoff); if a new
revision never reaches its status goals, the device rolls back to the last
good revision. See what is Pantavisor.
BitBake
The lower-level build engine that kas wraps — executes recipes (.bb
files) to fetch, compile, and package components. Roughly analogous to
make sitting under a higher-level orchestrator.
BSP (board support package)
The hardware part of a revision — kernel, device trees, firmware, and kernel
modules — packaged as the bsp/ part of the state with its own run.json.
Built from meta-pantavisor.
Container
An LXC container defined as a part of the device state: a squashfs root
filesystem plus a run.json runtime manifest (and a src.json recording
where it came from). Apps, system services, and management tools are all
containers. Note: some reference pages and state-JSON examples still
call containers platforms — same thing, an older name that hasn't been
fully replaced everywhere yet.
Debug shell
The root shell on the device's serial console. It sees Pantavisor's control
tree at /pv/ (inside a container the same tree is mounted at
/pantavisor/). See serial port access.
Factory containers
Containers bundled into the flashed starter image (revision 0), as opposed to
apps installed later over the air. Selected at build time via
PVROOT_CONTAINERS in the image recipe.
Groups
Named startup groups that order container boot (and carry roles such as
management). Defined in the state's groups.json; inspect them with
pvcontrol groups ls.
kas
The YAML-based build-configuration and orchestration tool this layer's
kas/ fragments are written for. Wraps BitBake so a multi-layer build is
one kas-container build <config> command instead of manually sourcing
environment scripts. See github.com/siemens/kas.
Layer
A self-contained, composable directory of BitBake recipes, classes, and
configuration — meta-pantavisor is itself one. Layers combine and
override each other via bblayers.conf/KAS config, not automatic merging;
a higher-priority layer's recipe wins.
LXC
Linux Containers — the upstream OS-level container project
(linuxcontainers.org) that
Pantavisor's own containers run under, via a Pantavisor-specific fork
(lxc-pv). Not a Pantavisor invention. See Container.
Machine
The Yocto/BitBake target-hardware identifier (the MACHINE variable), set
per board via this layer's kas/machines/<machine>.yml. Roughly the Yocto
equivalent of choosing a Buildroot defconfig.
Object
A content-addressed file blob, named by its SHA-256 hash. Revisions reference objects rather than containing them, so unchanged files are stored and transferred exactly once.
OpenEmbedded
The build-system core (metadata format, class mechanism, package tooling) that the Yocto Project packages and supports. These docs use "Yocto" and "OpenEmbedded" interchangeably — meta-pantavisor targets the combined stack, not a distinction readers need to track.
Pantahub
The optional cloud backend (also branded Pantacor Hub) at hub.pantacor.com: device claiming, fleet management, remote updates, and log streaming. Devices work fully without it.
Pseudo
The fakeroot-style tool BitBake uses during builds to track file ownership
and permissions without real root. A "pseudo database corruption" error
means its ownership database and the actual build output disagree —
usually fixed by cleaning the affected recipe's sstate.
pv-ctrl
The local Unix socket on which Pantavisor exposes its REST API (/pv/pv-ctrl
from the debug shell, /pantavisor/pv-ctrl from a management container).
pvcontrol is the CLI for it.
pvcontrol
On-device CLI for the pv-ctrl API: list containers, run revisions, manage metadata, send commands. See pvcontrol.
pvr
The workstation CLI with git-like semantics: clone a device's state, add
and commit changes, post them back to the device or to Pantahub. See the
pvr CLI.
pvrexport
A tarball of one or more state parts (an app or a BSP) produced by pvr export or a meta-pantavisor container recipe, deployable onto any device via
pvtx, the web UI, or pvr.
pvtx
Pantavisor's on-device update-transaction tool: begin a transaction, add
parts, commit — atomically. It also serves the device web UI on port 12368
(/app). See the pvtx web UI.
Recipe
A single .bb file describing how to fetch, build, and package one
component — roughly a Buildroot package .mk equivalent. This layer's
recipes-pv/ directories hold one recipe per component.
Restart policy
Per-container update behavior: system containers require a reboot to
update; container ones are restarted in place, making the update a
non-reboot transition.
Revision
A numbered, immutable snapshot of the complete device state — BSP and all containers. Revision 0 is the factory state; updates create new revisions and the device can atomically run or roll back to any of them.
sstate (shared state cache)
BitBake's per-task build-output cache (SSTATE_DIR), keyed by task/input
hash — a task whose inputs haven't changed reuses its cached output instead
of rebuilding. Distinct from DL_DIR, which caches fetched upstream
sources.
State (state JSON)
The JSON document that fully describes a revision — every part, file, and
manifest, referencing objects by hash. Identified by #spec
(pantavisor-service-system@1). The authoritative schema is the
state format reference.
Status goal
The state a container must reach (e.g. started) for an update to count as successful. If goals are not met within the stability window, the update is not committed and the device rolls back.
Trail
The ordered history of a device's revisions — trails/ on the device's
storage, mirrored per device on Pantahub.
WIC / WKS
wic is Yocto's disk-image partitioning tool; a .wks file (see this
layer's wic/ directory) describes the partition layout it produces —
roughly the Yocto equivalent of a genimage config plus a partition table.
xconnect
Also referred to as pv-xconnect (the name of the on-device daemon) —
same feature. Pantavisor's inter-container service connectivity: containers declare the
services they provide and require in services.json
(service-manifest-xconnect@1), and Pantavisor wires them together. See the
xconnect reference.