009: Magisk ship pack through US-S5-1 + US-S4 OpenSSH/Jelly/Gallery2.

Release-keys/AVB, CVE clean+hi batches, Yama/slabrand, Pro branding, bundled apps, and AXP-class product surface docs/scripts.
2026-10-05 10:42:00 +02:00
1 parent fd793b9471
commit deaaf42caa
@@ -0,0 +1,41 @@
+#!/usr/bin/env bash
+# After hi-batch3 BOOT_OK: launch release-keys bacon (US-S2) on rom-dev01.
+# Does not flash RK zip (needs recovery sideload); only starts bacon + status poll helper.
+set -euo pipefail
+SSHCFG="${SSHCFG:-/home/aventura/Workspaces/AXP_Resurection/docs/ssh/config}"
+BATCH3_LOG="${BATCH3_LOG:-/tmp/009-wait-flash-cve-hi-batch3.log}"
+LOG="${LOG:-/tmp/009-chain-hi3-to-releasekeys.log}"
+exec > >(tee -a "$LOG") 2>&1
+
+echo "CHAIN start $(date -Is) wait HI_BATCH3_BOOT_OK"
+for i in $(seq 1 200); do
+  if grep -q 'HI_BATCH3_BOOT_OK' "$BATCH3_LOG" 2>/dev/null; then
+    echo "seen HI_BATCH3_BOOT_OK"
+    break
+  fi
+  if grep -qE 'BACON_FAILED|NOT_BOOTED|BOOT_TIMEOUT|TIMEOUT' "$BATCH3_LOG" 2>/dev/null; then
+    # allow exit=141 path that still boots — only abort on clear fail without OK
+    if ! grep -q 'HI_BATCH3_BOOT_OK' "$BATCH3_LOG" 2>/dev/null; then
+      if grep -qE 'BACON_FAILED|NOT_BOOTED|BOOT_TIMEOUT' "$BATCH3_LOG" 2>/dev/null; then
+        echo CHAIN_ABORT_BATCH3_FAIL
+        exit 1
+      fi
+    fi
+  fi
+  sleep 30
+done
+grep -q 'HI_BATCH3_BOOT_OK' "$BATCH3_LOG" || { echo CHAIN_TIMEOUT; exit 1; }
+
+echo "=== launch release-keys bacon $(date -Is) ==="
+ssh -F "$SSHCFG" -o BatchMode=yes rom-dev01 '
+test -f /home/android-build/.android-certs/releasekey.pk8
+install -m 0755 /tmp/009-bacon-axp-stage1-combo4-cve-hi-releasekeys.sh \
+  /srv/rom/artifacts/009-axp-los23-port/scripts/ 2>/dev/null || true
+# script must already be on host
+test -x /srv/rom/artifacts/009-axp-los23-port/scripts/009-bacon-axp-stage1-combo4-cve-hi-releasekeys.sh
+/srv/rom/artifacts/bin/rom-detach 009-bacon-cve-hi-releasekeys -- \
+  bash /srv/rom/artifacts/009-axp-los23-port/scripts/009-bacon-axp-stage1-combo4-cve-hi-releasekeys.sh
+sleep 2
+cat /srv/rom/artifacts/detach-009-bacon-cve-hi-releasekeys.status
+'
+echo CHAIN_RK_STARTED