009: Magisk ship pack through US-S5-1 + US-S4 OpenSSH/Jelly/Gallery2.

Release-keys/AVB, CVE clean+hi batches, Yama/slabrand, Pro branding,
bundled apps, and AXP-class product surface docs/scripts.
This commit is contained in:
sunfish-admin committed 2026-10-05 10:42:00 +02:00
1 parent fd793b9471
commit deaaf42caa
129 files changed
+11769 -141

No files matched your search

+19
View File
@@ -7,3 +7,22 @@
# official microG (which breaks F-Droid same-signer updates).
BOARD_SUPER_PARTITION_ERROR_LIMIT := 9441378304
# Product LINEAGE_VERSION id: set in vendor/extra/product.mk (via bacon
# symlink to extra-product.mk) — BoardConfig is too late for version.mk.
# Keep a duplicate here only as documentation / get_build_var fallback.
TARGET_UNOFFICIAL_BUILD_ID := AXP-Resurection-Pro
# US-S3 — project AVB *signing* key (Gate G infrastructure).
# Included after device/google/sunfish BoardConfig-common.mk → override here.
# Keep WITH_AVB unset → BoardConfigLineage adds vbmeta --flags 3
# (HASHTREE_DISABLED|VERIFICATION_DISABLED). Magisk-friendly unlocked LAB;
# NOT runtime AVB enforcement / "hardened verified boot".
# Bootloader relock = wont. OEM unlocking: leave enabled (escape hatch only).
_AXP_AVB_KEY := vendor/sunfish-a16/certs/avb.pem
ifneq ($(wildcard $(_AXP_AVB_KEY)),)
BOARD_AVB_ALGORITHM := SHA256_RSA4096
BOARD_AVB_KEY_PATH := $(_AXP_AVB_KEY)
BOARD_AVB_VBMETA_SYSTEM_ALGORITHM := SHA256_RSA4096
BOARD_AVB_VBMETA_SYSTEM_KEY_PATH := $(_AXP_AVB_KEY)
endif