sunfish-adminandCursor
3f941e8451
Ship script gates wave 4 behind AXP_DEBLOB_WAVE4, documents secrets cert path, and adds deblob appliers plus tests; docs capture Swissquote fix and parity. Co-authored-by: Cursor <cursoragent@cursor.com>
24 lines
1.2 KiB
Makefile
24 lines
1.2 KiB
Makefile
# sunfish-a16-rom — board tweaks for feature 004 package set
|
|
#
|
|
# Vanilla LOS sunfish ERROR_LIMIT/2 was ~73MiB too small once microG+Phonesky
|
|
# (AXP-sized fat APKs) are added. Raise the *error* ceiling only; keep under
|
|
# BOARD_GOOGLE_DYNAMIC_PARTITIONS_SIZE (4873781248). AXP/Divest images carry a
|
|
# fuller package set on the same device class — prefer this over ABI-stripping
|
|
# official microG (which breaks F-Droid same-signer updates).
|
|
|
|
BOARD_SUPER_PARTITION_ERROR_LIMIT := 9441378304
|
|
|
|
# US-S3 — project AVB *signing* key (Gate G infrastructure).
|
|
# Included after device/google/sunfish BoardConfig-common.mk → override here.
|
|
# Keep WITH_AVB unset → BoardConfigLineage adds vbmeta --flags 3
|
|
# (HASHTREE_DISABLED|VERIFICATION_DISABLED). Magisk-friendly unlocked LAB;
|
|
# NOT runtime AVB enforcement / "hardened verified boot".
|
|
# Bootloader relock = wont. OEM unlocking: leave enabled (escape hatch only).
|
|
_AXP_AVB_KEY := vendor/sunfish-a16/certs/avb.pem
|
|
ifneq ($(wildcard $(_AXP_AVB_KEY)),)
|
|
BOARD_AVB_ALGORITHM := SHA256_RSA4096
|
|
BOARD_AVB_KEY_PATH := $(_AXP_AVB_KEY)
|
|
BOARD_AVB_VBMETA_SYSTEM_ALGORITHM := SHA256_RSA4096
|
|
BOARD_AVB_VBMETA_SYSTEM_KEY_PATH := $(_AXP_AVB_KEY)
|
|
endif
|