sunfish-admin
deaaf42caa
Release-keys/AVB, CVE clean+hi batches, Yama/slabrand, Pro branding, bundled apps, and AXP-class product surface docs/scripts.
29 lines
1.4 KiB
Makefile
29 lines
1.4 KiB
Makefile
# sunfish-a16-rom — board tweaks for feature 004 package set
|
|
#
|
|
# Vanilla LOS sunfish ERROR_LIMIT/2 was ~73MiB too small once microG+Phonesky
|
|
# (AXP-sized fat APKs) are added. Raise the *error* ceiling only; keep under
|
|
# BOARD_GOOGLE_DYNAMIC_PARTITIONS_SIZE (4873781248). AXP/Divest images carry a
|
|
# fuller package set on the same device class — prefer this over ABI-stripping
|
|
# official microG (which breaks F-Droid same-signer updates).
|
|
|
|
BOARD_SUPER_PARTITION_ERROR_LIMIT := 9441378304
|
|
|
|
# Product LINEAGE_VERSION id: set in vendor/extra/product.mk (via bacon
|
|
# symlink to extra-product.mk) — BoardConfig is too late for version.mk.
|
|
# Keep a duplicate here only as documentation / get_build_var fallback.
|
|
TARGET_UNOFFICIAL_BUILD_ID := AXP-Resurection-Pro
|
|
|
|
# US-S3 — project AVB *signing* key (Gate G infrastructure).
|
|
# Included after device/google/sunfish BoardConfig-common.mk → override here.
|
|
# Keep WITH_AVB unset → BoardConfigLineage adds vbmeta --flags 3
|
|
# (HASHTREE_DISABLED|VERIFICATION_DISABLED). Magisk-friendly unlocked LAB;
|
|
# NOT runtime AVB enforcement / "hardened verified boot".
|
|
# Bootloader relock = wont. OEM unlocking: leave enabled (escape hatch only).
|
|
_AXP_AVB_KEY := vendor/sunfish-a16/certs/avb.pem
|
|
ifneq ($(wildcard $(_AXP_AVB_KEY)),)
|
|
BOARD_AVB_ALGORITHM := SHA256_RSA4096
|
|
BOARD_AVB_KEY_PATH := $(_AXP_AVB_KEY)
|
|
BOARD_AVB_VBMETA_SYSTEM_ALGORITHM := SHA256_RSA4096
|
|
BOARD_AVB_VBMETA_SYSTEM_KEY_PATH := $(_AXP_AVB_KEY)
|
|
endif
|