summaryrefslogtreecommitdiff
path: root/static/build.html
diff options
context:
space:
mode:
authorDaniel Micay <danielmicay@gmail.com>2020-07-11 07:59:28 -0400
committerDaniel Micay <danielmicay@gmail.com>2020-07-11 07:59:28 -0400
commitccf47dd4c352f289a8992eefd25c0bb919657f6a (patch)
treec8c8903c392c2b7077d8f5759c8fda513f076222 /static/build.html
parentdc1b128a20d02623675d8f38cfd03ee55d140053 (diff)
document stable release manifest generation
Diffstat (limited to 'static/build.html')
-rw-r--r--static/build.html14
1 files changed, 14 insertions, 0 deletions
diff --git a/static/build.html b/static/build.html
index 6fb4bd7f..9ccb461d 100644
--- a/static/build.html
+++ b/static/build.html
@@ -92,6 +92,7 @@
<li><a href="#prebuilt-apps">Prebuilt apps</a></li>
</ul>
</li>
+ <li><a href="#stable-release-manifest">Stable release manifest</a></li>
<li><a href="#standalone-sdk">Standalone SDK</a></li>
<li><a href="#android-studio">Android Studio</a></li>
<li><a href="#obtaining-upstream-manifests">Obtaining upstream manifests</a></li>
@@ -807,6 +808,19 @@ cd src</pre>
<p>A build of Seedvault is bundled as an apk into an external/ repository. There are
no modifications made to it.</p>
+ <h2 id="stable-release-manifest">
+ <a href="#stable-release-manifest">Stable release manifest</a>
+ </h2>
+
+ <p>Manifests for stable releases are generated with <code>repo manifest -r</code>
+ after tagging the release across all the repositories in a temporary branch and
+ syncing to it. This provides a manifest referencing the commits by hashes instead of
+ just tags to lock in the revisions. This makes verification of the releases simpler,
+ since only the manifest tag needs to be verified rather than tags for each
+ repository. This also means the whole release can be verified using the GrapheneOS
+ signing key despite referencing many upstream repositories that are not forked by the
+ GrapheneOS project.</p>
+
<h2 id="standalone-sdk">
<a href="#standalone-sdk">Standalone SDK</a>
</h2>