diff options
| author | Daniel Micay <daniel.micay@grapheneos.org> | 2023-12-08 12:27:23 -0500 |
|---|---|---|
| committer | Daniel Micay <daniel.micay@grapheneos.org> | 2023-12-08 12:27:23 -0500 |
| commit | f5e449bb79b812eb160b58fff0cae08df50cd1e1 (patch) | |
| tree | ec0f287749a098c2a09997ca57b431e769c301bf /static/faq.html | |
| parent | 7cb9b4c4983ae3838a641cf707715bb5eda1d54a (diff) | |
generic targets aren't supported
Diffstat (limited to 'static/faq.html')
| -rw-r--r-- | static/faq.html | 27 |
1 files changed, 15 insertions, 12 deletions
diff --git a/static/faq.html b/static/faq.html index 4a9085d9..14cfdd76 100644 --- a/static/faq.html +++ b/static/faq.html @@ -171,18 +171,21 @@ the same standards. For most devices, the hardware and firmware will prevent providing a reasonably secure device, regardless of the work put into device support.</p> - <p>GrapheneOS also supports generic targets, but these aren't suitable for production - usage and are only intended for development and testing use. For mobile devices, the - generic targets simply run on top of the underlying device support code (firmware, - kernel, device trees, vendor code) rather than shipping it and keeping it updated. It - would be possible to ship generic system images with separate updates for the device - support code. However, it would be drastically more complicated to maintain and - support due to combinations of different versions and it would cause complications for - the hardening done by GrapheneOS. The motivation doesn't exist for GrapheneOS, since - full updates with deltas to minimize bandwidth can be shipped for every device and - GrapheneOS is the only party involved in providing the updates. For the same reason, - it has little use for the ability to provide out-of-band updates to system image - components including all the apps and many other components.</p> + <p>GrapheneOS does not support being used as a Generic System Image, which + only exists for development/testing purposes and isn't usable for GrapheneOS + since we require kernel changes and the userspace part of the OS cannot run on + top of a kernel without the required functionality. The generic targets simply + run on top of the underlying device support code (firmware, kernel, device + trees, vendor code) rather than shipping it and keeping it updated. It would + be possible to ship generic system images with separate updates for the device + support code. However, it would be drastically more complicated to maintain + and support due to combinations of different versions and it would cause + complications for the hardening done by GrapheneOS. The motivation doesn't + exist for GrapheneOS, since full updates with deltas to minimize bandwidth can + be shipped for every device and GrapheneOS is the only party involved in + providing the updates. For the same reason, it has little use for the ability + to provide out-of-band updates to system image components including all the + apps and many other components.</p> <p>Some of the GrapheneOS sub-projects support other operating systems on a broader range of devices. Device support for Auditor and AttestationServer is documented in |