summaryrefslogtreecommitdiff
path: root/static
diff options
context:
space:
mode:
authorDaniel Micay <danielmicay@gmail.com>2023-02-02 01:20:34 -0500
committerDaniel Micay <danielmicay@gmail.com>2023-02-02 01:20:34 -0500
commitd920f4a4701e0f3994b6634182de46c78f866a8b (patch)
treea041c6cc797e6ba806801b1ac38ecb40449b60f6 /static
parentb18eb119aa73ee9e0e77aea4d1a8fd3092ea017a (diff)
explain user-facing impact of enforced fs-verity
Diffstat (limited to 'static')
-rw-r--r--static/releases.html7
1 files changed, 7 insertions, 0 deletions
diff --git a/static/releases.html b/static/releases.html
index 401008cd..e8d81123 100644
--- a/static/releases.html
+++ b/static/releases.html
@@ -687,6 +687,13 @@
they updated to newer system app versions than the ones bundled in the new OS
update.</p>
+ <p>Since fs-verity is now fully enforced for installing system app updates,
+ they can only be installed from our app repository providing the fs-verity
+ metadata. This happens automatically via our app repository client, but you
+ could manually download packages and fs-verity metadata to manually install
+ them. OS releases bundle the latest releases of the bundled components so the
+ out-of-band updates are simply a way to get updates quicker.</p>
+
<p>This release also supports out-of-band updates for Vanadium going forward
due to replacing incompatible SELinux hardening with these far superior
verified boot improvements along with fixing a major upstream Android 13