From 46d90703dffe56826a672bcd51cb27ad1aced760 Mon Sep 17 00:00:00 2001
From: Daniel Micay Smartphone targets: List of kernels corresponding to officially supported devices: The For the first generation Pixel (sailfish) and Pixel XL (marlin), signed
- releases require building the verity public key into the kernel so the keys need to be
- generated per the instructions below before building the kernel. The
-
-
@@ -310,14 +305,9 @@ git submodule sync
git submodule update --init
./build.sh blueline
- kernel/google/marlin repository is for the Pixel and Pixel XL, the
- kernel/google/wahoo repository is for the Pixel 2 and Pixel 2 XL and the
- kernel/google/crosshatch repository is for the Pixel 3 and Pixel 3
- XL.kernel/google/wahoo repository is for the Pixel 2 and Pixel 2 XL
+ and the kernel/google/crosshatch repository is for the Pixel 3 and Pixel
+ 3 XL.
Setting up the OS build environment
@@ -438,46 +428,6 @@ mv vendor/android-prepare-vendor/DEVICE/BUILD_ID/vendor/google_devices/* vendor/
sample certificate subject can be replaced with your own information or simply left
as-is.
The Pixel and Pixel XL use Android Verified Boot 1.0. The Pixel 2, Pixel 2 XL, - Pixel 3, Pixel 3 XL, Pixel 3a and Pixel 3a XL use Android Verified Boot 2.0 (AVB). - Follow the appropriate instructions below.
- -For the first generation Pixel (sailfish) and Pixel XL (marlin), signed - releases require building the verity public key into the kernel, so this needs to be - done before building the kernel.
- -To generate keys for marlin (you should use unique keys per device variant):
- -mkdir -p keys/marlin -cd keys/marlin -../../development/tools/make_key releasekey '/CN=GrapheneOS/' -../../development/tools/make_key platform '/CN=GrapheneOS/' -../../development/tools/make_key shared '/CN=GrapheneOS/' -../../development/tools/make_key media '/CN=GrapheneOS/' -../../development/tools/make_key networkstack '/CN=GrapheneOS/' -../../development/tools/make_key verity '/CN=GrapheneOS/' -cd ../..- -
Generate the verity public key:
- -make -j20 generate_verity_key -out/host/linux-x86/bin/generate_verity_key -convert keys/marlin/verity.x509.pem keys/marlin/verity_key- -
Generate verity keys in the format used by the kernel for the Pixel and Pixel XL:
- -openssl x509 -outform der -in keys/marlin/verity.x509.pem -out kernel/google/marlin/verifiedboot_marlin_relkeys.der.x509- -
The same kernel and device repository is used for the Pixel and Pixel XL. There's - no separate sailfish kernel.
- -To generate keys for crosshatch (you should use unique keys per device variant):
-- cgit v1.3.1