commit cc0b720d5bd215c0d8a6d57a1c0137a03fc89b49
author Alexander Martinz <amartinz@shiftphones.com> Tue May 31 10:20:59 2022 +0200
committer Alexander Martinz <amartinz@shiftphones.com> Tue Dec 20 09:58:51 2022 +0100
tree 3bf60e2f963345603a44790876beb15b0f820939
parent b801a9b095beef9e8b6ee2648e918dc3a1b32ca5

axolotl-shiftos: set up avb signing with private key

Change-Id: Ibb327fe5b8797bbd283aeca2644d354210ca126d
Signed-off-by: Alexander Martinz <amartinz@shiftphones.com>

BoardConfig.mk

diff --git a/BoardConfig.mk b/BoardConfig.mk
index d3522f4..1e9305b 100644
--- a/BoardConfig.mk
+++ b/BoardConfig.mk
@@ -4,6 +4,42 @@
 # SPDX-License-Identifier: Apache-2.0
 #
 
+### AVB
+
+ifeq ($(WITH_GMS_MAINLINE),true)
+    PRIVATE_KEY_PATH := vendor/shiftos/private/keys/mainline/avb-4096.pem
+else
+    PRIVATE_KEY_PATH := vendor/shiftos/private/keys/stock/avb-4096.pem
+endif
+
+# If private key does not exist, fallback to testkey
+ifeq ($(wildcard $(PRIVATE_KEY_PATH)),)
+    PRIVATE_KEY_PATH := external/avb/test/data/testkey_rsa4096.pem
+endif
+
+# AVB - vbmeta
+BOARD_AVB_ALGORITHM := SHA256_RSA4096
+BOARD_AVB_KEY_PATH  := $(PRIVATE_KEY_PATH)
+
+# AVB - vbmeta_system
+BOARD_AVB_VBMETA_SYSTEM := system system_ext
+BOARD_AVB_VBMETA_SYSTEM_KEY_PATH := $(PRIVATE_KEY_PATH)
+BOARD_AVB_VBMETA_SYSTEM_ALGORITHM := SHA256_RSA4096
+BOARD_AVB_VBMETA_SYSTEM_ROLLBACK_INDEX := $(PLATFORM_SECURITY_PATCH_TIMESTAMP)
+BOARD_AVB_VBMETA_SYSTEM_ROLLBACK_INDEX_LOCATION := 11
+
+# AVB - vbmeta_vendor
+BOARD_AVB_VBMETA_VENDOR := vendor
+BOARD_AVB_VBMETA_VENDOR_KEY_PATH := $(PRIVATE_KEY_PATH)
+BOARD_AVB_VBMETA_VENDOR_ALGORITHM := SHA256_RSA4096
+BOARD_AVB_VBMETA_VENDOR_ROLLBACK_INDEX := $(PLATFORM_SECURITY_PATCH_TIMESTAMP)
+BOARD_AVB_VBMETA_VENDOR_ROLLBACK_INDEX_LOCATION := 12
+
+# AVB - clear any set flags
+BOARD_AVB_MAKE_VBMETA_IMAGE_ARGS :=
+
+#############################################################
+
 # Kernel
 ifeq ($(TARGET_BUILD_VARIANT),eng)
     TARGET_KERNEL_CONFIG := axolotl_eng_defconfig