2022-10-15 07:53:14 -04:00
|
|
|
#!/bin/bash
|
|
|
|
#DivestOS: A privacy focused mobile distribution
|
|
|
|
#Copyright (c) 2017-2022 Divested Computing Group
|
|
|
|
#
|
|
|
|
#This program is free software: you can redistribute it and/or modify
|
|
|
|
#it under the terms of the GNU General Public License as published by
|
|
|
|
#the Free Software Foundation, either version 3 of the License, or
|
|
|
|
#(at your option) any later version.
|
|
|
|
#
|
|
|
|
#This program is distributed in the hope that it will be useful,
|
|
|
|
#but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
#MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
#GNU General Public License for more details.
|
|
|
|
#
|
|
|
|
#You should have received a copy of the GNU General Public License
|
|
|
|
#along with this program. If not, see <https://www.gnu.org/licenses/>.
|
|
|
|
umask 0022;
|
|
|
|
|
|
|
|
#Last verified: 2022-10-15
|
|
|
|
|
|
|
|
patchAllKernels() {
|
2023-01-09 13:13:03 -05:00
|
|
|
startPatcher "kernel_fairphone_sm7225 kernel_fxtec_msm8998 kernel_google_gs101_private_gs-google kernel_google_gs201_private_gs-google kernel_google_msm-4.9 kernel_google_msm-4.14 kernel_google_redbull kernel_google_wahoo kernel_oneplus_msm8998 kernel_oneplus_sdm845 kernel_oneplus_sm8150 kernel_oneplus_sm8250 kernel_oneplus_sm8350 kernel_razer_sdm845 kernel_sony_sdm845 kernel_xiaomi_sdm845";
|
2022-10-15 07:53:14 -04:00
|
|
|
}
|
|
|
|
export -f patchAllKernels;
|
|
|
|
|
|
|
|
scanWorkspaceForMalware() {
|
|
|
|
local scanQueue="$DOS_BUILD_BASE/android $DOS_BUILD_BASE/art $DOS_BUILD_BASE/bionic $DOS_BUILD_BASE/bootable $DOS_BUILD_BASE/build $DOS_BUILD_BASE/dalvik $DOS_BUILD_BASE/device $DOS_BUILD_BASE/hardware $DOS_BUILD_BASE/libcore $DOS_BUILD_BASE/libnativehelper $DOS_BUILD_BASE/packages $DOS_BUILD_BASE/pdk $DOS_BUILD_BASE/platform_testing $DOS_BUILD_BASE/sdk $DOS_BUILD_BASE/system";
|
|
|
|
scanQueue=$scanQueue" $DOS_BUILD_BASE/lineage-sdk $DOS_BUILD_BASE/vendor/lineage";
|
|
|
|
scanForMalware true "$scanQueue";
|
|
|
|
}
|
|
|
|
export -f scanWorkspaceForMalware;
|
|
|
|
|
|
|
|
buildDevice() {
|
|
|
|
cd "$DOS_BUILD_BASE";
|
2022-10-16 08:54:02 -04:00
|
|
|
#export OTA_KEY_OVERRIDE_DIR="$DOS_SIGNING_KEYS/$1";
|
2022-10-15 07:53:14 -04:00
|
|
|
breakfast "lineage_$1-user" && mka target-files-package otatools && processRelease $1 true $2;
|
|
|
|
}
|
|
|
|
export -f buildDevice;
|
|
|
|
|
|
|
|
buildDeviceDebug() {
|
|
|
|
cd "$DOS_BUILD_BASE";
|
|
|
|
unset OTA_KEY_OVERRIDE_DIR;
|
|
|
|
brunch "lineage_$1-eng";
|
|
|
|
}
|
|
|
|
export -f buildDeviceDebug;
|
|
|
|
|
|
|
|
buildAll() {
|
|
|
|
umask 0022;
|
|
|
|
cd "$DOS_BUILD_BASE";
|
|
|
|
if [ "$DOS_MALWARE_SCAN_ENABLED" = true ]; then scanWorkspaceForMalware; fi;
|
Many fixes to get bluejay booting & working proper
- Enable APEX for Pixel 6/7, necessary for camera and pKVM
- Also drop hack removing pKVM for Pixel 6/7
- patch from GrapheneOS
- Extend hmalloc workaround to /apex
- Deblobber:
- actually handle wildcard f/w/b overlays
- move some stuff around
- remove some more Pixel blobs
- flag and disable removal of camera extensions, being able to use the second camera is nice
- Adjust what hardenDefconfig disables, caused boot issues
minimal impact as most of these are already default-disabled
can be narrowed down in future
- Disable some of the bionic hardening patches, causing more boot issues
annoying to lose, but having a phone that boots is more important
- Add LTE only mode to 17.1, 18.1, 19.1, and 20.0, credit GrapheneOS
- Remove Pixel 2 ramdisk compression reverts, fixed upstream
And yes, I know I should've split up this commit...
Signed-off-by: Tad <tad@spotco.us>
2022-12-23 22:00:31 -05:00
|
|
|
#frontloaded for testing
|
2022-12-31 18:20:44 -05:00
|
|
|
buildDevice bluejay avb; #unb
|
Many fixes to get bluejay booting & working proper
- Enable APEX for Pixel 6/7, necessary for camera and pKVM
- Also drop hack removing pKVM for Pixel 6/7
- patch from GrapheneOS
- Extend hmalloc workaround to /apex
- Deblobber:
- actually handle wildcard f/w/b overlays
- move some stuff around
- remove some more Pixel blobs
- flag and disable removal of camera extensions, being able to use the second camera is nice
- Adjust what hardenDefconfig disables, caused boot issues
minimal impact as most of these are already default-disabled
can be narrowed down in future
- Disable some of the bionic hardening patches, causing more boot issues
annoying to lose, but having a phone that boots is more important
- Add LTE only mode to 17.1, 18.1, 19.1, and 20.0, credit GrapheneOS
- Remove Pixel 2 ramdisk compression reverts, fixed upstream
And yes, I know I should've split up this commit...
Signed-off-by: Tad <tad@spotco.us>
2022-12-23 22:00:31 -05:00
|
|
|
#SD835
|
2023-01-08 20:31:33 -05:00
|
|
|
buildDevice taimen avb; #unb
|
2022-12-31 18:20:44 -05:00
|
|
|
buildDevice walleye avb; #unb
|
2022-12-10 20:39:50 -05:00
|
|
|
buildDevice cheeseburger verity;
|
|
|
|
buildDevice dumpling verity;
|
2022-10-15 14:13:07 -04:00
|
|
|
#SD845
|
2023-01-08 20:31:33 -05:00
|
|
|
buildDevice fajita avb;
|
2022-12-10 20:39:50 -05:00
|
|
|
buildDevice enchilada avb;
|
2022-10-19 12:41:00 -04:00
|
|
|
buildDevice aura avb;
|
|
|
|
buildDevice beryllium avb;
|
|
|
|
buildDevice pro1 avb;
|
2022-12-31 18:20:44 -05:00
|
|
|
buildDevice crosshatch avb; #unb
|
|
|
|
buildDevice blueline avb; #unb
|
2023-01-09 13:13:03 -05:00
|
|
|
buildDevice akari avb;
|
|
|
|
buildDevice aurora avb;
|
|
|
|
buildDevice xz2c avb;
|
2022-10-15 14:13:07 -04:00
|
|
|
#SD750
|
2022-10-15 14:51:30 -04:00
|
|
|
buildDevice FP4 avb;
|
2022-10-15 14:13:07 -04:00
|
|
|
#SD855
|
2022-11-12 23:21:49 -05:00
|
|
|
buildDevice guacamole avb;
|
|
|
|
buildDevice guacamoleb avb;
|
|
|
|
buildDevice hotdog avb;
|
|
|
|
buildDevice hotdogb avb;
|
2022-10-15 14:13:07 -04:00
|
|
|
buildDevice coral avb;
|
|
|
|
buildDevice flame avb;
|
2022-10-16 11:06:48 -04:00
|
|
|
#SD730
|
|
|
|
buildDevice sunfish avb;
|
2022-10-15 14:13:07 -04:00
|
|
|
#SD865
|
2022-10-17 06:39:52 -04:00
|
|
|
buildDevice instantnoodle avb;
|
|
|
|
buildDevice instantnoodlep avb;
|
|
|
|
buildDevice kebab avb;
|
2022-10-15 14:13:07 -04:00
|
|
|
#SD888
|
|
|
|
buildDevice lemonade avb;
|
|
|
|
buildDevice lemonadep avb;
|
|
|
|
#SD765
|
|
|
|
buildDevice bramble avb;
|
|
|
|
buildDevice redfin avb;
|
2022-10-17 07:25:46 -04:00
|
|
|
buildDevice barbet avb;
|
2022-10-19 12:41:00 -04:00
|
|
|
#SD670
|
2022-12-31 18:20:44 -05:00
|
|
|
buildDevice bonito avb; #unb
|
|
|
|
buildDevice sargo avb; #unb
|
2022-10-15 14:13:07 -04:00
|
|
|
#Tensor
|
2023-01-18 15:54:53 -05:00
|
|
|
buildDevice oriole avb; #unb
|
2022-12-31 18:20:44 -05:00
|
|
|
buildDevice raven avb; #unb
|
|
|
|
buildDevice panther avb; #unb
|
|
|
|
buildDevice cheetah avb; #unb
|
2022-10-15 07:53:14 -04:00
|
|
|
}
|
|
|
|
export -f buildAll;
|
|
|
|
|
|
|
|
patchWorkspace() {
|
|
|
|
umask 0022;
|
|
|
|
cd "$DOS_BUILD_BASE$1";
|
|
|
|
touch DOS_PATCHED_FLAG;
|
|
|
|
if [ "$DOS_MALWARE_SCAN_ENABLED" = true ]; then scanForMalware false "$DOS_PREBUILT_APPS $DOS_BUILD_BASE/build $DOS_BUILD_BASE/device $DOS_BUILD_BASE/vendor/lineage"; fi;
|
|
|
|
verifyAllPlatformTags;
|
|
|
|
gpgVerifyGitHead "$DOS_BUILD_BASE/external/chromium-webview";
|
|
|
|
|
2023-01-24 19:39:39 -05:00
|
|
|
#source build/envsetup.sh;
|
2022-10-15 07:53:14 -04:00
|
|
|
|
|
|
|
sh "$DOS_SCRIPTS/Patch.sh";
|
|
|
|
sh "$DOS_SCRIPTS_COMMON/Enable_Verity.sh";
|
|
|
|
sh "$DOS_SCRIPTS_COMMON/Copy_Keys.sh";
|
2023-02-01 15:53:36 -05:00
|
|
|
sh "$DOS_SCRIPTS_COMMON/Defaults.sh";
|
2022-10-15 07:53:14 -04:00
|
|
|
sh "$DOS_SCRIPTS/Rebrand.sh";
|
|
|
|
sh "$DOS_SCRIPTS_COMMON/Optimize.sh";
|
|
|
|
sh "$DOS_SCRIPTS_COMMON/Deblob.sh";
|
|
|
|
sh "$DOS_SCRIPTS_COMMON/Patch_CVE.sh";
|
|
|
|
sh "$DOS_SCRIPTS_COMMON/Post.sh";
|
|
|
|
source build/envsetup.sh;
|
|
|
|
|
|
|
|
#Deblobbing fixes
|
|
|
|
##setup-makefiles doesn't execute properly for some devices, running it twice seems to fix whatever is wrong
|
|
|
|
#none yet
|
|
|
|
}
|
|
|
|
export -f patchWorkspace;
|
|
|
|
|
|
|
|
enableDexPreOpt() {
|
|
|
|
cd "$DOS_BUILD_BASE$1";
|
|
|
|
if [ -f BoardConfig.mk ]; then
|
|
|
|
echo "WITH_DEXPREOPT := true" >> BoardConfig.mk;
|
|
|
|
echo "WITH_DEXPREOPT_DEBUG_INFO := false" >> BoardConfig.mk;
|
|
|
|
if true; then
|
|
|
|
echo "WITH_DEXPREOPT_BOOT_IMG_AND_SYSTEM_SERVER_ONLY := false" >> BoardConfig.mk;
|
|
|
|
echo "Enabled full dexpreopt for $1";
|
|
|
|
else
|
|
|
|
echo "WITH_DEXPREOPT_BOOT_IMG_AND_SYSTEM_SERVER_ONLY := true" >> BoardConfig.mk;
|
|
|
|
echo "Enabled core dexpreopt for $1";
|
|
|
|
fi;
|
|
|
|
fi;
|
|
|
|
cd "$DOS_BUILD_BASE";
|
|
|
|
}
|
|
|
|
export -f enableDexPreOpt;
|
|
|
|
|
|
|
|
enableLowRam() {
|
|
|
|
cd "$DOS_BUILD_BASE$1";
|
|
|
|
if [ -f lineage_$2.mk ]; then echo -e '\n$(call inherit-product, vendor/divested/build/target/product/lowram.mk)' >> lineage_$2.mk; fi;
|
|
|
|
echo "Enabled lowram for $1";
|
|
|
|
cd "$DOS_BUILD_BASE";
|
|
|
|
}
|
|
|
|
export -f enableLowRam;
|