security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

add 9th generation Pixel support

Browse Source
This commit is contained in:
Daniel Micay 2024-08-21 19:34:23 -04:00
parent 47f4ff448d
commit 7a879a324e
7 changed files with 95 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
process-static
View File

@ -63,7 +63,7 @@ done
sed -i "$replace" static-tmp/**/*.html nginx-tmp/nginx.conf nginx-tmp/snippets/preload.conf
replace=
devices=(akita husky shiba felix tangorpro lynx cheetah panther bluejay raven oriole barbet redfin bramble sunfish coral flame)
devices=(komodo caiman tokay akita husky shiba felix tangorpro lynx cheetah panther bluejay raven oriole barbet redfin bramble sunfish coral flame)
channels=(stable beta)
for device in ${devices[@]}; do
for channel in ${channels[@]}; do

29
static/faq.html
View File

@ -139,6 +139,9 @@
<p>GrapheneOS has official production support for the following devices:</p>
<ul>
<li>Pixel 9 Pro XL (komodo)</li>
<li>Pixel 9 Pro (caiman)</li>
<li>Pixel 9 (tokay)</li>
<li>Pixel 8a (akita)</li>
<li>Pixel 8 Pro (husky)</li>
<li>Pixel 8 (shiba)</li>
@ -233,6 +236,9 @@
guarantee from launch for full security updates and other improvements:</p>
<ul>
<li><strong>Pixel 9 Pro XL</strong> — minimum 7 years support and hardware memory tagging support</li>
<li><strong>Pixel 9 Pro</strong> — minimum 7 years support and hardware memory tagging support</li>
<li><strong>Pixel 9</strong> — minimum 7 years support and hardware memory tagging support</li>
<li><strong>Pixel 8a</strong> — minimum 7 years support and hardware memory tagging support</li>
<li><strong>Pixel 8 Pro</strong> — minimum 7 years support and hardware memory tagging support</li>
<li><strong>Pixel 8</strong> — minimum 7 years support and hardware memory tagging support</li>
@ -244,13 +250,13 @@
<li>Pixel 6a</li>
</ul>
<p>8th generation Pixels provide a minimum guarantee of 7 years of support
from launch instead of the previous 5 year minimum guarantee. 8th generation
<p>8th/9th generation Pixels provide a minimum guarantee of 7 years of support
from launch instead of the previous 5 year minimum guarantee. 8th/9th generation
Pixels also bring support for the incredibly powerful hardware memory tagging
security feature as part of moving to new ARMv9 CPU cores. GrapheneOS uses
hardware memory tagging by default to protect the base OS and known compatible
user installed apps against exploitation, with the option to use it for all
apps and opt-out on a case-by-case basis for the few incompatible with it.</p>
user installed apps against exploitation, with the option to use it for all apps
and opt-out on a case-by-case basis for the few incompatible with it.</p>
<p>Both 7th and 6th generation Pixels have a minimum guarantee of 5 years from
launch. 7th generation Pixels are a year newer so they have an extra year of
@ -435,6 +441,21 @@
<th>OEM minimum support end</th>
<th>OEM minimum support length</th>
</tr>
<tr>
<td>Google Pixel 9 Pro XL</td>
<td>August 2031</td>
<td>7 years</td>
</tr>
<tr>
<td>Google Pixel 9 Pro</td>
<td>August 2031</td>
<td>7 years</td>
</tr>
<tr>
<td>Google Pixel 9</td>
<td>August 2031</td>
<td>7 years</td>
</tr>
<tr>
<td>Google Pixel 8a</td>
<td>May 2031</td>

3
static/install/cli.html
View File

@ -578,6 +578,9 @@ curl -O https://releases.grapheneos.org/<var>DEVICE_NAME</var>-install-<var>VERS
verified boot key hashes below:</p>
<ul>
<li>Pixel 9 Pro XL: <code>55d3c2323db91bb91f20d38d015e85112d038f6b6b5738fe352c1a80dba57023</code></li>
<li>Pixel 9 Pro: <code>f729cab861da1b83fdfab402fc9480758f2ae78ee0b61c1f2137dd1ab7076e86</code></li>
<li>Pixel 9: <code>9e6a8f3e0d761a780179f93acd5721ba1ab7c8c537c7761073c0a754b0e932de</code></li>
<li>Pixel 8a: <code>096b8bd6d44527a24ac1564b308839f67e78202185cbff9cfdcb10e63250bc5e</code></li>
<li>Pixel 8 Pro: <code>896db2d09d84e1d6bb747002b8a114950b946e5825772a9d48ba7eb01d118c1c</code></li>
<li>Pixel 8: <code>cd7479653aa88208f9f03034810ef9b7b0af8a9d41e2000e458ac403a2acb233</code></li>

3
static/install/web.html
View File

@ -384,6 +384,9 @@
verified boot key hashes below:</p>
<ul>
<li>Pixel 9 Pro XL: <code>55d3c2323db91bb91f20d38d015e85112d038f6b6b5738fe352c1a80dba57023</code></li>
<li>Pixel 9 Pro: <code>f729cab861da1b83fdfab402fc9480758f2ae78ee0b61c1f2137dd1ab7076e86</code></li>
<li>Pixel 9: <code>9e6a8f3e0d761a780179f93acd5721ba1ab7c8c537c7761073c0a754b0e932de</code></li>
<li>Pixel 8a: <code>096b8bd6d44527a24ac1564b308839f67e78202185cbff9cfdcb10e63250bc5e</code></li>
<li>Pixel 8 Pro: <code>896db2d09d84e1d6bb747002b8a114950b946e5825772a9d48ba7eb01d118c1c</code></li>
<li>Pixel 8: <code>cd7479653aa88208f9f03034810ef9b7b0af8a9d41e2000e458ac403a2acb233</code></li>

2
static/js/releases.js
View File

@ -1,7 +1,7 @@
// @license magnet:?xt=urn:btih:d3d9a9a6595521f9666a5e94cc830dab83b65699&dn=expat.txt MIT
const baseUrl = "https://releases.grapheneos.org/";
const devices = ["akita", "husky", "shiba", "felix", "tangorpro", "lynx", "cheetah", "panther", "bluejay", "raven", "oriole", "barbet", "redfin", "bramble", "sunfish", "coral", "flame"];
const devices = ["komodo", "caiman", "tokay", "akita", "husky", "shiba", "felix", "tangorpro", "lynx", "cheetah", "panther", "bluejay", "raven", "oriole", "barbet", "redfin", "bramble", "sunfish", "coral", "flame"];
const legacyFactoryDevices = new Set(["sunfish", "coral", "flame"]);
const channels = ["stable", "beta"];
const delayMs = 1000 * 60 * 5;

4
static/js/web-install.js
View File

@ -188,11 +188,11 @@ async function unlockBootloader(setProgress) {
return "Bootloader unlocked.";
}
const supportedDevices = ["akita", "husky", "shiba", "felix", "tangorpro", "lynx", "cheetah", "panther", "bluejay", "raven", "oriole", "barbet", "redfin", "bramble", "sunfish", "coral", "flame"];
const supportedDevices = ["komodo", "caiman", "tokay", "akita", "husky", "shiba", "felix", "tangorpro", "lynx", "cheetah", "panther", "bluejay", "raven", "oriole", "barbet", "redfin", "bramble", "sunfish", "coral", "flame"];
const legacyQualcommDevices = ["sunfish", "coral", "flame"];
const day1SnapshotCancelDevices = ["akita", "husky", "shiba", "felix", "tangorpro", "lynx", "cheetah", "panther", "bluejay", "raven", "oriole", "barbet", "redfin", "bramble"];
const day1SnapshotCancelDevices = ["komodo", "caiman", "tokay", "akita", "husky", "shiba", "felix", "tangorpro", "lynx", "cheetah", "panther", "bluejay", "raven", "oriole", "barbet", "redfin", "bramble"];
function hasOptimizedFactoryImage(product) {
return !legacyQualcommDevices.includes(product);

60
static/releases.html
View File

@ -47,6 +47,9 @@
<li>
<a href="#stable-channel">Stable channel</a>
<ul>
<li><a href="#komodo-stable">Pixel 9 Pro XL</a></li>
<li><a href="#caiman-stable">Pixel 9 Pro</a></li>
<li><a href="#tokay-stable">Pixel 9</a></li>
<li><a href="#akita-stable">Pixel 8a</a></li>
<li><a href="#husky-stable">Pixel 8 Pro</a></li>
<li><a href="#shiba-stable">Pixel 8</a></li>
@ -69,6 +72,9 @@
<li>
<a href="#beta-channel">Beta channel</a>
<ul>
<li><a href="#komodo-beta">Pixel 9 Pro XL</a></li>
<li><a href="#caiman-beta">Pixel 9 Pro</a></li>
<li><a href="#tokay-beta">Pixel 9</a></li>
<li><a href="#akita-beta">Pixel 8a</a></li>
<li><a href="#husky-beta">Pixel 8 Pro</a></li>
<li><a href="#shiba-beta">Pixel 8</a></li>
@ -453,6 +459,33 @@
<section id="stable-channel">
<h2><a href="#stable-channel">Stable channel</a></h2>
<section id="komodo-stable">
<h3><a href="#komodo-stable">Pixel 9 Pro XL</a></h3>
<p>Version: <a href="#[[komodo-stable-BUILD_NUMBER]]">[[komodo-stable-BUILD_NUMBER]]</a></p>
<ul>
<li><a href="https://releases.grapheneos.org/komodo-install-[[komodo-stable-BUILD_NUMBER]].zip">komodo-install-[[komodo-stable-BUILD_NUMBER]].zip</a></li>
<li><a href="https://releases.grapheneos.org/komodo-install-[[komodo-stable-BUILD_NUMBER]].zip.sig">komodo-install-[[komodo-stable-BUILD_NUMBER]].zip.sig</a></li>
<li><a href="https://releases.grapheneos.org/komodo-ota_update-[[komodo-stable-BUILD_NUMBER]].zip">komodo-ota_update-[[komodo-stable-BUILD_NUMBER]].zip</a></li>
</ul>
</section>
<section id="caiman-stable">
<h3><a href="#caiman-stable">Pixel 9 Pro</a></h3>
<p>Version: <a href="#[[caiman-stable-BUILD_NUMBER]]">[[caiman-stable-BUILD_NUMBER]]</a></p>
<ul>
<li><a href="https://releases.grapheneos.org/caiman-install-[[caiman-stable-BUILD_NUMBER]].zip">caiman-install-[[caiman-stable-BUILD_NUMBER]].zip</a></li>
<li><a href="https://releases.grapheneos.org/caiman-install-[[caiman-stable-BUILD_NUMBER]].zip.sig">caiman-install-[[caiman-stable-BUILD_NUMBER]].zip.sig</a></li>
<li><a href="https://releases.grapheneos.org/caiman-ota_update-[[caiman-stable-BUILD_NUMBER]].zip">caiman-ota_update-[[caiman-stable-BUILD_NUMBER]].zip</a></li>
</ul>
</section>
<section id="tokay-stable">
<h3><a href="#tokay-stable">Pixel 9</a></h3>
<p>Version: <a href="#[[tokay-stable-BUILD_NUMBER]]">[[tokay-stable-BUILD_NUMBER]]</a></p>
<ul>
<li><a href="https://releases.grapheneos.org/tokay-install-[[tokay-stable-BUILD_NUMBER]].zip">tokay-install-[[tokay-stable-BUILD_NUMBER]].zip</a></li>
<li><a href="https://releases.grapheneos.org/tokay-install-[[tokay-stable-BUILD_NUMBER]].zip.sig">tokay-install-[[tokay-stable-BUILD_NUMBER]].zip.sig</a></li>
<li><a href="https://releases.grapheneos.org/tokay-ota_update-[[tokay-stable-BUILD_NUMBER]].zip">tokay-ota_update-[[tokay-stable-BUILD_NUMBER]].zip</a></li>
</ul>
</section>
<section id="akita-stable">
<h3><a href="#akita-stable">Pixel 8a</a></h3>
<p>Version: <a href="#[[akita-stable-BUILD_NUMBER]]">[[akita-stable-BUILD_NUMBER]]</a></p>
@ -611,6 +644,33 @@
<section id="beta-channel">
<h2><a href="#beta-channel">Beta channel</a></h2>
<section id="komodo-beta">
<h3><a href="#komodo-beta">Pixel 9 Pro XL</a></h3>
<p>Version: <a href="#[[komodo-beta-BUILD_NUMBER]]">[[komodo-beta-BUILD_NUMBER]]</a></p>
<ul>
<li><a href="https://releases.grapheneos.org/komodo-install-[[komodo-beta-BUILD_NUMBER]].zip">komodo-install-[[komodo-beta-BUILD_NUMBER]].zip</a></li>
<li><a href="https://releases.grapheneos.org/komodo-install-[[komodo-beta-BUILD_NUMBER]].zip.sig">komodo-install-[[komodo-beta-BUILD_NUMBER]].zip.sig</a></li>
<li><a href="https://releases.grapheneos.org/komodo-ota_update-[[komodo-beta-BUILD_NUMBER]].zip">komodo-ota_update-[[komodo-beta-BUILD_NUMBER]].zip</a></li>
</ul>
</section>
<section id="caiman-beta">
<h3><a href="#caiman-beta">Pixel 9 Pro</a></h3>
<p>Version: <a href="#[[caiman-beta-BUILD_NUMBER]]">[[caiman-beta-BUILD_NUMBER]]</a></p>
<ul>
<li><a href="https://releases.grapheneos.org/caiman-install-[[caiman-beta-BUILD_NUMBER]].zip">caiman-install-[[caiman-beta-BUILD_NUMBER]].zip</a></li>
<li><a href="https://releases.grapheneos.org/caiman-install-[[caiman-beta-BUILD_NUMBER]].zip.sig">caiman-install-[[caiman-beta-BUILD_NUMBER]].zip.sig</a></li>
<li><a href="https://releases.grapheneos.org/caiman-ota_update-[[caiman-beta-BUILD_NUMBER]].zip">caiman-ota_update-[[caiman-beta-BUILD_NUMBER]].zip</a></li>
</ul>
</section>
<section id="tokay-beta">
<h3><a href="#tokay-beta">Pixel 9</a></h3>
<p>Version: <a href="#[[tokay-beta-BUILD_NUMBER]]">[[tokay-beta-BUILD_NUMBER]]</a></p>
<ul>
<li><a href="https://releases.grapheneos.org/tokay-install-[[tokay-beta-BUILD_NUMBER]].zip">tokay-install-[[tokay-beta-BUILD_NUMBER]].zip</a></li>
<li><a href="https://releases.grapheneos.org/tokay-install-[[tokay-beta-BUILD_NUMBER]].zip.sig">tokay-install-[[tokay-beta-BUILD_NUMBER]].zip.sig</a></li>
<li><a href="https://releases.grapheneos.org/tokay-ota_update-[[tokay-beta-BUILD_NUMBER]].zip">tokay-ota_update-[[tokay-beta-BUILD_NUMBER]].zip</a></li>
</ul>
</section>
<section id="akita-beta">
<h3><a href="#akita-beta">Pixel 8a</a></h3>
<p>Version: <a href="#[[akita-beta-BUILD_NUMBER]]">[[akita-beta-BUILD_NUMBER]]</a></p>