diff --git a/static/build.html b/static/build.html index 95015a39..6483fe3c 100644 --- a/static/build.html +++ b/static/build.html @@ -334,6 +334,17 @@ git submodule update --init should be user builds as they are significantly more secure and don't make additional performance sacrifices to improve debugging.

+

Set OFFICIAL_BUILD=true to include the Updater app. You + must change the URL in + packages/apps/Updater/res/values/config.xml to your own domain. Using the + official update server with a build signed with different keys will not work and will + essentially perform a denial of service attack on our update service. If you try to + use the official URL, the app will download an official update and will detect it as + corrupted or tampered. It will delete the update and try to download it over and over + again since it will never be signed with your key.

+ +
export OFFICIAL_BUILD=true
+

Reproducible builds

@@ -351,6 +362,11 @@ git submodule update --init different keys you need to stick to comparing everything other than the signatures.

+

Set OFFICIAL_BUILD=true per the instructions above. Note that if you + do not change the URL to your own domain, you must disable the + Updater app before connecting the device to the internet, or you will be performing a + denial of service attack on our official update server.

+

Extracting vendor files for Pixel devices