357 lines
23 KiB
HTML
357 lines
23 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="en" prefix="og: http://ogp.me/ns#">
|
|
<head>
|
|
<meta charset="utf-8"/>
|
|
<title>Releases | GrapheneOS</title>
|
|
<meta name="description" content="Official releases of GrapheneOS, a security and privacy focused mobile OS with Android app compatibility."/>
|
|
<meta name="theme-color" content="#212121"/>
|
|
<meta name="viewport" content="width=device-width, initial-scale=1"/>
|
|
<meta property="og:title" content="GrapheneOS releases"/>
|
|
<meta property="og:description" content="Official releases of GrapheneOS, a security and privacy focused mobile OS with Android app compatibility."/>
|
|
<meta property="og:type" content="website"/>
|
|
<meta property="og:image" content="https://grapheneos.org/opengraph.png"/>
|
|
<meta property="og:image:width" content="512"/>
|
|
<meta property="og:image:height" content="512"/>
|
|
<meta property="og:image:alt" content="GrapheneOS logo"/>
|
|
<meta property="og:url" content="https://grapheneos.org/releases"/>
|
|
<meta property="og:site_name" content="GrapheneOS"/>
|
|
<link rel="stylesheet" href="/grapheneos.css?6"/>
|
|
<link rel="manifest" href="/manifest.webmanifest"/>
|
|
<link rel="canonical" href="https://grapheneos.org/releases"/>
|
|
</head>
|
|
<body>
|
|
<nav>
|
|
<ul>
|
|
<li><a href="/">GrapheneOS</a></li>
|
|
<li><a href="/install">Install</a></li>
|
|
<li><a href="/build">Build</a></li>
|
|
<li><a href="/usage">Usage</a></li>
|
|
<li class="active"><a href="/releases">Releases</a></li>
|
|
<li><a href="/source">Source</a></li>
|
|
<li><a href="/donate">Donate</a></li>
|
|
<li><a href="/contact">Contact</a></li>
|
|
</ul>
|
|
</nav>
|
|
<div id="content">
|
|
<h1 id="releases">Releases</h1>
|
|
<p>These releases are available as both tags in the source code repositories and
|
|
official builds.</p>
|
|
<p>The factory images are used for the initial installation and can be verified with
|
|
GPG. See the <a href="/install">installation guide</a> for details.</p>
|
|
<p>GrapheneOS uses automatic over-the-air updates, but full update packages are listed
|
|
below for uncommon use cases like never connecting the device to the internet. A full
|
|
update package can upgrade from any past version to the new version. The over-the-air
|
|
updates use delta update packages when available. Those aren't currently linked below
|
|
but may be in the future once they're being used more consistently. Update packages
|
|
are not for performing the initial installation and you should ignore incorrect guides
|
|
trying to use them to install the OS.</p>
|
|
<p>The update packages have a internal signature verified by the update client (or
|
|
recovery image when sideloading). Downgrade attacks are also prevented, and downgrades
|
|
cannot be done unless a special downgrade update package has been signed with the
|
|
release key. The internal payload for <code>update_engine</code> is also signed,
|
|
providing another layer of signature verification and downgrade protection. Verified
|
|
boot and the hardware-backed keystore also act as a final layer of protection.</p>
|
|
<p>Releases are tested by the developers and are then pushed out via the Beta channel.
|
|
The release is then pushed out via the Stable channel after being tested by some users
|
|
using the Beta channel. In some cases, problems are caught during Beta channel testing
|
|
and a new release is made via the Beta channel to replace the aborted one. In general,
|
|
it's not possible to downgrade unless a downgrade update package is generated, so use
|
|
the Stable channel if you cannot tolerate dealing with temporary issues while a new
|
|
release for the Beta channel is being created.</p>
|
|
|
|
<noscript><strong>JavaScript is required to fetch the current list of releases from
|
|
the update server. The list you're seeing below is a pre-generated template that may
|
|
be out-of-date.</strong></noscript>
|
|
|
|
<section id="stable-channel">
|
|
<h2>
|
|
Stable channel
|
|
<a href="#stable-channel">¶</a>
|
|
</h2>
|
|
|
|
<section id="crosshatch-stable">
|
|
<h3>
|
|
Pixel 3 XL
|
|
<a href="#crosshatch-stable">¶</a>
|
|
</h3>
|
|
<p>Version: <a href="https://github.com/GrapheneOS/platform_manifest/releases/tag/PQ3A.190505.002.2019.05.08.15">PQ3A.190505.002.2019.05.08.15</a></p>
|
|
<ul>
|
|
<li><a href="https://seamlessupdate.app/crosshatch-factory-2019.05.08.15.zip">crosshatch-factory-2019.05.08.15.zip</a></li>
|
|
<li><a href="https://seamlessupdate.app/crosshatch-factory-2019.05.08.15.zip.sig">crosshatch-factory-2019.05.08.15.zip.sig</a></li>
|
|
<li><a href="https://seamlessupdate.app/crosshatch-ota_update-2019.05.08.15.zip">crosshatch-ota_update-2019.05.08.15.zip</a></li>
|
|
</ul>
|
|
</section>
|
|
<section id="blueline-stable">
|
|
<h3>
|
|
Pixel 3
|
|
<a href="#blueline-stable">¶</a>
|
|
</h3>
|
|
<p>Version: <a href="https://github.com/GrapheneOS/platform_manifest/releases/tag/PQ3A.190505.002.2019.05.08.15">PQ3A.190505.002.2019.05.08.15</a></p>
|
|
<ul>
|
|
<li><a href="https://seamlessupdate.app/blueline-factory-2019.05.08.15.zip">blueline-factory-2019.05.08.15.zip</a></li>
|
|
<li><a href="https://seamlessupdate.app/blueline-factory-2019.05.08.15.zip.sig">blueline-factory-2019.05.08.15.zip.sig</a></li>
|
|
<li><a href="https://seamlessupdate.app/blueline-ota_update-2019.05.08.15.zip">blueline-ota_update-2019.05.08.15.zip</a></li>
|
|
</ul>
|
|
</section>
|
|
<section id="taimen-stable">
|
|
<h3>
|
|
Pixel 2 XL
|
|
<a href="#taimen-stable">¶</a>
|
|
</h3>
|
|
<p>Version: <a href="https://github.com/GrapheneOS/platform_manifest/releases/tag/PQ3A.190505.001.2019.05.08.15">PQ3A.190505.001.2019.05.08.15</a></p>
|
|
<ul>
|
|
<li><a href="https://seamlessupdate.app/taimen-factory-2019.05.08.15.zip">taimen-factory-2019.05.08.15.zip</a></li>
|
|
<li><a href="https://seamlessupdate.app/taimen-factory-2019.05.08.15.zip.sig">taimen-factory-2019.05.08.15.zip.sig</a></li>
|
|
<li><a href="https://seamlessupdate.app/taimen-ota_update-2019.05.08.15.zip">taimen-ota_update-2019.05.08.15.zip</a></li>
|
|
</ul>
|
|
</section>
|
|
<section id="walleye-stable">
|
|
<h3>
|
|
Pixel 2
|
|
<a href="#walleye-stable">¶</a>
|
|
</h3>
|
|
<p>Version: <a href="https://github.com/GrapheneOS/platform_manifest/releases/tag/PQ3A.190505.001.2019.05.08.15">PQ3A.190505.001.2019.05.08.15</a></p>
|
|
<ul>
|
|
<li><a href="https://seamlessupdate.app/walleye-factory-2019.05.08.15.zip">walleye-factory-2019.05.08.15.zip</a></li>
|
|
<li><a href="https://seamlessupdate.app/walleye-factory-2019.05.08.15.zip.sig">walleye-factory-2019.05.08.15.zip.sig</a></li>
|
|
<li><a href="https://seamlessupdate.app/walleye-ota_update-2019.05.08.15.zip">walleye-ota_update-2019.05.08.15.zip</a></li>
|
|
</ul>
|
|
</section>
|
|
<section id="marlin-stable">
|
|
<h3>
|
|
Pixel XL (legacy)
|
|
<a href="#marlin-stable">¶</a>
|
|
</h3>
|
|
<p>Version: <a href="https://github.com/GrapheneOS/platform_manifest/releases/tag/PQ3A.190505.001.2019.05.08.15">PQ3A.190505.001.2019.05.08.15</a></p>
|
|
<ul>
|
|
<li><a href="https://seamlessupdate.app/marlin-factory-2019.05.08.15.zip">marlin-factory-2019.05.08.15.zip</a></li>
|
|
<li><a href="https://seamlessupdate.app/marlin-factory-2019.05.08.15.zip.sig">marlin-factory-2019.05.08.15.zip.sig</a></li>
|
|
<li><a href="https://seamlessupdate.app/marlin-ota_update-2019.05.08.15.zip">marlin-ota_update-2019.05.08.15.zip</a></li>
|
|
</ul>
|
|
</section>
|
|
<section id="sailfish-stable">
|
|
<h3>
|
|
Pixel (legacy)
|
|
<a href="#sailfish-stable">¶</a>
|
|
</h3>
|
|
<p>Version: <a href="https://github.com/GrapheneOS/platform_manifest/releases/tag/PQ3A.190505.001.2019.05.08.15">PQ3A.190505.001.2019.05.08.15</a></p>
|
|
<ul>
|
|
<li><a href="https://seamlessupdate.app/sailfish-factory-2019.05.08.15.zip">sailfish-factory-2019.05.08.15.zip</a></li>
|
|
<li><a href="https://seamlessupdate.app/sailfish-factory-2019.05.08.15.zip.sig">sailfish-factory-2019.05.08.15.zip.sig</a></li>
|
|
<li><a href="https://seamlessupdate.app/sailfish-ota_update-2019.05.08.15.zip">sailfish-ota_update-2019.05.08.15.zip</a></li>
|
|
</ul>
|
|
</section>
|
|
</section>
|
|
|
|
<section id="beta-channel">
|
|
<h2>
|
|
Beta channel
|
|
<a href="#beta-channel">¶</a>
|
|
</h2>
|
|
|
|
<section id="crosshatch-beta">
|
|
<h3>
|
|
Pixel 3 XL
|
|
<a href="#crosshatch-beta">¶</a>
|
|
</h3>
|
|
<p>Version: <a href="https://github.com/GrapheneOS/platform_manifest/releases/tag/PQ3A.190505.002.2019.05.08.15">PQ3A.190505.002.2019.05.08.15</a></p>
|
|
<ul>
|
|
<li><a href="https://seamlessupdate.app/crosshatch-factory-2019.05.08.15.zip">crosshatch-factory-2019.05.08.15.zip</a></li>
|
|
<li><a href="https://seamlessupdate.app/crosshatch-factory-2019.05.08.15.zip.sig">crosshatch-factory-2019.05.08.15.zip.sig</a></li>
|
|
<li><a href="https://seamlessupdate.app/crosshatch-ota_update-2019.05.08.15.zip">crosshatch-ota_update-2019.05.08.15.zip</a></li>
|
|
</ul>
|
|
</section>
|
|
<section id="blueline-beta">
|
|
<h3>
|
|
Pixel 3
|
|
<a href="#blueline-beta">¶</a>
|
|
</h3>
|
|
<p>Version: <a href="https://github.com/GrapheneOS/platform_manifest/releases/tag/PQ3A.190505.002.2019.05.08.15">PQ3A.190505.002.2019.05.08.15</a></p>
|
|
<ul>
|
|
<li><a href="https://seamlessupdate.app/blueline-factory-2019.05.08.15.zip">blueline-factory-2019.05.08.15.zip</a></li>
|
|
<li><a href="https://seamlessupdate.app/blueline-factory-2019.05.08.15.zip.sig">blueline-factory-2019.05.08.15.zip.sig</a></li>
|
|
<li><a href="https://seamlessupdate.app/blueline-ota_update-2019.05.08.15.zip">blueline-ota_update-2019.05.08.15.zip</a></li>
|
|
</ul>
|
|
</section>
|
|
<section id="taimen-beta">
|
|
<h3>
|
|
Pixel 2 XL
|
|
<a href="#taimen-beta">¶</a>
|
|
</h3>
|
|
<p>Version: <a href="https://github.com/GrapheneOS/platform_manifest/releases/tag/PQ3A.190505.001.2019.05.08.15">PQ3A.190505.001.2019.05.08.15</a></p>
|
|
<ul>
|
|
<li><a href="https://seamlessupdate.app/taimen-factory-2019.05.08.15.zip">taimen-factory-2019.05.08.15.zip</a></li>
|
|
<li><a href="https://seamlessupdate.app/taimen-factory-2019.05.08.15.zip.sig">taimen-factory-2019.05.08.15.zip.sig</a></li>
|
|
<li><a href="https://seamlessupdate.app/taimen-ota_update-2019.05.08.15.zip">taimen-ota_update-2019.05.08.15.zip</a></li>
|
|
</ul>
|
|
</section>
|
|
<section id="walleye-beta">
|
|
<h3>
|
|
Pixel 2
|
|
<a href="#walleye-beta">¶</a>
|
|
</h3>
|
|
<p>Version: <a href="https://github.com/GrapheneOS/platform_manifest/releases/tag/PQ3A.190505.001.2019.05.08.15">PQ3A.190505.001.2019.05.08.15</a></p>
|
|
<ul>
|
|
<li><a href="https://seamlessupdate.app/walleye-factory-2019.05.08.15.zip">walleye-factory-2019.05.08.15.zip</a></li>
|
|
<li><a href="https://seamlessupdate.app/walleye-factory-2019.05.08.15.zip.sig">walleye-factory-2019.05.08.15.zip.sig</a></li>
|
|
<li><a href="https://seamlessupdate.app/walleye-ota_update-2019.05.08.15.zip">walleye-ota_update-2019.05.08.15.zip</a></li>
|
|
</ul>
|
|
</section>
|
|
<section id="marlin-beta">
|
|
<h3>
|
|
Pixel XL (legacy)
|
|
<a href="#marlin-beta">¶</a>
|
|
</h3>
|
|
<p>Version: <a href="https://github.com/GrapheneOS/platform_manifest/releases/tag/PQ3A.190505.001.2019.05.08.15">PQ3A.190505.001.2019.05.08.15</a></p>
|
|
<ul>
|
|
<li><a href="https://seamlessupdate.app/marlin-factory-2019.05.08.15.zip">marlin-factory-2019.05.08.15.zip</a></li>
|
|
<li><a href="https://seamlessupdate.app/marlin-factory-2019.05.08.15.zip.sig">marlin-factory-2019.05.08.15.zip.sig</a></li>
|
|
<li><a href="https://seamlessupdate.app/marlin-ota_update-2019.05.08.15.zip">marlin-ota_update-2019.05.08.15.zip</a></li>
|
|
</ul>
|
|
</section>
|
|
<section id="sailfish-beta">
|
|
<h3>
|
|
Pixel (legacy)
|
|
<a href="#sailfish-beta">¶</a>
|
|
</h3>
|
|
<p>Version: <a href="https://github.com/GrapheneOS/platform_manifest/releases/tag/PQ3A.190505.001.2019.05.08.15">PQ3A.190505.001.2019.05.08.15</a></p>
|
|
<ul>
|
|
<li><a href="https://seamlessupdate.app/sailfish-factory-2019.05.08.15.zip">sailfish-factory-2019.05.08.15.zip</a></li>
|
|
<li><a href="https://seamlessupdate.app/sailfish-factory-2019.05.08.15.zip.sig">sailfish-factory-2019.05.08.15.zip.sig</a></li>
|
|
<li><a href="https://seamlessupdate.app/sailfish-ota_update-2019.05.08.15.zip">sailfish-ota_update-2019.05.08.15.zip</a></li>
|
|
</ul>
|
|
</section>
|
|
</section>
|
|
|
|
<h2 id="changelog">
|
|
Changelog
|
|
<a href="#changelog">¶</a>
|
|
</h2>
|
|
|
|
<p>List of tagged releases. Snapshot releases without tags such as early releases of
|
|
the project and early device support releases are not listed.</p>
|
|
|
|
<h3 id="2019.05.08.15">
|
|
2019.05.08.15
|
|
<a href="#2019.05.08.15">¶</a>
|
|
</h3>
|
|
|
|
<p>Tags:</p>
|
|
<ul>
|
|
<li><a href="https://github.com/GrapheneOS/platform_manifest/releases/tag/PQ3A.190505.001.2019.05.08.15">PQ3A.190505.001.2019.05.08.15</a> (Pixel, Pixel XL, Pixel 2, Pixel 2 XL)</li>
|
|
<li><a href="https://github.com/GrapheneOS/platform_manifest/releases/tag/PQ3A.190505.002.2019.05.08.15">PQ3A.190505.002.2019.05.08.15</a> (Pixel 3, Pixel 3 XL)</li>
|
|
</ul>
|
|
|
|
<p>Changes since the 2019.05.07.00 release:</p>
|
|
|
|
<ul>
|
|
<li>fix cellular, hotspot and battery saver quick settings tiles (they became no-ops when unlocked)</li>
|
|
</ul>
|
|
|
|
<h3 id="2019.05.07.00">
|
|
2019.05.07.00
|
|
<a href="#2019.05.07.00">¶</a>
|
|
</h3>
|
|
|
|
<p>Tags:</p>
|
|
<ul>
|
|
<li><a href="https://github.com/GrapheneOS/platform_manifest/releases/tag/PQ3A.190505.001.2019.05.07.00">PQ3A.190505.001.2019.05.07.00</a> (Pixel, Pixel XL, Pixel 2, Pixel 2 XL)</li>
|
|
<li><a href="https://github.com/GrapheneOS/platform_manifest/releases/tag/PQ3A.190505.002.2019.05.07.00">PQ3A.190505.002.2019.05.07.00</a> (Pixel 3, Pixel 3 XL)</li>
|
|
</ul>
|
|
|
|
<p>Changes since the 2019.04.01.19 release:</p>
|
|
|
|
<ul>
|
|
<li>full 2019-05-01 security patch level</li>
|
|
<li>full 2019-05-05 security patch level</li>
|
|
<li>rebased onto PQ3A.190505.001/PQ3A.190505.002 releases</li>
|
|
<li>add Pixel and Pixel XL support including standard changes to kernel and device code</li>
|
|
<li>Pixel, Pixel XL, Pixel 2, Pixel 2 XL, Pixel 3, Pixel 3 XL: fix hw_random permissions</li>
|
|
<li>bundle Auditor (version 9)</li>
|
|
<li>Chromium: update to 74.0.3729.136</li>
|
|
<li>Chromium: enable strict site isolation by default</li>
|
|
<li>Chromium: initial rebranding to Vanadium including icon recolor</li>
|
|
<li>hardened_malloc: extensive work on refactoring, micro-optimization and documentation (see commits for details)</li>
|
|
<li>hardened_malloc: implement mallinfo and mallinfo extensions for Android</li>
|
|
<li>hardened_malloc: implement Android API for requesting purging</li>
|
|
<li>hardened_malloc: implement the option of large size classes (enabled by default)</li>
|
|
<li>hardened_malloc: support extended range of small size classes (enabled by default)</li>
|
|
<li>hardened_malloc: support for slabs with 1 slot for largest sizes</li>
|
|
<li>hardened_malloc: use round-robin assignment to arenas</li>
|
|
<li>hardened_malloc: disable current in-place growth code path</li>
|
|
<li>hardened_malloc: harden arena implementation</li>
|
|
<li>hardened_malloc: fix non-init size for malloc_object_size extension</li>
|
|
<li>hardened_malloc: shrink initial region table size to fit in 1 page</li>
|
|
<li>hardened_malloc (GrapheneOS only): expand workaround for Pixel 3 and Pixel 3 XL camera issues</li>
|
|
<li>Pixel 3, Pixel 3 XL: change SystemUIGoogle pinning to SystemUI</li>
|
|
</ul>
|
|
|
|
<p>Restoration of past features since the 2019.04.01.19 release:</p>
|
|
|
|
<ul>
|
|
<li>use -fwrapv when signed overflow checking is off</li>
|
|
<li>add exec-based spawning support (disabled by default for now)</li>
|
|
<li>require unlocking to use battery saver quick tile</li>
|
|
<li>require unlocking to use cellular quick tile</li>
|
|
<li>require unlocking to use hotspot quick tile</li>
|
|
<li>require unlocking to use data saver quick tile</li>
|
|
<li>require unlocking to use rotation lock quick tile</li>
|
|
<li>require unlocking to use wifi quick tile</li>
|
|
<li>require unlocking to use airplane mode quick tile</li>
|
|
<li>require unlocking to use bluetooth quick tile</li>
|
|
<li>require unlocking to use nfc quick tile</li>
|
|
<li>add support for kernels without module support enabled to the VTS and compatibility tests</li>
|
|
<li>Pixel, Pixel XL, Pixel 2, Pixel 2 XL, Pixel 3, Pixel 3 XL kernels: disable slab merging</li>
|
|
<li>Pixel, Pixel XL, Pixel 2, Pixel 2 XL, Pixel 3, Pixel 3 XL kernels: disable loadable kernel module support</li>
|
|
<li>Pixel, Pixel XL, Pixel 2, Pixel 2 XL, Pixel 3, Pixel 3 XL kernels: mark qcedev data const</li>
|
|
<li>Pixel 2, Pixel 2 XL: disable unused ramdisk compression formats</li>
|
|
<li>SELinux policy: remove priv_app app_data_file execute</li>
|
|
<li>SELinux policy: remove dumpstate ashmem execute and execmem (GrapheneOS doesn't use the ART JIT compiler)</li>
|
|
<li>SELinux policy: remove healthd ashmem execute and execmem (GrapheneOS doesn't use the ART JIT compiler)</li>
|
|
<li>SELinux policy: auditallow app execmem (moving back towards an exception system)</li>
|
|
<li>SELinux policy: auditallow app ashmem execute (moving back towards an exception system)</li>
|
|
<li>SELinux policy: auditallow ephemeral_app app_data_file execute (moving back towards an exception system)</li>
|
|
<li>SELinux policy: auditallow untrusted_app_all execmod (moving back towards an exception system)</li>
|
|
<li>SELinux policy: auditallow untrusted_app_all app_data_file execute (moving back towards an exception system)</li>
|
|
<li>SELinux policy: auditallow untrusted_app_all app_data_file execute_no_trans (moving back towards an exception system)</li>
|
|
</ul>
|
|
|
|
<h3 id="2019.04.01.19">
|
|
2019.04.01.19
|
|
<a href="#2019.04.01.19">¶</a>
|
|
</h3>
|
|
|
|
<p>Tags:</p>
|
|
<ul>
|
|
<li><a href="https://github.com/GrapheneOS/platform_manifest/releases/tag/PQ2A.190405.003.2019.04.01.19">PQ2A.190405.003.2019.04.01.19</a> (Pixel 2, Pixel 2 XL, Pixel 3, Pixel 3 XL)</li>
|
|
</ul>
|
|
|
|
<p>Initial release of GrapheneOS. Detailed changelogs were not written at this
|
|
point.</p>
|
|
|
|
<h3 id="2019.03.05.03">
|
|
2019.03.05.03
|
|
<a href="#2019.03.05.03">¶</a>
|
|
</h3>
|
|
|
|
<p>Tags:</p>
|
|
<ul>
|
|
<li><a href="https://github.com/GrapheneOS/platform_manifest/releases/tag/PQ2A.190305.002.2019.03.05.03">PQ2A.190305.002.2019.03.05.03</a> (Pixel 2, Pixel 2 XL, Pixel 3, Pixel 3 XL)</li>
|
|
</ul>
|
|
|
|
<p>Final and only tagged release of the AndroidHardening project before it became
|
|
GrapheneOS. Earlier AndroidHardening releases were only snapshots and are not listed
|
|
here. Detailed changelogs were not written at this point.</p>
|
|
|
|
</div>
|
|
<footer>
|
|
<a href="/"><img src="https://grapheneos.org/logo.png" width="512" height="512" alt=""/>GrapheneOS</a>
|
|
<div id="social">
|
|
<a href="https://twitter.com/GrapheneOS">Twitter</a>
|
|
<a href="https://github.com/GrapheneOS">GitHub</a>
|
|
</div>
|
|
</footer>
|
|
<script src="/releases.js?9"></script>
|
|
</body>
|
|
</html>
|