Android Verified Boot (AVB) [1] protects Android systems by providing a root of trust in the vbmeta partition.
On unlocked devices, system developers might want to disable the root of trust to reflash only some partitions. This is officially supported in the Android bootflow [2] but is not properly implemented in the Android bootmeth. For development purposes Add support for this in bootmeth_android. This has been tested on AM62Px SK EVM with TI's Android 15 release [3] [1] https://source.android.com/docs/security/features/verifiedboot/avb [2] https://source.android.com/docs/security/features/verifiedboot/boot-flow#unlocked-devices [3] https://software-dl.ti.com/processor-sdk-android/esd/AM62PX/10_01_00/docs/devices/AM62PX/android/Release_Specific_Release_Notes.html Signed-off-by: Mattijs Korpershoek <[email protected]> --- Mattijs Korpershoek (2): bootstd: android: Add missing NULL in the avb partition list bootstd: android: Allow boot with AVB failures when unlocked boot/bootmeth_android.c | 17 ++++++++++++----- 1 file changed, 12 insertions(+), 5 deletions(-) --- base-commit: 6d41f0a39d6423c8e57e92ebbe9f8c0333a63f72 change-id: 20250108-avb-disable-verif-997f820c0c00 Best regards, -- Mattijs Korpershoek <[email protected]>
