148 lines
4.7 KiB
Bash
Executable File
148 lines
4.7 KiB
Bash
Executable File
#!/bin/sh
|
|
#
|
|
# Copyright (C) 2016 Wolfgang Wiedmeyer <wolfgit@wiedmeyer.de>
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
#
|
|
# resigns your images with your keys and also generates keys for you
|
|
# puts everything in out/dist
|
|
# most information taken from here:
|
|
# https://source.android.com/devices/tech/ota/sign_builds.html
|
|
|
|
# final check if recovery has the right key:
|
|
# java -jar out/host/linux-x86/framework/dumpkey.jar vendor/replicant-security/releasekey.x509.pem
|
|
# in recovery: adb shell cat /res/keys
|
|
# both outputs should match
|
|
# also /system/etc/security/otacerts.zip should only contain your release key
|
|
|
|
set -e
|
|
|
|
DEVICE=$1
|
|
BASEDIR=$(pwd)
|
|
KEY_DIR=$BASEDIR/vendor/replicant-security
|
|
|
|
if [ -z ${OUT_DIR_COMMON_BASE+x} ]
|
|
then
|
|
OUT_DIR=$BASEDIR/"out"
|
|
else
|
|
OUT_DIR=$OUT_DIR_COMMON_BASE/${PWD##*/}
|
|
fi
|
|
|
|
TARGET_DIR=$OUT_DIR/target/product/$DEVICE
|
|
TARGET_FILES=$TARGET_DIR/obj/PACKAGING/target_files_intermediates/*-target_files-*.zip
|
|
DIST_OUT_DIR=$OUT_DIR/"dist"/$DEVICE
|
|
RELEASE=replicant-6.0
|
|
|
|
generate_keys () {
|
|
# keys default values
|
|
KEY_C=AU
|
|
KEY_ST=Some-State
|
|
KEY_O="Internet Widgits Pty Ltd"
|
|
|
|
echo "No keys present. Generating them now."
|
|
echo
|
|
echo "You are about to be asked to enter information that will be incorporated"
|
|
echo "into your certificate requests."
|
|
echo "What you are about to enter is what is called a Distinguished Name or a DN."
|
|
echo "There are quite a few fields but you can leave some blank."
|
|
echo "For some fields there will be a default value."
|
|
|
|
read -p "Country Name (2 letter code) [AU]:" KEY_CN
|
|
read -p "State or Province Name (full name) [Some-State]:" KEY_ST
|
|
read -p "Locality Name (eg, city) []:" KEY_L
|
|
read -p "Organization Name (eg, company) [Internet Widgits Pty Ltd]:" KEY_O
|
|
read -p "Organizational Unit Name (eg, section) []:" KEY_OU
|
|
read -p "Common Name (e.g. your name) []:" KEY_CN
|
|
read -p "Email Address []:" KEY_EA
|
|
|
|
SUBJECT="/C=$KEY_C/ST=$KEY_ST/L=$KEY_L/O=$KEY_O/OU=$KEY_OU/CN=$KEY_CN \
|
|
/emailAddress=$KEY_EA"
|
|
|
|
mkdir $KEY_DIR
|
|
for x in releasekey platform shared media; do \
|
|
./development/tools/make_key $KEY_DIR/$x "$SUBJECT" || true; \
|
|
done
|
|
}
|
|
|
|
if [ "$DEVICE" = "" ]
|
|
then
|
|
echo "Usage: $0 [DEVICE]"
|
|
exit 1
|
|
fi
|
|
|
|
if ! [ -d "$TARGET_DIR" ]
|
|
then
|
|
echo "The build directory for $DEVICE does not exist."
|
|
exit 1
|
|
fi
|
|
|
|
if ! [ -f $TARGET_FILES ]
|
|
then
|
|
echo "No files to sign. Make sure the build for $DEVICE completed successfully."
|
|
exit 1
|
|
fi
|
|
|
|
if ! [ -d "$KEY_DIR" ]
|
|
then
|
|
generate_keys
|
|
fi
|
|
|
|
mkdir -p $DIST_OUT_DIR
|
|
|
|
# -o option replaces the test keys with the created ones
|
|
# -p makes sure the script finds signapk.jar
|
|
if [ "$DEVICE" = "i9100" ]
|
|
then
|
|
python $BASEDIR/device/samsung/galaxys2-common/releasetools/galaxys2_sign_target_files_apks \
|
|
-s device/samsung/galaxys2-common/releasetools/extensions/releasetools.py \
|
|
-o \
|
|
-p $OUT_DIR/host/linux-x86 \
|
|
-d $KEY_DIR $TARGET_FILES \
|
|
$DIST_OUT_DIR/signed-target_files-$DEVICE.zip
|
|
|
|
python $BASEDIR/build/tools/releasetools/ota_from_target_files \
|
|
-s device/samsung/galaxys2-common/releasetools/extensions/releasetools.py \
|
|
-k $KEY_DIR/releasekey \
|
|
-p $OUT_DIR/host/linux-x86 \
|
|
$DIST_OUT_DIR/signed-target_files-$DEVICE.zip \
|
|
$DIST_OUT_DIR/$RELEASE-$DEVICE.zip
|
|
|
|
else
|
|
python $BASEDIR/build/tools/releasetools/sign_target_files_apks \
|
|
-o \
|
|
-p $OUT_DIR/host/linux-x86 \
|
|
-d $KEY_DIR $TARGET_FILES \
|
|
$DIST_OUT_DIR/signed-target_files-$DEVICE.zip
|
|
|
|
python $BASEDIR/build/tools/releasetools/ota_from_target_files \
|
|
-k $KEY_DIR/releasekey \
|
|
-p $OUT_DIR/host/linux-x86 \
|
|
$DIST_OUT_DIR/signed-target_files-$DEVICE.zip \
|
|
$DIST_OUT_DIR/$RELEASE-$DEVICE.zip
|
|
fi
|
|
|
|
python $BASEDIR/build/tools/releasetools/img_from_target_files \
|
|
-z \
|
|
$DIST_OUT_DIR/signed-target_files-$DEVICE.zip \
|
|
$DIST_OUT_DIR/signed-img-$DEVICE.zip
|
|
|
|
# get the recovery from the signed-img.zip
|
|
unzip -o -j $DIST_OUT_DIR/signed-img-$DEVICE.zip recovery.img -d $DIST_OUT_DIR
|
|
mv $DIST_OUT_DIR/recovery.img $DIST_OUT_DIR/recovery-$DEVICE.img
|
|
|
|
echo
|
|
echo "Finished successfully. Install zip and recovery:"
|
|
echo "$DIST_OUT_DIR/$RELEASE-$DEVICE.zip"
|
|
echo "$DIST_OUT_DIR/recovery-$DEVICE.img"
|