On Mon, 12 Oct 2026 22:25:07 +0200, Igor Opaniuk <[email protected]> wrote: > Describe the three root key sources (AVB_ROOT_KEY_BUILTIN, _TEE, _BOARD), > how to derive the SHA-256 digest of the vbmeta signing key with avbtool > and provision it into the TEE persistent value with "avb write_pvalue_hex", > the fail-closed behaviour when it is missing, and the device lock state as > seen from the U-Boot shell and from fastboot (flashing lock/unlock with the > mandatory userdata erase). > > [...]
Reviewed-by: Guillaume La Roque <[email protected]> -- Guillaume La Roque <[email protected]>
