summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorIgor Opaniuk <[email protected]>2026-07-27 12:08:54 +0200
committerMattijs Korpershoek <[email protected]>2026-07-27 14:26:32 +0200
commite6f091a208276db72596c8f7376648856a276d97 (patch)
tree2aa417c97e586177708b2f0cf5acf5f755fe6688
parent88ac359a95ec96481b976fad2de6fb5b533f4ce3 (diff)
doc: android: refresh AVB provenance and pin libavb reference
Note that verification is performed by the libavb copy vendored under lib/libavb/ (AVB version 1.3.0) and which parts are U-Boot-specific, and pin the README reference to the exact upstream commit the vendored copy corresponds to instead of a moving master branch. Signed-off-by: Igor Opaniuk <[email protected]>
-rw-r--r--doc/android/avb2.rst7
1 files changed, 6 insertions, 1 deletions
diff --git a/doc/android/avb2.rst b/doc/android/avb2.rst
index 4aca7a5c660..178e8a2681e 100644
--- a/doc/android/avb2.rst
+++ b/doc/android/avb2.rst
@@ -22,6 +22,11 @@ Verified Boot establishes a chain of trust from the bootloader to system images:
Integrity of the bootloader (U-Boot BLOB and environment) is out of scope.
+Verification is performed by libavb, which is vendored under ``lib/libavb/``
+from the AOSP ``external/avb`` project (AVB version 1.3.0). Only the U-Boot
+integration in ``common/avb_verify.c`` and the platform port under
+``lib/libavb/avb_sysdeps*`` are U-Boot-specific.
+
For additional details check [1]_.
AVB using OP-TEE (optional)
@@ -135,5 +140,5 @@ partition table::
References
----------
-.. [1] https://android.googlesource.com/platform/external/avb/+/master/README.md
+.. [1] https://android.googlesource.com/platform/external/avb/+/a1fe228b86543a21739c51352f5ce72f134fccfa/README.md
.. [2] https://www.op-tee.org/