!UUYziobKGGxpovWyAN:nixos.org

Robotnix

264 Members
Build Android (AOSP) using Nix | https://github.com/danielfullmer/robotnix84 Servers

Load older messages

SenderMessageTime
23 Apr 2026
@cyclopentane:aidoskyneen.eupentaneI am however unsure whether the two auto-generated overlays (the stock lineage one and the robotnix one) should be merged, or whether they should be two different APKs with distinct names21:46:22
27 Apr 2026
@tmms_:matrix.orgtom joined the room.13:24:10
@bigfreakintaco:matrix.orgbigfreakintaco joined the room.15:35:26
@bigfreakintaco:matrix.orgbigfreakintacoHello Everyone :)15:37:37
@bigfreakintaco:matrix.orgbigfreakintacoI just want to say thank you to all the devs/contributors to this project!15:56:05
@chrillefkr:matrix.orgchrillefkr

Hey, anyone gotten this issue before?

$ nix run .\#robotnixConfigurations.dailydriver.releaseScript -- keys
Signing target files
....
    signing: com.android.adbd.apex                                                  container (/dev/shm/robotnix_keys.XXXXGNTOWw/com.android.adbd)
           : com.android.adbd.apex                                                  payload   (/dev/shm/robotnix_keys.XXXXGNTOWw/com.android.adbd.pem)
    signing: com.android.adservices.apex                                            container (/dev/shm/robotnix_keys.XXXXGNTOWw/com.android.adservices)
           : com.android.adservices.apex                                            payload   (/dev/shm/robotnix_keys.XXXXGNTOWw/com.android.adservices.pem)
NOT signing: com.android.apex.cts.shim.apex
        (skipped due to special cert string)
    signing: com.android.appsearch.apex                                             container (/dev/shm/robotnix_keys.XXXXGNTOWw/com.android.appsearch)
           : com.android.appsearch.apex                                             payload   (/dev/shm/robotnix_keys.XXXXGNTOWw/com.android.appsearch.pem)
Traceback (most recent call last):
  File "<frozen runpy>", line 198, in _run_module_as_main
  File "<frozen runpy>", line 88, in _run_code
  File "/nix/store/09k3hq5374awmdc5x43lqlbin4fwk6xn-ota-tools/bin/sign_target_files_apks/__main__.py", line 52, in <module>
  File "/nix/store/09k3hq5374awmdc5x43lqlbin4fwk6xn-ota-tools/bin/sign_target_files_apks/__main__.py", line 46, in _soong_main
  File "<frozen runpy>", line 198, in _run_module_as_main
  File "<frozen runpy>", line 88, in _run_code
  File "sign_target_files_apks.py", line 1958, in <module>
  File "sign_target_files_apks.py", line 1933, in main
  File "sign_target_files_apks.py", line 828, in ProcessTargetFiles
  File "apex_utils.py", line 518, in SignApex
  File "apex_utils.py", line 443, in SignCompressedApex
  File "apex_utils.py", line 358, in SignUncompressedApex
  File "apex_utils.py", line 95, in ProcessApexFile
apex_utils.ApexSigningError: Failed to find signing keys for apk file /tmp/tmptg_lzm5z/priv-app/com.android.appsearch.apk@BP4A.251205.006/com.android.appsearch.apk.apk in apex /tmp/original-apex-jkgopzve.apex.  Use "-e <apkname>=" to specify a key
19:15:53
@cyclopentane:aidoskyneen.eupentaneare you trying to sign a lineageos build perchance?20:50:48
@chrillefkr:matrix.orgchrillefkrYeahh, for Fairphone 421:06:08
@cyclopentane:aidoskyneen.eupentanehm, are you creating an entirely new build, or updating an existing one?21:10:51
@cyclopentane:aidoskyneen.eupentane Because if you're creating a new one, I'd recommend setting stateVersion = "3" 21:11:19
@cyclopentane:aidoskyneen.eupentane(signing is known to be somewhat brittle with the earlier state versions)21:11:34
@chrillefkr:matrix.orgchrillefkrUpdating existing one, from back in february. I've set stateVersion to 1, as it seemed to fit the instructions given, after I had updated flake inputs. What is stateVersion really?21:12:35
@cyclopentane:aidoskyneen.eupentane Ah okay, then you should keep your stateVersion fixed to "1" 21:13:10
@cyclopentane:aidoskyneen.eupentaneI'm a bit surprised though that the signing seems to have worked back then, I thought LOS signing was pretty much consistently broken until ~march21:13:43
@chrillefkr:matrix.orgchrillefkrI also regenerated avb key sizes to 4096. I guess that will cause OTA update to fail though :/21:14:18
@chrillefkr:matrix.orgchrillefkrLol, lucky me I guess21:14:43
@cyclopentane:aidoskyneen.eupentane

What is stateVersion really?

I made backwards-incompatible changes to how exactly the APKs and APEXes are being signed in robotnix, and I introduced stateVersion to prevent these breaking changes from occuring

21:14:48
@cyclopentane:aidoskyneen.eupentane if it's really just the avb keys that you regenerated (which you shouldn't do btw - you should set avbKeySize to your old value instead ;) ), the OTA upgrade will only fail if you relocked your bootloader 21:15:29
@cyclopentane:aidoskyneen.eupentane (OTA upgrades are signed with releasekey) by default 21:15:42
@chrillefkr:matrix.orgchrillefkrAhh, okok. Thanks. What would you recommend for me to get further? I just figured I should fetch some updates for my phone ya know21:15:46
@cyclopentane:aidoskyneen.eupentane * (OTA upgrades are signed with releasekey by default) 21:15:47
@cyclopentane:aidoskyneen.eupentane

hmm, I am very much confused how your initial build worked in the first place, but as a bandaid (ymmv), I'd recommend manually patching over the error by specifying which key the APK should be signed with:

signing.extraApks."com.android.appsearch.apk.apk" = "${config.device}/releasekey";

21:17:14
@chrillefkr:matrix.orgchrillefkrAh cool! I'll fiddle around and see if I can get it to sign. Thanks! I can send over the state of my flake.lock + .nix etc of where it worked if you want21:19:06
@cyclopentane:aidoskyneen.eupentanewould be great to get some insights, thanks! :)21:19:41
@chrillefkr:matrix.orgchrillefkrDownload robotnix-working-for-pentane.tar.gz21:22:35
@cyclopentane:aidoskyneen.eupentaneOhh I see now21:24:17
@cyclopentane:aidoskyneen.eupentanethat was from before I added the signing safeguard patch from GrapheneOS21:24:31
@cyclopentane:aidoskyneen.eupentane* that was from before I added the signing safeguard patch from GrapheneOS to all distros21:24:36
@chrillefkr:matrix.orgchrillefkrYou're quick at this lol, cool21:24:49
@cyclopentane:aidoskyneen.eupentanei.e. the APEX file from your error message simply was left with its test keys21:25:03

Show newer messages

Back to Room ListRoom Version: 6