Encryption locks users out of OTAs #353

Closed
tusing opened this Issue Jul 26, 2016 · 9 comments

Comments

Projects
None yet
2 participants
@tusing

tusing commented Jul 26, 2016

The latest OTA can't be installed on an encrypted device (encryption password must be removed first), as the recovery installed by the OTA does not have any decryption features.

@thestinger

This comment has been minimized.

Show comment Hide comment
@thestinger

thestinger Jul 26, 2016

Contributor

The recovery doesn't require decryption support to install over-the-air updates. The update is decrypted before the OS reboots to recovery. It uses the same implementation (installPackage) as stock Android. There's nothing CopperheadOS-specific about the update installation process, only the downloader. You might have run into a problem, but this isn't it and your workaround probably wasn't what fixed the issue for you.

Contributor

thestinger commented Jul 26, 2016

The recovery doesn't require decryption support to install over-the-air updates. The update is decrypted before the OS reboots to recovery. It uses the same implementation (installPackage) as stock Android. There's nothing CopperheadOS-specific about the update installation process, only the downloader. You might have run into a problem, but this isn't it and your workaround probably wasn't what fixed the issue for you.

@thestinger thestinger closed this Jul 26, 2016

@thestinger

This comment has been minimized.

Show comment Hide comment
@thestinger

thestinger Jul 26, 2016

Contributor

There's a known issue (#285) causing Nexus 5X reboots to stall. This tends to cause problems for users installing updates, since it's not possible to attempt to reboot and install the update if there's a failure. It needs to be downloaded again. The updater could track state to work around this, but it currently doesn't do that (related: #341).

Contributor

thestinger commented Jul 26, 2016

There's a known issue (#285) causing Nexus 5X reboots to stall. This tends to cause problems for users installing updates, since it's not possible to attempt to reboot and install the update if there's a failure. It needs to be downloaded again. The updater could track state to work around this, but it currently doesn't do that (related: #341).

@thestinger

This comment has been minimized.

Show comment Hide comment
@thestinger

thestinger Jul 26, 2016

Contributor

Removing the encryption password also doesn't decrypt the device. The data partition in stock Android and CopperheadOS is always encrypted with a random key due to forceencrypt being used as a mount option. Setting a password only adds a layer of protection to the actual encryption key.

Contributor

thestinger commented Jul 26, 2016

Removing the encryption password also doesn't decrypt the device. The data partition in stock Android and CopperheadOS is always encrypted with a random key due to forceencrypt being used as a mount option. Setting a password only adds a layer of protection to the actual encryption key.

@tusing

This comment has been minimized.

Show comment Hide comment
@tusing

tusing Jul 26, 2016

Thanks, that cleared up a few things.

Is there anywhere I can manually download the latest update .zip, then? (Edit: found link) On the Nexus 5 (not 5X), I get the "Error" screen (not the stall in #285).

Edit: Might be because I haven't locked the bootloader.

tusing commented Jul 26, 2016

Thanks, that cleared up a few things.

Is there anywhere I can manually download the latest update .zip, then? (Edit: found link) On the Nexus 5 (not 5X), I get the "Error" screen (not the stall in #285).

Edit: Might be because I haven't locked the bootloader.

@thestinger

This comment has been minimized.

Show comment Hide comment
@thestinger

thestinger Jul 26, 2016

Contributor

Have you tried deleting and downloading the update again? It won't install if it's corrupted, and if any other kind of problem occurs once then the update has to be downloaded again since it will be mangled (could be improved, but it isn't on the roadmap).

Contributor

thestinger commented Jul 26, 2016

Have you tried deleting and downloading the update again? It won't install if it's corrupted, and if any other kind of problem occurs once then the update has to be downloaded again since it will be mangled (could be improved, but it isn't on the roadmap).

@thestinger

This comment has been minimized.

Show comment Hide comment
@thestinger

thestinger Jul 26, 2016

Contributor

The updates can also be downloaded from https://copperhead.co/android/downloads and sideloaded, but that shouldn't be necessary.

Contributor

thestinger commented Jul 26, 2016

The updates can also be downloaded from https://copperhead.co/android/downloads and sideloaded, but that shouldn't be necessary.

@tusing

This comment has been minimized.

Show comment Hide comment
@tusing

tusing Jul 26, 2016

I'll try downloading it again, thanks. On that note, should the delete button be moved to a separate icon? Long-press to delete is unintuitive.

tusing commented Jul 26, 2016

I'll try downloading it again, thanks. On that note, should the delete button be moved to a separate icon? Long-press to delete is unintuitive.

@thestinger

This comment has been minimized.

Show comment Hide comment
@thestinger

thestinger Jul 26, 2016

Contributor

Deletion of updates will just be automated. It doesn't make sense to improve the UI because there's no use in keeping around updates as downgrading to them isn't possible.

Contributor

thestinger commented Jul 26, 2016

Deletion of updates will just be automated. It doesn't make sense to improve the UI because there's no use in keeping around updates as downgrading to them isn't possible.

@tusing

This comment has been minimized.

Show comment Hide comment
@tusing

tusing Jul 26, 2016

Looks like re-downloading fixed the issue. Thanks, especially for the super-fast response.

tusing commented Jul 26, 2016

Looks like re-downloading fixed the issue. Thanks, especially for the super-fast response.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment