Bootloader Lock in Fajita/Enchillada

[EliasTheGrandMasterOfMistakes]

Looks bootloader can be locked in Fajita and Enchilada, when i lock this bootloader i can recover if some problems occurs with EDL mode?

If i want to build lineage for myself and locking bootloader, i can direct Locking using AVB custom keys and try to cherry-picking how divestOS is signed? exist a tutorial helping with building this task to use as reference?

[SkewedZeppelin]

Yep, OnePlus 5 and 6 are basically impossible to brick since EDL is available.
Just have all the recovery files available before hand ;)

As for signing you need a bunch of stuff, see:
prep

• https://github.com/Divested-Mobile/DivestOS-Build/blob/master/Scripts/Generate_Signing_Keys.sh
• https://github.com/Divested-Mobile/DivestOS-Build/blob/master/Scripts/Generate_Verified_Boot_Hashes.sh
• https://github.com/Divested-Mobile/DivestOS-Build/blob/master/Scripts/Generate_Supporting_Files.sh

pre-build

• https://github.com/Divested-Mobile/DivestOS-Build/blob/master/Scripts/Common/Copy_Keys.sh
• https://github.com/Divested-Mobile/DivestOS-Build/blob/master/Scripts/Common/Enable_Verity.sh

• DivestOS-Build/Scripts/LineageOS-20.0/Patch.sh

  Line 91 in f0de4db

  git revert --no-edit 9b41333a849d14683f9c4ac30fcfd48a27945018; #Re-enable the downgrade check

• DivestOS-Build/Scripts/LineageOS-20.0/Patch.sh

  Line 444 in f0de4db

  git revert --no-edit ac104e8990f3be3a3f111241e9328e7f98bfb912; #Do not skip payload signature verification

• DivestOS-Build/Scripts/LineageOS-20.0/Patch.sh

  Line 448 in f0de4db

  rm build/target/product/security/lineage.x509.pem; #Remove Lineage keys

• DivestOS-Build/Scripts/LineageOS-20.0/Patch.sh

  Lines 453 to 454 in f0de4db

  	awk -i inplace '!/PRODUCT_EXTRA_RECOVERY_KEYS/' config/*.mk; #Remove Lineage extra keys
  	awk -i inplace '!/security\/lineage/' config/*.mk; #Remove Lineage extra keys

start build

• DivestOS-Build/Scripts/LineageOS-20.0/Functions.sh

  Line 36 in f0de4db

  breakfast "lineage_$1-user" && mka target-files-package otatools && processRelease $1 true $2;

• DivestOS-Build/Scripts/LineageOS-20.0/Functions.sh

  Line 88 in f0de4db

  buildDevice fajita avb;

after build

• DivestOS-Build/Scripts/Common/Functions.sh

  Lines 197 to 485 in f0de4db

  	processRelease() {
  	#Reference (MIT): GrapheneOS
  	#https://github.com/GrapheneOS/script/blob/13/release.sh
  	local DEVICE="$1";
  	local BLOCK="$2";
  	local VERITY="$3";
  	local DATE=$(date -u '+%Y%m%d')
  	local KEY_DIR="$DOS_SIGNING_KEYS/$DEVICE";
  	local VERSION=$(echo $DOS_VERSION | cut -f2 -d "-");
  	local PREFIX="$DOS_BRANDING_ZIP_PREFIX-$VERSION-$DATE-dos-$DEVICE";
  	local ARCHIVE="$DOS_BUILDS/$DOS_VERSION/release_keys/";
  	local OUT_DIR="$DOS_BUILD_BASE/out/target/product/$DEVICE/";
  	local RELEASETOOLS_PREFIX="build/tools/releasetools/";
  	if [[ "$DOS_VERSION" == "LineageOS-18.1" ]] || [[ "$DOS_VERSION" == "LineageOS-19.1" ]] || [[ "$DOS_VERSION" == "LineageOS-20.0" ]] || [[ "$DOS_VERSION" == "LineageOS-21.0" ]]; then
  	local RELEASETOOLS_PREFIX="";
  	fi;
  	umask 0022;
  	echo -e "\e[0;32mProcessing release for $DEVICE\e[0m";
  	#Arguments
  	if [ "$BLOCK" != false ]; then
  	local BLOCK_SWITCHES="--block";
  	fi;
  	if [[ "$VERITY" == "verity" ]]; then
  	local VERITY_SWITCHES=(--replace_verity_public_key "$KEY_DIR/verity_key.pub" \
  	--replace_verity_private_key "$KEY_DIR/verity" \
  	--replace_verity_keyid "$KEY_DIR/verity.x509.pem");
  	echo -e "\e[0;32m\t+ Verified Boot 1.0\e[0m";
  	elif [[ "$VERITY" == "avb" ]]; then
  	local AVB_PKMD="$KEY_DIR/avb_pkmd.bin";
  	local VERITY_SWITCHES=(--avb_vbmeta_key "$KEY_DIR/avb.pem" --avb_vbmeta_algorithm SHA256_RSA4096);
  	echo -e "\e[0;32m\t+ Verified Boot 2.0 with VBMETA and NOCHAIN\e[0m";
  	fi;
  	#XXX: --extra_apks Bluetooth.apk="$KEY_DIR/bluetooth" \
  	local APK_SWITCHES=(--extra_apks AdServicesApk.apk="$KEY_DIR/releasekey" \
  	--extra_apks HalfSheetUX.apk="$KEY_DIR/releasekey" \
  	--extra_apks OsuLogin.apk="$KEY_DIR/releasekey" \
  	--extra_apks SafetyCenterResources.apk="$KEY_DIR/releasekey" \
  	--extra_apks ServiceConnectivityResources.apk="$KEY_DIR/releasekey" \
  	--extra_apks ServiceUwbResources.apk="$KEY_DIR/releasekey" \
  	--extra_apks ServiceWifiResources.apk="$KEY_DIR/releasekey" \
  	--extra_apks WifiDialog.apk="$KEY_DIR/releasekey");
  	if [[ "$DOS_VERSION" == "LineageOS-20.0" ]] || [[ "$DOS_VERSION" == "LineageOS-21.0" ]]; then
  	local APK_SWITCHES_EXTRA=(--extra_apks Bluetooth.apk="$KEY_DIR/bluetooth");
  	fi;
  	if [[ "$DOS_VERSION" == "LineageOS-17.1" ]] || [[ "$DOS_VERSION" == "LineageOS-18.1" ]] || [[ "$DOS_VERSION" == "LineageOS-19.1" ]] || [[ "$DOS_VERSION" == "LineageOS-20.0" ]] || [[ "$DOS_VERSION" == "LineageOS-21.0" ]]; then
  	local APEX_SWITCHES=(--extra_apks com.android.adbd.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.adbd.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.adservices.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.adservices.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.adservices.api.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.adservices.api.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.apex.cts.shim.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.apex.cts.shim.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.appsearch.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.appsearch.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.art.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.art.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.art.debug.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.art.debug.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.btservices.apex="$KEY_DIR/bluetooth" \
  	--extra_apex_payload_key com.android.btservices.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.cellbroadcast.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.cellbroadcast.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.compos.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.compos.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.configinfrastructure.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.configinfrastructure.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.connectivity.resources.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.connectivity.resources.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.conscrypt.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.conscrypt.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.devicelock.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.devicelock.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.extservices.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.extservices.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.graphics.pdf.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.graphics.pdf.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.hardware.biometrics.face.virtual.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.hardware.biometrics.face.virtual.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.hardware.biometrics.fingerprint.virtual.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.hardware.biometrics.fingerprint.virtual.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.hardware.cas.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.hardware.cas.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.hardware.wifi.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.hardware.wifi.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.healthfitness.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.healthfitness.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.hotspot2.osulogin.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.hotspot2.osulogin.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.i18n.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.i18n.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.ipsec.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.ipsec.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.media.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.media.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.mediaprovider.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.mediaprovider.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.media.swcodec.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.media.swcodec.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.nearby.halfsheet.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.nearby.halfsheet.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.networkstack.tethering.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.networkstack.tethering.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.neuralnetworks.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.neuralnetworks.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.ondevicepersonalization.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.ondevicepersonalization.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.os.statsd.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.os.statsd.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.permission.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.permission.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.resolv.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.resolv.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.rkpd.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.rkpd.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.runtime.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.runtime.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.safetycenter.resources.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.safetycenter.resources.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.scheduling.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.scheduling.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.sdkext.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.sdkext.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.support.apexer.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.support.apexer.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.telephony.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.telephony.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.telephonymodules.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.telephonymodules.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.tethering.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.tethering.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.tzdata.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.tzdata.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.uwb.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.uwb.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.uwb.resources.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.uwb.resources.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.vibrator.drv2624.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.vibrator.drv2624.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.vibrator.sunfish.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.vibrator.sunfish.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.virt.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.virt.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.vndk.current.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.vndk.current.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.vndk.current.on_vendor.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.vndk.current.on_vendor.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.wifi.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.wifi.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.wifi.dialog.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.wifi.dialog.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.android.wifi.resources.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.android.wifi.resources.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.google.pixel.camera.hal.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.google.pixel.camera.hal.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.google.pixel.vibrator.hal.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.google.pixel.vibrator.hal.apex="$KEY_DIR/avb.pem" \
  	--extra_apks com.qorvo.uwb.apex="$KEY_DIR/releasekey" \
  	--extra_apex_payload_key com.qorvo.uwb.apex="$KEY_DIR/avb.pem");
  	fi;
  	#Malware Scan
  	if [ "$DOS_MALWARE_SCAN_BEFORE_SIGN" = true ]; then
  	echo -e "\e[0;32mScanning files for malware before signing\e[0m";
  	scanForMalware false $OUT_DIR/obj/PACKAGING/target_files_intermediates/*$DEVICE-target_files-*.zip;
  	fi;
  	#Target Files
  	echo -e "\e[0;32mSigning target files\e[0m";
  	"$RELEASETOOLS_PREFIX"sign_target_files_apks -o -d "$KEY_DIR" \
  	"${APK_SWITCHES[@]}" \
  	"${APK_SWITCHES_EXTRA[@]}" \
  	"${APEX_SWITCHES[@]}" \
  	"${VERITY_SWITCHES[@]}" \
  	$OUT_DIR/obj/PACKAGING/target_files_intermediates/*$DEVICE-target_files-*.zip \
  	"$OUT_DIR/$PREFIX-target_files.zip";
  	sha512sum "$OUT_DIR/$PREFIX-target_files.zip" > "$OUT_DIR/$PREFIX-target_files.zip.sha512sum";
  	local INCREMENTAL_ID=$(grep "ro.build.version.incremental" $OUT_DIR/system/build.prop | cut -f2 -d "=" | sed 's/\.//g');
  	echo "$INCREMENTAL_ID" > "$OUT_DIR/$PREFIX-target_files.zip.id";
  	#Image
  	unzip -l $OUT_DIR/$PREFIX-target_files.zip | grep -q recovery.img;
  	local hasRecoveryImg="$?";
  	unzip -l $OUT_DIR/$PREFIX-target_files.zip | grep -q dtbo.img;
  	local hasDtboImg="$?";
  	if [ "$hasRecoveryImg" == "1" ] || [ "$hasDtboImg" == "0" ]; then
  	echo -e "\e[0;32mCreating fastboot image\e[0m";
  	"$RELEASETOOLS_PREFIX"img_from_target_files "$OUT_DIR/$PREFIX-target_files.zip" \
  	"$OUT_DIR/$PREFIX-fastboot.zip";
  	sha512sum "$OUT_DIR/$PREFIX-fastboot.zip" > "$OUT_DIR/$PREFIX-fastboot.zip.sha512sum";
  	fi
  	#OTA
  	echo -e "\e[0;32mCreating OTA\e[0m";
  	"$RELEASETOOLS_PREFIX"ota_from_target_files $BLOCK_SWITCHES -k "$KEY_DIR/releasekey" \
  	"$OUT_DIR/$PREFIX-target_files.zip" \
  	"$OUT_DIR/$PREFIX-ota.zip";
  	sha512sum "$OUT_DIR/$PREFIX-ota.zip" > "$OUT_DIR/$PREFIX-ota.zip.sha512sum";
  	#Deltas
  	#grep update_engine Build/*/device/*/*/*.mk -l
  	local DOS_GENERATE_DELTAS_DEVICES=('akari' 'akatsuki' 'alioth' 'Amber' 'aura' 'aurora' 'avicii' 'barbet' 'bluejay' 'blueline' 'bonito' 'bramble' 'cheetah' 'cheryl' 'coral' 'crosshatch' 'davinci' 'discovery' 'enchilada' 'fajita' 'felix' 'flame' 'FP3' 'FP4' 'guacamole' 'guacamoleb' 'hotdog' 'hotdogb' 'instantnoodle' 'instantnoodlep' 'kebab' 'kirin' 'lemonade' 'lemonadep' 'lemonades' 'lynx' 'marlin' 'mata' 'mermaid' 'oriole' 'panther' 'pioneer' 'pro1' 'pro1x' 'raven' 'redfin' 'sailfish' 'sargo' 'sunfish' 'taimen' 'tangorpro' 'vayu' 'voyager' 'walleye' 'xz2c'); #TODO: check lmi/alioth/apollon
  	if [ "$DOS_GENERATE_DELTAS" = true ]; then
  	# shellcheck disable=SC2199
  	if [[ " ${DOS_GENERATE_DELTAS_DEVICES[@]} " =~ " ${DEVICE} " ]]; then
  	for LAST_TARGET_FILES in $ARCHIVE/target_files/$DOS_BRANDING_ZIP_PREFIX-$VERSION-*-dos-$DEVICE-target_files.zip; do
  	if [[ -f "$LAST_TARGET_FILES.id" ]]; then
  	local LAST_INCREMENTAL_ID=$(cat "$LAST_TARGET_FILES.id");
  	echo -e "\e[0;32mGenerating incremental OTA against $LAST_INCREMENTAL_ID\e[0m";
  	#TODO: Verify GPG signature and checksum of previous target-files first!
  	"$RELEASETOOLS_PREFIX"ota_from_target_files $BLOCK_SWITCHES -t 8 -k "$KEY_DIR/releasekey" -i \
  	"$LAST_TARGET_FILES" \
  	"$OUT_DIR/$PREFIX-target_files.zip" \
  	"$OUT_DIR/$PREFIX-incremental_$LAST_INCREMENTAL_ID.zip";
  	sha512sum "$OUT_DIR/$PREFIX-incremental_$LAST_INCREMENTAL_ID.zip" > "$OUT_DIR/$PREFIX-incremental_$LAST_INCREMENTAL_ID.zip.sha512sum";
  	fi;
  	done;
  	fi;
  	fi;
  	#Extract signed recovery
  	if [ "$hasRecoveryImg" == "0" ] && [ "$hasDtboImg" == "1" ]; then
  	echo -e "\e[0;32mExtracting signed recovery.img\e[0m";
  	mkdir "$OUT_DIR/rec_tmp";
  	unzip "$OUT_DIR/$PREFIX-target_files.zip" "IMAGES/recovery.img" -d "$OUT_DIR/rec_tmp";
  	mv "$OUT_DIR/rec_tmp/IMAGES/recovery.img" "$OUT_DIR/$PREFIX-recovery.img";
  	sha512sum "$OUT_DIR/$PREFIX-recovery.img" > "$OUT_DIR/$PREFIX-recovery.img.sha512sum";
  	fi;
  	#File name fixes
  	sed -i "s|$OUT_DIR/||" $OUT_DIR/*.sha512sum;
  	sed -i 's/-ota\././' $OUT_DIR/*.sha512sum;
  	sed -i 's/-incremental_/-/' $OUT_DIR/*.sha512sum;
  	#GPG signing
  	if [ "$DOS_GPG_SIGNING" = true ]; then
  	for checksum in $OUT_DIR/*.sha512sum; do
  	echo -e "\e[0;32mGPG signing $checksum\e[0m";
  	if gpg --homedir "$DOS_SIGNING_GPG" --sign --local-user "$DOS_GPG_SIGNING_KEY" --clearsign "$checksum"; then
  	mv -f "$checksum.asc" "$checksum";
  	fi;
  	done;
  	fi;
  	pkill java && sleep 10; #XXX: ugly hack
  	#Copy to archive
  	if [ "$DOS_AUTO_ARCHIVE_BUILDS" = true ]; then
  	echo -e "\e[0;32mCopying files to archive\e[0m";
  	mkdir -vp $ARCHIVE;
  	mkdir -vp $ARCHIVE/target_files;
  	mkdir -vp $ARCHIVE/fastboot;
  	mkdir -vp $ARCHIVE/incrementals;
  	cp -v $OUT_DIR/$PREFIX-ota.zip* $ARCHIVE/ || true;
  	rename -- "-ota." "." $ARCHIVE/$PREFIX-ota.zip*;
  	if [ "$hasRecoveryImg" == "1" ] || [ "$hasDtboImg" == "0" ]; then cp -v $OUT_DIR/$PREFIX-fastboot.zip* $ARCHIVE/fastboot/ || true; fi;
  	if [ "$hasRecoveryImg" == "0" ] && [ "$hasDtboImg" == "1" ]; then cp -v $OUT_DIR/$PREFIX-recovery.img* $ARCHIVE/ || true; fi;
  	if [ "$DOS_GENERATE_DELTAS" = true ]; then
  	# shellcheck disable=SC2199
  	if [[ " ${DOS_GENERATE_DELTAS_DEVICES[@]} " =~ " ${DEVICE} " ]]; then
  	cp -v $OUT_DIR/$PREFIX-target_files.zip* $ARCHIVE/target_files/ || true;
  	cp -v $OUT_DIR/$PREFIX-incremental_*.zip* $ARCHIVE/incrementals/ || true;
  	rename -- "-incremental_" "-" $ARCHIVE/incrementals/$PREFIX-incremental_*.zip* || true;
  	fi;
  	fi;
  	sync;
  	#Remove to make space for next build
  	if [ "$DOS_REMOVE_AFTER" = true ]; then
  	echo -e "\e[0;32mRemoving to reclaim space\e[0m";
  	#TODO: add a sanity check
  	rm -rf --one-file-system "$OUT_DIR";
  	if [ "$DOS_REMOVE_AFTER_FULL" = true ]; then rm -rf --one-file-system "$DOS_BUILD_BASE/out"; fi; #clobber entire workspace
  	sync;
  	fi;
  	fi;
  	sync;
  	echo -e "\e[0;32mRelease processing complete\e[0m";
  	}
  	export -f processRelease;

[EliasTheGrandMasterOfMistakes]

Thank you for the helping, i will try to make a local build in future.
Sorry just a question, community had been banned in reddit, have some chance to be back?

[SkewedZeppelin]

I messaged Reddit admins but they say they are backlogged.

[EliasTheGrandMasterOfMistakes]

thank you i hope that community be backing.
in case of lineage21 these scripts can be used without bugs? and it's used after build or integrated?

[EliasTheGrandMasterOfMistakes]

thank you i hope that community be backing. and it's used after build or integrated?

[SkewedZeppelin]

some of them are changes to the build, some of them are things that are generated before the build, and then some are used after the build