1PRODUCT_SOONG_NAMESPACES += vendor/google_nos/init/citadel
2# Citadel
3PRODUCT_PACKAGES += \
4    citadeld \
5    citadel_updater \
6    android.hardware.authsecret@1.0-service.citadel \
7    android.hardware.authsecret-service.citadel \
8    android.hardware.oemlock@1.0-service.citadel \
9    android.hardware.oemlock-service.citadel \
10    android.hardware.weaver@1.0-service.citadel \
11    android.hardware.weaver-service.citadel \
12    android.hardware.keymaster@4.1-service.citadel \
13    android.hardware.identity@1.0-service.citadel \
14    android.hardware.fastboot@1.1-impl.pixel \
15    wait_for_strongbox \
16    init_citadel
17
18# Citadel debug stuff
19PRODUCT_PACKAGES_DEBUG += \
20    test_citadel
21
22# Resume on Reboot support
23PRODUCT_PACKAGES += \
24    android.hardware.rebootescrow-service.citadel
25
26ifneq ($(wildcard vendor/google_nos/provision),)
27PRODUCT_PACKAGES_DEBUG += CitadelProvision
28
29# Set CITADEL_LAZY_PSK_SYNC to true on projects with faceauth, otherwise false.
30#
31#      EVT devices left the factory without being provisioned,
32#      and thus the shared authtoken key is yet to be established.
33#      Since faceauth HAT enforcement fails without the preshared
34#      authtoken, auto-sync it in the field for userdebug/eng.
35#      Please refer to b/135295587 for more detail.
36#
37CITADEL_LAZY_PSK_SYNC := false
38endif
39
40# Sepolicy
41BOARD_SEPOLICY_DIRS += hardware/google/pixel-sepolicy/citadel
42
43# USERDEBUG ONLY: Install test packages
44ifneq (,$(filter userdebug eng,$(TARGET_BUILD_VARIANT)))
45PRODUCT_PACKAGES_DEBUG += citadel_integration_tests \
46                          pwntest \
47                          nugget_targeted_tests
48endif
49