Hacker News Reader

I don't suppose any of them allow setting a custom root of trust though, right?

I haven't managed to find anything other than the Pixels that have it.

The Xiaomi Mi A2 supports relocking the bootloader with a custom key, but only on older versions of the bootloader (MIUI 9 / Android 8.1, or earlier):

https://gitlab.com/CalyxOS/calyxos/-/issues/88

https://review.calyxos.org/c/CalyxOS/calyxos.org/+/2904/4/pa...

Not sure about other Xiaomi phones.

Interesting. Thank you, I'll check it out.

Another manufacturer that supports relocking the bootloader with a custom key is OnePlus:

https://forum.xda-developers.com/t/guide-re-locking-the-boot...

None of the operating systems that are designed to be used with a relocked bootloader (e.g. CalyxOS, GrapheneOS, RattlesnakeOS) support OnePlus phones at the moment, so you'll need to build LineageOS, AOSP, or some other Android variant manually to use it on a OnePlus phone with a relocked bootloader.

There might be more device models with this kind of support. Search for "avb_custom_key" with the model name to see whether anyone has commented on this.

Reply on news.ycombinator.com