hhhhh I browsed https://grapheneos.org/articles/grapheneos-servers, and while is lists all the boxes GrapheneOS uses for various functions, it doesn't list the software these servers are running, or how they are configured.
Each repo for those servers is included in the list of all the “boxes” (VPSs) from that same link. This is all part of our infrastructure. All the information is linked and easy to find.
it doesn't list the software these servers are running, or how they are configured.
It does list all the software packages and the initial configuration of the OS we use here:
https://github.com/GrapheneOS/infrastructure/blob/main/deploy-initial-vps
hhhhh "We use hardened local machines for building and signing...".
I am curious what hardening is involved. What OS these boxes are using? What security modules (e.g. AppArmor) are these using and how.
You cut off the key point of that sentence:
We use hardened local machines for building and signing rather than servers outside our physical control, so information on that infrastructure is outside the scope of this page but may be provided in the future elsewhere.
This is not the same as what you started asking about regarding our public servers listed at that link.