| commit | c516684a63890ba6bfb61f33e8c6c48d0ca3371d | [log] [tgz] |
|---|---|---|
| author | Jiyong Park <jiyong@google.com> | Fri Jan 21 12:54:57 2022 +0900 |
| committer | Jiyong Park <jiyong@google.com> | Fri Jan 21 12:59:42 2022 +0900 |
| tree | 9d5ff813683dee4570466d1858fef72bb91eb5af | |
| parent | 7930ef8847ced84da0bc584c63913c0ec37064a6 [diff] |
Prepare diced before microdroid_manager runs microdroid_manager needs to access diced to get the per-VM secret that it uses to encrypt/decrypt the instance disk. This is not trivial because previously diced (and servicemanager it depends on) were not bootstrap processes, which means they can start only after APEXes are activated. However, microdroid_manager can't do that before the instance disk is decrypted. So, there's a circular dependency between microdroid_manager and diced. This CL fixes the issue by making diced and servicemanager bootstrap processes. They now can start before APEXes are activated. The start of microdroid_manager is moved to after diced. Bug: 214231981 Test: run microdroid Change-Id: I8ada5324000f9731a5709982fbb45cbf101f94c6
This repository contains userspace services related to running virtual machines on Android, especially protected virtual machines. See the getting started documentation and Microdroid README for more information.