| commit | 5335ea8e410f357527dcad31f20223f22f7347f5 | [log] [tgz] |
|---|---|---|
| author | Pierre-Clément Tosi <ptosi@google.com> | Fri Mar 21 19:26:44 2025 +0000 |
| committer | Pierre-Clément Tosi <ptosi@google.com> | Fri Mar 21 19:59:27 2025 +0000 |
| tree | 8c5e58f513e89e2e706c90541610ac729bdd58af | |
| parent | a5604dc96f9892da8b9cc7848e9c8a9f0f1e7de8 [diff] |
pvmfw: Support QTVMs through missing DICE handover As pvmfw-in-QTVM receives a configuration data that is dynamically generated per VM by Gunyah's Resource Manager (RM) and as QTVM guests do not rely on DICE, a missing DICE handover in the config data gets interpreted as "QTVM mode", where AVB is skipped (because QTVMs rely on TZ-enabled PIL verification) and RBP and DICE must be skipped as a result, as they lack useful inputs. This change should not affect other distributions of pvmfw, as the DICE handover is mandatory and well-behaved pvmfw loaders (ABL) MUST provide one, as per the requirements of Android 25Q2. Test: m pvmfw Bug: 393977894 Change-Id: I74c8b81b396ccb20f987ef152af72c73a213e3d6
Android Virtualization Framework (AVF) provides secure and private execution environments for executing code. AVF is ideal for security-oriented use cases that require stronger isolation assurances over those offered by Android’s app sandbox.
Visit our public doc site to learn more about what AVF is, what it is for, and how it is structured. This repository contains source code for userspace components of AVF.
If you want a quick start, see the getting started guideline and follow the steps there.
For in-depth explanations about individual topics and components, visit the following links.
AVF components:
AVF APIs:
How-Tos: