| commit | caff2827914c0918260ff76cd55f6e3dc6323d51 | [log] [tgz] |
|---|---|---|
| author | Nikita Ioffe <ioffe@google.com> | Tue Mar 18 13:43:14 2025 +0000 |
| committer | Nikita Ioffe <ioffe@google.com> | Wed Mar 19 15:19:57 2025 +0000 |
| tree | f94cf9eb5bf8a3454bc0b5939b801157832329b6 | |
| parent | 832410f39d8586122375d312e8b55980d91073ef [diff] |
Start a VM in suspended state if vendor_tee_services were requested If a VM requests access to vendor_tee_services, virtmngr will tell crosvm to start a VM in a suspended state. Then it will get the vm_fd that represents this VM, and pass it to the new HAL to grant access for this VM to the tee services. After that VM will be resumed. This patch just implements the "start VM suspended" and "resume VM" parts. The get vm_fd and communication with the HAL will be implemented in the follow up patches. Bug: 360102915 Test: vm run-microdroid --tee-services vendor.test_pkvm_tee_service Change-Id: I57df7547dd0245222af4d768396d4ae5fa9e15f2
Android Virtualization Framework (AVF) provides secure and private execution environments for executing code. AVF is ideal for security-oriented use cases that require stronger isolation assurances over those offered by Android’s app sandbox.
Visit our public doc site to learn more about what AVF is, what it is for, and how it is structured. This repository contains source code for userspace components of AVF.
If you want a quick start, see the getting started guideline and follow the steps there.
For in-depth explanations about individual topics and components, visit the following links.
AVF components:
AVF APIs:
How-Tos: