Store public key of APK to instance disk

Once a VM is started with an APK, we shouldn't accept any update of the
APK if its signer has changed.

For now, this CL can be considered a no-op because we don't accept any
update by comparing the root hash. However, in the future, when rollback
protection is supported, this change will make it possible to accept APK
updates if the public key remains the same.

Bug: 199143508
Test: atest MicrodroidHostTestCases

Change-Id: I2448faf4a8b9637571ebcc4bc49d3619129496d5
4 files changed
tree: 954abc07eba43fccd1a1af20e3cf17617eff8f96
  1. apex/
  2. apkdmverity/
  3. apkverify/
  4. authfs/
  5. compos/
  6. demo/
  7. docs/
  8. idsig/
  9. javalib/
  10. launcher/
  11. microdroid/
  12. microdroid_manager/
  13. tests/
  14. virtualizationservice/
  15. vm/
  16. vmconfig/
  17. zipfuse/
  18. .clang-format
  19. Android.bp
  20. OWNERS
  21. PREUPLOAD.cfg
  22. README.md
  23. TEST_MAPPING
README.md

Virtualization

This repository contains userspace services related to running virtual machines on Android, especially protected virtual machines. See the getting started documentation and Microdroid README for more information.