| commit | 748b2aab5014624c2354b91b89f82de37385d249 | [log] [tgz] |
|---|---|---|
| author | Shikha Panwar <shikhapanwar@google.com> | Mon Apr 08 16:26:53 2024 +0000 |
| committer | Shikha Panwar <shikhapanwar@google.com> | Tue Apr 09 12:56:21 2024 +0000 |
| tree | ab2ebc39f064e75e8f2f978cdf0bd8ca579da5d6 | |
| parent | 6cdb8773a336225ad14aa28539830f8560a389e1 [diff] |
Prevent removing instance when changing DebugLevel Calling forceCreateNewVirtualMachine() trigger deletion of instance, which removes the secret from Secretkeeper. On further boot of the backup instance, a new secret is created, which hides any DICE Policy error that would have otherwise (as expected) prevented boot of VM. Fix this by directly using `forceCreateNewVirtualMachine` to create a VM with a temporary name & given config & copying the relevant files to the target VmName, overwriting the instance_id & instance.img & loading that VM. Bug: 333127528 Test: atest #changingDebuggableVmNonDebuggableInvalidatesVmIdentity Change-Id: If979e54a3de34a67b9ab998b2e565797a4a5b058
Android Virtualization Framework (AVF) provides secure and private execution environments for executing code. AVF is ideal for security-oriented use cases that require stronger isolation assurances over those offered by Android’s app sandbox.
Visit our public doc site to learn more about what AVF is, what it is for, and how it is structured. This repository contains source code for userspace components of AVF.
If you want a quick start, see the getting started guideline and follow the steps there.
For in-depth explanations about individual topics and components, visit the following links.
AVF components:
AVF APIs:
How-Tos: