commit 86c9b08138f8b6700680af71072aa8c4d9a31e95
author Jiyong Park <jiyong@google.com> Fri Jun 04 19:03:48 2021 +0900
committer Jiyong Park <jiyong@google.com> Tue Jun 08 03:59:47 2021 +0900
tree 60bcdc471c712acd3cdaba3ade45e0d36b6b6e51
parent 08ab5b0085d8cadbaec4304e5c225bee2e4abca6

apkdmverity: dm-verity over apk

apkdmverity is a program that create a dm-verity block device over an
apk that is signed with the APK signature scheme V4. The merkle tree
comes from the *.idsig file generated as part of the signing scheme.

In the context of Microdroid, this program will be used to keep the
integrity of APK inside Microdroid because the APK is stored in a
filesystem that is served by the host Android. Any tampering happening
outside of Microdroid is manifested as an IO error inside Microdroid.

The dm-verity block device will then be mounted at /mnt/apk by zipfuse.
It is not yet decided to merge apkdmverity into zipfuse. It might be
good for saving storage and memory, but right now let's keep them
separate for easy testing.

This CL doesn't have Android.bp. Building and and testing for Android
will be the next step once this lands.

Bug: 189785765
Test: cargo test

Change-Id: I482028a7350162dc55d1cdb35183cd34ea8c18fe