commit | 0dc78b03db97f89b398db85304b68cb395eef315 | [log] [tgz] |
---|---|---|
author | Shikha Panwar <shikhapanwar@google.com> | Thu Feb 06 16:23:45 2025 +0000 |
committer | Shikha Panwar <shikhapanwar@google.com> | Thu Feb 06 16:42:28 2025 +0000 |
tree | 235490eacfa669c56787962b7caad4aa2d58aae5 | |
parent | 6fba4d50366c9e8cf9ce4bc67371df20b66a8825 [diff] |
Encryptedstore: allow discard for freed sectors Allow discard from both the mounted ext4 filesystem & the devicemapper target. This allows discard commands to be forwarded to underlying virtio-blk device resulting in punching holes in the backing sparse disk img. This is how recompaction is achieved when encryptedstore usage decreases. Test: Start udroid VM && Find the underlying block device (ls -l/dev/block/mapper/cryptdev) && ensure /sys/block/dm-3/queue/discard_max_byte > 0 (2199023255040) Test: Fill up the encryptedstore & then empty it, observe the size of backing img. Ensure it decreases. Bug: 391340596 Change-Id: I17e278fac82c07ec41fa55ee0b65924b9ea1ea6f
Android Virtualization Framework (AVF) provides secure and private execution environments for executing code. AVF is ideal for security-oriented use cases that require stronger isolation assurances over those offered by Android’s app sandbox.
Visit our public doc site to learn more about what AVF is, what it is for, and how it is structured. This repository contains source code for userspace components of AVF.
If you want a quick start, see the getting started guideline and follow the steps there.
For in-depth explanations about individual topics and components, visit the following links.
AVF components:
AVF APIs:
How-Tos: