microdroid: apk is mounted via apkdmverity
In microdroid, APK and its idsig is used to dm-verity mount before
zipfuse mounts it into a filesystem.
Bug: 190343842
Test: MicrodroidHostTestCases
Change-Id: Icd48fb823eabc087c0266e46f9b3d302e90fd208
diff --git a/microdroid/init.rc b/microdroid/init.rc
index 2385d8f..4155da3 100644
--- a/microdroid/init.rc
+++ b/microdroid/init.rc
@@ -22,6 +22,8 @@
start ueventd
+ # TODO(b/190343842) verify apexes/apk before mounting them.
+
# Exec apexd in the VM mode to avoid unnecessary overhead of normal mode.
# (e.g. session management)
exec - root system -- /system/bin/apexd --vm
@@ -29,6 +31,7 @@
perform_apex_config
exec_start derive_sdk
+ exec - root system -- /system/bin/apkdmverity /dev/block/by-name/microdroid-apk /dev/block/by-name/microdroid-apk-idsig microdroid-apk
mkdir /mnt/apk 0755 system system
start zipfuse