commit | 0d31057face7383999f7746e832831ae6d659a39 | [log] [tgz] |
---|---|---|
author | Frederick Mayle <fmayle@google.com> | Thu May 02 12:34:58 2024 -0700 |
committer | Frederick Mayle <fmayle@google.com> | Fri May 03 20:55:07 2024 +0000 |
tree | c6ac06760f399a977740cbc3d226af1de8dd4a5b | |
parent | b0d12a730913dfaad9bea2ae81f5058d898aa996 [diff] |
virtualizationmanager: use raw file instead of qcow crosvm's qcow backend isn't as well maintained or optimized as its raw file backend. The OS will lazily allocate blocks in the filesystem as they are used since we are only setting the file length (i.e. ftruncate) and not requesting it to be allocated eagerly (i.e. fallocate). Anecdotally, for a freshly allocated encryptedstore disk, the raw file actually uses less disk. adb shell /apex/com.android.virt/bin/vm run-microdroid --storage /data/misc/virtualizationservice/foo Before $ adb shell du -b -h /data/misc/virtualizationservice/foo 4.9M /data/misc/virtualizationservice/foo $ adb shell du -h /data/misc/virtualizationservice/foo 4.7M /data/misc/virtualizationservice/foo After $ adb shell du -b -h /data/misc/virtualizationservice/foo 10M /data/misc/virtualizationservice/foo $ adb shell du -h /data/misc/virtualizationservice/foo 4.4M /data/misc/virtualizationservice/foo Test: TH Change-Id: I4e456314736d5a99b850904afc3f1047d6c2e885
Android Virtualization Framework (AVF) provides secure and private execution environments for executing code. AVF is ideal for security-oriented use cases that require stronger isolation assurances over those offered by Android’s app sandbox.
Visit our public doc site to learn more about what AVF is, what it is for, and how it is structured. This repository contains source code for userspace components of AVF.
If you want a quick start, see the getting started guideline and follow the steps there.
For in-depth explanations about individual topics and components, visit the following links.
AVF components:
AVF APIs:
How-Tos: