commit 185ba932943f83b6c6f7920069ea92d21478b2e4
author Shikha Panwar <shikhapanwar@google.com> Tue Mar 12 22:35:09 2024 +0000
committer Shikha Panwar <shikhapanwar@google.com> Wed Mar 20 10:57:34 2024 +0000
tree 9760a5a69cf2735fac27937f9bd024badf0667ea
parent 541cb0ccc7b8c0a650930f18b26c21d0d923b727

Revert^2 "Microdroid: Skip instance.img checks"

Microdroid no more needs Instance Image partition if Secretkeeper is
enabled.

The use of instance.img is to store package data at first boot of the
instance & MM ensures that it did not change on further boot.  With
Secretkeeper based rollback protection, the auth_hash & version of each
of these packages are part of DICE Policy & Sk ensures that the secrets
are not released if the version downgrades or auth_hash changes.
Therefore, there is no longer any need for this data to be in
instance.img

Note: Since Secretkeeper is an optional HAL in Android V, we still need
to support the instance.img for cases when Secretkeeper implementation
is not available.

Security: This opens up the Sealing CDIs of a pVM to Payload with lower
security version. But all CDIs will be reset once pvmfw starts including
Instance-Id in the hidden inputs, so this is a safe change.

Trunk Flagging: If LLPVM flag is disabled, is_sk_supported() returns
false & legacy route of verification with instance img is executed.

Bug: 291306122
Test: Get an instance.img of a pVM (started with vm run-microdroid)
Test: hexdump -C img | grep for Microdroid partition UUID. It should be missing
Re-revert: The reason for failures was a different issue(b/327526008), this patch
need not be reverted.

Change-Id: I1a8b717fe88ffe4bda5278470a3d2d5ba239c404