| commit | f584413a5d7477b7b74d1b3b70e4bba289f9d2f6 | [log] [tgz] |
|---|---|---|
| author | Jiyong Park <jiyong@google.com> | Fri Jul 12 16:31:23 2024 +0900 |
| committer | Jiyong Park <jiyong@google.com> | Fri Jul 12 20:17:34 2024 +0900 |
| tree | e774b3c8e5d814f04bfea1bd70b1ef0b20f809fa | |
| parent | 9b6c1443dbc708bbcd826a1ba227b16a0e3aec59 [diff] |
Put ferrochrome image into the app
This CL includes the follwing changes:
* The ferrochrome image is included in the app as an asset. It's not
downloaded.
* The image is a compressed archive having four partition images. The
archive was created as follows:
- chromium_base_image.bin is downloaded
- all 12 partitions are extracted using the unpack_partitions.sh
script
- four partitions (efi, root, kernel, state) are archieved using tar
with the --sparse option
* At runtime, the archive is extracted to /data/local/tmp and the copy
of the archive in /data/media/<user_id>/ferrochrome is deleted to save
space.
* The VM config now specifis a composite disk where partitions are from
the extracted partition images.
* The state.img is rounded up to the multiple of 4K as required by
crosvm.
Note: this change does NOT include the ferrochrome image. It will be
uploaded to the internal gerrit.
Bug: 351973725
Bug: 351904150
Test: run ferrochrome app
Change-Id: I12a6a1efa270065780a1cbdc61a3edd92f4f28aa
Android Virtualization Framework (AVF) provides secure and private execution environments for executing code. AVF is ideal for security-oriented use cases that require stronger isolation assurances over those offered by Android’s app sandbox.
Visit our public doc site to learn more about what AVF is, what it is for, and how it is structured. This repository contains source code for userspace components of AVF.
If you want a quick start, see the getting started guideline and follow the steps there.
For in-depth explanations about individual topics and components, visit the following links.
AVF components:
AVF APIs:
How-Tos: