blob: b5edd98980386763b9c3d6abf0e217f56960c472 [file] [log] [blame]
Victor Hsieh272aa242021-02-01 14:19:20 -08001/*
2 * Copyright (C) 2021 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
Victor Hsieh51789de2021-08-06 16:50:49 -070017//! compsvc is a service to run compilation tasks in a PVM upon request. It is able to set up
Victor Hsiehebb1d902021-08-06 13:00:18 -070018//! file descriptors backed by authfs (via authfs_service) and pass the file descriptors to the
Victor Hsieh51789de2021-08-06 16:50:49 -070019//! actual compiler.
Victor Hsieh272aa242021-02-01 14:19:20 -080020
Victor Hsieha64194b2021-08-06 17:43:36 -070021use anyhow::Result;
Victor Hsieh23f73592021-08-06 18:08:24 -070022use log::warn;
Victor Hsieha64194b2021-08-06 17:43:36 -070023use std::ffi::CString;
Victor Hsieh51789de2021-08-06 16:50:49 -070024use std::path::PathBuf;
Victor Hsieh272aa242021-02-01 14:19:20 -080025
Victor Hsieh51789de2021-08-06 16:50:49 -070026use crate::compilation::compile;
Victor Hsieh23f73592021-08-06 18:08:24 -070027use crate::compos_key_service::CompOsKeyService;
Victor Hsieh51789de2021-08-06 16:50:49 -070028use authfs_aidl_interface::aidl::com::android::virt::fs::IAuthFsService::IAuthFsService;
Victor Hsieh23f73592021-08-06 18:08:24 -070029use compos_aidl_interface::aidl::com::android::compos::{
30 CompOsKeyData::CompOsKeyData,
31 ICompOsService::{BnCompOsService, ICompOsService},
32 Metadata::Metadata,
Victor Hsieh272aa242021-02-01 14:19:20 -080033};
Victor Hsieh272aa242021-02-01 14:19:20 -080034use compos_aidl_interface::binder::{
Victor Hsieh51789de2021-08-06 16:50:49 -070035 BinderFeatures, ExceptionCode, Interface, Result as BinderResult, Status, Strong,
Victor Hsieh272aa242021-02-01 14:19:20 -080036};
37
Victor Hsiehebb1d902021-08-06 13:00:18 -070038const AUTHFS_SERVICE_NAME: &str = "authfs_service";
Victor Hsieh51789de2021-08-06 16:50:49 -070039const DEX2OAT_PATH: &str = "/apex/com.android.art/bin/dex2oat64";
Alan Stokes9e2c5d52021-07-21 11:29:10 +010040
Victor Hsieha64194b2021-08-06 17:43:36 -070041/// Constructs a binder object that implements ICompOsService.
Victor Hsieh23f73592021-08-06 18:08:24 -070042pub fn new_binder(rpc_binder: bool) -> Result<Strong<dyn ICompOsService>> {
43 let service = CompOsService {
44 dex2oat_path: PathBuf::from(DEX2OAT_PATH),
45 key_service: CompOsKeyService::new(rpc_binder)?,
46 };
Victor Hsieha64194b2021-08-06 17:43:36 -070047 Ok(BnCompOsService::new_binder(service, BinderFeatures::default()))
Alan Stokes9e2c5d52021-07-21 11:29:10 +010048}
49
Victor Hsieha64194b2021-08-06 17:43:36 -070050struct CompOsService {
Victor Hsieh51789de2021-08-06 16:50:49 -070051 dex2oat_path: PathBuf,
Victor Hsieha64194b2021-08-06 17:43:36 -070052 key_service: CompOsKeyService,
Victor Hsieh272aa242021-02-01 14:19:20 -080053}
54
Victor Hsieha64194b2021-08-06 17:43:36 -070055impl Interface for CompOsService {}
Victor Hsieh272aa242021-02-01 14:19:20 -080056
Victor Hsieha64194b2021-08-06 17:43:36 -070057impl ICompOsService for CompOsService {
Victor Hsieh272aa242021-02-01 14:19:20 -080058 fn execute(&self, args: &[String], metadata: &Metadata) -> BinderResult<i8> {
Victor Hsieh51789de2021-08-06 16:50:49 -070059 let authfs_service = get_authfs_service()?;
60 compile(&self.dex2oat_path, args, authfs_service, metadata).map_err(|e| {
61 new_binder_exception(
62 ExceptionCode::SERVICE_SPECIFIC,
63 format!("Compilation failed: {}", e),
64 )
65 })
Victor Hsieh272aa242021-02-01 14:19:20 -080066 }
Victor Hsieh23f73592021-08-06 18:08:24 -070067
68 fn generateSigningKey(&self) -> BinderResult<CompOsKeyData> {
69 self.key_service
70 .do_generate()
71 .map_err(|e| new_binder_exception(ExceptionCode::ILLEGAL_STATE, e.to_string()))
72 }
73
74 fn verifySigningKey(&self, key_blob: &[u8], public_key: &[u8]) -> BinderResult<bool> {
75 Ok(if let Err(e) = self.key_service.do_verify(key_blob, public_key) {
76 warn!("Signing key verification failed: {}", e.to_string());
77 false
78 } else {
79 true
80 })
81 }
82
83 fn sign(&self, key_blob: &[u8], data: &[u8]) -> BinderResult<Vec<u8>> {
84 self.key_service
85 .do_sign(key_blob, data)
86 .map_err(|e| new_binder_exception(ExceptionCode::ILLEGAL_STATE, e.to_string()))
87 }
Victor Hsieh272aa242021-02-01 14:19:20 -080088}
Victor Hsiehebb1d902021-08-06 13:00:18 -070089
90fn get_authfs_service() -> BinderResult<Strong<dyn IAuthFsService>> {
91 Ok(authfs_aidl_interface::binder::get_interface(AUTHFS_SERVICE_NAME)?)
92}
93
Victor Hsiehebb1d902021-08-06 13:00:18 -070094fn new_binder_exception<T: AsRef<str>>(exception: ExceptionCode, message: T) -> Status {
95 Status::new_exception(exception, CString::new(message.as_ref()).as_deref().ok())
96}