pa-fazil
/
android_packages_modules_Virtualization
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
android_packages_modules_Vi.../compos/Android.bp

42 lines
902 B
Plaintext
Raw Normal View History

[LSC] Add LOCAL_LICENSE_KINDS to packages/modules/Virtualization Added SPDX-license-identifier-Apache-2.0 to: compos/Android.bp compos/aidl/Android.bp compos/apex/Android.bp Bug: 68860345 Bug: 151177513 Bug: 151953481 Test: m all Exempt-From-Owner-Approval: janitorial work Change-Id: I9b0f8dac641ab8fd063794139144ba011e31e93b
2021-05-12 19:41:18 +00:00
package {
default_applicable_licenses: ["Android-Apache-2.0"],
}
Key blob protection using AEAD Add BlobEncryptor, which can be used to write a secret (like our private key) to an encrypted & authenticated blob and later retrieve it. Added the skeleton of code to make use of this, using the sealing CDI as the input to the key derivation. Bug: 214233409 Test: atest compsvc_device_tests Change-Id: Iea7e82405072a31ae5f7ad64a9e894a970913219
2022-01-18 14:17:00 +00:00
rust_defaults {
name: "compsvc_defaults",
Split compsvc.rs. Separate out the implementation of the service from the main program that makes it available on the appropriate binder. This is inteded as a pure refactoring, preparatory to hosting both compsvc and CompOsKeyService in a single binary. Bug: 194267113 Test: atest ComposHostTestCases (with testOdrefesh un-ignored) Change-Id: I0c3015f1b962bf895dd93b9f6eb74b4e55a85c9e
2021-07-21 10:29:10 +00:00
srcs: ["src/compsvc_main.rs"],
Add a remote binder service for executing commands To summarize, three binaries are involved to run a command remotely: - pvm_exec: the client executable on the host side to wrap the executable command with hints of FD passing - compsvc: listen to requests, spin off and sandbox a worker for execution setup - compsvc_worker: set up authfs, prepare the fds and exec the actual task Please see the code documentation for details. Bug: 171316742 Test: [shell 1] adb shell compsvc /system/bin/sleep [shell 2] adb shell exec 8</dev/zero 7<>/dev/null pvm_exec --in-fd 8 --out-fd 7 -- sleep 300 # Saw FDs in /proc/${sleep_pid}/fd Change-Id: I4758a4dc7bc70b6e5cce79e151c84c9990d9bc89
2021-02-01 22:19:20 +00:00
rustlibs: [
compsvc: Notify VS when we're ready Once our server socket is listening, notify virtualizationservice that we're ready. Modify clients to wait for ready instead of sleeping. Bug: 186126194 Test: Manually run compos_key_cmd, compos_verify_key Change-Id: Ibaff4bf22de9de2aa4faff9e81b24c779643b78c
2021-09-09 13:44:13 +00:00
"android.system.virtualmachineservice-rust",
Switch compsvc to use authfs_service With authfs_service, we no longer need compsvc_worker.rs and authfs.rs for the task setup. Now, for each request, compsvc can just request FDs from authfs_service then pass to the task. Also, fixed the integer type of remote FD to match ParcelFileDescriptor. Bug: 194717985 Test: atest ComposHostTestCases Change-Id: I8c0be106243778ac20e7cd96a778db4e34aef051
2021-08-06 20:00:18 +00:00
"authfs_aidl_interface-rust",
Add a remote binder service for executing commands To summarize, three binaries are involved to run a command remotely: - pvm_exec: the client executable on the host side to wrap the executable command with hints of FD passing - compsvc: listen to requests, spin off and sandbox a worker for execution setup - compsvc_worker: set up authfs, prepare the fds and exec the actual task Please see the code documentation for details. Bug: 171316742 Test: [shell 1] adb shell compsvc /system/bin/sleep [shell 2] adb shell exec 8</dev/zero 7<>/dev/null pvm_exec --in-fd 8 --out-fd 7 -- sleep 300 # Saw FDs in /proc/${sleep_pid}/fd Change-Id: I4758a4dc7bc70b6e5cce79e151c84c9990d9bc89
2021-02-01 22:19:20 +00:00
"compos_aidl_interface-rust",
"libandroid_logger",
"libanyhow",
compsvc/pvm_exec: Support RPC binder Bug: 190547489 Bug: 189947807 Test: [VM shell] /apex/com.android.compos/bin/compsvc \ /system/bin/touch --rpc-binder [Android shell] /apex/com.android.compos/bin/pvm_exec --cid $CID \ touch /data/local/tmp/foo # IPC did go through, but there is some unrelated problem in the # service, which can be fixed separately. Change-Id: Ie3cdd58be1f98f8084b2b63dd325b76546bc5cf9
2021-06-05 00:14:20 +00:00
"libbinder_rs",
migrate to clap 3.x Bug: 229854484 Test: atest Change-Id: Iae1ad1b5f7c2832c11bf2db09e7985ddaaf927d4
2022-07-29 00:33:45 +00:00
"libclap",
Extract a library for common CompOS things A small refactoring as a preliminary step to creating composd. Create a Rust library for useful things shared by various CompOS-related binaries. This initially includes the code to start the VM and connect to CompOS, as well as various useful constants. As part of extracting the start VM code I migrated to using logging directly rather than writing to stdout/stderr for greater reusability, as suggested by Victor. Bug: 186126194 Test: Get odsign to run compos_verify_key, still works Change-Id: I57b7ebcdd1a6cb604b5d739b8a8e028fd59e7b90
2021-09-06 16:22:37 +00:00
"libcompos_common",
compos: retrieve fsverity digests of outputs from authfs In order for compsvc to know which files to sign, it needs to parse the compiler flags to identify the FD numbers. Once the compiler exits normally, we retrieve the fs-verity digests of the output files, namely the oat, vdex and image. The digests are currently only printed as debug log, but with more changes to the signing service, we'll be able to sign them easily. Bug: 161471326 Test: ComposHostTestCases Test: Visually checks the hex of the fs-verity digests. Looks consistent to the digests of the actual files. Change-Id: I9f7b2cfbb12999b87676b6b8e1bfd199d2a75a6b
2021-08-13 19:18:02 +00:00
"liblibc",
Add a remote binder service for executing commands To summarize, three binaries are involved to run a command remotely: - pvm_exec: the client executable on the host side to wrap the executable command with hints of FD passing - compsvc: listen to requests, spin off and sandbox a worker for execution setup - compsvc_worker: set up authfs, prepare the fds and exec the actual task Please see the code documentation for details. Bug: 171316742 Test: [shell 1] adb shell compsvc /system/bin/sleep [shell 2] adb shell exec 8</dev/zero 7<>/dev/null pvm_exec --in-fd 8 --out-fd 7 -- sleep 300 # Saw FDs in /proc/${sleep_pid}/fd Change-Id: I4758a4dc7bc70b6e5cce79e151c84c9990d9bc89
2021-02-01 22:19:20 +00:00
"liblog_rust",
"libminijail_rust",
compsvc: Notify VS when we're ready Once our server socket is listening, notify virtualizationservice that we're ready. Modify clients to wait for ready instead of sleeping. Bug: 186126194 Test: Manually run compos_key_cmd, compos_verify_key Change-Id: Ibaff4bf22de9de2aa4faff9e81b24c779643b78c
2021-09-09 13:44:13 +00:00
"libnix",
Add code to bulk-sign artifacts This isn't wired up yet - we need to be able to iterate over AuthFs directories, but that's coming soon. Import the OdsignInfo proto, which contains the map of filenames and digests, and provide a way to build it from a set of artifact files and write it along with its signature. Also remove the old Signer trait (which is unused), and a couple of small refactorings. Bug: 161471326 Test: Builds Change-Id: I37fccb1f2ca4fa1ea3006185d9f805d668252e2a
2021-12-08 16:10:45 +00:00
"libodsign_proto_rust",
"libprotobuf",
Run derive_classpath in VM This allows us to get an accurate list of APEXes that contribute to the classpaths, including staged APEXes. (Note that derive_classpath itself is in an APEX, and we will run it from a staged APEX if appropriate.) Add com.android.sdkext (which contains derive_classpath) as an explicit dependency; also fixed formatting while I was at it. Remove the old initializeClasspaths method as it is now redudant. Tweaked build.prop values to allow derive_classpath to run; more work is needed though (b/189164487). Bug: 200808307 Test: composd_cmd test-compile Change-Id: Iae677274ebac1cdf721c5497c1d82eb22d2277db
2022-01-04 11:48:38 +00:00
"libregex",
Moved binder_common to rpcbinder package under binder directory. Bug: 234019127 Bug: 184872979 Test: atest compos_key_tests MicrodroidHostTestCases MicrodroidTestApp libbinder_rs-internal_test Change-Id: Iceac394d2341f463362e9bbe8908e5d8a1b3f34f
2022-08-08 15:33:34 +00:00
"librpcbinder_rs",
Use --force-compile for tests The test uses --force-compile outside the VM, so we also need to inside the VM. But we want --compile for the normal case of compilation, so we only produce exactly the required artifacts. That means we have to pass whether we are testing or not from the host to guest, so lots of plumbing is needed. (Also figured out how to solve a problem with type deduction that the me of a few months ago was baffled by.) Bug: 211458160 Test: atest ComposTestCase Change-Id: Ie7e36bc3fab40744e9f9ea5e5928126899d9060d
2022-01-28 16:41:52 +00:00
"librustutils",
Add CompOsKeyService to ICompOsService ICompOsService is renamed from ICompService in this change. The implementation starts to include a CompOsKeyService, but it has not started to use it. Bug: 194717985 Bug: 161471326 Test: ComposHostTestCases Change-Id: Ifddd1109f387e061989dba7292b629c04b07fa34
2021-08-07 00:43:36 +00:00
"libscopeguard",
Add a remote binder service for executing commands To summarize, three binaries are involved to run a command remotely: - pvm_exec: the client executable on the host side to wrap the executable command with hints of FD passing - compsvc: listen to requests, spin off and sandbox a worker for execution setup - compsvc_worker: set up authfs, prepare the fds and exec the actual task Please see the code documentation for details. Bug: 171316742 Test: [shell 1] adb shell compsvc /system/bin/sleep [shell 2] adb shell exec 8</dev/zero 7<>/dev/null pvm_exec --in-fd 8 --out-fd 7 -- sleep 300 # Saw FDs in /proc/${sleep_pid}/fd Change-Id: I4758a4dc7bc70b6e5cce79e151c84c9990d9bc89
2021-02-01 22:19:20 +00:00
],
Prefer rlib for executables in compos Bug: 188195485 Test: build and run in the VM Change-Id: I410e98f99e9c2712186eaf4346d06b736d5d81c6
2021-05-18 19:44:45 +00:00
prefer_rlib: true,
compsvc/pvm_exec: Support RPC binder Bug: 190547489 Bug: 189947807 Test: [VM shell] /apex/com.android.compos/bin/compsvc \ /system/bin/touch --rpc-binder [Android shell] /apex/com.android.compos/bin/pvm_exec --cid $CID \ touch /data/local/tmp/foo # IPC did go through, but there is some unrelated problem in the # service, which can be fixed separately. Change-Id: Ie3cdd58be1f98f8084b2b63dd325b76546bc5cf9
2021-06-05 00:14:20 +00:00
shared_libs: [
"libbinder_rpc_unstable",
Migrate off keystore Implement our own keypair generation and signing (using BoringSSL) and our own private key blob protection (using Ring). This includes replacing the old compos_key_service with the new signing_key. Use DICE as the source of the VM secret used to protect the private key instead of assuming keystore has one. Changed compsvc to return the RSAPublicKey directly. Previously we returned the self-signed cert from Keystore, and composd then extracted the public key. As a result composd no longer needs any native helper code to call BoringSSL; however now compsvc does. Removed similarly redundant key-extraction code from compos_key_cmd. Create SystemRandom when we need it rather than having it as a field; it's stateless anyway. Bug: 214233409 Test: atest ComposKeyTestCase compsvc_device_tests Change-Id: I8b14fe2acdf43f49d45e2d32d4b6f482bd420eee
2022-01-20 14:12:24 +00:00
"libcrypto",
compsvc/pvm_exec: Support RPC binder Bug: 190547489 Bug: 189947807 Test: [VM shell] /apex/com.android.compos/bin/compsvc \ /system/bin/touch --rpc-binder [Android shell] /apex/com.android.compos/bin/pvm_exec --cid $CID \ touch /data/local/tmp/foo # IPC did go through, but there is some unrelated problem in the # service, which can be fixed separately. Change-Id: Ie3cdd58be1f98f8084b2b63dd325b76546bc5cf9
2021-06-05 00:14:20 +00:00
],
Key blob protection using AEAD Add BlobEncryptor, which can be used to write a secret (like our private key) to an encrypted & authenticated blob and later retrieve it. Added the skeleton of code to make use of this, using the sealing CDI as the input to the key derivation. Bug: 214233409 Test: atest compsvc_device_tests Change-Id: Iea7e82405072a31ae5f7ad64a9e894a970913219
2022-01-18 14:17:00 +00:00
}
rust_binary {
name: "compsvc",
defaults: ["compsvc_defaults"],
Add compsvc, compsvc_worker and pvm_exec to compos apex Bug: 186126404 Test: mma Change-Id: Ifd3bbc5597c96b84262c7548f278d04ec80af1a6
2021-05-11 20:45:15 +00:00
apex_available: [
"com.android.compos",
],
Add a remote binder service for executing commands To summarize, three binaries are involved to run a command remotely: - pvm_exec: the client executable on the host side to wrap the executable command with hints of FD passing - compsvc: listen to requests, spin off and sandbox a worker for execution setup - compsvc_worker: set up authfs, prepare the fds and exec the actual task Please see the code documentation for details. Bug: 171316742 Test: [shell 1] adb shell compsvc /system/bin/sleep [shell 2] adb shell exec 8</dev/zero 7<>/dev/null pvm_exec --in-fd 8 --out-fd 7 -- sleep 300 # Saw FDs in /proc/${sleep_pid}/fd Change-Id: I4758a4dc7bc70b6e5cce79e151c84c9990d9bc89
2021-02-01 22:19:20 +00:00
}