pa-fazil
/
android_packages_modules_Virtualization
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
android_packages_modules_Vi.../compos/Android.bp

92 lines
1.9 KiB
Plaintext
Raw Normal View History

[LSC] Add LOCAL_LICENSE_KINDS to packages/modules/Virtualization Added SPDX-license-identifier-Apache-2.0 to: compos/Android.bp compos/aidl/Android.bp compos/apex/Android.bp Bug: 68860345 Bug: 151177513 Bug: 151953481 Test: m all Exempt-From-Owner-Approval: janitorial work Change-Id: I9b0f8dac641ab8fd063794139144ba011e31e93b
2021-05-12 19:41:18 +00:00
package {
default_applicable_licenses: ["Android-Apache-2.0"],
}
Add a remote binder service for executing commands To summarize, three binaries are involved to run a command remotely: - pvm_exec: the client executable on the host side to wrap the executable command with hints of FD passing - compsvc: listen to requests, spin off and sandbox a worker for execution setup - compsvc_worker: set up authfs, prepare the fds and exec the actual task Please see the code documentation for details. Bug: 171316742 Test: [shell 1] adb shell compsvc /system/bin/sleep [shell 2] adb shell exec 8</dev/zero 7<>/dev/null pvm_exec --in-fd 8 --out-fd 7 -- sleep 300 # Saw FDs in /proc/${sleep_pid}/fd Change-Id: I4758a4dc7bc70b6e5cce79e151c84c9990d9bc89
2021-02-01 22:19:20 +00:00
rust_binary {
name: "pvm_exec",
srcs: ["src/pvm_exec.rs"],
rustlibs: [
"compos_aidl_interface-rust",
"libanyhow",
compsvc/pvm_exec: Support RPC binder Bug: 190547489 Bug: 189947807 Test: [VM shell] /apex/com.android.compos/bin/compsvc \ /system/bin/touch --rpc-binder [Android shell] /apex/com.android.compos/bin/pvm_exec --cid $CID \ touch /data/local/tmp/foo # IPC did go through, but there is some unrelated problem in the # service, which can be fixed separately. Change-Id: Ie3cdd58be1f98f8084b2b63dd325b76546bc5cf9
2021-06-05 00:14:20 +00:00
"libbinder_rpc_unstable_bindgen",
"libbinder_rs",
Add a remote binder service for executing commands To summarize, three binaries are involved to run a command remotely: - pvm_exec: the client executable on the host side to wrap the executable command with hints of FD passing - compsvc: listen to requests, spin off and sandbox a worker for execution setup - compsvc_worker: set up authfs, prepare the fds and exec the actual task Please see the code documentation for details. Bug: 171316742 Test: [shell 1] adb shell compsvc /system/bin/sleep [shell 2] adb shell exec 8</dev/zero 7<>/dev/null pvm_exec --in-fd 8 --out-fd 7 -- sleep 300 # Saw FDs in /proc/${sleep_pid}/fd Change-Id: I4758a4dc7bc70b6e5cce79e151c84c9990d9bc89
2021-02-01 22:19:20 +00:00
"libclap",
"liblibc",
"liblog_rust",
"libminijail_rust",
"libnix",
"libscopeguard",
],
Prefer rlib for executables in compos Bug: 188195485 Test: build and run in the VM Change-Id: I410e98f99e9c2712186eaf4346d06b736d5d81c6
2021-05-18 19:44:45 +00:00
prefer_rlib: true,
compsvc/pvm_exec: Support RPC binder Bug: 190547489 Bug: 189947807 Test: [VM shell] /apex/com.android.compos/bin/compsvc \ /system/bin/touch --rpc-binder [Android shell] /apex/com.android.compos/bin/pvm_exec --cid $CID \ touch /data/local/tmp/foo # IPC did go through, but there is some unrelated problem in the # service, which can be fixed separately. Change-Id: Ie3cdd58be1f98f8084b2b63dd325b76546bc5cf9
2021-06-05 00:14:20 +00:00
shared_libs: [
"libbinder_rpc_unstable",
],
Add compsvc, compsvc_worker and pvm_exec to compos apex Bug: 186126404 Test: mma Change-Id: Ifd3bbc5597c96b84262c7548f278d04ec80af1a6
2021-05-11 20:45:15 +00:00
apex_available: [
"com.android.compos",
],
Add a remote binder service for executing commands To summarize, three binaries are involved to run a command remotely: - pvm_exec: the client executable on the host side to wrap the executable command with hints of FD passing - compsvc: listen to requests, spin off and sandbox a worker for execution setup - compsvc_worker: set up authfs, prepare the fds and exec the actual task Please see the code documentation for details. Bug: 171316742 Test: [shell 1] adb shell compsvc /system/bin/sleep [shell 2] adb shell exec 8</dev/zero 7<>/dev/null pvm_exec --in-fd 8 --out-fd 7 -- sleep 300 # Saw FDs in /proc/${sleep_pid}/fd Change-Id: I4758a4dc7bc70b6e5cce79e151c84c9990d9bc89
2021-02-01 22:19:20 +00:00
}
rust_binary {
name: "compsvc",
Split compsvc.rs. Separate out the implementation of the service from the main program that makes it available on the appropriate binder. This is inteded as a pure refactoring, preparatory to hosting both compsvc and CompOsKeyService in a single binary. Bug: 194267113 Test: atest ComposHostTestCases (with testOdrefesh un-ignored) Change-Id: I0c3015f1b962bf895dd93b9f6eb74b4e55a85c9e
2021-07-21 10:29:10 +00:00
srcs: ["src/compsvc_main.rs"],
Add a remote binder service for executing commands To summarize, three binaries are involved to run a command remotely: - pvm_exec: the client executable on the host side to wrap the executable command with hints of FD passing - compsvc: listen to requests, spin off and sandbox a worker for execution setup - compsvc_worker: set up authfs, prepare the fds and exec the actual task Please see the code documentation for details. Bug: 171316742 Test: [shell 1] adb shell compsvc /system/bin/sleep [shell 2] adb shell exec 8</dev/zero 7<>/dev/null pvm_exec --in-fd 8 --out-fd 7 -- sleep 300 # Saw FDs in /proc/${sleep_pid}/fd Change-Id: I4758a4dc7bc70b6e5cce79e151c84c9990d9bc89
2021-02-01 22:19:20 +00:00
rustlibs: [
"compos_aidl_interface-rust",
"libandroid_logger",
"libanyhow",
compsvc/pvm_exec: Support RPC binder Bug: 190547489 Bug: 189947807 Test: [VM shell] /apex/com.android.compos/bin/compsvc \ /system/bin/touch --rpc-binder [Android shell] /apex/com.android.compos/bin/pvm_exec --cid $CID \ touch /data/local/tmp/foo # IPC did go through, but there is some unrelated problem in the # service, which can be fixed separately. Change-Id: Ie3cdd58be1f98f8084b2b63dd325b76546bc5cf9
2021-06-05 00:14:20 +00:00
"libbinder_rpc_unstable_bindgen",
"libbinder_rs",
Add a remote binder service for executing commands To summarize, three binaries are involved to run a command remotely: - pvm_exec: the client executable on the host side to wrap the executable command with hints of FD passing - compsvc: listen to requests, spin off and sandbox a worker for execution setup - compsvc_worker: set up authfs, prepare the fds and exec the actual task Please see the code documentation for details. Bug: 171316742 Test: [shell 1] adb shell compsvc /system/bin/sleep [shell 2] adb shell exec 8</dev/zero 7<>/dev/null pvm_exec --in-fd 8 --out-fd 7 -- sleep 300 # Saw FDs in /proc/${sleep_pid}/fd Change-Id: I4758a4dc7bc70b6e5cce79e151c84c9990d9bc89
2021-02-01 22:19:20 +00:00
"libclap",
"liblog_rust",
"libminijail_rust",
],
Prefer rlib for executables in compos Bug: 188195485 Test: build and run in the VM Change-Id: I410e98f99e9c2712186eaf4346d06b736d5d81c6
2021-05-18 19:44:45 +00:00
prefer_rlib: true,
compsvc/pvm_exec: Support RPC binder Bug: 190547489 Bug: 189947807 Test: [VM shell] /apex/com.android.compos/bin/compsvc \ /system/bin/touch --rpc-binder [Android shell] /apex/com.android.compos/bin/pvm_exec --cid $CID \ touch /data/local/tmp/foo # IPC did go through, but there is some unrelated problem in the # service, which can be fixed separately. Change-Id: Ie3cdd58be1f98f8084b2b63dd325b76546bc5cf9
2021-06-05 00:14:20 +00:00
shared_libs: [
"libbinder_rpc_unstable",
],
Add compsvc, compsvc_worker and pvm_exec to compos apex Bug: 186126404 Test: mma Change-Id: Ifd3bbc5597c96b84262c7548f278d04ec80af1a6
2021-05-11 20:45:15 +00:00
apex_available: [
"com.android.compos",
],
Add a remote binder service for executing commands To summarize, three binaries are involved to run a command remotely: - pvm_exec: the client executable on the host side to wrap the executable command with hints of FD passing - compsvc: listen to requests, spin off and sandbox a worker for execution setup - compsvc_worker: set up authfs, prepare the fds and exec the actual task Please see the code documentation for details. Bug: 171316742 Test: [shell 1] adb shell compsvc /system/bin/sleep [shell 2] adb shell exec 8</dev/zero 7<>/dev/null pvm_exec --in-fd 8 --out-fd 7 -- sleep 300 # Saw FDs in /proc/${sleep_pid}/fd Change-Id: I4758a4dc7bc70b6e5cce79e151c84c9990d9bc89
2021-02-01 22:19:20 +00:00
}
rust_binary {
name: "compsvc_worker",
srcs: ["src/compsvc_worker.rs"],
rustlibs: [
"libandroid_logger",
"libanyhow",
"libclap",
"liblog_rust",
"libminijail_rust",
"libnix",
],
Prefer rlib for executables in compos Bug: 188195485 Test: build and run in the VM Change-Id: I410e98f99e9c2712186eaf4346d06b736d5d81c6
2021-05-18 19:44:45 +00:00
prefer_rlib: true,
Add compsvc, compsvc_worker and pvm_exec to compos apex Bug: 186126404 Test: mma Change-Id: Ifd3bbc5597c96b84262c7548f278d04ec80af1a6
2021-05-11 20:45:15 +00:00
apex_available: [
"com.android.compos",
],
Add a remote binder service for executing commands To summarize, three binaries are involved to run a command remotely: - pvm_exec: the client executable on the host side to wrap the executable command with hints of FD passing - compsvc: listen to requests, spin off and sandbox a worker for execution setup - compsvc_worker: set up authfs, prepare the fds and exec the actual task Please see the code documentation for details. Bug: 171316742 Test: [shell 1] adb shell compsvc /system/bin/sleep [shell 2] adb shell exec 8</dev/zero 7<>/dev/null pvm_exec --in-fd 8 --out-fd 7 -- sleep 300 # Saw FDs in /proc/${sleep_pid}/fd Change-Id: I4758a4dc7bc70b6e5cce79e151c84c9990d9bc89
2021-02-01 22:19:20 +00:00
}
Run compsvc on CompOS boot Bug: 186126809 Test: 1. follow microdroid/README.md except payload.img: $ adb shell 'cd /data/local/tmp/microdroid; \ /apex/com.android.virt/bin/mk_payload \ /apex/com.android.compos/etc/payload_config.json \ payload.img' $ adb shell 'chmod go+r /data/local/tmp/microdroid/payload*' 2. adb shell /apex/com.android.virt/bin/vm run \ /data/local/tmp/microdroid/microdroid.json Change-Id: I03cc937c0f82cbcc4fd1064ce2135619f22b4170
2021-06-15 07:59:00 +00:00
Define and implement a service for key management in CompOS. This is based on the interface prototyped in system/security/ondevice-signing/FakeCompOs.h. For now, to allow manual testing, this is a standalone binary. Bug: 191763370 Test: Builds. Change-Id: I307ba9144fa51cca7ebee2142980f3a1cd436ef2
2021-06-16 15:49:32 +00:00
rust_binary {
Support CompOS Key Service in a VM Add the ability to start the service in a VM, and to then communicate with it from the host via RPC Binder. Update command-line syntax. Also revert my recent client naming change, since one tool that can handle both host & VM seems better than two different ones. Bug: 193603140 Test: Manual: start service in VM, connect to it, generate & verify keys. Change-Id: I3cdb25395537e29bbfaa957eeac0c16ba4de93de
2021-07-15 15:21:50 +00:00
name: "compos_key_main",
srcs: ["src/compos_key_main.rs"],
Define and implement a service for key management in CompOS. This is based on the interface prototyped in system/security/ondevice-signing/FakeCompOs.h. For now, to allow manual testing, this is a standalone binary. Bug: 191763370 Test: Builds. Change-Id: I307ba9144fa51cca7ebee2142980f3a1cd436ef2
2021-06-16 15:49:32 +00:00
edition: "2018",
rustlibs: [
"compos_aidl_interface-rust",
"android.system.keystore2-V1-rust",
"android.hardware.security.keymint-V1-rust",
"libandroid_logger",
"libanyhow",
Support CompOS Key Service in a VM Add the ability to start the service in a VM, and to then communicate with it from the host via RPC Binder. Update command-line syntax. Also revert my recent client naming change, since one tool that can handle both host & VM seems better than two different ones. Bug: 193603140 Test: Manual: start service in VM, connect to it, generate & verify keys. Change-Id: I3cdb25395537e29bbfaa957eeac0c16ba4de93de
2021-07-15 15:21:50 +00:00
"libbinder_rs",
"libbinder_rpc_unstable_bindgen",
"libclap",
Define and implement a service for key management in CompOS. This is based on the interface prototyped in system/security/ondevice-signing/FakeCompOs.h. For now, to allow manual testing, this is a standalone binary. Bug: 191763370 Test: Builds. Change-Id: I307ba9144fa51cca7ebee2142980f3a1cd436ef2
2021-06-16 15:49:32 +00:00
"liblog_rust",
Use CompOsKeyService as compsvc factory. Define a Signer trait to encapsulate what we need to do to sign a digest. Modify compsvc to hold a signer. Modify CompOsKeyService to be able to take in a keyblob and produce a signer, then return a compsvc instance holding that signer. This doesn't yet do anything with the signer. Eventually we will want to use it to generate signatures on output artifacts. Bug: 194267113 Test: atest ComposHostTestCases (with testOdrefesh un-ignored) Change-Id: I72aead0280914987f7c8d1721c1e12ee0fad1af4
2021-07-21 10:29:10 +00:00
"libminijail_rust",
Define and implement a service for key management in CompOS. This is based on the interface prototyped in system/security/ondevice-signing/FakeCompOs.h. For now, to allow manual testing, this is a standalone binary. Bug: 191763370 Test: Builds. Change-Id: I307ba9144fa51cca7ebee2142980f3a1cd436ef2
2021-06-16 15:49:32 +00:00
"libring",
"libscopeguard",
],
prefer_rlib: true,
Support CompOS Key Service in a VM Add the ability to start the service in a VM, and to then communicate with it from the host via RPC Binder. Update command-line syntax. Also revert my recent client naming change, since one tool that can handle both host & VM seems better than two different ones. Bug: 193603140 Test: Manual: start service in VM, connect to it, generate & verify keys. Change-Id: I3cdb25395537e29bbfaa957eeac0c16ba4de93de
2021-07-15 15:21:50 +00:00
shared_libs: [
"libbinder_rpc_unstable",
],
Define and implement a service for key management in CompOS. This is based on the interface prototyped in system/security/ondevice-signing/FakeCompOs.h. For now, to allow manual testing, this is a standalone binary. Bug: 191763370 Test: Builds. Change-Id: I307ba9144fa51cca7ebee2142980f3a1cd436ef2
2021-06-16 15:49:32 +00:00
apex_available: ["com.android.compos"],
}