0a2484304d
Before a VM is started, the idsig file is created (or updated) by the virtualization service. This is needed because the idsig file is usually not available, especially when the APK is downloaded from the store. Note that the generated idsig file is not a signed one. Therefore, the APK is first verified using the APK signature scheme V3 (or V2) over a dm-verity device backed by the APK and the merkle tree (and root hash) from the idsig file. Only if the verification is successful, the root hash stored to the instance.img and then used for the subsequent boots of the VM. Bug: 193504400 Test: atest MicrodroidHostTestCases Test: run MicrodroidDemoApp without having the idsig file in /data/local/tmp/virt. Change-Id: I9fad05ca9562ae0666431102a8147d0f76f04e6a |
||
|---|---|---|
| .. | ||
| aidl | ||
| src | ||
| .gitignore | ||
| Android.bp | ||
| TEST_MAPPING | ||