commit | 3973d389ccb25f461814841f107b526cb9dea97e | [log] [tgz] |
---|---|---|
author | Nikita Ioffe <ioffe@google.com> | Thu Aug 31 17:53:25 2023 +0100 |
committer | Nikita Ioffe <ioffe@google.com> | Thu Aug 31 17:58:56 2023 +0100 |
tree | 5b8e52898acb8dbbd1af0098d0f7321ff2b3914e | |
parent | 5797e5a0452cb9194c12ff3b42286b23de3ca6dd [diff] |
Link RELEASE_AVF_ENABLE_MULTI_TENANT_MICRODROID_VM to payload_not_root Add plumbing in soong to conditionally enable payload_not_root rust cfg if RELEASE_AVF_ENABLE_MULTI_TENANT_MICRODROID_VM build flag is set to true. This patch also showcases how one can conditionally add files to microdroid system image depending on the value of the build flag Bug: 298008232 Test: build virt APEX with flag enabled Test: verified payload runs as system_payload Change-Id: I7e29b60a329ed4d7d8492bbe01b04ad4f895ff15
Android Virtualization Framework (AVF) provides secure and private execution environments for executing code. AVF is ideal for security-oriented use cases that require stronger isolation assurances over those offered by Android’s app sandbox.
Visit our public doc site to learn more about what AVF is, what it is for, and how it is structured. This repository contains source code for userspace components of AVF.
If you want a quick start, see the getting started guideline and follow the steps there.
For in-depth explanations about individual topics and components, visit the following links.
AVF components:
How-Tos: