diff options
| author | 2025-01-22 18:27:52 +0800 | |
|---|---|---|
| committer | 2025-02-04 12:39:21 +0800 | |
| commit | 04fca7f881fc6f0024d99b8bedac15541a5e8255 (patch) | |
| tree | 1457c8b2a386c7291ccfb01b8b20a6d34067f9d8 /tools/warn/java_warn_patterns.py | |
| parent | 13b894833a097c1de1d4e18c9c589fe77f5c43fd (diff) | |
Fix (pvmfw.img) Embed correct public key for Microdroid verification
The previous commit (I551e14fa6a0c63e3cef334b953f670cf9c465e10)
incorrectly embedded the APEX public key ('apex_pubkey') into
pvmfw.img. This key is used to verify `apex_payload.img`
within `com.android.virt.apex`, not the Microdroid image.
This commit embeds the correct public key, which verifies
`microdroid_vbmeta.img` inside `apex_payload.img`.
Bug: 384813199
Test: m sign_target_files_apks
Test: sign_target_files_apks --allow_gsi_debug_sepolicy \
--extra_apex_payload_key com.android.virt.apex= \
-e com.android.virt.apex= \
gsi_arm64-target_files-${build_id}.zip signed.zip
Test: unzip signed.zip IMAGES/pvmfw.img
Test: avbtool extract_public_key --key external/avb/test/data/testkey_rsa4096.pem --out key.pub
Test: grep -U -F -f key.pub IMAGES/pvmfw.img => grep: IMAGES/pvmfw.img: binary file matches
Change-Id: Ic8ae72898b8ab6067402b26eef9ed1b876a778f7
Diffstat (limited to 'tools/warn/java_warn_patterns.py')
0 files changed, 0 insertions, 0 deletions