In current GSI builds, AVB signing is not allowed.
We should allow signing GSI image, while building a vbmeta.img with
AVB_VBMETA_IMAGE_FLAGS_VERIFICATION_DISABLED (flag 2).
When need to disable AVB, use the vbmeta.img above together with the
GSI. When need enable AVB on GSI, include the GSI public key into the
device-specific vbmeta.img. Note that GSI is a chain partition so the
keys used to sign GSI and vbmeta.img are different.
Bug: 112293933
Test: build aosp_arm64-userdebug, checks flag 2 is set in vbmeta.img
and there is AVB HASHTREE in system.img
`avbtool info_image --image $OUT/system.img`
`avbtool info_image --image $OUT/vbmeta.img`
Change-Id: If1eff317621882994e7dcbf37cd35f5bfa16b69a
40 lines
1.2 KiB
Makefile
40 lines
1.2 KiB
Makefile
# BoardConfigEmuCommon.mk
|
|
#
|
|
# Common compile-time definitions for emulator
|
|
#
|
|
|
|
# The generic product target doesn't have any hardware-specific pieces.
|
|
TARGET_NO_BOOTLOADER := true
|
|
TARGET_NO_KERNEL := true
|
|
|
|
HAVE_HTC_AUDIO_DRIVER := true
|
|
BOARD_USES_GENERIC_AUDIO := true
|
|
TARGET_BOOTLOADER_BOARD_NAME := goldfish_$(TARGET_ARCH)
|
|
|
|
# no hardware camera
|
|
USE_CAMERA_STUB := true
|
|
|
|
TARGET_USES_HWC2 := true
|
|
NUM_FRAMEBUFFER_SURFACE_BUFFERS := 3
|
|
|
|
# Build OpenGLES emulation guest and host libraries
|
|
BUILD_EMULATOR_OPENGL := true
|
|
BUILD_QEMU_IMAGES := true
|
|
|
|
# Build and enable the OpenGL ES View renderer. When running on the emulator,
|
|
# the GLES renderer disables itself if host GL acceleration isn't available.
|
|
USE_OPENGL_RENDERER := true
|
|
|
|
TARGET_COPY_OUT_VENDOR := vendor
|
|
|
|
# ~100 MB vendor image. Please adjust system image / vendor image sizes
|
|
# when finalizing them. The partition size needs to be a multiple of image
|
|
# block size: 4096.
|
|
BOARD_VENDORIMAGE_PARTITION_SIZE := 100003840
|
|
BOARD_VENDORIMAGE_FILE_SYSTEM_TYPE := ext4
|
|
BOARD_FLASH_BLOCK_SIZE := 512
|
|
DEVICE_MATRIX_FILE := device/generic/goldfish/compatibility_matrix.xml
|
|
|
|
BOARD_SEPOLICY_DIRS += device/generic/goldfish/sepolicy/common
|
|
BOARD_PROPERTY_OVERRIDES_SPLIT_ENABLED := true
|