Age | Commit message (Collapse) | Author |
|
This fully enables metadata encryption on db845c by following
the instructions here:
https://source.android.com/security/encryption/metadata?hl=en
Mostly just adding --early/--late mountall arguments in the
init.rc and the "latemount" and
"keydirectory=/metadata/vold/metadata_encryption" options to the
userdata fstab line.
Note: You will likely need to flash new userdata (and possibly
reflash metadata as well) after applying this. Use the flashall
script if you are having any trouble.
Reported-by: Lucas Henneman <henneman@google.com>
Test: atest vts_kernel_encryption_test
Signed-off-by: John Stultz <john.stultz@linaro.org>
Change-Id: I3f4237267238dbf43a9c540f815ce2f00f8ae793
|
|
remount overlay persistence issues
PeterC reported adb remount was not working properly,
and I noticed we had the same issue on HiKey960 recently
due to metadata not being set as first_stage_mount in fstab.
So this patch makes a similar change to fix the issue here.
Test: Passes system/core/fs_mgr/tests/adb-remount-test.sh
Signed-off-by: John Stultz <john.stultz@linaro.org>
Change-Id: If92f7810ff045ff58505a1af6829ec529a289cc2
|
|
This reverts commit 70f37c65199443d2502da58ecb81a4be28d36d80.
With Virtual A/B, we no longer need cache partition
for "adb remount" to work with overlayfs.
Signed-off-by: Amit Pundir <amit.pundir@linaro.org>
Change-Id: I979e61c4a64a8d0b1c7345491f4924c1d3fa62e0
|
|
All dynamic partitions are A/B.
Signed-off-by: Amit Pundir <amit.pundir@linaro.org>
Change-Id: I9650626b5a463ff9f368680ae8c32b8432fee1e8
|
|
so that it will be possible to work with GSI image
Test: boot to homescreen
console:/ # getprop init.svc.vendor.boot-hal-1-1
running
console:/ #
VtsHalBootV1_0TargetTest and VtsHalBootV1_1TargetTest
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
Change-Id: I147f04de1c8bc7fd506d351f514498341ef7388c
|
|
Now that sdcardfs is deprecated, we need a few tweaks to
support emulated storage on the board.
Thanks so much to Martijn Coenen and Daniel Rosenberg for
their help narrowing down the changes needed here.
Signed-off-by: John Stultz <john.stultz@linaro.org>
Change-Id: I66aa4010df196e9fa7ca6a0be612f706e83a2715
|
|
The overlayfs remount handling of superpartitions expects the
fstab to have all the partitions in it.
This means we can't use the split between the ramdisk fstab
and the vendor fstab that we have been previously.
So this patch merges the two fstabs together.
With this change "adb root; adb remount" works now.
Signed-off-by: John Stultz <john.stultz@linaro.org>
Change-Id: Iad408d5d3b1e4c9291a947cd44ee65f4aaef5c45
|
|
Add logic to support cache partition, as it seems
to be required to properly handle overlayfs remounts
on the super paritition.
Signed-off-by: John Stultz <john.stultz@linaro.org>
Change-Id: I5c3c0eebb7e8d34cff85197855f4ea5b989b90b3
|
|
Signed-off-by: Amit Pundir <amit.pundir@linaro.org>
Change-Id: I1b6bd84ed4fa6e51b68fdc67901e943354da3696
|
|
according to the document here:
https://source.android.com/security/encryption/file-based
Test: boot up db845c with android-5.4 and android-mainline kernels, and tested with vts-kernel -m VtsKernelEncryptionTest
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
Change-Id: I6ad25b5fef31bef77893f6d5e267568489116fae
|
|
If one runs "fastboot erase userdata", and then does not flash
a userdata image to the partition, the system will fail to boot
as /data/ will not mount, and the apex and dalvik cache
directories won't be present or writable.
This tries to address this by adding the formattable flag to
the fstab and add the partition to the sepolicy so mkfs can
access it.
NOTE: I did have to use the full by-name path in the fstab,
which is less flexible then the LABEL= method, but if the
partition isn't formatted there isn't neceessarily a partition
label to find.
Big thanks to AmitP for suggesting this approach
Signed-off-by: John Stultz <john.stultz@linaro.org>
Change-Id: Ia678d0d1d5e1eb35462f8fcfee478969c614b0d4
|
|
Boots dragonboard db845c to console.
HDMI display broken due to missing firmware files.
Change-Id: I820aeb7b7ab2536a362f9ae37cc44906be0a6190
Signed-off-by: Amit Pundir <amit.pundir@linaro.org>
|