tree 9d5ff813683dee4570466d1858fef72bb91eb5af
parent 7930ef8847ced84da0bc584c63913c0ec37064a6
author Jiyong Park <jiyong@google.com> 1642737297 +0900
committer Jiyong Park <jiyong@google.com> 1642737582 +0900

Prepare diced before microdroid_manager runs

microdroid_manager needs to access diced to get the per-VM secret that
it uses to encrypt/decrypt the instance disk. This is not trivial
because previously diced (and servicemanager it depends on) were not
bootstrap processes, which means they can start only after APEXes are
activated. However, microdroid_manager can't do that before the instance
disk is decrypted. So, there's a circular dependency between
microdroid_manager and diced.

This CL fixes the issue by making diced and servicemanager bootstrap
processes. They now can start before APEXes are activated. The start of
microdroid_manager is moved to after diced.

Bug: 214231981
Test: run microdroid

Change-Id: I8ada5324000f9731a5709982fbb45cbf101f94c6