1#
2# Copyright (C) 2019 The Android Open Source Project
3#
4# Licensed under the Apache License, Version 2.0 (the "License");
5# you may not use this file except in compliance with the License.
6# You may obtain a copy of the License at
7#
8#      http://www.apache.org/licenses/LICENSE-2.0
9#
10# Unless required by applicable law or agreed to in writing, software
11# distributed under the License is distributed on an "AS IS" BASIS,
12# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13# See the License for the specific language governing permissions and
14# limitations under the License.
15#
16
17############################################################
18# Internal build rules for APPS prebuilt modules
19############################################################
20
21ifneq (APPS,$(LOCAL_MODULE_CLASS))
22$(call pretty-error,app_prebuilt_internal.mk is for APPS modules only)
23endif
24
25ifdef LOCAL_COMPRESSED_MODULE
26  ifneq (true,$(LOCAL_COMPRESSED_MODULE))
27    $(call pretty-error, Unknown value for LOCAL_COMPRESSED_MODULE $(LOCAL_COMPRESSED_MODULE))
28  endif
29  LOCAL_BUILT_MODULE_STEM := package.apk.gz
30  ifndef LOCAL_INSTALLED_MODULE_STEM
31    PACKAGES.$(LOCAL_MODULE).COMPRESSED := gz
32    LOCAL_INSTALLED_MODULE_STEM := $(LOCAL_MODULE).apk.gz
33  endif
34else  # LOCAL_COMPRESSED_MODULE
35  LOCAL_BUILT_MODULE_STEM := package.apk
36  ifndef LOCAL_INSTALLED_MODULE_STEM
37    LOCAL_INSTALLED_MODULE_STEM := $(LOCAL_MODULE).apk
38  endif
39endif  # LOCAL_COMPRESSED_MODULE
40
41include $(BUILD_SYSTEM)/base_rules.mk
42built_module := $(LOCAL_BUILT_MODULE)
43
44# Run veridex on product, system_ext and vendor modules.
45# We skip it for unbundled app builds where we cannot build veridex.
46module_run_appcompat :=
47ifeq (true,$(non_system_module))
48ifeq (,$(TARGET_BUILD_APPS))  # ! unbundled app build
49ifneq ($(UNSAFE_DISABLE_HIDDENAPI_FLAGS),true)
50  module_run_appcompat := true
51endif
52endif
53endif
54
55PACKAGES.$(LOCAL_MODULE).OVERRIDES := $(strip $(LOCAL_OVERRIDES_PACKAGES))
56
57my_extract_apk := $(strip $(LOCAL_EXTRACT_APK))
58
59# Select dpi-specific source
60ifdef LOCAL_DPI_VARIANTS
61my_dpi := $(firstword $(filter $(LOCAL_DPI_VARIANTS),$(PRODUCT_AAPT_PREF_CONFIG) $(PRODUCT_AAPT_PREBUILT_DPI)))
62ifdef my_dpi
63ifdef LOCAL_DPI_FILE_STEM
64my_prebuilt_dpi_file_stem := $(LOCAL_DPI_FILE_STEM)
65else
66my_prebuilt_dpi_file_stem := $(LOCAL_MODULE)_%.apk
67endif
68my_prebuilt_src_file := $(dir $(my_prebuilt_src_file))$(subst %,$(my_dpi),$(my_prebuilt_dpi_file_stem))
69
70ifneq ($(strip $(LOCAL_EXTRACT_DPI_APK)),)
71my_extract_apk := $(subst %,$(my_dpi),$(LOCAL_EXTRACT_DPI_APK))
72endif  # LOCAL_EXTRACT_DPI_APK
73endif  # my_dpi
74endif  # LOCAL_DPI_VARIANTS
75
76ifdef my_extract_apk
77my_extracted_apk := $(intermediates)/extracted.apk
78
79$(my_extracted_apk): PRIVATE_EXTRACT := $(my_extract_apk)
80$(my_extracted_apk): $(my_prebuilt_src_file)
81	@echo Extract APK: $@
82	$(hide) mkdir -p $(dir $@) && rm -f $@
83	$(hide) unzip -p $< $(PRIVATE_EXTRACT) >$@
84
85my_prebuilt_src_file := $(my_extracted_apk)
86my_extracted_apk :=
87my_extract_apk :=
88ifeq ($(PRODUCT_ALWAYS_PREOPT_EXTRACTED_APK),true)
89# If the product property is set, always preopt for extracted modules to prevent executing out of
90# the APK.
91my_preopt_for_extracted_apk := true
92endif
93endif
94
95rs_compatibility_jni_libs :=
96include $(BUILD_SYSTEM)/install_jni_libs.mk
97
98ifeq ($(LOCAL_CERTIFICATE),EXTERNAL)
99  # The magic string "EXTERNAL" means this package will be signed with
100  # the default dev key throughout the build process, but we expect
101  # the final package to be signed with a different key.
102  #
103  # This can be used for packages where we don't have access to the
104  # keys, but want the package to be predexopt'ed.
105  LOCAL_CERTIFICATE := $(DEFAULT_SYSTEM_DEV_CERTIFICATE)
106  PACKAGES.$(LOCAL_MODULE).EXTERNAL_KEY := 1
107
108  $(built_module) : $(LOCAL_CERTIFICATE).pk8 $(LOCAL_CERTIFICATE).x509.pem
109  $(built_module) : PRIVATE_PRIVATE_KEY := $(LOCAL_CERTIFICATE).pk8
110  $(built_module) : PRIVATE_CERTIFICATE := $(LOCAL_CERTIFICATE).x509.pem
111endif
112ifeq ($(LOCAL_CERTIFICATE),)
113  # It is now a build error to add a prebuilt .apk without
114  # specifying a key for it.
115  $(error No LOCAL_CERTIFICATE specified for prebuilt "$(my_prebuilt_src_file)")
116else ifeq ($(LOCAL_CERTIFICATE),PRESIGNED)
117  # The magic string "PRESIGNED" means this package is already checked
118  # signed with its release key.
119  #
120  # By setting .CERTIFICATE but not .PRIVATE_KEY, this package will be
121  # mentioned in apkcerts.txt (with certificate set to "PRESIGNED")
122  # but the dexpreopt process will not try to re-sign the app.
123  PACKAGES.$(LOCAL_MODULE).CERTIFICATE := PRESIGNED
124  PACKAGES := $(PACKAGES) $(LOCAL_MODULE)
125else
126  # If this is not an absolute certificate, assign it to a generic one.
127  ifeq ($(dir $(strip $(LOCAL_CERTIFICATE))),./)
128    LOCAL_CERTIFICATE := $(dir $(DEFAULT_SYSTEM_DEV_CERTIFICATE))$(LOCAL_CERTIFICATE)
129  endif
130
131  PACKAGES.$(LOCAL_MODULE).PRIVATE_KEY := $(LOCAL_CERTIFICATE).pk8
132  PACKAGES.$(LOCAL_MODULE).CERTIFICATE := $(LOCAL_CERTIFICATE).x509.pem
133  PACKAGES := $(PACKAGES) $(LOCAL_MODULE)
134
135  $(built_module) : $(LOCAL_CERTIFICATE).pk8 $(LOCAL_CERTIFICATE).x509.pem
136  $(built_module) : PRIVATE_PRIVATE_KEY := $(LOCAL_CERTIFICATE).pk8
137  $(built_module) : PRIVATE_CERTIFICATE := $(LOCAL_CERTIFICATE).x509.pem
138
139  additional_certificates := $(foreach c,$(LOCAL_ADDITIONAL_CERTIFICATES), $(c).x509.pem $(c).pk8)
140  $(built_module): $(additional_certificates)
141  $(built_module): PRIVATE_ADDITIONAL_CERTIFICATES := $(additional_certificates)
142
143  $(built_module): $(LOCAL_CERTIFICATE_LINEAGE)
144  $(built_module): PRIVATE_CERTIFICATE_LINEAGE := $(LOCAL_CERTIFICATE_LINEAGE)
145endif
146
147ifneq ($(LOCAL_MODULE_STEM),)
148  PACKAGES.$(LOCAL_MODULE).STEM := $(LOCAL_MODULE_STEM)
149else
150  PACKAGES.$(LOCAL_MODULE).STEM := $(LOCAL_MODULE)
151endif
152
153include $(BUILD_SYSTEM)/app_certificate_validate.mk
154
155# Set a actual_partition_tag (calculated in base_rules.mk) for the package.
156PACKAGES.$(LOCAL_MODULE).PARTITION := $(actual_partition_tag)
157
158# Disable dex-preopt of prebuilts to save space, if requested.
159ifndef LOCAL_DEX_PREOPT
160ifeq ($(DONT_DEXPREOPT_PREBUILTS),true)
161LOCAL_DEX_PREOPT := false
162endif
163endif
164
165# If the module is a compressed module, we don't pre-opt it because its final
166# installation location will be the data partition.
167ifdef LOCAL_COMPRESSED_MODULE
168LOCAL_DEX_PREOPT := false
169endif
170
171my_dex_jar := $(my_prebuilt_src_file)
172dex_preopt_profile_src_file := $(my_prebuilt_src_file)
173
174#######################################
175# defines built_odex along with rule to install odex
176my_manifest_or_apk := $(my_prebuilt_src_file)
177include $(BUILD_SYSTEM)/dex_preopt_odex_install.mk
178my_manifest_or_apk :=
179#######################################
180ifneq ($(LOCAL_REPLACE_PREBUILT_APK_INSTALLED),)
181# There is a replacement for the prebuilt .apk we can install without any processing.
182$(built_module) : $(LOCAL_REPLACE_PREBUILT_APK_INSTALLED)
183	$(transform-prebuilt-to-target)
184
185else  # ! LOCAL_REPLACE_PREBUILT_APK_INSTALLED
186
187# If the SDK version is 30 or higher, the apk is signed with a v2+ scheme.
188# Altering it will invalidate the signature. Just do error checks instead.
189do_not_alter_apk :=
190ifeq (PRESIGNED,$(LOCAL_CERTIFICATE))
191  ifneq (,$(LOCAL_SDK_VERSION))
192    ifeq ($(call math_is_number,$(LOCAL_SDK_VERSION)),true)
193      ifeq ($(call math_gt,$(LOCAL_SDK_VERSION),29),true)
194        do_not_alter_apk := true
195      endif
196    endif
197    # TODO: Add system_current after fixing the existing modules.
198    ifneq ($(filter current test_current core_current,$(LOCAL_SDK_VERSION)),)
199        do_not_alter_apk := true
200    endif
201  endif
202endif
203
204ifeq ($(do_not_alter_apk),true)
205$(built_module) : $(my_prebuilt_src_file) | $(ZIPALIGN)
206	$(transform-prebuilt-to-target)
207	$(check-jni-dex-compression)
208	$(check-package-alignment)
209else
210# Sign and align non-presigned .apks.
211# The embedded prebuilt jni to uncompress.
212ifeq ($(LOCAL_CERTIFICATE),PRESIGNED)
213# For PRESIGNED apks we must uncompress every .so file:
214# even if the .so file isn't for the current TARGET_ARCH,
215# we can't strip the file.
216embedded_prebuilt_jni_libs :=
217endif
218ifndef embedded_prebuilt_jni_libs
219# No LOCAL_PREBUILT_JNI_LIBS, uncompress all.
220embedded_prebuilt_jni_libs :=
221endif
222$(built_module): PRIVATE_EMBEDDED_JNI_LIBS := $(embedded_prebuilt_jni_libs)
223
224ifdef LOCAL_COMPRESSED_MODULE
225$(built_module) : $(MINIGZIP)
226endif
227
228ifeq ($(module_run_appcompat),true)
229$(built_module) : $(appcompat-files)
230$(LOCAL_BUILT_MODULE): PRIVATE_INSTALLED_MODULE := $(LOCAL_INSTALLED_MODULE)
231endif
232
233ifeq ($(module_run_appcompat),true)
234$(built_module) : $(AAPT2)
235endif
236$(built_module) : $(my_prebuilt_src_file) | $(ZIPALIGN) $(ZIP2ZIP) $(SIGNAPK_JAR) $(SIGNAPK_JNI_LIBRARY_PATH)
237	$(transform-prebuilt-to-target)
238	$(uncompress-prebuilt-embedded-jni-libs)
239	$(remove-unwanted-prebuilt-embedded-jni-libs)
240ifeq (true, $(LOCAL_UNCOMPRESS_DEX))
241	$(uncompress-dexs)
242endif  # LOCAL_UNCOMPRESS_DEX
243ifneq ($(LOCAL_CERTIFICATE),PRESIGNED)
244ifeq ($(module_run_appcompat),true)
245	$(call appcompat-header, aapt2)
246	$(run-appcompat)
247endif  # module_run_appcompat
248	$(sign-package)
249	# No need for align-package because sign-package takes care of alignment
250else  # LOCAL_CERTIFICATE == PRESIGNED
251	$(align-package)
252endif  # LOCAL_CERTIFICATE
253ifdef LOCAL_COMPRESSED_MODULE
254	$(compress-package)
255endif  # LOCAL_COMPRESSED_MODULE
256endif  # ! do_not_alter_apk
257endif  # ! LOCAL_REPLACE_PREBUILT_APK_INSTALLED
258
259
260###############################
261## Install split apks.
262ifdef LOCAL_PACKAGE_SPLITS
263ifdef LOCAL_COMPRESSED_MODULE
264$(error $(LOCAL_MODULE): LOCAL_COMPRESSED_MODULE is not currently supported for split installs)
265endif  # LOCAL_COMPRESSED_MODULE
266
267# LOCAL_PACKAGE_SPLITS is a list of apks to be installed.
268built_apk_splits := $(addprefix $(intermediates)/,$(notdir $(LOCAL_PACKAGE_SPLITS)))
269installed_apk_splits := $(addprefix $(my_module_path)/,$(notdir $(LOCAL_PACKAGE_SPLITS)))
270
271# Rules to sign the split apks.
272my_src_dir := $(sort $(dir $(LOCAL_PACKAGE_SPLITS)))
273ifneq (1,$(words $(my_src_dir)))
274$(error You must put all the split source apks in the same folder: $(LOCAL_PACKAGE_SPLITS))
275endif
276my_src_dir := $(LOCAL_PATH)/$(my_src_dir)
277
278$(built_apk_splits) : $(LOCAL_CERTIFICATE).pk8 $(LOCAL_CERTIFICATE).x509.pem
279$(built_apk_splits) : PRIVATE_PRIVATE_KEY := $(LOCAL_CERTIFICATE).pk8
280$(built_apk_splits) : PRIVATE_CERTIFICATE := $(LOCAL_CERTIFICATE).x509.pem
281$(built_apk_splits) : $(intermediates)/%.apk : $(my_src_dir)/%.apk
282	$(copy-file-to-new-target)
283	$(sign-package)
284
285# Rules to install the split apks.
286$(installed_apk_splits) : $(my_module_path)/%.apk : $(intermediates)/%.apk
287	@echo "Install: $@"
288	$(copy-file-to-new-target)
289
290# Register the additional built and installed files.
291ALL_MODULES.$(my_register_name).INSTALLED += $(installed_apk_splits)
292ALL_MODULES.$(my_register_name).BUILT_INSTALLED += \
293  $(foreach s,$(LOCAL_PACKAGE_SPLITS),$(intermediates)/$(notdir $(s)):$(my_module_path)/$(notdir $(s)))
294
295# Make sure to install the splits when you run "make <module_name>".
296$(my_all_targets): $(installed_apk_splits)
297
298endif # LOCAL_PACKAGE_SPLITS
299
300