Android SystemServer学习

Linux内核启动后，Android系统启动有4个步骤；

(1)init进程启动

(2)Native服务启动

(3)System Server及Java服务启动

(4)Home启动

Init进程启动后，将根据init.rc及initXXX.rc的内容执行一系列的命令，包括创建mount目录，安装文件系统，设置属性，启动adb,systemserver,mediaserver

system/core/rootdir/init.rc 内容如下：

# setup the global environment                 //设置环境变量
    export PATH /sbin:/vendor/bin:/system/sbin:/system/bin:/system/xbin
    export LD_LIBRARY_PATH /vendor/lib:/system/lib
...
    # Filesystem image public mount points.    //mount文件系统
    mkdir /mnt/obb 0700 root system
    mount tmpfs tmpfs /mnt/obb mode=0755,gid=1000
...

# Define the oom_adj values for the classes of processes that can be
# killed by the kernel.  These are used in ActivityManagerService.
    setprop ro.FOREGROUND_APP_ADJ 0
... 

service servicemanager /system/bin/servicemanager           //在其他服务启动前必须启动ServiceManager
    class pre_zygote_services
    user system
    group system
    critical
    onrestart restart zygote
    onrestart restart media

service zygote /system/bin/app_process -Xzygote /system/bin --zygote --start-system-server   //启动SystemServer
    class zygote_services
    socket zygote stream 666
    onrestart write /sys/android_power/request_state wake
    onrestart write /sys/power/state on
    onrestart restart media
    onrestart restart netd

service media /system/bin/mediaserver    //启动mediaserver,启动多媒体相关的camera/playback等服务
    class zygote_services
    user media
    group system audio camera graphics inet net_bt net_bt_admin net_raw mot_drm input mot_tpapi mot_secclkd mot_pwric mot_caif
    ioprio rt 4

代码中service zygote /system/bin/app_process -Xzygote /system/bin --zygote --start-system-server将启动systemserver。

具体调用路径如下：

app_process主入口函数，启动system server时命令行为app_process -Xzygote /system/bin --zygote --start-system-server。

frameworks/base/cmds/app_process/app_main.cpp

int main(int argc, const char* const argv[])
{
...
    // Next arg is startup classname or "--zygote"
    if (i < argc) {
        arg = argv[i++];
        if (0 == strcmp("--zygote", arg)) { //命令行必须含 --zygote
            bool startSystemServer = (i < argc) ? 
                    strcmp(argv[i], "--start-system-server") == 0 : false; //命令行是否含--start-system-server
            setArgv0(argv0, "zygote");
            set_process_name("zygote");
            runtime.start("com.android.internal.os.ZygoteInit",
                startSystemServer);          //此处启动systemserver
        } else {
...
}

启动ZygoteInit进程，以后所有的java进程均须通过此进程fork而成。

frameworks/base/core/jni/AndroidRuntime.cpp

void AndroidRuntime::start(const char* className, const bool startSystemServer)
{
...
    /* start the virtual machine */
    if (startVm(&mJavaVM, &env) != 0)
        goto bail;

    /*
     * Register android functions.
     */
    if (startReg(env) < 0) {
        LOGE("Unable to register all android natives\n");
        goto bail;
    }
...
    if (startClass == NULL) {
        LOGE("JavaVM unable to locate class '%s'\n", slashClassName);
        /* keep going */
    } else {
        startMeth = env->GetStaticMethodID(startClass, "main",
            "([Ljava/lang/String;)V");
        if (startMeth == NULL) {
            LOGE("JavaVM unable to find main() in '%s'\n", className);
            /* keep going */
        } else {
            env->CallStaticVoidMethod(startClass, startMeth, strArray); //调用com.android.internal.os.ZygoteInit的main()方法
        }
    }

bail:
    free(slashClassName);
}

ZygoteInit进程入口函数：

frameworks/base/core/java/com/android/internal/os/ZygoteInit.java

    public static void main(String argv[]) {
        try {
            VMRuntime.getRuntime().setMinimumHeapSize(5 * 1024 * 1024);
...            registerZygoteSocket();
...            preloadClasses();
...            preloadResources();
            // Do an initial gc to clean up after startup
            gc();
...
            if (argv[1].equals("true")) { //只支持true参数
                startSystemServer();       //此处启动systemserver
            }
...
            if (ZYGOTE_FORK_MODE) { //目前为false
                runForkMode();
            } else {
                runSelectLoopMode(); //将在Loop中顺序处理以后的For请求
            }

            closeServerSocket();
        } catch (MethodAndArgsCaller caller) {
            caller.run();
        } catch (RuntimeException ex) {
            Log.e(TAG, "Zygote died with exception", ex);
            closeServerSocket();
            throw ex;
        }
    }

启动system server。

    private static boolean startSystemServer()
            throws MethodAndArgsCaller, RuntimeException {
        /* Hardcoded command line to start the system server */
        String args[] = {
            "--setuid=1000",
            "--setgi