盒子
盒子
文章目录
  1. run
    1. SystemContext
    2. SystemServiceManager
  2. startBootstrapServices
  3. startCoreServices
  4. startOtherServices
  5. 项目

Android SystemServer启动(二)

2021.01.04 Rouse android  热度 ℃

Android init 启动

Android Linux Zygote启动

Android Java Zygote启动

Android SystemServer启动(一)

继续上篇文章的SystemServer启动分析。

此次分析过程基于Android 10.0

run

在之前已经分析到，通过SystemServer的run方法进入到SystemServer内部逻辑。

所以我们直接来看run方法

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
private void run() {
    try {
        traceBeginAndSlog("InitBeforeStartServices");
        ...
        ...
        
        // 创建Looper
        Looper.prepareMainLooper();
        Looper.getMainLooper().setSlowLogThresholdMs(
                SLOW_DISPATCH_THRESHOLD_MS, SLOW_DELIVERY_THRESHOLD_MS);
 
        // 初始化native service
        System.loadLibrary("android_servers");
 
        performPendingShutdown();
 
        // 创建system context
        createSystemContext();
 
        // 创建SystemServiceManager
        mSystemServiceManager = new SystemServiceManager(mSystemContext);
        mSystemServiceManager.setStartInfo(mRuntimeRestart,
                mRuntimeStartElapsedTime, mRuntimeStartUptime);
        
        // 添加到本地LocalServices中，以便后续获取对应的服务对象
        LocalServices.addService(SystemServiceManager.class, mSystemServiceManager);
        SystemServerInitThreadPool.get();
    } finally {
        traceEnd();  // InitBeforeStartServices
    }
 
    // 启动各项services
    try {
        traceBeginAndSlog("StartServices");
        startBootstrapServices();
        startCoreServices();
        startOtherServices();
        SystemServerInitThreadPool.shutdown();
    } catch (Throwable ex) {
        Slog.e("System", "******************************************");
        Slog.e("System", "************ Failure starting system services", ex);
        throw ex;
    } finally {
        traceEnd();
    }
 
    StrictMode.initVmDefaults(null);
 
    if (!mRuntimeRestart && !isFirstBootOrUpgrade()) {
        int uptimeMillis = (int) SystemClock.elapsedRealtime();
        MetricsLogger.histogram(null, "boot_system_server_ready", uptimeMillis);
        final int MAX_UPTIME_MILLIS = 60 * 1000;
        if (uptimeMillis > MAX_UPTIME_MILLIS) {
            Slog.wtf(SYSTEM_SERVER_TIMING_TAG,
                    "SystemServer init took too long. uptimeMillis=" + uptimeMillis);
        }
    }
 
    // 开启loop循环，等待消息的来临
    Looper.loop();
    throw new RuntimeException("Main thread loop unexpectedly exited");
}

在SystemServer的run方法中主要做的事情是：

  1. 创建当前线程的Looper
  2. 加载native services原生库android_servers
  3. 创建SystemContext，通过ActivityThread来获取SystemContext
  4. 创建SystemServiceManager，用来启动后续的各项服务
  5. 开启各项服务
  6. 开启Looper循环，等待消息的来临并执行

SystemContext

其中SystemContext的创建是通过ActivityThread来获取的

1
2
3
4
5
6
7
8
private void createSystemContext() {
    ActivityThread activityThread = ActivityThread.systemMain();
    mSystemContext = activityThread.getSystemContext();
    mSystemContext.setTheme(DEFAULT_SYSTEM_THEME);
 
    final Context systemUiContext = activityThread.getSystemUiContext();
    systemUiContext.setTheme(DEFAULT_SYSTEM_THEME);
}

最终获取到的SystemContext是由ContextImpl创建的

1
2
3
4
5
6
7
8
public ContextImpl getSystemContext() {
    synchronized (this) {
        if (mSystemContext == null) {
            mSystemContext = ContextImpl.createSystemContext(this);
        }
        return mSystemContext;
    }
}

SystemServiceManager

它是SystemServer的服务大管家，提供启动服务的相关方法。

主要涉及的方法有

  1. startService: 通过反射创建相关服务，并且调用对应服务的onStart()方法来开启服务
  2. startBootPhase: 开启特殊的启动阶段节点，各项服务会根据不同的阶段节点执行不同的逻辑。

启动的阶段节点分别为：

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
// 启动阶段，初始化一些默认展示
public static final int PHASE_WAIT_FOR_DEFAULT_DISPLAY = 100;
 
// 该启动阶段将会锁定setting数据
public static final int PHASE_LOCK_SETTINGS_READY = 480;
 
// 该启动阶段将会调用核心的system services，例如PowerManager与PackageManager
public static final int PHASE_SYSTEM_SERVICES_READY = 500;
 
// 该启动阶段将会调用设备特殊服务
public static final int PHASE_DEVICE_SPECIFIC_SERVICES_READY = 520;
 
// 该启动阶段将会将会发送服务广播
public static final int PHASE_ACTIVITY_MANAGER_READY = 550;
 
// 该启动阶段将会启动不绑定三方app
public static final int PHASE_THIRD_PARTY_APPS_CAN_START = 600;
 
// 该启动阶段标志着启动完成，用户可以进行设备交互，应用桌面已经启动
public static final int PHASE_BOOT_COMPLETED = 1000;

这些启动阶段会穿插在各项的服务启动序列中，每一个启动阶段节点的插入，都会伴随着该启动阶段节点之前的服务执行相关逻辑。

所以这里启动阶段节点相对于标识或者说依赖关系，即后续的启动阶段需要依赖于前面某些服务的特色处理逻辑之后才能进行。

而这些启动阶段的节点体现都分布在这些方法中

1
2
3
4
traceBeginAndSlog("StartServices");
startBootstrapServices();
startCoreServices();
startOtherServices();

具体的节点插入时机为

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
private void startBootstrapServices() {
        mSystemServiceManager.startBootPhase(SystemService.PHASE_WAIT_FOR_DEFAULT_DISPLAY);
}
private void startCoreServices() {
        ...
}
 
private void startOtherServices() {
        mSystemServiceManager.startBootPhase(SystemService.PHASE_LOCK_SETTINGS_READY);
 
        mSystemServiceManager.startBootPhase(SystemService.PHASE_SYSTEM_SERVICES_READY);
 
        mSystemServiceManager.startBootPhase(SystemService.PHASE_DEVICE_SPECIFIC_SERVICES_READY);
 
        mActivityManagerService.systemReady(() -> {
            mSystemServiceManager.startBootPhase(
                    SystemService.PHASE_ACTIVITY_MANAGER_READY);        
             
            mSystemServiceManager.startBootPhase(
                    SystemService.PHASE_THIRD_PARTY_APPS_CAN_START);
        }
}

对应的响应各个阶段的处理逻辑是在对应service的onBootPhase()方法中

1
2
3
public void onBootPhase(int phase) {
	...
}

下面我们来看下各个阶段都启动了哪些服务。

startBootstrapServices

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
private void startBootstrapServices() {
    final String TAG_SYSTEM_CONFIG = "ReadingSystemConfig";
    traceBeginAndSlog(TAG_SYSTEM_CONFIG);
    SystemServerInitThreadPool.get().submit(SystemConfig::getInstance, TAG_SYSTEM_CONFIG);
    traceEnd();
 
    // 启动Installer
    Installer installer = mSystemServiceManager.startService(Installer.class);
 
    // 启动DeviceIdentifiersPolicyService
    mSystemServiceManager.startService(DeviceIdentifiersPolicyService.class);
 
    // 启动ActivityManagerService
    mActivityManagerService = mSystemServiceManager.startService(
            ActivityManagerService.Lifecycle.class).getService();
    mActivityManagerService.setSystemServiceManager(mSystemServiceManager);
    mActivityManagerService.setInstaller(installer);
 
    // 启动PowerManagerService
    mPowerManagerService = mSystemServiceManager.startService(PowerManagerService.class);
 
    // 初始化PowerManager
    mActivityManagerService.initPowerManagement();
 
    // 启动RecoverySystemService
    mSystemServiceManager.startService(RecoverySystemService.class);
 
    RescueParty.noteBoot(mSystemContext);
 
    // 启动LightsService
    mSystemServiceManager.startService(LightsService.class);
 
    // 启动SidekickService
    if (SystemProperties.getBoolean("config.enable_sidekick_graphics", false)) {
        mSystemServiceManager.startService(WEAR_SIDEKICK_SERVICE_CLASS);
    }
 
    // 启动DisplayManagerService
    mDisplayManagerService = mSystemServiceManager.startService(DisplayManagerService.class);
 
    // 插入启动阶段节点，执行对应的节点逻辑
    mSystemServiceManager.startBootPhase(SystemService.PHASE_WAIT_FOR_DEFAULT_DISPLAY);
    
    ...
    ...
}

在开始插入启动阶段节点之前，也可以称之为BootPhase 0，启动的服务有：

1
2
3
4
5
6
7
8
Installer
DeviceIdentifiersPolicyService
UriGrantsManagerService
ActivityManagerService
PowerManagerService
RecoverySystemService
LightsService
DisplayManagerService

由于PackageManager启动需要DisplayManagerService的相关信息，所以设置BootPhase 100，执行DisplayManagerService中的onBootPhase方法来处理BootPhase 100的逻辑

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
public void onBootPhase(int phase) {
    if (phase == PHASE_WAIT_FOR_DEFAULT_DISPLAY) {
        synchronized (mSyncRoot) {
            long timeout = SystemClock.uptimeMillis()
                    + mInjector.getDefaultDisplayDelayTimeout();
            while (mLogicalDisplays.get(Display.DEFAULT_DISPLAY) == null ||
                    mVirtualDisplayAdapter == null) {
                long delay = timeout - SystemClock.uptimeMillis();
                if (delay <= 0) {
                    throw new RuntimeException("Timeout waiting for default display "
                            + "to be initialized. DefaultDisplay="
                            + mLogicalDisplays.get(Display.DEFAULT_DISPLAY)
                            + ", mVirtualDisplayAdapter=" + mVirtualDisplayAdapter);
                }
                if (DEBUG) {
                    Slog.d(TAG, "waitForDefaultDisplay: waiting, timeout=" + delay);
                }
                try {
                    mSyncRoot.wait(delay);
                } catch (InterruptedException ex) {
                }
            }
        }
    }
}

处理完之后继续启动PackageManagerService与其他的服务。

从BootPhase 100到BootPhase 480会启动大量的服务。

包括初始化的服务、核心服务与其他服务。分别从startBootstrapServices、startCoreServices到startOtherServices。

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
private void startBootstrapServices() {
    ...
    ...
 
    // BootPhase 100
 
    // 启动PackageManagerService
    try {
        Watchdog.getInstance().pauseWatchingCurrentThread("packagemanagermain");
        mPackageManagerService = PackageManagerService.main(mSystemContext, installer,
                mFactoryTestMode != FactoryTest.FACTORY_TEST_OFF, mOnlyCore);
    } finally {
        Watchdog.getInstance().resumeWatchingCurrentThread("packagemanagermain");
    }
    mFirstBoot = mPackageManagerService.isFirstBoot();
    mPackageManager = mSystemContext.getPackageManager();
 
    // 启动UserManagerService，创建/data/user/ 目录
    mSystemServiceManager.startService(UserManagerService.LifeCycle.class);
 
    // 设置AMS
    mActivityManagerService.setSystemProcess();
 
    // 启动OverlayManagerService
    mSystemServiceManager.startService(new OverlayManagerService(mSystemContext, installer));
 
    // 启动SensorPrivacyService，传感器
    mSystemServiceManager.startService(new SensorPrivacyService(mSystemContext));
 
    ...
}

在BootPhase 100阶段，startBootstrapServices启动以下服务

1
2
3
4
PackageManagerService
UserManagerService
OverlayManagerService
SensorPrivacyService

随后进入startCoreServices

startCoreServices

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
private void startCoreServices() {
    // 启动BatterService, 管理电量，需要LightService
    mSystemServiceManager.startService(BatteryService.class);
 
    // 启动UsageStatsService，统计应用使用情况
    mSystemServiceManager.startService(UsageStatsService.class);
    mActivityManagerService.setUsageStatsManager(
            LocalServices.getService(UsageStatsManagerInternal.class));
 
    // 启动WebViewUpdateService, 管理WebView更新
    if (mPackageManager.hasSystemFeature(PackageManager.FEATURE_WEBVIEW)) {
        mWebViewUpdateService = mSystemServiceManager.startService(WebViewUpdateService.class);
    }
 
    // 启动CachedDeviceStateService, 缓存设备状态
    mSystemServiceManager.startService(CachedDeviceStateService.class);
 
    // 启动BinderCallsStatsService, 记录cpu在binder回调中花费的时间
    mSystemServiceManager.startService(BinderCallsStatsService.LifeCycle.class);
 
    // 启动LooperStatsService, 记录使用handler message花费的时间
    mSystemServiceManager.startService(LooperStatsService.Lifecycle.class);
 
    // 启动RollbackManagerService，管理apk回卷
    mSystemServiceManager.startService(RollbackManagerService.class);
 
    // 启动BugreportManagerService, 捕获bug的报告
    mSystemServiceManager.startService(BugreportManagerService.class);
 
    // 启动GpuService, 管理GPU
    mSystemServiceManager.startService(GpuService.class);
 
}
 
// BootPhase 100 启动的服务
UsageStatsService
WebViewUpdateService
CachedDeviceStateService
BinderCallsStatsService
LooperStatsService
RollbackManagerService
BugreportManagerService
GpuService

以上是启动的核心服务；继续进入startOtherServices

startOtherServices

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
private void startOtherServices() {
    final Context context = mSystemContext; // 获取Context
 
    try {
        ServiceManager.addService("sec_key_att_app_id_provider",
                new KeyAttestationApplicationIdProviderService(context));
 
        mSystemServiceManager.startService(KeyChainSystemService.class);
 
        ServiceManager.addService("scheduling_policy", new SchedulingPolicyService());
 
        mSystemServiceManager.startService(TelecomLoaderService.class);
 
        telephonyRegistry = new TelephonyRegistry(context);
        ServiceManager.addService("telephony.registry", telephonyRegistry);
 
        mEntropyMixer = new EntropyMixer(context);
 
        mContentResolver = context.getContentResolver(); // 获取ContentResolver
 
        mSystemServiceManager.startService(ACCOUNT_SERVICE_CLASS);
 
        mSystemServiceManager.startService(CONTENT_SERVICE_CLASS);
 
        mActivityManagerService.installSystemProviders(); // 安装系统Provider
 
        ...
 
        mSystemServiceManager.startService(new AlarmManagerService(context)); // 闹钟服务
 
        ...
 
        mActivityManagerService.setWindowManager(wm); // 设置WindowManager
 
        ...
 
    }
 
    ...
 
    // 进入安全模式
    if (safeMode) {
        mActivityManagerService.enterSafeMode();
    }
 
    ...
    ...
 
    // BootPhase  480
    mSystemServiceManager.startBootPhase(SystemService.PHASE_LOCK_SETTINGS_READY);
 
    // BootPhase 500
    mSystemServiceManager.startBootPhase(SystemService.PHASE_SYSTEM_SERVICES_READY);
 
 
    // BootPhase 520
    mSystemServiceManager.startBootPhase(SystemService.PHASE_DEVICE_SPECIFIC_SERVICES_READY);
 
    try {
        wm.systemReady();
    } catch (Throwable e) {
        reportWtf("making Window Manager Service ready", e);
    }
 
    if (safeMode) {
        mActivityManagerService.showSafeModeOverlay();
    }
 
    // 更新Configuration
    final Configuration config = wm.computeNewConfiguration(DEFAULT_DISPLAY);
    DisplayMetrics metrics = new DisplayMetrics();
    WindowManager w = (WindowManager) context.getSystemService(Context.WINDOW_SERVICE);
    w.getDefaultDisplay().getMetrics(metrics);
    context.getResources().updateConfiguration(config, metrics);
 
    final Theme systemTheme = context.getTheme();
    if (systemTheme.getChangingConfigurations() != 0) {
        systemTheme.rebase();
    }
 
    try {
        mPowerManagerService.systemReady(mActivityManagerService.getAppOpsService());
    } catch (Throwable e) {
        reportWtf("making Power Manager Service ready", e);
    }
 
    mSystemServiceManager.startService(PermissionPolicyService.class);
 
    mPackageManagerService.systemReady();
 
    ...
 
    mActivityManagerService.systemReady(() -> {
        
        // BootPhase 550
        mSystemServiceManager.startBootPhase(
                SystemService.PHASE_ACTIVITY_MANAGER_READY);
 
        try {
            mActivityManagerService.startObservingNativeCrashes();
        } catch (Throwable e) {
            reportWtf("observing native crashes", e);
        }
 
        traceBeginAndSlog("MakeConnectivityServiceReady");
        try {
            if (connectivityF != null) {
                connectivityF.systemReady();
            }
        } catch (Throwable e) {
            reportWtf("making Connectivity Service ready", e);
        }
 
        ...
        
        // BootPhase 600
        mSystemServiceManager.startBootPhase(
                SystemService.PHASE_THIRD_PARTY_APPS_CAN_START);
 
        try {
            if (locationF != null) {
                locationF.systemRunning();
            }
        } catch (Throwable e) {
            reportWtf("Notifying Location Service running", e);
        }
 
        try {
            if (countryDetectorF != null) {
                countryDetectorF.systemRunning();
            }
        } catch (Throwable e) {
            reportWtf("Notifying CountryDetectorService running", e);
        }
 
        ...
 
    }, BOOT_TIMINGS_TRACE_LOG);
 
}

在startOtherServices中启动了大量服务，总共差不多有80多种，这里就不一一列举出来。

我这里将其与BootPhase做了个归总，来看一下各个启动阶段节点都启动了哪些服务与对应服务的操作。

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
// BootPhase 100
KeyAttestationApplicationIdProviderService (startOtherServices)
KeyChainSystemService 
SchedulingPolicyService
TelecomLoaderService
TelephonyRegistry
EntropyMixer
AccountManagerService
ContentService
 
...(大量服务)
 
AppBindingService
 
BootPhase 480
 
BootPhase 500
 
PermissionPolicyService
DeviceSpecificServices(包含大量Service)
 
// 准备好 Power、Package与Diaplay服务
PowerManagerService.systemReady
PackageManagerService.systemReady
DisplayManagerService.systemReady
 
BootPhase 520
 
BootPhase 550
 
CarServiceHelperService
startSystemUi
 
// 准备好 Network、Ip、Connectivity服务
NetworkManagementService.systemReady
NetworkPolicyManagerService.systemReady
IpSecService.systemReady
NetworkStatsService.systemReady
ConnectivityService.systemReady
NetworkPolicyService.systemReady
 
 
BootPhase 600
  
NetworkStack
 
// 运行Location、CountryDetection、Network、Input、Telephoney、Media、Mms、Incident服务
LocationService.systemRunning
CountryDetectionService.systemRunning
NetworkTimeUpdateService.systemRunning
InputManagerService.systemRunning
TelephonyRegistry.systemRunning
MediaRouterService.systemRunning
MmsServiceBroker.systemRunning
IncidentDaemon.systemRunning

最后经过以上一系列的服务调用，会调用ActivityManagerService的finishBooting方法来执行最后一个BootPhase 1000。

1
2
3
4
5
6
7
8
final void finishBooting() {
    ...
 
    // BootPhase 1000
    mSystemServiceManager.startBootPhase(SystemService.PHASE_BOOT_COMPLETED);
 
    ...
}

至此，系统服务启动阶段完成就绪，system_server进程启动完成则进入Looper.loop()状态，等待消息队列MessageQueue中的消息到来，然后执行对应的Message。

以上是SystemService的启动过程，主要通过BootPhase 0 ~ BootPhase 1000来分别启动不同的Service，根据不同的BootPhase，相应的Service执行不同的逻辑。后续Service启动逻辑与执行逻辑可能依赖于之前的Service，而它们之间的依赖管理是通过BootPhase来建立的。

项目

android_startup: 提供一种在应用启动时能够更加简单、高效的方式来初始化组件，优化启动速度。不仅支持Jetpack App Startup的全部功能，还提供额外的同步与异步等待、线程控制与多进程支持等功能。

AwesomeGithub: 基于Github的客户端，纯练习项目，支持组件化开发，支持账户密码与认证登陆。使用Kotlin语言进行开发，项目架构是基于JetPack&DataBinding的MVVM；项目中使用了Arouter、Retrofit、Coroutine、Glide、Dagger与Hilt等流行开源技术。

flutter_github: 基于Flutter的跨平台版本Github客户端，与AwesomeGithub相对应。

android-api-analysis: 结合详细的Demo来全面解析Android相关的知识点, 帮助读者能够更快的掌握与理解所阐述的要点。

daily_algorithm: 每日一算法，由浅入深，欢迎加入一起共勉。

支持一下
赞赏是一门艺术