当前位置：首页 > news >正文

Android13-包安装器PackageInstaller-之apk安装流程

news 来源：原创 2025/9/21 4:12:50

目的

我们最终是为了搞明白安装的整个流程
通过安卓系统自带的包安装器来了解PMS 安装流程
实现需求定制：静默安装-安装界面定制-安装拦截验证。【核心目的】

安装流程和PMS了解不用多说了; 安装定制相关：
如

手机上安装时候弹出锁屏界面需要输入密码;
安装时候弹出密码框，让用户输入定制的特殊密码功能；
安装页面客制化需求

安装方式

当然正常的安装分为类型我其实理解为大概3种

无界面安装：PMS启动阶段比如系统第一次启动，所有内置app自动批量安装；我们重试系统app开发时候，或者内置系统apk开发时候，删除对应的目录下的apk和apk对应的/data/分区下的apk所有安装信息后，push
更新的apk到系统，重启。 apk 自动重新安装。
adb 安装： adb 命令安装，通过adb install 安装，依托守护进程来实现安装
点击安装或者调用方法安装：应用市场再下载完apk后自动进入进入包管理器进行安装；sd开或者外部存储中的安装包点击安装自动进入包管理器进行安装

以实际应用宝安装为导向，看流程

在这里插入图片描述

通过界面，通过日志打印，找到对应的应用，包名和类名，然后仔细分析源码。

 ACTIVITY com.android.packageinstaller/.InstallInstalling 31faba4 pid=3626ACTIVITY com.android.packageinstaller/.InstallSuccess 96d0412 pid=3626

其实就是要介绍和研究的 packageinstaller 包。

源码参考

PackageInstallerActivity

弹出安装弹框；根据条件弹出未知来源是否打开安装权限弹框

onCreate

初始化安装相关的对象

PackageManager mPm;
IPackageManager mIpm;
AppOpsManager mAppOpsManager;
UserManager mUserManager;
PackageInstaller mInstaller;

onResume

bindUi()

安装确认弹框

startInstall()

配置intent,跳转到 InstallInstalling 界面跳转

private void startInstall() {// Start subactivity to actually install the applicationIntent newIntent = new Intent();newIntent.putExtra(PackageUtil.INTENT_ATTR_APPLICATION_INFO,mPkgInfo.applicationInfo);newIntent.setData(mPackageURI);newIntent.setClass(this, InstallInstalling.class);String installerPackageName = getIntent().getStringExtra(Intent.EXTRA_INSTALLER_PACKAGE_NAME);if (mOriginatingURI != null) {newIntent.putExtra(Intent.EXTRA_ORIGINATING_URI, mOriginatingURI);}if (mReferrerURI != null) {newIntent.putExtra(Intent.EXTRA_REFERRER, mReferrerURI);}if (mOriginatingUid != PackageInstaller.SessionParams.UID_UNKNOWN) {newIntent.putExtra(Intent.EXTRA_ORIGINATING_UID, mOriginatingUid);}if (installerPackageName != null) {newIntent.putExtra(Intent.EXTRA_INSTALLER_PACKAGE_NAME,installerPackageName);}if (getIntent().getBooleanExtra(Intent.EXTRA_RETURN_RESULT, false)) {newIntent.putExtra(Intent.EXTRA_RETURN_RESULT, true);}newIntent.addFlags(Intent.FLAG_ACTIVITY_FORWARD_RESULT);if (mLocalLOGV) Log.i(TAG, "downloaded app uri=" + mPackageURI);startActivity(newIntent);finish();}

checkIfAllowedAndInitiateInstall

private void checkIfAllowedAndInitiateInstall() {// Check for install apps user restriction first.final int installAppsRestrictionSource = mUserManager.getUserRestrictionSource(UserManager.DISALLOW_INSTALL_APPS, Process.myUserHandle());if ((installAppsRestrictionSource & UserManager.RESTRICTION_SOURCE_SYSTEM) != 0) {if (mLocalLOGV) Log.i(TAG, "install not allowed: " + UserManager.DISALLOW_INSTALL_APPS);showDialogInner(DLG_INSTALL_APPS_RESTRICTED_FOR_USER);return;} else if (installAppsRestrictionSource != UserManager.RESTRICTION_NOT_SET) {if (mLocalLOGV) {Log.i(TAG, "install not allowed by admin; showing "+ Settings.ACTION_SHOW_ADMIN_SUPPORT_DETAILS);}startActivity(new Intent(Settings.ACTION_SHOW_ADMIN_SUPPORT_DETAILS));finish();return;}if (mAllowUnknownSources || !isInstallRequestFromUnknownSource(getIntent())) {if (mLocalLOGV) Log.i(TAG, "install allowed");initiateInstall();} else {// Check for unknown sources restrictions.final int unknownSourcesRestrictionSource = mUserManager.getUserRestrictionSource(UserManager.DISALLOW_INSTALL_UNKNOWN_SOURCES, Process.myUserHandle());final int unknownSourcesGlobalRestrictionSource = mUserManager.getUserRestrictionSource(UserManager.DISALLOW_INSTALL_UNKNOWN_SOURCES_GLOBALLY, Process.myUserHandle());final int systemRestriction = UserManager.RESTRICTION_SOURCE_SYSTEM& (unknownSourcesRestrictionSource | unknownSourcesGlobalRestrictionSource);if (systemRestriction != 0) {if (mLocalLOGV) Log.i(TAG, "Showing DLG_UNKNOWN_SOURCES_RESTRICTED_FOR_USER");showDialogInner(DLG_UNKNOWN_SOURCES_RESTRICTED_FOR_USER);} else if (unknownSourcesRestrictionSource != UserManager.RESTRICTION_NOT_SET) {startAdminSupportDetailsActivity(UserManager.DISALLOW_INSTALL_UNKNOWN_SOURCES);} else if (unknownSourcesGlobalRestrictionSource != UserManager.RESTRICTION_NOT_SET) {startAdminSupportDetailsActivity(UserManager.DISALLOW_INSTALL_UNKNOWN_SOURCES_GLOBALLY);} else {handleUnknownSources();}}}

InstallInstalling

看类注释：

/*** Send package to the package manager and handle results from package manager. Once the* installation succeeds, start {@link InstallSuccess} or {@link InstallFailed}.* <p>This has two phases: First send the data to the package manager, then wait until the package* manager processed the result.</p>*/

从类注释上看，做了3个动作：

将包发送到管理器进行安装，其实就是将安装包发送个系统PMS进行安装
等待安装结果
回调安装结果，成功就跳转到成功界面，失败就跳转到失败界面

下面我们具体看看做了哪些具体工作

注册回调监听 InstallEventReceiver.addObserver

在onCreate 方法中，看addObserver 方法
看源码注释：为安装结果注册监听，可能回调直到结果分发回调回来

 Reregister for result; might instantly call back if result was delivered while// Reregister for result; might instantly call back if result was delivered while// activity was destroyedtry {InstallEventReceiver.addObserver(this, mInstallId,this::launchFinishBasedOnResult);} catch (EventResultPersister.OutOfIdsException e) {// Does not happen
}

安装结果回调 launchFinishBasedOnResult

安装成功和失败的回调

  /*** Launch the appropriate finish activity (success or failed) for the installation result.** @param statusCode    The installation result.* @param legacyStatus  The installation as used internally in the package manager.* @param statusMessage The detailed installation result.*/private void launchFinishBasedOnResult(int statusCode, int legacyStatus, String statusMessage) {if (statusCode == PackageInstaller.STATUS_SUCCESS) {launchSuccess();} else {launchFailure(statusCode, legacyStatus, statusMessage);}}

根据结果跳转到成功或失败的界面 InstallSuccess.class or InstallFailed.class

创建安装的session createSession 拼装 creassion的params


还是在onCreate 方法中看createSession 操作
mSessionId = getPackageManager().getPackageInstaller().createSession(params)

理解：createSession
我们很多地方其实都有Session 的概念，从后台开发服务器-浏览器的角度来说 Session 就是一次会话，在前端也可以这么理解
相机开发中，进行拍照录像也是一个会话Session 创建，也是需要params，然后commit 提交操作。

这里对createSession 的这个过程 贴上部分代码：PackageInstaller.SessionParams params = new PackageInstaller.SessionParams(PackageInstaller.SessionParams.MODE_FULL_INSTALL);final Uri referrerUri = getIntent().getParcelableExtra(Intent.EXTRA_REFERRER);params.setPackageSource(referrerUri != null ? PackageInstaller.PACKAGE_SOURCE_DOWNLOADED_FILE: PackageInstaller.PACKAGE_SOURCE_LOCAL_FILE);params.setInstallAsInstantApp(false);params.setReferrerUri(referrerUri);params.setOriginatingUri(getIntent().getParcelableExtra(Intent.EXTRA_ORIGINATING_URI));params.setOriginatingUid(getIntent().getIntExtra(Intent.EXTRA_ORIGINATING_UID,UID_UNKNOWN));params.setInstallerPackageName(getIntent().getStringExtra(Intent.EXTRA_INSTALLER_PACKAGE_NAME));params.setInstallReason(PackageManager.INSTALL_REASON_USER);File file = new File(mPackageURI.getPath());try {final ParseTypeImpl input = ParseTypeImpl.forDefaultParsing();final ParseResult<PackageLite> result = ApkLiteParseUtils.parsePackageLite(input.reset(), file, /* flags */ 0);if (result.isError()) {Log.e(LOG_TAG, "Cannot parse package " + file + ". Assuming defaults.");Log.e(LOG_TAG,"Cannot calculate installed size " + file + ". Try only apk size.");params.setSize(file.length());} else {final PackageLite pkg = result.getResult();params.setAppPackageName(pkg.getPackageName());params.setInstallLocation(pkg.getInstallLocation());params.setSize(InstallLocationUtils.calculateInstalledSize(pkg,params.abiOverride));}} catch (IOException e) {Log.e(LOG_TAG,"Cannot calculate installed size " + file + ". Try only apk size.");params.setSize(file.length());}try {mInstallId = InstallEventReceiver.addObserver(this, EventResultPersister.GENERATE_NEW_ID,this::launchFinishBasedOnResult);} catch (EventResultPersister.OutOfIdsException e) {launchFailure(PackageInstaller.STATUS_FAILURE,PackageManager.INSTALL_FAILED_INTERNAL_ERROR, null);}try {mSessionId = getPackageManager().getPackageInstaller().createSession(params);} catch (IOException e) {launchFailure(PackageInstaller.STATUS_FAILURE,PackageManager.INSTALL_FAILED_INTERNAL_ERROR, null);}}

InstallingAsyncTask 异步线程操作

在onResume 方法中，通过异步线程操作。上述描述看，已经创建了Session 操作，其实接下来想想也是session 提交相关的操作。

  if (mInstallingTask == null) {PackageInstaller installer = getPackageManager().getPackageInstaller();PackageInstaller.SessionInfo sessionInfo = installer.getSessionInfo(mSessionId);if (sessionInfo != null && !sessionInfo.isActive()) {mInstallingTask = new InstallingAsyncTask();mInstallingTask.execute();} else {// we will receive a broadcast when the install is finishedmCancelButton.setEnabled(false);setFinishOnTouchOutside(false);}}

doInBackground 异步后台任务

下面是doInBackground 源码说明，不就是打开session,然后通过session，通过进程通讯，写入待安装的File 文件到系统嘛。

protected PackageInstaller.Session doInBackground(Void... params) {PackageInstaller.Session session;try {session = getPackageManager().getPackageInstaller().openSession(mSessionId);} catch (IOException e) {synchronized (this) {isDone = true;notifyAll();}return null;}session.setStagingProgress(0);try {File file = new File(mPackageURI.getPath());try (InputStream in = new FileInputStream(file)) {long sizeBytes = file.length();try (OutputStream out = session.openWrite("PackageInstaller", 0, sizeBytes)) {byte[] buffer = new byte[1024 * 1024];while (true) {int numRead = in.read(buffer);if (numRead == -1) {session.fsync(out);break;}if (isCancelled()) {session.close();break;}out.write(buffer, 0, numRead);if (sizeBytes > 0) {float fraction = ((float) numRead / (float) sizeBytes);session.addProgress(fraction);}}}}return session;} catch (IOException | SecurityException e) {Log.e(LOG_TAG, "Could not write package", e);session.close();return null;} finally {synchronized (this) {isDone = true;notifyAll();}}}

onPostExecute 后台操作后，执行commit 操作

源码如下，贴出来看看具体操作：
终归还是通过 session 的 commit 操作，提交到系统去，由系统来进行安装操作。

if (session != null) {Intent broadcastIntent = new Intent(BROADCAST_ACTION);broadcastIntent.setFlags(Intent.FLAG_RECEIVER_FOREGROUND);broadcastIntent.setPackage(getPackageName());broadcastIntent.putExtra(EventResultPersister.EXTRA_ID, mInstallId);PendingIntent pendingIntent = PendingIntent.getBroadcast(InstallInstalling.this,mInstallId,broadcastIntent,PendingIntent.FLAG_UPDATE_CURRENT | PendingIntent.FLAG_MUTABLE);session.commit(pendingIntent.getIntentSender());mCancelButton.setEnabled(false);setFinishOnTouchOutside(false);} else {getPackageManager().getPackageInstaller().abandonSession(mSessionId);if (!isCancelled()) {launchFailure(PackageInstaller.STATUS_FAILURE,PackageManager.INSTALL_FAILED_INVALID_APK, null);}}

总结

PackageInstaller-之apk安装流程内容中，主要是包安装器PackageInstaller 相关内容。
作为PMS安装apk之界面跳转的续篇。两篇文章规整起来就是完全分析完了。当然，这里面还有权限相关操作只是一笔带过介绍了。
主要分析了：PackageInstallerActivity InstallInstalling 两个源码的分析。涉及到安装确认弹框-权限弹框-安装中等待弹框-注册监听安装回调-安装session创建和提交到系统

拓展

简要了解上面介绍了Session操作，Session 操作到底操作了什么， commit 就发送到系统进行安装了呢？

我们着重看看部分代码

PackageInstaller.Session session=getPackageManager().getPackageInstaller().openSession(mSessionId)
getPackageManager().getPackageInstaller().abandonSession
OutputStream out = session.openWrite("PackageInstaller", 0, sizeBytes))
session.commit

PackageInstaller

getPackageManager().getPackageInstaller() 找到PackageInstaller 类，看看类注释介绍

注释很详细了：

提供了安装、更新、移除设备上app的能力
app的安装操作通过PackageInstaller.Session 来实现的，一旦Session创建成功就可以将一个或者多个apk通过流的方式输送到指定的位置，直到session
销毁或者提交
apk 的一些基本校验，签名、包名、版本号、基本apk等。


/*** Offers the ability to install, upgrade, and remove applications on the* device. This includes support for apps packaged either as a single* "monolithic" APK, or apps packaged as multiple "split" APKs.* <p>* An app is delivered for installation through a* {@link PackageInstaller.Session}, which any app can create. Once the session* is created, the installer can stream one or more APKs into place until it* decides to either commit or destroy the session. Committing may require user* intervention to complete the installation, unless the caller falls into one of the* following categories, in which case the installation will complete automatically.* <ul>* <li>the device owner* <li>the affiliated profile owner* </ul>* <p>* Sessions can install brand new apps, upgrade existing apps, or add new splits* into an existing app.* <p>* Apps packaged as multiple split APKs always consist of a single "base" APK* (with a {@code null} split name) and zero or more "split" APKs (with unique* split names). Any subset of these APKs can be installed together, as long as* the following constraints are met:* <ul>* <li>All APKs must have the exact same package name, version code, and signing* certificates.* <li>All APKs must have unique split names.* <li>All installations must contain a single base APK.* </ul>* <p>* The ApiDemos project contains examples of using this API:* <code>ApiDemos/src/com/example/android/apis/content/InstallApk*.java</code>.*/

Session 到底是什么

public static class Session implements Closeable {/** {@hide} */protected final IPackageInstallerSession mSession;/** {@hide} */public Session(IPackageInstallerSession session) {mSession = session;}/** {@hide} */@Deprecatedpublic void setProgress(float progress) {setStagingProgress(progress);}................}

IPackageInstallerSession 是什么

  路径： \frameworks\base\core\java\android\content\pm\IPackageInstallerSession.aidl

它是一个aidl 文件，说明什么问题？？？说明它是一个aidl 文件，具体操作不是通过 IPackageInstallerSession 操作的，我们就需要找到它的实现代理类。
我一般是这么来找的

查找：grep -rn PackageInstallerSession.Stub

   fise4@ubuntu-PowerEdge-R730:~/Android/mt6769-alps-release-t0.mp1.rc$ grep -rn PackageInstallerSession.Stub
frameworks/base/config/boot-image-profile.txt:33737:Landroid/content/pm/IPackageInstallerSession$Stub$Proxy;
frameworks/base/config/boot-image-profile.txt:33738:Landroid/content/pm/IPackageInstallerSession$Stub;
frameworks/base/config/preloaded-classes:1445:android.content.pm.IPackageInstallerSession$Stub$Proxy
frameworks/base/config/preloaded-classes:1446:android.content.pm.IPackageInstallerSession$Stub
frameworks/base/services/core/java/com/android/server/pm/PackageInstallerSession.java:187:public class PackageInstallerSession extends IPackageInstallerSession.Stub {

所以在框架层，调用的其实是 PackageInstallerSession 类的方法，我们去看看

fise4@ubuntu-PowerEdge-R730:~/Android/mt6769-alps-release-t0.mp1.rc$ find . -name PackageInstallerSession.java 
./frameworks/base/services/core/java/com/android/server/pm/PackageInstallerSession.java

根据上面我们再梳理下，通过commit 方法来梳理流程，跟踪流程->分析代码


InstallInstalling.java         ->session.commit(pendingIntent.getIntentSender())
PackageInstall.java            ->mSession.commit(statusReceiver, false);
PackageInstallerSession.java   ->dispatchSessionSealed()

如下：PackageInstallerSession.java 里面的commit 方法

public void commit(@NonNull IntentSender statusReceiver, boolean forTransfer) {if (hasParentSessionId()) {throw new IllegalStateException("Session " + sessionId + " is a child of multi-package session "+ getParentSessionId() +  " and may not be committed directly.");}if (!markAsSealed(statusReceiver, forTransfer)) {return;}if (isMultiPackage()) {synchronized (mLock) {boolean sealFailed = false;for (int i = mChildSessions.size() - 1; i >= 0; --i) {// seal all children, regardless if any of them fail; we'll throw/return// as appropriate once all children have been processedif (!mChildSessions.valueAt(i).markAsSealed(null, forTransfer)) {sealFailed = true;}}if (sealFailed) {return;}}}dispatchSessionSealed();}

结语

分析到了框架层了已经，到此结束。所有的安装层应用PackageInstaller 的代码梳理了一遍。剩下的具体安装操作在框架framework层，后续讨论。

目的