com.android.virtualization.terminal Copy

The "Terminal" app, part of AOSP's Android Virtualization Framework (AVF). It gives the device a Debian-based Linux environment running inside a virtual machine. AOSP describes the pieces as the Terminal app itself, the AVF subsystem, a Debian-based OS image and ttyd, an open-source terminal emulator served over HTTP, with the app using a WebView to reach the terminal service inside the VM. Its source lives in the AOSP tree at packages/modules/Virtualization/android/TerminalApp. It is not a shell into Android. The manifest declares the application android:enabled="false" and requires the android.software.virtualization_framework feature, and AOSP states the feature is available on select devices only and that a user must enable developer options before the Terminal app appears on the launcher. Its declared permissions are correspondingly heavy for an optional app: MANAGE_VIRTUAL_MACHINE, USE_CUSTOM_VIRTUAL_MACHINE, MANAGE_EXTERNAL_STORAGE, RECORD_AUDIO and INTERNET. Version note: the Android 16 release notes introduce this as "Linux terminal support. Ferrochrome introduces a Debian-based Linux terminal within a virtual machine", and the AOSP manifest carries a 2024 copyright. In our sample the package is recorded on devices running API 35, 36 and 37 (Android 15, 16 and 17), so some vendors shipped it before the Android 16 notes described it. Which devices actually support AVF varies, and the sample shows the package present on Google, Samsung, Xiaomi, vivo, TCL and URAO builds: presence of the package is not by itself proof that a given device can run the VM. For Android Enterprise, EMM and kiosk use the point to grasp is that the normal route to it is developer options. An admin who applies the DISALLOW_DEBUGGING_FEATURES user restriction, which Android documents as disallowing a user from "enabling or accessing debugging features", closes that route without touching the package. Disabling or hiding the package is also reasonable: it ships disabled by default, so a device that has never had it switched on is already running without it, and on a managed or kiosk device a general-purpose Linux VM with external storage and microphone access is rarely wanted.

• Use cases (Linux Development Environment / Terminal app) - Android Open Source Project →
• Android 16, Android 16 QPR1, and Android 16 QPR2 release notes - Android Open Source Project →
• TerminalApp AndroidManifest.xml, Android 16 source - Android (packages/modules/Virtualization) →
• UserManager.DISALLOW_DEBUGGING_FEATURES - Android Developers →
• Package provenance for com.android.virtualization.terminal - Android System App Database →

• Signed by Google's own signing key (the same key Google uses across devices), so it is a Google-provided preinstall that updates independently of the system image, though 7 different Google signing keys appear across the fleet. This certificate spans 4 device makes - the hallmark of a globally distributed Google key.
• Its largest observed manifest declares 15 permissions: 2 runtime (user-granted), 1 signature or system-level, 6 install-time and 6 vendor or uncatalogued.
• APK size ranges from 4.7 MB to 60.5 MB across the reporting device profiles, so the build differs substantially between them.