[ROM][blueline][A12] iodéOS = LineageOS 19.1 + MicroG + adblocker [04/04/2023] - Google Pixel 3 ROMs, Kernels, Recoveries, & Other

[ROM][blueline][A12] iodéOS = LineageOS 19.1 + MicroG + adblocker [04/04/2023] - Google Pixel 3 ROMs, Kernels, Recoveries, & Other

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Introduction
iodéOS is a privacy-focused operating system powered by LineageOS and based on the Android mobile platform. iodéOS aims at protecting the user's privacy with a built-in adblocker and by freeing the smartphone from snitches.
The objectives in the conception of this ROM are threefold:
To keep the stability and security level of LineageOS, by minimizing the modifications made to the system. Apart the system modifications required by the adblocker, we mainly only added a few useful options commonly found in other custom ROMs, made some cosmetic changes, modified a few default settings to prevent data leaks to Google servers.
To ease a quick adoption of this ROM by new users. We especially target users that are concerned by the protection of their privacy, but are not reluctant to still use inquisitive apps like Google ones. We thus included MicroG as well as a coherent set of default apps (all open source, with one exception), and simplified the initial setup of the system. Particularly, an initialization of MicroG has been made with GCM notifications allowed by default, a privacy-friendly network location provider (DéjàVu) pre-selected, as well as Nominatim Geocoder.
To provide a new and powerful way of blocking ads, malwares, data leaks of all kinds to many intrusive servers. We are developing an analyzer, tightly integrated into the system, that captures all DNS requests and network traffic, as well as a user interface (the iodé app). Compared to some other well-known adblockers, this has the advantages of:
Avoiding to lock the VPN for that use. You can even use another adblocker that uses VPN technology alongside our blocker.
Being independent of the kind of DNS server used by the system or set by an independent app: classical DNS on UDP port 53 or any other one, DNS over TLS (DoT), DNS over HTTPS (DoH), ..., as we capture the DNS requests before they are transmitted to the system function that emits the DNS request. What we do not support, is DoH when it is natively built into applications, i.e. when an app communicates directly with a DoH server, without asking name resolution to the system. It would require to decrypt HTTPS packets between such an app and the DoH server, which may create a big security hole.
Precisely mapping DNS requests and network packets to the Android apps that emitted (or received) them.
Deciding which apps have a filtered network usage (by default, all apps), and which ones can communicate with blacklisted servers.
Since its first versions, we added many features to the iodé blocker: several levels of protection, fine-grained control over the hosts that should be blocked or authorized, displaying statistics on a map to see the quantity of data exchanged to which countries, clearing statistics... We are actively developing the blocker, and new functionalities will be regularly added.
Features
Changes in LineageOS to prevent data leaks:
Default DNS server: Google's DNS replaced by Quad9's 'unblocked' servers in all parts of the system.
A-GPS: patches to avoid leaking personnal information like IMSI to supl server.
Captive portal login: connectivitycheck.gstatic.com replaced by captiveportal.kuketz.de for connectivity check.
Dialer: Google default option replaced by OpenStreetMap for phone number lookup.
Pre-installed apps:
We included many useful default apps, but our choice cannot suit everyone; so we added the possibility to remove them. It can be done at the end of the phone setup, or at any time by going to Parameters -> Apps & Notifications -> Preinstalled apps.
MicroG core apps: GmsCore, GsfProxy, FakeStore.
NLP backends for MicroG : DejaVuNLPBackend (default), MozillaNLPBackend, AppleNLPBackend, RadioCellsNLPBackend, Nominatim Geocoder.
App stores : FDroid (with F-Droid Privileged Extension) and Aurora Store.
Browser: our own fork of Firefox (with Qwant as default search engine, many other ones added, telemetry disabled, parts of telemetry code removed) instead of Lineage’s default browser Jelly.
SMS: QKSMS instead of Lineage's default SMS app.
Email: p≡p (Pretty Easy Privacy).
Camera: our own fork of Open Camera, with a few tweaks.
Maps/navigation: Magic Earth GPS & Navigation (the only one free but not open source).
Keyboard: OpenBoard instead of AOSP keyboard.
PDF: Pdf Viewer Plus.
Personnal notes: Carnet.
{Ad/Malware/Data leak}-blocker: iodé.
News: to keep users informed about our developments, as well as a FAQ.
Meteo: Geometric Weather.
Pre-included FDroid repository:
The apps that we tweak or develop (microG services, the browser based on Firefox, the News app, Open Camera ...) are available through a repository that we included in FDroid (check the "Apps for iodéOS" category). For this purpose and to avoid name conflicts of some apps, we also had to make a few changes in FDroid.
Useful options from other custom ROMs:
Smart charging (disables charging when a given level is reached, to protect battery health).
Fingerprint vibration toggle.
Installation Instructions
To download and flash our latest build, see https://gitlab.com/iode/ota.
You can also find here direct links to the latest builds.
Supported devices
Fairphone FP3/FP3+
Fairphone FP4
Google Pixel 3
Google Pixel 4
Google Pixel 5
Google Pixel 6
Google Pixel 6a
OnePlus 9
OnePlus 9 Pro
Samsung Galaxy A5/A7 2017 (a5j17lte/a7j17lte)
Samsung Galaxy S9/S9+ (starlte/star2lte)
Samsung Galaxy Note 9 (crownlte)
Samsung S10e/S10/S10+ (beyond{0,1,2}lte)
Samsung Note 10 (d1)
Samsung Note 10+ (d2s)
Sony Xperia XA2 (pioneer)
Sony Xperia XZ1 (poplar)
Sony Xperia XZ2 (akari)
Sony Xperia XZ3 (akatsuki)
Xiaomi Mi9 (cepheus)
Teracube 2e
Xiaomi Mi 10T 5G / Mi 10T Pro 5G
Xiaomi Mi 10 Lite 5G
Sources
iodéOS: https://gitlab.com/iode/os
LineageOS: https://github.com/lineageos
device tree: https://gitlab.com/iode/os/public/devices/google/device_google_blueline
https://gitlab.com/iode/os/public/devices/google/device_google_crosshatch
kernel: http://github.com/LineageOS/android_kernel_google_msm-4.9[/URL]
Bug Reporting
You can post a message in this thread or (preferred) open an issue here.
Credits
LineageOS is a free, community built, aftermarket firmware distribution of android, which is designed to increase performance and reliability over stock android for your device.
All the source code for LineageOS is available in the LineageOS Github repo. If you would like to contribute to LineageOS, please visit their Wiki for more details.
This ROM would be nothing without the tremendous work made on MicroG, and all the other open source apps that we included. We are very grateful to their authors.
Contributors
Direct contributors: @iodeOS, @vince31fr
Indirect contributors (too numerous to list): All the people that contributed to the device tree, to LineageOS, and to the included open source apps.
Sponsoring
You can help in the development of this ROM by paying us a coffee here: https://paypal.me/iodeOS.
Screenshots

Downloads :
iodéOS
04/04/2023 (build 20230401):
Installation procedure: move to a fastboot script (read instructions: https://gitlab.com/iode/ota)
Blocker: improved use of blocking lists (sub-domains blocking)
FDroid: fixes an issue on apps update
LineageOS synchronized with March security patch included
All apps updated
07/02/2023 (build 20230207): initial publicly available build of iodéOS for Pixel 3.
[/LIST]

Thank you. Could you please bring Dual Sim Dual Standby back?

Bootloader boot.img ?
sideloaded rom but need boot.img
fastboot flash boot boot.img
adb sideload iode-3.5-20230207-blueline.zip

Nunchakuka said:
Bootloader boot.img ?
sideloaded rom but need boot.img
fastboot flash boot boot.img
adb sideload iode-3.5-20230207-blueline.zip
Click to expand...
Click to collapse
Karateka “Osu!"
Solved! Inside iode-3.5-20230207-blueline-img.zip

About phone say its android 12

*** New Update : 04/04/2023 ***
Available as OTA (see OP)

vince31fr said:
*** New Update : 04/04/2023 ***
Available as OTA (see OP)
Click to expand...
Click to collapse
This is working great for me, and the "flash-all" installer was smooth with no issues.
Props to the iode team for putting together a great build. This saves so much time and is slick!

Related

[ROM][UNOFFICIAL][7.1.2][c70n]LineageOS for microG

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Android experience relies heavily on Google's Play Services. The microG project creates an alternative to installing Gapps, which install and execute closed-source blobs on our phones. MicroG however requires a patch called "signature spoofing", which allows microG's apps to spoof themselves as Google Apps. LineageOS currently does not include the patch due to different opinions among the developers.
This makes microG installation difficult on LineageOS and other ROMs. Our ROM is a fork of LineageOS with just the necessary changes to have microG built-in. We ship weekly builds for all the LineageOS supported devices..
FAQ
Why all of this? Isn't OpenGApps free software?
Yes and no, the name "OpenGApps" is misleading. While OpenGApps uses free software to retrieve and bundle the GApps, the apps themselves are not free software, they are in fact the same Google Apps you find on a new phone.
Why should I use microG instead of the standard Google Play Services?
First of all, freedom. I can't explain here why free software is so important (this is a FAQ, not a 200 pages manual), but if you're interested you can start by reading this.
Second, the Play Services are very expensive in terms of resources, they drain lots of battery and they use lots of space, while microG requires much less resources. To give you an idea, the smallest possible package of OpenGApps ("Pico Package") on ARM 7.1 is ~125 MB, while the full microG suite (GmsCore, GsfProxy, FakeStore, MozillaNlpBackend and NominatimNlpBackend) is ~4 MB.
Isn't Android free software? Can't I just install LineageOS without both GApps and microG?
Android is based on the AOSP project, which is free software. However many common features are handled by the proprietary GApps, generally by the Google Play Services. You can use LineageOS without GApps/microG, but you will probably miss something. In particular, you won't have the:
network localization services, which means that you can only use the GPS for the positioning
Google Cloud Messaging, so you won't receive any push notification for any app that relies on it
the Maps API, which means that any app that uses Google Maps through the Maps API will probably crash
With microG these services (and many others) are reimplemented.
Is LineageOS for microG completely free software?
Unfortunately no, like LineageOS it still has some non-free components. See the Replicant project for more informations.
Which is the current status of microG? Which APIs are already implemented?
See here.
Why do we need a custom build of LineageOS to have microG? Can't I install microG on the official LineageOS?
MicroG requires a patch called "signature spoofing", which allows the microG's apps to spoof themselves as Google Apps. LineageOS' developers refused (multiple times) to include the patch, forcing us to fork their project.
Wait, on their FAQ page I see that they don't want to include the patch for security reasons. Is this ROM unsafe?
No. LineageOS' developers decided not to include this patch for various reasons.
The signature spoofing could be an unsafe feature only if the user blindly gives any permission to any app, as this permission can't be obtained automatically by the apps.
Moreover, to further strengthen the security of our ROM, we modified the signature spoofing permission so that only system privileged apps can obtain it, and no security threat is posed to our users.
Do you use test keys?
Heck, no! We sign all our builds with our own private keys.
Do you offer OTA updates?
Yes, once a week.
Do you offer delta updates?
Not currently, but it can be done if there's real demand.
Can I install apps from the Play Store on this ROM?
F-Droid is included in our ROM, so you can freely download all the FOSS apps on their repositories.
However, if you need apps which are available only on the Play Store, you're free to host your personal instance of PlayMaker (see this demo) or GPlayWeb and connect it to your F-Droid client, Playmaker will let you download apps from the Play Store and install them via F-Droid. Another solution is to use a local app, like Yalp Store.
Do I have to enable "Unknown sources" to install apps in F-Droid?
Our ROM includes "F-Droid Privileged Extension", which allows F-Droid to install and update apps without the need of user interaction or the unsafe "Unknown sources" option.
Can you add support for my device? It is officially supported by LineageOS
We already build LineageOS for microG for every device supported by LineageOS. Find your device in our Downloads page!
Can you add support for my device? It is not supported by LineageOS though...
No, I'm sorry.
I don't trust your build, I want to build it myself!
No problem! Our builds are done with this Docker image, feel free to build it yourself.
I am running a custom build of LineageOS, but yours is way cooler! How can I migrate to it without losing my data?
Replace the LineageOS official keys in our migration ZIP with your keys (or follow the suggestions in the LineageOS migration guide).
Post-install
First, open the "microG Settings" app and check if everything is OK in the "Self-Check" section; you will probably have to give microG some permissions, like location and file access. The UnifiedNlp section will have some issues: that's normal, we haven't configured it yet.
UnifiedNlp
UnifiedNlp is the microG Network Location Provider, which provides the current location of the device without the use of the GPS. While Google's NLP can only use Google's servers for positioning, UnifiedNlp obtains the geolocation through different plugins, which interface to different services.
By default there are two plugins installed:
MozillaNlpBackend, which uses the Mozilla Location Service (online)
NominatimNlpBackend, which uses MapQuest's Nominatim service (based on OpenStreetMap) for geocoding (online)
If you want to use these plugins, go to microG Settings -> UnifiedNlp Settings, configure and enable both.
If you instead want different plugins (like the LocalGsmNlpBackend, which uses a local offline database of the GSM towers to obtain the location) you can download them in F-Droid and enable them in the same way.
Reboot and check whether UnifiedNlp is correctly set up in the "Self-Check" section of the "microG Settings" app.
F-Droid
You should add microG's repository to F-Droid, so that you can easily update microG's packages. On your device, follow this link and open microG's F-Droid link in F-Droid (or scan the QR code) to add the repository.
Moreover, you have the F-Droid Privileged Extension installed by default, why not use it? To make a good use of it go to the F-Droid Settings and enable auto updates.
Google Cloud Messaging
Many apps rely on the Google Cloud Messaging, a Google proprietary system to push notifications to your device. This feature is implemented in microG but, as not every user requires it, is disabled by default. If you need it, enable the "Google Device registration" and the "Google Cloud Messaging" features in the "microG Settings" app.
Weather service
If you want the weather features of LineageOS (like in the lock screen or in the cLock widget) you have to download a weather provider from here. Choose your favorite one, install it and configure it in cLock (or in Settings → Apps → Gear icon → Weather).
If you don't want to enable "Unknown sources" you can also import the PlayMaker demo repository in F-Droid (by adding this URL to F-Droid) and download it from there.
SU (root)
Our ROM doesn't include root by default for security reasons, but you can easily install it: go here, download the appropriate ZIP and install it from the recovery.
Contributors
pcfighter
LG K10 team
Source code
https://github.com/pcfighter
Downloads
Rom
Magisk

Didn't expect someone to make it, just flashed on my device and everything works flawlessly. But I do have one question: Do I have to re-flash magisk after ota updates? Thanks!


danderсradle said:
Didn't expect someone to make it, just flashed on my device and everything works flawlessly. But I do have one question: Do I have to re-flash magisk after ota updates? Thanks!
Click to expand...
Click to collapse
I think not

I've been using this ROM for the past 4 months and I love it. I don't think I had any big issues. The only complain I have is that the camera recording sound is too low. I don't know if that's only me or someone else is also experiencing this. And I've run into couple of blue screens, but again not sure if that's magisk(I used to see lots of them after upgrading to beta) or ROM's fault. So far I've had better experience than with any ROM I've tried before. Thanks for your work! Are u going to update it anytime soon?

I can not configure it because it does not accept my google account.....help

The current link points to a normal LineageOS version, not a microG one, just wanted to report that.

virividiann1434 said:
The current link points to a normal LineageOS version, not a microG one
Click to expand...
Click to collapse
Nope. It's microg version, I have checked it today. Microg needs to be updated, but in overall this rom is pretty fast.

[ROM][OneUI 4.1.1][A50] Fresh - Love Your Phone Again (Updated 4/11/2023)

Spoiler: See Changelog
4.5.0R (23040901)
https://tenseventyseven.cf/fresh-45-version-is-just-a-number-now
4.4.2R (22120801)
https://tenseventyseven.cf/fresh-4-love-your-phone-again
3.2.2S (21072303) - EOL
https://tenseventyseven.cf/fresh-think-outside-the-box
3.1.2S (21050106) - EOL
https://tenseventyseven.cf/fresh-3-awesomely-fresh
1.3.1S (21022101) - EOL
See full changelog: https://sourceforge.net/p/freshroms/blog/2021/02/freshroms-13-the-final-cut/
Core
- Use separate vendors for non-NFC and NFC variants.
- Update vendor to A505FNXXU6BUA1 (NFC) / A505FDDU6BUA8 (Non-NFC).
- Update Magisk to 21.4.
- Fsync and Software CRC Checking is enabled by default to alleviate "data corruption" and data loss concerns.
- Re-patched mixer_paths and mixer_gains with changes from One UI 2.5. In-call audio is better.
System
- Performance and battery improvement
- Removed several Samsung and Google services from the power-saving whitelis
- Force Google Play Services to "basic attest" SafetyNet. Workaround courtesy of @kdrag0n. Enable MagiskHide to pass SafetyNet.
- Apply ro.build.fingerprint in build.prop and init.rc.
- Disable Rescue Party. Courtesy of phhusson and the Phh-Treble Project.
- Disable strict mode logging. Courtesy of phhusson and the Phh-Treble Project.
Device-specific
- Fix some Galaxy A50-specific configs from framework. It includes HQM and enabling page boost.
- Flip Cover support has been (re-)added from stock firmware.
Camera
- More camera features, including a full-featured Pro and Pro Video modes. Huge thanks to a7hmE1 for making this possible.
- Fixed Scene Detection/Optimization in Camera.
- Smart Scan has been added and is tested working.
Apps and Services
- Lock Screen Stories and Dynamic Lockscreen can now be used at the same time. This is only available for users on INS (India).
- Added "LTE Only" network option to all OMCs. Please take precaution as a lot of carriers don't have VoLTE services yet, which can cause inability to receive and send phone calls and/or messages.

Special Thanks to These People
@Yanndroid - pretty much all the custom apps. Thanks man!
a7hmE1 - Camera features
@AlperSal - pretty much a lot of dumps (xD), and the Discord community.
@Subodh.993435 - lots of One UI tweaks
@el0xren
@hgunduz295
@not_const
Omar (from the Telegram community) - OMC
JuanCarlo15s (from the Telegram community) - OMC
SergeiSova (from the Telegram community) - OMC
Testing Community Members over the years
Aether
Aldykey
Alehandro
AlperS
Amine
an-gry0
ananlk
ashish2002
AshPulkit
avin
cebi
CHESTER
chropy
daynasour
Deian
Denis1523
dr_bianconeri
eahulsharma
ERICKONIX
Equalizer
faiyas
farahjafrinfj
Garry
hgunduz295
Isokayra Jusa
joyusuf
JuanCarlo15s
kayes
KIRA
LordArrin
Lux Darkus
Layns
lukasrubiolo12
MASTER.Shifu
mausfing
maverick316
MaxVrn36
ninja1x
osmafuda
Paco
PearceRC
Pein
Peter Knecht
Piyush1200
Project PADORU
Rakesh
RepcaQ
Riju1997
Rui
roy124
Sahi
s0lus
SC
th3ia
tomas619
V1nex
VYSIONARI
Well_Silva
Xulian
Yanndroid
youmeus
Localization
See Settings > Zest > About Zest > Localization
Mods and Tweaks
@yash92duster and TeamExyKings - Exynos Collection Mods
@daoudedy - More Camera Features
The ErfanGSI community - Galaxy S21 (Exynos 2100) Dump
And of course, you!

Mint Kernel
GNU General Public License v2.0
Device Trees for SHRP Recovery
Forked from realYukoSky's OrangeFox trees
Forked from geiti94
Multi-disabler for Samsung Services
Ian Macdonald (@ianmacd)
Bluetooth Library Patcher
Arthur Trouillot (@3arthur6)
Fresh System Services
Developed in collaboration with @Yanndroid
MIT License
Fresh Software Updates Service (SUS)
Creative Commons Attribution-ShareAlike 4.0 International License
KTweak
Tyler Nijmeh (@tytydraco)
GNU General Public License v3.0

Reserved

It works great
1. Lots of camera features.
2 very smooth
3.haptic feedback vibration
4. Lots of features
5. Advance sound features
Thank you so much

Nice rom

This dude has done a great job . Thank you take

Thanks for the Christmas present.
Will download now and try it on my SM-A507N

New builds have been uploaded for non-NFC variants! This will remove NFC toggle and settings from the device.
Otherwise, this is identical to the builds released earlier.
The links on the OP have been updated. :>

I'm in love with this thread design lol
Thanks for the rom ♡

It seems that Google Drive has rate-limited downloads for the addons. While the ROM is mirrored to MEGA, the addons weren't.
All addon downloads have been moved to MEGA. I might need to find a better file-sharing service if this continues. ._.

Thank you soooo much for your hard work

This rom have Secure folder working? Thanks!

alvesluispedro said:
This rom have Secure folder working? Thanks!
Click to expand...
Click to collapse
Samsung has hardened Secure Folder on OneUI 2.5. There is currently no way to get Secure Folder working on latest firmwares.

I forget to wipe my phone as I was on SyneXOS v2.0.1 an flashed it.
To my surprise there was no errors after rebooting it and all seems to work without a problem at the moment.
The only option I miss is the "caller id spam protection" I don't know if you can add it when you do the next update.
As that feature safes me allot of spam phone calls.
Thanks for the great rom

RichyE said:
I forget to wipe my phone as I was on SyneXOS v2.0.1 an flashed it.
To my surprise there was no errors after rebooting it and all seems to work without a problem at the moment.
The only option I miss is the "caller id spam protection" I don't know if you can add it when you do the next update.
As that feature safes me allot of spam phone calls.
Thanks for the great rom
Click to expand...
Click to collapse
Very glad to know that FreshROM is cross-flashable with One UI 2.1! :>
Let me know what OMC your phone is using so I can enable Smart Call (Caller ID and Spam Protection) in the next update.

TenSeventy7 said:
Very glad to know that FreshROM is cross-flashable with One UI 2.1! :>
Let me know what OMC your phone is using so I can enable Smart Call (Caller ID and Spam Protection) in the next update.
Click to expand...
Click to collapse
My OMC is: THL
Thanks for your responce and stay safe

I come from Infinity OS 4.0 and i ask:
- i can flash it with wipe cache, dalvik and syetsm and not format data (so i maintain my apps)
- with kernel RefinedKernel i can access to Samsung account ?
Thank and good day
Hispanico

hispanico957 said:
I come from Infinity OS 4.0 and i ask:
- i can flash it with wipe cache, dalvik and syetsm and not format data (so i maintain my apps)
- with kernel RefinedKernel i can access to Samsung account ?
Thank and good day
Hispanico
Click to expand...
Click to collapse
1. If you're using a Magisk module to pass SafetyNet (i.e. MagiskHide Props), disable it first so system can dexopt (thinks it had a software update). Successful migration from other One UI-based ROMs is not guaranteed so backups are very recommended.
2. Samsung Account is accessible on FreshROM with RefinedKernel, at least for me.

hispanico957 said:
I come from Infinity OS 4.0 and i ask:
- i can flash it with wipe cache, dalvik and syetsm and not format data (so i maintain my apps)
- with kernel RefinedKernel i can access to Samsung account ?
Thank and good day
Hispanico
Click to expand...
Click to collapse
I came from a different room that had oneUi 2.1 and that works for me.
Also Samsung account is working.
Only thing found not working at the moment is the AR doodle.
Never had it so don't now if I need it

[ROM] DivestOS 17.1 for oneplus2

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
DivestOS is a more private and more secure aftermarket system.
OnePlus 2 Notes:
- Do not try to relock this device, you will get locked out as the unlock process requires hooks only available in the stock recovery. If you do, you can recover via bulk mode using existing guides.
Features:
- strong focus on FOSS
- various system hardening
- various privacy enhancements
- automated removal of unnecessary proprietary blobs
- automated kernel hardening and CVE patching
- ability to relock bootloader on supported devices
- verified boot on supported devices
- no root support
- SELinux always enforcing
- encrypted by default
- monthly updates
- OTA delta updates
- OTA updates over Tor (optional)
- F-Droid included
- hardened system WebView with rapid updates: https://divestos.org/misc/ch-dates.txt
Extra Features (not installed by default & also compatible with all systems):
- Mull, our hardened fork of Fenix with rapid updates: https://divestos.org/misc/ffa-dates.txt
- Hypatia, our real-time malware scanner
- Extirpater, our free space eraser
Links:
- Website: https://divestos.org
- Onion: http://divestoseb5nncsydt7zzf5hrfg44md4bxqjs5ifcv4t7gt7u6ohjyyd.onion
- Downloads: https://divestos.org/index.php?page=devices&base=LineageOS#device-oneplus2
- Changelogs: https://divestos.org/index.php?page=news
- Project History: https://divestos.org/index.php?page=history
- Known Issues: https://divestos.org/index.php?page=broken#oneplus2
- Screenshots: https://divestos.org/index.php?page=screenshots
- Security Patching Overview: https://divestos.org/index.php?page=patch_levels
- About + Credits + Notices: https://divestos.org/index.php?page=about
- Donate: https://divested.dev/donate
- Source Code: https://github.com/divested-mobile or https://gitlab.com/divested-mobile
- XMPP Chat Room: xmpp:[email protected]
Device Specific Links:
- Device Tree: https://github.com/LineageOS/android_device_oneplus_oneplus2
- Kernel: https://github.com/LineageOS/android_kernel_oneplus_msm8994
- Kernel CVE Patches Applied: https://github.com/Divested-Mobile/...VE_Patchers/android_kernel_oneplus_msm8994.sh
Other Bits:
- Good and bad feedback is welcomed. Else how can we improve?
- If you find a bug, please report it below or via GitHub/GitLab.
- Testing/Translations/Code contributions are gratefully appreciated.
Important Notes for New Users:
- Please make a backup of your device and copy it to another computer.
- You must wipe before installing this OS.
- This OS has userdata encrypted by default
- You are intended to relock your bootloader with this OS (if your device is marked supported for that).
DivestOS does *not* support the following:
- Google Apps (OpenGAPPS)
- DRM (Widevine)
- alternative recoveries (TWRP)
- root (Magisk)
- runtime modification frameworks (Xposed or theme engines)
All downloads are GPG signed with the following key:
Code:
#B874 4D67 F9F1 E14E 145D FD8E 7F62 7E92 0F31 6994
-----BEGIN PGP PUBLIC KEY BLOCK-----
mDMEXupIxBYJKwYBBAHaRw8BAQdAC1RiTvrqJaAQ4FIHsxX+gzEgdT4mspISS+p0
y847Nge0SERpdmVzdE9TIFJlbGVhc2UgU2lnbmluZyAoMjAyMCAjMSkgPHN1cHBv
cnQrcmVsZWFzZXNpZ25pbmdAZGl2ZXN0b3Mub3JnPoiQBBMWCAA4FiEEuHRNZ/nx
4U4UXf2Of2J+kg8xaZQFAl7qSMQCGwMFCwkIBwIGFQoJCAsCBBYCAwECHgECF4AA
CgkQf2J+kg8xaZR1BgEAwwLVVsG7kbp8M3GTV987XpVl5cZeTtDc/g+66briCHUB
APiuH/dk8eRnhFnq4Up2/j7uD/8FtSvxPbHiz6t1MdgB
=VzP2
-----END PGP PUBLIC KEY BLOCK-----

Anyone tired this?

Suhu007 said:
Anyone tired this?
Click to expand...
Click to collapse
This one is recently tested working.

SkewedZeppelin said:
This one is recently tested working.
Click to expand...
Click to collapse
sounds like jink

Now that Lineage has dropped support for OnePlus 2, will the device continue to receive updates through DivestOS?

tlastun said:
Now that Lineage has dropped support for OnePlus 2, will the device continue to receive updates through DivestOS?
Click to expand...
Click to collapse
Lineage stopped building for oneplus2 two months ago.
I have no intent on stopping.
That is one of the main features of DivestOS, long term device support.
All devices we support will receive monthly updates.

Got blank screen after flash. But can see volume bar when pressing volume button. Anyone with the same issue? divested-17.1-20210806-dos-oneplus2.zip

wrufesh said:
Got blank screen after flash. But can see volume bar when pressing volume button. Anyone with the same issue? divested-17.1-20210806-dos-oneplus2.zip
Click to expand...
Click to collapse
Yes this was a regression, a build with the fix will be up in a few days.
[ROM] DivestOS 15.1+18.1 for ether
DivestOS is a more private and more secure aftermarket system. Nextbit Robin Notes: - 15.1 builds are also available for those who need IMS/VoLTE Features: - strong focus on FOSS - various system hardening - various privacy enhancements -...
forum.xda-developers.com

SkewedZeppelin said:
Yes this was a regression, a build with the fix will be up in a few days.
[ROM] DivestOS 15.1+18.1 for ether
DivestOS is a more private and more secure aftermarket system. Nextbit Robin Notes: - 15.1 builds are also available for those who need IMS/VoLTE Features: - strong focus on FOSS - various system hardening - various privacy enhancements -...
forum.xda-developers.com
Click to expand...
Click to collapse
@SkewedZeppelin Where can I find quite older working build? Currently I am out of OS.

wrufesh said:
@SkewedZeppelin Where can I find quite older working build? Currently I am out of OS.
Click to expand...
Click to collapse
As I mentioned in that post I do not store old builds.
I can make a new one today if you wait two or so hours.

SkewedZeppelin said:
As I mentioned in that post I do not store old builds.
I can make a new one today if you wait two or so hours.
Click to expand...
Click to collapse
Yes, I will definitely. This is my first time with DivestOS. I am excited about it and ready to go google less.

wrufesh said:
Yes, I will definitely. This is my first time with DivestOS. I am excited about it and ready to go google less.
Click to expand...
Click to collapse
Devices - DivestOS Mobile
divestos.org
https://divestos.org/mirror.php?base=LineageOS&f=oneplus2/divested-17.1-20210906-dos-oneplus2.zip

SkewedZeppelin said:
Devices - DivestOS Mobile
divestos.org
https://divestos.org/mirror.php?base=LineageOS&f=oneplus2/divested-17.1-20210906-dos-oneplus2.zip
Click to expand...
Click to collapse
Thank you so much. Highly appreciate your work. Will contribute at least by reporting you a bug.

Cannot find a cast button to cast video over my tv on any of the media players apps like MX Player. Is the cast button something specific to google?

wrufesh said:
Cannot find a cast button to cast video over my tv on any of the media players apps like MX Player. Is the cast button something specific to google?
Click to expand...
Click to collapse
Chromecast does indeed require Google Play Services typically provided by gapps.
Miracast is also not supported as it is proprietary.
VLC however does have experimental Chromecast support that works without gapps.

Not able to stream youtube videos over VLC or MXPlayer. Is it something that is blocked by Divest OS?

wrufesh said:
Not able to stream youtube videos over VLC or MXPlayer. Is it something that is blocked by Divest OS?
Click to expand...
Click to collapse
YouTube via web browser or app like NewPipe should work just fine.
I don't believe VLC on Android can play YouTube?
You can play a YouTube video in VLC by going to the More tab, then New stream, then pasting a link and hitting go.
I haven't tried MXPlayer.

It does not support only OpenGapps, can I install NikGapps or BitGapps

Jaiwantn said:
View attachment 5414401
It does not support only OpenGapps, can I install NikGapps or BitGapps
Click to expand...
Click to collapse
It does not support *any* Google Apps packages.

Hello guys,
Do you use this ROM on your main smartphone? How do you handle using apps from the playstore? Even for riding bus or train I need some playstore app? However even banking apps (for which I would prefere a most secure OS on my smartphone) are located in the Google playstore.

[GSI][13] LineageOS 20 "Light"

This post documents my progress on top of the native generic targets.
Already implemented/fixed:
Built-in root (PHH-SU)
Device overlays
Screen resolution & refresh rate - improved upon PHH's implementation
Alternative audio policy (Qualcomm)
Disable soundvolume effect (Qualcomm)
Alternative backlight scale (MediaTek)
resetprop/copyprop tool
In-call audio
BT audio
VoLTE on Qualcomm/MediaTek pre-S vendors
VoLTE on Qualcomm/MediaTek S vendors - new, backported to PHH-based
GAPPS - using MindTheGapps for now
Securized - "on-demand" reversible toggle
Disable A2DP offload
Alternative audio jack detection
Signature spoofing - limited to priv-app for the same security reason as in PHH/TD-based
Optional FP lockout (set persist.sys.fp.lockouts.disable to true to disable timeout on failed FP attempts)
Built-in PHH-SU app for *S variant
Override minimum brightness
Override navbar availability
Exfat
In-call audio on Snapdragon 8 Gen 2 (SM8550) and newer Qualcomm devices
To be implemented/fixed at a later time:
VoLTE on Motorola Qualcomm S vendors - situation did not improve with stock T, lowering priority
Known but will not implement/fix:
Compatibility with legacy (pre-A10) devices, A-only, VNDKLite
FOD/UDFPS (commonly known as in-display fingerprint) - not skilled enough for it and not interested either
MediaTek kernel BPF bug (#9)
VoLTE on non-Qualcomm/MediaTek vendors
Samsung/Huawei oddities

Notes:
I now have a rather taxing day job, and can't devote nearly as much time/effort into this as I did as a student, or even a year ago.
No A-only or VNDKLite builds. These are concepts that don't exist natively.
GAPPS builds are offered as-is without guarantees. As a Chinese I can't/won't help with GAPPS/SN issues - please help each other out.
ADB is intentionally insecure, even on first boot (turned on by default and no authentication needed). GSIs are more fragile compared to device-specific custom ROMs, both on first boot (no-boot issues) and on subsequent boots (after tuning certain Treble settings), and I insist that no-auth ADB is a must-have for debugging and general fail-safe.
Signature spoofing (MicroG) is supported, but only for priv-apps. This is a security consideration from PHH.
Refer to #9 for explanation/workaround of an MediaTek-specific kernel bug that causes no internet.

TD-based LOS20 will be offered as well, but at a later date - I've only made a first test build of it today. At its current state though, it doesn't work as well as PHH-based A12 either, so don't get your hopes up too high.

Good job!

Yay!!!

yay!!!! thank you!!!!

Thank you very much for your great work. I've been waiting for this for a long time.
I ran into a very, very strange bug.
I have a Qin F21PRO (MT6761).
This model has two sub-models:
4GB RAM + 64GB storage
3GB RAM + 32GB storage.
My device is
4GB RAM + 64GB storage
But after flashing this GSI, it is shown that there is only 32GB storage.
edit: after factory reset via twrp, i getting 64GB storage

There's a known kernel bug in some recent MTK devices that breaks BPF badly, resulting in broken networking features since Android 13, and no-boot since r11 (Google decided to tighten the check). I've reverted the no-boot, but the actual bug can't be fixed from platform-side.
This affects LOS in that it has Restricted Networking Mode turned on by default, and with the bug in place, apps cannot be added to the allow list, resulting in no internet in even system apps.
If you own an MTK device and notice such a thing, as a temporary workaround, you can turn the feature off manually with:
Code:
adb shell settings put global restricted_networking_mode 0
If you're on the gN variant, SetupWizard would also have no internet, so just skip the setup entirely, turn on USB Debugging once you're in the OS, run the above, then re-initiate the setup from the status bar.
As for a more persistent fix - thanks to @Rortiz2 , there's now a way to manually patch the kernel binary, however I no longer have an affected device for testing this. Feel free to try out the patcher here.
There might be other broken networking features that I'm unaware of. In the long term, the one true solution is to upgrade to a newer vendor base, hoping that the OEM has merged the kernel-side fix.

AndyYan said:
TD-based LOS20 will be offered as well, but at a later date - I've only made a first test build of it today. At its current state though, it doesn't work as well as PHH-based A12 either, so don't get your hopes up too high.
Click to expand...
Click to collapse
There is no Navigation key or gesture options, How to do it?, I can install it on my Samsung device but without navigation, no home/back key

redymedan said:
There is no Navigation key or gesture options, How to do it?, I can install it on my Samsung device but without navigation, no home/back key
Click to expand...
Click to collapse
Ugh, a Samsung oddity. I didn't implement the force overide switch - if a non-Samsung hits this as well, I might.
If you know how to, try adding "qemu.hw.mainkeys=0" to /system/build.prop. These images are EXT4 unshared blocks, so as long you have verity disabled and root, you should be able to edit/save it.

redymedan said:
There is no Navigation key or gesture options, How to do it?, I can install it on my Samsung device but without navigation, no home/back key
Click to expand...
Click to collapse
AndyYan said:
Ugh, a Samsung oddity. I didn't implement the force overide switch - if a non-Samsung hits this as well, I might.
If you know how to, try adding "qemu.hw.mainkeys=0" to /system/build.prop. These images are EXT4 unshared blocks, so as long you have verity disabled and root, you should be able to edit/save it.
Click to expand...
Click to collapse
Same problem with Redmi Note 10 (mojito)

@redymedan @spider1163 Can you give me the full result of "getprop" from shell? Paste it to e.g. Pastebin.

D
AndyYan said:
Ugh, a Samsung oddity. I didn't implement the force overide switch - if a non-Samsung hits this as well, I might.
If you know how to, try adding "qemu.hw.mainkeys=0" to /system/build.prop. These images are EXT4 unshared blocks, so as long you have verity disabled and root, you should be able to edit/save it.
Click to expand...
Click to collapse
Done! I just added "qemu.hw.mainkeys=0" to /system/build.prop and the navigation keys enabled. also in Gesture menu "System navigation" option appeared. It works now on my Galaxy A50, Thanks
Other problem: Google Play Protect certified "This device isn't Play Protect certified"

amazing! waiting for gapps variant now.

redymedan said:
Done! I just added "qemu.hw.mainkeys=0" to /system/build.prop and the navigation keys enabled.
Click to expand...
Click to collapse
Thanks for confirming it's that simple! Given that "light" won't look back on legacy devices, I think I'll just enable this prop globally in the next releases.

This is exactly what I was waiting for, it will be fun to test on my old Huawei P smart 2019 with Android 9 vendor so let's see what happens. Any result of this experiment will be shared here.

THX for your great work.
But how can I install gapps?
I've tried to install BitGApps with Magisk as a Magisk module, but it says 'insufficient partition size'.
There's no working TWRP for my device

michael_hamada said:
THX for your great work.
But how can I install gapps?
I've tried to install BitGApps with Magisk as a Magisk module, but it says 'insufficient partition size'.
There's no working TWRP for my device
Click to expand...
Click to collapse
you wait... ..

THX for your great work. but auto brightness not working Is this expected behavior？

Themes / Apps / Mods [APP][XPOSED/MAGISK] KnoxPatch v0.5.2 - Restore Samsung Knox features

/* Changelog */
v0.5.2:
- Enhancer v0.3 (Secure Folder fix for Android 10 (@ananjaser1211))
- Additional hooks for One UI 2.x
- Show Secure Folder warning on legacy devices with FBE
- Added Romanian translations (contribution of @iDrinkCoffee)
Spoiler: Old changelogs
v0.5.1:
- Rework UI code
- Minor hooks bug fixes
v0.5.0:
- Rework hooks API's
v0.4.5:
- Additional hooks for One UI 3.x
- Show a warning on One UI 3.x for Secure Folder support
v0.4.4:
- One UI Core support
- Added Hungarian translations (contribution of gidano @github)
- Added Indonesian translations (contribution of Maulana990 @github)
v0.4.1:
- Enhancer v0.2 (add Smart View support)
v0.4.0:
- Initial Android 9 support (One UI 1.x)
- One UI 5.1 support
v0.3.6:
- Introduce KnoxPatch Enhancer (no changes in the app)
v0.3.5:
- Added Spanish translations (contribution of naxitoo @github)
- Added support for Samsung Health Monitor (reported by mathmach @github)
- Added support for Samsung Flow
- Rework Samsung Health patch
- Minor code adjustments
v0.3.0:
- Initial Android 10/11 support (One UI 2.x/3.x)
- Fixed KnoxGuard patch
- Added additional patches for SAK
- Initial multi-language support
v0.2.0:
- Android 12 support (One UI 4.x)
- Added KnoxGuard patch
- Rework Secure Wi-Fi patch (contribution of @davidarsene)
v0.1.1:
- First public release
/* Download */
GitHub (latest release)
LSPosed repository

Reserved

Reserved

S23 users might want to install this test build since the latest version at time of writing (v0.3.6) doesn't supports One UI 5.1. Support for One UI 5.1 has been added in v0.4.0.

Love to see it. Exemplary work as always!

Hi,
Secure folder doesn't seem to work on Android 10. (OneUI 2.x)
Is there any specific setting i need to so ?

otonieru said:
Hi,
Secure folder doesn't seem to work on Android 10. (OneUI 2.x)
Is there any specific setting i need to so ?
Click to expand...
Click to collapse
Unfortunately I don't have an A10 device at hand so I have to ask you to send over some more debug infos (system logs, module logs, a screenshot of the module info page)

BlackMesa123 said:
Unfortunately I don't have an A10 device at hand so I have to ask you to send over some more debug infos (system logs, module logs, a screenshot of the module info page)
Click to expand...
Click to collapse
Alrite, i'll collect the data first.

So i tried installing this module on Android 9
The Apk file cannot be installed cause of Parsing error and the module cannot be Found on LS posed as installed
....

TMW1996 said:
So i tried installing this module on Android 9
The Apk file cannot be installed cause of Parsing error and the module cannot be Found on LS posed as installedView attachment 5829609....View attachment 5829611View attachment 5829617View attachment 5829625
Click to expand...
Click to collapse
Why are you trying a module that wasn't even posted in your device forum and clearly is for a device that's *four* major versions ahead of your own? That's just asking for problems. Not to mention the OP says it supports Android 10 and up.

EtherealRemnant said:
Why are you trying a module that wasn't even posted in your device forum and clearly is for a device that's *four* major versions ahead of your own? That's just asking for problems. Not to mention the OP says it supports Android 10 and up.
Click to expand...
Click to collapse
Because i was asked out to try it on Android 9 from @BlackMesa123

TMW1996 said:
Because i was asked out to try it on Android 9 from @BlackMesa123
Click to expand...
Click to collapse
Gotcha. Well I didn't see any public discussion in this thread about that so it was a logical assumption on my part

TMW1996 said:
So i tried installing this module on Android 9
The Apk file cannot be installed cause of Parsing error and the module cannot be Found on LS posed as installedView attachment 5829609....View attachment 5829611View attachment 5829617View attachment 5829625
Click to expand...
Click to collapse
Current version (v0.3.6) and upstream still has 0 support for Android 9. Please wait for newer test builds.

v0.4.0 released with One UI 5.1 support and additional support for legacy One UI versions (One UI 1.x/2.x). Big thanks to @TMW1996 for testing it out. @otonieru give this new version a try when possible.

What does this enable in Galaxy Wearable? I don't have any issues with the app today even though I'm rooted with knox disabled. And what does enhancer do - is it a magisk module?

wyt18 said:
What does this enable in Galaxy Wearable? I don't have any issues with the app today even though I'm rooted with knox disabled. And what does enhancer do - is it a magisk module?
Click to expand...
Click to collapse
As explained in OP, the Enhancer is a Magisk module that will take care of those features that can't be patched alone via the Xposed API's (the main module), at the moment it only fixes the Galaxy Wearable apps (you can't pair your watch normally with a rooted phone). All the other listed apps are patched via the main LSPosed module.

BlackMesa123 said:
As explained in OP, the Enhancer is a Magisk module that will take care of those features that can't be patched alone via the Xposed API's (the main module), at the moment it only fixes the Galaxy Wearable apps (you can't pair your watch normally with a rooted phone). All the other listed apps are patched via the main LSPosed module.
Click to expand...
Click to collapse
thanks. that's really strange, as I had no problems pairing my watch with my rooted phone

wyt18 said:
thanks. that's really strange, as I had no problems pairing my watch with my rooted phone
Click to expand...
Click to collapse
It depends whether or not your phone has a custom ROM/custom script that disables the Samsung security module that blocks the wear devices pairing (WSM), your phone could also not have that service at all depending if it's a low/mid end one

wyt18 said:
thanks. that's really strange, as I had no problems pairing my watch with my rooted phone
Click to expand...
Click to collapse
If you have W4/W5 then you may not have this issue, fix needs for older watch S3 and previous

Better Mobile App

welcome