Develop Bugs

[LUX][STOCK][6.0.1][ROM]XDRom - extreme debloat, no GApps (10/01/2017)

Introduction
This is XD rom. It's stock based and "XD" stands for extreme debloat, so that's what you get - stock stability and freedom from bloat and GApps.
Disclaimer
Even if everything works 100% fine for me I take no responsibility for anything that happens to anyone else's device after flashing my ROM. If you want to try it, do it on your own risk. Always backup your data.
Description
Current version is based on XT1562, 24.107-52-5 European, single sim firmware (October 2016 security patch). Credits go to GtrCraft for TWRP flashable base.
Removed items
Whatever is being removed by stock Superr's Kitchen debloater plus the following:
/system/app/3c_main
/system/app/BasicDreams
/system/app/BookmarkProvider
/system/app/CalendarGoogle
/system/app/CaptivePortalLogin
/system/app/Chrome
/system/app/ColorProfiles
/system/app/colorservice
/system/app/com.motorola.android.nativedropboxagent
/system/app/com.motorola.android.settings.diag_mdlog
/system/app/DeskClockGoogle
/system/app/EditorSheets
/system/app/EditorSlides
/system/app/ExactCalculator
/system/app/FaceLock
/system/app/GoogleContactsSyncAdapter
/system/app/GoogleHome
/system/app/GoogleTTS
/system/app/HoloSpiralWallpaper
/system/app/HTMLViewer
/system/app/JapaneseIME
/system/app/LauncherConfig
/system/app/LiveWallapaers
/system/app/LiveWallpapersPicker
/system/app/Maps
/system/app/MotoDisplay_FWProxy_3.0
/system/app/MotorolaConnect_Basic
/system/app/MotoSignatureApp
/system/app/NoiseField
/system/app/PartnerBookmarksProvider
/system/app/PhaseBeam
/system/app/Photos
/system/app/PrintSpooler
/system/app/Stk
/system/app/UserDictionaryProvider
/system/priv-app/3c_checkin
/system/priv-app/3c_devicemanagement
/system/priv-app/3c_notification
/system/priv-app/3c_ota
/system/priv-app/AppDirectedSmsProxy
/system/priv-app/atfwd
/system/priv-app/AudioEffects
/system/priv-app/AudioMonitor
/system/priv-app/AudioMonitorHelper
/system/priv-app/BackupRestoreConfirmation
/system/priv-app/CallLogBackup
/system/priv-app/CellBroadcastReceiver
/system/priv-app/ConfigUpdater
/system/priv-app/CoreSettingsExt
/system/priv-app/CQATest
/system/priv-app/DigitalPersonalization
/system/priv-app/GmsCore
/system/priv-app/GoogleBackupTransport
/system/priv-app/GoogleFeedback
/system/priv-app/GoogleLoginService
/system/priv-app/GoogleOneTimeInitializer
/system/priv-app/GooglePartnerSetup
/system/priv-app/GoogleServicesFramework
/system/priv-app/LMIRescueSecurity
/system/priv-app/MotCamera
/system/priv-app/MotGallery2
/system/priv-app/Moto
/system/priv-app/MotoActions
/system/priv-app/MotoDisplay_3.0
/system/priv-app/MotoOneTimeInitializer*
/system/priv-app/Phonesky
/system/priv-app/PreloadContacts
/system/priv-app/SetupWizard
/system/priv-app/SetupWizardExt
/system/priv-app/SlpcService
/system/priv-app/SlpcSystem
/system/priv-app/SmartCardService
/system/priv-app/StatementService
/system/priv-app/StorageOptimizer
/system/priv-app/TagGoogle
/system/priv-app/Velvet
/system/priv-app/WallpaperCropper
/system/etc/motorola/MotoDemo
/system/vendor/moto
/system/vendor/pittpatt
/system/usr/srec
/system/media/bootanimation.zip
Most of the ringtones and notifications and some permissions for removed Moto and Google software
Added items
- MiXplorer
- Nova Launcher
- Hacker's Keyboard
- Phh's Superuser
- XDR Setup app.
Flashing
1. Boot into TWRP
(2. Backup)
3. Format data (Wipe>Format data>yes)
4. Transfer ROM to SD card/Local storage/USB OTG
5. Wipe>Factory reset
6. Install
7. Reboot
Use XDR Setup app after first boot to provision the device (unlock UI, Developer's options, screen lock, etc.)
Battery life
Standby time test
Life after Google
You can try using Micro GmsCore to access Play Store content, and here are some alternatives:
1. Interesting and useful apps in F-Droid store:
- Adaway (system-wide ad blocker)
- AFWall+ (very nice firewall. I use it in whitelist mode because it blocks internet access to all apps by default)
- Etar (calendar. Won't work without Google calendar service and account)
- K-9 mail (bit ugly but awesome mail client)
- Open camera (stock camera replacement)
- Wifi automatic (turns wifi off when you lock the screen which saves battery and improves security. Bugged a little and randomly disables wifi from time to time)
- SMSsecure (messaging app with encryption)
- 920 Editor (text editor)
- Document Viewer (self explanatory)
- Network Log (self explanatory)
2. Other interesting and useful apps around the web (mostly on XDA):
- ApkTrack (app updates tracker),
- Calc+ (calculator),
- CoolTool (CPU and RAM usage and other info display),
- DejaOffice (office app that looks a bit outdated, but it's the only calendar app to work without Google services I found so far),
- Disconnect.me (private web searches; the app FC right after starting it, probably due to lack of Google search services available)
- DriveDroid (turns the phone into Linux live USB),
- ES File Explorer (file explorer),
- Firefox (web browser),
- Gravity Screen (Turning screen off and on without using physical power button),
- Greenify (apps hibernator),
- KWGT (custom widget maker),
- LiveBoot (Chainfire's app that replaces boot animation with system log display),
- maps.me (open source google maps alternative),
- MiXPlorer (file explorer),
- MoboClean (permissions manager),
- Naked Browser (web browser),
- NetGuard (no-root firewall),
- NeutriNote (notes),
- Nova Launcher (launcher)
- Open Camera (same as F-Droid app),
- Parasol (community based permission manager),
- PryFi (WiFi security),
- Recently ("close all apps" button in recents window),
- Recordr (sound recording app),
- Servicely (services management. Think twice before installing and using it - developer's G+ site, developer's APKMirror downloads
- SD Maid (cleaning tool),
- Super Backup (apps, sms, call logs, etc. backup),
- Titanium Backup (data backup),
- True phone (dialer),
- VLC (media player),
- WifiKill (WiFi killer),
- Wifi Protector (WiFi security, anti-wifikill),
- Xposed
- OGYouTube - Youtube app alternative
You can find more interesting apps and links on this XDA forum
3. Software that may help you secure your device - sufficientlysecure.org
4. More security software - Secure Mobile Apps
5. XDA Labs (XDA app store)
6. Fossdroid.com - open source apps "store"
7. /r/Android App store - store with apps made by Reddit users. Mostly free
Credits and thanks
Motorola for their great devices
Google for supporting Android (but not for spamming it with its intrusive stuff)
Eskamhl - creator of Marshmallux, the base for the first XD Rom version
GtrCraft for providing flashable stock
lost101 - for letting me mess with his ROMs and learn
SeperR for the best kitchen and all the hard work
HootanParsa for MiXplorer
Klaus Weidner - creator of Hacker's Keyboard
TeslaCoil - creators of Nova Launcher
Phh for open source rooting solutions
Lukhash for Spy vs Spy remix I used as a ringtone
All users and testers of this ROM
Creators of free and open source apps (especially the ones who let us download them without the Play Store)
All XDA and other Android developers who share great ideas in the web
Please let me know if I missed someone
Download
XDR 24.107-52-5 (EU, single sim, October 2016 security patch) - NO ROOT version for those who want to encrypt their device first. Please mind that XDR Setup won't work without root.
Size: 217.8 MB
md5: 33ad037e0fec952307e6eda97da677fa
XDR 24.107-52-5 (EU, single sim, October 2016 security patch) - ROOTED
Size: 230.3 MB
md5: b1160dacd80ece918c0adf4bb0aafbb6
Bloat
Size: 634.4 MB
md5: 3a95e94b2038b3c1f3e2a07ff8140c7c
Version information
Status: Stable
Created: 10.01.2017

Old downloads
Removed files download:
https://www.androidfilehost.com/?fid=24499762635997762
GoogleBackupTransport download:
https://www.androidfilehost.com/?fid=24499762636002211
(Copy the file to your device, uznip, move to /system/priv-app folder and reboot)
Lux_XDRom_6.0.1_ver1.0beta.zip (no GApps) - 232.7 MB
XDRsetup - 1.9 MB
Lux_XDRom_6.0.1_ver1.0beta_GApps.zip (GApps included) - 276.1 MB
XDRom6.0.1_ver1.0beta_GApps_SW.zip (GApps and Setup Wizard enabled) - 289.7 MB
XDRom_6.0.1_ver1.0beta_GApps_SW_Sync_a.zip (GApps, Setup Wizard and Syncing enabled) - 299.7 MB
Single SIM version - description here
TWRP flashable device setup app

Some useful stuff
How to remove dual SIM support (credits to @madcat1990)
How to remove XPosed (credits to @madcat1990)
How to enable Moto Display (credits to @iniro)
How to enable LED notifications (credits to @baskwo for testing with Coffe Kernel). Please note it's only gonna work with custom kernels that have LED notifications enabled.

Nice. Thanks for taking the time to do this, stock ROMs have been so far the best battery option.
Let me begin the request list by asking, is it possible to add the new clusterplug management to this?

Wooo, thanks
Enviado desde mi XT1563 mediante Tapatalk

Thanks.
Can you just make it into one zip file to flash and experience rather than using ADB also?

Waiting for GApps version. Whit no GApps version can I install applications from google play?
Thx!!!

iniro said:
Waiting for GApps version. Whit no GApps version can I install applications from google play?
Thx!!!
Click to expand...
Click to collapse
NO Gapps - where can you find Play Store ? You just need a .apk file to install (apps able-to-run with GG service)

Can I flash open_gapps-arm-6.0-pico after flash rom?
edit: I fash your rom without adb build.prop lines, and then I flashed pico gapps.
Now starting...
edit: looks great!!! Thanks!!!
Problems:
-by now only one thing doesnt work, calendar. I have a message that says that I have to activate calendar storage... and I cant
-ambient display not working...
Questions:
-what do you recommend, this kernel or flash ultra kernel?

iniro said:
Waiting for GApps version. Whit no GApps version can I install applications from google play?
Thx!!!
Click to expand...
Click to collapse
I'll try to prepare it by tomorrow. You can still install apps from GP as long as you find the way to download them as the ROM doesn't have Play Store. However, some apps require Play Services to run.

stevedat said:
Thanks.
Can you just make it into one zip file to flash and experience rather than using ADB also?
Click to expand...
Click to collapse
I need to learn how to do it first. If you can give me some clues it'll be great.

minimale_ldz said:
Introduction
This ROM is based on eskamhl's Marshmallux v2.0 and the biggest credit goes to it's creator - Thank You. My work is taking debloating to the extreme and leaving only what's really essential for the ROM to work and serve as a daily driver. The main aim is removing as much intrusive apps and services as possible and make Android more privacy-friendly. I have made similair ROMS for Moto E and Moto G (both 1st gen) in the past and used both without any serious issues and got pretty decent battery life as a nice and useful side effect (up to 4 days on one charge with Moto G and 9 days with Moto E - mind that I'm not a "power user"). Before you install this ROM on your device please read the list of removed stuff, because something you find essential could be missing. Please also mind that you will ned to setup your MXP manually with ADB as there's no Setup Wizard to do it for you.
Disclaimer
Even if everything works 100% fine for me I take no responsibility for anything that happens to anyone else's device after flashing my ROM. If you want to try it, do it on your own risk. Always backup your data.
Description
This is XDRom, based on eskamhl's Marshmallux v2.0 with the following changes:
Removed items
system/app:
- 3c_main
- BasicDreams
- BookmarkProvider
- Bug2GoStub
- CalendarGoogle
- Chrome
- CloudPrint
- ColorProfiles
- colorservice
- com.motorola.android.nativedropboxagent
- com.motorola.android.settings.diag_mdlog
- ExactCalculator
- Exchange3Google
- FaceLock
- FMRadioService
- Gmail2
- GoogleContactsSyncAdapter
- GoogleHome
- GoogleTTS
- Hangouts
- HoloSpiralWallpaper
- HTMLViewer
- LatinImeGoogle
- LauncherConfig
- LiveWallapaers
- LiveWallpapersPicker
- Maps
- MotoDisplay_FWProxy_3.0
- MotorolaConnect_Basic
- MotoSignatureApp
- Music2
- PartnerBookmarksProvider
- PhaseBeam
- Photos
- PrintSpooler
- TCommander
- UserDictionaryProvider
system/priv-app:
- 3c_checkin
- 3c_devicemanagement
- 3c_notification
- AppDirectedSmsProxy
- atfwd
- AudioEffects
- AudioMonitor
- AudioMonitorHelper
- BackupRestoreConfirmation
- CalendarProvider
- CallLogBackup
- CellBroadcastProvider
- ConfigUpdater
- CoreSettingsExt
- CQATest
- DemoMode
- DigitalPersonalization
- FMPlayer
- GmsCore
- GoogleBackupTransport
- GoogleFeedback
- GoogleLoginService
- GoogleOneTimeInitializer
- GooglePartnerSetup
- GoogleServicesFramework
- GuideMe
- LMIRescueSecurity
- Moodles
- MotCamera
- MotGallery2
- MotoDisplay_FWProxy_3- MotoActions
- MotoCare
- MotoCareInt
- MotoDisplay_3.0
- MotoOneTimeInitializer
- Phonesky
- PreloadContacts
- SetupWizard
- SetupWizardExt
- SlpcService
- SlpcSystem
- SmartCardService
- StatementService
- STML0Updater
- StorageOptimizer
- TagGoogle
- Velvet
- WallpaperCropper
system/etc/motorola:
- MotoDemo
system/vendor:
- motorola
- pittpatt
Added items
system/priv-app:
- Ghost Commander
- Hacker's Keyboard
- Nova Launcher
build.prop:
#USB debugging lock bypass
persist.service.adb.enable=1
persist.service.debuggable=1
persist.sys.usb.config=mtp,adb
Removing these lines after installing and setting device up is strongly advised as they add peristent ADB debugging that could be used to break into your phone
Flashing
1. Boot into TWRP
(2. Backup)
3. Format data (Wipe>Format data>yes)
4. Transfer ROM to SD card/Local storage/USB OTG
5. Wipe>Factory reset
6. Install
7. Reboot
The ROM comes with Chainfire's SuperSU v.2.62-3 that may not work for everyone. I had to flash v.2.71 to get root access
When the installation completes you'll find there's no Setup Wizard, and some important UI components (Home button, Notifications, Quick Settings) are blocked. There's also no access to Developer's Options. Don't worry - they're normally being unlocked after you're done with Setup Wizard but since it's not there you need to do it manually:
1. Open ADB terminal on your computer
2. Connect your device
3. Execute the following commands:
Code:
adb shell
su
settings put global device_provisioned 1
settings put secure user_setup_complete 1
reboot
Your device is now set up and ready. It's also a good moment to remove persistent ADB debugging from build.prop.
Bugs
Please report
Life after Google
You can try using Micro GmsCore to access Play Store content, and here are some alternatives:
1. Interesting and useful apps in F-Droid store:
- Adaway (system-wide ad blocker)
- AFWall+ (very nice firewall. I use it in whitelist mode because it blocks internet access to all apps by default)
- Etar (calendar. Won't work without Google calendar service and account)
- K-9 mail (bit ugly but awesome mail client)
- Open camera (stock camera replacement)
- Wifi automatic (turns wifi off when you lock the screen which saves battery and improves security. Bugged a little and randomly disables wifi from time to time)
- SMSsecure (messaging app with encryption)
- 920 Editor (text editor)
- Document Viewer (self explanatory)
- Network Log (self explanatory)
2. Other interesting and useful apps around the web (mostly on XDA):
- ApkTrack (app updates tracker),
- Calc+ (calculator),
- CoolTool (CPU and RAM usage and other info display),
- DejaOffice (office app that looks a bit outdated, but it's the only calendar app to work without Google services I found so far),
- Disconnect.me (private web searches; the app FC right after starting it, probably due to lack of Google search services available)
- DriveDroid (turns the phone into Linux live USB),
- ES File Explorer (file explorer),
- Firefox (web browser),
- Gravity Screen (Turning screen off and on without using physical power button),
- Greenify (apps hibernator),
- KWGT (custom widget maker),
- LiveBoot (Chainfire's app that replaces boot animation with system log display),
- maps.me (open source google maps alternative),
- MiXPlorer (file explorer),
- MoboClean (permissions manager),
- Naked Browser (web browser),
- NetGuard (no-root firewall),
- NeutriNote (notes),
- Nova Launcher (launcher)
- Open Camera (same as F-Droid app),
- Parasol (community based permission manager),
- PryFi (WiFi security),
- QuickPic (gallery),
- Recently ("close all apps" button in recents window),
- Recordr (sound recording app),
- Servicely (services management. Think twice before installing and using it - developer's G+ site, developer's APKMirror downloads
- SD Maid (cleaning tool),
- Super Backup (apps, sms, call logs, etc. backup),
- Titanium Backup (data backup),
- True phone (dialer),
- VLC (media player),
- WifiKill (WiFi killer),
- Wifi Protector (WiFi security, anti-wifikill),
- Xposed
You can find more interesting apps and links on this XDA forum
3. Software that may help you secure your device - sufficientlysecure.org
4. More security software - Secure Mobile Apps
5. XDA Labs (XDA app store)
Credits and thanks
Motorola for their great devices
Google for supporting Android (but not for spamming it with its intrusive stuff)
Eskamhl - creator of Marshmallux
lost101 - for letting me mess with his ROMs and learn
zc2 - creator(s) of Ghost Commander
Klaus Weidner - creator of Hacker's Keyboard
TeslaCoil - creators of Nova Launcher
Lukhash for Spy vs Spy remix I used as a ringtone
All XDA and other Android developers who share great ideas in the web
Please let me know if I missed someone
Download
Lux_XDRom_6.0.1_ver1.0beta.zip (no GApps) - 232.7 MB
Version with GApps will be available as soon as I've got time to prepare it
Version information
Status: beta
Created: 10.04.2016
Click to expand...
Click to collapse
ADB Script cant be added to auto execute on boot?

iniro said:
Can I flash open_gapps-arm-6.0-pico after flash rom?
edit: I fash your rom without adb build.prop lines, and then I flashed pico gapps.
Now starting...
edit: looks great!!! Thanks!!!
Problems:
-by now only one thing doesnt work, calendar. I have a message that says that I have to activate calendar storage... and I cant
-ambient display not working...
Questions:
-what do you recommend, this kernel or flash ultra kernel?
Click to expand...
Click to collapse
I'm uploading removed files, the link will be live soon. You'll need to restore CalendarStorage in system/priv-apps folder, and if you want to use syncing feature you'll also need o restore system/priv-app/GoogleBackupTransport. I'm not sure if it's gonna work without GApps.
Ps. to restore anything you need to simply copy it to the right place and reboot your device
EDIT - I always used stock kernels and was happy with them. If you want to flash different kernel make sure it's for stock ROM and it should work

joeanca said:
Nice. Thanks for taking the time to do this, stock ROMs have been so far the best battery option.
Let me begin the request list by asking, is it possible to add the new clusterplug management to this?
Click to expand...
Click to collapse
I believe it's a kernel thing and I never messed with kernels (yet)

If I reflash rom.zip I loose my gapps

You can now download removed files from post #2

Installing pico gapps I have google backup transport.
Only added CalendarProvider.
Sometimes I have play services crashes...
Umm...

The error I think that is this:
04-11 20:57:17.692 E/AndroidRuntime(1034): at com.google.android.location.fused.bj.acom.google.android.gms:170)
---------- Post added at 08:14 PM ---------- Previous post was at 07:58 PM ----------
I have a lot of drops of signal. What modem is more suitable for this rom? I flashed latest stock reteu single sim before this.

I restored my twrp backup of bliss, and now waiting for your GApps version.

minimale_ldz said:
You can now download removed files from post #2
Click to expand...
Click to collapse
Could you tell us which .apk are needed to perfomr the settup wizard at startup? Thanks for your work.
iniro said:
I restored my twrp backup of bliss, and now waiting for your GApps version.
Click to expand...
Click to collapse
Me too, waiting for it

[JDCTeam] Resurrection Remix 5.8.5 FINAL Rel 40 [23 Mar] [7.1.2_r36] [EOL]

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Resurrection Remix 5.8.5​Samsung Galaxy S4 i9505 (jfltexx)​Release 40 - 23rd March 2018​
Code:
#include
/*
* Your warranty is now void.
* And other random stuff no-one reads.
*/
Intro
This is a straight port of Resurrection Remix with a tweaked kernel for Galaxy S4 i9505.
It is based on Nougat 7.1.2_r36 and nightlies of LineageOS 14.1 and Resurrection Remix from 20th March.
Security updates up to 20th March are applied, including Kernel.
OMS / Substratum is the integrated theme engine since Release 12.
Magisk is the integrated root and system modification hiding solution since Release 18.
Since Release 37 only the Rootless build is distributed.​Features
Code:
● navigation bar ▼
- enable/disable navbar
- navbar colour tint
- navbar button customisation smart bar
- navbar pulse
- navbar fling
- double tap to sleep navbar
● status bar ▼
- brightness slider
- enable / disable show notification count
- superuser indicator switch
- double tap to sleep status bar
- carrier label
- carrier label switch
- carrier label colour
- carrier label size
- clock customisation's
- time & date
- day & date toggle
- centre / right / left clock choice
- date format
- clock font styles
● battery ▼
- battery bar customisation
- battery icon customisation (circle / landscape / portrait and more)
- battery % text
● network traffic indicator ▼
- network traffic arrows switch
- incoming / outgoing traffic
- network traffic colour
● status bar RR logo ▼
- RR logo colour
- position
● custom logos ▼
- logo colour
- position
- style
● status bar weather ▼
- weather colour
- weather position (left / right)
- weather font style
- weather size
● status bar ticker ▼
- ticker text colour
- ticker icon colour
● animations ▼
- toast animations
- list view animations
- system animations
- qs tile animations
- power menu animations
- misc animations
● gestures ▼
- gestures anywhere feature
- 3 finger swipe screenshot gesture
● app circle bar ▼
- choose apps in app sidebar
- trigger width
- trigger height
- trigger position
● app sidebar ▼
- choose apps in app circle
- trigger width
- trigger height
- trigger position
● pie control ▼
- pie trigger (left / right / bottom)
- pie targets
- pie colours
- more pie features
● recents panel ▼
- clear all button switch
- clear all tasks switch
- clear all button location (top right / top left / top centre / bottom left / bottom right / bottom centre)
- full screen recents
- recents styles
- omniswitch
● cclock widget ▼
- clock and alarm customisation's
- weather panel customisation's
- calender events
● lockscreen ▼
- lock screen bottom shortcuts
- lock screen general shortcuts
- 100+ icons for shortcuts
- double tap to sleep lock screen
- lock screen media art / enable disable
- quick pin / patter unlock
- lockscreen wallpaper
- lock screen weather widget
- lock screen icons colour
● quick settings draggable tiles ▼
- customisable tiles
- dynamic tiles adjustment
- number of columns / rows
- tile animations
● notification drawer ▼
- task manager
- custom headers
- long press toggles to enter settings
- disable immersive mode messages
- force expand notification
- quick pull-down
- smart pull-down
- notification panel transparency
- volume dialog transparency
- notification panel stroke
- volume dialog stroke
● buttons ▼
- back-light timer
- back-light strength
● advanced reboot menu ▼
- power off
- reboot (recovery / boot-loader / hot reboot)
- screen-shot
- power menu end calls switch
- restart systemui
- aeroplane mode
- screen record
- on the go mode
- sound panel
● home button (for devices with hw keys only) ▼
- home button answer call
- long press actions
- double tap actions
● menu button (for devices with hw keys only) ▼
- short press actions
- long press actions
● search button (if device supports) ▼
- short press action
- long press action
● volume buttons ▼
- wake up device
- playback control
- ringtone volume control
- keyboard cursor control
- swap buttons on landscape mode
- volume key answer
● miscellaneous ▼
- selinux switch (switch between permissive and enforcing selinux if device has selinux enabled)
- clock shortcut
- disable battery saver warning colour
- ota updates
- camera shutter sound enable / disable
● systemui tuner ▼
- enabled by default
- removed demo mode and tweaked systemui tuner as compared to aosp
- status bar icons customisation's
- quick settings customisation's
● other features ▼
- performance profiles
- lcd density
- expanded desktop mode
- heads up switch and customisation's
- live display
- configurable 0/90 / 180 / 270 degree rotation
- lock screen auto-rotate switch
- double tap power button to enable camera gesture
- prevent accidental wake-up
- wake phone on charging plug
- battery light customisation's
- notification light customisation's
- font size
- CM privacy guard
- RR ota
- CM root inbuilt
- new RR configurations
- overall smoothness improvements
- optimisation's to improve battery
- includes all android nougat features
- includes all CM14.1 features
- and much much more ...
Download
Available releases:
OLD:
Release 17 - 7.1.1, last CM root version.
Release 28 - 7.1.2, Magisk 12 root, July security updates.
Release 29 - 7.1.2, Magisk 13.3 root, July security updates.
Release 30 - 7.1.2, Magisk 13.3 root, August security updates.
Release 32 - 7.1.2, Magisk 14.0 root, September security updates.
Release 33 - 7.1.2, Magisk 14.2 root, September security updates.
Release 34 - 7.1.2, Magisk 14.3 root, October security updates.
Release 35 - 7.1.2, Magisk 14.3 root, October security updates, WPA_supplicant fixes.
Release 36 - 7.1.2, Magisk 14.3 root, October security updates, WPA_supplicant fixes.
Release 37 - 7.1.2 Rootless, November security updates, Krack fixes.
Release 38 - 7.1.2 Rootless, December security updates.
Release 39 - 7.1.2 Rootless, January security updates.
CURRENT: Release 40 - New builds only from AFH going forward.
Download latest ROM from AndroidFileHost.
Download archived roms rom Sourceforge.
Source code
BuffCore kernel: here
Buffs' common device tree: here
RR code: here LOS code: here
Build instructions (use old method) here
All code in this rom is correctly forked / cherry picked / credited where not authored by Buff99.
Anyone can use my repos if they do the polite thing and ASK PERMISSION FIRST - no use outwith this please.
What does / doesn't work
All hardware support issues will be the same as LOS / CM 14.1.
DOES
GPS, orientation and acceleration work. GPS Status gets a good fix indoors.
Camera.
MHL video output.
OMS support integrated.
Magisk integrated.
You tell me.
DOESN'T
GLONASS.
You tell me.
Thanks / Credits
Code:
* Resurrection Remix core team, The extended team of RR maintainers
* CM team, LOS team, Omni team, Slim team.
* XDA developers, AndroidFileHost, Sourceforge, Github.
* Everyone who has contributed to LOS / CM on S4.
* The [COLOR=Red]Buff99_RR_test_team[/COLOR] for help and support:
* [URL="https://forum.xda-developers.com/member.php?u=4204995"]Sjamie[/URL], [URL="https://forum.xda-developers.com/member.php?u=7995577"]63ck0[/URL], [URL="https://forum.xda-developers.com/member.php?u=4669592"]Rabbit48[/URL],
* [URL="https://forum.xda-developers.com/member.php?u=5978751"]-Sohail[/URL], [URL="https://forum.xda-developers.com/member.php?u=3750366"]Andy Hall[/URL], [URL="https://forum.xda-developers.com/member.php?u=7868788"]Frankv723[/URL]
* Many thanks to [URL="https://forum.xda-developers.com/member.php?u=5968293"]Side[/URL]
* The [COLOR=Red]OptLos_test_team[/COLOR] and JDCTeam.
* Did I already thank [URL="https://forum.xda-developers.com/member.php?u=5968293"]Side[/URL]? Yes [URL="https://forum.xda-developers.com/member.php?u=5968293"]Side[/URL]. [URL="https://forum.xda-developers.com/member.php?u=5968293"]Side[/URL] MUST be thanked more than once.
* TJsteveMX and Srisurya95 for their previous work.
* DaveJimson, ReubenBrown13, Elv1503, Nxss4 - initial beta testing.
XDA:DevDB Information
Resurrection Remix Nougat for S4 i9505 (jfltexx), ROM for the Samsung Galaxy S4
Contributors
Buff99, side
Source Code: https://github.com/ResurrectionRemix
ROM OS Version: 7.x Nougat
ROM Kernel: Linux 3.4.x
ROM Firmware Required: Lollipop supporting bootloader and modem / non-hlos
Based On: LineageOS
Version Information
Status: No Longer Updated
Current Stable Version: Release 2
Stable Release Date: 2016-11-27
Created 2016-11-26
Last Updated 2018-12-02

Installation​
Required for installation: Recovery - Latest version of TWRP - TWRP 3.1.1-0
Firmware - Lollipop supporting bootloader and modem / non-hlos. Look in _Bon_Bon's great MODEMS and BOOTLOADERS collection
Gapps - a latest version of Open Gapps 7.1. Either Pico / Nano or see Addons post #7 below about how to use a Config-Gapps file to customise a Super Gapps install​1st install - " clean install "
Make a full nandroid backup <always backup!>.
Properly remove previous root solution i.e. flash Magisk uninstaller and / or UnSU.
Fully wipe device.
Install Rom.
Install desired root solution if using Rootless.
Install Gapps.
Wipe Cache and Art / Dalvik.
Reboot.
Wait for 1st boot.
Enjoy.
2nd and subsequent installs - " dirty flash "
If you do not follow these instructions you will get install / boot problems.
Uninstall all Substratum overlays.
Make a full nandroid backup <always backup!>.
Properly remove previous root solution i.e. flash Magisk uninstaller and / or UnSU.
Wipe System, Cache and Art / Dalvik <wiping System is ESSENTIAL for Magisk>.
Install Rom.
Install desired root solution if using Rootless.
Install latest Gapps (Updating with latest Gapps for every dirty flash is A Good Thing).
Wipe Cache and Art / Dalvik.
Reboot.
Wait for App optimization.
Enjoy.
Swapping between Magisk and Rootless builds
Changing build types is as simple as following the full dirty install procedure, changing the root solution in the appropriate place.
While dirty flashing may be possible for some updates, be prepared that progress sometimes means you will need to clean install updates!
Nandroid backups are your friend!

Latest changelist
- Release 40 -
Release-40-changelog.txt
md5sum - a365b7177dc31c0b91e7dd85a4395d6d
​
Fixes to APN's and sensitive numbers.
Fix SELinux policy for MAX88920 calibration file
Updated translations.
Bump security patch level to 2018-03-05.
Kernel: Buffcore 1.8.
Simple GPU governor added. Don't think it's any better than ondemand though, so not enabled by default.
Security fixes, bug fixes, crypto fixes.
March 2018 security updates applied for RR, LOS and kernel.
RR and LOS code grabbed at 12:00 GMT Tuesday 20th March.
Please view the attachment for further details.
Thanks to Buff99_RR_test_team for help and support: Sjamie, 63ck0, Rabbit48, -Sohail, Andy Hall, Frankv723
Thanks to OptLos_test_team & Side

Reporting bugs​
Proper reporting of issues will help me spend time productively fixing bugs rather than tail chasing vague issues.
Please follow these guidelines.
Reporting bugs
If you wish to report an issue, then the onus is on you to prove the issue.
If you provide exact replication instructions, an idea of how often the issue occurs and logs that enable me to replicate the issue then a fix will be possible ("if you do action 1 then action 2 then action 3 you will find that bug X occurs 100% of the time").
If you give a vague complaint about an issue then I will not look at it without explicit replication instructions and preferably logs ("phone overheats when using CallOfDirty") .
Issues about overheating, battery life or performance should be backed up with information from relevant monitoring apps.
One-off issues generally do not get investigated unless they are well documented and have provided logs.
Issues that are specific to one piece of software will generally not get investigated without logs. I am not very keen on installing software to investigate bugs, especially if I need to create user accounts. If you can replicate the issue on more than one piece of software it will increase the chance of being fixed.
Issues to do with speaker or microphone related issues need to be explicit about which speaker and mic is in use (internal, head phones, earphones, bluetooth headset, Bluetooth speakers), whether normal earpiece or hands free mode is in use, Audio mods that have been installed. Logs may be helpful too.
Issues with media / streaming / playback should be provided with examples.
A picture is worth a thousand words; a movie is thousands of pictures. If you cannot describe your problem in words, post pictures or movies to help show your issue. The rom has in-built screen capture and screen recording tools, so please use them.
It can often be difficult to tell what is going on with logs from a fully loaded system. It can help a lot if you make a nandroid of your current system, format and then make a clean install, with gapps only if needed, and only the app that causes the issue - as minimal a system for replication as possible - then replicate the bug and capture logs. If I then have to replicate the issue I can easily replicate your system.
If you want to send a full set of logs for a bug, I recommend using Syslog.
Perform some of the functionality that is bugged and then capture logs in the app.
If you have had a reboot then capture a set of logs immediately when the system reboots. If the last-kmsg file is empty then the logs are useless.
Type a brief description of the problem in the notes field and your XDA username .
Select to scrub personal information.
Upload it to a web based host (gdrive, dropbox, etc.) and PM the link to me.
And remember:
The Drill .... settings > configurations > about > the drill > logcat or GTFO​​

Hints, tips & FAQs​
RR is a very feature laden rom. Don't go mad and switch everything on when you first boot. Concentrate on a feature and see how you like it. Blur for example can take a lot of tuning to look right.
- If something does not run go into Settings > Privacy > Privacy Guard and check settings.
- To enable root go to Magisk Manager.
- Use Open Gapps for your Google apps. You can either use the smallest version you can get away with (recommended Pico or Nano) or use a larger version in combination with a gapps-config file, see post #7.
- Most issues / caveats for CM14.1 / LOS will apply for this rom!
- Long boot times on 2nd and subsequent boots? Go into Settings > Privacy > Privacy Guard > Advanced > Bootup and disable startup on apps that don't need started on every boot.
- After flashing in TWRP you may see two messages saying "E:unknown command" - this can happen on all CM14.1 based roms and is nothing to worry about.
Q. Does xposed....
A. There are now versions of Xposed which run on Nougat. However Xposed WILL NOT BE SUPPORTED AT ALL. You will be on your own. Do not report bugs. Logs that show Xposed use will be ignored.
Q. The install button does not work when I want to install an app, usually a non market side-loaded app?
A. Stop / disable the application running that is using a screen overlay.
Q. Does OTA work?
A. Yes. It checks to see if a new version has been published and alerts you. Links are provided in the OTA app for direct downloads. The rom will still need to be flashed manually as normal.
Q. Why is there now a Magisk and a Rootless build?
A. The work on this Nougat RR rom is nearly finished. I am now giving the user the option of selecting to install a root of their choice, or go with the current Magisk. Once I have finished releasing builds the Rootless version will allow you to install the latest Magisk version of the day rather than an old obsolete version that will need updated once the rom is installed. Running the rom without any root applied is also a viable option.
Q. What theme engine is integrated?
A. Full OMS7 support has been implemented from version 12 onwards, so Substratum can be installed from the play store if you wish to theme the rom.
Q. Can I use an alternate kernel?
A. You may be able to use other kernels. Use Flashify to flash them or extract the boot.img and flash as img from TWRP. Do not wipe kernel / dalvik if only flashing a kernel. SideCore looks to be a promising alternative. Buffcore FYI is now very closely related to SideCore and for most uses you will notice no difference between the two.
Q. I would like louder / better quality sound.
A. You could us the latest mod by A.R.I.S.E. - ARISE+Magnum+Opus+20180105+Stock+Edition.zip from here. See advanced post #7 for more on Arise. I no longer use Arise as I find the available Magisk mods to be less bloated and better performing. From Magisk downloads I recommend installing "Ainur Sauron", "Viper4Android FA by Ahrion" and "Audio Modification Library".
Q. Can I replace the weather provider?
A. Go to settings > apps > configure apps > weather. Add weather provider takes you to the playstore. Download Yahoo weather provider. Back to weather and enable Yahoo weather provider.
Q. Can I mirror the rom on a different provider?
A. NO! only want the rom served from AFH and Sourceforge so I can monitor downloads. NO mirroring is permitted. Downloads from other providers will not be supported.
Q. Can you make an i9515 (or other variant) build too?
A. Sorry but I am not going to make another blind build, too much grief and hassle.
Q. My screen goes black when making or receiving a call and does not return?
A. You probably need to clean and / or re-calibrate your proximity sensor. See here.
Official Resurrection Remix FAQ: here
Crowdin for translations here
Feature requests to "thoughts / feedback" section of RR G+ page here

Advanced​
Magisk:
From version 37 I don't include Magisk, it's up to you to choose your root solution.
Recommended: enable Magisk hide for Google play store and Google services framework (if using substratum also hide overlays for GPS & GSF - thanks Catscratch).
Recommended: disable busy box and host hiding.
Recommended: ensure you are certified in Google play store.
Recommended: only enable Magisk Hide when you are actually trying to hide something, may have caused root disapearing bugs.
If you want to play Mario run, you need both Magisk Hide enabled and Magisk Manager hidden.
If you have Magisk problems refer to the Magisk support thread here.
Good thread of hints and tips for Magisk by Didgeridoohan here.
Debug options esp. ADB over USB should be disabled if you are trying to get a safetynet pass.If you need busybox, the Stericson version from playstore works fine.
Adaway 3.2 is the recommended host filtering solution.​
Rootless:
From version 37 I only distribute the Rootless version.
Rootless is intended to allow the user to choose which root solution to apply.
This will be especially useful in future when Magisk 14.5 is no longer current.
The rom should even be useable without any root applied.
Google play store certification:
If you find protected applications not appearing when expected in play store, check in the settings to see the certification state. When uncertified, apps like Mario run will not show up.
To force certified, stop the play store and delete it's data. Ensure you can pass SafetyNet. Next time you start you should be certified.
F2fs
F2fs file system is supported.
It is only recommended to use with the /data and /cache partitions, leave /system as default ext4.
Caution! The /data partition contains your internal SD card partition. Although it does not get backed up when you nandroid, if you format /data you will lose the contents of Internal SD. So we need to back this up ourselves if we are changing /data.
To change /data and /cache to F2fs:Connect your phone to your PC with your trusty USB cable.
In TWRP, go into Mount and enable MTP.
Copy everything from your internal SD to a folder on your PC.
Unmount MTP.
Go into Backup and perform a full nandroid backup.
Go into Wipe and change File System on /data and /cache from ext4 to f2fs.
Restore the /data and /cache partitions from your newly performed backup (will warn you that you are restoring to a different file system, is OK).
Go back to Mount and enable MTP again.
Copy the internal SD contents back from PC.
Job done.​

Addons​
Arise:
For Release 39 use the latest ARISE+Magnum+Opus+20180105+Stock+Edition.zip from here.
Recommended: use the in-built compatibility module for Magisk. My attached Arise prop file has had this edit added.
DO not install Arise as part of an initial Clean install - has been observed that wifi connectivity has been lost due to this. Do first install as ONLY rom + (root solution) Gapps, let OS boot and settle / install apps THEN boot back into TWRP and do a dirty flash with Arise.
Arkamys audio is now broken and should not be used (from my testing anyway).
Don't be scared of it not being an aroma installer - it is actually easier and more flexible once you are used to it.
Place your edited arise_customize.prop into the root folder of your internal SD card.
The procedure for a full dirty flash with Arise then becomes:Boot into TWRP and flash: Rom, (root solution), Gapps, Arise Magnum Opus, clear cache, reboot.​
My arise_customize.prop for Opus is attached as an example to this post. You may notice it has been simplified. Try it!
For listening to loud raucous heavy metal I use:Installed using Opus prop: Core install, ViPER4Arise 2.5.0.5, v4a_profiles, Qualcomm effects = ANDROID_O, DIRAC, Uninstall MusicFX.
Viper4Arise settings: Convolver ON (DFX metal rap big bass), Viper Bass ON (Freq 60Hz, Boost 12db), Viper Clarity ON (Natural, 3.5db)​
Big Gapps:
Large Gapps packages can be installed with our large system volume, saving valuable /data space by allowing you to fill unused /system space with the Google apps you normally install from the play store.
However, do not just install the full super package and expect there to be no impact on the fluidity of your system. Installing everything will bog your system down with too much unnecessary crap.
Recommended: setup a gapps-config.txt file to customise what gets installed to your preference and use the full Super Gapps file. Using this I delete some unnecessary apps for me from the rom (trebuchet launcher, AOSP keyboard, live wallpapers, exchange, calendar) and add in about 400 Mb of google apps I normally install anyway.
Gapps-config.txt can be leveraged to uninstall pretty much any file in the rom. This is a very powerful feature.
The basic idea for setting up the config-gapps file is: Core gapps are automatically installed, so you don't bother with them. Add the Pico and Nano apps as you prefer. Add all the Google apps you normally install from the playstore.
Gapps-config.txt needs to be in the same folder as the gapps file you will be using.
Careful you do not delete essential apps for boot : you need to have a launcher and keyboard, otherwise you won't be able to do anything on first boot. Watch out for apps which delete others when added (launcher, keyboard, etc.).
I have included a zip with my config-gapps as an example and a template file setup to make it easy for you to creat your own custom version.
Spectrum
Spectrum is a basic profile switcher app by @frap129 for switching performance profiles pre-setup by the rom dev.
Download Spectrum app here.
There are 4 profiles setup in the rom for use in Spectrum. The names and descriptions are preset - the descriptions in Spectrum don't really relate too much to Buff99 profiles.
The Spectrum application does not need to be installed if you do not wish to use profile switching.
If you do not install the app the default profile ("Balanced") is used.
You can directly change profiles without the app by saving a value of 0 - 3 to /data/property/persist.spectrum.profile
BALANCED (0)
The default Buff setup, same as without Spectrum applied.
PERFORMANCE (1)
Slightly slower version of balanced.
BATTERY (2)
Tweaked for a lower speed and better battery usage. Will not be as quick to perform certain tasks but will be more battery frugal.
GAMING (3)
Setup the same as balanced, except the governer is tweaked to work with user tweaked voltages.
Balanced, Performance and Battery are setup to use with default voltages (Power efficient speeds are favoured).
Gaming is setup to be used with user tweaked voltages, and scales more smoothly between all voltages.
Any suggestions of settings to apply are welcome.
View attachment Buff99_arise_customize.prop.zip
Setup for Arise versions from 20170424 - 20180105
Core install, ViPER4Arise 2.5.0.5, v4a_profiles, Qualcomm effects = ANDROID_O, DIRAC, Uninstall MusicFX + ADDED magisk compatibility mod.
View attachment Buff99_gapps-config_2.0.zip
Version 2.0 - new template to make it easier to create your own version!

Donators
Donators​- Hall of Fame -​
Никита Перерослый
Matthias Behr
Bruno Mercier
Quentin Vanduele
Scott Dill
Sean Higgins
Jeremy Watts
Andrew Swanson
Kristopher Kolessar
Andre Kuehne
Jose Angel Palenque Plaza​
Many thanks for your generous donations !
All donators are welcome to join the Buff99_RR_test_team and / or get access to beta versions built every couple of days, PM me for details.​

Video rec work ?
Sent from my SM-G903F using Tapatalk

mbaier said:
Video rec work ?
Sent from my SM-G903F using Tapatalk
Click to expand...
Click to collapse
nope; rom is untested and bugs need reported.

It's a official release? Are u the official manteiner?
Thx for this work

AndroidianoSr said:
It's a official release? Are u the official manteiner?
Thx for this work
Click to expand...
Click to collapse
It is unofficial on jfltexx for the moment but I am official Note 8 tablet maintainer.
I am hopeful releasing this will raise interest and others will volunteer to help out on an official build as I don't want to be sole maintainer.

How can I change weather provider (cLock) to yahoo? It's better for my localization.

Bookmarked!
Sent from my jfltexx using XDA Labs

could you upload to mega?

Downloading now to try on my l720 that is gsm unlocked.
Sent from my GT-I9505 using XDA Free mobile app

Great Rom! But after a Reboot I can't acess my sd-card files

Can someone post some screenshots?

cberggold14 said:
Great Rom! But after a Reboot I can't acess my sd-card files
Click to expand...
Click to collapse
Bummer has been fine for me (..so far..)
Can you get me a log please?
@cberggold14 - I also noticed you reported the same bug on AICP 12.1...

Screenshots
https://1drv.ms/f/s!AlomWSgBgPQIrQEOMCjey3QWWVBl
https://android-hubo.de/thread/5111...-8-0-7-1-0-r7-i9505/?postID=116284#post116284
for germany

[Deodex] Experience ROM A530F/W/A730F

[A8/A8+ OREO ROM]
All thanks go to @salimskiy and not me, i do not own this rom
[Deodex] Experience ROM A530F/A530W/A730F
NOTICE:
I am not responsible for any happy endings with your device, so dont blame the owner for his mistakes or yours, or else i will laugh at you
NOTICE 2: Yes, I do have permissons from rom owner to post this
Mod Edit
Description and Features:
Deodex
-Support and installation of A530F / A530W / A730F
-Android 8.0.0
-Base A730FXXU3BRI1
-Patch security 01.09.2018
-Deodex
-Root Magisk v17.1
- Stock-mode kernel (support init.d, deep sleep fix, support for private mode is enabled, ttl lock on 64)
-Installation and first boot 3 min
-The first setting without installing applications from the market, etc. (added your own applications: AdAway, Telegram) can be removed as normal applications
-Samsung applications from the Pie with Oreo icons (Calculator, Voice Recorder, Email, Browser, Shealth) are removed as simple applications
-Fast, smooth
- cleaned of debris
- Fully deleted knox, secret folder, SPay
-Removed applications that can be put from the market
-Updated all system applications
-The device status in the official settings
- Signature verification disabled
-Included the ability to downgrade applications
-Ability to take screenshots in applications where the security policy does not allow
-From the settings removed item software update and completely removed from the system
-Increased auto-brightness speed
- Disabled notification of high volume, brightness
-Tviki cscfeature.xml
-Fix google services
-Added items to settings:
Stock network speed on the left, video quality improvement, screen recording
- screenshot in png format with normal date and time display
-Number identifier and spam protection in the caller
-Record calls
-Added tiles in the curtain: VoLte, UHQ sound quality, recording and screen capture, reading mode
-Patch paid themes
-Applock
-Added ClockFace
- Geometric wallpaper Infinity s9
-TouchWizHome Experience 10
-Gallery 2018 of Pie
-Weather from Pie
- Full date in the curtain, on the lock screen, in the AD
-Full date in the weather
-Floating messages
-Messages Note 9 with stickers
-Keyboard with Note 9 themes
-Live Note 9 messages
-ios emoji
- Delay after call and call forward message pop up
-SPay Gear Support
-Edge Panels Note 9
- Disabled horizontal cache, vertical scrolling of lists, page scrolling cache
-Root set after the first boot into the system
-Maybe that I do not remember
Root set after the first boot into the system
P.S.Magisk I recommend putting after the first boot into the system.
INSTRUCTIONS:
1. Download the zip, under this post
2. Boot into TWRP
3. Format data
4. Install zip
5. Restart your phone!
No additional files need to be sewn, even if you are migrating from the drain.
P.S. Who put the previous versions, a new one can be rolled on top without wipes, and immediately flash the archive of Magisk + Busybox.
If you use facebook, you need to flash the zip listed too because the rom developer blocked facebook for some reason ._.
All thanks go to @salimskiy and not me, i do not own this rom
________________________________________________
Screenshots
Downloads removed
Android Version: 8.0
Developer: @salimskiy
Last Updated: Oct 18
​

ROM & Samsung A8
Hi Salimskiy
I just bought a Samsung A8 2018 and i'm disapointed.
It's almost impossible to get a good connection to my NAS without using Wifi with this phone.
Downloading application is also almost impossible without wifi.
Listening music with DS Audio is impossible without using Wifi.
I have a very good 4G provider here so there is no problem about this.
I checked the settings to be sure to allow datas network on the GSM (without Wifi)
I got a Vernee Apollo X before and it worked really better.
Could this ROM solve all the problems I have with the A8 I just bought?
thanks.

There are not many roms for this phone so it's really appreciate it when people like you do the hard work. Thank you so much. I will try it soon

Does "Signature verification disabled" mean that we have signature spoofing and that we can use microg?

xabierd said:
Does "Signature verification disabled" mean that we have signature spoofing and that we can use microg?
Click to expand...
Click to collapse
I guess so
Basically it allows to install apps without having an error, for example in roms with signature verification enabled, when you try to install TouchWiz home like a normal apk, it would fail, but with signature verification disabled, it won't fail

how to root???, Bro. I cannot root by SuperSu & Magistik.

Nothing of my post. I don't know what say.

ZmisiS said:
I "Signature verification disabled" with Smileyface App. My Android is stock and he is rooted.
Click to expand...
Click to collapse
I recommend you to remove this post since the Smileyface app is not allowed to be mentioned.
You may get banned or warned by a moderator.

[CLOSED]EOL [ROM][Unofficial][10.0][microG][signed]hardened LineageOS 17.1 Oneplus 7T Pro

This thread is deprecated, please look at the 18.1 successor thread.
This thread is dedicated to provide hardened Lineage-OS 17.1 builds with microG included for the OnePlus 7T Pro (hotdog) with current security patches.
Features of this ROM
Download here
Pre-installed microG and F-Droid like LineageOS for microG project (own fork)
Pre-installed AuroraStore
OTA Support
eSpeakTTS engine
Bromite as default browser
Additional security hardening features listed below:
Cloudflare as default DNS (instead of Google)
Privacy-preferred default settings
Optional blocking of Facebook- and Google-Tracking (Settings - Network & Internet)
Optional disable captive portal detection or choose from various providers (default is GrapheneOS and not Google; Settings - Network & Internet)
Firewall UI (under Trust)
Increased max. password length of 64
No submission of IMSI/phone number to Google when GPS is in use
Default hosts file with many blocked ad/tracking sites
Privacy-enhanced Bromite SystemWebView
Extra control of sensor access for additionally installed user apps (Special access under app permissions)
Kernel kept up to date with ASB patches of Google kernel/common 'android-4.14-q-release' branch
Debloated from Oneplus blobs for Soter and IFAA
Hardened bionic lib and constified JNI method tables
Current release levels
Security string: 2021-10-01
AOSP tag: 10.0.0_r41
Bromite System Webview: M93
Source-code and build instructions
Kernel: https://github.com/lin17-microg/android_kernel_oneplus_sm8150/tree/lin-17.1-mse
Build manifest: https://github.com/lin17-microg/local_manifests/tree/lin-17.1-hmalloc
Installation Instructions
YOU ARE RESPONSIBLE SOLELY YOURSELF FOR ANY ACTIONS YOU DO WITH YOUR DEVICE !!!
Please note - I won't explain any single aspect (e.g. how to install 'fastboot' on your PC or troubleshoot USB connectivity issues under Windows). Search the net and consult the search engine of your choice or look here in XDA, there is plenty of information available.
Pre-Requisites
Have fastboot and adb installed on your PC and make sure, you can connect via USB to your device in fastboot mode and via adb
An unlocked bootloader (see e.g. LineageOS install instructions)
If you come from Stock ROM, make sure to upgrade your device to the latest offered software version
Know, how to boot into fastboot mode (with powered off device press [Power]+[Vol.down]+[Vol.up])
Please read carefully:
I refer in general to the LineageOS install instructions, but there are some deviations!
It is recommended to really go through the instructions once, before doing anything. You have been warned.
Install the dedicated Lineage recovery for this ROM
For the Oneplus 7T Pro (hotdog), there is currently no official TWRP available! The unofficial TWRP did not work for me.
Please download the specific Lineage revocery for this build. It has been built using this ROM's signing key, because the official Lineage recovery did not work either for me (the official Lineage recovery works with the official build, this one works for this specific build).
Flash this specific recovery with the below commands:
Code:
fastboot flash recovery_a lineage-17.1-20210118-recovery-microG-signed-hotdog.img
fastboot flash recovery_b lineage-17.1-20210118-recovery-microG-signed-hotdog.img
Reboot now into recovery from fastboot (follow the menu options) - DO NOT boot into your OS yet.
If you come from Stock ROM, sideload the "copy partitions" script referred and described in the LineageOS install instructions.
Please note, that you may get error messages stating
Partition product_b dd: /dev/block/dm-1: write error: No space left on device
Partition vendor_b dd: /dev/block/dm-2: write error: No space left on device
You can ignore those, as long as it is product or vendor.
Continue as described in the LineageOS installation instructions with formatting /data and sideloading the ROM ZIP.
It is normal, that you observe at 47% progress a longer break, followed by a step 1/2 and finally 2/2 before a success message appears.
DO NOT flash Gapps!
This ROM comes with pre-installed microG. So don't attempt to flash Gapps.
Update Instructions
This ROM offers OTA updates through the Updater app. Therefore, normally, no further activities necessary.
You can however also manually update the ROM by sideloading a newer version of this ROM via recovery.
IMPORTANT:
If you would like to manually update by sideloading the ROM, you need to first flash the linked recovery image (see install instructions) again via fastboot! Recovery is always updated when flashing a new ROM version, and that updated recovery can't sideload this ROM version. Don't ask me, why. I will have to find out, how to solve that issue.
Frequently asked Questions
1. AuroraStore
I bundle AuroraStore with my build, but I am in no way associated with its development. The first place to look for support is the AuroraStore XDA thread and its excellent FAQ Section. Nevertheless, I would like to answer some frequently asked questions in conjunction to my ROM:
Q: AuroraStore offers an update to "Google play services" - I thought your ROM is "Google-free"?
A: The bundled microG application spoofs the existence of Google play services. This is a necessary part of microG's design. In AuroraStore, please add the Play Services to the ignore list. You won't be able to "update" them anyhow, but better do not even try to do so!
Q: I can't connect, Aurora claims "no network" - but I can normally use my browser and other apps to connect to the internet.
A: If the "iptables block script" of my ROM is active, try to deactivating and immediately after re-activating it.
If that does not help or you don't use the iptables block script of tis ROM, you may try to force-close the app or logoff/logon again. However, the Aurora support thread will be your primary point to look at!
2. Google/Facebook iptables blocking
Q: How does the Google/Facebook blocking work?
A: Via the 'iptables'/'ip6tables' functionality of the Linux layer of Android, the ip4/ip6 address range of Google and Facebook is blocked on a per app base (in fact, it is generally blocked, but some apps on an internal exception list are still allowed to connect). This means, that apps (or spyware components thereof) cannot send/receive data to/from Google/Facebook. Btw, certain connections to X-mode and Palantir are also blocked, but I am not sure, whether this is enough - any qualified information to improve this are very welcome!
Q: I like this Google/Facebook blocking approach, but my favourite <xyz> app needs to be able to connect to Google/Facebook. Can you please add this app to your exception list?
A: Please read this comprehensive information. In short: If you have a trustworthy FOSS project aiming at connecting to Google/Facebook via Webview as 'mobile browser' with (almost) no permissions or you have a tracker-free app to connect to a proprietary service, which simply is hosted on a Google webspace, I am happy to discuss this, but I will definitely not allow any "Playstore top ten genuine spyware app".
Q: Which apps are on your exception list?
A: see here
Q: But if Google is blocked for almost every app, can I still get push messages?
A: Yes, you can! Push messages are routed and controlled through the microG functionality, which stil can connect to Google.
3. etc/hosts ad blocking
Q: What is the etc/hosts ad-blocking and how does it work?
A: I deliver a monthly-updated /system/etc/hosts file from the AdAway app which lists a comprehensive selection of known ad/spyware addresses. Any attempt to connect to those sites is redirected to the local OS, so a positive connection is reported, but no content is transmitted. (See linked explanation).
Q: Which anti-tracker lists do you use?
A: The same defaulted by the AdAway app, plus in addition Microsoft's 'Hockey Stick' stuff.
4. Firewall UI
Q: What is the Firewall UI and how does it work?
A: Under Settings - Data privacy - Trust, you'll find a list of all installed apps (optionally, you can also show the shipped system apps), which lets you control - per app - whether the app can connect via WiFi, Mobile data or VPN. In fact, you can in any LineageOS individually control this in the app details (Settings), this option simply gives you a comprehensive view for all apps.
Q: How do I use it? What are the typical use-cases:
A: It of course depends on your specific requirement, but below some very typical use-cases:
a. Disallow internet access completely (uncheck WiFi, mobile data and VPN)
This might be useful for an app, which does not need internet access to work, but uses internet access to e.g. nag you with ad-crap (some games on the play store, for example)
b. Make sure, that an app only uses WiFi (in order to avoid costs when using mobile data) - uncheck mobile data
c. Make sure, that an app only has internet, when connected via VPN - uncheck WiFi and mobile data
5. Privacy features / data privacy of this ROM
Q: Does this ROM protect my privacy by design/default?
A: First of all, you will never get any "auto-protection" without having to take care, what you do!
What this ROM provides to you in addition to an "official" LineageOS:
This ROM comes with microG, to avoid the necessity of having to flash the Google apps, with the "mother of all spyware" called Google Play services. So many apps with that dependency would still work, either fully, or with their core-functionality, but without "extra Google convenience" features.
You can optionally block Google/Facbebook connections, which can add a further protecion layer (see the specific FAQ section about that feature)
Many nasty ad-servers, which are embedded into shady apps or websites are blocked by default
Some hardening measures known from the GrapheneOS project have been added
HOWEVER - just some examples, how you can easily screw up any privacy gain (this list is by far not even near to comprehensive):
You still CAN install all kinds of shady apps and use privacy-ignoring services. If you e.g. install the genuine Facebook or Instagram app, the majority of your private data on your phone will be immediately uploaded to Facebook servers, as those apps even refuse to start, if you do not grant all the sensitive permissions! (Note: Yes, afterwards, when your data has already been stolen, you can revoke those permissions again. And yes, Whatsapp seems maybe 'slightly' better in this regard, but if you really believe, that WA isn't fully integrated into the FB ecosystem, you must be living on another planet).
If you use the Microsoft Outlook app to connect to any "non-Microsoft" e-mail provider, your logon credentials to that other mail provider are stored on Microsoft servers factually allowing Microsoft to steal your identity. Using Microsoft e-mail services or GMail discloses all your e-mails to automated scanning for "suspicious activities"; this has nothing to do with your phone, but outlines, how you can void even the most secure device by making use of privacy-ignoring services.
Making use of Genuine Google-apps with microG also isn't a good idea - make use of alternatives.
Any app, which you install on your device, could misuse its needed privileges! So try to stick to FOSS apps.
And last, but not least, if you are a 'dissident' or fear otherwise any targeted or comprehensive surveillance, this ROM isn't for you either...
Dealing with signed builds
Please note, that this builds is signed with an own key. When you come from a different build, you cannot directly "dirty-flash" this build. You have to perform a "clean flash".
Bug reports:
If you have a problem, please create a post with these informations:
Original Kernel shipped with this rom:
Build Date:
And try to get log as described here
Please note that I can't and won't support issues with builds using a different kernel or Xposed.
In regards to microG, I will try my best to help when it is related to this ROM (I use it myself), but any questions of the type "the YXZ-app can't do <some sort of fancy xyz Google functionality> properly" are better asked in the respective microG forums.
Credits
AOSP project
LineageOS project
microG project
Graphene OS project
csagan5 (Bromite)
WhyOrean (Aurora)
SkewedZeppelin (Kernel patches)

Change log
2021-10-12 - FINAL build
Security String 2021-10-01
Bromite System Webview and Browser updated to 93.0.4577.83
2021-09-10
ASB Security string 2021-09-05
microG 0.2.22.212658-2
2021-08-07
ASB Security string 2021-08-05
Bromite System Webview and Browser updated to 92.0.4515.134
F-Droid updated to 1.13
Fix in WiFi randomization
2021-07-10
ASB Security string 2021-07-05
Bromite System Webview and Browser updated to 91.0.4472.146
microG 0.2.21.212158-2
Kernel: Many sec. patches applied (taken from Divest-OS)
AuroraStore 4.0.7
2021-06-13
ASB Security string 2021-06-05
Bromite System Webview and Browser updated to 91.0.4472.102
microG 0.2.19211515-9
Kernel WLAN driver (qcacld-3.0) patched to include mitigations against "Frag" vuln.
2021-05-10
ASB Security string 2021-05-05
Bromite System Webview and Browser updated to 90.0.4430.204
Upstreamed microG (no new version)
Update: AuroraServices 1.1.1
2021-04-10
ASB Security string 2021-04-01
Bromite System Webview and Browser updated to 90.0.4430.59
F-Droid updated to 1.12
Update: AuroraStore 4.0.4 with AuroraServices 1.1.0
2021-03-08
Security string 2021-03-05
Kernel slightly patched
Bromite System Webview updated to 88.0.4324.207
Bromite Browser updated to 88.0.4324.207
F-Droid 1.11
microG 0.2.18.204714
2021-02-05
Security string 2021-02-05
Kernel slightly patched
Bromite System webview updated to 88.0.4324.141
Bromite Browser updated to 88.0.4324.141
F-Droid 1.10-alpha-234
microG 0.2.17.204714-5
2021-01-22 - Initial build
Security string 2020-01-05
Pre-installed microG (0.2.16.204713-10) and F-Droid like the LineageOS for microG project (own fork)
Pre-installed AuroraStore
Bromite as default browser (87.0.4280.106)
eSpeak TTS engine (FOSS TTS solution)
Additional security hardening features listed below:
Cloudflare as default DNS (instead of Google)
Privacy-preferred default settings
Optional blocking of Facebook- and Google-Tracking (Settings - Network & Internet)
Optional disable captive portal detection or choose from various providers (default is GrapheneOS and not Google; Settings - Network & Internet)
Firewall UI (under Trust)
Increased max. password length of 64
No submission of IMSI/phone number to Google when GPS is in use
Default hosts file with many blocked ad/tracking sites
Privacy-enhanced Bromite SystemWebView (87.0.4280.131)
Extra control of sensor access for additionally installed user apps (Special access under app permissions)
Constified JNI method tables and hardened bionic lib

Security Hardening Features - Details
1. Pre-installed microG and F-Droid
same as the LineageOS for microG project
2. Pre-installed AuroraStore
works w/o having to enable the "unknown sources feature"
3. Extra control of sensor access for additionally installed user apps
Special access under app permissions
4. Cloudflare (instead of Google) default DNS
Cloudflare DNS has a better privacy policy than Google Public DNS and has DNS-over-TLS and DNS-over-HTTPS. In the deafult DNS settings (as fallback) and network diagnostics, the Cloudflare DNS adresses 1.1.1.1 and 1.0.0.1 are specified as defaults (instead of Google's 8.8.8.8 and 8.8.4.4)
5. Privacy-preferred default settings
When newly installed, the below settings are defaulted, different from standard LineageOS 17.1 (all settings can be changed at any time later):
Anonymous LineageOS statistics disabled (proposal during Setup)
The standard browsing app does not get the location runtime permission automatically assigned
Sensitive information is hidden on the lock screen
Camera app: Location tagging disabled by default
Further, when a lock screen protection is set (PIN, pattern, password), the Nfc, Hotspot and airplane mode tiles require authentication and cannot be set without
6. Optional blocking of Facebook- and Google-Tracking
Settings => Network & Internet (scroll down)
When activated, all outgoing connection attempts to Facebook servers will be suppressed.
Same applies to Google, but certain apps on an internal exception list will still be able to connect (AuroraStore, microG, or e.g. NewPipe, if installed)
7. Optional disable captive portal detection and to select Captive portal server URL provider
Settings => Network & Internet (scroll down)
When deactivated, the system will not ping a specific Google server any longer when establishing a WiFi connection to determine, whether a captive portal is being used. Further, the captive portal URL provider can be set (default is GrapheneOS and not Google; Settings - Network & Internet)
8. No submission of IMSI or phone number to Google when GPS is in use
GPS also works fine, if no SIM card is present, so there obviously is no benefit for the phone holder (different from other involved parties ) to provide this data . . .
9. Default hosts file with many blocked ad/tracking sites
The system's hosts file redirects a comprehensive list of URLs known to be adware, tracking, etc. to 127.0.0.1 (ipv4) and ::1 (ipv6)
10. Privacy-enhanced Bromite SystemWebView
Instead of the default Chromium System Webview component, the Bromite SystemWebView is used offering more privacy, more ad blocking and less Google tracking.
11. Bromite as shipped Browser
A chromium based browser with many privacy features.
12. Firewall UI
Settings => Privacy - Firewall
Lists all apps and allows to restrict Internet access per app in regards to WiFi, mobile network or VPN
This per-app feature is a standard feature in LineageOS, but the UI to show all apps is an Extra (taken from a topic in LineageOS's Gerrit - it may, or may not, become part of the official LineageOS one day)
13. Maximum password length increased to 64

Bash:
OnePlus7TPro:/proc # zcat config.gz | grep USB_ACM
# CONFIG_USB_ACM is not set
What a shame. Can you set ACM support in kernel config?

Wow, what a work!! Thank you for this.

todevrandom said:
Bash:
OnePlus7TPro:/proc # zcat config.gz | grep USB_ACM
# CONFIG_USB_ACM is not set
What a shame. Can you set ACM support in kernel config?
Click to expand...
Click to collapse
Will have a look this week - the kernel right now is identical to the LineageOS "official" kernel (plus some patches). Is my understanding correct, that this is needed for USB tethering?

@MSe1969 wow.. Ok first of all thanks ! It's great seeing another privacy lover put there !
2 questions:
1. Why not going with /e/ ? Or at least push your great extensions (like firewall ui etc etc) upstream there? Just curious if there is anything preventing you going that route
2. Did you ever tried locking the bootloader with the OP 7t pro? I have read that it is possible when saving the signing key via fastboot

steadfasterX said:
@MSe1969 wow.. Ok first of all thanks ! It's great seeing another privacy lover put there !
2 questions:
1. Why not going with /e/ ? Or at least push your great extensions (like firewall ui etc etc) upstream there? Just curious if there is anything preventing you going that route
2. Did you ever tried locking the bootloader with the OP 7t pro? I have read that it is possible when saving the signing key via fastboot
Click to expand...
Click to collapse
Hi, thanks for the positive feedback.
I know /e/ and I also watch their repositories from time to time to obtain new ideas or simply see, what they do (same I do e.g. with GlassROM, GrapheneOS, divestos, ...). More a question of my personal taste to have my own build variant, which I provide meanwhile for a couple of devices (LineageOS 14.1 f. falcon & peregrine, a 16.0 treble build for Huawei P9 and 17.1 builds f. oneplus3, osprey and hotdog), but definitely no "hard" reason or any negative attitude towards /e/.
Regarding locking BL, well - as I develop for this device, locking the BL does not provide any advantage for me, in the contrary...

MSe1969 said:
Will have a look this week - the kernel right now is identical to the LineageOS "official" kernel (plus some patches). Is my understanding correct, that this is needed for USB tethering?
Click to expand...
Click to collapse
Yeah, for communicating with Arduino/Discovery board from Linux Deploy. It works in lieage16 for samsung. I had tried to build Lineage18.1 today following official guide but run in some issues while building (maybe openjdk version). Next try will be the next weekend.
MSe1969 said:
Will have a look this week
Click to expand...
Click to collapse
Many thank's!
Anyway, thank's for this ROM

MSe1969 said:
Hi, thanks for the positive feedback.
I know /e/ and I also watch their repositories from time to time to obtain new ideas or simply see, what they do (same I do e.g. with GlassROM, GrapheneOS, divestos, ...). More a question of my personal taste to have my own build variant, which I provide meanwhile for a couple of devices (LineageOS 14.1 f. falcon & peregrine, a 16.0 treble build for Huawei P9 and 17.1 builds f. oneplus3, osprey and hotdog), but definitely no "hard" reason or any negative attitude towards /e/.
Regarding locking BL, well - as I develop for this device, locking the BL does not provide any advantage for me, in the contrary...
Click to expand...
Click to collapse
Afaik it is possible to lock the bootloader when using own signing keys (which you do) and just enabling the signature in fastboot. A big advantage and you won't loose anything as you can still put custom ROMs on it as long as they have the enabled signature .. Or what do i miss here?

I have tried to root it but i'm in infinite loop and power 20 s can't stop it
Edit power + volume up works

steadfasterX said:
Afaik it is possible to lock the bootloader when using own signing keys (which you do) and just enabling the signature in fastboot. A big advantage and you won't loose anything as you can still put custom ROMs on it as long as they have the enabled signature .. Or what do i miss here?
Click to expand...
Click to collapse
Well, for example fastboot boot testkernel.img wouldn't work any more. As said, "me doing development work" - for a user of my ROM it definitely would be beneficial. To be honest - I am not 100% sure, whether it really works (I would have to gain more information first, the 7T is brand new to me, I know it is possible with the 3T).
Would you mind testing it and confirming? (I know: If it doesn't work - you may end up in having to fully wipe, so not an easy answer - you wanted also to re-assure before simply doing it)

Azev_new said:
I have tried to root it but i'm in infinite loop and power 20 s can't stop it
Edit power + volume up works
Click to expand...
Click to collapse
OK, glad you've found the way to stop the loop.
What exactly have you done (step by step), when you attempted to root the device?

MSe1969 said:
OK, glad you've found the way to stop the loop.
What exactly have you done (step by step), when you attempted to root the device?
Click to expand...
Click to collapse
- Transfer Boot.img from your rom to phone
- Flash boot.img with latest Magisk Manager
- Transfer patched-magisk.img to PC
- Connected phone to PC with cable
- Launch Power shell Windows
- Command > ./adb reboot bootloader
- Command > ./fastboot boot magisk_patched.img
- Bootlop before i can start for flash definitively
BTW great rom, smooth and battery friendly.

Since i have changed accent color with Styles and Wallpapers in settings, the app crash. I have reboot the phone many times. I have used this option 4 times after a reboot, you will can see it in the logcat
I put a screenshot and a locat file

MSe1969 said:
Well, for example fastboot boot testkernel.img wouldn't work any more. As said, "me doing development work" - for a user of my ROM it definitely would be beneficial. To be honest - I am not 100% sure, whether it really works (I would have to gain more information first, the 7T is brand new to me, I know it is possible with the 3T).
Would you mind testing it and confirming? (I know: If it doesn't work - you may end up in having to fully wipe, so not an easy answer - you wanted also to re-assure before simply doing it)
Click to expand...
Click to collapse
Ah ok i see. Well.. Its my DD and so nothing i can do easily. I'll build /e/ for this device as soon as my time permits as the plan was to go with /e/.. Now with the appearance of your ROM I am not sure which to choose lol

Brightness doesn't drop below 33% as seen in Settings while slider at it's minimum position

todevrandom said:
Brightness doesn't drop below 33% as seen in Settings while slider at it's minimum position
Click to expand...
Click to collapse
I haven't changed any display settings compared to the original LineageOS device config, so I assume the official LineageOS ROM behaves the same.

Azev_new said:
Since i have changed accent color with Styles and Wallpapers in settings, the app crash. I have reboot the phone many times. I have used this option 4 times after a reboot, you will can see it in the logcat
I put a screenshot and a locat file and a screenshot
Click to expand...
Click to collapse
Thanks for the log - will have a look later

I have problems with notifications too, if the screen is off, i dont have notifications from SMS and chats (telegram, Signal)
Edit: Notifications fixed, my bad
Re-Edit: second attempt for root was the good one

[ROM][Unofficial][12.1][microG][signed]hardened LineageOS 19.1 Oneplus 7T Pro

This thread is dedicated to provide hardened Lineage-OS 19.1 builds with microG included for the OnePlus 7T Pro (hotdog) with current security patches.
You can consider this thread as the successor of my respective LineageOS 18.1 thread.
Features of this ROM​Download here
Pre-installed microG like LineageOS for microG project (own fork)
Pre-installed AuroraStore, AuroraDroid and AuroraServices
OTA Support
Additional security hardening features listed below:
Cloudflare as default DNS (instead of Google)
Privacy-preferred default settings
Optional blocking of Facebook- and Google-Tracking (Settings - Network & Internet)
Optional disable captive portal detection or choose from various providers (default is GrapheneOS and not Google; Settings - Network & Internet)
Increased max. password length of 64
Enhanced controls for secondary users
Exec spawning (ported from GrapheneOS)
No submission of IMSI/phone number to Google when GPS is in use
Default hosts file with many blocked ad/tracking sites (can be disabled)
Privacy-enhanced Bromite SystemWebView Mulch System Webview
Extra control of sensor access for additionally installed user apps (Special access under app permissions)
Kernel kept up to date with ASB patches of Google kernel/common 'android-4.14-q-release' branch
Debloated from Oneplus blobs for Soter and IFAA
Hardened bionic lib and constified JNI method tables
Optional timeout for Bluetooth and WLAN connections
Optional auto-reboot if device not unlocked for defined timeframe
Option to only use fingerprint unlock for apps and not for the device
Optional timeout for Bluetooth and WLAN connections
Per connection WiFi randomization option
Sensitive QS Tiles require unlocking
Native debugging
Ability to disable non-system apps from the "App info" screen
Scoped storage (ported from GrapheneOS)
Firewall UI (Settings - Network & Internet - Manage data restrictions)
Current release levels​Security string: 2023-06-05
AOSP tag: 12.1.0_r22
Mulch System Webview M114
Source-code and build instructions​Kernel: https://github.com/lin19-microg/android_kernel_oneplus_sm8150/tree/lin-19.1-mse
Build manifest: https://github.com/lin19-microg/local_manifests/tree/lin-19.1-microG
Installation Instructions​
YOU ARE RESPONSIBLE SOLELY YOURSELF FOR ANY ACTIONS YOU DO WITH YOUR DEVICE !!!
Please note - I won't explain any single aspect (e.g. how to install 'fastboot' on your PC or troubleshoot USB connectivity issues under Windows). Search the net and consult the search engine of your choice or look here in XDA, there is plenty of information available.
Pre-Requisites​
Have fastboot and adb installed on your PC and make sure, you can connect via USB to your device in fastboot mode and via adb
An unlocked bootloader (see e.g. LineageOS install instructions)
If you come from Stock ROM, make sure to upgrade your device to the latest offered software version
Know, how to boot into fastboot mode (with powered off device press [Power]+[Vol.down]+[Vol.up])
Please read carefully:​I refer in general to the LineageOS install instructions, but there are some deviations!
It is recommended to really carefully go completely through the instructions below once, before doing anything. You have been warned!
Let's go!​
Install the dedicated Lineage 19.1 recovery for this ROM​For the Oneplus 7T Pro (hotdog), there is currently no fully working official TWRP available! The offered official one can't decrypt the /data partition and I am not 100% sure about the rest.
Please download and unpack the specific Lineage revocery for this build. It has been built using this ROM's signing key. Unzip and flash this specific recovery with the below commands (your device must be in 'fastboot mode'):
Code:
fastboot flash recovery_a lineage-19.1-20221222-recovery-hotdog.img
fastboot flash recovery_b lineage-19.1-20221222-recovery-hotdog.img
Reboot now into recovery from fastboot (follow the menu options) - DO NOT boot into your OS yet.
Make sure, your firmware is on Android 12​If you are already on Android 12 with Stock OxygenOS and are on the latest offered patch level, be happy and proceed with the next chapter. Same applies, if you come from a different Android 12 based Custom ROM and you know for sure, that the firmware has been updated to Android 12.
In all other cases, you must update the firmware before proceeding. Please refer to the LineageOS documentation on upgrading the firmware - the best source right now seems to be the linked Oxygen Updater app (obtain and download the file only). If you have a European 7T Pro (HD1913), you can unpack the firmware file here and follow the README instead.
Please note: If the touch screen does not work after booting up to the Lineage 19.1 recovery, then it is a clear sign, that you need to update the firmware (the touch screen also won't work in that case, when you boot the OS). The recovery also lets you navigate with vol-up/vol-down and select via Power key, so you can proceed. However - but if you prefer, you can temporarily also flash the LineageOS 18.1 recovery from the above linked 18.1 predecessor thread, but then make sure, that after having upgraded the firmware, you will flash the 19.1 recovery again as explained above. Reboot into the recovery after having updated the firmware.
Install the ROM​If you come from my previous LineageOS 18.1 ROM, you can simply sideload the 19.1 ROM on top of my 18.1 ROM, so don't format the /data partition (unless you really want to get rid of your data). In all other cases, you have no choice than formatting /data, so continue as described in the LineageOS installation instructions with formatting /data and sideloading the ROM ZIP (download link above).
It is normal, that you may observe at 47% progress a longer break, followed by a step 1/2 and finally 2/2 before a success message appears.
In case you need to format /data:
Please keep in mind, that formatting the /data partition also wipes the shared internal memory - backup first!
DO NOT flash Gapps!
This ROM comes with pre-installed microG. So don't attempt to flash Gapps. If Gapps is a 'must' for you, please use the official LineageOS build for this device.
Update Instructions​
This ROM offers OTA updates through the Updater app. Therefore, normally, no further activities necessary.
You can however also manually update the ROM by sideloading a newer version of this ROM via recovery.
Frequently asked Questions​
These questions come from various threads for my hardened microG ROMs. I have listed them here, because they also apply to this ROM and are hopefully helpful.
1. AuroraStore
I bundle AuroraStore with my build, but I am in no way associated with its development. The first place to look for support is the AuroraStore XDA thread and its excellent FAQ Section. Nevertheless, I would like to answer some frequently asked questions in conjunction to my ROM:
Q: AuroraStore offers an update to "Google play services" - I thought your ROM is "Google-free"?
A: The bundled microG application spoofs the existence of Google play services. This is a necessary part of microG's design. In AuroraStore, please add the Play Services to the ignore list. You won't be able to "update" them anyhow, but better do not even try to do so!
Q: I can't connect, Aurora claims "no network" - but I can normally use my browser and other apps to connect to the internet.
A: If the "iptables block script" of my ROM is active, try to deactivating and immediately after re-activating it.
If that does not help or you don't use the iptables block script of tis ROM, you may try to force-close the app or logoff/logon again. However, the Aurora support thread will be your primary point to look at!
2. Google/Facebook iptables blocking
Q: How does the Google/Facebook blocking work?
A: Via the 'iptables'/'ip6tables' functionality of the Linux layer of Android, the ip4/ip6 address range of Google and Facebook is blocked on a per app base (in fact, it is generally blocked, but some apps on an internal exception list are still allowed to connect). This means, that apps (or spyware components thereof) cannot send/receive data to/from Google/Facebook. Btw, certain connections to X-mode and Palantir are also blocked, but I am not sure, whether this is enough - any qualified information to improve this are very welcome!
Q: I like this Google/Facebook blocking approach, but my favourite <xyz> app needs to be able to connect to Google/Facebook. Can you please add this app to your exception list?
A: Please read this comprehensive information. In short: If you have a trustworthy FOSS project aiming at connecting to Google/Facebook via Webview as 'mobile browser' with (almost) no permissions or you have a tracker-free app to connect to a proprietary service, which simply is hosted on a Google webspace, I am happy to discuss this, but I will definitely not allow any "Playstore top ten genuine spyware app".
Q: Which apps are on your exception list?
A: see here
Q: But if Google is blocked for almost every app, can I still get push messages?
A: Yes, you can! Push messages are routed and controlled through the microG functionality, which stil can connect to Google.
3. etc/hosts ad blocking
Q: What is the etc/hosts ad-blocking and how does it work?
A: I deliver a monthly-updated /system/etc/hosts file from the AdAway app which lists a comprehensive selection of known ad/spyware addresses. Any attempt to connect to those sites is redirected to the local OS, so a positive connection is reported, but no content is transmitted. (See linked explanation).
Q: Which anti-tracker lists do you use?
A: The same defaulted by the AdAway app, plus in addition Microsoft's 'Hockey Stick' stuff.
4. Firewall UI
Q: What is the Firewall UI and how does it work?
A: Under Settings - Network & Internet - Manage data restrictions, you'll find a list of all installed apps (optionally, you can also show the shipped system apps), which lets you control - per app - whether the app can connect via WiFi, Mobile data or VPN. In fact, you can in any LineageOS individually control this in the app details (Settings), this option simply gives you a comprehensive view for all apps.
Q: How do I use it? What are the typical use-cases:
A: It of course depends on your specific requirement, but below some very typical use-cases:
a. Disallow internet access completely (uncheck WiFi, mobile data and VPN)
This might be useful for an app, which does not need internet access to work, but uses internet access to e.g. nag you with ad-crap (some games on the play store, for example)
b. Make sure, that an app only uses WiFi (in order to avoid costs when using mobile data) - uncheck mobile data
c. Make sure, that an app only has internet, when connected via VPN - uncheck WiFi and mobile data
5. Privacy features / data privacy of this ROM
Q: Does this ROM protect my privacy by design/default?
A: First of all, you will never get any "auto-protection" without having to take care, what you do!
What this ROM provides to you in addition to an "official" LineageOS:
This ROM comes with microG, to avoid the necessity of having to flash the Google apps, with the "mother of all spyware" called Google Play services. So many apps with that dependency would still work, either fully, or with their core-functionality, but without "extra Google convenience" features.
You can optionally block Google/Facbebook connections, which can add a further protecion layer (see the specific FAQ section about that feature)
Many nasty ad-servers, which are embedded into shady apps or websites are blocked by default
Some hardening measures known from the GrapheneOS project have been added
HOWEVER - just some examples, how you can easily screw up any privacy gain (this list is by far not even near to comprehensive):
You still CAN install all kinds of shady apps and use privacy-ignoring services. If you e.g. install the genuine Facebook or Instagram app, the majority of your private data on your phone will be immediately uploaded to Facebook servers, as those apps even refuse to start, if you do not grant all the sensitive permissions! (Note: Yes, afterwards, when your data has already been stolen, you can revoke those permissions again. And yes, Whatsapp seems maybe 'slightly' better in this regard, but if you really believe, that WA isn't fully integrated into the FB ecosystem, you must be living on another planet).
If you use the Microsoft Outlook app to connect to any "non-Microsoft" e-mail provider, your logon credentials to that other mail provider are stored on Microsoft servers factually allowing Microsoft to steal your identity. Using Microsoft e-mail services or GMail discloses all your e-mails to automated scanning for "suspicious activities"; this has nothing to do with your phone, but outlines, how you can void even the most secure device by making use of privacy-ignoring services.
Making use of Genuine Google-apps with microG also isn't a good idea - make use of alternatives.
Any app, which you install on your device, could misuse its needed privileges! So try to stick to FOSS apps.
And last, but not least, if you are a 'dissident' or fear otherwise any targeted or comprehensive surveillance, this ROM isn't for you either...
Dealing with signed builds​Please note, that this builds is signed with an own key. When you come from a different build, you cannot directly "dirty-flash" this build. You have to perform a "clean flash".
Bug reports:​If you have a problem, please create a post with these informations:
Original Kernel shipped with this rom:
Build Date:
And try to get log as described here
Please note that I can't and won't support issues with builds using a different kernel or Xposed.
In regards to microG, I will try my best to help when it is related to this ROM (I use it myself), but any questions of the type "the YXZ-app can't do <some sort of fancy xyz Google functionality> properly" are better asked in the respective microG forums.
Credits​AOSP project
LineageOS project
microG project
Graphene OS project (many privacy and security features have been ported)
csagan5 (Bromite)
WhyOrean (Aurora)
SkewedZeppelin (Kernel patches and some good ideas of Divest-OS)

Change Log​08-06-2023
ASB Security string 2023-06-05
Some kernel patches
Mulch Webview 114.0.5735.61
microG on 0.2.28.231657-5
FakeStore 0.2.0
AuroraStore 4.2.3
09-05-2023
ASB Security string 2023-05-05
Some kernel patches
Mulch Webview 113.0.5672.77
13-04-2023
ASB Security string 2023-04-05
Some kernel patches
Removed Bromite browser and shipped LineageOS' Jelly instead
Mulch Webview 112.0.5615.48
19-03-2023
ASB Security string 2023-03-05
Some kernel patches
Vendor blobs and sec. patch updated from HD1913_11.F.20
Bromite Webview replaced by Mulch Webview 111.0.5563.58
12-02-2023
ASB Security string 2023-02-05
microG on 0.2.27.223616-3
Firewall UI moved to Privacy Dashboard
Some kernel patches
Spoof apps installed by G*PlayStore
06-01-2023
ASB Security string 2023-01-05
microG on 0.2.26.223616-16
Bromite Browser and Webview updated to 108.0.5359.156
Firewall UI (Settings - Network & Internet - Manage data restrictions)
Some kernel patches
French translation for ported features
29-12-2022 - 1st 'official' build
Port of GrapheneOS' 'Scoped storage' feature
27-12-2022 - INITIAL BUILD (Beta)
Pre-installed microG 0.2.26.223616-2
Pre-installed AuroraStore 4.1.1, AuroraDroid and AuroraServices
OTA Support
Bromite as default browser, 108.0.5359.156
Additional security hardening features listed below:
Cloudflare as default DNS (instead of Google)
Privacy-preferred default settings
Optional blocking of Facebook- and Google-Tracking (Settings - Network & Internet)
Optional disable captive portal detection or choose provider (default is GrapheneOS and not Google; Settings - Network & Internet)
Increased max. password length of 64
Enhaced controls for secondary users
Secure application spawning
No submission of IMSI/phone number to Google when GPS is in use
Default hosts file with many blocked ad/tracking sites (can be disabled)
Privacy-enhanced Bromite SystemWebView, 108.0.5359.156
Extra control of sensor access for additionally installed user apps (Special access under app permissions)
Kernel kept up to date with ASB and other patches
Debloated Oneplus blobs (removed Soter and and Google hotword recognition)
Hardened bionic lib and constified JNI method tables
Optional timeout for Bluetooth and WLAN connections
Optional auto-reboot if device not unlocked for defined timeframe
Per connection WiFi randomization option
Sensitive QS Tiles require unlocking
Native debugging
Ability to disable non-system apps from the "App info" screen

Security Hardening Features - Details​
1. Pre-installed microG
same as the LineageOS for microG project
2. Pre-installed AuroraStore and AuroraDroid
works w/o having to enable the "unknown sources feature"
3. Extra control of sensor access for additionally installed user apps
Special access under app permissions
4. Cloudflare (instead of Google) default DNS
Cloudflare DNS has a better privacy policy than Google Public DNS and has DNS-over-TLS and DNS-over-HTTPS. In the deafult DNS settings (as fallback) and network diagnostics, the Cloudflare DNS adresses 1.1.1.1 and 1.0.0.1 are specified as defaults (instead of Google's 8.8.8.8 and 8.8.4.4)
5. Privacy-preferred default settings
When newly installed, the below settings are defaulted, different from standard LineageOS 17.1 (all settings can be changed at any time later - credits go to the GrapheneOS project):
Anonymous LineageOS statistics disabled (proposal during Setup)
The standard browsing app does not get the location runtime permission automatically assigned
Sensitive information is hidden on the lock screen
Further, when a lock screen protection is set (PIN, pattern, password), the Nfc, Hotspot and airplane mode and many further tiles require authentication and cannot be set without
6. Optional blocking of Facebook- and Google-Tracking
Settings => Network & Internet (scroll down)
When activated, outgoing connection attempts to Facebook servers and to Google servers will be suppressed. Certain apps on an internal exception list will still be able to connect (e.g. AuroraStore, microG, or NewPipe, if installed)
7. Optional disable captive portal detection and to select Captive portal server URL provider
Settings => Network & Internet (scroll down)
When deactivated, the system will not ping a specific Google server any longer when establishing a WiFi connection to determine, whether a captive portal is being used. Further, the captive portal URL provider can be set (default is GrapheneOS and not Google; Settings - Network & Internet)
8. No submission of IMSI or phone number to Google when GPS is in use
GPS also works fine, if no SIM card is present, so there obviously is no benefit for the phone holder (different from other involved parties ) to provide this data . . .
9. Default hosts file with many blocked ad/tracking sites
The system's hosts file redirects a comprehensive list of URLs known to be adware, tracking, etc. to 127.0.0.1 (ipv4) and ::1 (ipv6) - this option can be switched off under Settings - Security
10. Privacy-enhanced Bromite SystemWebView
Instead of the default Chromium System Webview component, the Bromite SystemWebView is used offering more privacy, more ad blocking and less Google tracking.
11. Bromite as shipped Browser
A chromium based browser with many privacy features.
12. Maximum password length increased to 64
14. Debloated from Oneplus blobs for Soter and Google hotword recognition
Unnecessary privacy intrusive vendor blobs are not included in the build
15. Hardened bionic lib and constified JNI method tables
This has been taken over from GrapheneOS
16. Option to only use fingerprint unlock for apps and not for the device
An option in the fingerprint settings, also taken from GrapheneOS
17. Optional timeout for Bluetooth and WLAN connections
See respective settings, also a GrapheneOS feature
18. Optional reboot timeout
See respective settings, also a GrapheneOS feature
19. Per connection WiFi randomization option
A further GrapheneOS feature - improved randomization to make tracking more difficult.
20. Ability to disable user-installed apps
Ported from GrapheneOS - this feature normally only applies to system apps.
21. Port of GrapheneOS' Scoped storage functionality
See original documentation

Tips & tricks​Recovery Error 7 when installing​If you aim at installing this ROM for the 1st time (e.g. you come from Stock or other Custom ROM), please check this FAQ section in the LineageOS wiki.
Recovery Error 7 when updating this ROM​If OTA update fails, try manually sideloading (see OP).
If you see some error like ErrorCode::kInstallDeviceOpenError (7) then do the following:
In Recovery, switch to fastbootd (do not 'reboot to bootloader', really choose the fastboot option in recovery)
Connect your device via USB to your PC and run the following commands:
Code:
fastboot delete-logical-partition system_a
fastboot delete-logical-partition system_ext_a
fastboot delete-logical-partition product_a
fastboot delete-logical-partition vendor_a
fastboot delete-logical-partition odm_a
fastboot delete-logical-partition system_b
fastboot delete-logical-partition system_ext_b
fastboot delete-logical-partition product_b
fastboot delete-logical-partition vendor_b
fastboot delete-logical-partition odm_b
Return to recovery from fastbootd mode
Do 'adb sideload' again, it should work now
TTS Engine / Speech service​The following is a working option for this device to use Google TTS without big G* spying on you:
Launch Aurora Store and search Google TTS, but DO NOT install
Instead manually download version 210354702 (the most recent version does not work)
Put this app on the ignore list to make sure it won't ever get updated
Enable it in the Settings and download the language files of your choice for offline use
Go to the app settings and disallow any internet connectivity

Translation of ported features - help needed​Whilst the features available in LineageOS are widely translated and those translations obviously will find their way into this build, certain features ported e.g. from GrapheneOS or developed by myself lack a translation and appear only in English or German (I took care about the German translation).
If I don't have anything better to do (ok, just kidding ), I may consider doing the French translation as well - however, if you want to see certain menu items in Settings also in your own language, please contact me via PM.

Thanks a lot for this Christmas/New Year present !

appreciate the work!
just wondered, how difficult is it to approach microg and suggest/incorporate most or all of these sensible privacy features in their main build? would this save you and all users a ton of trouble?

Hello MSe1969
For Optional blocking of Facebook- and Google-Tracking
Can you add in the application radarbot and waze in the exception application.
Thanks in advance

@MSe1969
Man, you rock and rule the forum!
That is absolutely phantastic. I installed da rom and even the vowifi works fluently.
There aren no isuues. I had to play around with openvpn a while, before it worked, but in the end it's done.
Only in the updater section there is a rom shown off, which could be installed??? I can not delete it, it stays there.
But this is nittykritty....
A huge huge thank you very very much and a hug. Have a nice start into 2023, you sweetened mine.
Ta, Ray

nico21311 said:
Hello MSe1969
For Optional blocking of Facebook- and Google-Tracking
Can you add in the application radarbot and waze in the exception application.
Thanks in advance
Click to expand...
Click to collapse
Short answer: Hell, No!
Long answer: Please have a look at this post, which explains the background.

ewong3 said:
appreciate the work!
just wondered, how difficult is it to approach microg and suggest/incorporate most or all of these sensible privacy features in their main build? would this save you and all users a ton of trouble?
Click to expand...
Click to collapse
I assume you mean the 'lineageos4microg' project (as microG itself is the privacy-aware Gapps alternative and they do not provide any Custom ROM builds) - the scope of that project is to simply take LineageOS "as is" and ship it with microG pre-installed. They for sure won't alter their project scope.
There are already similar projects, such as Calyx or /e/, which aim into a similar direction (microG and privacy/security focused with different priorities), or Divest-OS (no microG, but also privacy/security focused) or GrapheneOS (holistic and very strict approach on security/privacy, no microG - many of their innovative features are ported by other projects and devs like me) - these projects are aware of each other.

bestouff said:
Thanks a lot for this Christmas/New Year present !
Click to expand...
Click to collapse
Maybe you could also contribute:
If I sent you (e.g. via PM) some text (xml) files with English text strings, and you replace those with a French translation and sent them back, the respective menu entries would appear in one of the next builds in French (instead of English), if you use your phone in French language... - Would that be OK?
@All - see post #5
I am interested in further languages, so everybody willing to support is more than welcome.

Hey you seemed to want to do the French yourself, I didn't want to steal your work !
Anyway no problem, I don't have much time but I can make/review some translations.

Safetynet fix on magisk seems to make the phone get stuck on boot every time it is installed

MSe1969 said:
Maybe you could also contribute:
If I sent you (e.g. via PM) some text (xml) files with English text strings, and you replace those with a French translation and sent them back, the respective menu entries would appear in one of the next builds in French (instead of English), if you use your phone in French language... - Would that be OK?
@All - see post #5
I am interested in further languages, so everybody willing to support is more than welcome.
Click to expand...
Click to collapse
Me too I can review it

Ok, Gents. I have serious problems with openvpn and my synology. The connection works in the beginning one time. After a disconnection or change of network, it does not reconnect and i have to delete vpn connection completely. I have to disconnect from Internet (mobile and wlan) after i switched it on again i can reestablish the vpn and it works til next switch of networks. I try to get logs from it the next time, the problem occures and i will post it here or the solution, if i could fix it.
"Edit" In addition of that, i do not receive any messages with iptables script and openvpn on with my synology chat.
With lineageosmicrog 18.1on my second phone ist everything ok and all works fine.
Edit number 2..... I have a third phone.... and everything works fine with openvpn and chat.. so it must be an installation failure in Main Software.... I'll reinstall clean again. I will post a statement when done.....
Have a happy new year in several hours.

ruicardona said:
Safetynet fix on magisk seems to make the phone get stuck on boot every time it is installed
Click to expand...
Click to collapse
This build is hardened, especially kernel hardening, hardened_malloc integrated in bionic / libc. So it may very well be, that specific Magisk modules won't work...

MSe1969 said:
This build is hardened, especially kernel hardening, hardened_malloc integrated in bionic / libc. So it may very well be, that specific Magisk modules won't work...
Click to expand...
Click to collapse
I have no idea what you just told me means but i kinda understood that last part, the stock lineage os also has the same behavior.

ruicardona said:
I have no idea what you just told me means but i kinda understood that last part, the stock lineage os also has the same behavior.
Click to expand...
Click to collapse
OK, if the Magisk module even does not work with the official LineageOS ROM for this device, it is not related to the hardening features of this specific build. Either way, I don't have a solution for you.

MSe1969 said:
OK, if the Magisk module even does not work with the official LineageOS ROM for this device, it is not related to the hardening features of this specific build. Either way, I don't have a solution for you.
Click to expand...
Click to collapse
Thank you for replying either way!