[APP] microG GmsCore - lightweight free software clone of Google Play Services

Search This thread

AnonVendetta

Senior Member
Apr 29, 2016
1,716
626
No, the IMEI isn't supposed to be in the profile xml file, in fact when you use "sh ./profile-generator.sh > profile-name.xml" only the white text will go in the file.

The output of the script is:
- White text => what should go in the profile
- Green text => informational messages
- Brown text => warnings
- Red text => errors

@AnonVendetta
@tom.android
PS: My script was previously putting the exact serial number in the xml but now it will put an anonymized one.
The serial in the profile is just a template so there isn't any difference, microG only use the serial number to generate another rendomly but with similar characteristics.
The only reason I have added anonymization is that now people can share the xml without giving the real serial number.

View attachment 5875833
Bit busy ATM, as soon as I can boot into Manjaro, I'll take that screenshot.

The point I was making earlier, is that since the IMEI isn't needed for the profile (as you've said yourself), then there is no apparent point in having the script query it. Which in turn should mean that this screenshot is unnecessary, but I'll provide it for you regardless.

I will pm it to you instead of posting it in this thread, I'm sure you're trustworthy and won't do anything nefarious with it. Although, I would be more concerned if your script needed it, and also required internet access as a precondition of execution.
 
  • Like
Reactions: ale5000

AnonVendetta

Senior Member
Apr 29, 2016
1,716
626
@ale5000: it would appear that the profile does NOT help pass SN on my Note 20 Ultra. Running Lineage 20 (Android 13) gsi. I added the space, then imported the profile, and selected the custom profile. After rebooting, 2 SN apps give a complete fail, same result as not using any profile or Magisk modules.

At first, I tested without the space, by accident. I just forgot to edit the XML before using it the 1st time, that's all.

I will test on my Tab S7 Plus with the same gsi, but I have a gut feeling that the result will be the same.

Also, YASNAC says "basic" rather than "hardware backed". I'm not sure if the gsi has the appropriate patch, but I'm about to ask.

Anything else I can try/might have missed?

Edit: I just got different results on the same device, and with the custom profile selected, SN passes now. All I did was add microg services core/microg services framework proxy/Play Store to the MagiskHide/Zygisk list. I use Magisk Delta instead of official Magisk, which has both hide and zygisk, whereas hide was removed in official Magisk months ago. However, this solution is dependent on Magisk, and therefore root, by extension.

Also, even if I revert to the "automatic/native" profile in microg, and therefore not using the custom profile, SN still passes, but only if those apps are on the hide list. As soon as I remove them and reboot, back to failing. So I think my results have nothing to do with the profile and may be inaccurate. There are too many possible variables where SN is concerned, to be entirely sure.
 
Last edited:

ale5000

Senior Member
Dec 24, 2013
1,291
1,164
i9100
@AnonVendetta

SN is supposed to pass as "basic" and not as "hardware backed", since as "hardware backed" it will always fail with an unlocked bootloader.

Unfortunately there are still other issues:
- The first problem is this: https://github.com/microg/GmsCore/issues/1915 ,
so the first time you import the profile it works but the successive times it may fails.
- The second thing is: once the first connection is done the data may be cached by the server (probably cached using GSF ID) so even if you change the profile the changes are ignored by the server.

The thing that usually work is:
- Disable internet (both mobile and wifi)
- Reset the data of microG GmsCore (not just cache also data) to reset the GSF ID and all its data
- Import the profile (only one time)
- Re-enable internet
- Once you pass inside microG GmsCore, also reset the data or cache (I'm not sure about this) of the apps that check SN and you should be OK.

The final note is:
The ROMs should be able to pass SN; many ROM are ready to pass SN so just the profile is enough but if the ROM has some change that break SN (like a visible su binary or also other changes) it will never pass unless these changes are reverted.
Disabling SELinux is one of the thing that break SN.
 

AnonVendetta

Senior Member
Apr 29, 2016
1,716
626
@AnonVendetta

SN is supposed to pass as "basic" and not as "hardware backed", since as "hardware backed" it will always fail with an unlocked bootloader.

Unfortunately there are still other issues:
- The first problem is this: https://github.com/microg/GmsCore/issues/1915 ,
so the first time you import the profile it works but the successive times it may fails.
- The second thing is: once the first connection is done the data may be cached by the server (probably cached using GSF ID) so even if you change the profile the changes are ignored by the server.

The thing that usually work is:
- Disable internet (both mobile and wifi)
- Reset the data of microG GmsCore (not just cache also data) to reset the GSF ID and all its data
- Import the profile (only one time)
- Re-enable internet
- Once you pass inside microG GmsCore, also reset the data or cache (I'm not sure about this) of the apps that check SN and you should be OK.

The final note is:
The ROMs should be able to pass SN; many ROM are ready to pass SN so just the profile is enough but if the ROM has some change that break SN (like a visible su binary or also other changes) it will never pass unless these changes are reverted.
Disabling SELinux is one of the thing that break SN.
So, I asked in the LOS thread about the patch, but no answer yet. But since YASNAC says it's using "basic" rather than "hardware attestation" then maybe it has the patch already. Instead of trying most of your suggestions, I'm going to factory reset in twrp (wipe data/cache), then try again.
 

ale5000

Senior Member
Dec 24, 2013
1,291
1,164
i9100
So, I asked in the LOS thread about the patch, but no answer yet. But since YASNAC says it's using "basic" rather than "hardware attestation" then maybe it has the patch already. Instead of trying most of your suggestions, I'm going to factory reset in twrp (wipe data/cache), then try again.
Ok but remember to do the thing of disabling internet otherwise you will run in the same issue.
If you don't disable internet, then in the moment you load the profile is already late.
 
Last edited:

xda1user

Member
Nov 1, 2018
7
0
Hi everybody! I was trying to find an answer to this question by search but was not able to do so.
Why MicroG needs to be a privileged app (installed in /system/priv-apps)?What special permissions it requires? Can necessary permissions be granted otherwise? I installed it with "adb install" and all boxes are checked in Self-check but it does not work. Thanks
 

ale5000

Senior Member
Dec 24, 2013
1,291
1,164
i9100
Hi everybody! I was trying to find an answer to this question by search but was not able to do so.
Why MicroG needs to be a privileged app (installed in /system/priv-apps)?What special permissions it requires? Can necessary permissions be granted otherwise? I installed it with "adb install" and all boxes are checked in Self-check but it does not work. Thanks
These are the permission:
Code:
<permission name="android.permission.CHANGE_DEVICE_IDLE_TEMP_WHITELIST" />
<permission name="android.permission.INSTALL_LOCATION_PROVIDER" />
<permission name="android.permission.MANAGE_USB" />
<permission name="android.permission.UPDATE_APP_OPS_STATS" />

You will never get everything working with a simple adb install.
Everyone can do what it want but if you are going that route I suggest to give up instead of having an half-working setup.

To make it working in this way require that you patch the ROM, but if you can patch the ROM than it is easier to install in the priv-app folder.
 

kurtn

Senior Member
Hi everybody! I was trying to find an answer to this question by search but was not able to do so.
Why MicroG needs to be a privileged app (installed in /system/priv-apps)?What special permissions it requires? Can necessary permissions be granted otherwise? I installed it with "adb install" and all boxes are checked in Self-check but it does not work. Thanks
What exactly doesn't work? Last time i talked yo marvin, he had microG and it's companion apps as user app. Usually NLP doesn't work that way.
 
  • Like
Reactions: xda1user

xda1user

Member
Nov 1, 2018
7
0
Thank you for your replies. Apologies I was not clear.

I installed all three MicroG apps - Services Core, Services Framework Proxy, FakeStore. Was able to connect to Google account. But none of apps that I tried start. Gmail, Tandem that I remember, some others. They say "No Google services found" and quit.

About specific permissions - it does not seem manage usb, update app stats needed to run, it should be able to run without it? To clarify, I dont need NLP, just need an app to start.
 

ale5000

Senior Member
Dec 24, 2013
1,291
1,164
i9100
Thank you for your replies. Apologies I was not clear.

I installed all three MicroG apps - Services Core, Services Framework Proxy, FakeStore. Was able to connect to Google account. But none of apps that I tried start. Gmail, Tandem that I remember, some others. They say "No Google services found" and quit.

About specific permissions - it does not seem manage usb, update app stats needed to run, it should be able to run without it? To clarify, I dont need NLP, just need an app to start.
It require signature spoofing, not all ROMs include it and the ones that include it may restrict the use to privileged system apps.

In addition without "android.permission.CHANGE_DEVICE_IDLE_TEMP_WHITELIST" the notifications of, for example, Gmail will likely be delayed.
 

kurtn

Senior Member
Thank you for your replies. Apologies I was not clear.

I installed all three MicroG apps - Services Core, Services Framework Proxy, FakeStore. Was able to connect to Google account. But none of apps that I tried start. Gmail, Tandem that I remember, some others. They say "No Google services found" and quit.

About specific permissions - it does not seem manage usb, update app stats needed to run, it should be able to run without it? To clarify, I dont need NLP, just need an app to start.
For Gmail there are other apps like K9 or fairEmail.

Tandem starts even without microG but doesn't react on create account / continue with email - can't you create an account?

Edit: Tandem is strange. With microG as system app it allows account creation (email). MicroG as user app throws a "get Google play services" message.
 
Last edited:

xda1user

Member
Nov 1, 2018
7
0
Answering my own question. In recent versions they added package visibility filtering so other apps can't see GMS. To run MicroG as a user app install with
Code:
pm install --force-queryable gms.apk
 

Paolo83

Senior Member
Aug 30, 2013
498
77
Novara
Hi Friends. A question. As we know, Google pay (wallet) doesnt work on microg. Is there an app or a way to can pay with microg rom? For example, Curve app, Is It working or do It Need Huawei service to pay with NFC? I want to switch to a microg rom but for me NFC payment are Key at the Moment. If anyone has experience and can enlighten me... Thanks
 

Master One

Senior Member
Jan 31, 2011
906
322
Europe
Hi Friends. A question. As we know, Google pay (wallet) doesnt work on microg. Is there an app or a way to can pay with microg rom? For example, Curve app, Is It working or do It Need Huawei service to pay with NFC? I want to switch to a microg rom but for me NFC payment are Key at the Moment. If anyone has experience and can enlighten me... Thanks
I have been looking for a solution to use NFC payments without Google Pay for a very long time, but only individual (local) banking apps came up. There is a thread on the Revolut forum leading back years without any progress. Most of them just go the easy way with relying on Google Pay, because pretty much every Google user is using it anyway. Just too bad, but still in the hope that something comes up for us Google holdouts.
 

kurtn

Senior Member
I have been looking for a solution to use NFC payments without Google Pay for a very long time, but only individual (local) banking apps came up. There is a thread on the Revolut forum leading back years without any progress. Most of them just go the easy way with relying on Google Pay, because pretty much every Google user is using it anyway. Just too bad, but still in the hope that something comes up for us Google holdouts.
Get a flip cover with small pockets. Stick some NFC payment or credit cards into.
 
Last edited:

Master One

Senior Member
Jan 31, 2011
906
322
Europe
Get a flip cover with small pockets. Stick some NFC payment or credit cards into.
Had that before, but got rid of it in favor of the ordinary silicone cover that came with the phone, because it's a lot more convenient to handle this way.

I have my little wallet with card with me at all times, it is manageable, but of course just using the phone would be easier.
 
  • Like
Reactions: kurtn

Top Liked Posts

  • There are no posts matching your filters.
  • 7
    Ok which one is better? Need to have access to yt subscriptions at least and seekbar thumbnails.
    NewPipe - that was my last word on that off topic discussion.
    Or libretube , more privacy it uses VPN, so no real IP.
    Sorry for OT.
    You have a lot options.
    1. Newpipe and few forked versions
    2. Libretube
    3. Skytube/skytube extra and legacy editions for older android devices
    4. Songtube
    5. Freetubecordova
    6. And more projects on GitHub/izzyondroid repo.
    You can also use YouTube add away with official YouTube app (root plus xposed framework).

    If you are using iOS you can use yattee from app store or from GitHub page and download and install .ipa

    Best regards.
    Friends, I doubt that @MaR-V-iN's µG thread is really the best place to discuss above. I'm convinced you'll find a more appropriate thread. If you like I'm happy to move your above posts to there; just let me know.

    Regards
    Oswald Boelcke
    Senior Moderator
    1
    Why do you even need vanced? You have a lot more options to watch YouTube without adds.
    Ok which one is better? Need to have access to yt subscriptions at least and seekbar thumbnails.
    1
    Ok which one is better? Need to have access to yt subscriptions at least and seekbar thumbnails.

    You have a lot options.
    1. Newpipe and few forked versions
    2. Libretube
    3. Skytube/skytube extra and legacy editions for older android devices
    4. Songtube
    5. Freetubecordova
    6. And more projects on GitHub/izzyondroid repo.
    You can also use YouTube add away with official YouTube app (root plus xposed framework).

    If you are using iOS you can use yattee from app store or from GitHub page and download and install .ipa

    Best regards.
    1
    Friends, I doubt that @MaR-V-iN's µG thread is really the best place to discuss above. I'm convinced you'll find a more appropriate thread. If you like I'm happy to move your above posts to there; just let me know.

    Regards
    Oswald Boelcke
    Senior Moderator
    much Appreciated your sensitivity & sensibility in approaching these situations here & other places . thanks for asking than acting like a spoilt & bullying copper ..... that many admins are
  • 569
    hXY4lcC.png

    Introduction
    microG GmsCore is a FLOSS (Free/Libre Open Source Software) framework to allow applications designed for Google Play Services to run on systems, where Play Services is not available. If you use your phone without GAPPS this might become a useful tool for you.
    microG GmsCore is one of the two core components of the microG project.
    More up-to-date descriptions and instructions might be available on the wiki

    Instructions
    Preparation:
    1. You need a 4/5/6 ROM that is GAPPS-free. Either don't install them or remove them, if your ROM ships them. Please note that microG GmsCore might run on a cleaned stock ROM, but it might also brick it or cause random bugs. Be aware that only latest Android versions (4.4+) are regularly tested and thus prioritized over older versions when issues occur.
    2. You need a ROM that supports signature faking. Some custom ROMs are patched to support signature faking out of the box, including all OmniROM-based ones. Stock CyanogenMod denied the inclusion, as the possibility of third-party play services implementations is considered a security issue (read here about why it's not). Please ask your ROM developer if unsure. The latest version of signature spoofing for Android < 6.0 has to be enabled at the bottom of the developer settings first. If your ROM does not support signature faking, but you use Xposed, you can grab a Xposed module here.
      If you are a ROM developer or just do custom builds for whatever reason, you can download and include the patch from here and here for Android 5.1 or here for Android 6.0.
    3. Remove UnifiedNlp. In case you installed it before. You can keep your backend modules installed, microG Services will be able to use them later and provide the same feature set (to be precise, microG Services includes UnifiedNlp).

    Installation:
    The installation does not require any modification of the /system partition. All installations should be done using the default app installer included with Android or using `adb install`. This means you need to enable third-party sources or developer mode first.
    1. Install GmsCore.apk as provided in the download section below.
    2. If you want to use Google Cloud Messaging ("Push-Notifications"), Install GsfProxy.apk as provided in the download section below. The GsfProxy version does not need to match the GmsCore.apk version.
      • If you have BlankStore installed, continue with the next step.
      • If you want to be able to access the Play Store, install BlankStore from its thread. It is not a requirement that you set it up correctly and this is not covered by this instructions. If you need help ask in the original thread.
      • If you don't care about Play Store access, Install FakeStore.apk as provided in the download section below.
    3. Open the microG Settings, which are available in the launcher now. If you want to use any Google services (Log-In, Cloud Messaging), tick both checkboxes for background services. This is the only supported setup, but you are free to disable them if you like playing with fire. You can also open the UnifiedNlp settings to enable the location backends of your choice. If you don't have any yet, check out F-Droid. For further questions and concerns regarding UnifiedNlp, use its corresponding thread.
    4. Reboot your device. If you skip this step, everything unwanted is possible.

    Using it:
    • You can test Google Cloud Messaging using this test application. Push notifications do not require account registration.
    • You can add an account through the system settings. Some applications might ask you to do so, if you don't.
    • Use your applications as you like. But note that apps that use Cloud Messaging must be installed after GmsCore, else they will not work. Some hint of applications that can run due to microG GmsCore: TextSecure/Signal, Play Music, YouTube
    • When using AdAway make sure to put mtalk.google.com on your whitelist, else problems are likely to occur when using Google Cloud Messaging. Thanks @benstyle1 for the hint.

    Downloads
    See this wiki page for Downloads. You can find details on the F-Droid repository on https://microg.org/fdroid/.

    Signing key
    The NOGAPPS and microG Project use a shared signing key. Apps and the F-Droid repository are signed using this key. You can verify app signatures using the Checkey app (not when signature spoofing is enabled) and the F-Droid key in F-Droid repository details.
    The SHA-256 hash of the key is:
    9B D0 67 27 E6 27 96 C0 13 0E B6 DA B3 9B 73 15 74 51 58 2C BD 13 8E 86 C4 68 AC C3 95 D1 41 65

    Current implementation progress
    Please check this wiki page for up to date implementation progress.

    Please report bugs
    This project is still rather unstable. Please report bugs as they occur. Whenever you report a bug, please tell us what application caused the bug, including its exact version. If you're the developer, name the play services library you are using. Please do not bother the original app author when it might be related to microG services. If the problem is related to geolocation with UnifiedNlp, report it in the UnifiedNlp thread, even if you're using it through GmsCore.

    Thanks
    Big thanks to everyone who continuously supported me doing this, by donating, pull-requests or just feedback.

    XDA:DevDB Information
    microG GmsCore, App for all devices (see above for details)

    Contributors
    MaR-V-iN
    Source Code: https://github.com/microg/android_packages_apps_GmsCore


    Version Information
    Status: Beta
    Current Beta Version: v0.2.13.203915
    Beta Release Date: 2020-10-19

    Created 2015-10-04
    Last Updated 2020-10-20
    56
    I am still alive, but just super busy.

    Starting end of February, I set aside 20 hours a week to work solely on microG.

    But please don't expect any update earlier than that, I have to ensure that there are no loose ends before I remove myself from some of the obligations I have right now, so probably will be even busier than before.

    Thanks for your ongoing support everyone.
    28
    Nice! Even original Play Store started to work with this! Not fully, but now you can login, search for apps and see already installed ones. Just download doesn't work yet. Keep up good work! Original GMSCore is android cancer.
    26
    Thanks for your feedback @emandt. I appreciate it, although it's impossible for me to not agree with @Ultramanoid that it feels like trolling. I will try to answer to all your concerns.

    It's true that Google API change. This project has some history and still uses some code from 2013. In the meantime, I saw some API changes, but most APIs stay stable. This is because not all play services users update directly and Google does not want important system features to break. I know that Google is aware of this project (or atleast some Google employees are) longer than you are and atleast one change in the web service implementation was targeting a third party software, with microG being the only one I know that fits into that. So yes, I agree that Google is unlikely to be happy with this project. But as Ingress players know, even the mighty Google is not able to block users out that really want to do something with their services. We will always find a way.

    This project is all about privacy. As mentioned above it existed long before I posted it here on XDA and it was reviewed by several people. I also know that at least one "Android company" is working with it. The source code is still fairly simple to follow, and if you want you can check every future commit (and those from the past) one-by-one. It should also be noted that I built privacy related tools for Android the last years, some of them being published here on XDA as well or being integrated in e.g. OmniROM.
    As I don't want users credentials to end up in wrong hands, microG GmsCore doesn't even safe or access your google account password, the login is done through Google's OAuth based website.

    You complained that not "any warning/advice about privacy, credential or critical actions" was stated on the first post. As you mentioned that you're a XDA user for ten years, this can only be trolling: I never saw a ROM or Patched WhatsApp or darkened Play Store or anything else on XDA state something like this in the first post. And most of them were not open source. I expect users to be able to think theirself that, if you enter confidential data, random things might happen with that. I actually pointed that out by mentioning that "This is currently alpha-grade Software. Don't use it if you're not aware of possible consequences." in red letters :)

    I agree that payments are crucial and it is important that they work fluidly. Until now I did not implement anything related to payments for that reason. Inside Play Store, payments are not directed through Play Services, so this is nothing to fear about (this is all about microG GmsCore now, not about a future implementation of the Play Store). On the other hand, as already pointed out by others, payments should be managed server side. It should NEVER be possible to pay more than needed.

    Reducing the enormous size and bloat in Play Services is one of the goals of the project. And I'm quiet sure that this will be possible, because some things inside Play Services just don't need to be there or can be made a lot simpler. The majority of the size until now actually do not really belong to the project (but is the map rendering library used in the backend and the android-support libraries). I did not use proguard until now, I have a single release for all major instruction set (play services use multiple) and 500KB of assets that can also be reduced in size. Although i did not try it yet, I am quiet sure the size final packages size will stay below 10MB. I am not going into details why play services is so huge here, if you're interested in that, ask me when we meet in person.

    And finally I wanted to point out that most Google applications do not user Play Services intensively. Play Store is using it primarily for Auth and checkin, as well as some smaller things like advertisement id. Only Google Plus related apps (Google+, Hangouts) use Play Services a lot. This is not really a surprise considering that Play Services was originally invented for Google+ and OAuth 2 APIs.

    Finally, I'd like to thank you for the insights in your feelings about this project. I guess these answers will not sufficiently satisfy you, but there is not a lot more I can do. Trust me or don't - it's up to you.

    Puh, what a post...
    26
    what is the best way to download this these days? little confused by all the different updates and forks.

    is f droid repo a good place to install from still?

    Here's what I know:

    NanoDroid is an app pack that contains, among other things, MicroG. It also replaces system apps and is compatible with Magisk overlays. It is configured with a text file that can be generated using a zip installer with Aroma. It is currently using @Setialpha's fork of microG. There are also basic subset packs for just MicroG or just system app replacements. It comes with a patched version of Play Store that allows for IAP, but can also install FakeStore.
    @ale5000's zip I think was the first of the unofficial zips and AFAIK just installs official MicroG and related dependencies, as well as removing conflicting apps (important for location services), which NanoDroid does as well. I'm not following the thread for this zip for some reason, and probably should find it so I can follow it. AFAIK, there is no simple configuration for this zip.

    My zips are built by downloading the latest MicroG apps by parsing the F-Droid repo's index file for URLs and thus only follows official releases. There are separate zips for installing with FakeStore, official Play Store, and the NanoDroid patched Play Store. There are also separate NoGapps packs that mirror OpenGapps but with apps from F-Droid (and no MicroG, as that's in a separate installer). Configuration is done at build time, but I provide my build tool and build recipes for easy modification.

    The NoGoolag installer I think is most similar to NanoDroid in that it installs its own fork of MicroG as well as F-Droid system app replacements. I'm least familiar with it, but it's in pretty active development, for what that's worth. I don't know much more about it than that, though.

    All of the above zips AFAIK will ensure best compatibility with your device by uninstalling system apps that will interfere, e.g. with location services; extracting libraries from apps that get installed to /system (Android generally can't find the libraries otherwise); and similar things. This tends to provide a better/easier experience than installing straight from F-Droid, though that is still a valid option. Also, if you use an installer that uses the official MicroG, you can get updates from that F-Droid repo.

    TL;DR: Which installer you use will depend on what you're looking for from it. I will almost always recommend mine, but I am opinionated on the subject. It may be worth you looking deeper into what each does and does not provide and if you need that thing, then make a decision. I would highly recommend using one of the zip installers though, even if it's not mine.