[ROM] DivestOS 20.0 for cheeseburger/dumpling

Search This thread

SkewedZeppelin

Senior Member
Mar 19, 2021
373
360
featureGraphic.png

DivestOS is a more private and more secure aftermarket system.

Features:
- strong focus on FOSS
- various system hardening
- various privacy enhancements
- automated removal of unnecessary proprietary blobs
- automated kernel hardening and CVE patching
- ability to relock bootloader on supported devices
- verified boot on supported devices
- no root support
- SELinux always enforcing
- encrypted by default
- monthly updates
- OTA delta updates
- OTA updates over Tor (optional)
- F-Droid included
- hardened system WebView with rapid updates: https://divestos.org/misc/ch-dates.txt

Extra Features (not installed by default & also compatible with all systems):
- Mull, our hardened fork of Fenix with rapid updates: https://divestos.org/misc/ffa-dates.txt
- Hypatia, our real-time malware scanner
- Extirpater, our free space eraser

Links:
- Website: https://divestos.org
- Onion: http://divestoseb5nncsydt7zzf5hrfg44md4bxqjs5ifcv4t7gt7u6ohjyyd.onion
- Downloads: https://divestos.org/index.php?page=devices&base=LineageOS#device-cheeseburger, https://divestos.org/index.php?page=devices&base=LineageOS#device-dumpling
- Changelogs: https://divestos.org/index.php?page=news
- Project History: https://divestos.org/index.php?page=history
- Known Issues: https://divestos.org/index.php?page=broken#oneplus5
- Screenshots: https://divestos.org/index.php?page=screenshots
- Security Patching Overview: https://divestos.org/index.php?page=patch_levels
- About + Credits + Notices: https://divestos.org/index.php?page=about
- Donate: https://divested.dev/donate
- Source Code: https://github.com/divested-mobile or https://gitlab.com/divested-mobile
- XMPP Chat Room: xmpp:divestos-mobile@conference.konvers.me

Device Specific Links:
- Device Tree: https://github.com/LineageOS/android_device_oneplus_msm8998-common, https://github.com/LineageOS/android_device_oneplus_cheeseburger, https://github.com/LineageOS/android_device_oneplus_dumpling
- Kernel: https://github.com/LineageOS/android_kernel_oneplus_msm8998
- Kernel CVE Patches Applied: https://github.com/Divested-Mobile/...VE_Patchers/android_kernel_oneplus_msm8998.sh

Other Bits:
- Good and bad feedback is welcomed. Else how can we improve?
- If you find a bug, please report it below or via GitHub/GitLab.
- Testing/Translations/Code contributions are gratefully appreciated.

Important Notes for New Users:
- Please make a backup of your device and copy it to another computer.
- You must wipe before installing this OS.
- This OS has userdata encrypted by default
- You are intended to relock your bootloader with this OS (if your device is marked supported for that).

DivestOS does *not* support the following:
- Google Apps (OpenGAPPS)
- DRM (Widevine)
- alternative recoveries (TWRP)
- root (Magisk)
- runtime modification frameworks (Xposed or theme engines)

All downloads are GPG signed with the following key:
Code:
#B874 4D67 F9F1 E14E 145D FD8E 7F62 7E92 0F31 6994
-----BEGIN PGP PUBLIC KEY BLOCK-----

mDMEXupIxBYJKwYBBAHaRw8BAQdAC1RiTvrqJaAQ4FIHsxX+gzEgdT4mspISS+p0
y847Nge0SERpdmVzdE9TIFJlbGVhc2UgU2lnbmluZyAoMjAyMCAjMSkgPHN1cHBv
cnQrcmVsZWFzZXNpZ25pbmdAZGl2ZXN0b3Mub3JnPoiQBBMWCAA4FiEEuHRNZ/nx
4U4UXf2Of2J+kg8xaZQFAl7qSMQCGwMFCwkIBwIGFQoJCAsCBBYCAwECHgECF4AA
CgkQf2J+kg8xaZR1BgEAwwLVVsG7kbp8M3GTV987XpVl5cZeTtDc/g+66briCHUB
APiuH/dk8eRnhFnq4Up2/j7uD/8FtSvxPbHiz6t1MdgB
=VzP2
-----END PGP PUBLIC KEY BLOCK-----
 
Last edited:

rasputin_g

Member
Sep 23, 2020
43
0
OnePlus 5T
Anything in particular you'd like to see?

fwiw there is a build guide: https://divestos.org/index.php?page=build
I've been trying to build but keep running into errors. when I try to run patchWorkspace, gpg verification fails, and when I try to run buildDevice, it gives this error:

error: system/linkerconfig/Android.bp:17:1: "linkerconfig_defaults" depends on undefined module "libapexutil-deps"

Also, if I wanted to build it with full microg and no deblobbing, how would I do that?
 

SkewedZeppelin

Senior Member
Mar 19, 2021
373
360
I've been trying to build but keep running into errors. when I try to run patchWorkspace, gpg verification fails, and when I try to run buildDevice, it gives this error:

error: system/linkerconfig/Android.bp:17:1: "linkerconfig_defaults" depends on undefined module "libapexutil-deps"

Also, if I wanted to build it with full microg and no deblobbing, how would I do that?

Interesting. It should've failed quicker then that.

To enable microG: set DOS_MICROG_INCLUDED to "FULL" in Scripts/init.sh

To disable the deblobber: comment Deblob.sh in Scripts/Lineage-18.1/Functions.sh
You should also set all the DOS_DEBLOBBER_REMOVE_* to false in Scripts/init.sh

GPG verification will likely fail if you haven't run importKeys from PrebuiltApps/update.sh

The linker error, I am not sure what you are missing. Not one I've seen. Maybe your repo sync failed?
 

rasputin_g

Member
Sep 23, 2020
43
0
OnePlus 5T
I did have one error while running repo sync, but it was for the Samsung kernel so I didn't think anything of it. I'll try running repo sync again. Thanks! I love the ROM and having a locked BL but I would love to have GCM and working DRM which is why I wanted to build it myself.
 

rasputin_g

Member
Sep 23, 2020
43
0
OnePlus 5T
Interesting. It should've failed quicker then that.

To enable microG: set DOS_MICROG_INCLUDED to "FULL" in Scripts/init.sh

To disable the deblobber: comment Deblob.sh in Scripts/Lineage-18.1/Functions.sh
You should also set all the DOS_DEBLOBBER_REMOVE_* to false in Scripts/init.sh

GPG verification will likely fail if you haven't run importKeys from PrebuiltApps/update.sh

The linker error, I am not sure what you are missing. Not one I've seen. Maybe your repo sync failed?
GPG verification still failed even after I ran importKeys. Any idea why? Also, what's the deal with the GPG signing on the ROM itself? Do I need to do something to set that up?
 

SkewedZeppelin

Senior Member
Mar 19, 2021
373
360
GPG verification still failed even after I ran importKeys. Any idea why? Also, what's the deal with the GPG signing on the ROM itself? Do I need to do something to set that up?

You don't need to GPG sign your builds unless you want anyone you're distributing it to to be able to verify it is from you.

As for the verification error, can you post the error? Did you run: git submodule update --init --recursive ?
 

rasputin_g

Member
Sep 23, 2020
43
0
OnePlus 5T
You don't need to GPG sign your builds unless you want anyone you're distributing it to to be able to verify it is from you.

As for the verification error, can you post the error? Did you run: git submodule update --init --recursive ?
Yeah I ran the git submodule command. Turns out I had forgotten to run downloadAllApps to update all of the apps that correspond to the newest signatures. No more gpg verification error.
 

rasputin_g

Member
Sep 23, 2020
43
0
OnePlus 5T
I was building for like 17 hours when the build suddenly failed with the error FAILED: ninja: '/home/build/DivestOS/Signing_Keys/4096pro/dumpling/releasekey.x509.pem', needed by 'out/target/product/dumpling/obj/ETC/otacerts.recovery_intermediates/otacerts.zip', missing and no known rule to make it. I assume this is because there was this error when I ran Generate_Signing_Keys.sh: Scripts/Generate_Signing_Keys.sh: line 45: /home/build/DivestOS/Build/LineageOS-18.1//out/host/linux-x86/bin/generate_verity_key: No such file or directory
What could be causing this?
 

SkewedZeppelin

Senior Member
Mar 19, 2021
373
360
I was building for like 17 hours when the build suddenly failed with the error FAILED: ninja: '/home/build/DivestOS/Signing_Keys/4096pro/dumpling/releasekey.x509.pem', needed by 'out/target/product/dumpling/obj/ETC/otacerts.recovery_intermediates/otacerts.zip', missing and no known rule to make it. I assume this is because there was this error when I ran Generate_Signing_Keys.sh: Scripts/Generate_Signing_Keys.sh: line 45: /home/build/DivestOS/Build/LineageOS-18.1//out/host/linux-x86/bin/generate_verity_key: No such file or directory
What could be causing this?

You need to run the two commands on https://github.com/Divested-Mobile/DivestOS-Build/blob/master/Scripts/Generate_Signing_Keys.sh#L22
And mkdir that folder if it doesn't exist beforehand.
 

rasputin_g

Member
Sep 23, 2020
43
0
OnePlus 5T
You need to run the two commands on https://github.com/Divested-Mobile/DivestOS-Build/blob/master/Scripts/Generate_Signing_Keys.sh#L22
And mkdir that folder if it doesn't exist beforehand.
I no longer have that error, but now I have this one:
FAILED: out/target/product/dumpling/obj/APPS/FairEmail_intermediates/package.apk /bin/bash -c "(rm -f out/target/product/dumpling/obj/APPS/FairEmail_intermediates/package.apk ) && (cp \"vendor/fdroid_prebuilt/packages/FairEmail.apk\" \"out/target/product/dumpling/obj/APPS/FairEmail_intermediates/package.apk\" ) && (if (zipinfo out/target/product/dumpling/obj/APPS/FairEmail_intermediates/package.apk 'lib/*.so' 2>/dev/null | grep -v ' stor ' >/dev/null) ; then out/soong/host/linux-x86/bin/zip2zip -i out/target/product/dumpling/obj/APPS/FairEmail_intermediates/package.apk -o out/target/product/dumpling/obj/APPS/FairEmail_intermediates/package.apk.tmp -0 'lib/**/*.so' && mv -f out/target/product/dumpling/obj/APPS/FairEmail_intermediates/package.apk.tmp out/target/product/dumpling/obj/APPS/FairEmail_intermediates/package.apk ; fi ) && (if ! out/soong/host/linux-x86/bin/zipalign -c -p 4 out/target/product/dumpling/obj/APPS/FairEmail_intermediates/package.apk >/dev/null ; then mv out/target/product/dumpling/obj/APPS/FairEmail_intermediates/package.apk out/target/product/dumpling/obj/APPS/FairEmail_intermediates/package.apk.unaligned; out/soong/host/linux-x86/bin/zipalign -f -p 4 out/target/product/dumpling/obj/APPS/FairEmail_intermediates/package.apk.unaligned out/target/product/dumpling/obj/APPS/FairEmail_intermediates/package.apk.aligned; mv out/target/product/dumpling/obj/APPS/FairEmail_intermediates/package.apk.aligned out/target/product/dumpling/obj/APPS/FairEmail_intermediates/package.apk; fi )" Unable to open 'out/target/product/dumpling/obj/APPS/FairEmail_intermediates/package.apk' for verification Unable to open 'out/target/product/dumpling/obj/APPS/FairEmail_intermediates/package.apk.unaligned' as zip archive mv: bad 'out/target/product/dumpling/obj/APPS/FairEmail_intermediates/package.apk.aligned': No such file or directory 06:51:24 ninja failed with: exit status 1 #### failed to build some targets (10:13:27 (hh:mm:ss)) ####
 

SkewedZeppelin

Senior Member
Mar 19, 2021
373
360
I no longer have that error, but now I have this one:
mv: bad 'out/target/product/dumpling/obj/APPS/FairEmail_intermediates/package.apk.aligned': No such file or directory 06:51:24 ninja failed with: exit status 1 #### failed to build some targets (10:13:27 (hh:mm:ss)) ####
Late response, that kind of looks like you maybe ran out of space? btrfs with compress=zstd:1 will help if it is the case.
 

Top Liked Posts