• Introducing XDA Computing: Discussion zones for Hardware, Software, and more!    Check it out!
  • Fill out your device list and let everyone know which phones you have!    Edit Your Device Inventory

[ROM] DivestOS 18.1 for mako

Search This thread

SkewedZeppelin

Senior Member
Mar 19, 2021
91
108
divested.dev
featureGraphic-masked-xda.png

DivestOS is a more private and more secure aftermarket system.

Nexus 4 Notes:
- resized /system is required
- will fail to boot on very first boot. force off once after 3 minutes.
- in-place upgrade to 18.1 is not possible unlike previous DivestOS releases due to keystore change

Features:
- strong focus on FOSS
- various system hardening
- various privacy enhancements
- automated removal of unnecessary proprietary blobs
- automated kernel hardening and CVE patching
- ability to relock bootloader on supported devices
- verified boot on supported devices
- no root support
- SELinux always enforcing
- encrypted by default
- monthly updates
- OTA delta updates
- OTA updates over Tor (optional)
- F-Droid included

Extra Features (not installed by default):
- Mull, our hardened fork of Fenix
- Hypatia, our real-time malware scanner
- Extirpater, our free space eraser

Links:
- Website: https://divestos.org
- Onion: http://divestoseb5nncsydt7zzf5hrfg44md4bxqjs5ifcv4t7gt7u6ohjyyd.onion
- Downloads: https://divestos.org/index.php?page=devices&base=LineageOS#device-mako
- Changelogs: https://divestos.org/index.php?page=news
- Project History: https://divestos.org/index.php?page=history
- Known Issues: https://divestos.org/index.php?page=broken#mako
- Screenshots: https://divestos.org/index.php?page=screenshots
- About + Credits + Notices: https://divestos.org/index.php?page=about
- Donate: https://divested.dev/donate
- Source Code: https://github.com/divested-mobile or https://gitlab.com/divested-mobile
- XMPP Chat Room: xmpp:[email protected]

Device Specific Links
- Device Tree: https://github.com/voron00/android_device_lge_mako
- Kernel: https://github.com/voron00/android_kernel_lge_mako
- Kernel CVE Patches Applied: https://github.com/Divested-Mobile/...-17.1/CVE_Patchers/android_kernel_lge_mako.sh, https://github.com/Divested-Mobile/...-18.1/CVE_Patchers/android_kernel_lge_mako.sh
- Please give our fellow @voron00 a thanks for keeping the Nexus 4 alive!

Other Bits:
- Good and bad feedback is welcomed. Else how can we improve?
- If you find a bug, please report it below or via GitHub/GitLab.
- Testing/Translations/Code contributions are gratefully appreciated.

Important Notes for New Users:
- Please make a backup of your device and copy it to another computer.
- You must wipe before installing this ROM.
- This ROM has userdata encrypted by default
- You are intended to relock your bootloader with this ROM (if your device is marked supported for that).

DivestOS does *not* support the following:
- Google Apps (OpenGAPPS)
- DRM (Widevine)
- alternative recoveries (TWRP)
- root (Magisk)
- runtime modification frameworks (Xposed or theme engines)

All downloads are GPG signed with the following key:
Code:
#B874 4D67 F9F1 E14E 145D FD8E 7F62 7E92 0F31 6994
-----BEGIN PGP PUBLIC KEY BLOCK-----

mDMEXupIxBYJKwYBBAHaRw8BAQdAC1RiTvrqJaAQ4FIHsxX+gzEgdT4mspISS+p0
y847Nge0SERpdmVzdE9TIFJlbGVhc2UgU2lnbmluZyAoMjAyMCAjMSkgPHN1cHBv
cnQrcmVsZWFzZXNpZ25pbmdAZGl2ZXN0b3Mub3JnPoiQBBMWCAA4FiEEuHRNZ/nx
4U4UXf2Of2J+kg8xaZQFAl7qSMQCGwMFCwkIBwIGFQoJCAsCBBYCAwECHgECF4AA
CgkQf2J+kg8xaZR1BgEAwwLVVsG7kbp8M3GTV987XpVl5cZeTtDc/g+66briCHUB
APiuH/dk8eRnhFnq4Up2/j7uD/8FtSvxPbHiz6t1MdgB
=VzP2
-----END PGP PUBLIC KEY BLOCK-----
 
Last edited:

kjsu0

Member
Mar 20, 2021
14
4
xmpp
Hello DivestOS,

1 - Do you need to reparation internal memory with Clamor's script before flashing this rom ?

2 - Is it set to permissive like in the latest voron00's LineageOS release or to enforcing by default ?

3 - Can you update it via OTA ?

4 - Does it drain battery when the phone is switched off ?

Thanks
 

SkewedZeppelin

Senior Member
Mar 19, 2021
91
108
divested.dev
Hello DivestOS,

1 - Do you need to reparation internal memory with Clamor's script before flashing this rom ?

2 - Is it set to permissive like in the latest voron00's LineageOS release or to enforcing by default ?

3 - Can you update it via OTA ?

4 - Does it drain battery when the phone is switched off ?

Thanks

1. Yes for the 17.1 build, there is however a 16.0 and 15.1 build available that doesn't need repartitioning.
2. No, DivestOS is *always* enforcing. DivestOS will never ever release a build with permissive SELinux.
3. Yes, DivestOS offers OTA updates for every device since 2017/05/30.
4. When the phone is asleep, no. When the phone is powered off, no.

mako was my daily driver for all of 2019, it was a solid experience despite the age of the hardware.
 
  • Like
Reactions: kjsu0

kjsu0

Member
Mar 20, 2021
14
4
xmpp
it was a solid experience despite the age of the hardware

I agree, this phone is amazing, never age ...

I got it working on my phone.

I used Clamor's script and everything went almost smooth but have two more questions:

1 - Is it normal that signature can't be verified when installing via twrp ?

2 - On first boot-up rom got stuck on divestos splash screen and didn't want to load entire OS...
I rebooted the phone and on second try it started without any problem and greeted with configuration screen, is that ok ?
 

SkewedZeppelin

Senior Member
Mar 19, 2021
91
108
divested.dev
I agree, this phone is amazing, never age ...

I got it working on my phone.

I used Clamor's script and everything went almost smooth but have two more questions:

1 - Is it normal that signature can't be verified when installing via twrp ?

2 - On first boot-up rom got stuck on divestos splash screen and didn't want to load entire OS...
I rebooted the phone and on second try it started without any problem and greeted with configuration screen, is that ok ?
1. It is not recommended to use TWRP with DivestOS, except for a select few devices. You are intended to use the DivestOS recovery.
2. That is expected, it is a known issue. It occurs due to the modem failing to start after the data partition is encrypted for the first time. The workaround is to wait 5 minutes on the very first boot, power it off, then reboot it. All should be OK after.
 
  • Like
Reactions: aospray and kjsu0

kjsu0

Member
Mar 20, 2021
14
4
xmpp
I redid everything again, used fastboot to flash recommended recovery and sideloaded rom from there again. The only downside are apps for banking that require ggle. Do you have any recommendation on that, should I go with open gapps ?
 

SkewedZeppelin

Senior Member
Mar 19, 2021
91
108
divested.dev
@kjsu0 please kindly read through the divestos.org website. Most of the questions you are asking are all already documented there.

DRM, such as Widevine, is not supported on DivestOS.
Root, such as Magisk, is not supported on DivestOS.
Runtime modification frameworks, such as Xposed, are not supported on DivestOS.
Google Apps, such as Open GApps, are not supported on DivestOS.
Any extra flashable ZIP modifications are not supported on DivestOS.

DivestOS has a strong focus on security, privacy, and freedom. Most of those things are not compatible with our ideals.
 
  • Like
Reactions: kjsu0

aospray

Member
Feb 7, 2017
17
3
This looks like a great project, SkewedZeppelin.

I love the increased privacy focus and built-in OTA support.

I have a question about the custom hosts file. I know DivestOS doesn't recommend using root, but what if we prefer other options like AdAway to manage the hosts file instead?

I'm definitely going to flash DivestOS on the mako. Probably will go with 17.1 instead of the 18 build for now.

Thanks again for starting and maintaining this project!
 

SkewedZeppelin

Senior Member
Mar 19, 2021
91
108
divested.dev
I have a question about the custom hosts file. I know DivestOS doesn't recommend using root, but what if we prefer other options like AdAway to manage the hosts file instead?

DivestOS includes a fairly extensive HOSTS file. Assuming you do not install (m)any proprietary apps and use Mull/Fenix/Bromite with uBlock Origin there should be no visible ads or telemetry phoning home.

As DivestOS does not support root, AdAway is incompatible.
If you want more domains blocked you can use DNS66, however it functions using a local VPN, so you won't be able to use any other VPN apps such as Orbot.
 

aospray

Member
Feb 7, 2017
17
3
I flashed 17.1 a few hours ago. I did run into the splash screen first boot bug that kjsu0 encountered. I think this should be noted in the first post or on the DivestOS website so people don't get confused, but other than that it's working pretty good so far. Thanks for all your work, SkewedZeppelin!

I looked at the hosts file for DivestOS and I feel like there might be too many sources. I also prefer personalDNSfilter over DNS66 since it has CNAME uncloaking built-in. I guess I'll just use Adguard DNS for private DNS as an alternative.
 

aospray

Member
Feb 7, 2017
17
3
@SkewedZeppelin - Could you add the following patch to your rom?

I've recently experienced the dreaded navigaton bar deadzone issue as described here: https://forum.xda-developers.com/t/wip-fix-dead-navbar-workarounds-and-fixes.3243822/

Edit - Looks like the patch was added a long time ago to AOSP... I guess my mako is finally showing its age.
 
Last edited:
  • Like
Reactions: voron00

Top Liked Posts