• Introducing XDA Computing: Discussion zones for Hardware, Software, and more!    Check it out!

[ROM] DivestOS 18.1 for mako

Search This thread

SkewedZeppelin

Senior Member
Mar 19, 2021
121
129
divested.dev
featureGraphic-masked-xda.png

DivestOS is a more private and more secure aftermarket system.

Nexus 4 Notes:
- resized /system is required
- will fail to boot on very first boot. force off once after 3 minutes.
- in-place upgrade to 18.1 is not possible unlike previous DivestOS releases due to keystore change

Features:
- strong focus on FOSS
- various system hardening
- various privacy enhancements
- automated removal of unnecessary proprietary blobs
- automated kernel hardening and CVE patching
- ability to relock bootloader on supported devices
- verified boot on supported devices
- no root support
- SELinux always enforcing
- encrypted by default
- monthly updates
- OTA delta updates
- OTA updates over Tor (optional)
- F-Droid included

Extra Features (not installed by default):
- Mull, our hardened fork of Fenix
- Hypatia, our real-time malware scanner
- Extirpater, our free space eraser

Links:
- Website: https://divestos.org
- Onion: http://divestoseb5nncsydt7zzf5hrfg44md4bxqjs5ifcv4t7gt7u6ohjyyd.onion
- Downloads: https://divestos.org/index.php?page=devices&base=LineageOS#device-mako
- Changelogs: https://divestos.org/index.php?page=news
- Project History: https://divestos.org/index.php?page=history
- Known Issues: https://divestos.org/index.php?page=broken#mako
- Screenshots: https://divestos.org/index.php?page=screenshots
- About + Credits + Notices: https://divestos.org/index.php?page=about
- Donate: https://divested.dev/donate
- Source Code: https://github.com/divested-mobile or https://gitlab.com/divested-mobile
- XMPP Chat Room: xmpp:[email protected]

Device Specific Links
- Device Tree: https://github.com/voron00/android_device_lge_mako
- Kernel: https://github.com/voron00/android_kernel_lge_mako
- Kernel CVE Patches Applied: https://github.com/Divested-Mobile/...-18.1/CVE_Patchers/android_kernel_lge_mako.sh
- Please give our fellow @voron00 a thanks for keeping the Nexus 4 alive!

Other Bits:
- Good and bad feedback is welcomed. Else how can we improve?
- If you find a bug, please report it below or via GitHub/GitLab.
- Testing/Translations/Code contributions are gratefully appreciated.

Important Notes for New Users:
- Please make a backup of your device and copy it to another computer.
- You must wipe before installing this ROM.
- This ROM has userdata encrypted by default
- You are intended to relock your bootloader with this ROM (if your device is marked supported for that).

DivestOS does *not* support the following:
- Google Apps (OpenGAPPS)
- DRM (Widevine)
- alternative recoveries (TWRP)
- root (Magisk)
- runtime modification frameworks (Xposed or theme engines)

All downloads are GPG signed with the following key:
Code:
#B874 4D67 F9F1 E14E 145D FD8E 7F62 7E92 0F31 6994
-----BEGIN PGP PUBLIC KEY BLOCK-----

mDMEXupIxBYJKwYBBAHaRw8BAQdAC1RiTvrqJaAQ4FIHsxX+gzEgdT4mspISS+p0
y847Nge0SERpdmVzdE9TIFJlbGVhc2UgU2lnbmluZyAoMjAyMCAjMSkgPHN1cHBv
cnQrcmVsZWFzZXNpZ25pbmdAZGl2ZXN0b3Mub3JnPoiQBBMWCAA4FiEEuHRNZ/nx
4U4UXf2Of2J+kg8xaZQFAl7qSMQCGwMFCwkIBwIGFQoJCAsCBBYCAwECHgECF4AA
CgkQf2J+kg8xaZR1BgEAwwLVVsG7kbp8M3GTV987XpVl5cZeTtDc/g+66briCHUB
APiuH/dk8eRnhFnq4Up2/j7uD/8FtSvxPbHiz6t1MdgB
=VzP2
-----END PGP PUBLIC KEY BLOCK-----
 
Last edited:

kjsu0

Member
Mar 20, 2021
14
4
xmpp
Hello DivestOS,

1 - Do you need to reparation internal memory with Clamor's script before flashing this rom ?

2 - Is it set to permissive like in the latest voron00's LineageOS release or to enforcing by default ?

3 - Can you update it via OTA ?

4 - Does it drain battery when the phone is switched off ?

Thanks
 

SkewedZeppelin

Senior Member
Mar 19, 2021
121
129
divested.dev
Hello DivestOS,

1 - Do you need to reparation internal memory with Clamor's script before flashing this rom ?

2 - Is it set to permissive like in the latest voron00's LineageOS release or to enforcing by default ?

3 - Can you update it via OTA ?

4 - Does it drain battery when the phone is switched off ?

Thanks

1. Yes for the 17.1 build, there is however a 16.0 and 15.1 build available that doesn't need repartitioning.
2. No, DivestOS is *always* enforcing. DivestOS will never ever release a build with permissive SELinux.
3. Yes, DivestOS offers OTA updates for every device since 2017/05/30.
4. When the phone is asleep, no. When the phone is powered off, no.

mako was my daily driver for all of 2019, it was a solid experience despite the age of the hardware.
 
  • Like
Reactions: kjsu0

kjsu0

Member
Mar 20, 2021
14
4
xmpp
it was a solid experience despite the age of the hardware

I agree, this phone is amazing, never age ...

I got it working on my phone.

I used Clamor's script and everything went almost smooth but have two more questions:

1 - Is it normal that signature can't be verified when installing via twrp ?

2 - On first boot-up rom got stuck on divestos splash screen and didn't want to load entire OS...
I rebooted the phone and on second try it started without any problem and greeted with configuration screen, is that ok ?
 

SkewedZeppelin

Senior Member
Mar 19, 2021
121
129
divested.dev
I agree, this phone is amazing, never age ...

I got it working on my phone.

I used Clamor's script and everything went almost smooth but have two more questions:

1 - Is it normal that signature can't be verified when installing via twrp ?

2 - On first boot-up rom got stuck on divestos splash screen and didn't want to load entire OS...
I rebooted the phone and on second try it started without any problem and greeted with configuration screen, is that ok ?
1. It is not recommended to use TWRP with DivestOS, except for a select few devices. You are intended to use the DivestOS recovery.
2. That is expected, it is a known issue. It occurs due to the modem failing to start after the data partition is encrypted for the first time. The workaround is to wait 5 minutes on the very first boot, power it off, then reboot it. All should be OK after.
 
  • Like
Reactions: aospray and kjsu0

kjsu0

Member
Mar 20, 2021
14
4
xmpp
I redid everything again, used fastboot to flash recommended recovery and sideloaded rom from there again. The only downside are apps for banking that require ggle. Do you have any recommendation on that, should I go with open gapps ?
 

SkewedZeppelin

Senior Member
Mar 19, 2021
121
129
divested.dev
@kjsu0 please kindly read through the divestos.org website. Most of the questions you are asking are all already documented there.

DRM, such as Widevine, is not supported on DivestOS.
Root, such as Magisk, is not supported on DivestOS.
Runtime modification frameworks, such as Xposed, are not supported on DivestOS.
Google Apps, such as Open GApps, are not supported on DivestOS.
Any extra flashable ZIP modifications are not supported on DivestOS.

DivestOS has a strong focus on security, privacy, and freedom. Most of those things are not compatible with our ideals.
 
  • Like
Reactions: kjsu0

aospray

Member
Feb 7, 2017
18
5
This looks like a great project, SkewedZeppelin.

I love the increased privacy focus and built-in OTA support.

I have a question about the custom hosts file. I know DivestOS doesn't recommend using root, but what if we prefer other options like AdAway to manage the hosts file instead?

I'm definitely going to flash DivestOS on the mako. Probably will go with 17.1 instead of the 18 build for now.

Thanks again for starting and maintaining this project!
 

SkewedZeppelin

Senior Member
Mar 19, 2021
121
129
divested.dev
I have a question about the custom hosts file. I know DivestOS doesn't recommend using root, but what if we prefer other options like AdAway to manage the hosts file instead?

DivestOS includes a fairly extensive HOSTS file. Assuming you do not install (m)any proprietary apps and use Mull/Fenix/Bromite with uBlock Origin there should be no visible ads or telemetry phoning home.

As DivestOS does not support root, AdAway is incompatible.
If you want more domains blocked you can use DNS66, however it functions using a local VPN, so you won't be able to use any other VPN apps such as Orbot.
 

aospray

Member
Feb 7, 2017
18
5
I flashed 17.1 a few hours ago. I did run into the splash screen first boot bug that kjsu0 encountered. I think this should be noted in the first post or on the DivestOS website so people don't get confused, but other than that it's working pretty good so far. Thanks for all your work, SkewedZeppelin!

I looked at the hosts file for DivestOS and I feel like there might be too many sources. I also prefer personalDNSfilter over DNS66 since it has CNAME uncloaking built-in. I guess I'll just use Adguard DNS for private DNS as an alternative.
 

aospray

Member
Feb 7, 2017
18
5
@SkewedZeppelin - Could you add the following patch to your rom?

I've recently experienced the dreaded navigaton bar deadzone issue as described here: https://forum.xda-developers.com/t/wip-fix-dead-navbar-workarounds-and-fixes.3243822/

Edit - Looks like the patch was added a long time ago to AOSP... I guess my mako is finally showing its age.
 
Last edited:
  • Like
Reactions: voron00

ddaggebi

Senior Member
Jan 12, 2014
447
190
Seoul
Xiaomi Mi Mix 2S
To anyone who's wondering - DivestOS is still being actively updated. Last update was July 30th.
Thanks to OP for supporting mako to this date. Never thought Android 11 will work this flawlessly in 2012 device.
Wondering if we can get A12 and Material YOU, but then again, it will have serious UI performance problems😭
 
  • Like
Reactions: SkewedZeppelin
Aug 12, 2021
24
9
Hello DivestOS:

First of all, thank you very much for still supporting Nexus 4 today(y). I read your post and I still don’t quite understand some points. I would like to ask:

1. What are the specific steps for "resized /system"?
2. After installing Divest OS, can I install other applications on it
at will? Such as: Facebook,Whatsapp.......
3. If it feels inappropriate, can I install another ROM freely?

Please forgive my ignorance, cos I just started to touch the flashing and knowing that Nexus 4 is still supported by community, so I want to try it

Thank you again!
 
Last edited:
  • Like
Reactions: SkewedZeppelin

SkewedZeppelin

Senior Member
Mar 19, 2021
121
129
divested.dev
Hello DivestOS:

First of all, thank you very much for your team that is still supporting Nexus 4 today(y). I read your post and I still don’t quite understand some points. I would like to ask:

1. What are the specific steps for "resized /system"?
2. After installing Divest OS, can I install other applications on it
at will? Such as: Facebook,Whatsapp.......
3. If it feels inappropriate, can I install another ROM freely?

Please forgive my ignorance, cos I just started to touch the flashing and knowing that Nexus 4 is still supported by community today, so I want to try it

Thank you again!
1. you can use @voron00's repartition script https://drive.google.com/file/d/1GNbxlqG78WYOeXBxgmfGgMmsf02KMVOX/view or @Clamor's script https://forum.xda-developers.com/t/repartition-nexus-4-repartition-mako-8gb-16gb-ua-twrp.3844383/
2. yes, you can install Aurora Store from F-Droid in order to install such proprietary apps
3. of course, just flash another recovery from fastboot and flash any ROM as you please
 
  • Like
Reactions: 2021redmi2fans
Aug 12, 2021
24
9
1. you can use @voron00's repartition script https://drive.google.com/file/d/1GNbxlqG78WYOeXBxgmfGgMmsf02KMVOX/view or @Clamor's script https://forum.xda-developers.com/t/repartition-nexus-4-repartition-mako-8gb-16gb-ua-twrp.3844383/
2. yes, you can install Aurora Store from F-Droid in order to install such proprietary apps
3. of course, just flash another recovery from fastboot and flash any ROM as you please
Okay, got it, thank you, please keep working hard, and may God bless !
 
  • Like
Reactions: SkewedZeppelin

Top Liked Posts

  • There are no posts matching your filters.
  • 1
    Hello DivestOS:

    First of all, thank you very much for still supporting Nexus 4 today(y). I read your post and I still don’t quite understand some points. I would like to ask:

    1. What are the specific steps for "resized /system"?
    2. After installing Divest OS, can I install other applications on it
    at will? Such as: Facebook,Whatsapp.......
    3. If it feels inappropriate, can I install another ROM freely?

    Please forgive my ignorance, cos I just started to touch the flashing and knowing that Nexus 4 is still supported by community, so I want to try it

    Thank you again!
    1
    Hello DivestOS:

    First of all, thank you very much for your team that is still supporting Nexus 4 today(y). I read your post and I still don’t quite understand some points. I would like to ask:

    1. What are the specific steps for "resized /system"?
    2. After installing Divest OS, can I install other applications on it
    at will? Such as: Facebook,Whatsapp.......
    3. If it feels inappropriate, can I install another ROM freely?

    Please forgive my ignorance, cos I just started to touch the flashing and knowing that Nexus 4 is still supported by community today, so I want to try it

    Thank you again!
    1. you can use @voron00's repartition script https://drive.google.com/file/d/1GNbxlqG78WYOeXBxgmfGgMmsf02KMVOX/view or @Clamor's script https://forum.xda-developers.com/t/repartition-nexus-4-repartition-mako-8gb-16gb-ua-twrp.3844383/
    2. yes, you can install Aurora Store from F-Droid in order to install such proprietary apps
    3. of course, just flash another recovery from fastboot and flash any ROM as you please
    1
    1. you can use @voron00's repartition script https://drive.google.com/file/d/1GNbxlqG78WYOeXBxgmfGgMmsf02KMVOX/view or @Clamor's script https://forum.xda-developers.com/t/repartition-nexus-4-repartition-mako-8gb-16gb-ua-twrp.3844383/
    2. yes, you can install Aurora Store from F-Droid in order to install such proprietary apps
    3. of course, just flash another recovery from fastboot and flash any ROM as you please
    Okay, got it, thank you, please keep working hard, and may God bless !
  • 5
    featureGraphic-masked-xda.png

    DivestOS is a more private and more secure aftermarket system.

    Nexus 4 Notes:
    - resized /system is required
    - will fail to boot on very first boot. force off once after 3 minutes.
    - in-place upgrade to 18.1 is not possible unlike previous DivestOS releases due to keystore change

    Features:
    - strong focus on FOSS
    - various system hardening
    - various privacy enhancements
    - automated removal of unnecessary proprietary blobs
    - automated kernel hardening and CVE patching
    - ability to relock bootloader on supported devices
    - verified boot on supported devices
    - no root support
    - SELinux always enforcing
    - encrypted by default
    - monthly updates
    - OTA delta updates
    - OTA updates over Tor (optional)
    - F-Droid included

    Extra Features (not installed by default):
    - Mull, our hardened fork of Fenix
    - Hypatia, our real-time malware scanner
    - Extirpater, our free space eraser

    Links:
    - Website: https://divestos.org
    - Onion: http://divestoseb5nncsydt7zzf5hrfg44md4bxqjs5ifcv4t7gt7u6ohjyyd.onion
    - Downloads: https://divestos.org/index.php?page=devices&base=LineageOS#device-mako
    - Changelogs: https://divestos.org/index.php?page=news
    - Project History: https://divestos.org/index.php?page=history
    - Known Issues: https://divestos.org/index.php?page=broken#mako
    - Screenshots: https://divestos.org/index.php?page=screenshots
    - About + Credits + Notices: https://divestos.org/index.php?page=about
    - Donate: https://divested.dev/donate
    - Source Code: https://github.com/divested-mobile or https://gitlab.com/divested-mobile
    - XMPP Chat Room: xmpp:[email protected]

    Device Specific Links
    - Device Tree: https://github.com/voron00/android_device_lge_mako
    - Kernel: https://github.com/voron00/android_kernel_lge_mako
    - Kernel CVE Patches Applied: https://github.com/Divested-Mobile/...-18.1/CVE_Patchers/android_kernel_lge_mako.sh
    - Please give our fellow @voron00 a thanks for keeping the Nexus 4 alive!

    Other Bits:
    - Good and bad feedback is welcomed. Else how can we improve?
    - If you find a bug, please report it below or via GitHub/GitLab.
    - Testing/Translations/Code contributions are gratefully appreciated.

    Important Notes for New Users:
    - Please make a backup of your device and copy it to another computer.
    - You must wipe before installing this ROM.
    - This ROM has userdata encrypted by default
    - You are intended to relock your bootloader with this ROM (if your device is marked supported for that).

    DivestOS does *not* support the following:
    - Google Apps (OpenGAPPS)
    - DRM (Widevine)
    - alternative recoveries (TWRP)
    - root (Magisk)
    - runtime modification frameworks (Xposed or theme engines)

    All downloads are GPG signed with the following key:
    Code:
    #B874 4D67 F9F1 E14E 145D FD8E 7F62 7E92 0F31 6994
    -----BEGIN PGP PUBLIC KEY BLOCK-----
    
    mDMEXupIxBYJKwYBBAHaRw8BAQdAC1RiTvrqJaAQ4FIHsxX+gzEgdT4mspISS+p0
    y847Nge0SERpdmVzdE9TIFJlbGVhc2UgU2lnbmluZyAoMjAyMCAjMSkgPHN1cHBv
    cnQrcmVsZWFzZXNpZ25pbmdAZGl2ZXN0b3Mub3JnPoiQBBMWCAA4FiEEuHRNZ/nx
    4U4UXf2Of2J+kg8xaZQFAl7qSMQCGwMFCwkIBwIGFQoJCAsCBBYCAwECHgECF4AA
    CgkQf2J+kg8xaZR1BgEAwwLVVsG7kbp8M3GTV987XpVl5cZeTtDc/g+66briCHUB
    APiuH/dk8eRnhFnq4Up2/j7uD/8FtSvxPbHiz6t1MdgB
    =VzP2
    -----END PGP PUBLIC KEY BLOCK-----
    2
    I agree, this phone is amazing, never age ...

    I got it working on my phone.

    I used Clamor's script and everything went almost smooth but have two more questions:

    1 - Is it normal that signature can't be verified when installing via twrp ?

    2 - On first boot-up rom got stuck on divestos splash screen and didn't want to load entire OS...
    I rebooted the phone and on second try it started without any problem and greeted with configuration screen, is that ok ?
    1. It is not recommended to use TWRP with DivestOS, except for a select few devices. You are intended to use the DivestOS recovery.
    2. That is expected, it is a known issue. It occurs due to the modem failing to start after the data partition is encrypted for the first time. The workaround is to wait 5 minutes on the very first boot, power it off, then reboot it. All should be OK after.
    1
    Hello DivestOS,

    1 - Do you need to reparation internal memory with Clamor's script before flashing this rom ?

    2 - Is it set to permissive like in the latest voron00's LineageOS release or to enforcing by default ?

    3 - Can you update it via OTA ?

    4 - Does it drain battery when the phone is switched off ?

    Thanks

    1. Yes for the 17.1 build, there is however a 16.0 and 15.1 build available that doesn't need repartitioning.
    2. No, DivestOS is *always* enforcing. DivestOS will never ever release a build with permissive SELinux.
    3. Yes, DivestOS offers OTA updates for every device since 2017/05/30.
    4. When the phone is asleep, no. When the phone is powered off, no.

    mako was my daily driver for all of 2019, it was a solid experience despite the age of the hardware.
    1
    I'm not sure about @voron00 's reasoning to not make 17.1 builds.
    But DivestOS 17.1, based on their sources has been fully functional by my standards for nearly a year now.
    1
    @kjsu0 please kindly read through the divestos.org website. Most of the questions you are asking are all already documented there.

    DRM, such as Widevine, is not supported on DivestOS.
    Root, such as Magisk, is not supported on DivestOS.
    Runtime modification frameworks, such as Xposed, are not supported on DivestOS.
    Google Apps, such as Open GApps, are not supported on DivestOS.
    Any extra flashable ZIP modifications are not supported on DivestOS.

    DivestOS has a strong focus on security, privacy, and freedom. Most of those things are not compatible with our ideals.