[ROM][FP4][12.0] iodéOS = LineageOS 19.1 + MicroG + adblocker [27/07/2022]

Search This thread

vince31fr

Senior Member
Dec 18, 2016
959
968
Toulouse
iode_logo.png


Introduction

iodéOS is a privacy-focused operating system powered by LineageOS and based on the Android mobile platform. iodéOS aims at protecting the user's privacy with a built-in adblocker and by freeing the smartphone from snitches.

The objectives in the conception of this ROM are threefold:

  1. To keep the stability and security level of LineageOS, by minimizing the modifications made to the system. Apart the system modifications required by the adblocker, we mainly only added a few useful options commonly found in other custom ROMs, made some cosmetic changes, modified a few default settings to prevent data leaks to Google servers.
  2. To ease a quick adoption of this ROM by new users. We especially target users that are concerned by the protection of their privacy, but are not reluctant to still use inquisitive apps like Google ones. We thus included MicroG as well as a coherent set of default apps (all open source, with one exception), and simplified the initial setup of the system. Particularly, an initialization of MicroG has been made with GCM notifications allowed by default, a privacy-friendly network location provider (DéjàVu) pre-selected, as well as Nominatim Geocoder.
  3. To provide a new and powerful way of blocking ads, malwares, data leaks of all kinds to many intrusive servers. We are developing an analyzer, tightly integrated into the system, that captures all DNS requests and network traffic, as well as a user interface (the iodé app). Compared to some other well-known adblockers, this has the advantages of:
    • Avoiding to lock the VPN for that use. You can even use another adblocker that uses VPN technology alongside our blocker.
    • Being independent of the kind of DNS server used by the system or set by an independent app: classical DNS on UDP port 53 or any other one, DNS over TLS (DoT), DNS over HTTPS (DoH), ..., as we capture the DNS requests before they are transmitted to the system function that emits the DNS request. What we do not support, is DoH when it is natively built into applications, i.e. when an app communicates directly with a DoH server, without asking name resolution to the system. It would require to decrypt HTTPS packets between such an app and the DoH server, which may create a big security hole.
    • Precisely mapping DNS requests and network packets to the Android apps that emitted (or received) them.
    • Deciding which apps have a filtered network usage (by default, all apps), and which ones can communicate with blacklisted servers.
    Since its first versions, we added many features to the iodé blocker: several levels of protection, fine-grained control over the hosts that should be blocked or authorized, displaying statistics on a map to see the quantity of data exchanged to which countries, clearing statistics... We are actively developing the blocker, and new functionalities will be regularly added.

Features

Changes in LineageOS to prevent data leaks:

  • Default DNS server: Google's DNS replaced by Quad9's 'unblocked' servers in all parts of the system.
  • A-GPS: patches to avoid leaking personnal information like IMSI to supl server.
  • Captive portal login: connectivitycheck.gstatic.com replaced by captiveportal.kuketz.de for connectivity check.
  • Dialer: Google default option replaced by OpenStreetMap for phone number lookup.

Pre-installed apps:

We included many useful default apps, but our choice cannot suit everyone; so we added the possibility to remove them. It can be done at the end of the phone setup, or at any time by going to Parameters -> Apps & Notifications -> Preinstalled apps.

  • MicroG core apps: GmsCore, GsfProxy, FakeStore.
  • NLP backends for MicroG : DejaVuNLPBackend (default), MozillaNLPBackend, AppleNLPBackend, RadioCellsNLPBackend, Nominatim Geocoder.
  • App stores : FDroid (with F-Droid Privileged Extension) and Aurora Store.
  • Browser: our own fork of Firefox (with Qwant as default search engine, many other ones added, telemetry disabled, parts of telemetry code removed) instead of Lineage’s default browser Jelly.
  • SMS: QKSMS instead of Lineage's default SMS app.
  • Email: p≡p (Pretty Easy Privacy).
  • Camera: our own fork of Open Camera, with a few tweaks.
  • Maps/navigation: Magic Earth GPS & Navigation (the only one free but not open source).
  • Keyboard: OpenBoard instead of AOSP keyboard.
  • PDF: Pdf Viewer Plus.
  • Personnal notes: Carnet.
  • {Ad/Malware/Data leak}-blocker: iodé.
  • News: to keep users informed about our developments, as well as a FAQ.
  • Meteo: Geometric Weather.

Pre-included FDroid repository:

The apps that we tweak or develop (microG services, the browser based on Firefox, the News app, Open Camera ...) are available through a repository that we included in FDroid (check the "Apps for iodéOS" category). For this purpose and to avoid name conflicts of some apps, we also had to make a few changes in FDroid.

Useful options from other custom ROMs:
  • Smart charging (disables charging when a given level is reached, to protect battery health).
  • Fingerprint vibration toggle.
  • Swipe down to clear all in recent apps (Android 10 only).

Installation Instructions

To download and flash our latest build, see https://gitlab.com/iode/ota.
You can also find here direct links to the latest builds.

Supported devices

Sources

Bug Reporting

You can post a message in this thread or (preferred) open an issue here.

Credits

LineageOS is a free, community built, aftermarket firmware distribution of android, which is designed to increase performance and reliability over stock android for your device.
All the source code for LineageOS is available in the LineageOS Github repo. If you would like to contribute to LineageOS, please visit their Wiki for more details.
This ROM would be nothing without the tremendous work made on MicroG, and all the other open source apps that we included. We are very grateful to their authors.


Contributors

Direct contributors:
@iodeOS, @vince31fr
Indirect contributors (too numerous to list): All the people that contributed to the device tree, to LineageOS, and to the included open source apps.

Sponsoring

You can help in the development of this ROM by paying us a coffee here: https://paypal.me/iodeOS.

Screenshots

iode_home1.png
iode_home2.png
iode_drawer.png
iode_preinstalled.png
blocker_home.png
blocker_report.png
blocker_stream.png
blocker_map.png
blocker_lists.png
blocker_blocked.png
blocker_block_host.png
blocker_details_host.png
 
Last edited:

vince31fr

Senior Member
Dec 18, 2016
959
968
Toulouse
Downloads :

iodéOS


  • 27/07/2022 (build 20220726):
    • SafetyNet certification activated: allows many apps, notably banking ones, to fully work
    • Setup wizard: the push notifications configuration page now also activates SafetyNet (fine-grained control in Settings->System->microG)
    • OpenCamera: the 'Use alternative flash method' in photo settings is no more necessary and can be disabled, allowing flash optimization
    • News app: German translations
    • LineageOS synced with July security patch included
    • All apps updated
  • 21/07/2022 (build 20220530):
    • Upgrade to Android 12 / LineageOS 19.1
    • Setup Wizard: new page to configure push notifications through microG
    • Lockscreen settings: switch added to disable fingerprint unlock when screen is off
    • Improved German translations
    • Bug fixes and improvements
    • LineageOS synced with May security patch included
    • All apps updated
  • 02/05/2022 (build 20220407):
    • News app reworked
    • Setup Wizard: new iodé introduction
    • iodé blocker: pull to refresh replaced by automatic refresh in report tab
    • Teracube 2e 2022 batch released, video playback in browser and video recording fixed
    • Music app : playlist crash fixed
    • Open Camera : crash when tapping thumbnail of a newly recorded video fixed, photos and videos now editable
    • LineageOS synced with March security patch
    • All apps updated
  • 02/02/2022 (build 20220126): initial publicly available build of iodéOS for FP4.

Add-ons

  • recovery-fp4-permissive.img: as the recovery we include in the rom is securized and does not allow flashing a package not signed by us, here is a more permissive recovery that allows flashing anything. It can be started in bootloader mode, by running 'fastboot boot recovery-fp4-permissive.img'.
 

Attachments

  • recovery-fp4-permissive.img
    96 MB · Views: 434
Last edited:

A944684

Member
Feb 22, 2021
35
8
Hi @vince31fr and thank you for this good news.

I just install your Os, what is the difference between your privacy tool and a trackerControl or Netguard app ?
Is there a way to block all by default on your privacy tool and allow one by one ? (i used to do that with tracker Control on /e/ os).

Thanks.
 
Last edited:
iode_logo.png


Introduction

iodéOS is a privacy-focused operating system powered by LineageOS and based on the Android mobile platform. iodéOS aims at protecting the user's privacy with a built-in adblocker and by freeing the smartphone from snitches.

The objectives in the conception of this ROM are threefold:

  1. To keep the stability and security level of LineageOS, by minimizing the modifications made to the system. Apart the system modifications required by the adblocker, we mainly only added a few useful options commonly found in other custom ROMs, made some cosmetic changes, modified a few default settings to prevent data leaks to Google servers.
  2. To ease a quick adoption of this ROM by new users. We especially target users that are concerned by the protection of their privacy, but are not reluctant to still use inquisitive apps like Google ones. We thus included MicroG as well as a coherent set of default apps (all open source, with one exception), and simplified the initial setup of the system. Particularly, an initialization of MicroG has been made with GCM notifications allowed by default, a privacy-friendly network location provider (DéjàVu) pre-selected, as well as Nominatim Geocoder.
  3. To provide a new and powerful way of blocking ads, malwares, data leaks of all kinds to many intrusive servers. We are developing an analyzer, tightly integrated into the system, that captures all DNS requests and network traffic, as well as a user interface (the iodé app). Compared to some other well-known adblockers, this has the advantages of:
    • Avoiding to lock the VPN for that use. You can even use another adblocker that uses VPN technology alongside our blocker.
    • Being independent of the kind of DNS server used by the system or set by an independent app: classical DNS on UDP port 53 or any other one, DNS over TLS (DoT), DNS over HTTPS (DoH), ..., as we capture the DNS requests before they are transmitted to the system function that emits the DNS request. What we do not support, is DoH when it is natively built into applications, i.e. when an app communicates directly with a DoH server, without asking name resolution to the system. It would require to decrypt HTTPS packets between such an app and the DoH server, which may create a big security hole.
    • Precisely mapping DNS requests and network packets to the Android apps that emitted (or received) them.
    • Deciding which apps have a filtered network usage (by default, all apps), and which ones can communicate with blacklisted servers.
    Since its first versions, we added many features to the iodé blocker: several levels of protection, fine-grained control over the hosts that should be blocked or authorized, displaying statistics on a map to see the quantity of data exchanged to which countries, clearing statistics... We are actively developing the blocker, and new functionalities will be regularly added.

Features

Changes in LineageOS to prevent data leaks:

  • Default DNS server: Google's DNS replaced by Quad9's 'unblocked' servers in all parts of the system.
  • A-GPS: patches to avoid leaking personnal information like IMSI to supl server.
  • Captive portal login: connectivitycheck.gstatic.com replaced by captiveportal.kuketz.de for connectivity check.
  • Dialer: Google default option replaced by OpenStreetMap for phone number lookup.

Pre-installed apps:

We included many useful default apps, but our choice cannot suit everyone; so we added the possibility to remove them. It can be done at the end of the phone setup, or at any time by going to Parameters -> Apps & Notifications -> Preinstalled apps.

  • MicroG core apps: GmsCore, GsfProxy, FakeStore.
  • NLP backends for MicroG : DejaVuNLPBackend (default), MozillaNLPBackend, AppleNLPBackend, RadioCellsNLPBackend, Nominatim Geocoder.
  • App stores : FDroid (with F-Droid Privileged Extension) and Aurora Store.
  • Browser: our own fork of Firefox (with Qwant as default search engine, many other ones added, telemetry disabled, parts of telemetry code removed) instead of Lineage’s default browser Jelly.
  • SMS: QKSMS instead of Lineage's default SMS app.
  • Email: p≡p (Pretty Easy Privacy).
  • Camera: our own fork of Open Camera, with a few tweaks.
  • Maps/navigation: Magic Earth GPS & Navigation (the only one free but not open source).
  • Keyboard: OpenBoard instead of AOSP keyboard.
  • PDF: Pdf Viewer Plus.
  • Personnal notes: Carnet.
  • {Ad/Malware/Data leak}-blocker: iodé.
  • News: to keep users informed about our developments, as well as a FAQ.
  • Meteo: Geometric Weather.

Pre-included FDroid repository:

The apps that we tweak or develop (microG services, the browser based on Firefox, the News app, Open Camera ...) are available through a repository that we included in FDroid (check the "Apps for iodéOS" category). For this purpose and to avoid name conflicts of some apps, we also had to make a few changes in FDroid.

Useful options from other custom ROMs:
  • Smart charging (disables charging when a given level is reached, to protect battery health).
  • Fingerprint vibration toggle.
  • Swipe down to clear all in recent apps (Android 10 only).

Installation Instructions

To download and flash our latest build, see https://gitlab.com/iode/ota.
You can also find here direct links to the latest builds.

Supported devices

Sources

Bug Reporting

You can post a message in this thread or (preferred) open an issue here.

Credits

LineageOS is a free, community built, aftermarket firmware distribution of android, which is designed to increase performance and reliability over stock android for your device.
All the source code for LineageOS is available in the LineageOS Github repo. If you would like to contribute to LineageOS, please visit their Wiki for more details.
This ROM would be nothing without the tremendous work made on MicroG, and all the other open source apps that we included. We are very grateful to their authors.


Contributors

Direct contributors:
@iodeOS, @vince31fr
Indirect contributors (too numerous to list): All the people that contributed to the device tree, to LineageOS, and to the included open source apps.

Sponsoring

You can help in the development of this ROM by paying us a coffee here: https://paypal.me/iodeOS.

Screenshots

iode_home1.png
iode_home2.png
iode_drawer.png
iode_preinstalled.png
blocker_home.png
blocker_report.png
blocker_stream.png
blocker_map.png
blocker_lists.png
blocker_blocked.png
blocker_block_host.png
blocker_details_host.png

Screenshot_20220207-033253_Aurora_Store.png


Very nice MOD, it is stable and fast... it has high compatibility with Open Camera and the store inside IodeOS I liked it a lot.
 
Last edited:
  • Like
Reactions: vince31fr

vince31fr

Senior Member
Dec 18, 2016
959
968
Toulouse
Hi @vince31fr and thank you for this good news.

I just install your Os, what is the difference between your privacy tool and a trackerControl or Netguard app ?
Is there a way to block all by default on your privacy tool and allow one by one ? (i used to do that with tracker Control on /e/ os).

Thanks.
One of the main difference is that the VPN connection is not used by the iodé blocker, so you can use any external VPN provider you want. We also provide the wireguard kernel module.
Another difference is that it is integrated into the system, so there's no need to root the phone for that purpose.
By default, all blacklisted hosts are blocked. You can then have a fine-grained control over the hosts you want to block/unblock.
 
  • Like
Reactions: DefyCM

A944684

Member
Feb 22, 2021
35
8
One of the main difference is that the VPN connection is not used by the iodé blocker, so you can use any external VPN provider you want. We also provide the wireguard kernel module.
Another difference is that it is integrated into the system, so there's no need to root the phone for that purpose.
By default, all blacklisted hosts are blocked. You can then have a fine-grained control over the hosts you want to block/unblock.

EDIT : Ok i have found my answers and opened a issue ticket for ungoogled chromium.
 
Last edited:

Wolf2001

New member
Nov 26, 2018
2
0
@vince31fr
I am using this for almost two weeks now, everything works great. Thank you a lot.

But I would like to pass SafetyNet, might there be official support for this in the future?

And what would be the best/easiest way for me to get it working? Do I need to root the device to install microg droidguard or are there any other ways?
 
Last edited:

TheVelvetFog

New member
May 30, 2016
3
0
fpcamera-magisk-v1.zip: Original Fairphone camera as a Magisk module. This won't necessarily be maintained...
Thank you for this Magisk module. However, the ultrawide camera does not work as intended: I can see the picture from this lens, but the camera does not take or save pictures. After I press the shutter button, nothing happens.
 

vince31fr

Senior Member
Dec 18, 2016
959
968
Toulouse
@vince31fr
I am using this for almost two weeks now, everything works great. Thank you a lot.

But I would like to pass SafetyNet, might there be official support for this in the future?

And what would be the best/easiest way for me to get it working? Do I need to root the device to install microg droidguard or are there any other ways?
I did not concentrate on passing safetynet yet, maybe later. Don't hesitate to share your findings here if you find a working method ;-) There are some magisk modules that could be tried, ...
 

esszett

Senior Member
Jan 20, 2019
144
98
Sony Xperia Ion
Fairphone
I didn't know iodé at all - until now... Wow, what a nice ROM! I really love the approach iodé is taking...
Thank you :)

Just a quick question: will there be OTA updates for this beta release?
 
  • Like
Reactions: smallz2k

matoq

Member
Jan 11, 2018
22
10
I wanted to give the promising looking iodé a try but installation fails repeatedly with

Code:
E: Signature verifcation failed
E: error 21

Install from ADB completed with status 2.
Installation aborted.

I tried both the "permissive" recovery posted here earlier AND the iode-2.3-20220126-FP4-recovery.img from https://github.com/iodeOS/ota/releases/tag/v2-FP4

I also checked the SHA256s

In recovery, I went to "Apply update from ADB", then
Code:
adb sideload iode-2.3-20220126-FP4.zip
As expected, adb finishes sideload at 47%.

With no other recoveries or iodé builds available, I am currently at the end of the road. Do you have any ideas for me?


e21.jpg
 

matoq

Member
Jan 11, 2018
22
10
I wanted to give the promising looking iodé a try but installation fails repeatedly with

Code:
E: Signature verifcation failed
E: error 21

Install from ADB completed with status 2.
Installation aborted.

I tried both the "permissive" recovery posted here earlier AND the iode-2.3-20220126-FP4-recovery.img from https://github.com/iodeOS/ota/releases/tag/v2-FP4

I also checked the SHA256s

In recovery, I went to "Apply update from ADB", then
Code:
adb sideload iode-2.3-20220126-FP4.zip
As expected, adb finishes sideload at 47%.

With no other recoveries or iodé builds available, I am currently at the end of the road. Do you have any ideas for me?


View attachment 5546665
silly me ... on close inspection: I was in stock recovery. a PROPER REBOOT TO RECOVERY switched me into LOS recovery and the install went fine right away.
 
  • Like
Reactions: smallz2k

crutchcorn

Senior Member
Dec 26, 2013
331
101
Sacramento, CA
As weird of a question as this is (since I'm asking about GAPPS on an intentionally no-GAPPS ROM) is anyone able to get this ROM working with Android Auto using this method?


I admittedly need this for daily driving and am worried about not being able to roll back to stock 😅

Edit: Also, how's battery life compared to stock?
 
Last edited:

vince31fr

Senior Member
Dec 18, 2016
959
968
Toulouse
@vince31fr @iodeOS
Great work! I'm looking forward to try the ROM when my FP4 arrives later this week.

It appears that the link to the device tree is dead: https://gitlab.com/iode/os/devices/fairphone/device_fairphone_FP4
Can you push it to Gitlab or is it intentionally not published yet?

Maybe some of your improvements could also be helpful to create a native LineageOS rom for the FP4.
Effectively we forgot to make this repo public, thanks for pointing this out. We did not make substantial improvements to the original dt (http://github.com/WeAreFairphone/android_device_fairphone_FP4, based on https://gitlab.e.foundation/e/devices/android_device_fairphone_FP4), but LineageOS should build fine.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 1
    *** New Update : 21/07/2022 ***

    Upgrade to Android 12 /LineageOS 19.1

    Available as OTA (see OP)

    (Annoucement a bit delayed)
    1
    Next release will pass safetynet. A build is currently in beta testing and should be officially released soon.
    1
    *** New Update : 27/07/2022 ***

    Available as OTA (see OP)
    1
    *** New Update : 21/07/2022 ***

    Upgrade to Android 12 /LineageOS 19.1

    Available as OTA (see OP)

    (Annoucement a bit delayed)
    Great work! Installation went smooth, even installing Magisk and rooting w/ the permissive recovery worked very well.
    It seems I can dismiss GApps now completely. Thanks for the effort.
    Tonight I will try the OTA.
    1
    Tonight I will try the OTA.
    The OTA upgrade to 3.1 itself went fine, but since the device was rooted, there were a few additional things to do:
    a) re-enable the developer options in the settings,
    b) reinstall the permissive recovery from the OP, and
    c) adb sideload the Magisk zip file to re-install.
    After that, everything runs perfectly just like before the upgrade.
  • 7
    iode_logo.png


    Introduction

    iodéOS is a privacy-focused operating system powered by LineageOS and based on the Android mobile platform. iodéOS aims at protecting the user's privacy with a built-in adblocker and by freeing the smartphone from snitches.

    The objectives in the conception of this ROM are threefold:

    1. To keep the stability and security level of LineageOS, by minimizing the modifications made to the system. Apart the system modifications required by the adblocker, we mainly only added a few useful options commonly found in other custom ROMs, made some cosmetic changes, modified a few default settings to prevent data leaks to Google servers.
    2. To ease a quick adoption of this ROM by new users. We especially target users that are concerned by the protection of their privacy, but are not reluctant to still use inquisitive apps like Google ones. We thus included MicroG as well as a coherent set of default apps (all open source, with one exception), and simplified the initial setup of the system. Particularly, an initialization of MicroG has been made with GCM notifications allowed by default, a privacy-friendly network location provider (DéjàVu) pre-selected, as well as Nominatim Geocoder.
    3. To provide a new and powerful way of blocking ads, malwares, data leaks of all kinds to many intrusive servers. We are developing an analyzer, tightly integrated into the system, that captures all DNS requests and network traffic, as well as a user interface (the iodé app). Compared to some other well-known adblockers, this has the advantages of:
      • Avoiding to lock the VPN for that use. You can even use another adblocker that uses VPN technology alongside our blocker.
      • Being independent of the kind of DNS server used by the system or set by an independent app: classical DNS on UDP port 53 or any other one, DNS over TLS (DoT), DNS over HTTPS (DoH), ..., as we capture the DNS requests before they are transmitted to the system function that emits the DNS request. What we do not support, is DoH when it is natively built into applications, i.e. when an app communicates directly with a DoH server, without asking name resolution to the system. It would require to decrypt HTTPS packets between such an app and the DoH server, which may create a big security hole.
      • Precisely mapping DNS requests and network packets to the Android apps that emitted (or received) them.
      • Deciding which apps have a filtered network usage (by default, all apps), and which ones can communicate with blacklisted servers.
      Since its first versions, we added many features to the iodé blocker: several levels of protection, fine-grained control over the hosts that should be blocked or authorized, displaying statistics on a map to see the quantity of data exchanged to which countries, clearing statistics... We are actively developing the blocker, and new functionalities will be regularly added.

    Features

    Changes in LineageOS to prevent data leaks:

    • Default DNS server: Google's DNS replaced by Quad9's 'unblocked' servers in all parts of the system.
    • A-GPS: patches to avoid leaking personnal information like IMSI to supl server.
    • Captive portal login: connectivitycheck.gstatic.com replaced by captiveportal.kuketz.de for connectivity check.
    • Dialer: Google default option replaced by OpenStreetMap for phone number lookup.

    Pre-installed apps:

    We included many useful default apps, but our choice cannot suit everyone; so we added the possibility to remove them. It can be done at the end of the phone setup, or at any time by going to Parameters -> Apps & Notifications -> Preinstalled apps.

    • MicroG core apps: GmsCore, GsfProxy, FakeStore.
    • NLP backends for MicroG : DejaVuNLPBackend (default), MozillaNLPBackend, AppleNLPBackend, RadioCellsNLPBackend, Nominatim Geocoder.
    • App stores : FDroid (with F-Droid Privileged Extension) and Aurora Store.
    • Browser: our own fork of Firefox (with Qwant as default search engine, many other ones added, telemetry disabled, parts of telemetry code removed) instead of Lineage’s default browser Jelly.
    • SMS: QKSMS instead of Lineage's default SMS app.
    • Email: p≡p (Pretty Easy Privacy).
    • Camera: our own fork of Open Camera, with a few tweaks.
    • Maps/navigation: Magic Earth GPS & Navigation (the only one free but not open source).
    • Keyboard: OpenBoard instead of AOSP keyboard.
    • PDF: Pdf Viewer Plus.
    • Personnal notes: Carnet.
    • {Ad/Malware/Data leak}-blocker: iodé.
    • News: to keep users informed about our developments, as well as a FAQ.
    • Meteo: Geometric Weather.

    Pre-included FDroid repository:

    The apps that we tweak or develop (microG services, the browser based on Firefox, the News app, Open Camera ...) are available through a repository that we included in FDroid (check the "Apps for iodéOS" category). For this purpose and to avoid name conflicts of some apps, we also had to make a few changes in FDroid.

    Useful options from other custom ROMs:
    • Smart charging (disables charging when a given level is reached, to protect battery health).
    • Fingerprint vibration toggle.
    • Swipe down to clear all in recent apps (Android 10 only).

    Installation Instructions

    To download and flash our latest build, see https://gitlab.com/iode/ota.
    You can also find here direct links to the latest builds.

    Supported devices

    Sources

    Bug Reporting

    You can post a message in this thread or (preferred) open an issue here.

    Credits

    LineageOS is a free, community built, aftermarket firmware distribution of android, which is designed to increase performance and reliability over stock android for your device.
    All the source code for LineageOS is available in the LineageOS Github repo. If you would like to contribute to LineageOS, please visit their Wiki for more details.
    This ROM would be nothing without the tremendous work made on MicroG, and all the other open source apps that we included. We are very grateful to their authors.


    Contributors

    Direct contributors:
    @iodeOS, @vince31fr
    Indirect contributors (too numerous to list): All the people that contributed to the device tree, to LineageOS, and to the included open source apps.

    Sponsoring

    You can help in the development of this ROM by paying us a coffee here: https://paypal.me/iodeOS.

    Screenshots

    iode_home1.png
    iode_home2.png
    iode_drawer.png
    iode_preinstalled.png
    blocker_home.png
    blocker_report.png
    blocker_stream.png
    blocker_map.png
    blocker_lists.png
    blocker_blocked.png
    blocker_block_host.png
    blocker_details_host.png
    4
    Downloads :

    iodéOS


    • 27/07/2022 (build 20220726):
      • SafetyNet certification activated: allows many apps, notably banking ones, to fully work
      • Setup wizard: the push notifications configuration page now also activates SafetyNet (fine-grained control in Settings->System->microG)
      • OpenCamera: the 'Use alternative flash method' in photo settings is no more necessary and can be disabled, allowing flash optimization
      • News app: German translations
      • LineageOS synced with July security patch included
      • All apps updated
    • 21/07/2022 (build 20220530):
      • Upgrade to Android 12 / LineageOS 19.1
      • Setup Wizard: new page to configure push notifications through microG
      • Lockscreen settings: switch added to disable fingerprint unlock when screen is off
      • Improved German translations
      • Bug fixes and improvements
      • LineageOS synced with May security patch included
      • All apps updated
    • 02/05/2022 (build 20220407):
      • News app reworked
      • Setup Wizard: new iodé introduction
      • iodé blocker: pull to refresh replaced by automatic refresh in report tab
      • Teracube 2e 2022 batch released, video playback in browser and video recording fixed
      • Music app : playlist crash fixed
      • Open Camera : crash when tapping thumbnail of a newly recorded video fixed, photos and videos now editable
      • LineageOS synced with March security patch
      • All apps updated
    • 02/02/2022 (build 20220126): initial publicly available build of iodéOS for FP4.

    Add-ons

    • recovery-fp4-permissive.img: as the recovery we include in the rom is securized and does not allow flashing a package not signed by us, here is a more permissive recovery that allows flashing anything. It can be started in bootloader mode, by running 'fastboot boot recovery-fp4-permissive.img'.
    2
    Thank you for this Magisk module. However, the ultrawide camera does not work as intended: I can see the picture from this lens, but the camera does not take or save pictures. After I press the shutter button, nothing happens.
    There are some problems indeed. I removed the module, not usable yet.
    1
    iode_logo.png


    Introduction

    iodéOS is a privacy-focused operating system powered by LineageOS and based on the Android mobile platform. iodéOS aims at protecting the user's privacy with a built-in adblocker and by freeing the smartphone from snitches.

    The objectives in the conception of this ROM are threefold:

    1. To keep the stability and security level of LineageOS, by minimizing the modifications made to the system. Apart the system modifications required by the adblocker, we mainly only added a few useful options commonly found in other custom ROMs, made some cosmetic changes, modified a few default settings to prevent data leaks to Google servers.
    2. To ease a quick adoption of this ROM by new users. We especially target users that are concerned by the protection of their privacy, but are not reluctant to still use inquisitive apps like Google ones. We thus included MicroG as well as a coherent set of default apps (all open source, with one exception), and simplified the initial setup of the system. Particularly, an initialization of MicroG has been made with GCM notifications allowed by default, a privacy-friendly network location provider (DéjàVu) pre-selected, as well as Nominatim Geocoder.
    3. To provide a new and powerful way of blocking ads, malwares, data leaks of all kinds to many intrusive servers. We are developing an analyzer, tightly integrated into the system, that captures all DNS requests and network traffic, as well as a user interface (the iodé app). Compared to some other well-known adblockers, this has the advantages of:
      • Avoiding to lock the VPN for that use. You can even use another adblocker that uses VPN technology alongside our blocker.
      • Being independent of the kind of DNS server used by the system or set by an independent app: classical DNS on UDP port 53 or any other one, DNS over TLS (DoT), DNS over HTTPS (DoH), ..., as we capture the DNS requests before they are transmitted to the system function that emits the DNS request. What we do not support, is DoH when it is natively built into applications, i.e. when an app communicates directly with a DoH server, without asking name resolution to the system. It would require to decrypt HTTPS packets between such an app and the DoH server, which may create a big security hole.
      • Precisely mapping DNS requests and network packets to the Android apps that emitted (or received) them.
      • Deciding which apps have a filtered network usage (by default, all apps), and which ones can communicate with blacklisted servers.
      Since its first versions, we added many features to the iodé blocker: several levels of protection, fine-grained control over the hosts that should be blocked or authorized, displaying statistics on a map to see the quantity of data exchanged to which countries, clearing statistics... We are actively developing the blocker, and new functionalities will be regularly added.

    Features

    Changes in LineageOS to prevent data leaks:

    • Default DNS server: Google's DNS replaced by Quad9's 'unblocked' servers in all parts of the system.
    • A-GPS: patches to avoid leaking personnal information like IMSI to supl server.
    • Captive portal login: connectivitycheck.gstatic.com replaced by captiveportal.kuketz.de for connectivity check.
    • Dialer: Google default option replaced by OpenStreetMap for phone number lookup.

    Pre-installed apps:

    We included many useful default apps, but our choice cannot suit everyone; so we added the possibility to remove them. It can be done at the end of the phone setup, or at any time by going to Parameters -> Apps & Notifications -> Preinstalled apps.

    • MicroG core apps: GmsCore, GsfProxy, FakeStore.
    • NLP backends for MicroG : DejaVuNLPBackend (default), MozillaNLPBackend, AppleNLPBackend, RadioCellsNLPBackend, Nominatim Geocoder.
    • App stores : FDroid (with F-Droid Privileged Extension) and Aurora Store.
    • Browser: our own fork of Firefox (with Qwant as default search engine, many other ones added, telemetry disabled, parts of telemetry code removed) instead of Lineage’s default browser Jelly.
    • SMS: QKSMS instead of Lineage's default SMS app.
    • Email: p≡p (Pretty Easy Privacy).
    • Camera: our own fork of Open Camera, with a few tweaks.
    • Maps/navigation: Magic Earth GPS & Navigation (the only one free but not open source).
    • Keyboard: OpenBoard instead of AOSP keyboard.
    • PDF: Pdf Viewer Plus.
    • Personnal notes: Carnet.
    • {Ad/Malware/Data leak}-blocker: iodé.
    • News: to keep users informed about our developments, as well as a FAQ.
    • Meteo: Geometric Weather.

    Pre-included FDroid repository:

    The apps that we tweak or develop (microG services, the browser based on Firefox, the News app, Open Camera ...) are available through a repository that we included in FDroid (check the "Apps for iodéOS" category). For this purpose and to avoid name conflicts of some apps, we also had to make a few changes in FDroid.

    Useful options from other custom ROMs:
    • Smart charging (disables charging when a given level is reached, to protect battery health).
    • Fingerprint vibration toggle.
    • Swipe down to clear all in recent apps (Android 10 only).

    Installation Instructions

    To download and flash our latest build, see https://gitlab.com/iode/ota.
    You can also find here direct links to the latest builds.

    Supported devices

    Sources

    Bug Reporting

    You can post a message in this thread or (preferred) open an issue here.

    Credits

    LineageOS is a free, community built, aftermarket firmware distribution of android, which is designed to increase performance and reliability over stock android for your device.
    All the source code for LineageOS is available in the LineageOS Github repo. If you would like to contribute to LineageOS, please visit their Wiki for more details.
    This ROM would be nothing without the tremendous work made on MicroG, and all the other open source apps that we included. We are very grateful to their authors.


    Contributors

    Direct contributors:
    @iodeOS, @vince31fr
    Indirect contributors (too numerous to list): All the people that contributed to the device tree, to LineageOS, and to the included open source apps.

    Sponsoring

    You can help in the development of this ROM by paying us a coffee here: https://paypal.me/iodeOS.

    Screenshots

    iode_home1.png
    iode_home2.png
    iode_drawer.png
    iode_preinstalled.png
    blocker_home.png
    blocker_report.png
    blocker_stream.png
    blocker_map.png
    blocker_lists.png
    blocker_blocked.png
    blocker_block_host.png
    blocker_details_host.png

    Screenshot_20220207-033253_Aurora_Store.png


    Very nice MOD, it is stable and fast... it has high compatibility with Open Camera and the store inside IodeOS I liked it a lot.
    1
    Hi @vince31fr and thank you for this good news.

    I just install your Os, what is the difference between your privacy tool and a trackerControl or Netguard app ?
    Is there a way to block all by default on your privacy tool and allow one by one ? (i used to do that with tracker Control on /e/ os).

    Thanks.
    One of the main difference is that the VPN connection is not used by the iodé blocker, so you can use any external VPN provider you want. We also provide the wireguard kernel module.
    Another difference is that it is integrated into the system, so there's no need to root the phone for that purpose.
    By default, all blacklisted hosts are blocked. You can then have a fine-grained control over the hosts you want to block/unblock.