Development [ROM][lemonadep][A13] iodéOS = LineageOS 20 + MicroG + adblocker [07/02/2023]

Search This thread
By:
Advanced…
vince31fr

vince31fr

Senior Member
Dec 18, 2016
1,100
1,162
Toulouse
iode_logo.png


Introduction

iodéOS is a privacy-focused operating system powered by LineageOS and based on the Android mobile platform. iodéOS aims at protecting the user's privacy with a built-in adblocker and by freeing the smartphone from snitches.

The objectives in the conception of this ROM are threefold:

  1. To keep the stability and security level of LineageOS, by minimizing the modifications made to the system. Apart the system modifications required by the adblocker, we mainly only added a few useful options commonly found in other custom ROMs, made some cosmetic changes, modified a few default settings to prevent data leaks to Google servers.
  2. To ease a quick adoption of this ROM by new users. We especially target users that are concerned by the protection of their privacy, but are not reluctant to still use inquisitive apps like Google ones. We thus included MicroG as well as a coherent set of default apps (all open source, with one exception), and simplified the initial setup of the system. Particularly, an initialization of MicroG has been made with GCM notifications allowed by default, a privacy-friendly network location provider (DéjàVu) pre-selected, as well as Nominatim Geocoder.
  3. To provide a new and powerful way of blocking ads, malwares, data leaks of all kinds to many intrusive servers. We are developing an analyzer, tightly integrated into the system, that captures all DNS requests and network traffic, as well as a user interface (the iodé app). Compared to some other well-known adblockers, this has the advantages of:
    • Avoiding to lock the VPN for that use. You can even use another adblocker that uses VPN technology alongside our blocker.
    • Being independent of the kind of DNS server used by the system or set by an independent app: classical DNS on UDP port 53 or any other one, DNS over TLS (DoT), DNS over HTTPS (DoH), ..., as we capture the DNS requests before they are transmitted to the system function that emits the DNS request. What we do not support, is DoH when it is natively built into applications, i.e. when an app communicates directly with a DoH server, without asking name resolution to the system. It would require to decrypt HTTPS packets between such an app and the DoH server, which may create a big security hole.
    • Precisely mapping DNS requests and network packets to the Android apps that emitted (or received) them.
    • Deciding which apps have a filtered network usage (by default, all apps), and which ones can communicate with blacklisted servers.
    Since its first versions, we added many features to the iodé blocker: several levels of protection, fine-grained control over the hosts that should be blocked or authorized, displaying statistics on a map to see the quantity of data exchanged to which countries, clearing statistics... We are actively developing the blocker, and new functionalities will be regularly added.

Features

Changes in LineageOS to prevent data leaks:
  • Default DNS server: Google's DNS replaced by Quad9's 'unblocked' servers in all parts of the system.
  • A-GPS: patches to avoid leaking personnal information like IMSI to supl server.
  • Captive portal login: connectivitycheck.gstatic.com replaced by captiveportal.kuketz.de for connectivity check.
  • Dialer: Google default option replaced by OpenStreetMap for phone number lookup.

Pre-installed apps:

We included many useful default apps, but our choice cannot suit everyone; so we added the possibility to remove them. It can be done at the end of the phone setup, or at any time by going to Parameters -> Apps & Notifications -> Preinstalled apps.

  • MicroG core apps: GmsCore, GsfProxy, FakeStore.
  • NLP backends for MicroG : DejaVuNLPBackend (default), MozillaNLPBackend, AppleNLPBackend, RadioCellsNLPBackend, Nominatim Geocoder.
  • App stores : FDroid (with F-Droid Privileged Extension) and Aurora Store.
  • Browser: our own fork of Firefox (with Qwant as default search engine, many other ones added, telemetry disabled, parts of telemetry code removed) instead of Lineage’s default browser Jelly.
  • SMS: QKSMS instead of Lineage's default SMS app.
  • Email: p≡p (Pretty Easy Privacy).
  • Camera: our own fork of Open Camera, with a few tweaks.
  • Maps/navigation: Magic Earth GPS & Navigation (the only one free but not open source).
  • Keyboard: OpenBoard instead of AOSP keyboard.
  • PDF: Pdf Viewer Plus.
  • Personnal notes: Carnet.
  • {Ad/Malware/Data leak}-blocker: iodé.
  • News: to keep users informed about our developments, as well as a FAQ.
  • Meteo: Geometric Weather.

Pre-included FDroid repository:

The apps that we tweak or develop (microG services, the browser based on Firefox, the News app, Open Camera ...) are available through a repository that we included in FDroid (check the "Apps for iodéOS" category). For this purpose and to avoid name conflicts of some apps, we also had to make a few changes in FDroid.

Useful options from other custom ROMs:
  • Smart charging (disables charging when a given level is reached, to protect battery health).
  • Fingerprint vibration toggle.

Installation Instructions

To download and flash our latest build, see https://gitlab.com/iode/ota.
You can also find here direct links to the latest builds.

Supported devices

Sources

Bug Reporting

You can post a message in this thread or (preferred) open an issue here.

Credits

LineageOS is a free, community built, aftermarket firmware distribution of android, which is designed to increase performance and reliability over stock android for your device.
All the source code for LineageOS is available in the LineageOS Github repo. If you would like to contribute to LineageOS, please visit their Wiki for more details.
This ROM would be nothing without the tremendous work made on MicroG, and all the other open source apps that we included. We are very grateful to their authors.


Contributors

Direct contributors: @iodeOS, @vince31fr
Indirect contributors (too numerous to list): All the people that contributed to the device tree, to LineageOS, and to the included open source apps.

Sponsoring

You can help in the development of this ROM by paying us a coffee here: https://paypal.me/iodeOS.

Screenshots

iode_home1.png
iode_home2.png
iode_drawer.png
iode_preinstalled.png
blocker_home.png
blocker_report.png
blocker_stream.png
blocker_map.png
blocker_lists.png
blocker_blocked.png
blocker_block_host.png
blocker_details_host.png
 
Last edited:
  • Like
Reactions: damru, golfgtiedition30, Psk.It and 7 others
vince31fr

vince31fr

Senior Member
Dec 18, 2016
1,100
1,162
Toulouse
Downloads :

iodéOS

  • 07/02/2023 (build 20230131):
    • Upgrade to iodéOS 4.0 based on Android 13 / LineageOS 20
    • Blocker:
      • Improved blocking settings. You can now choose 'Standard' blocking (ads, trackers, malwares, etc) or 'Reinforced' blocking (same objective but more extensive), and then select additional categories.
      • The 'Porn' category has been extended to a wider 'Sensitive content' one, that also includes fake news, gambling, drugs, piracy, torrent..., with mainly child protection in mind.
      • The 'Extreme' category has been removed, as it is now part of the reinforced blocking.
      • Improved blocking lists. We merge several acknowledged and up-to-date sources, and have diversified our sources to produce more complete lists. The standard list has however been reduced a bit, to avoid as much as possible interference with apps expected behavior.
    • Added a new network location provider: Local NLP Backend. It is an improved version of the DéjàVu NLP backend which was already available in iodéOS. Like DéjàVu, it builds a local database connecting localizations learned from other NLP backends and apps using GPS, and mobile antennas/Wifi; but also has an active mode (not preselected) that can trigger GPS requests. To configure it: Settings -> System -> microG -> Location modules
    • LineageOS synchronized with January security patch included
    • All apps updated
    • New devices support: Pixel 3, 6, 6a
  • 16/12/2022 (build 20221215): initial publicly available build of iodéOS for OnePlus 9 Pro.
 
Last edited:
  • Like
Reactions: damru, Mar-cel, gsser and 1 other person
1thomas

1thomas

Member
Dec 28, 2017
39
25
OnePlus 9 Pro
the concept of the rom is amazing, for me who am a fan and study cybersecurity I like it a lot, thanks for that, I had already tried the 'lineage for microg', and I will definitely try this rom, the dns analysis seems to me a great idea, so I can use protonvpn without ads or trackers without complications! thank you for that!
 
  • Like
Reactions: gsser
1thomas

1thomas

Member
Dec 28, 2017
39
25
OnePlus 9 Pro
vince31fr said:
Downloads :

iodéOS

Click to expand...
Click to collapse
In gitlab there are no specific instructions for the Oneplus 9 Pro, only for the Oneplus 9, and using the lemonadep files with the Oneplus 9 instructions the cell phone cannot start in recovery, it always goes back to the bootloader. I tried flashing the recovery image on the boot partition as well and it didn't work. This using firmware c.63, was on CrDroid earlier.
I flashed the 'dtbo', 'vendor_boot' and 'boot' files from the official lineage build '20221213' files, and reflashed the IODE rom images, but to no avail again.

EDIT:
I was able to install by flashing the rom using the lineage recovery 20221206, the recovery remained the lineage one after the flash.
 
Last edited:
E

essojay

Senior Member
Jan 22, 2004
191
16
Super grateful for your work so far..

Please can you add Oneplus 8 / 8 pro rom variants

Thank you!
 
Psk.It

Psk.It

Senior Member
Mar 6, 2016
344
85
Xiaomi Redmi Note 5 Pro
pro: it's lineage 19.1, simple, clean, AOSP based rom with embedded microG (also push notifications working)
# appreciate the "preinstalled app" you can skip installing dialer, browser etc (if you have a favourite alternative not listed)
# iodé adblock allows applications and/or domain filter
# it's also compatible with custom kernel

cons: it's still A12L, very basic interface

for those users caring about privacy

@vince31fr : good job, thank you
 
  • Like
Reactions: NameIsOptional
S

SomeDooD123

Senior Member
Sep 13, 2010
92
15
Have you or anyone else checked if Android Auto works on this ROM? I'm on crDroid but cant get AA to work on it while running microG, seems it might not be doable on A13 with microG at the moment.
 
Psk.It

Psk.It

Senior Member
Mar 6, 2016
344
85
Xiaomi Redmi Note 5 Pro
SomeDooD123 said:
Have you or anyone else checked if Android Auto works on this ROM? I'm on crDroid but cant get AA to work on it while running microG, seems it might not be doable on A13 with microG at the moment.
Click to expand...
Click to collapse
Not all Google apps are supposed to work without real google service, microG just implements minimal interfaces to be able to assert you ha google services installed even if not
 
S

SomeDooD123

Senior Member
Sep 13, 2010
92
15
Psk.It said:
Not all Google apps are supposed to work without real google service, microG just implements minimal interfaces to be able to assert you ha google services installed even if not
Click to expand...
Click to collapse

I understand, but it seems like it is possible. Seen some instruction that required a bit more manual work, and zip. Might give this magisk zip a shot if install this ROM this weekend. Will report back if I do in case someone else wants to know.
 
R

Ravel7774

Senior Member
Nov 3, 2018
94
41
While I really enjoyed using pixel extended ROM, I had to remind myself why I bought this phone. To de-google. Took the plunge, installed this ROM and couldn't be happier with the results.
 
  • Like
Reactions: Thermionics300b
T

Thermionics300b

New member
Nov 6, 2022
2
0
Samsung Galaxy Note 20 Ultra
This ROM is exactly what I am looking for. I love my OnePlus 9 Pro hardware but want to move from OOS A11 and to a more secure ROM. I have traditionally run privacy oriented ROMs like Calyx and GrapheneOS on Pixels, but am much more pleased with the OnePlus 9 Pro hardware.

I see that you are currently using an A12 base. Will an OTA to an A13 base be available at some point?

Is Warp Charging working?

Also, I tried ProtonOS and had no Verizon 5G, which I rely upon in the USA. Has anyone had success with Verizon 5G?

Lastly, I am willing to pay a dev to remote into my system using TeamViewer for the first installation. If that's workable, I'll PayPal or Zelle you for your time.

Thank you for the great work!
 
Psk.It

Psk.It

Senior Member
Mar 6, 2016
344
85
Xiaomi Redmi Note 5 Pro
Thermionics300b said:
Lastly, I am willing to pay a dev to remote into my system using TeamViewer for the first installation. If that's workable, I'll PayPal or Zelle you for your time.
Click to expand...
Click to collapse
installation is just a sequence.of actions to perform
- unlock bootloader
- udpate firmware
- install the rom (following lineageos instructions)
- in case of exception EDL tool will reset.your phone to stock

in any case, if you are interested in this project, you can also keep contact with their official channel, to be sure the one helping you knows better than me the iverall system.

regards
 
K

Kamigouki

Member
Dec 3, 2012
37
5
it looks like the dtbo, vendor_boot, and boot files aren't named correctly. there is no file named "vendor_boot".

also, what firmware do we need to be on to flash this successfully? I tried using C.63 and F.18, and both failed.
 
Last edited:
Psk.It

Psk.It

Senior Member
Mar 6, 2016
344
85
Xiaomi Redmi Note 5 Pro
Kamigouki said:
it looks like the dtbo, vendor_boot, and boot files aren't named correctly. there is no file named "vendor_boot".

also, what firmware do we need to be on to flash this successfully? I tried using C.63 and F.18, and both failed.
Click to expand...
Click to collapse
I am on 63 and it works
you can get the initial partition by your-self using payload-dumper tool
or use older ones already available online
(dtbo, verdor_boot, boot needs to be older than the rom, otherwise sideload process fails with downgrade error, don't worry if that file are 1 or 2 months older, all partitions are updated during rom flashing process)
 
You must log in or register to reply here.

Similar threads

chandu dyavanapelli
Development [ROM][OOS CAM][OFFICIAL][OnePlus 9 Pro][13.0.0_r30]Nameless AOSP[2023/03/20]
Replies
2K
Views
195K
bbortel93
bbortel93
LuK1337
Development [ROM][OFFICIAL][lemonadep][11] LineageOS 18.1
Replies
447
Views
81K
V
VelosterM14
LuK1337
Development [ROM][OFFICIAL][lemonadep][12] LineageOS 19
Replies
643
Views
61K
EugenStanis
EugenStanis
mukesh22584
Development [ROM][A13][OP9Pro][r30][OOS-CAM] XTENDED XT-v5.0 [GAPPS][19-02-2023]
Replies
348
Views
50K
mettis88@gmail.com
[email protected]
L
Development [ROM][12L][16 Apr][Stable] DerpFest for OnePlus 9/Pro [OFFICIAL][Lemonade/Lemonadep]
Replies
826
Views
102K
A
avid_droid

Top Liked Posts

24 Hours 30 Days All time
  • There are no posts matching your filters.
  • 1
    spamerobaldomero
    spamerobaldomero
    Wow, nice job mate, my only question/request would be to include the oos camera please!!

    Also as I'm a privacy guy, would be interesting to use another fork of mozilla called iceraven and some apps like: warden, adaway, afwall+

    Thanks
    View
  • 10
    vince31fr
    vince31fr
    iode_logo.png


    Introduction

    iodéOS is a privacy-focused operating system powered by LineageOS and based on the Android mobile platform. iodéOS aims at protecting the user's privacy with a built-in adblocker and by freeing the smartphone from snitches.

    The objectives in the conception of this ROM are threefold:

    1. To keep the stability and security level of LineageOS, by minimizing the modifications made to the system. Apart the system modifications required by the adblocker, we mainly only added a few useful options commonly found in other custom ROMs, made some cosmetic changes, modified a few default settings to prevent data leaks to Google servers.
    2. To ease a quick adoption of this ROM by new users. We especially target users that are concerned by the protection of their privacy, but are not reluctant to still use inquisitive apps like Google ones. We thus included MicroG as well as a coherent set of default apps (all open source, with one exception), and simplified the initial setup of the system. Particularly, an initialization of MicroG has been made with GCM notifications allowed by default, a privacy-friendly network location provider (DéjàVu) pre-selected, as well as Nominatim Geocoder.
    3. To provide a new and powerful way of blocking ads, malwares, data leaks of all kinds to many intrusive servers. We are developing an analyzer, tightly integrated into the system, that captures all DNS requests and network traffic, as well as a user interface (the iodé app). Compared to some other well-known adblockers, this has the advantages of:
      • Avoiding to lock the VPN for that use. You can even use another adblocker that uses VPN technology alongside our blocker.
      • Being independent of the kind of DNS server used by the system or set by an independent app: classical DNS on UDP port 53 or any other one, DNS over TLS (DoT), DNS over HTTPS (DoH), ..., as we capture the DNS requests before they are transmitted to the system function that emits the DNS request. What we do not support, is DoH when it is natively built into applications, i.e. when an app communicates directly with a DoH server, without asking name resolution to the system. It would require to decrypt HTTPS packets between such an app and the DoH server, which may create a big security hole.
      • Precisely mapping DNS requests and network packets to the Android apps that emitted (or received) them.
      • Deciding which apps have a filtered network usage (by default, all apps), and which ones can communicate with blacklisted servers.
      Since its first versions, we added many features to the iodé blocker: several levels of protection, fine-grained control over the hosts that should be blocked or authorized, displaying statistics on a map to see the quantity of data exchanged to which countries, clearing statistics... We are actively developing the blocker, and new functionalities will be regularly added.

    Features

    Changes in LineageOS to prevent data leaks:
    • Default DNS server: Google's DNS replaced by Quad9's 'unblocked' servers in all parts of the system.
    • A-GPS: patches to avoid leaking personnal information like IMSI to supl server.
    • Captive portal login: connectivitycheck.gstatic.com replaced by captiveportal.kuketz.de for connectivity check.
    • Dialer: Google default option replaced by OpenStreetMap for phone number lookup.

    Pre-installed apps:

    We included many useful default apps, but our choice cannot suit everyone; so we added the possibility to remove them. It can be done at the end of the phone setup, or at any time by going to Parameters -> Apps & Notifications -> Preinstalled apps.

    • MicroG core apps: GmsCore, GsfProxy, FakeStore.
    • NLP backends for MicroG : DejaVuNLPBackend (default), MozillaNLPBackend, AppleNLPBackend, RadioCellsNLPBackend, Nominatim Geocoder.
    • App stores : FDroid (with F-Droid Privileged Extension) and Aurora Store.
    • Browser: our own fork of Firefox (with Qwant as default search engine, many other ones added, telemetry disabled, parts of telemetry code removed) instead of Lineage’s default browser Jelly.
    • SMS: QKSMS instead of Lineage's default SMS app.
    • Email: p≡p (Pretty Easy Privacy).
    • Camera: our own fork of Open Camera, with a few tweaks.
    • Maps/navigation: Magic Earth GPS & Navigation (the only one free but not open source).
    • Keyboard: OpenBoard instead of AOSP keyboard.
    • PDF: Pdf Viewer Plus.
    • Personnal notes: Carnet.
    • {Ad/Malware/Data leak}-blocker: iodé.
    • News: to keep users informed about our developments, as well as a FAQ.
    • Meteo: Geometric Weather.

    Pre-included FDroid repository:

    The apps that we tweak or develop (microG services, the browser based on Firefox, the News app, Open Camera ...) are available through a repository that we included in FDroid (check the "Apps for iodéOS" category). For this purpose and to avoid name conflicts of some apps, we also had to make a few changes in FDroid.

    Useful options from other custom ROMs:
    • Smart charging (disables charging when a given level is reached, to protect battery health).
    • Fingerprint vibration toggle.

    Installation Instructions

    To download and flash our latest build, see https://gitlab.com/iode/ota.
    You can also find here direct links to the latest builds.

    Supported devices

    Sources

    Bug Reporting

    You can post a message in this thread or (preferred) open an issue here.

    Credits

    LineageOS is a free, community built, aftermarket firmware distribution of android, which is designed to increase performance and reliability over stock android for your device.
    All the source code for LineageOS is available in the LineageOS Github repo. If you would like to contribute to LineageOS, please visit their Wiki for more details.
    This ROM would be nothing without the tremendous work made on MicroG, and all the other open source apps that we included. We are very grateful to their authors.


    Contributors

    Direct contributors:     @iodeOS, @vince31fr
    Indirect contributors (too numerous to list): All the people that contributed to the device tree, to LineageOS, and to the included open source apps.

    Sponsoring

    You can help in the development of this ROM by paying us a coffee here: https://paypal.me/iodeOS.

    Screenshots

    iode_home1.png
    iode_home2.png
    iode_drawer.png
    iode_preinstalled.png
    blocker_home.png
    blocker_report.png
    blocker_stream.png
    blocker_map.png
    blocker_lists.png
    blocker_blocked.png
    blocker_block_host.png
    blocker_details_host.png
    View
    4
    vince31fr
    vince31fr
    Downloads :

    iodéOS

    • 07/02/2023 (build 20230131):
      • Upgrade to iodéOS 4.0 based on Android 13 / LineageOS 20
      • Blocker:
        • Improved blocking settings. You can now choose 'Standard' blocking (ads, trackers, malwares, etc) or 'Reinforced' blocking (same objective but more extensive), and then select additional categories.
        • The 'Porn' category has been extended to a wider 'Sensitive content' one, that also includes fake news, gambling, drugs, piracy, torrent..., with mainly child protection in mind.
        • The 'Extreme' category has been removed, as it is now part of the reinforced blocking.
        • Improved blocking lists. We merge several acknowledged and up-to-date sources, and have diversified our sources to produce more complete lists. The standard list has however been reduced a bit, to avoid as much as possible interference with apps expected behavior.
      • Added a new network location provider: Local NLP Backend. It is an improved version of the DéjàVu NLP backend which was already available in iodéOS. Like DéjàVu, it builds a local database connecting localizations learned from other NLP backends and apps using GPS, and mobile antennas/Wifi; but also has an active mode (not preselected) that can trigger GPS requests. To configure it: Settings -> System -> microG -> Location modules
      • LineageOS synchronized with January security patch included
      • All apps updated
      • New devices support: Pixel 3, 6, 6a
    • 16/12/2022 (build 20221215): initial publicly available build of iodéOS for OnePlus 9 Pro.
    View
    2
    vince31fr
    vince31fr
    All required files are here : https://github.com/iodeOS/ota/releases/tag/v3-lemonadep

    We'll add instructions for op9 pro asap.
    View
    1
    1thomas
    1thomas
    the concept of the rom is amazing, for me who am a fan and study cybersecurity I like it a lot, thanks for that, I had already tried the 'lineage for microg', and I will definitely try this rom, the dns analysis seems to me a great idea, so I can use protonvpn without ads or trackers without complications! thank you for that!
    View
    1
    TheGhost1951
    TheGhost1951
    NameIsOptional said:
    What are the flash instructions?
    Click to expand...
    Click to collapse
    They are in post #1 of this thread.
    View

New posts