[ROM][Note9][A12] iodéOS = LineageOS 19.1 + MicroG + adblocker [07/02/2023]

Search This thread
By:
Advanced…
vince31fr

vince31fr

Senior Member
Dec 18, 2016
1,097
1,160
Toulouse
iode_logo.png


Introduction

iodéOS is a privacy-focused operating system powered by LineageOS and based on the Android mobile platform. iodéOS aims at protecting the user's privacy with a built-in adblocker and by freeing the smartphone from snitches.

The objectives in the conception of this ROM are threefold:

  1. To keep the stability and security level of LineageOS, by minimizing the modifications made to the system. Apart the system modifications required by the adblocker, we mainly only added a few useful options commonly found in other custom ROMs, made some cosmetic changes, modified a few default settings to prevent data leaks to Google servers.
  2. To ease a quick adoption of this ROM by new users. We especially target users that are concerned by the protection of their privacy, but are not reluctant to still use inquisitive apps like Google ones. We thus included MicroG as well as a coherent set of default apps, and simplified the initial setup of the system. Particularly, an initialization of MicroG has been made with GCM notifications allowed by default, a privacy-friendly network location provider (DéjàVu) pre-selected, as well as Nominatim Geocoder.
  3. To provide a new and powerful way of blocking ads, malwares, data leaks of all kinds to many intrusive servers. We are developing an analyzer, tightly integrated into the system, that captures all DNS requests and network traffic, as well as a user interface (the iodé app). Compared to some other well-known adblockers, this has the advantages of:
    • Avoiding to lock the VPN for that use. You can even use another adblocker that uses VPN technology alongside our blocker.
    • Being independent of the kind of DNS server used by the system or set by an independent app: classical DNS on UDP port 53 or any other one, DNS over TLS (DoT), DNS over HTTPS (DoH), ..., as we capture the DNS requests before they are transmitted to the system function that emits the DNS request. What we do not support, is DoH when it is natively built into applications, i.e. when an app communicates directly with a DoH server, without asking name resolution to the system. It would require to decrypt HTTPS packets between such an app and the DoH server, which may create a big security hole.
    • Precisely mapping DNS requests and network packets to the Android apps that emitted (or received) them.
    • Deciding which apps have a filtered network usage (by default, all apps), and which ones can communicate with blacklisted servers.
    Since its first versions, we added many features to the iodé blocker: several levels of protection, fine-grained control over the hosts that should be blocked or authorized, displaying statistics on a map to see the quantity of data exchanged to which countries, clearing statistics... We are actively developing the blocker, and new functionalities will be regularly added.

Features

Changes in LineageOS to prevent data leaks:
  • Default DNS server: Google's DNS replaced by Quad9's 'unblocked' servers in all parts of the system.
  • A-GPS: patches to avoid leaking personnal information like IMSI to supl server.
  • Captive portal login: connectivitycheck.gstatic.com replaced by captiveportal.kuketz.de for connectivity check.
  • Dialer: Google default option replaced by OpenStreetMap for phone number lookup.

Pre-installed apps:

We included many useful default apps, but our choice cannot suit everyone; so we added the possibility to remove them. It can be done at the end of the phone setup, or at any time by going to Parameters -> Apps & Notifications -> Preinstalled apps.

  • MicroG core apps: GmsCore, GsfProxy, FakeStore.
  • NLP backends for MicroG : DejaVuNLPBackend (default), MozillaNLPBackend, AppleNLPBackend, RadioCellsNLPBackend, Nominatim Geocoder.
  • App stores : FDroid (with F-Droid Privileged Extension) and Aurora Store.
  • Browser: our own fork of Firefox (with Qwant as default search engine, many other ones added, telemetry disabled, parts of telemetry code removed) instead of Lineage’s default browser Jelly.
  • SMS: QKSMS instead of Lineage's default SMS app.
  • Email: p≡p (Pretty Easy Privacy).
  • Camera: our own fork of Open Camera, with a few tweaks.
  • Maps/navigation: Magic Earth GPS & Navigation (the only one free but not open source).
  • Keyboard: OpenBoard instead of AOSP keyboard.
  • PDF: Pdf Viewer Plus.
  • Personnal notes: Carnet.
  • {Ad/Malware/Data leak}-blocker: iodé.
  • News: to keep users informed about our developments, as well as a FAQ.
  • Meteo: Geometric Weather.

Pre-included FDroid repository:

The apps that we tweak or develop (microG services, the browser based on Firefox, the News app, Open Camera ...) are available through a repository that we included in FDroid (check the "Apps for iodéOS" category). For this purpose and to avoid name conflicts of some apps, we also had to make a few changes in FDroid.

Useful options from other custom ROMs:
  • Smart charging (disables charging when a given level is reached, to protect battery health).
  • Fingerprint vibration toggle.
  • Swipe down to clear all in recent apps (Android 10 only).

Installation Instructions

To download and flash our latest build, see https://gitlab.com/iode/ota.
You can also find here direct links to the latest builds.

Supported devices

Sources

Bug Reporting

You can post a message in this thread or (preferred) open an issue here.

Credits

LineageOS is a free, community built, aftermarket firmware distribution of android, which is designed to increase performance and reliability over stock android for your device.
All the source code for LineageOS is available in the LineageOS Github repo. If you would like to contribute to LineageOS, please visit their Wiki for more details.
This ROM would be nothing without the tremendous work made on MicroG, and all the other open source apps that we included. We are very grateful to their authors.

Contributors

Direct contributors: @iodeOS, @vince31fr
Indirect contributors (too numerous to list): All the people that contributed to the device tree, to LineageOS, and to the included open source apps.

Sponsoring

You can help in the development of this ROM by paying us a coffee here: https://paypal.me/iodeOS.

Screenshots

iode_home1.png
iode_home2.png
iode_drawer.png
iode_preinstalled.png
blocker_home.png
blocker_report.png
blocker_stream.png
blocker_map.png
blocker_lists.png
blocker_blocked.png
blocker_block_host.png
blocker_details_host.png
 
Last edited:
  • Like
  • Love
Reactions: braveheartleo, dloma, BinukaSL and 4 others
vince31fr

vince31fr

Senior Member
Dec 18, 2016
1,097
1,160
Toulouse
Downloads : iodéOS 3.x

Due to an incompatibility in the data encryption method, a factory reset is required to migrate to iodé 3 based on Android 12 / LineageOS 19.1. It can be installed as OTA by using this updater. Backup your data before proceeding.
The data format must be performed with iodé's recovery, not TWRP, which can be found here.

  • 07/02/2023 (build 20230131):
    • Blocker:
      • Improved blocking settings. You can now choose 'Standard' blocking (ads, trackers, malwares, etc) or 'Reinforced' blocking (same objective but more extensive), and then select additional categories.
      • The 'Porn' category has been extended to a wider 'Sensitive content' one, that also includes fake news, gambling, drugs, piracy, torrent..., with mainly child protection in mind.
      • The 'Extreme' category has been removed, as it is now part of the reinforced blocking.
      • Improved blocking lists. We merge several acknowledged and up-to-date sources, and have diversified our sources to produce more complete lists. The standard list has however been reduced a bit, to avoid as much as possible interference with apps expected behavior.
    • Added a new network location provider: Local NLP Backend. It is an improved version of the DéjàVu NLP backend which was already available in iodéOS. Like DéjàVu, it builds a local database connecting localizations learned from other NLP backends and apps using GPS, and mobile antennas/Wifi; but also has an active mode (not preselected) that can trigger GPS requests. To configure it: Settings -> System -> microG -> Location modules
    • LineageOS synchronized with January security patch included
    • All apps updated
    • New devices support: Pixel 3, 6, 6a
  • 16/12/2022 (build 20221512):
    • Blocker: added multiple selection in settings / domain customization. Long-press on a domain, select several domains or all, apply actions (block all, authorize all...)
    • PdfViewerPlus: improved security by updating core libraries
    • Network settings: added a switch to disable connectivity check (and thus captive portal detection)
    • LineageOS synchronized with December security patch included
    • All apps updated
    • New devices support: Pixel 4 & 5, OnePlus 9 & 9 Pro
  • 24/11/2022 (build 20221121):
    • Improvements in the blocker user interface (iodé app)
    • LineageOS synced with September security patch included
    • All apps updated
  • 17/10/2022 (build 20221014):
    • Blocker:
      • Network blockings following their type (Wifi, mobile data, VPN) added
      • Default blockings definition for new apps
      • Personnalized recipients management improved
      • iodé's app access restrictions by password added
      • Search filters added in report and map
      • Display theme selection
      • Automatic and 'real-time' refresh of the whole app
      • Performance and fluidity improvements of the app
    • LineageOS synced with September security patch included
    • All apps updated
  • 27/07/2022 (build 20220726):
    • Upgrade to iodéOS 3.1 based on Android 12 / LineageOS 19.1
    • SafetyNet certification activated: allows many apps, notably banking ones, to fully work
    • Setup wizard: the push notifications configuration page now also activates SafetyNet (fine-grained control in Settings->System->microG)
    • OpenCamera: the 'Use alternative flash method' in photo settings is no more necessary and can be disabled, allowing flash optimization
    • News app: German translations
    • LineageOS synced with July security patch included
    • All apps updated

Downloads : iodéOS 2.x

  • 24/10/2022 (build 20221024):
    • Hotfix build for keyboard not showing in decryption page.
  • 17/10/2022 (build 20221014):
    • Blocker:
      • Network blockings following their type (Wifi, mobile data, VPN) added
      • Default blockings definition for new apps
      • Personnalized recipients management improved
      • iodé's app access restrictions by password added
      • Search filters added in report and map
      • Display theme selection
      • Automatic and 'real-time' refresh of the whole app
      • Performance and fluidity improvements of the app
    • LineageOS synced with September security patch included
    • All apps updated
  • 27/07/2022 (build 20220726):
    • SafetyNet certification activated: allows many apps, notably banking ones, to fully work
    • Setup wizard: the push notifications configuration page now also activates SafetyNet (fine-grained control in Settings->System->microG)
    • OpenCamera: the 'Use alternative flash method' in photo settings is no more necessary and can be disabled, allowing flash optimization
    • News app: German translations
    • LineageOS synced with July security patch included
    • All apps updated
  • 21/07/2022 (build 20220530):
    • Setup Wizard: new page to configure push notifications through microG
    • Lockscreen settings: switch added to disable fingerprint unlock when screen is off
    • Improved German translations
    • Bug fixes and improvements
    • LineageOS synced with May security patch included
    • All apps updated
  • 02/05/2022 (build 20220408):
    • News app reworked
    • Setup Wizard: new iodé introduction
    • iodé blocker: pull to refresh replaced by automatic refresh in report tab
    • Teracube 2e 2022 batch released, video playback in browser and video recording fixed
    • Music app : playlist crash fixed
    • Open Camera : crash when tapping thumbnail of a newly recorded video fixed, photos and videos now editable
    • LineageOS synced with March security patch
    • All apps updated
  • 03/02/2021 (build 20220129):
    • New iodé blocker map feature
    • Build mode changed to 'user' (i.e. release) mode): more apps work out-of-the-box and more secure device, but more restrictive recovery
    • Camera app changed to Open Camera
    • Wireguard kernel module included
    • Dark bootanimation
    • January security patch
    • Preinstalled apps updated
    • Beware: Play store Magisk module broken
  • 03/12/2021 (build 20211129):
    • Fixes DRM (downgraded from L1 to L3)
  • 18/11/2021 (build 20211108):
    • LineageOS updated (November security patch)
    • Preinstalled apps updated
    • Iodé blocker: hosts can now be customized, either globally or by app
    • Data partition encryption is now automatically triggered on non encrypted devices. Backup your data first, some users reported that their data has been wiped. We're very sorry for the inconvenience.
  • 10/09/2021 (build 20210828):
    • LineageOS updated (August security patch)
    • Preinstalled apps updated
    • Backup app included: Seedvault
    • microG now uninstallable: Settings -> Apps & notifications -> Preinstalled apps
    • New default accent color (clear blue from iodé logo)
    • Bixby key now configurable (short press only, Settings -> System -> Buttons)
  • 10/09/2021 (build 20210828):
    • Upgrade to Android 11 / LineageOS 18.1
    • Preinstalled apps UI reworked with the introduction of categories.
    • Dark theme in the iodé blocker UI (next improvement will be hosts customization).
    • p≡p (https://f-droid.org/fr/packages/security.pEp/) is now the defaut email client, and replaces lineageOS client which is no longer maintained.
    • Preinstalled apps updated to their latest version.
    • LineageOS updated (July security patch).
  • 28/05/2021 (build 20210525):
    • Different protection levels in iodé's blocker added: in addition to the default standard blocklist, we added three lists (socials, porn, extreme) that can be activated globally or on a per-app basis (more information in the FAQ).
    • Geometric Weather app added.
    • Preinstalled apps selection at setup wizard added.
    • Preinstalled apps including microG updated to their latest version.
    • LineageOS updated (May security patch).
  • 07/03/2021 (build 20210306):
    • Blocker UI improved: performance at startup, statistics display (with sortable columns), DNS stream
    • Preinstalled apps management (uninstall / reinstall) menu added (Settings -> Apps & Notifications -> Preinstalled apps)
    • Latest lineageOS sources synced
    • Default apps updated
  • 22/01/2021 (build 20210121):
    • LineageOS sources synced (AOD and glove mode now available)
    • Prebuilt apps updated
    • Activated Camera APIv2 in Snap
    • Added AudioFX
    • Added fast charge disabler
    • Disabled broken widevine DRM L1, now fallback to L3
    • Force auto-update of apps in FDroid to keep in sync with iodé apps. It can be disabled.
  • 25/12/2020 (build 20201224): first publicly available build for Samsung Galaxy Note 9.

Downloads : add-ons
  • phonesky-magisk.zip : Magisk module for NanoDroid patched Play Store, for those who really need to get access to their paid apps that don't work with microG. This module can be generally be deactivated when you have installed and ran once the paid apps.
    NB : you may have to wait a couple of hours after activating the module for being able to install paid apps.
  • phonesky-magiskV2.zip : compatibility for the upcoming iodéOS 2.0 based on Android 11. It can ben installed on iodéOS 1.x based on Android 10 too.
    IMPORTANT : install this module or deactivate the previous one before installing iodéOS 2.0, or you'll be caught in a bootloop.
[/LIST]
 

Attachments

  • phonesky-magisk.zip
    18.4 MB · Views: 250
  • phonesky-magiskV2.zip
    18.4 MB · Views: 244
Last edited:
  • Like
Reactions: BinukaSL and ACC18
w41ru5

w41ru5

Senior Member
Jul 17, 2017
726
364
54
CSM Fol said:
I have a question: All AOSP-based Android 10 ROM's are plagued with this issue: There is massive touch delay/sensitivity issues when playing mobile games (Source 1, Source 2).

And because this ROM is based on AOSP, is this bug also present? I don't have time to try out any custom ROM's now, so I kindly ask.
Click to expand...
Click to collapse

Get your Nope4 back :ROFLMAO:
ps: how's life Steve?
 
Synt4x.93

Synt4x.93

Senior Member
Nov 15, 2016
176
520
bobwhite11 said:
how do i decrypt this?
Click to expand...
Click to collapse
To avoid forced encryption on first boot and make it optional to enable from device settings with official lineage or roms based on the official trees like this. You should use vendor_overlay for a modified fstab, or modify your stock vendor fstab.
Something like this synt4x93/android_device_samsung_universal9810-common/commit/67db1379fc6850228310525ffb1f4ec8df95f26e

vince31fr said:
How do you decrypt what ?
Click to expand...
Click to collapse
I assume he is talking about decrypting /data in recovery and is unable to do so because of forced encryption.
 
Last edited:
  • Like
Reactions: bobwhite11
A

azcaban

Member
May 18, 2013
14
0
when i try to start a call, doesnt appera call screen
so i cant stop a call or use speakerphone on samsung Note 9
 
F

FerretallicA

Senior Member
Jul 15, 2005
52
28
So far so good - everything seems very stable and I haven't encountered any annoying bugs after roughly a day of use. Only issues I've had are as follows:

1. Developer mode

It says it has worked after tapping the build number repeatedly but then I don't see any Developer Options available in the settings. Am I missing something?

Scrap that, I finally found it. Under Settings -> System -> Advanced -> Developer options. Looks like the only 'problem' was my unfamiliarity with LineageOS changes to settings menus.

2. Limited USB connectivity

I can't see the phone at all when connected to a PC via USB cable and booted normally. I've gone into Developer Settings and set default USB mode to 'file sharing' but it still doesn't show up and I don't get any option to change the mode as I would normally expect. The device is detected fine in bootloader and recovery modes. I've tried different USB cables and a different laptop to help rule those possibilities out. Has anyone else encountered this problem?

3. Forced encryption

Synt4x.93 said:
If any users want to do this without recompiling, just put the modified fstab from that commit in /system/product/vendor_overlay/29/etc/fstab.samsungexynos9810 and set the usual permissions and format /data again.
Click to expand...
Click to collapse

Direct file link for anyone else with the same need: https://raw.githubusercontent.com/s...8df95f26e/rootdir/etc/fstab.samsungexynos9810

To access /system I assume you need root access. Typically I would do this by flashing Magisk but I can't flash anything from recovery without a full wipe when the data partitions are encrypted. How does one get around this chicken-and-egg problem?

Fixed with a generic script
 
Last edited:
A

andrikv

Member
Nov 23, 2015
6
0
FerretallicA said:
So far so good - everything seems very stable and I haven't encountered any annoying bugs after roughly a day of use. Only issues I've had are as follows:

1. Developer mode

It says it has worked after tapping the build number repeatedly but then I don't see any Developer Options available in the settings. Am I missing something?

Scrap that, I finally found it. Under Settings -> System -> Advanced -> Developer options

2. Limited USB connectivity

I can't see the phone at all when connected to a PC via USB cable and booted normally. I've gone into Developer Settings and set default USB mode to 'file sharing' but it still doesn't show up and I don't get any option to change the mode as I would normally expect. The device is detected fine in bootloader and recovery modes. I've tried different USB cables and a different laptop to help rule those possibilities out. Has anyone else encountered this problem?

3. Forced encryption



Direct file link for anyone else with the same need: https://raw.githubusercontent.com/s...8df95f26e/rootdir/etc/fstab.samsungexynos9810

To access /system I assume you need root access. Typically I would do this by flashing Magisk but I can't flash anything from recovery without a full wipe when the data partitions are encrypted. How does one get around this chicken-and-egg problem?
Click to expand...
Click to collapse


2. Connect Phone to PC then press "Charging this device via USB" from notification the choose file transfer

3. i flash the Disable_Dm-Verity_ForceEncrypt_11.02.2020.zip it disable the forced encryption
 
A

andrikv

Member
Nov 23, 2015
6
0
the only bug i found is from front camera when "selfie mirror" is enabled the camera app will crash after capture
 
F

FerretallicA

Senior Member
Jul 15, 2005
52
28
If anyone else wants to get their Note 9 up and running with this ROM with minimal hunting around, here's what I'd suggest (assuming coming from a stock firmware). You will end up with iode + Magisk + no 'data' encryption (so for example you can still access your Data partition from recovery).

You will need:
and also a PC for running the Odin software.

Summary of install steps
  • Update phone to latest official firmware

  • Restart phone in bootloader mode and flash TWRP with Odin. If you've never done this before there is a decent guide here: https://www.droidthunder.com/install-twrp-recovery-on-samsung

  • Restart phone in Recovery mode (TWRP).

  • Use Wipe -> Format to completely wipe the existing Data partition.

  • Copy the iode, Magisk and 'disable forced encryption' zip files to your phone. Then from TWRP install them in order of iode, Magisk and "Disable DmVerity ForceEncrypt". Do not restart the device in between each step.
 
  • Like
Reactions: imjms737, Software Guru and xfakexbloodx
F

FerretallicA

Senior Member
Jul 15, 2005
52
28
andrikv said:
2. Connect Phone to PC then press "Charging this device via USB" from notification the choose file transfer

3. i flash the Disable_Dm-Verity_ForceEncrypt_11.02.2020.zip it disable the forced encryption
Click to expand...
Click to collapse

2. it doesn't work. There is no such prompt on the phone. It's weird because I can see the phone just file and transfer files in recovery mode, just not when booted into the main OS. It works on pretty much every other Note 9 ROM i've tried for more than 5 minutes.

3. Thanks, I went by that route too in the end.
 
F

FerretallicA

Senior Member
Jul 15, 2005
52
28
Having used this for over a week now, just reporting back that it has been rock solid and I get around 2.5 days of fairly average use between needing to charge.

Regarding the not showing up PC connection issue, it started working when I flashed the no-encrypt patch immediately after flashing the main ROM image. I'm not sure if it is directly related but I'm happy it's working anyway.

This is going to be my daily driver for the foreseeable future. Thanks to both Lineage and iode teams for making it easier than ever to have a stable and functional Android device with as little Google snoopery as possible. Great work!
 
F

FerretallicA

Senior Member
Jul 15, 2005
52
28
Is there any way to add additional rules to the iode blacklist? It's all very well having a built-in firewall of sorts and dashboard showing blocked traffic but it's kind of useless if you can't easily add things to it (e..g Facebook tracking URLs which aren't blocked by iode by default)
 
iodeOS

iodeOS

Member
Jun 17, 2020
42
22
France
www.iode.tech
FerretallicA said:
Is there any way to add additional rules to the iode blacklist? It's all very well having a built-in firewall of sorts and dashboard showing blocked traffic but it's kind of useless if you can't easily add things to it (e..g Facebook tracking URLs which aren't blocked by iode by default)
Click to expand...
Click to collapse
Hi,
not yet possible but we will add blocklists in march, and the possibility to tweak your own hosts in the following months. You can also join our beta tester group if you want to get updates a little sooner than official OTAs
 
  • Like
Reactions: mrspikeuk
You must log in or register to reply here.

Similar threads

dr.ketan
[23.04.22] [OneUI 2.5] N960F_DS_N I Dr.Ketan ROM I SecureFolder I SPay (Gear) I Dex
Replies
10K
Views
790K
B
Blade3347
AlexisXDA
[NOBLE ROM 3.2 PIZZO OneUI 5.1 FULL PORT][03/23 Patches][14/03/2023][SM-N960F/FD/N--SM-G96xF/FD/N]
Replies
5K
Views
731K
amfar
amfar
Dovanchuc7521
[ROM] [10] [RC] [SecureFolder]Galaxy Note9 [N960F/DS/N] SUPERSTABLE ROM UI2.5 V19(17/07/2021)
Replies
874
Views
138K
openspacegameinc
openspacegameinc
AlexisXDA
[Alexis Rom 3.4_FVh1][22/08/2022][08/2022 Patches][N960F/FD OneUI3.0 Apps Ported]
Replies
840
Views
190K
C
ColdFishy
_alexndr
[ROM][N960F/DS/N][ALEXNDR] * SAFWB3 * DevBase v7.4 * DeX, Gear & Encryption support
Replies
2K
Views
292K
A
Arobase404

Top Liked Posts

24 Hours All time
  • There are no posts matching your filters.
  • 7
    vince31fr
    vince31fr
    iode_logo.png


    Introduction

    iodéOS is a privacy-focused operating system powered by LineageOS and based on the Android mobile platform. iodéOS aims at protecting the user's privacy with a built-in adblocker and by freeing the smartphone from snitches.

    The objectives in the conception of this ROM are threefold:

    1. To keep the stability and security level of LineageOS, by minimizing the modifications made to the system. Apart the system modifications required by the adblocker, we mainly only added a few useful options commonly found in other custom ROMs, made some cosmetic changes, modified a few default settings to prevent data leaks to Google servers.
    2. To ease a quick adoption of this ROM by new users. We especially target users that are concerned by the protection of their privacy, but are not reluctant to still use inquisitive apps like Google ones. We thus included MicroG as well as a coherent set of default apps, and simplified the initial setup of the system. Particularly, an initialization of MicroG has been made with GCM notifications allowed by default, a privacy-friendly network location provider (DéjàVu) pre-selected, as well as Nominatim Geocoder.
    3. To provide a new and powerful way of blocking ads, malwares, data leaks of all kinds to many intrusive servers. We are developing an analyzer, tightly integrated into the system, that captures all DNS requests and network traffic, as well as a user interface (the iodé app). Compared to some other well-known adblockers, this has the advantages of:
      • Avoiding to lock the VPN for that use. You can even use another adblocker that uses VPN technology alongside our blocker.
      • Being independent of the kind of DNS server used by the system or set by an independent app: classical DNS on UDP port 53 or any other one, DNS over TLS (DoT), DNS over HTTPS (DoH), ..., as we capture the DNS requests before they are transmitted to the system function that emits the DNS request. What we do not support, is DoH when it is natively built into applications, i.e. when an app communicates directly with a DoH server, without asking name resolution to the system. It would require to decrypt HTTPS packets between such an app and the DoH server, which may create a big security hole.
      • Precisely mapping DNS requests and network packets to the Android apps that emitted (or received) them.
      • Deciding which apps have a filtered network usage (by default, all apps), and which ones can communicate with blacklisted servers.
      Since its first versions, we added many features to the iodé blocker: several levels of protection, fine-grained control over the hosts that should be blocked or authorized, displaying statistics on a map to see the quantity of data exchanged to which countries, clearing statistics... We are actively developing the blocker, and new functionalities will be regularly added.

    Features

    Changes in LineageOS to prevent data leaks:
    • Default DNS server: Google's DNS replaced by Quad9's 'unblocked' servers in all parts of the system.
    • A-GPS: patches to avoid leaking personnal information like IMSI to supl server.
    • Captive portal login: connectivitycheck.gstatic.com replaced by captiveportal.kuketz.de for connectivity check.
    • Dialer: Google default option replaced by OpenStreetMap for phone number lookup.

    Pre-installed apps:

    We included many useful default apps, but our choice cannot suit everyone; so we added the possibility to remove them. It can be done at the end of the phone setup, or at any time by going to Parameters -> Apps & Notifications -> Preinstalled apps.

    • MicroG core apps: GmsCore, GsfProxy, FakeStore.
    • NLP backends for MicroG : DejaVuNLPBackend (default), MozillaNLPBackend, AppleNLPBackend, RadioCellsNLPBackend, Nominatim Geocoder.
    • App stores : FDroid (with F-Droid Privileged Extension) and Aurora Store.
    • Browser: our own fork of Firefox (with Qwant as default search engine, many other ones added, telemetry disabled, parts of telemetry code removed) instead of Lineage’s default browser Jelly.
    • SMS: QKSMS instead of Lineage's default SMS app.
    • Email: p≡p (Pretty Easy Privacy).
    • Camera: our own fork of Open Camera, with a few tweaks.
    • Maps/navigation: Magic Earth GPS & Navigation (the only one free but not open source).
    • Keyboard: OpenBoard instead of AOSP keyboard.
    • PDF: Pdf Viewer Plus.
    • Personnal notes: Carnet.
    • {Ad/Malware/Data leak}-blocker: iodé.
    • News: to keep users informed about our developments, as well as a FAQ.
    • Meteo: Geometric Weather.

    Pre-included FDroid repository:

    The apps that we tweak or develop (microG services, the browser based on Firefox, the News app, Open Camera ...) are available through a repository that we included in FDroid (check the "Apps for iodéOS" category). For this purpose and to avoid name conflicts of some apps, we also had to make a few changes in FDroid.

    Useful options from other custom ROMs:
    • Smart charging (disables charging when a given level is reached, to protect battery health).
    • Fingerprint vibration toggle.
    • Swipe down to clear all in recent apps (Android 10 only).

    Installation Instructions

    To download and flash our latest build, see https://gitlab.com/iode/ota.
    You can also find here direct links to the latest builds.

    Supported devices

    Sources

    Bug Reporting

    You can post a message in this thread or (preferred) open an issue here.

    Credits

    LineageOS is a free, community built, aftermarket firmware distribution of android, which is designed to increase performance and reliability over stock android for your device.
    All the source code for LineageOS is available in the LineageOS Github repo. If you would like to contribute to LineageOS, please visit their Wiki for more details.
    This ROM would be nothing without the tremendous work made on MicroG, and all the other open source apps that we included. We are very grateful to their authors.

    Contributors

    Direct contributors: @iodeOS, @vince31fr
    Indirect contributors (too numerous to list): All the people that contributed to the device tree, to LineageOS, and to the included open source apps.

    Sponsoring

    You can help in the development of this ROM by paying us a coffee here: https://paypal.me/iodeOS.

    Screenshots

    iode_home1.png
    iode_home2.png
    iode_drawer.png
    iode_preinstalled.png
    blocker_home.png
    blocker_report.png
    blocker_stream.png
    blocker_map.png
    blocker_lists.png
    blocker_blocked.png
    blocker_block_host.png
    blocker_details_host.png
    View
    3
    vince31fr
    vince31fr
    *** New Update : 27/07/2022 ***

    Upgrade to Android 12 /LineageOS 19.1

    Available as OTA (see OP)
    ​
    View
    3
    F
    FerretallicA
    If anyone else wants to get their Note 9 up and running with this ROM with minimal hunting around, here's what I'd suggest (assuming coming from a stock firmware). You will end up with iode + Magisk + no 'data' encryption (so for example you can still access your Data partition from recovery).

    You will need:
    and also a PC for running the Odin software.

    Summary of install steps
    • Update phone to latest official firmware

    • Restart phone in bootloader mode and flash TWRP with Odin. If you've never done this before there is a decent guide here: https://www.droidthunder.com/install-twrp-recovery-on-samsung

    • Restart phone in Recovery mode (TWRP).

    • Use Wipe -> Format to completely wipe the existing Data partition.

    • Copy the iode, Magisk and 'disable forced encryption' zip files to your phone. Then from TWRP install them in order of iode, Magisk and "Disable DmVerity ForceEncrypt". Do not restart the device in between each step.
    View
    3
    vince31fr
    vince31fr
    [[[ Breaking News: iodéOS 2.0 in beta testing phase ]]]​

    We're proud to announce that iodéOS 2.0, based on Android 11/LineageOS 18.1, is in beta testing phase (and runs pretty well).
    If you want to join the beta testing team, follow the link in the News App (FAQ, About Iodé, How can I contribute).

    BEWARE: the play store magisk module given in the OP (unofficially supported) needs to be updated *before* updgrading to iodéOS 2.0 to avoid a bootloop. You can find the updated version in the OP.
    View
    2
    vince31fr
    vince31fr
    Downloads : iodéOS 3.x

    Due to an incompatibility in the data encryption method, a factory reset is required to migrate to iodé 3 based on Android 12 / LineageOS 19.1. It can be installed as OTA by using this updater. Backup your data before proceeding.
    The data format must be performed with iodé's recovery, not TWRP, which can be found here.

    • 07/02/2023 (build 20230131):
      • Blocker:
        • Improved blocking settings. You can now choose 'Standard' blocking (ads, trackers, malwares, etc) or 'Reinforced' blocking (same objective but more extensive), and then select additional categories.
        • The 'Porn' category has been extended to a wider 'Sensitive content' one, that also includes fake news, gambling, drugs, piracy, torrent..., with mainly child protection in mind.
        • The 'Extreme' category has been removed, as it is now part of the reinforced blocking.
        • Improved blocking lists. We merge several acknowledged and up-to-date sources, and have diversified our sources to produce more complete lists. The standard list has however been reduced a bit, to avoid as much as possible interference with apps expected behavior.
      • Added a new network location provider: Local NLP Backend. It is an improved version of the DéjàVu NLP backend which was already available in iodéOS. Like DéjàVu, it builds a local database connecting localizations learned from other NLP backends and apps using GPS, and mobile antennas/Wifi; but also has an active mode (not preselected) that can trigger GPS requests. To configure it: Settings -> System -> microG -> Location modules
      • LineageOS synchronized with January security patch included
      • All apps updated
      • New devices support: Pixel 3, 6, 6a
    • 16/12/2022 (build 20221512):
      • Blocker: added multiple selection in settings / domain customization. Long-press on a domain, select several domains or all, apply actions (block all, authorize all...)
      • PdfViewerPlus: improved security by updating core libraries
      • Network settings: added a switch to disable connectivity check (and thus captive portal detection)
      • LineageOS synchronized with December security patch included
      • All apps updated
      • New devices support: Pixel 4 & 5, OnePlus 9 & 9 Pro
    • 24/11/2022 (build 20221121):
      • Improvements in the blocker user interface (iodé app)
      • LineageOS synced with September security patch included
      • All apps updated
    • 17/10/2022 (build 20221014):
      • Blocker:
        • Network blockings following their type (Wifi, mobile data, VPN) added
        • Default blockings definition for new apps
        • Personnalized recipients management improved
        • iodé's app access restrictions by password added
        • Search filters added in report and map
        • Display theme selection
        • Automatic and 'real-time' refresh of the whole app
        • Performance and fluidity improvements of the app
      • LineageOS synced with September security patch included
      • All apps updated
    • 27/07/2022 (build 20220726):
      • Upgrade to iodéOS 3.1 based on Android 12 / LineageOS 19.1
      • SafetyNet certification activated: allows many apps, notably banking ones, to fully work
      • Setup wizard: the push notifications configuration page now also activates SafetyNet (fine-grained control in Settings->System->microG)
      • OpenCamera: the 'Use alternative flash method' in photo settings is no more necessary and can be disabled, allowing flash optimization
      • News app: German translations
      • LineageOS synced with July security patch included
      • All apps updated

    Downloads : iodéOS 2.x

    • 24/10/2022 (build 20221024):
      • Hotfix build for keyboard not showing in decryption page.
    • 17/10/2022 (build 20221014):
      • Blocker:
        • Network blockings following their type (Wifi, mobile data, VPN) added
        • Default blockings definition for new apps
        • Personnalized recipients management improved
        • iodé's app access restrictions by password added
        • Search filters added in report and map
        • Display theme selection
        • Automatic and 'real-time' refresh of the whole app
        • Performance and fluidity improvements of the app
      • LineageOS synced with September security patch included
      • All apps updated
    • 27/07/2022 (build 20220726):
      • SafetyNet certification activated: allows many apps, notably banking ones, to fully work
      • Setup wizard: the push notifications configuration page now also activates SafetyNet (fine-grained control in Settings->System->microG)
      • OpenCamera: the 'Use alternative flash method' in photo settings is no more necessary and can be disabled, allowing flash optimization
      • News app: German translations
      • LineageOS synced with July security patch included
      • All apps updated
    • 21/07/2022 (build 20220530):
      • Setup Wizard: new page to configure push notifications through microG
      • Lockscreen settings: switch added to disable fingerprint unlock when screen is off
      • Improved German translations
      • Bug fixes and improvements
      • LineageOS synced with May security patch included
      • All apps updated
    • 02/05/2022 (build 20220408):
      • News app reworked
      • Setup Wizard: new iodé introduction
      • iodé blocker: pull to refresh replaced by automatic refresh in report tab
      • Teracube 2e 2022 batch released, video playback in browser and video recording fixed
      • Music app : playlist crash fixed
      • Open Camera : crash when tapping thumbnail of a newly recorded video fixed, photos and videos now editable
      • LineageOS synced with March security patch
      • All apps updated
    • 03/02/2021 (build 20220129):
      • New iodé blocker map feature
      • Build mode changed to 'user' (i.e. release) mode): more apps work out-of-the-box and more secure device, but more restrictive recovery
      • Camera app changed to Open Camera
      • Wireguard kernel module included
      • Dark bootanimation
      • January security patch
      • Preinstalled apps updated
      • Beware: Play store Magisk module broken
    • 03/12/2021 (build 20211129):
      • Fixes DRM (downgraded from L1 to L3)
    • 18/11/2021 (build 20211108):
      • LineageOS updated (November security patch)
      • Preinstalled apps updated
      • Iodé blocker: hosts can now be customized, either globally or by app
      • Data partition encryption is now automatically triggered on non encrypted devices. Backup your data first, some users reported that their data has been wiped. We're very sorry for the inconvenience.
    • 10/09/2021 (build 20210828):
      • LineageOS updated (August security patch)
      • Preinstalled apps updated
      • Backup app included: Seedvault
      • microG now uninstallable: Settings -> Apps & notifications -> Preinstalled apps
      • New default accent color (clear blue from iodé logo)
      • Bixby key now configurable (short press only, Settings -> System -> Buttons)
    • 10/09/2021 (build 20210828):
      • Upgrade to Android 11 / LineageOS 18.1
      • Preinstalled apps UI reworked with the introduction of categories.
      • Dark theme in the iodé blocker UI (next improvement will be hosts customization).
      • p≡p (https://f-droid.org/fr/packages/security.pEp/) is now the defaut email client, and replaces lineageOS client which is no longer maintained.
      • Preinstalled apps updated to their latest version.
      • LineageOS updated (July security patch).
    • 28/05/2021 (build 20210525):
      • Different protection levels in iodé's blocker added: in addition to the default standard blocklist, we added three lists (socials, porn, extreme) that can be activated globally or on a per-app basis (more information in the FAQ).
      • Geometric Weather app added.
      • Preinstalled apps selection at setup wizard added.
      • Preinstalled apps including microG updated to their latest version.
      • LineageOS updated (May security patch).
    • 07/03/2021 (build 20210306):
      • Blocker UI improved: performance at startup, statistics display (with sortable columns), DNS stream
      • Preinstalled apps management (uninstall / reinstall) menu added (Settings -> Apps & Notifications -> Preinstalled apps)
      • Latest lineageOS sources synced
      • Default apps updated
    • 22/01/2021 (build 20210121):
      • LineageOS sources synced (AOD and glove mode now available)
      • Prebuilt apps updated
      • Activated Camera APIv2 in Snap
      • Added AudioFX
      • Added fast charge disabler
      • Disabled broken widevine DRM L1, now fallback to L3
      • Force auto-update of apps in FDroid to keep in sync with iodé apps. It can be disabled.
    • 25/12/2020 (build 20201224): first publicly available build for Samsung Galaxy Note 9.

    Downloads : add-ons
    • phonesky-magisk.zip : Magisk module for NanoDroid patched Play Store, for those who really need to get access to their paid apps that don't work with microG. This module can be generally be deactivated when you have installed and ran once the paid apps.
      NB : you may have to wait a couple of hours after activating the module for being able to install paid apps.
    • phonesky-magiskV2.zip : compatibility for the upcoming iodéOS 2.0 based on Android 11. It can ben installed on iodéOS 1.x based on Android 10 too.
      IMPORTANT : install this module or deactivate the previous one before installing iodéOS 2.0, or you'll be caught in a bootloop.
    [/LIST]
    View

New posts