[ROM][Unofficial][11.0][microG][signed]hardened LineageOS 18.1 Oneplus 3/3T

Search This thread

davidlyerly

Member
Nov 5, 2021
19
12
Looks like the 3T might not get many more updates, if at all. LOS now has just 2 roms. The 12/1 and the 10/24. OnePlus has gone full bore down the 5G Google rabbit hole, correct me if I’m wrong.

What I have noticed since the very beginning of the scamdemic was the literal roping off of the internet starting with simple radio stations from HI being blocked in the continental US. Unfcngblvlbl!

I was already warning all my friends way before that about facebook etc., but it was like talking to a wall, of lemmings.

Today I see clear evidence of the google apparatus swallowing up EVERYTHING internet. Their computer systems are now dividing, controlling, repressing, all truth, all heath, technology, history, the general news at large, ACROSS THE ENTIRE PLANET with the intent to enslave and kill. Like you haven’t noticed.

No offense but F google! Web3 is the gateway to digital slavery as is chrome anything. Compromise? F no! Eye for an eye. They want to kill people. Like wise.

Graphene and Calyx are a joke. Calyx is pathetic with it’s whatsap/signal bs. It parades as some sort of privacy security blanket but really it just drags you further down googles buthole while actually removing your ability to control the OS. Graphene is just as bad. It pretends all the BS security it claims is the way forward, while in reality the hardware is controlled and OWNED by google and co who fuse the aps required for it to function back to the hardware. A satanic pedo tranny club that wants to control and kill you. Same ****e. Less choice and narrow is the path.
Graphene actually has a “Predicted Satellite Data Service (PSDS)”. Google’s very own internet octo/anal lytic gps servers that monitor (cough-control) where YOU are. No offense but when did everyone tell google they get to data mine everyone all the time geographically?
Nope. No compromise. This is no holds barred war.

BTW, App Manager-root only btw https://f-droid.org/en/packages/io.github.muntashirakon.AppManager/ is like my favorite app. Split apk’s are easy.

I'll run the 3T till it physically breaks with no sim just for the gps/bt functionality. My new phone, the pixel4a, will never use gps or bt. I can't back it up like the 3t and I'm running a rom a few months old now too. It's for basic internet, calls, and texts only and that's it. Solid device considering the choices for what phones you are allowed to use in the US is non-existent.
 
Last edited:
Last edited:
New build with February 2023 ASB patches available

Hi all,

a new build with the February 2023 ASB patches is available for download and also offered by the Updater app:
  • Security string 2023-02-05
  • Some kernel patches
  • microG on 0.2.27.223616-3
  • Apps installed by Aurora now spoofed as "installed by Google PlayStore" (this should fix such issues, where certain apps complain or refuse to run, when installed via Aurora - the internal string they expect is "com.android.vending", which translates in this build to the FakeStore app, so don't be worried, if the app info tells you "installed by FakeStore")
Happy flashing!
Regards, M.
 
New build with March 2023 ASB patches available

Hi all,

a new build with the March 2023 ASB patches is available for download and also offered by the Updater app:
  • Security string 2023-03-05
  • Some kernel patches
  • Bromite Webview replaced by Mulch Webview 111.0.5563.58
Some explanation regarding Bromite and Webview in general:
Bromite hasn't received updates since end of last year. It is meanwhile 3 major versions behind Chromium upstream, so this becomes a security issue! So I have decided to bundle the Mulch Webview from the DivestOS project with my build, as it comes very close to my original motivation to bundle Bromite - it is mainly a Chromium webview with many patches applied from the GrapheneOS project.
Whilst replacing the webview won't have any noticeable impact in most cases, I have decided to keep the outdated Bromite browser for now, although I encourage you to install and use a replacement! It wouldn't be fair to have you loose bookmarks and/or currently open sites as a "surprise" from the upgrade. Replacement candidates could be Chromium and forks or Firefox and forks (have e.g. a look to Mull on F-Droid).
Please be informed, that my next build in April will ship again LineageOS' Jelly browser, which uses the underlying system webview - Bromite browser will not be shipped any longer! (You can of course install any browser, including Bromite)

Happy flashing!
Regards, M.
 

dextructor

Senior Member
Aug 21, 2007
239
85
Thanks @MSe1969 for the work on continuing supporting this device.

Unfortunately last Wednesday trying to fix the power button that was unreliable when mounting I listened the cracking sound of the LCD (a dumb mistake I know). I was planing to replace the original battery but for now that it's gonna wait.

That's the longest time that I have a device without any issues and repairs (6 years and 6 months) and it was thanks to the community and work from this forum that was possible.

Keep going!
 
Last edited:
  • Like
Reactions: MSe1969

guywitht679

Member
Feb 18, 2015
5
2
hello, thanks for all the work on this. ive been using this since v15 i think. aurora store has always been unreliable, and im wondering if there is a particular fix that im not considering. i just flashed the latest rom this morning and while i can view the home page, and even load the apps there, i can't do a search for anything, or even load more apps in categories by swiping. nothing comes up when selecting a category.

Signal is stuck at 5.36.3, while the current version is 6.13.7. Aurora droid shows repositories updated as of june 22. don't seem to be having any problems with f-droid updating. i installed the android update from a couple days ago as well. tried with orbot on and off; no difference.

any suggestions would be greatly appreciated.
 
hello, thanks for all the work on this. ive been using this since v15 i think. aurora store has always been unreliable, and im wondering if there is a particular fix that im not considering. i just flashed the latest rom this morning and while i can view the home page, and even load the apps there, i can't do a search for anything, or even load more apps in categories by swiping. nothing comes up when selecting a category.

Signal is stuck at 5.36.3, while the current version is 6.13.7. Aurora droid shows repositories updated as of june 22. don't seem to be having any problems with f-droid updating. i installed the android update from a couple days ago as well. tried with orbot on and off; no difference.

any suggestions would be greatly appreciated.
Regarding aurora store - please try to simply purge all app data (Settings - apps - Aurora Store - memory & cache) and setup again, that normally should help. On my device, I do not have any issue with Aurora.
 
New build with April 2023 ASB patches available

Hi all,

a new build with the April 2023 ASB patches is available for download and also offered by the Updater app:

  • Security string 2023-04-05
  • Some kernel patches
  • Removed Bromite browser and shipped LineageOS' Jelly instead
  • Mulch Webview 112.0.5615.48
Some explanation regarding Bromite:
Bromite hasn't received updates since end of last year. It is meanwhile 4 major versions behind Chromium upstream, so this is a security issue! (Seems we have to sadly accept, that Bromite is dead). As announced last month, this build will not ship Bromite browser any longer. (You can still decide to manually install Bromite again, if you like).

Happy flashing!
Regards, M.
 

Jungfred

Member
Jun 2, 2018
8
6
Hey Guys,

as aurora store is currently not usable due to login issues, is there a possibility to install playstore separately alongside microg until aurora store is fixed?

Thanks in advance.
 
Hey Guys,

as aurora store is currently not usable due to login issues, is there a possibility to install playstore separately alongside microg until aurora store is fixed?

Thanks in advance.
Regarding AuroraStore, please look at the support thread on XDA (or their TG channel). I hope the issues can be solved soon, let's see. As mentioned already, using a specific account could be a work-around.

Regarding use of the "real" play store with microG - some years ago, I have tested this successfully: You would need to purge the FakeStore apk in /system/priv-app and get and copy the "real" playstore (the apk is called PhoneSky.apk) to /system/priv-app/PhoneSky/PhoneSky.apk - BUT: This took place some years back on an older Android version, no idea, whether that would still work. Honestly, I do not recommend this approach for various reasons, but up to you...
 
New build with June 2023 ASB patches available

Hi all,

a new build with the June 2023 ASB patches is available for download and will soon be offered by the Updater app:
  • ASB Security string 2023-06-05
  • Some kernel patches
  • Mulch Webview 114.0.5735.61
  • microG on 0.2.28.231657-5
  • FakeStore 0.2.0
  • AuroraStore 4.2.3
Please note, that this update of microG comes with a change in regards to the coarse location functionality:
The support of plug-in modules has been dropped, coarse location is now provided internally by making use of the Mozilla location service. Consequently, the modules shipped by default with this build have been dropped, too.

Happy flashing!
Regards, M.
 
  • Like
Reactions: temporarium

temporarium

Senior Member
New build with June 2023 ASB patches available

Hi all,

a new build with the June 2023 ASB patches is available for download and will soon be offered by the Updater app:
  • ASB Security string 2023-06-05
  • Some kernel patches
  • Mulch Webview 114.0.5735.61
  • microG on 0.2.28.231657-5
  • FakeStore 0.2.0
  • AuroraStore 4.2.3
Please note, that this update of microG comes with a change in regards to the coarse location functionality:
The support of plug-in modules has been dropped, coarse location is now provided internally by making use of the Mozilla location service. Consequently, the modules shipped by default with this build have been dropped, too.

Happy flashing!
Regards, M.
Thank you for your dedication! 😁👍🏻
 
New build with July 2023 ASB patches available

Hi all,

a new build with the July 2023 ASB patches is available for download and is also offered by the Updater app:

  • ASB Security string 2023-07-05
  • Some kernel patches
  • Mulch Webview 114.0.5735.196
  • microG 0.2.28.231657 - "Original" included now (see comments)
I have started to rework my microG approach:
With the recent change to include the Mozilla Localtion services (MLS) directly into the microG code also comes the requirement to obtain an API key for MLS, which I don't have right now (I have requested one, but I am not sure whether and if yes, when I would get it). I have therefore included the original microG apk and use the now foreseen way to specify certain default settings, so one of the two reasons for me to build from source has gone.

Happy flashing!
Regards, M.
 

seasea128

New member
Jun 22, 2014
1
0
Hi, it seems like vulkan is not working on this ROM. IIRC this phone does support vulkan, however I remembered trying out crDroid (which was android 10 iirc) and it was also broken too.
 

morbvamp

Senior Member
Aug 17, 2012
140
34
Hey, you're doing a great work in this ROM. I love it. I only have one issue... I'm not able to use location on Maps or Waze... Do you know what could it be the issue?
 

Top Liked Posts

  • There are no posts matching your filters.
  • 3
    New build with September 2023 ASB patches available

    Hi all,

    a new build with the September 2023 ASB patches is available for download and is also offered by the Updater app:
    • ASB Security string 2023-09-05
    • Some kernel patches
    • Slightly hardened GPS config
    • Updated CA certificates
    • AuroraStore 4.3.1
    • Mulch Webview 117.0.5938.60
    Happy flashing!
    Regards, M.
  • 25
    This thread is dedicated to provide hardened Lineage-OS 18.1 builds with microG included for the OnePlus 3/3T with current security patches.

    It is the successor of my Lineage 17.1 thread.
    It may be worth to also look there, if you are looking for information.

    Download here

    Features of this ROM

    • Pre-installed microG like LineageOS for microG project (own fork)
    • Pre-installed AuroraStore, AuroraDroid and AuroraServices
    • OTA Support
    • eSpeakTTS engine
    • Additional security hardening features listed below:
    • Cloudflare as default DNS (instead of Google)
    • Privacy-preferred default settings
    • Optional blocking of Facebook- and Google-Tracking (Settings - Network & Internet)
    • Optional disable captive portal detection or choose from various providers (default is GrapheneOS and not Google; Settings - Network & Internet)
    • Firewall UI (under Trust)
    • Increased max. password length of 64
    • No submission of IMSI/phone number to Google when GPS is in use
    • Default hosts file with many blocked ad/tracking sites
    • Privacy-enhanced Mulch System Webview
    • Extra control of sensor access for additionally installed user apps (Special access under app permissions)
    • Kernel kept up to date with ASB patches of Google kernel/common 'android-4.14-q-release' branch
    • Debloated from Oneplus blobs for Soter and IFAA
    • Hardened bionic lib and constified JNI method tables
    • Option to only use fingerprint unlock for apps and not for the device
    • Optional timeout for Bluetooth and WLAN connections
    • Per connection WiFi randomization option


    Current release levels

    Security string: 2023-09-05
    AOSP tag: 11.0.0_r46
    Mulch System Webview: M117

    Source-code and build instructions

    Kernel: https://github.com/lin18-microg/android_kernel_oneplus_msm8996/tree/lin-18.1-mse3
    Build manifest: https://github.com/lin18-microg/local_manifests/tree/lin-18.1-hmalloc


    Installation Instructions​


    YOU ARE RESPONSIBLE SOLELY YOURSELF FOR ANY ACTIONS YOU DO WITH YOUR DEVICE !!!

    Please note - I won't explain any single aspect (e.g. how to install 'fastboot' on your PC or troubleshoot USB connectivity issues under Windows). Search the net and consult the search engine of your choice or look here in XDA, there is plenty of information available.

    Pre-Requisites

    • If you come from OxygenOS Stock ROM, make sure to update to the latest offered software version (if not, no issue).
    • Have fastboot and adb installed on your PC and make sure, you can connect via USB to your device in fastboot mode and via adb
    • An unlocked bootloader (see e.g. LineageOS install instructions)
    • OxygenOS 9.0.6 firmware, which is needed for LineageOS 18.1 - see next section
    • Download the most current .ZIP file of the ROM and place it to your phone's internal memory

    OxygenOS 9.0.6 Firmware

    If you come from my LineageOS 17.1 build - or any Android 10 based ROM, you most probably have already the proper firmware.
    And yes, LineageOS 18.1 is Android 11, but the latest firmware for this device has been published by Oneplus for Android 9.
    How to find out about your current firmware, if you use a Custom ROM:
    Connect as root via adb to your phone and enter the command adb shell cat /system/vendor/firmware_mnt/verinfo | grep Time_Stamp
    If the result is "Time_Stamp": "2019-11-04 21:25:29", you are on the latest firmware, if the date/time is earlier, you need to update the firmware. THIS THREAD has got more information for you.
    If you come from an Oreo (Android 8.x) Custom ROM, READ THE OP OF THIS THREAD CAREFULLY !
    I can't explain it better and I am not going to repeat or summarize this. It really is in your interest to carefully read it - you have been notified and warned. Please also pay attention to the last section named "Alipay, WeChatpay, Soter and IFAA" - I strongly recommend to use the debloated firmware.


    Install TWRP recovery

    If you come from stock ROM and have just unlocked your boot loader, this is the next thing to do. I recommend to use the TWRP recovery for the OnePlus 3/3T. The following instructions are based on TWRP.
    To install TWRP, download the twrp-x.x.x-x-oneplus3.img file (Note: replace "x.x.x-x" in the following instructions with the respective values from the real file name) to your PC, connect the phone via USB to your PC, get it into 'fastboot mode' and enter the following command on your PC:
    Code:
    fastboot flash recovery twrp-x.x.x-x-oneplus3.img
    Afterwards, directly boot into 'recovery mode' (enter fastboot reboot on your PC and hold Power and vol.down) - DO NOT boot into the phone's Android system after having flashed TWRP! Once TWRP has been launched, you may decide to reboot your phone and install the ROM at any time later. But the first boot after flashing TWRP must be TWRP in recovery mode.

    Advanced Wipe

    ONLY perform the steps described here, if you come from Stock ROM or a different Custom ROM![/B]
    Boot into recovery mode. In TWRP, choose "Wipe", "Advanced" and specify "Dalvik", "System", "Cache" and "Data" to be wiped. Make sure NOT to wipe "Internal memory". Swipe to confirm the deletion and get back into the main menu.

    DO NOT flash Gapps!
    This ROM comes with pre-installed microG. So don't attempt to flash Gapps.

    Install ROM

    In the TWRP main menu, choose "Install". A file manager appears to let you navigate to your internal memory (path /sdcard). Choose the .ZIP file of our ROM and swipe to flash.
    If you update from a previous version of my ROM, including my LineageOS 17.1 build, you don't need to perform a wipe. If you come from a different ROM (or stock firmware), make sure that you have performed the Wipe steps above.
    When finished flashing, return to the main menu, choose "Reboot" and then "System", which will cause your phone to boot into Lineage OS 18.1 - be patient, the first boot after flashing a new ROM takes quite long!


    Dealing with signed builds​

    Please note, that this builds is signed with an own key. When you come from a different build, you cannot directly "dirty-flash" this build. You have to perform a "clean flash" (recommended), or - you do this on your own risk - you may try the below steps.

    This happens at your own risk - make a backup with TWRP before!
    • Download and extract the file migration.sh from this archive
    • This file helps you to migrate from a build signed with the publicly available test keys (i.e. all builds around, which do not state that they are signed). If you come from another signed build (e.g. official LineageOS), you have to adapt the file accordingly (see below links).
    • boot into TWRP
    • push the migration.sh file to the directory /data/local on your device and mount the /system partition in TWRP (you can do so using the dedicated TWRP's menu entry)
    • launch the built-in terminal in TWRP, cd into /data/local, make migration.sh executable (chmod +x) and execute the command ./migration.sh official
    • (In case you receive an error, try sh ./migration.sh official instead)
    • flash the ROM .zip
    • wipe Cache and Dalvik/ART Cache
    • reboot system
    More background information and the "theory behind" can be found in the LineageOS wiki and AOSP reference.



    Why no Android 12 / LineageOS 19 build ?​

    The answer can be found here: https://lineageos.org/Changelog-26/ (section "Let’s talk about legacy devices…").

    Bug reports:

    If you have a problem, please create a post with these informations:
    Original Kernel shipped with this rom:
    Build Date:
    And try to get log as described here
    Please note that I can't and won't support issues with builds using a different kernel or Xposed.
    In regards to microG, I will try my best to help when it is related to this ROM (I use it myself), but any questions of the type "the YXZ-app can't do <some sort of fancy xyz Google functionality> properly" are better asked in the respective microG forums.


    Credits​

    AOSP project
    LineageOS project
    microG project
    Graphene OS project
    csagan5 (Bromite)
    WhyOrean (Aurora)
    nvertigo67 (for the modded 9.x firmware and for collaboration)
    SkewedZeppelin (Kernel patches)
    9
    Change Log

    September 2023
    • ASB Security string 2023-09-05
    • Some kernel patches
    • Slightly hardened GPS config
    • Updated CA certificates
    • AuroraStore 4.3.1
    • Mulch Webview 117.0.5938.60

    August 2023
    • ASB Security string 2023-08-05
    • Some kernel patches
    • Mulch Webview 115.0.5790.136

    July 2023
    • ASB Security string 2023-07-05
    • Some kernel patches
    • Mulch Webview 114.0.5735.196
    • microG 0.2.28.231657 - "Original" included now

    June 2023
    • ASB Security string 2023-06-05
    • Some kernel patches
    • Mulch Webview 114.0.5735.61
    • microG on 0.2.28.231657-5
    • FakeStore 0.2.0
    • AuroraStore 4.2.3

    May 2023
    • Security string 2023-05-05
    • Some kernel patches
    • Mulch Webview 113.0.5672.77

    April 2023
    • Security string 2023-04-05
    • Some kernel patches
    • Removed Bromite browser and shipped LineageOS' Jelly instead
    • Mulch Webview 112.0.5615.48

    March 2023
    • Security string 2023-03-05
    • Some kernel patches
    • Bromite Webview replaced by Mulch Webview 111.0.5563.58

    February 2023
    • ASB Security string 2023-02-05
    • microG on 0.2.27.223616-3
    • Some kernel patches
    • Spoof apps installed by G*PlayStore

    January 2023
    • Security string 2023-01-05
    • Bromite Browser and Webview updated to 108.0.5359.156
    • Some kernel patches
    • microG 0.2.26.223616-16

    December 2022
    • Security string 2022-12-05
    • Bromite Browser and Webview updated to 108.0.5359.106
    • Some kernel patches
    • microG 0.2.26.223616-2

    November 2022
    • Security string 2022-11-05
    • Bromite Browser and Webview updated to 106.0.5249.163
    • Some kernel patches
    • microG 0.2.25.223616-10

    October 2022
    • Security string 2022-10-05
    • Bromite Browser and Webview updated to 105.0.5195.147
    • Some kernel patches
    • microG 0.2.24.223616-61

    September 9th, 2022
    • Security string 2022-09-05
    • Bromite Browser and Webview updated to 104.0.5112.91
    • Kernel: Some patches and also hardening (GrpaheneOS patches)
    • microG 0.2.24.214816-30
    • Contacts app slightly 'de-Googled'

    August 6th, 2022
    • Security string 2022-08-05
    • Bromite Browser and Webview updated to 103.0.5060.140
    • Some kernel patches

    July 14th, 2022
    • Security string 2022-07-05
    • Some kernel patches

    June 15th, 2022
    • Security string 2022-06-05
    • Some kernel patches
    • Bromite Browser and Webview on 102.0.5005.96
    • microG updated to 0.2.24.214816-11

    May 9th, 2022
    • Security string 2022-05-05
    • Some kernel patches
    • Bromite Browser and Webview on 101.0.4951.53
    • microG updated to 0.2.24.214816-10
    • Mozilla Location provider on 1.5.0

    April 15th, 2022
    • Security string 2022-04-05
    • Some kernel patches
    • Bromite Browser and Webview on 100.0.4896.57

    March 15th, 2022
    • Bromite Browser and Webview on 99.0.4844.58 (bugfix build)

    March 12th, 2022
    • Security string 2022-03-05
    • Some kernel patches
    • Bromite Browser and Webview on 99.0.4844.55
    • microG 0.2.24.214816-2
    • AuroraStore 4.1.1

    Janaury 20th, 2020
    • Security string 2022-01-05
    • Some kernel patches
    • A couple of patches and fixes from LineageOS

    December 19th, 2021
    • Security string 2021-12-05
    • Bromite Webview and Browser on 96.0.4664.54
    • microG 0.22.214516-21

    November 13th, 2021
    • Security string 2021-11-05
    • Bromite Webview and Browser on 94.0.4606.109

    October 15th, 2021
    Initial build:
    • Security string 2021-10-01
    • AOSP tag 11.0.0_r46
    • Pre-installed microG (0.2.22.212658-2) like LineageOS for microG project (own fork)
    • Pre-installed AuroraStore (4.0.7), AuroraDroid (1.0.8) and AuroraServices (1.1.1)
    • OTA Support
    • eSpeakTTS engine
    • Bromite (93.0.4577.83) as default browser
    • Additional security hardening features listed below:
    • Cloudflare as default DNS (instead of Google)
    • Privacy-preferred default settings
    • Optional blocking of Facebook- and Google-Tracking (Settings - Network & Internet)
    • Optional disable captive portal detection or choose from various providers (default is GrapheneOS and not Google; Settings - Network & Internet)
    • Firewall UI (under Trust)
    • Increased max. password length of 64
    • No submission of IMSI/phone number to Google when GPS is in use
    • Default hosts file with many blocked ad/tracking sites
    • Privacy-enhanced Bromite SystemWebView (93.0.4577.83)
    • Extra control of sensor access for additionally installed user apps (Special access under app permissions)
    • Debloated from Oneplus blobs for Soter and IFAA
    • Hardened bionic lib and constified JNI method tables
    • Option to only use fingerprint unlock for apps and not for the device
    • Optional timeout for Bluetooth and WLAN connections
    • Per connection WiFi randomization option
    9
    Bugfix build
    Hi all, Bromite has released a version increment to incorporate an upstream fix, which could cause some misbehavior (actually in my OP7T thread, some people had issues). I have therefore decided to push a bugfix build, which will also be offered by the Updater app, having Bromite Webview and Browser on release 99.0.4844.58:

    7
    New build with November 2021 ASB patches

    Hi all, a new build for the OP3(T) containing the November 2021 ASB patches has been released:

    The Updater app should soon indicate it to offer an OTA update.
    • Security string 2021-11-05
    • Bromite Webview and Browser on 94.0.4606.109
    • Some kernel patches
    Happy flashing,
    Regards, M.
    6
    New build with January 2022 ASB patches

    Hi all,
    a new build for the OP3(T) containing the January 2022 ASB patches has been released:

    The Updater app should already indicate to offer an OTA update.
    • Security string 2022-01-05
    • Some kernel patches
    • A couple of patches and fixes from LineageOS
    Happy flashing,
    Regards, M.

    EDIT: URL adapted, see next post