[CLOSED][ROM][Unofficial][11.0][microG][signed]hardened LineageOS 18.1 Oneplus 7T Pro

Status
Not open for further replies.
Search This thread
By:
Advanced…
alleykat2561

alleykat2561

Senior Member
Aug 30, 2010
84
21
66
CC, TX
Nexus 7 (2013)
Google Nexus 5
MSe1969 said:
New build with October 2022 ASB patches available

Hi all,
a new build with the October 2022 ASB patches is available for download and also offered by the Updater app:
  • Security string 2022-10-05
  • Bromite Browser and Webview updated to 105.0.5195.147
  • Some kernel patches
  • microG 0.2.24.223616-61

Happy flashing!
Regards, M.
Click to expand...
Click to collapse
Thank you MSe!
 
  • Like
Reactions: bestouff
MSe1969

MSe1969

Senior Member
Dec 16, 2016
2,662
4,984
Frankfurt Rhine-Main metropolitan region
Moto G
Sony Xperia Z1 Compact
Dragos1221 said:
Hello @MSe1969 , I am very happy with this ROM, it works perfectly! I saw that Lineage OS 19 just came out, when will we see the update of Android 12 of this ROM?
Click to expand...
Click to collapse
Thanks for the hint - depends on my time, mood and how easy it will be to port the specific features of this ROM...
 
  • Like
Reactions: gumka77, bestouff, alleykat2561 and 2 others
old-Silver

old-Silver

Member
Jun 20, 2022
18
16
@MSe1969 Oct 22 update great as always. Thank you for your continued work on this device. Long may it continue, I do not think another device without a constant front facing camera is ever going to happen.
 
  • Like
Reactions: alleykat2561
MSe1969

MSe1969

Senior Member
Dec 16, 2016
2,662
4,984
Frankfurt Rhine-Main metropolitan region
Moto G
Sony Xperia Z1 Compact
  • Like
Reactions: gumka77, old-Silver, bestouff and 4 others
alleykat2561

alleykat2561

Senior Member
Aug 30, 2010
84
21
66
CC, TX
Nexus 7 (2013)
Google Nexus 5
MSe1969 said:
New build with November 2022 ASB patches available

Hi all,
a new build with the November 2022 ASB patches is available for download and also offered by the Updater app:

  • Security string 2022-11-05
  • Bromite Browser and Webview updated to 106.0.5249.163
  • Some kernel patches
  • microG 0.2.25.223616-10

Happy flashing!
Regards, M.
Click to expand...
Click to collapse
Thank you for the build!
 
old-Silver

old-Silver

Member
Jun 20, 2022
18
16
Excuse the possible rudeness or incorrect placement but this is the only thread I have been using on XDA.

I have managed to get hold of another 7T Pro 4G McLaren and want to roll my old one back to stock so I can store it for emergencies. Typically I did not think of this until I had applied the Latest build of this rom to the newer phone :(

Anyone here have a stock McLaren rom available?
 
old-Silver

old-Silver

Member
Jun 20, 2022
18
16
MSe1969 said:
New build with November 2022 ASB patches available
Click to expand...
Click to collapse
Have had a strange thing happen and not sure if it is this build or the Aurora store that causes it.
I understand that a lot of apps now grab all of your phone contacts etc as they install but did not think they removed them.

Due to work I had to (against my better judgment) install Microsoft Excel from the Aurora store.
On getting a new text from a known source I noticed the name was missing, only showed the persons contact number, confused I open Contacts only to find it empty?

Confused I re-imported my .vcf from back up and continued with my day.
Next day I thought I would see if I could re-create the issue. Uninstalled Excel checked contacts were still present and rebooted the phone.
Re-installed Excel from the Aurora store and BAM! all my contacts were removed again. Any one else had anything similar?
 
alleykat2561

alleykat2561

Senior Member
Aug 30, 2010
84
21
66
CC, TX
Nexus 7 (2013)
Google Nexus 5
old-Silver said:
Have had a strange thing happen and not sure if it is this build or the Aurora store that causes it.
I understand that a lot of apps now grab all of your phone contacts etc as they install but did not think they removed them.

Due to work I had to (against my better judgment) install Microsoft Excel from the Aurora store.
On getting a new text from a known source I noticed the name was missing, only showed the persons contact number, confused I open Contacts only to find it empty?

Confused I re-imported my .vcf from back up and continued with my day.
Next day I thought I would see if I could re-create the issue. Uninstalled Excel checked contacts were still present and rebooted the phone.
Re-installed Excel from the Aurora store and BAM! all my contacts were removed again. Any one else had anything similar?
Click to expand...
Click to collapse
No. All I did was export my contacts.vcf from my old phone (3T), copied that file to the new phone (7T pro) then imported contacts.vcf to the Contacts app. Worked fine. No issues since then.
 
old-Silver

old-Silver

Member
Jun 20, 2022
18
16
alleykat2561 said:
No. All I did was export my contacts.vcf from my old phone (3T), copied that file to the new phone (7T pro) then imported contacts.vcf to the Contacts app. Worked fine. No issues since then.
Click to expand...
Click to collapse
Thanks for the feedback alleykat:

It is an odd one, seems anything I install from the Aurora store is doing the same thing, F-Driod apps are fine.
On further testing:

I added a dummy contact direct on the phone (not from my .vcf) and installed another app.​
The dummy contact was the only one left following an app install.​
Re-created the same issue running the same tests on my second McLaren 7T Pro? covers it off from being just the device it's self.​

My initial thoughts are it is something in the store app not the ROM (MSe1969), if I get the time I will dig in and see if I can initiate or find some logging of the install process and feed back.

Not a major issue for me, this is the first time I have used the Aurora store, will take this as a warning and not use it going forward either :D
Thought I should bring it forward in case others see something similar
 
  • Like
Reactions: alleykat2561
P

pa.trick

Member
Nov 2, 2017
11
3
Screenshot_20221204-185249_Einstellungen.png
Have been experiencing a massive battery drain in the last couple of days. Running the latest build of this awesome ROM. Does anybody else notice anything similar? Wonder if it is software-related or a matter of settings (which I haven't touched)? Bought the phone in early 2021, according to AccuBattery app battery health is 88%.
 
MSe1969

MSe1969

Senior Member
Dec 16, 2016
2,662
4,984
Frankfurt Rhine-Main metropolitan region
Moto G
Sony Xperia Z1 Compact
pa.trick said:
Have been experiencing a massive battery drain in the last couple of days. Running the latest build of this awesome ROM. Does anybody else notice anything similar? Wonder if it is software-related or a matter of settings (which I haven't touched)? Bought the phone in early 2021, according to AccuBattery app battery health is 88%.
Click to expand...
Click to collapse
Not on my end either
 
MSe1969

MSe1969

Senior Member
Dec 16, 2016
2,662
4,984
Frankfurt Rhine-Main metropolitan region
Moto G
Sony Xperia Z1 Compact
  • Like
Reactions: gumka77, alleykat2561, bestouff and 1 other person
RayfG

RayfG

Senior Member
Jan 28, 2016
546
163
outa space
MSe1969 said:
New build with December 2022 ASB patches available

Hi all,
a new build with the December 2022 ASB patches is available for download and also offered by the Updater app:
  • Security string 2022-12-05
  • Bromite Browser and Webview updated to 108.0.5359.106
  • Some kernel patches
  • microG 0.2.26.223616-2

Happy flashing!
Regards, M.
Click to expand...
Click to collapse
Thank you for your unbeatable great support.
Rom flashed and all works like every time without any issues. 👍👍
 
  • Like
Reactions: alleykat2561 and MSe1969
Status
Not open for further replies.

Similar threads

NurKeinNeid
  • Locked
[CLOSED][ROM][12L] DerpFest for OnePlus 7T Pro [OFFICIAL][hotdog]
Replies
791
Views
115K
Badger50
Badger50
mauronofrio
[RECOVERY][3.4.0-2][hotdog]Unofficial TWRP recovery for OnePlus 7T Pro Unified(Test)
Replies
370
Views
102K
A
android bot
MSe1969
  • Locked
[CLOSED]EOL [ROM][Unofficial][10.0][microG][signed]hardened LineageOS 17.1 Oneplus 7T Pro
Replies
277
Views
32K
Oswald Boelcke
Oswald Boelcke
C
[ROM][11.0][OnePlus 7T Pro] Pixel Experience [AOSP]
Replies
325
Views
67K
G
Ginosius
parth7667
[EOL][ROM][13.0][OnePlus 7T Pro][Official] Pixel Experience [AOSP]
Replies
607
Views
82K
parth7667
parth7667

Top Liked Posts

24 Hours All time
  • There are no posts matching your filters.
  • 7
    MSe1969
    MSe1969
    This thread is deprecated, please look at its successor thread.

    This thread is dedicated to provide hardened Lineage-OS 18.1 builds with microG included for the OnePlus 7T Pro (hotdog) with current security patches.
    You can consider this thread as the successor of my respective LineageOS 17.1 thread.

    Features of this ROM​

    Download here

    • Pre-installed microG like LineageOS for microG project (own fork)
    • Pre-installed AuroraStore, AuroraDroid and AuroraServices
    • OTA Support
    • eSpeakTTS engine
    • Bromite as default browser
    • Additional security hardening features listed below:
    • Cloudflare as default DNS (instead of Google)
    • Privacy-preferred default settings
    • Optional blocking of Facebook- and Google-Tracking (Settings - Network & Internet)
    • Optional disable captive portal detection or choose from various providers (default is GrapheneOS and not Google; Settings - Network & Internet)
    • Firewall UI (under Trust)
    • Increased max. password length of 64
    • No submission of IMSI/phone number to Google when GPS is in use
    • Default hosts file with many blocked ad/tracking sites
    • Privacy-enhanced Bromite SystemWebView
    • Extra control of sensor access for additionally installed user apps (Special access under app permissions)
    • Kernel kept up to date with ASB patches of Google kernel/common 'android-4.14-q-release' branch
    • Debloated from Oneplus blobs for Soter and IFAA
    • Hardened bionic lib and constified JNI method tables
    • Option to only use fingerprint unlock for apps and not for the device
    • Optional timeout for Bluetooth and WLAN connections
    • Per connection WiFi randomization option

    Current release levels​

    Security string: 2023-01-01
    AOSP tag: 11.0.0_r46
    Bromite System Webview & Browser: M108


    Source-code and build instructions​

    Kernel: https://github.com/lin18-microg/android_kernel_oneplus_sm8150/tree/lin-18.1-mse2
    Build manifest: https://github.com/lin18-microg/local_manifests/tree/lin-18.1-hmalloc


    Installation Instructions​


    YOU ARE RESPONSIBLE SOLELY YOURSELF FOR ANY ACTIONS YOU DO WITH YOUR DEVICE !!!
    Please note - I won't explain any single aspect (e.g. how to install 'fastboot' on your PC or troubleshoot USB connectivity issues under Windows). Search the net and consult the search engine of your choice or look here in XDA, there is plenty of information available.

    Pre-Requisites​

    • Have fastboot and adb installed on your PC and make sure, you can connect via USB to your device in fastboot mode and via adb
    • An unlocked bootloader (see e.g. LineageOS install instructions)
    • If you come from Stock ROM, make sure to upgrade your device to the latest offered software version
    • Know, how to boot into fastboot mode (with powered off device press [Power]+[Vol.down]+[Vol.up])

    Please read carefully:​

    I refer in general to the LineageOS install instructions, but there are some deviations!
    It is recommended to really go through the instructions once, before doing anything. You have been warned.

    Let's go!​

    Install the dedicated Lineage recovery for this ROM​

    For the Oneplus 7T Pro (hotdog), there is currently no fully working official TWRP available! The offered official one can't decrypt the /data partition and I don't fully trust the rest.
    Please download the specific Lineage revocery for this build. It has been built using this ROM's signing key, because the official Lineage recovery did not work either for me (the official Lineage recovery works with the official build, this one works for this specific build).
    Unzip and flash this specific recovery with the below commands (your device must be in 'fastboot mode'):
    Code: 
    fastboot flash recovery_a lineage-18.1-recovery-20210903.img
fastboot flash recovery_b lineage-18.1-recovery-20210903.img
    Reboot now into recovery from fastboot (follow the menu options) - DO NOT boot into your OS yet.

    If you come from Stock ROM, synchronize the a/b partitions​

    If you come from Stock ROM, sideload the "copy partitions" script referred and described in the LineageOS install instructions.
    Please note, that you may get error messages stating
    Partition product_b dd: /dev/block/dm-1: write error: No space left on device Partition vendor_b dd: /dev/block/dm-2: write error: No space left on device
    You can ignore those, as long as it is product or vendor.

    Upgrade the firmware​

    Please refer to the LineageOS documentation on upgrading the firmware
    BTW, this thread contains a huge collection of OOS images.

    Install the ROM​

    Continue as described in the LineageOS installation instructions with formatting /data and sideloading the ROM ZIP (download link above).
    It is normal, that you observe at 47% progress a longer break, followed by a step 1/2 and finally 2/2 before a success message appears.
    Please note: Even if you come from my previous hardened LineageOS 17.1 ROM, you can't "dirty-flash" - the device encryption is not compatible. You must format the /data partition! Please keep in mind, that formatting the /data partition also wipes the shared internal memory - backup first!

    DO NOT flash Gapps!
    This ROM comes with pre-installed microG. So don't attempt to flash Gapps.
    If Gapps is a 'must' for you, please use the official LineageOS build for this device.


    Update Instructions​


    This ROM offers OTA updates through the Updater app. Therefore, normally, no further activities necessary.
    You can however also manually update the ROM by sideloading a newer version of this ROM via recovery.


    Frequently asked Questions​


    These questions come from various threads for my hardened microG ROMs. I have listed them here, because they also apply to this ROM and are hopefully helpful.

    1. AuroraStore
    I bundle AuroraStore with my build, but I am in no way associated with its development. The first place to look for support is the AuroraStore XDA thread and its excellent FAQ Section. Nevertheless, I would like to answer some frequently asked questions in conjunction to my ROM:

    Q: AuroraStore offers an update to "Google play services" - I thought your ROM is "Google-free"?
    A: The bundled microG application spoofs the existence of Google play services. This is a necessary part of microG's design. In AuroraStore, please add the Play Services to the ignore list. You won't be able to "update" them anyhow, but better do not even try to do so!

    Q: I can't connect, Aurora claims "no network" - but I can normally use my browser and other apps to connect to the internet.
    A: If the "iptables block script" of my ROM is active, try to deactivating and immediately after re-activating it.
    If that does not help or you don't use the iptables block script of tis ROM, you may try to force-close the app or logoff/logon again. However, the Aurora support thread will be your primary point to look at!


    2. Google/Facebook iptables blocking
    Q: How does the Google/Facebook blocking work?
    A: Via the 'iptables'/'ip6tables' functionality of the Linux layer of Android, the ip4/ip6 address range of Google and Facebook is blocked on a per app base (in fact, it is generally blocked, but some apps on an internal exception list are still allowed to connect). This means, that apps (or spyware components thereof) cannot send/receive data to/from Google/Facebook. Btw, certain connections to X-mode and Palantir are also blocked, but I am not sure, whether this is enough - any qualified information to improve this are very welcome!

    Q: I like this Google/Facebook blocking approach, but my favourite <xyz> app needs to be able to connect to Google/Facebook. Can you please add this app to your exception list?
    A: Please read this comprehensive information. In short: If you have a trustworthy FOSS project aiming at connecting to Google/Facebook via Webview as 'mobile browser' with (almost) no permissions or you have a tracker-free app to connect to a proprietary service, which simply is hosted on a Google webspace, I am happy to discuss this, but I will definitely not allow any "Playstore top ten genuine spyware app".

    Q: Which apps are on your exception list?
    A: see here

    Q: But if Google is blocked for almost every app, can I still get push messages?
    A: Yes, you can! Push messages are routed and controlled through the microG functionality, which stil can connect to Google.


    3. etc/hosts ad blocking
    Q: What is the etc/hosts ad-blocking and how does it work?
    A: I deliver a monthly-updated /system/etc/hosts file from the AdAway app which lists a comprehensive selection of known ad/spyware addresses. Any attempt to connect to those sites is redirected to the local OS, so a positive connection is reported, but no content is transmitted. (See linked explanation).

    Q: Which anti-tracker lists do you use?
    A: The same defaulted by the AdAway app, plus in addition Microsoft's 'Hockey Stick' stuff.

    4. Firewall UI
    Q: What is the Firewall UI and how does it work?
    A: Under Settings - Data privacy - Trust, you'll find a list of all installed apps (optionally, you can also show the shipped system apps), which lets you control - per app - whether the app can connect via WiFi, Mobile data or VPN. In fact, you can in any LineageOS individually control this in the app details (Settings), this option simply gives you a comprehensive view for all apps.

    Q: How do I use it? What are the typical use-cases:
    A: It of course depends on your specific requirement, but below some very typical use-cases:
    a. Disallow internet access completely (uncheck WiFi, mobile data and VPN)
    This might be useful for an app, which does not need internet access to work, but uses internet access to e.g. nag you with ad-crap (some games on the play store, for example)
    b. Make sure, that an app only uses WiFi (in order to avoid costs when using mobile data) - uncheck mobile data
    c. Make sure, that an app only has internet, when connected via VPN - uncheck WiFi and mobile data

    5. Privacy features / data privacy of this ROM
    Q: Does this ROM protect my privacy by design/default?
    A: First of all, you will never get any "auto-protection" without having to take care, what you do!
    What this ROM provides to you in addition to an "official" LineageOS:
    • This ROM comes with microG, to avoid the necessity of having to flash the Google apps, with the "mother of all spyware" called Google Play services. So many apps with that dependency would still work, either fully, or with their core-functionality, but without "extra Google convenience" features.
    • You can optionally block Google/Facbebook connections, which can add a further protecion layer (see the specific FAQ section about that feature)
    • Many nasty ad-servers, which are embedded into shady apps or websites are blocked by default
    • Some hardening measures known from the GrapheneOS project have been added
    HOWEVER - just some examples, how you can easily screw up any privacy gain (this list is by far not even near to comprehensive):
    • You still CAN install all kinds of shady apps and use privacy-ignoring services. If you e.g. install the genuine Facebook or Instagram app, the majority of your private data on your phone will be immediately uploaded to Facebook servers, as those apps even refuse to start, if you do not grant all the sensitive permissions! (Note: Yes, afterwards, when your data has already been stolen, you can revoke those permissions again. And yes, Whatsapp seems maybe 'slightly' better in this regard, but if you really believe, that WA isn't fully integrated into the FB ecosystem, you must be living on another planet).
    • If you use the Microsoft Outlook app to connect to any "non-Microsoft" e-mail provider, your logon credentials to that other mail provider are stored on Microsoft servers factually allowing Microsoft to steal your identity. Using Microsoft e-mail services or GMail discloses all your e-mails to automated scanning for "suspicious activities"; this has nothing to do with your phone, but outlines, how you can void even the most secure device by making use of privacy-ignoring services.
    • Making use of Genuine Google-apps with microG also isn't a good idea - make use of alternatives.
    • Any app, which you install on your device, could misuse its needed privileges! So try to stick to FOSS apps.
    • And last, but not least, if you are a 'dissident' or fear otherwise any targeted or comprehensive surveillance, this ROM isn't for you either...




    Dealing with signed builds​

    Please note, that this builds is signed with an own key. When you come from a different build, you cannot directly "dirty-flash" this build. You have to perform a "clean flash".

    Bug reports:​

    If you have a problem, please create a post with these informations:
    Original Kernel shipped with this rom:
    Build Date:
    And try to get log as described here
    Please note that I can't and won't support issues with builds using a different kernel or Xposed.
    In regards to microG, I will try my best to help when it is related to this ROM (I use it myself), but any questions of the type "the YXZ-app can't do <some sort of fancy xyz Google functionality> properly" are better asked in the respective microG forums.

    Credits​

    AOSP project
    LineageOS project
    microG project
    Graphene OS project
    csagan5 (Bromite)
    WhyOrean (Aurora)
    SkewedZeppelin (Kernel patches)
    View
    7
    MSe1969
    MSe1969
    New build with November 2022 ASB patches available

    Hi all,
    a new build with the November 2022 ASB patches is available for download and also offered by the Updater app:

    • Security string 2022-11-05
    • Bromite Browser and Webview updated to 106.0.5249.163
    • Some kernel patches
    • microG 0.2.25.223616-10

    Happy flashing!
    Regards, M.
    View
    6
    MSe1969
    MSe1969
    New build with June 2022 ASB patches available
    Hi all, a new build with the June 2022 ASB patches is available for download and also offered by the Updater app:
    • Security string 2022-06-05
    • Some kernel patches
    • Bromite Browser and Webview on 102.0.5005.96
    • microG updated to 0.2.24.214816-11
    Happy flashing,
    regards, M.
    View
    6
    MSe1969
    MSe1969
    LineageOS 19.1 - 1st Test build

    Hi all,

    the 1st LineageOS 19.1 Test build is available now - I have upgraded my own device, which means, there will soon be an own thread for this and this 18.1 thread will come to an end eventually. There will however for sure be a January '23 Lineage 18.1 hotdog build be published.

    If you want to upgrade now and help me with your feedback (remember: Without clean flash, it won't be possible to downgrade!), please proceed as follows - I advise you to strictly follow below instructions:

    Step 1 - Upgrade the firmware
    Get the Android 12 firmware for the Oneplus 7T Pro and flash it. These are the official LineageOS instructions.
    I have used the "Oxygen Updater" app (you can obtain the app from AuroraStore) and grabbed the file from there.
    If you have a European model (e.h. HD1913 like me), I have created a downloadable archive.
    DO NOT ATTEMPT TO FLASH OR SIDELOAD - instead, unpack on your local PC and study the README.
    Perform the firmware upgrade, while still using your current recovery - it may be advisable to flash my recovery for this Lineage-18.1 build first to be on the safe side.

    Step 2 - Upgrade the recovery
    Download and unpack the specific recovery for this build. Reboot to bootloader and flash the recovery:
    fastboot flash recovery lineage-19.1-20221222-recovery-hotdog.img - still in the boot loader, choose "recovery mode" to enter the recovery.

    Step 3 - Upgrade the ROM from Lineage-18.1 to Lineage-19.1
    Download and unpack the LineageOS 19.1 test build. On the device, select “Apply Update”, then “Apply from ADB” to begin sideload. On your PC, enter the command adb sideload <name of the ROM zip file>.

    Quote from the LineageOS install instructions - same applies here:
    Normally, adb will report Total xfer: 1.00x, but in some cases, even if the process succeeds the output will stop at 47% and report adb: failed to read command: Success. In some cases it will report adb: failed to read command: No error or adb: failed to read command: Undefined error: 0 which is also fine.

    Once you have installed everything successfully, click the back arrow in the top left of the screen, then “Reboot system now”.


    I'd appreciate to receive feedback to be able to pay attention to any issues (so far, I haven't noticed anything after the pain on getting it to work on my device)

    Have fun - working on the kernel now.
    Cheers, M.
    View
    5
    MSe1969
    MSe1969
    Dragos1221 said:
    Hello @MSe1969 , I am very happy with this ROM, it works perfectly! I saw that Lineage OS 19 just came out, when will we see the update of Android 12 of this ROM?
    Click to expand...
    Click to collapse
    Thanks for the hint - depends on my time, mood and how easy it will be to port the specific features of this ROM...
    View

New posts