Development [ROM] [UNOFFICIAL] [Android 13] [OSS] LineageOS 20.0 MicroG version / SafetyNet Pass / ih8sn

[2spirit]

Hello,

I have build for myself a vanilla version of LineageOS 20.0 because I don't find any simple and pure version of LineageOS and I want to share my build here.

This work is based from different sources so many thanks for all this devs !

Credits :​

LineageOS Team, PulKit077, Aryan, RootGhz720, MicroG team, Vantoman and many others ...

Sources :​

- LineageOS 20.0 source
- VantomKernel
- xiaomi-sm6150 device / common / vendor trees
- MicroG
_____

Instructions for a clean flash :​

- Use official TWRP 3.7.0_12 from Nebrassy
- Flash last firmware V13 or V14
- Download the ROM and check MD5
- Flash it
- Format Data and reboot

_____

Update instructions​

- Download the ROM and check MD5
- Flash it
- Wipe cache and reboot

_____

After an update, you can launch this command to optimize the battery backup and kernel parameters. (Needs terminal and root)

su -c "cmd package bg-dexopt-job"
su -c "cmd package compile -a -f --compile-layouts"

Wait the answer "Success" and reboot

You can optionally run this command to reset battery stats :

su -c dumpsys batterystats --reset-all

_____

NOT COMPATIBLE WITH LAST 256GB VERSION !!!

_____

Downloads :​

Vanilla V13 firmware based version :
20230321 - MD5 (February security patch)
20230330 - MD5 (March security patch)


Vanilla V14 firmware based version :
20230421 - MD5 (April security patch / Aghisna kernel R13 / KernelSU)
20230509 - MD5 (May security patch / Aghisna kernel R14 / KernelSU)
20230512 - MD5 (May security patch / Vantom Kernel 4.14.314 )

_____

MicroG V13 firmware based version :
20230329 - MD5 (March security patch)
20230407 - MD5 (March security patch)

MicroG V14 firmware based version :
20230421 - MD5 (April security patch / Aghisna kernel R13 / KernelSU)
20230509 - MD5 (May security patch / Aghisna kernel R14 / KernelSU)
20230511 - MD5 (May security patch / Vantom Kernel 4.14.314 )

_____

SafetyNet Pass​

If you want to pass SafetyNet check, you need install Magisk and module SafetyNet-fix

Optionally, you can add a certified fingerprint to your device with the module MagiskHidePropsConf

Check this very well explained post from @minax007


_____

Gcam​

Only default camera from LineageOS is included (aperture), so don't ask to add another one (Leica, Miui, etc...) and install yourself.

You can find good setup for Gcam in the @Laptapper post

You can directly use my config for Gcam LMC R16 and this zip with config XML and library.

_____


Android Security Bulletins

_____

Screenshots​

 

[minax007]

@2spirit

Thank you very much!

I think there are many out there who were looking for this.

Excellent!

I would love to see LineageOS become official.

Please create a pull request if you know how to get it "officialized"

Thanks!

 

[2spirit]

I thinks I can't pull request myself to become official, the device / kernel and vendor sources are not mine.

 

[minax007]

I thinks I can't pull request myself to become official, the device / kernel and vendor sources are not mine.

Hi @Pulkit Agarwal

could you please do a pull request so that your precious work becomes official?

In case you do not want this please approve that someone else (e. g. @2spirit ) forks your code and creates a pull request.

Thanks in advance!

 

[Stan m]

First of all, a pull request is not enough to be official.
Second, the creator of this thread can pull and share on their own. No need to bother the original author, just give them credit.
And lastly, you cannot open a development thread without sharing the entire source code...

 

[minax007]

First of all, a pull request is not enough to be official.
Second, the creator of this thread can pull and share on their own. No need to bother the original author, just give them credit.
And lastly, you cannot open a development thread without sharing the entire source code...

Hi @Stan m

thanks for your response!

Reading your answer I assume that you have knowledge about how we could get LineageOS official.

I would highly appreciate if you would explain what is needed to get it official.

And I would appreciate much more if you would support us on getting it official.

Regarding your last statement I assume that you wanted to point out to the fact that the source code of the signature spoofing patch was not shared by @2spirit , right?

I think that we should continue without signature spoofing as the official LineageOS builds come without.

If I have missed something please advise.

Thanks!

 

[2spirit]

OK, I've add all the sources links

 

[minax007]

OK, I've add all the sources links

Hi @2spirit

thank you!

It seems that LineageOS code review are being made over Gerrit:

How to use Gerrit | LineageOS Wiki

wiki.lineageos.org

The next step would be to submit the code for the review in Gerrit:

https://review.lineageos.org

@Stan m

Is this the right way to get it official?

 

[minax007]

Hi @2spirit

I have tested your build also with the latest Android 13 firmware V14.0.1.0.TKFMIXM and can confirm that it works like a charm:

Xiaomi Firmware Updater

The ultimate script that provides firmware packages for Xiaomi devices.

xiaomifirmwareupdater.com

Via Magisk I have flashed microG, SafetyNetFix ...

All banking apps are working.

Your ROM is an excellent basis for people who care about security and do not want to use spyware like Google Apps.

Thanks for sharing!

Have you found time to check how you can get it official?

 

[2spirit]

New release with March patch applied, see 1st post.


I move the links for the patched version here, I don't update anymore :
- Vanilla version with spoofing patch
20230315 (February patch)
- Spoofing Patch only : From lineageos microg project

 

[amyli8789]

Have you checked this page for how to submit a port?

 

[2spirit]

Via Magisk I have flashed microG, SafetyNetFix ...

All banking apps are working.

Do you use a magisk module for spoofing signature and microg ?

 

[2spirit]

Have you checked this page for how to submit a port?

Yes, I see this page for demand request

 

[minax007]

Do you use a magisk module for spoofing signature and microg ?

HOW TO GET SAFETYNET PASSED WITHOUT GOOGLE APPS (GApps):

This is important to get banking apps working without having Google Apps installed on the phone.
__________________________________________________________________________________________

In case you want to enable signature spoofing on any vanilla ROM (without signature spoofing) just follow this:
__________________________________________________________________________________________

Xposed framework implementation:

GitHub - LSPosed/LSPosed: LSPosed Framework

LSPosed Framework. Contribute to LSPosed/LSPosed development by creating an account on GitHub.

github.com

1. Install Magisk
2. Turn on Zygisk in Magisk app and reboot
3. Install LSPosed in Magisk app
4. Reboot
5. Open LSPosed manager from notification
__________________________________________________________________________________________

Signature Spoofing via FakeGApps:

GitHub - whew-inc/FakeGApps: Signature spoofing for MicroG as an Xposed module

Signature spoofing for MicroG as an Xposed module. Contribute to whew-inc/FakeGApps development by creating an account on GitHub.

github.com

1. Install "app-release.apk"
2. Enable it in LSPosed manager
3. Enable FakeGapps LSPosed manager
4. Reboot
__________________________________________________________________________________________

Install microG, SafetyNet fix and MagiskHidPropsConf modules in Magisk.

GitHub - nift4/microg_installer_revived: Install microG GmsCore, GsfProxy, FakeStore (or Play Store if you want so) and MapsV1 to /system/

Install microG GmsCore, GsfProxy, FakeStore (or Play Store if you want so) and MapsV1 to /system/ - GitHub - nift4/microg_installer_revived: Install microG GmsCore, GsfProxy, FakeStore (or Play Sto...

github.com

GitHub - kdrag0n/safetynet-fix: Google SafetyNet attestation workarounds for Magisk

Google SafetyNet attestation workarounds for Magisk - GitHub - kdrag0n/safetynet-fix: Google SafetyNet attestation workarounds for Magisk

github.com

GitHub - Magisk-Modules-Repo/MagiskHidePropsConf: This tool is now dead...

This tool is now dead... Contribute to Magisk-Modules-Repo/MagiskHidePropsConf development by creating an account on GitHub.

github.com

__________________________________________________________________________________________

Hide Magisk App and install Zygisk in the Magisk settings.

- Activate force Zygisk denial list
- Reboot
__________________________________________________________________________________________

Connect your phone to the internet (e.g. WiFi) and via cable to your PC and start terminal.
Enter the following commands (it could be that you need to confirm "su" via your phone):

adb shell
su
props

Select the following:
1 - Edit device fingerprint
f - Pick a certified fingerprint
25 - Redmi
17 - Redmi Note 10 Pro Global (11)
y(es)
y(es) (Reboot)

__________________________________________________________________________________________

On your phone in the "microG settings" you need to:
- Activate "Google device registration"
- Activate "Cloud messaging"
- Activate "Google SafetyNet"

That's it.

 

[2spirit]

Thanks for this information, no needs to patch the sources now

 

[minax007]

Thanks for this information, no needs to patch the sources now

As there are several steps to follow I think it would help some users if you would still provide a signature spoofed version ... or even better if it would include microG ... so that the users have a "LineageOS with microG" build.

That would be certainly the easiest for people who care about security and want to use banking apps without GApps.

LineageOS for microG

lineage.microg.org

By the way:
In case LineageOS becomes official the "LineageOS for microG" is build automatically by the maintainers I have linked above.

Are you intending to create a pull request, so that LineageOS for the Redmi Note 10 Pro becomes official?

Until it becomes official if would certainly help to have two versions:

1. LineageOS vanilla build
2. LineageOS with microG (= signature spoofed version as you had it before + microG)

 

[2spirit]

I send a email today to LineageOS Team

Now the March patch is included and no needs to update before April patch so perhaps I will try to compile any microg version

 

[minax007]

I send a email today to LineageOS Team

Now the March patch is included and no needs to update before April patch so perhaps I will try to compile any microg version

You are my hero of the day!

Thank you very much!

 

[2spirit]

Do you know if the LineageOS build made by MicroG team pass SafetyNet ?

 

[minax007]

Do you know if the LineageOS build made by MicroG team pass SafetyNet ?

No, it does not out of the box.

It has just microG installed.

But it is much easier to get it pass SafetyNet.

Just install the SafetyNetFix (this is sufficient for some devices ... e. g. dipper = Xiaomi Mi 8):

GitHub - kdrag0n/safetynet-fix: Google SafetyNet attestation workarounds for Magisk

Google SafetyNet attestation workarounds for Magisk - GitHub - kdrag0n/safetynet-fix: Google SafetyNet attestation workarounds for Magisk

github.com

For some devices (e. g. surya = Poco X3 NFC) it could be necessary to install in addition also MagiskHidePropsConf - but this is not needed for all devices as mentioned before:

GitHub - Magisk-Modules-Repo/MagiskHidePropsConf: This tool is now dead...

This tool is now dead... Contribute to Magisk-Modules-Repo/MagiskHidePropsConf development by creating an account on GitHub.

github.com

Signature spoofing is already included in LineageOS with microG.