├── README.md ├── changelog ├── cepheus.html └── poplar.html └── pictures └── iode_20174.png /README.md: -------------------------------------------------------------------------------- 1 | ![alt text](https://gitlab.com/iode/ota/-/raw/master/pictures/iodeos_logo.png) 2 | 3 | # Introduction 4 | 5 | iodéOS is a privacy-focused operating system powered by LineageOS and based on the Android mobile platform. iodéOS aims at protecting the user's privacy with a built-in adblocker and by removing embedded trackers. 6 | 7 | The objectives in the conception of this ROM are threefold: 8 | 9 | 1. To keep the stability and security level of LineageOS, by minimizing the modifications made to the system. Apart the system modifications required by the adblocker, we mainly only added a few useful options commonly found in other custom ROMs, made some cosmetic changes, modified a few default settings to prevent data leaks to Google servers. 10 | 1. To ease a quick adoption of this ROM by new users. We especially target users that are concerned by the protection of their privacy, but are not reluctant to still use inquisitive apps like Google ones. We thus included MicroG as well as a coherent set of default apps, and simplified the initial setup of the system. Particularly, an initialization of MicroG has been made with GCM notifications allowed by default, a privacy-friendly network location provider (DéjàVu) pre-selected, as well as Nominatim Geocoder. 11 | 1. To provide a new and powerful way of blocking ads, malwares, data leaks of all kinds to many intrusive servers. We are developing an analyzer, tightly integrated into the system, that captures all DNS requests and network traffic, as well as a user interface (the iodé app). Compared to some other well-known adblockers, this has the advantages of: 12 | * Avoiding to lock the VPN for that use. You can even use another adblocker that uses VPN technology alongside our blocker. 13 | * Being independent of the kind of DNS server used by the system or set by an independent app: classical DNS on UDP port 53 or any other one, DNS over TLS (DoT), DNS over HTTPS (DoH), ..., as we capture the DNS requests before they are transmitted to the system function that emits the DNS request. What we do not support, is DoH when it is natively built into applications, i.e. when an app communicates directly with a DoH server, without asking name resolution to the system. It would require to decrypt HTTPS packets between such an app and the DoH server, which may create a big security hole. 14 | * Precisely mapping DNS requests and network packets to the Android apps that emitted (or received) them. 15 | * Deciding which apps have a filtered network usage (by default, all apps), and which ones can communicate with blacklisted servers. 16 | 17 | Since its first versions, we added many features to the iodé blocker: several levels of protection, child protection features, fine-grained control over the hosts that should be blocked or authorized, displaying statistics on a map to see the quantity of data exchanged to which countries, clearing statistics... We are actively developing the blocker, and new functionalities will be regularly added. 18 | 19 | Home1 20 | Home 2 21 | Drawer 22 | Preinstalled apps 23 | Blocker home 24 | Report 25 | Stream 26 | Map 27 | App blockings 28 | Blocked 29 | Block host 30 | Details host 31 | 32 | # What's included 33 | 34 | ## Changes in LineageOS to prevent data leaks: 35 | 36 | * Default DNS server: Google's DNS replaced by Quad9's servers in all parts of the system. 37 | * A-GPS: patches to avoid leaking personnal information like IMSI to SUPL server. 38 | * SUPL server: can be disabled by a switch in phone settings. 39 | * Captive portal login: connectivitycheck.gstatic.com replaced by captiveportal.kuketz.de for connectivity check. 40 | * NTP server: change to pool.ntp.org. 41 | * Quick Settings Tiles: sensitive ones require unlocking (disabled by default, can be activated in lock screen security settings). 42 | * Wifi and bluetooth: can be automatically disabled when connection is lost. 43 | 44 | 45 | ## Pre-installed apps: 46 | 47 | We included many useful default apps, but our choice cannot suit everyone; so we added the possibility to remove them. It can be done at the end of the phone setup, or at any time by going to Parameters -> Apps & Notifications -> Preinstalled apps. 48 | 49 | * MicroG core apps: microG Services, microG Companion, GsfProxy. 50 | * App stores : FDroid (with F-Droid Privileged Extension) and Aurora Store. 51 | * Browser: our own fork of Firefox (with Qwant as default search engine, many other ones added, telemetry disabled, parts of telemetry code removed) instead of Lineage’s default browser Jelly. 52 | * SMS: QKSMS instead of Lineage's default SMS app. 53 | * Email: p≡p (Pretty Easy Privacy). 54 | * Maps/navigation: Magic Earth GPS & Navigation (the only one free but not open source). 55 | * Keyboard: HeliBoard instead of AOSP keyboard. 56 | * PDF: PdfViewerPlus. 57 | * Personnal notes: Carnet. 58 | * {Ad/Malware/Data leak}-blocker: iodé. 59 | * News: to keep users informed about our developments, as well as a FAQ. 60 | * Meteo: Breezy Weather. 61 | 62 | # How to flash Shift (SHIFT6mq) 63 | 64 | ## SHIFT6mq 65 | 66 | 1. Unlock OEM in developer settings 67 | 1. Activate adb and type ```adb reboot bootloader```, or press ```Power + Vol+``` 68 | 1. Type ```fastboot flashing unlock``` 69 | 1. Download fastboot package for your device (latest file ```iode-[...]-fastboot.zip```): 70 | * [package for SHIFT6mq](https://gitlab.iode.tech/ota/release/-/tree/master/axolotl) 71 | 1. Unzip fastboot package and execute ```flash-all.sh``` (linux) or ```flash-all.bat``` (windows) 72 | 1. At the end, accept or decline bootloader relocking; if yes, boot, and in developer settings uncheck "OEM unlocking" 73 | 74 | # How to flash OnePlus (OnePlus 9, OnePlus 9 Pro) 75 | 76 | ## OnePlus 9 / 9 Pro 77 | 78 | 1. Unlock OEM in developer settings 79 | 1. Activate adb and type ```adb reboot bootloader```, or press ```Power + Vol-``` 80 | 1. Type ```fastboot flashing unlock``` 81 | 1. Download fastboot package for your device (latest file ```iode-[...]-fastboot.zip```): 82 | * [package for OnePlus 9](https://gitlab.iode.tech/ota/release/-/tree/master/lemonade) 83 | * [package for OnePlus 9 Pro](https://gitlab.iode.tech/ota/release/-/tree/master/lemonadep) 84 | 1. Unzip fastboot package and execute ```flash-all.sh``` (linux) or ```flash-all.bat``` (windows) 85 | 86 | # How to flash Google (Pixel 3, 4, 5, 6, 6a, 6 Pro, 7, 7a, 7 Pro, 8, 8 Pro) 87 | 88 | 1. Unlock OEM in developer settings 89 | 1. Activate adb and type ```adb reboot bootloader```, or press ```Power + Vol-``` 90 | 1. Type ```fastboot flashing unlock``` 91 | 1. Download fastboot package for your device (latest file ```iode-[...]-fastboot.zip```): 92 | * [package for Pixel 3](https://gitlab.iode.tech/ota/release/-/tree/master/blueline) 93 | * [package for Pixel 4](https://gitlab.iode.tech/ota/release/-/tree/master/flame) 94 | * [package for Pixel 5](https://gitlab.iode.tech/ota/release/-/tree/master/redfin) 95 | * [package for Pixel 6](https://gitlab.iode.tech/ota/release/-/tree/master/oriole) 96 | * [package for Pixel 6a](https://gitlab.iode.tech/ota/release/-/tree/master/bluejay) 97 | * [package for Pixel 6 Pro](https://gitlab.iode.tech/ota/release/-/tree/master/raven) 98 | * [package for Pixel 7](https://gitlab.iode.tech/ota/release/-/tree/master/panther) 99 | * [package for Pixel 7a](https://gitlab.iode.tech/ota/release/-/tree/master/lynx) 100 | * [package for Pixel 7 Pro](https://gitlab.iode.tech/ota/release/-/tree/master/cheetah) 101 | * [package for Pixel 8](https://gitlab.iode.tech/ota/release/-/tree/master/shiba) 102 | * [package for Pixel 8 Pro](https://gitlab.iode.tech/ota/release/-/tree/master/husky) 103 | 1. Unzip fastboot package and execute ```flash-all.sh``` (linux) or ```flash-all.bat``` (windows) 104 | 1. At the end, accept or decline bootloader relocking; if yes, boot, and in developer settings uncheck "OEM unlocking" 105 | 106 | # How to flash Fairphone (FP3, FP3+, FP4, FP5) 107 | 108 | ## FP3, FP3+ 109 | 110 | 1. Unlock your phone by following the instructions from [Fairphone website](https://www.fairphone.com/en/bootloader-unlocking-code-for-fairphone/) 111 | 1. Activate adb and type ```adb reboot bootloader```, or press ```Vol-``` and plug phone while it's shut down 112 | 1. Type ```fastboot oem unlock``` 113 | 1. Download fastboot package for your device (latest file ```iode-[...]-fastboot.zip```): 114 | * [package for FP3/FP3+](https://gitlab.iode.tech/ota/release/-/tree/master/FP3) 115 | 1. Unzip fastboot package and execute ```flash-all.sh``` (linux) or ```flash-all.bat``` (windows) 116 | 1. (optional) ```fastboot oem lock``` 117 | 1. (optional) Boot, and in developer settings uncheck "OEM unlocking" 118 | 119 | ## FP4, FP5 120 | 121 | 1. Unlock your phone by following the instructions from [Fairphone website](https://www.fairphone.com/en/bootloader-unlocking-code-for-fairphone/), but **do not unlock critical partitions** (do not execute 'fastboot flashing unlock_critical'). 122 | 1. Activate adb and type ```adb reboot bootloader```, or press ```Vol-``` and plug phone while it's shut down 123 | 1. Type ```fastboot flashing unlock``` 124 | 1. Execute ```fastboot flashing get_unlock_ability```. It it returns ```get_unlock_ability: 0```: do not relock the bootloader (last step) 125 | 1. Download fastboot package for your device (latest file ```iode-[...]-fastboot.zip```): 126 | * [package for FP4](https://gitlab.iode.tech/ota/release/-/tree/master/FP4) 127 | * [package for FP5](https://gitlab.iode.tech/ota/release/-/tree/master/FP5) 128 | 1. Unzip fastboot package and execute ```flash-all.sh``` (linux) or ```flash-all.bat``` (windows) 129 | 1. At the end, accept or decline bootloader relocking; if yes, boot, and in developer settings uncheck "OEM unlocking" 130 | 131 | # How to flash Teracube 132 | 133 | ## 2E 2022 batch (emerald) 134 | 135 | 1. Unlock OEM in developer settings 136 | 1. Activate adb and type ```adb reboot bootloader```, or press ```Power + Vol+``` 137 | 1. Type ```adb reboot bootloader``` 138 | 1. Type ```fastboot flashing unlock``` 139 | 1. Download fastboot package for your device (latest file iode-[...]-fastboot.zip): 140 | * [package for 2E](https://github.com/iodeOS/ota/releases/tag/v2-emerald) 141 | 1. Unzip fastboot package and execute ```flash-all.sh``` (linux) or ```flash-all.bat``` (windows) 142 | 143 | ## 2E 2021 batch 144 | 145 | 1. Unlock OEM in developer settings 146 | 1. Activate adb and type ```adb reboot bootloader```, or press ```Power + Vol+``` 147 | 1. Type ```fastboot flashing unlock``` 148 | 1. Download fastboot package for your device (latest file ```iode-[...]-fastboot.zip```): 149 | * [package for 2E](https://github.com/iodeOS/ota/releases/tag/v2-2e) 150 | 1. Unzip fastboot package and execute ```flash-all.sh``` (linux) or ```flash-all.bat``` (windows) 151 | 152 | 153 | 154 | # How to flash Xiaomi (Mi 9, Mi 10 LITE, Mi 10T (Pro)/Redmi K30S Ultra) 155 | 156 | 1. Unlock your phone by following the instructions from [Xiaomi website](https://en.miui.com/unlock/download_en.html) 157 | 1. Activate adb and type```adb reboot bootloader```, or press ```Power + Vol-``` 158 | 1. Download fastboot package for your device (latest file ```iode-[...]-fastboot.zip```): 159 | * [package for Mi 9](https://gitlab.iode.tech/ota/release/-/tree/master/cepheus) 160 | * [package for Mi 10 lite](https://gitlab.iode.tech/ota/release/-/tree/master/monet) 161 | * [package for Mi 10T](https://gitlab.iode.tech/ota/release/-/tree/master/apollon) 162 | 1. Unzip fastboot package and execute flash-all.sh (linux) or flash-all.bat (windows) 163 | 164 | # How to flash Samsung 165 | 166 | ## A5 (2017), A7 (2017) 167 | 168 | 1. Update the stock firmware to the latest 169 | 1. Unlock OEM in developer settings 170 | 1. Activate adb and type ```adb reboot bootloader```, or press ```Power + vol- + Home``` 171 | 1. Flash [recovery for A5](https://github.com/iodeOS/ota/releases/tag/v2-a5y17lte) | [recovery for A7](https://github.com/iodeOS/ota/releases/tag/v2-a7y17lte) with command: ```heimdall flash --RECOVERY .img``` 172 | 1. As soon as the flash ends, quickly press power/vol+/home buttons altogether to directly reboot to recovery 173 | 1. From recovery => Factory reset => Format Data/factory reset 174 | 1. From recovery => Advanced => ADB Sideload: swipe to start sideload, and issue ```adb sideload ``` ([iodéOS for A5](https://github.com/iodeOS/ota/releases/tag/v2-a5y17lte) | [iodéOS for A7](https://github.com/iodeOS/ota/releases/tag/v2-a7y17lte)) 175 | 176 | ## S9, S9+, Note9 177 | 178 | 1. Update the stock firmware to the latest 179 | 1. Unlock OEM in developer settings 180 | 1. At reboot, follow the setup wizard, make sure to be connected to the internet, then activate developer options 181 | 1. Activate adb and type ```adb reboot bootloader```, or press ```Power + Vol- + Bixby``` 182 | 1. Flash [recovery for S9](https://gitlab.iode.tech/ota/release/-/tree/master/starlte) | [recovery for S9+](https://gitlab.iode.tech/ota/release/-/tree/master/star2lte) | [recovery for Note9](https://gitlab.iode.tech/ota/release/-/tree/master/crownlte) with command: ```heimdall flash --RECOVERY .img``` 183 | 1. As soon as the flash ends, quickly press ```Power + Vol+ + Bixby``` buttons altogether to directly reboot to recovery 184 | 1. From recovery => Factory reset => Format Data/factory reset 185 | 1. From recovery => Apply update => Apply from ADB => ```adb sideload ``` ([iodéOS for S9](https://gitlab.iode.tech/ota/release/-/tree/master/starlte) | [iodéOS for S9+](https://gitlab.iode.tech/ota/release/-/tree/master/star2lte) | [iodéOS for Note9](https://gitlab.iode.tech/ota/release/-/tree/master/crownlte)) 186 | 187 | ## S10, S10e, S10+ 188 | 189 | 1. Unlock OEM in developer settings 190 | 1. Activate adb and type ```adb reboot bootloader```, or shut down phone and press ```Vol- + Bixby``` while plugging to computer 191 | 1. In Download Mode (DL), long press ```Vol+``` and unlock bootloader 192 | 1. Reboot to DL mode & flash [recovery for S10](https://gitlab.iode.tech/ota/release/-/tree/master/beyond1lte) | [recovery for S10e](https://gitlab.iode.tech/ota/release/-/tree/master/beyond0lte) | [recovery for S10+](https://gitlab.iode.tech/ota/release/-/tree/master/beyond2lte) with command: ```heimdall flash --RECOVERY .img``` 193 | 1. As soon as the flash of recovery ends, quickly press ```Power + Vol+ + Bixby``` buttons altogether to directly reboot to recovery 194 | 1. From recovery => Factory reset => Format Data/factory reset 195 | 1. From recovery => Apply update => Apply from ADB => ```adb sideload ``` ([iodéOS for S10](https://gitlab.iode.tech/ota/release/-/tree/master/beyond1lte) | [iodéOS for S10e](https://gitlab.iode.tech/ota/release/-/tree/master/beyond0lte) | [iodéOS for S10+](https://gitlab.iode.tech/ota/release/-/tree/master/beyond2lte)) 196 | 197 | ## Note 10, Note 10+, Note 10+ 5G 198 | 199 | 1. Unlock OEM in developer settings 200 | 1. Activate adb and type ```adb reboot bootloader```, or shut down phone and press ```Vol+ + Vol-``` while plugging to computer 201 | 1. In Download Mode (DL), long press ```Vol+``` and unlock bootloader 202 | 1. Reboot to DL mode & flash [recovery for Note 10](https://gitlab.iode.tech/ota/release/-/tree/master/d1) | [recovery for Note 10+](https://gitlab.iode.tech/ota/release/-/tree/master/d2s) | [recovery for Note 10+ 5G](https://gitlab.iode.tech/ota/release/-/tree/master/d2x) with command: ```heimdall flash --RECOVERY .img``` 203 | 1. As soon as the flash ends, quickly press ```Power + Vol+``` buttons altogether to directly reboot to recovery 204 | 1. From recovery => Factory reset => Format Data/factory reset 205 | 1. From recovery => Apply update => Apply from ADB => ```adb sideload ``` ([iodéOS for Note 10](https://gitlab.iode.tech/ota/release/-/tree/master/d1) | [iodéOS for Note 10+](https://gitlab.iode.tech/ota/release/-/tree/master/d2s) | [iodéOS for Note 10+ 5G](https://gitlab.iode.tech/ota/release/-/tree/master/d2x)) 206 | 207 | ## A52s 5G, Galaxy Tab S5e (LTE/Wi-Fi) 208 | 1. Update the stock firmware to the latest 209 | 1. Unlock OEM in developer settings 210 | 1. Activate adb and type ```adb reboot bootloader```, or shut down phone and press ```Vol+ + Vol-``` while plugging to computer 211 | 1. In Download Mode (DL), long press ```Vol+``` and unlock bootloader 212 | 1. Download the latest ```iode-[...]-vbmeta.img``` and ```iode-[...]-recovery.img``` from ([iodéOS for A52s 5G](https://gitlab.iode.tech/ota/release/-/tree/master/a52sxq) | [iodéOS for Tab S5e (LTE)](https://gitlab.iode.tech/ota/release/-/tree/master/gts4lv) | [iodéOS for Tab S5e (Wi-Fi)](https://gitlab.iode.tech/ota/release/-/tree/master/gts4lvwifi)) and rename them as ```vbmeta.img``` and ```recovery.img```. Create tar files from them: ```tar cvf vbmeta.tar vbmeta.img``` and ```tar cvf recovery.tar recovery.img``` 213 | 1. Reboot to DL mode, and flash with Odin ```vbmeta.tar``` (select it in AP) and then ```recovery.tar``` 214 | 1. As soon as the flash ends, quickly press ```Power + Vol+``` buttons altogether to directly reboot to recovery 215 | 1. From recovery => Factory reset => Format Data/factory reset 216 | 1. From recovery => Apply update => Apply from ADB => ```adb sideload ``` ([iodéOS for A52s 5G](https://gitlab.iode.tech/ota/release/-/tree/master/a52sxq) | [iodéOS for Tab S5e (LTE)](https://gitlab.iode.tech/ota/release/-/tree/master/gts4lv) | [iodéOS for Tab S5e (Wi-Fi)](https://gitlab.iode.tech/ota/release/-/tree/master/gts4lvwifi)) 217 | 218 | # How to flash Sony Xperia (XA2, XZ1, XZ2, XZ3) 219 | 220 | 1. Update the stock firmware to the latest 221 | 1. Get your unlock code from [Sony website](https://developer.sony.com/develop/open-devices/get-started/unlock-bootloader) 222 | 1. Unlock bootloader: connect to a wifi in order to grey-out "Unlock OEM" in developer settings 223 | 1. Activate adb and type ```adb reboot bootloader```, or press ```Vol+``` and plug phone while it's shut down 224 | 1. Type ```fastboot oem unlock 0x<unlock code>``` 225 | 1. Download fastboot package for your device (latest file ```iode-[...]-fastboot.zip```): 226 | * [package for XA2](https://gitlab.iode.tech/ota/release/-/tree/master/pioneer) 227 | * [package for XZ1](https://gitlab.iode.tech/ota/release/-/tree/master/poplar) 228 | * [package for XZ2](https://gitlab.iode.tech/ota/release/-/tree/master/akari) 229 | * [package for XZ3](https://gitlab.iode.tech/ota/release/-/tree/master/akatsuki) 230 | 1. Unzip fastboot package and execute ```flash-all.sh``` (linux) or ```flash-all.bat``` (windows) 231 | -------------------------------------------------------------------------------- /changelog/cepheus.html: -------------------------------------------------------------------------------- 1 | iodéOS for Mi9 (cepheus) changelog 2 | ================================== 3 | 4 | 25/07/2020: 5 | - Synced lineage (security patch r40) and device tree 6 | - Minor UI fixes and improvements in iodé adblocker 7 | - Updated blocklist 8 | - Updated preinstalled apps 9 | - Improved bootanimation 10 | -------------------------------------------------------------------------------- /changelog/poplar.html: -------------------------------------------------------------------------------- 1 | hello world 2 | -------------------------------------------------------------------------------- /pictures/iode_20174.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/iodeOS/ota/7a69deff2a0ae915a08723f6bda5a7513ecbadac/pictures/iode_20174.png --------------------------------------------------------------------------------