yashsingh1/xdaforums huggingface dataset:
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
https://glassrom.pw/signed-ota_update14.zip

Merged all the latest caf tags in the kernel. There are too many to list so have a look at my github

Linux 4.14.140

February security patch

Fixed vendor security patch date

All upstream lineage changes

Fixed a bug where in display fingerprint sensor would listen for a fingerprint even when the FOD circle wasn't visible (credit: luk1337)

New FOD circle icon (upstream lineage)

This update implements all glassrom features:

Lineage analytics are off by default

Deny new USB is enabled by default

Signature spoofing support is present (microg)*

Microg location provider doesn't need to reside in /system

Bromite system webview can now be installed**

Hardened memory allocator has been ported

Updateable apexes are disabled

Doze and app standby are enabled even if you don't have google apps or microg

New installations will pad filenames to 64-bit. Backward compatibility is ensured and users who are upgrading will only have 8/16-bit padding. Format data if you want to switch to the new method. This is not required however

* https://microg.org/

** https://glassrom.pw/bromite.apk

Install this as an update to the webview. No root is required

PS: if you encounter an error while flashing a few zips you may have to nandroid the system partition in twrp and restore it back. Make sure your twrp can actually backup and restore nandroid backups of system before you try this. You might have to do this especially if you want to flash gapps

Remember that if even if the default settings have changed they will only change for users who are clean flashing. Glassrom upgrades maintain backward compatibility and will not touch your settings during a system update. The only exception is deny_new_usb which resides in the kernel

Minimum firmware required is the first android Q open beta firmware. Recommended firmware is 10.0.3

Feedback required: (India only) airtel has launched a WiFi calling service. Report back if it works

(USA only) report back if Verizon visible works

Known issues:

The hardening patches might make the 6gb op7pro barely usable since now the base system uses twice the amount of ram after boot

Expanded desktop still doesn't work

The stock recovery is currently useless

As always, dirty flash is fine

Glassrom has much better garbage collection and most of the dalvik-cache resides in /system and updates with the ROM so wiping it is meaningless

Glassrom will bump the avb rollback index every release. The current value is 1
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
Another serious android vulnerability: https://www.reddit.com/r/netsec/comments/ezxgu6/critical_bluetooth_vulnerability_in_android/

Too bad, the last released build already has the fix so you're safe if you upgrade
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
https://glassrom.pw/signed-ota_update.zip

Read this carefully

This update is NOT backwards compatible with update14. It uses a new encryption method known as wrappedkey. Flashing it onto update 14 will cause it to boot to recovery and ask for a factory reset

In the current encryption model vold and the kernel know the decryption key. In the wrappedkey method they instead hold an encrypted key which is decrypted by hardware. This is supposed to provide better security as keys are never stored in clear in the operating system

Wrappedkey and the old encryption method are not compatible. Flashing this will require a format of the userdata partition

TWRP cannot decrypt wrappedkey encryption

From now on 2 builds will be released. One with wrappedkey support and the other without. Make sure you flash the build that corresponds to your setup. If you flash the wrong zip you won't lose data but you'll see a message at boot telling you that you flashed the wrong zip and you might have to switch slots

This and all future glassrom releases will include the checkpoint feature. The checkpoint feature can be used to downgrade glassrom if an upgrade goes wrong

How to use it?

1) First install a glassrom update and boot

2) test that all your apps work and all data is okay

3) reboot the device to exit checkpoint mode

4) if there is any error like broken system/apps go to the bootloader, switch slot and report the bug here

If you do not reboot you may lose any data you write to disk on that first boot after the update

Some users may say this is too complicated but many of us here have lost data during system updates and then had to look through our PCs for backups and this really gives you an extra layer of security while using glassrom

The question lies in: is it better to spend 5 minutes checking all apps after an update and rebooting a second time or crossing your fingers every time you flash an update and if it goes wrong spending hours to restore your data? Clearly this feature is useful for anyone with important data

How to install this update?

Flash it in twrp and reboot. On boot recovery will ask you to format data

If you want f2fs flash the ROM in twrp and format data in twrp first using the format button (because twrp sometimes forgets to erase metadata) and then go to advanced wipe and switch data over to f2fs

If you don't want to format:

Read above. Separate builds will be released for the old encryption format. Only flash this build if you want to use the new encryption format. There are no other differences between this and update14 otherwise
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
New build for wrappedkey only

There's a bug with the non wrappedkey build which is currently being looked into

Download here: https://glassrom.pw/op7pro_wrappedkey_glassrom.zip

Changes:

Hardened malloc now uses cfi

Memset calls are no longer optimised by the compiler

Apex packages updates are disabled

Optimised for oneplus 7 pro's CPU

Verifying builds: https://github.com/GlassROM/glassrom-verification/commit/5a6b61d332854c76d4cd90c9c9a3feb93a3b5516
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] Tekkamen77:
Fantastic rom thanks
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
Honestly I'm not really happy with the current state of builds at all

There are a couple of bugs I've been wanting to fix

The shipped webview is outdated. While lineage plans to update it their update webview doesn't include CFI

Expanded desktop is just a placeholder in the settings app. I've written a basic app to readd the functionality but it isn't shipped with glassrom yet

The stock recovery shipped on Q cannot flash anything right now

The expanded desktop app I wrote looks pretty bad. I'm not a UI designer and I have no idea how you'd do that. Here's a screenshot:

I need more testers to get everything working. If you're willing to help test stuff please let me know on the telegram group. The UDC feature implemented in the last update will guarantee there is no data loss during testing
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] Tekkamen77:
hello if you want I can help you as a beta tester telegran I do not use it for other reasons however I am available
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
I'll be taking a break from the op7pro for a while because I need to fix stuff on my other devices

Don't worry, I'll be releasing a new build soon enough
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] Tekkamen77:
I'm sorry I hope you get your hiild back with op7 pro soon
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] aeppacher:
Can I ask why you say this?
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
New build is out

Downloads:

Wrappedkey: https://glassrom.pw/op7pro_wrappedkey_glassrom.zip

Legacy: https://glassrom.pw/op7pro_glassrom.zip

Verification: https://github.com/GlassROM/glassrom-verification/commit/d9780bfff0e81711ca59c908ddf9a4988e157e97

Changes:

Cleaned up some oneplus changes

DRM has been removed (as per glassrom charter changes)

USB-OTG devices can now be used as internal storage

Fixed broken exfat formatting for OTG

Trust HAL is now built. Deny new USB options are exposed in trust settings

Bromite and vanadium webviews are available. After this update you can pick from them in developer options. Bromite uses the legacy implementation while vanadium uses the new trichrome implementation (browser not included, only jelly)

The music app is back

Fixed HDR and wide color gamut

Fixed a bug where loading cyngn.com in Firefox would trigger a kernel panic. Thanks to arter97

Sorry, I didn't have time to upstream the kernel or look at march security patches. That will have to wait

As usual. Be careful of the checkpoint feature

Known bugs:

This update changed permissions in /data/dalvik-cache and trying to reset them fails at boot. In twrp file manager delete /data/cache and /data/dalvik-cache manually. Not doing so will cause it to be stuck on the bootanimation. I'm looking into this but I'm not sure what is causing it. What I know is that the system tries to reset permissions on this path and fails and this causes many HALs to die

This will work even if you use wrappedkey encryption and twrp can't decrypt

If twrp throws an "unable to mount data" error then just revert back to your previous slot, boot android, switch again to the update slot and then twrp should be able to mount it

Next build: probably support for booting off locked bootloaders. No guarantees as the recovery isn't complete yet
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
Glassrom is down. Cause is unknown. I am looking into it

For now the download links won't work. It should be fixed very soon
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
Okay the problem is really huge and will need a while to fix

I'm really sorry about that
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] Tekkamen77:
Link down
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
Guys due to the pandemic we're having too many issues and can't get the server up

I'm switching over to github releases. I'll send download links soon

Sorry about being down for such a long time
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
Here you go

https://github.com/GlassROM/glassrom-landing/releases

Please give it a while to finish uploading
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
Has anybody tried locking their bootloader yet

How did it go?
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
Guys the experimental build warning in the changelog is just a typo. It is a release build

Please ignore that line
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] ZoiraP:
I have locked boot loader successfully. Can use Google Pay and Bank apps. Thanks ^^
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
Hi that's really strange. I do not remember shipping google apps so can you tell me the exact steps you followed?
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
new testing build is out https://github.com/GlassROM/glassrom-landing/releases/tag/20200403-guacamole

please test it and let me know
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
New release build: https://github.com/GlassROM/glassrom-landing/releases/tag/20200420-guacamole
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
https://github.com/GlassROM/glassrom-landing/releases/tag/20200425-guacamole

New update

Flash signed-ota_update_patch.zip for an incremental ota

What is exec spawning? -> https://grapheneos.org/usage#exec-spawning

THIS IS A TESTING BUILD
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] Tekkamen77:
Great
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
New release build https://github.com/GlassROM/glassrom-landing/releases/tag/20200430-guacamole
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
New release build, again

https://github.com/GlassROM/glassrom-landing/releases/tag/20200502-guacamole
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
I already have a build with 4.14.178 kernel and latest OOS blobs. Need to test a little more and will release after that

Glassrom is in no way affected by the lineageos break-in that happened today
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
Some issues with the build server's power supply are present. They are being fixed. The build should be uploaded by tonight on github and telegram
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] punit1708:
Anybody please help me out for flash this ROM build?

I am rooted with latest twrp installed and decrypted and on custom ROM

What should be steps for flash this ROM without loosing data?

My thinking as per below:

Flash OOS+DM+twrp+DM

Then reboot to twrp and flash same as above

Reboot to twrp and flash glass+DM+twrp+DM

Reboot to twrp and flash gapps +magisk+DM and rebbot to system

Its is OK??I don't want to loose may data so asked..thanks In advance
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
I've mostly been too lazy to write a proper opening post it seems. Sorry about that. I'll write a proper one soon

TWRP cannot be installed to the ramdisk on glassron. The hardened kernel doesn't allow setting selinux to permissive and this causes twrp to fail boot

I do not think you need to flash DM those many times. After flashing the ROM go back to bootloader, use fastboot boot to boot twrp and flash it just once

Magisk on glassrom has only been tested without magisk bide. If you enable magisk hide make sure your issues are not caused by magisk hide itself

As for gapps I don't know if the installer works. The only reason I don't have a gapps build is that nobody has really asked me to build one for the op7pro and I personally don't use them

As for your data, it is always good to have a backup before you flash a new ROM
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
New release https://github.com/GlassROM/glassrom-landing/releases/tag/20200505-guacamole
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
You can also try the fastboot images

Remember that fastboot likes to use ram for flashing so this might not be a great method unless the computer flashing has enough ram

Example:

fastboot update fastboot-image-full.zip

Add a -w if you want to wipe user data or you can format from the recovery as needed
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
May security patch is here https://github.com/GlassROM/glassrom-landing/releases/tag/20200506-guacamole
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
[MENTION=7301552]punit1708[/MENTION] are you still stuck? Need help?
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] Sachi315:
So not that I'm against Lineage Recovery, but if the kernel is disabling selinux entirely then theoritically I can use a different kernel and it should work right? Correct me if I am wrong but I'm assuming if I did that I would lose all the tweaks that you had done in your kernel for the ROM. Unless it's all done with scripts on the first boot as your description does say first boot takes a bit to load.
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] punit1708:
Thanks for your concern and care...but due to out of station not tried yet..when come back to my place will take your help..thanks once again
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
The kernel is disabling selinux

development

features

Development = permissive selinux

In other words the kernel only has the enforcing mode compiled in

Booting android with selinux disabled is not possible

There are no such scripts. The first boot takes time because of the reoptimisation step every ROM does but is a lot more aggressive on glassrom
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] insaneparnoid:
I m trying to dirty flash, but i guess dirty flash is not directly possible via lineage os recovery or it is possible??
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
If you're having problems I just came with a quick solution

Install the app below as an update to the system updater on glassrom and just check for updates

The latest version will show up which you can install directly from the updater
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] insaneparnoid:
I followed the steps but it searches for lineage os and not for glass rom, also i tried to install OTA but i gave an error "install error" in notification
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
You can only install an incremental OTA if you're on the previous release and are running a fully unmodified system. If you modify the system in any way you need to install the full OTA (the 800 mb one)

Also I just haven't edited the string to read glassrom. it's not really searching for lineageos
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] musicman5844:
Question why in the world would you create fastboot builds that need flashing via computer instead of builds that can be flashed via twrp . Since there is a perfect twrp available
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] musicman5844:
Lol
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
I will reply to you privately
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] strelokcyka:
because lazy developer who doesnt actually care about their rom project.
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
Thanks for the feedback! I'd like to hear more from you. Please let glassrom know how you feel here https://bit.ly/2SSHITM

Have a nice day!
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] charlieforks:
Thank you for sharing your personal development. If I may, a few questions about the builds (from a layman):

F2Fs rapid GC, is it not working properly, or just not necessary?

Does offering two builds mean you changed your mind about TWRP?

Have you heard of Maru OS? Also built from Lineage and runs Debian alongside Android with a shared kernel. If one was to incorporate it into your build, most importantly, would that be okay with you and would you advise against it for any security or privacy related reasons? I ask because those are the issues that brought me here, but it's such a shame to not use this phone's considerable hardware to its full potential.

Thanks again!
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
Glassrom does f2fs GC when you install an OTA from the system updater

You should be able to call the script yourself with root. It's located here

/vendor/bin/checkpoint_gc

To install an OTA from the system updater just check the last few messages and you'll see an updater that downloads from github releases

If you want to use the stock updater that one looks for a response json at exactly this URL

http://127.0.0.1:8001/updates.json

You can put a response file by running nginx or caddy locally on your phone. The updater will reject (and silently delete without any confirmation) anything that isn't signed with the system's key so don't try to flash anything other than glassrom

Obviously, here's a sample json response file:

{
"response": [
{
"datetime": 9999999999,
"filename": "a.zip",
"id": "60c2685e4dd282djxjxjf85284bf76cba7d51e438",
"romtype": "nightly",
"size": 557262,
"url": "http://127.0.0.1:8001/a.zip",
"version": "17.1"
}
]
}

Assuming the json is in the same directory as caddy 2 is as an example use this in termux or something similar

./caddy file-server -listen 127.0.0.1:8001

If you're using nginx you probably can figure this out yourself as nginx is arguably easier

Datetime is the Unix timestamp of the update build date at exactly 23:59:59 but it can be any number greater than the current timestamp

Filename can be anything random, you can just leave the current value and the updater will handle duplicates for you

id is just a random string but you must change it to something random every time you make even the slightest change to the file

Romtype is always nightly

Size is the size of the update in bytes. It need not be accurate from what I know as it's only used to show a download size before actually downloading. Use wc -c to find this out

Url is where the ROM download is hosted

Version is the lineageos version

Yes I've heard of maru OS and if somebody wants to try their hand at it they're more than welcome to. I do feel it's a bit much since phones really don't have the same power as a desktop even today but I'd be interested in knowing what happens

F2fs GC also runs during idle maintenance (idle maintenance starts when your phone is idle on a charger and fully charged for quite a while)

The official method to really GC everything will remain to be just installing an update from the system updater

I no longer offer a non wrappedkey build because my actual build server died and I'm currently on a friend's. I don't have enough resources to handle 2 different builds at this point especially with this pandemic going around

Do not call the script when in checkpoint mode. It will just get stuck and do nothing for 1 hour before giving up. This also means that if you're using a chain of incremental OTAs to update you need to reboot twice after updating before you can install the next one. Ext4 has no such requirement
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
New update is here

https://github.com/GlassROM/glassrom-landing/releases/tag/20200515-guacamole
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] hedgehogmd:
Thank you for all your hard work and time rom is running great :).

what is the best way to get gapps installed on this rom ?
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
I'm working on a custom solution. Will inform when done
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] Tekkamen77:
can you implement gapps on your next build?
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] hedgehogmd:
Thank You !!!!!:D
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
No

It takes hours to generate a single diff against gapps. Besides the project is for those who don't want to use them in the first place
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
Hi do you happen to be on telegram by any chance? I have the file ready but wouldn't want to upload it publicly
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] hedgehogmd:
yes i am
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] charlieforks:
Thanks for being so thorough in your explanation. I think it's great that there's ROM available for the OP7P that has a Linux hardened kernel and Vanadium (saw the repository on GitHub, nice!)

I've done my fair share of customizing, but only recently have security and privacy become the priority, as embarrassing as that is to say.

Re: Maru...I think you'd be pleasantly surprised with the performance! I had it running on an HTC 10 (SD820, 4gb RAM) and while Debian Jessie wasn't sexy, it certainly was snappy.

Thanks again. Great stuff.
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
You should start by looking at the kernel configs. Open the kernel source and you'll see a last_generated_release_config. You'll have to start porting maru changes from another reference kernel

Use the config as follows:

cp last_generated_release_config .config
vim .config

Run make to test and then just make savedefconfig and copy the generated config to arch/arm64/configs/[vendor/]

Remove glassrom's lockdown feature from the config. It prevents certain system calls that may be needed by maru

Try to port the rest of maru changes after that
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
New release https://github.com/GlassROM/glassrom-landing/releases/tag/20200521-guacamole
[OnePlus 7 Pro ROMs, Kernels, Recoveries, & Other D] anupritaisno1:
New release: https://github.com/GlassROM/glassrom-landing/releases/tag/20200605-guacamole

I will be taking a break from op7pro for a while. Expect no more updates until the next security patch