yashsingh1/xdaforums huggingface dataset:
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] Azev:
I use this rom from the start and i have not flashed the 02 version. I can tell you the first version was already a stable, robust and daily-driver rom. You have made an excellent work on this.
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] RayfG:
I did flash version 02. Works like a charm..
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] Azev:
I will do it later this day.
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] RayfG:
Well I tested this behavier with my wifes Phone. exactly the same. Perhaps I missunderstood how the iptables Blockscript is working....
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] MSe1969:
hmmm... As indicated, it works perfectly on my device. The block script blocks any connection to Facebook and it blocks, except for an exception list of specific apps, amongst them the microG GmsCore, all connections to Google.

If you would like to have a look yourself, look here:

android_vendor_lineage/z_iptables/z_iptables.sh at lin-17.1-microG · lin17-microG/android_vendor_lineage

Contribute to lin17-microG/android_vendor_lineage development by creating an account on GitHub.

github.com

Just to make sure:

- You're not messing around with "Magisk hide" and the microG apps

- You haven't installed any Magisk modules

- You haven't manually edited the script on the device

- You haven't installed AfWall+ on your device

- You haven't configured and activated any VPN

Correct?
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] RayfG:
The difference between my phone and my wifes phone is, that i have netguard wit vpn installed.

But the behavier is the same.

Yes i got magisk, but i did not install any modules.

No AfWall+

No Editing of Iptables

no magisk hide.

I' l l work on this.
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] MSe1969:
Could you please install the linked "push notification tester" app from one of my previous posts, activate the block script and perform the test? Please tell me then, where it fails or hangs, or whether it works OK.
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] RayfG:
This is what i get.
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] RayfG:
OK, my wifes Phone gets it . Must be a matter of Netguards vpn. Do you know how to deconflict that matter?

THY
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] MSe1969:
OK, thanks - have you blocked any system apps in the firewall?

Also, in order to start isolating the issue, could you please repeat the test

with Netguard disabled?
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] RayfG:
With Netguard disabled it works, no prob

no system apps blocked
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] MSe1969:
OK, we have now isolated the issue being related to NetGuard. So two aspects to look at:

1. What is the reason for you to use NetGuard?

This ROM provides

- A built-in firewall to block internet access per app, distinct by mobile connection, WiFi and VPN

- A hosts file blocking many ad-servers (monthly updated using AdAway's filter lists)

- The before-mentioned iptables block script

Which functionality of NetGuard is still necessary for you?

For the time being, you have two options:

a. Do not use NetGuard and only take advantage of the ROM's features

b. Use NetGuard, but then do not use the block script and also don't use the built-in firewall

2. Analyzing the issue

- Are there any system apps are blocked in the ROM's firewall and/or NetGuard?

- Can you please connect the phone with enabled NetGuard and enabled bock script via adb, get a root shell and provide me with the output of the command iptables -L ?

EDIT - some technical background:

In fact the firewall uses iptables, same as the block script - NetGuard uses Android's VPN service.

The NetGuard dev. also discourages the simultaneous use of iptables and VPN in his FAQ:

https://github.com/M66B/NetGuard/blob/master/FAQ.md - see question "(30) Can I also run AFWall+ on the same device?"

AFWall+ in fact uses iptables on a rooted device, so you can more or less take the AFWall+ topic also as valid for your issue.
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] HippoMan:
DELETED
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] RayfG:
I Think it makes more sense to use afwall+ instead of netguard. Under netguard i could block special addresses used by some progs. I think i can do this with afwall+ too.

What do you think, does afwall+ affect the integrated firewall or does it work well together?

thy.
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] MSe1969:
If you use AFWall+, I have two important recommendations for you:

1. Don't use the internal firewall - keep all at one place, everything else is a recipe for trouble.

2. I think I mentioned that already, but maybe in another thread (too lazy to look now):

Be extremely careful, if you want to use custom scripts! The Android OS, starting with Oreo, indeed uses its own iptables ruleset, so the examples you may find in the wild often suggest to initially flush everything, which is a very bad idea - unless you enjoy the resulting "flight mode"...

EDIT: Oh, before I forget - never-ever store your Custom script at any "public" place like Internal SD card - the script is executed under permissive root context! And you don't want to open that attack vector to any malicious app. This is something, which weirdly is mentioned nowhere... So if you use a Custom script, store it e.g. into an own directory under /data/data - you need root for that, but you anyhow need root for AFWall.
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] RayfG:
Ok, Thank u for the brief. Last but not least i decided to leave it like it is. No Netguard and integrated Iptables on.

Great discussion about that, Thank u for ur time.

Greetz,

Ray
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] Azev:
For this problem, I have found something. On first launch of KLWP (Kustom Live WallPaper), it conflicts with the app included for theming, after a reboot, all work good. It was again due to me. Sorry for this
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] cowgaR:
Look at this! I don't need to do all this manually and can just flash...few questions though:

any chance of implementing wireguard into the kernel so there's no need to mix&match kernels?

would be great to see the source code (not only kernel) as you mentioned your own microG fork, and not publishing sources (F-Droid, Aurora etc.) yet going for super private hardened ROM is something I am affriad to do atm

is contacts/calendar sync (CardDav/CalDav) working without any issues, say with DAVx⁵?

any new releases coming this weekend?

are you for real? this ROM look way too good and your attitude is also nice. Great work!
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] RayfG:
I use Davx and there are no issues. Really great Rom.
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] MSe1969:
Thanks for your positive feedback. Let's deal with your questions:

WireGuard also works great using the WG app and userspace implementation. To use WG native support provided with a respective kernel, you need root. This ROM aims at providing many features out of the box, for which you otherwise would need root, so in many cases, there is no need to weaken your security by flashing a root solution. Therefore I see it as a contradiction, to provide features, for which a user would first have to flash a root solution.

The LineageOS forked repositories can be found here: https://github.com/lin17-microG

The prebuilts for microG and F-Droid are here: https://github.com/MSe1969/android_prebuilts_prebuiltapks

AuroraStore prebuilt: https://github.com/MSe1969/AuroraStore-prebuilt

Prebuilt Bromite Webview: https://github.com/MSe1969/android_external_bromite-webview

Prebuilt Bromite Browser: https://gitlab.com/MSe1969/android_external_bromite

How this all comes together, see in the local manifest: https://github.com/lin17-microG/local_manifests/tree/lin-17.1-hmalloc

Now to the components:

F-Droid: Is pulled from its original source and compiled without changes, but signed with a V2/V3 signature

F-Droid privileged extension: Pulled from original source, apply this patch and also sign with V2/V3 signature

Reason for not simply using the "original apks" is explained in this commit.

Bromite and Bromite webview are downloaded from official site and simply included in the ROM.

AuroraStore / AuroraServices apks are taken "as-is" from official releases.

microG is pulled from original source, apply these patches and signed.

Yes, all working fine. I use it myself and I's say, it is the recommended approach for contacts/calendar sync

Not this weekend, but as soon as it's ready. Google publishes their monthly Android security bulletin usually on the first Monday of each month. From there, add another couple of days to get ready.
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] cowgaR:
What if the WG app would be system one same as few you have added inside?

(I dropped the question to WG thread as well)

What a thorough answer to keep me occupied, feeling a bit better to try it this weekend then. Many thanks!

Fair point, I prefer solid one month releases to many untested frequent updates. Once again, many thanks. This will keep my McLaren (4G, currently on official LOS) longer than I thought, hope you won't loose interest ;-)
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] MSe1969:
As far as I know, the WG app needs to execute some OS commands to activate the native WG kernel functionality. For this execution, root is needed. Therefore it won't make any difference, whether the WG app is a system or a user app.

Nevertheless, I am curious to see the answer from the WG thread...

The hotdog is my primary device, and in general I provide support fairly long, see my other threads, which include other devices, which obviously aren't my primary device any more (or even have never been).
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] MSe1969:
New build available with March ASB patches

Hi all,

a new build is available and will soon be offered as OTA update in the Updater app:

https://sourceforge.net/projects/lin17-microg/files/hotdog/lineage-17.1-20210307-UNOFFICIAL-microG-signed-hotdog.zip/download

Security string 2021-03-05

Kernel slightly patched

Bromite System Webview updated to 88.0.4324.207

Bromite Browser updated to 88.0.4324.207

F-Droid 1.11

microG 0.2.18.204714

How to update:

The recommended approach is to make use of the Updater app (OTA update). As indicated, the update will soon be offered in the Updater app. Please let me know, if there is any issue with this approach!

You can also manually sideload the zip file via recovery. In that case however, please follow the respective advice in the OP (you have to flash the special recovery image again before!)

Happy flashing!

Regards, M.

EDIT: OTA update now offered via Updater app
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] cowgaR:
Is below commit sucking latest OOS blobs included? The date of the LOS commit is 8th of March whereas yours ROM is dated 7th of March according to the .zip name, so curious.

https://review.lineageos.org/c/LineageOS/android_device_oneplus_hotdog/+/303471/

In case it is included, do we need to flash OxygenOS to the latest version 10.0.14.HD01BA from February 22 (both partitions to be safe) prior to flashing this new release?

As always, this ROM looks way too good...Many thanks!
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] Thetimelost:
Love your rom ! But I have some stop for my use :/

Android Auto

Waze

& Heartstone :(

But I love the idea about the privacy ! Thanks for all the work !!
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] MSe1969:
Thanks for the feedback - well, this ROM is not for everybody.

Always depends on what your preferences are.
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] MSe1969:
The latest firmware/blobs are not part of this ROM, yet - will be included next time.

And no, no need to go back to stock, it will simply be part of the next update (it's more than that commit).
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] Thetimelost:
I try to limit has maximum google but yeah it have a cost :p ! If you have tips for limit google in an "normal" rom I take it !
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] RayfG:
Update ran smooth no probs at all except magisk. I cant install magisk because i have no img file...

Guess i have to download manually and extract boot.img again.

"EDIT" Magisk installed. All fluent.
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] RayfG:
@MSe1969

One more question about the Firewall. What is the Keysymbol for? Do i have to activate it for each application?
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] MSe1969:
Key symbol means VPN connection. I.e. is the app allowed to connect through a VPN?

If you don't use VPN, it does not matter.

If you use, it depends on the purpose of the VPN and what you intend to do.
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] RayfG:
Thank u very much, now all is clear and understood.
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] RayfG:
One more question, about the vpn.

Is the implementation openvpn or is it Lineageos native? Thank u, Ray
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] Bradford1040:
Just double checking, has anyone tried on the McLaren or 5g variant yet?
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] T0mu:
I assure you you will brick your phone. I have a HD1913 mclaren (eu version) it's an hotdog like the others i can use this rom (still have not installed it). you have a HD1925, an hotdogg (two gg) another phone.
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] Bradford1040:
I knew I was grasping at straws lol, just wishful thinking, thank you for the reply
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] Thetimelost:
Just a question, I decide to try again the rom but Aurora store always fail login... Do you have a hint ?

thanks !!
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] MSe1969:
"Native Android" (not native LineageOS) :)

See https://developer.android.com/guide/topics/connectivity/vpn

Quote:

Android includes a built-in (PPTP and L2TP/IPSec) VPN client, which is sometimes called legacy VPN. Android 4.0 (API Level 14) introduced APIs so that app developers could provide their own VPN solutions. You package your VPN solution into an app that people install onto the device. Developers normally build a VPN app for one of the following reasons:

To offer VPN protocols that the built-in client doesn’t support.

To help people connect to a VPN service without complex configuration.

So it depends on your specific VPN app, whether it uses the built-in VPN client or whether it brings its own VPN solution along or in fact is an own VPN client (like e.g. Wireguard app).
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] MSe1969:
I usually solve this issue by logging off and on again, bur in the last couple of days, it has become really bad.

There is a new version of Aurora in the pipeline, currently passed beta and is already offered as nightly, but no stable version yet.

You can download at auroraoss.com, I will include it in my next build. Hope until then, there will be a stable build, otherwise, I'll take a nightly.
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] Thetimelost:
Ok the nightly build work ! Thanks :)
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] RayfG:
Just a question, if there is an update, will there be the newest firmware inside or do we have to update firmware seperately.

Thy, Ray
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] MSe1969:
Depends, what you exactly mean, when you say "firmware":

The kernel is frequently updated as part of each new build. The /vendor partition is also newly built as part of the build process (same as further partitions). The so-called "vendor blobs" are frequently extracted from the recent Oxygen-OS images by the LineageOS maintainers, which is then also used by me for the builds.

Different from e.g. the Oneplus 3/3T device (where flashing the most current firmware zips is a necessity to have the ROMs working properly), I haven't seen any separate "firmware" zips files, to e.g. update the modem. I guess however, that there haven't yet been any updates in this area, yet. If there are, and there would be a necessity to update, I am sure to find eventually also flashable zips, which I could link in the OP.

Maybe other could contribute to this answer as well to get a more complete picture?
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] knpk13:
Yeah the multiple new firmware partitions on newer devices is kinda harder to understand. And I've seen some roms use custom images for those partitions, different from the stock partitions. Like custom vendor.img, or vbmeta.img, or odm.img , etc.

My guess is they are referring to whatever firmware partitions are updated with OOS11, which was released a couple days ago in the stable channel for the 7T Pro. So I'm guessing they want to know if it's ok to flash the ROM over a OOS 11 base, or if you need an OOS 10 base.
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] RayfG:
Thank u for the reply. This is exactly what what i meant. Perhaps someone brings light into the darkness. :cool:
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] MSe1969:
In fact, when building this ROM, below listed image files are also built and put into the ROM, hence flashed:

boot.img, dtbo.img, product.img, ramdisk-recovery.img, system.img, vbmeta.img, vendor.img, dtb.img, odm.img, ramdisk.img, recovery.img, userdata.img, vbmeta_system.img

I guess that for "real" treble ROMs, all partitions are built and hence, "firmware" is extracted into the device-specific repositories and then assembled during the build process.

In regards to above images, it won't matter, as they will be flashed. If further partitions exist (no idea), which are not touched during the flash process, I would tend to the conservative approach of sticking within the Android SDK version (i.e. OOS 10 for an Android 10 ROM).
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] MSe1969:
New build with April ASB patches available

Hi all, a new build is available and also offered via the Updater app. For manual download and flashing, see here:

https://sourceforge.net/projects/lin17-microg/files/hotdog/lineage-17.1-20210409-UNOFFICIAL-microG-signed-hotdog.zip/download

ASB Security string 2021-04-01

Bromite System Webview and Browser updated to 90.0.4430.59

F-Droid updated to 1.12

Update: AuroraStore 4.0.4 with AuroraServices 1.1.0

Regards, M.
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] RayfG:
Updated flawless. Great Thy.
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] pa.trick:
First of all: thanks a lot to MSe1969 for this awesome ROM!

I’ve been using it for more than two weeks now and I’m very happy with it. No lagging and not a single forced reboot!

The recent OTA update went smooth as well.

In the past I tried to set up microG and Bromite SystemWebView on other phones but didn’t succeed, so this ROM is very much appreciated.

Highly recommended for users who have some experience in flashing custom roms but are not Android geeks ;)

Basically had no problems so far, except for AuroraStore causing some troubles after I fiddled with the settings (maybe also related to the major version bump to 4.xx?!). A clean install solved the problem anyway; v4.0.4.35 is working fine so far).

Some things I noticed (NO criticism!):

using Lawnchair launcher instead of Trebuchet works just fine

gesture navigation works well but it feels slightly less smooth than in OxygeneOS (last version I used was OOS 11 open beta 3)

settings for display resolution and refresh rate are missing; what are the default values in this ROM?

in the quick settings I’m missing the tile to easily switch to night mode (OOS has it, maybe it’s just not there in LineageOS?)

no always on display option in LOS (but wasn’t properly working in OOS anyway, massive battery drain …)

battery life / SOT is ok but not outstanding (app killing seems to be way more agressive in OOS; this ROM seems to make better use of the ample RAM the phone offers)

update process took waaay longer than in OOS but it worked flawlessly and provided current security patch – shame on oneplus for being behind in that regard!

if I could choose I’d probably prefer some TWRP recovery to the LOS recovery that comes with this ROM (mainly because it’s so easy to backup all data in TWRP)

ad blocking works very well: so far, no ads have come through (haven't touched any of the default settings; in Firefox I've installed the uBlock Origin & Privacy Badger add-ons). In that regard this ROM offers a similar experience to OOS with Blokada

my banking app works fine

okcupid app (something related to webview) and ebayKleinanzeigen app (some error message about trouble with the WLAN connection) don’t work (not really a problem)

GCam works (I installed the recommended one from https://www.celsoazevedo.com/files/android/p/gcam-oneplus-7-t-pro/); minor problem: it doesn’t open the pictures I take in the app I set as default gallery app (https://f-droid.org/en/packages/com.simplemobiletools.gallery.pro/)

AuroraStore displays one app that I didn’t actively install (see bootom of screenshot) – what is eSpeak?

Once again, thx a lot to the OP, keep up your excellent work!
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] MSe1969:
Thanks for the positive feedback, appreciated. Will comment further below some points and try to answer questions.

In regards to Aurora:

My recommendation is, that if Aurora really misbehaves after flashing this month's ROM, which performs a major upgrade from 3.2.9 to 4.0.4, go to Settings - Apps - pick AuroraStore and delete cache and memory.

Well, it's LineageOS and not OOS. I have no influence on this...

The agressive app killing in OOS is something, which is a really bad practice (see https://dontkillmyapp.com/oneplus), so I am glad, that LineageOS does not do this ****. Besides, it has to be said, that indeed Stock ROMs are usually slightly better in battery behavior (not only because of stupid app killing to compensate their own bloatware apps, which of course are exempt from the app killing).

Unfortunately, there is no fully working TWRP for our device, yet. I would love to use TWRP myself! I have tried the experimental TWRP, which exists for this ROM, but came back to Lineage Recovery. But hoping that the dev working on TWRP for our device will eventually succeed...

No idea about okcupid, but eBay is known to be "nosy" and hence deeply integrate with the genuine Google spy services; many apps work just fine with microG, but not all...

Thanks for the hint - for sure interesting for others reading

On this ROM, I ship a fork of the eSpeak NG TTS app, to provide a Google-free TSS engine. This in fact the prebuilt apk taken from here, which is a fork of espeak-ng . The eSpeak app in the play store (link leads to Github) which is - wrongly - referred to as installed app in Aurora, is also a fork of espeak-ng. As it however uses the same app name, this reference is made in AuroraStore.
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] pa.trick:
Thanks for your quick and insightful reply!(y)

In regard to battery life: does the display run in QHD+ solution and is the refresh rate set at 90 hz?
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] MSe1969:
Honestly - no idea! (I took the device config "as is" from LineageOS)
[OnePlus 7T Pro (Regular & McLaren) ROMs & Dev.] UnderDroidiana:
Hi @MSe1969

I downloaded your rom and it's really impressive work!

May I ask you one question/favour?

Since I would like to experiment with some modifications (I dont' want to root the rom but I would like to try to add some root requiring apps, therefore I would like to try to include it in the rom) and in the end I would like to resign the bootloader, could you give me hints on how to create the modified lineageos recovery you are linking in first post?

I assume since I will sign with my own keys I will need to build and sign the rrecovery too.

Thank you

(y)