[ROM] DivestOS 15.1+18.1 for shamu - Nexus 6 Android Development

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
DivestOS is a more private and more secure aftermarket system.
Nexus 6 Notes:
- 15.1 builds are also available for those who need IMS/VoLTE
- in-place upgrade to 18.1 is not possible unlike previous DivestOS releases due to keystore change
Features:
- strong focus on FOSS
- various system hardening
- various privacy enhancements
- automated removal of unnecessary proprietary blobs
- automated kernel hardening and CVE patching
- ability to relock bootloader on supported devices
- verified boot on supported devices
- no root support
- SELinux always enforcing
- encrypted by default
- monthly updates
- OTA delta updates
- OTA updates over Tor (optional)
- F-Droid included
- hardened system WebView with rapid updates: https://divestos.org/misc/ch-dates.txt
Extra Features (not installed by default & also compatible with all systems):
- Mull, our hardened fork of Fenix with rapid updates: https://divestos.org/misc/ffa-dates.txt
- Hypatia, our real-time malware scanner
- Extirpater, our free space eraser
Links:
- Website: https://divestos.org
- Onion: http://divestoseb5nncsydt7zzf5hrfg44md4bxqjs5ifcv4t7gt7u6ohjyyd.onion
- Downloads: https://divestos.org/index.php?page=devices&base=LineageOS#device-shamu
- Changelogs: https://divestos.org/index.php?page=news
- Project History: https://divestos.org/index.php?page=history
- Known Issues: https://divestos.org/index.php?page=broken#shamu
- Screenshots: https://divestos.org/index.php?page=screenshots
- Security Patching Overview: https://divestos.org/index.php?page=patch_levels
- About + Credits + Notices: https://divestos.org/index.php?page=about
- Donate: https://divested.dev/donate
- Source Code: https://github.com/divested-mobile or https://gitlab.com/divested-mobile
- XMPP Chat Room: xmpp:[email protected]
Device Specific Links
- Device Tree: https://github.com/LineageOS/android_device_moto_shamu
- Kernel: https://github.com/LineageOS/android_kernel_moto_shamu
- Kernel CVE Patches Applied: https://github.com/Divested-Mobile/...8.1/CVE_Patchers/android_kernel_moto_shamu.sh, https://github.com/Divested-Mobile/...5.1/CVE_Patchers/android_kernel_moto_shamu.sh
Other Bits:
- Good and bad feedback is welcomed. Else how can we improve?
- If you find a bug, please report it below or via GitHub/GitLab.
- Testing/Translations/Code contributions are gratefully appreciated.
Important Notes for New Users:
- Please make a backup of your device and copy it to another computer.
- You must wipe before installing this OS.
- This OS has userdata encrypted by default
- You are intended to relock your bootloader with this OS (if your device is marked supported for that).
DivestOS does *not* support the following:
- Google Apps (OpenGAPPS)
- DRM (Widevine)
- alternative recoveries (TWRP)
- root (Magisk)
- runtime modification frameworks (Xposed or theme engines)
All downloads are GPG signed with the following key:
Code:
#B874 4D67 F9F1 E14E 145D FD8E 7F62 7E92 0F31 6994
-----BEGIN PGP PUBLIC KEY BLOCK-----
mDMEXupIxBYJKwYBBAHaRw8BAQdAC1RiTvrqJaAQ4FIHsxX+gzEgdT4mspISS+p0
y847Nge0SERpdmVzdE9TIFJlbGVhc2UgU2lnbmluZyAoMjAyMCAjMSkgPHN1cHBv
cnQrcmVsZWFzZXNpZ25pbmdAZGl2ZXN0b3Mub3JnPoiQBBMWCAA4FiEEuHRNZ/nx
4U4UXf2Of2J+kg8xaZQFAl7qSMQCGwMFCwkIBwIGFQoJCAsCBBYCAwECHgECF4AA
CgkQf2J+kg8xaZR1BgEAwwLVVsG7kbp8M3GTV987XpVl5cZeTtDc/g+66briCHUB
APiuH/dk8eRnhFnq4Up2/j7uD/8FtSvxPbHiz6t1MdgB
=VzP2
-----END PGP PUBLIC KEY BLOCK-----

---

Hi, this is really great! I'm on e OS now so I'm accustomed to (almost) no google. Although I want to ask:
1. if microG is possible to install and use? Say like in a work profile. I have a banking app which is dependent on google and I figure if bootloader is locked it won't detect root no more.
2. Updates are OTA?
3. Reverse process is possible? Going back to e OS in examlpe
Regards

---

Kjivar said:
Hi, this is really great! I'm on e OS now so I'm accustomed to (almost) no google. Although I want to ask:
1. if microG is possible to install and use? Say like in a work profile. I have a banking app which is dependent on google and I figure if bootloader is locked it won't detect root no more.
2. Updates are OTA?
3. Reverse process is possible? Going back to e OS in examlpe
Regards
Click to expand...
Click to collapse
1. microG is not supported by DivestOS. If you want to compile DivestOS yourself you just need to change one line to build in microG. However simply having a locked bootloader with microG is not enough to pass SafetyNet. At a minimum you'd likely need 'DroidGuard Helper'.
2. Yes, of course.
3. Most definitely. Just unlock and flash whatever.

---

Ok, thanks
It actually isn*t depending on SafetyNet, just detects root (unlocked bootloader I think) with Rootbeer. Using Magisk hide is only solution now. Dunno if Droid Guard helper has been updated yet. I'll check into it tho.
Going stock with locked bootloader is out of the question. Guess I'll just go ahead with this, and use a second device for that app.
Keep up the good work

---

@Kjivar
Anyway, locking the bootloader is perhaps a bad idea while running a custom rom - if the phone becomes unbootable for some reason, you may not be able to fix it.
Edit: see reply below - locking is safe on this rom (but I still wouldn't try it on any other rom)

---

runekock said:
@Kjivar
Anyway, locking the bootloader is perhaps a bad idea while running a custom rom - if the phone becomes unbootable for some reason, you may not be able to fix it.
Click to expand...
Click to collapse
Bootloader locking on supported devices is one of the primary benefits of running DivestOS.
Older devices let you unlock no matter and newer ones will do so as long as OEM unlocking is checked.
Even if /system is corrupted the OEM unlock flag is stored in the checksummed persistent data block and you'd still be able to unlock to fix.
Especially on older devices bootloader locking can be bypassed using manufacturer tools.
My daily driver for the past five years has always had its bootloader locked.
And my stack of test devices all have their bootloader locked.
It is not my fault other ROMs aren't signed correctly to support such a basic feature.

---

This ROM looks shady

---

Rootmaster906 said:
This ROM looks shady
Click to expand...
Click to collapse
Please elaborate.

---

SkewedZeppelin said:
Please elaborate.
Click to expand...
Click to collapse
You can't do anything with this thing. You can't flash gaps and you can't flash magisk. What good is this ROM if you can't do any of that?

---

Rootmaster906 said:
You can't do anything with this thing. You can't flash gaps and you can't flash magisk. What good is this ROM if you can't do any of that?
Click to expand...
Click to collapse
Those are valid concerns for some users like yourself, but that simply makes you not the target audience.
It does not make it shady.

---

SkewedZeppelin said:
Those are valid concerns for some users like yourself, but that simply makes you not the target audience.
It does not make it shady.
Click to expand...
Click to collapse
My apologies. I wasn't trying to diss your rom. What happens when I flash this? Is this actually a good ROM or no?

---

Rootmaster906 said:
My apologies. I wasn't trying to diss your rom. What happens when I flash this? Is this actually a good ROM or no?
Click to expand...
Click to collapse
If you feel the features offered are in your interest, I welcome you to try it.
Just sure to backup first and ensure that backup is somewhere other then your phone.
As forceencrypt is set by default.
And TWRP will be replaced with DivestOS recovery on first boot.

---

SkewedZeppelin said:
If you feel the features offered are in your interest, I welcome you to try it.
Just sure to backup first and ensure that backup is somewhere other then your phone.
As forceencrypt is set by default.
And TWRP will be replaced with DivestOS recovery on first boot.
Click to expand...
Click to collapse
How do I decrypt? Same as formatting data? Also, can I flash twrp back in divest recovery?

---

Rootmaster906 said:
How do I decrypt? Same as formatting data? Also, can I flash twrp back in divest recovery?
Click to expand...
Click to collapse
You can format /data in TWRP.
You can flash TWRP back using fastboot.

---

SkewedZeppelin said:
You can format /data in TWRP.
You can flash TWRP back using fastboot.
Click to expand...
Click to collapse
This ROM is pretty dope! I guess only 8.1 is available. Why can't gapps and magisk be used? Thanks

---

Rootmaster906 said:
This ROM is pretty dope! I guess only 8.1 is available. Why can't gapps and magisk be used? Thanks
Click to expand...
Click to collapse
Hmm?
8.1 is only if you require VoLTE, otherwise 11.0 is reported stable and more secure.

---

SkewedZeppelin said:
Hmm?
8.1 is only if you require VoLTE, otherwise 11.0 is reported stable and more secure.
Click to expand...
Click to collapse
Page doesn't have a link for a11. Edit..had to refresh page. Sorry.

---

Rootmaster906 said:
Page doesn't have a link for a11
Click to expand...
Click to collapse
I assure you, it is there, use Find In Page/Ctrl-F:
https://divestos.org/mirror.php?base=LineageOS&f=shamu/divested-18.1-20210807-dos-shamu.zip

---

SkewedZeppelin said:
I assure you, it is there, use Find In Page/Ctrl-F:
https://divestos.org/mirror.php?base=LineageOS&f=shamu/divested-18.1-20210807-dos-shamu.zip
Click to expand...
Click to collapse
Found it. So....why isn't magisk and Gapps supported?

---

Rootmaster906 said:
Found it. So....why isn't magisk and Gapps supported?
Click to expand...
Click to collapse
I don't believe most users need root access, and it also reduces security and prevents easily using features such as verified boot.
GAPPS goes strongly against the privacy and freedom that DivestOS strives to offer, as it is proprietary code from Google.