[ROM] DivestOS 15.1+16.0 for hammerhead - Nexus 5 Android Development

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
DivestOS is a more private and more secure aftermarket system.
Nexus 5 Notes:
- 16.0 is quite buggy, 15.1 should be stable
- Bluetooth may or may not work on 16.0
Features:
- strong focus on FOSS
- various system hardening
- various privacy enhancements
- automated removal of unnecessary proprietary blobs
- automated kernel hardening and CVE patching
- ability to relock bootloader on supported devices
- verified boot on supported devices
- no root support
- SELinux always enforcing
- encrypted by default
- monthly updates
- OTA delta updates
- OTA updates over Tor (optional)
- F-Droid included
- hardened system WebView with rapid updates: https://divestos.org/misc/ch-dates.txt
Extra Features (not installed by default & also compatible with all systems):
- Mull, our hardened fork of Fenix with rapid updates: https://divestos.org/misc/ffa-dates.txt
- Hypatia, our real-time malware scanner
- Extirpater, our free space eraser
Links:
- Website: https://divestos.org
- Onion: http://divestoseb5nncsydt7zzf5hrfg44md4bxqjs5ifcv4t7gt7u6ohjyyd.onion
- Downloads: https://divestos.org/index.php?page=devices&base=LineageOS#device-hammerhead
- Changelogs: https://divestos.org/index.php?page=news
- Project History: https://divestos.org/index.php?page=history
- Known Issues: https://divestos.org/index.php?page=broken#hammerhead
- Screenshots: https://divestos.org/index.php?page=screenshots
- Security Patching Overview: https://divestos.org/index.php?page=patch_levels
- About + Credits + Notices: https://divestos.org/index.php?page=about
- Donate: https://divested.dev/donate
- Source Code: https://github.com/divested-mobile or https://gitlab.com/divested-mobile
- XMPP Chat Room: xmpp:[email protected]
Device Specific Links:
- Device Tree: https://github.com/LineageOS/android_device_lge_hammerhead
- Kernel: https://github.com/LineageOS/android_kernel_lge_hammerhead
- Kernel CVE Patches Applied: https://github.com/Divested-Mobile/...CVE_Patchers/android_kernel_lge_hammerhead.sh
Other Bits:
- Good and bad feedback is welcomed. Else how can we improve?
- If you find a bug, please report it below or via GitHub/GitLab.
- Testing/Translations/Code contributions are gratefully appreciated.
Important Notes for New Users:
- Please make a backup of your device and copy it to another computer.
- You must wipe before installing this OS.
- This OS has userdata encrypted by default
- You are intended to relock your bootloader with this OS (if your device is marked supported for that).
DivestOS does *not* support the following:
- Google Apps (OpenGAPPS)
- DRM (Widevine)
- alternative recoveries (TWRP)
- root (Magisk)
- runtime modification frameworks (Xposed or theme engines)
All downloads are GPG signed with the following key:
Code:
#B874 4D67 F9F1 E14E 145D FD8E 7F62 7E92 0F31 6994
-----BEGIN PGP PUBLIC KEY BLOCK-----
mDMEXupIxBYJKwYBBAHaRw8BAQdAC1RiTvrqJaAQ4FIHsxX+gzEgdT4mspISS+p0
y847Nge0SERpdmVzdE9TIFJlbGVhc2UgU2lnbmluZyAoMjAyMCAjMSkgPHN1cHBv
cnQrcmVsZWFzZXNpZ25pbmdAZGl2ZXN0b3Mub3JnPoiQBBMWCAA4FiEEuHRNZ/nx
4U4UXf2Of2J+kg8xaZQFAl7qSMQCGwMFCwkIBwIGFQoJCAsCBBYCAwECHgECF4AA
CgkQf2J+kg8xaZR1BgEAwwLVVsG7kbp8M3GTV987XpVl5cZeTtDc/g+66briCHUB
APiuH/dk8eRnhFnq4Up2/j7uD/8FtSvxPbHiz6t1MdgB
=VzP2
-----END PGP PUBLIC KEY BLOCK-----

---

I'm trying to use this but both camera and wifi hotspot do not seem to work. Can I help somehow?
Hammerhead: camera and hotspot do not work. · Issue #140 · Divested-Mobile/DivestOS-Build
Phone boots fine, tho. Bootloader relocking works as well. I haven't tried calling, incoming SMS do work. I'd like to use this phone again, but I can't without camera and hotspot. I did run a logca...
github.com

---

Hi
@SkewedZeppelin Just did a clean install. I can't remove apps the regular way (tap, hold, swipe to the uninstall field at the top). I have to go into apps section in the settings and there click uninstall.

---

fw190 said:
Hi
@SkewedZeppelin Just did a celan install. I can't remove apps the regular way (tap, hold, swipe to the uninstall field at the top). I have to go into apps section in the settings and there click uninstall.
Click to expand...
Click to collapse
This is an old bug in the launcher, it happens at random sometimes. Just force stop Trebuchet.

---

Hi guys.
I have device LG Nexus 5x bullhead and tried to install Divest on it.
(I installed custom ROMs several times, I am not new to this process)
All went smooth, but when I was setting up the phone, on the step to set the screen lock pin/pattern - it just crashed.
After this I had difficulties to boot it even into fastboot menu and when I did - I tried to flash the genuine (Google) ROM on it (I did it several times and it is working ROM), but during the flashing, in the terminal it showed a list of archives missing.
Now the phones goes to Google logo and then to black screen.
Well, I do not know if there is any workaround or not.
Please advice.
Thanks

---

balakarpo said:
Hi guys.
I have device LG Nexus 5x bullhead and tried to install Divest on it.
(I installed custom ROMs several times, I am not new to this process)
All went smooth, but when I was setting up the phone, on the step to set the screen lock pin/pattern - it just crashed.
After this I had difficulties to boot it even into fastboot menu and when I did - I tried to flash the genuine (Google) ROM on it (I did it several times and it is working ROM), but during the flashing, in the terminal it showed a list of archives missing.
Now the phones goes to Google logo and then to black screen.
Well, I do not know if there is any workaround or not.
Please advice.
Thanks
Click to expand...
Click to collapse
That sounds less like a DivestOS issue and more like user-error or the dreaded Nexus 5X bootloop issue: https://en.wikipedia.org/wiki/LG_smartphone_bootloop_issues#Nexus_5X
I test DivestOS on bullhead each monthly update before release (without issue).

---

SkewedZeppelin said:
That sounds less like a DivestOS issue and more like user-error or the dreaded Nexus 5X bootloop issue: https://en.wikipedia.org/wiki/LG_smartphone_bootloop_issues#Nexus_5X
I test DivestOS on bullhead each monthly update before release (without issue).
Click to expand...
Click to collapse
Thanks for replying so soon.
I installed two ROMs before (LineagOS 17.1 and 19.1 Unofficial version) on this device without problem. The unique problem was that I was unable to encrypt the phone on those and that was the main reason to try DivestOS.
I understand it can be the hardware problem (maybe mine), but is there any workaround? Thanks

---

Hello, first of all thank you for creating this awesome rom. Im using it for some extended period of time on my backup devices which is Nexus 5 and it works great, it feels so secure and also having latest security patch is awesome. Keep doing the great job! Rom is awesome, recommended for everyone!

---

I managed to install DivestOS 18.1 even on my Nexus 4, works as it should for now. (Been a nexus fan before so i got these 2 nexuses :-D) Is there a chance that you make it for my main phone which is Xiaomi Mi 10t pro, please? At least one build and thats it

---

scorpion994 said:
I managed to install DivestOS 18.1 even on my Nexus 4, works as it should for now. (Been a nexus fan before so i got these 2 nexuses :-D) Is there a chance that you make it for my main phone which is Xiaomi Mi 10t pro, please? At least one build and thats it
Click to expand...
Click to collapse
Any device I add I have to perpetually maintain.
apollon is already in the queue to be eventually added maybe someday: https://github.com/Divested-Mobile/DivestOS-Build/issues/68

---

Thank you so much for this

---

Hello, good day! I was trying to fix my nexus 5 Wi-Fi problem, so I was flashing a few ROMs to see if it get fixed. I tried this one then... No success. Now I'm trying to go back to a stock image, but I'm having trouble to get my phone recognized by the computer. Do I get this problem because the phone is encrypted? Can I decrypt my phone? Can't use trwp eider, because of the encryption.

---

arnoldwu said:
Hello, good day! I was trying to fix my nexus 5 Wi-Fi problem, so I was flashing a few ROMs to see if it get fixed. I tried this one then... No success. Now I'm trying to go back to a stock image, but I'm having trouble to get my phone recognized by the computer. Do I get this problem because the phone is encrypted? Can I decrypt my phone? Can't use trwp eider, because of the encryption.
Click to expand...
Click to collapse
TWRP should work fine?
DivestOS makes no changes that would lock you to DivestOS or prevent you from switching.
Maybe try a different cable, and a USB 2.0 port.
Also Wi-Fi works fine on my hammerhead, if it doesn't work on multiple systems maybe you have a hardware issue or corrupted persist partition.

---

SkewedZeppelin said:
This is an old bug in the launcher, it happens at random sometimes. Just force stop Trebuchet.
Click to expand...
Click to collapse
Big fan of your OS, i know you do not support SU or Magisk or microG, but could you atleast let us multiboot with your awesome OS? please kindly add the Kexec-Hardboot patch to your kernel so we could be able to boot into a googled OS, or Ubuntu Touch.
thanks in advanced and looking forward to this patch added.
Kexec-hardboot patch

---

[email protected] said:
please kindly add the Kexec-Hardboot patch to your kernel so we could be able to boot into a googled OS, or Ubuntu Touch.
Click to expand...
Click to collapse
No, kexec is explicitly disabled for security reasons: https://github.com/Divested-Mobile/DivestOS-Build/blob/master/Scripts/Common/Functions.sh#L1048
If you want such changes the way to get them is by compiling your own builds: https://divestos.org/pages/build
Ubuntu Touch for this device is also blatantly insecure missing years of basic security patches: https://github.com/ubports/android_kernel_lge_hammerhead/commits/ubp-5.1

---

SkewedZeppelin said:
No, kexec is explicitly disabled for security reasons: https://github.com/Divested-Mobile/DivestOS-Build/blob/master/Scripts/Common/Functions.sh#L1048
If you want such changes the way to get them is by compiling your own builds: https://divestos.org/pages/build
Ubuntu Touch for this device is also blatantly insecure missing years of basic security patches: https://github.com/ubports/android_kernel_lge_hammerhead/commits/ubp-5.1
Click to expand...
Click to collapse
please do elaborate on the security reasons, all kali nethunter kernels have Kexec-hardboot enabled, i run the latest version and would love to see the exploits for it. Please enlighten me.

---

[email protected] said:
please do elaborate on the security reasons, all kali nethunter kernels have Kexec-hardboot enabled, i run the latest version and would love to see the exploits for it. Please enlighten me.
Click to expand...
Click to collapse
There are no direct exploits for it, it is just attack surface reduction.

---

SkewedZeppelin said:
There are no direct exploits for it, it is just attack surface reduction.
Click to expand...
Click to collapse
maybe possibly supply an optional flashable zip for this minor reduction. giving the user the option to enable this to run nethunter kernel, currently i run it systemless, but i have to use an external wifi adapter, honestly is not very stealthy. I believe there are various benefits to having hardboot, that is just one. (having internal wifi support for nethunter)
P.S. maybe it could be added as a developer option in your OS?

---

[email protected] said:
maybe possibly supply an optional flashable zip for this minor reduction. giving the user the option to enable this to run nethunter kernel, currently i run it systemless, but i have to use an external wifi adapter, honestly is not very stealthy. I believe there are various benefits to having hardboot, that is just one. (having internal wifi support for nethunter)
Click to expand...
Click to collapse
no.
That would require compiling every kernel twice.

---

SkewedZeppelin said:
no.
That would require compiling every kernel twice.
Click to expand...
Click to collapse
to recompile your kernel do i simply remove "optionsNo+=("KEXEC" "KEXEC_FILE");" and add it to the "optionsYes+=(" section ?