DivestOS: long term device support with enhanced privacy and security

Yesterday I made the switch from the official lineageos to divestos on the redmi note 7 (lavender), everything went well and I must say that after a day and a half of fairly intense use I did not encounter any problems.

I installed divestos using los recovery, I expected that after the first boot the recovery would be replaced by that of divestos as @SkewedZeppelin told me but apparently the recovery remained that of lineageos. In case I will replace it manually before the next update.

I also took the opportunity to try the seedvault backup system and all in all it worked quite well even if the process of restoring ~100 apps was quite long, still preferable to the option to reinstall everything manually.

Regarding bluetooth, wifi, hotspot, geolocation, etc. everything works fine. The only remark to do is about mozilla’s unifiednlp backend which doesn’t seem to work, instead dejavu works so it’s not a big deal. Battery life is also good.

The pre-installed apps in my opinion are all excellent and I also used many of them on lineageos (simple gallery, silence, mull, open camera, f-droid) the only app I have to get used to is fairemail since I’ve always used k-9 mail, however I’m taking the opportunity to try it and all in all I don’t mind, soon I’ll decide whether to go back to using k-9 mail or whether to stay on fairemail.

Having f-droid as a system app is a big advantage and allows me to do without the root that I used exclusively for privileged extension.

I hope that in the future it will also be possible to re-lock the bootloader but already in this way I am very happy to have made the switch.

Great job @SkewedZeppelin and thanks again!!!

6 Likes

Uh. They are looking for “enhanced privacy and security” and there is no private/anonymous drop box for comments.

@agschaid

I think there is also an un-rooted version of AdAway that uses some VPN-magic. Maybe that is what you are talking about?

Yes, if AdAway uses the VPN “slot”, then Tor cannot, iiuc, because Divestos does not support rooting.

When I try join a zoom meeting on mull, zoom says that my browser doesn’t support audio. I had granted audio perms to mull, but i wasnt able to join the meeting with audio. I didnt have this problem with firefox on google play or iceraven
@skewedzepellin does this have something to do with about:config or user.js or something similar? I didnt modify any of that

@hoolamags
WebRTC is disabled in all Mull versions before 96.x.
96.x is already in the DivestOS repo, but you have to manually update to it.

Why disabled?

@Licaon_Kter
Fenix doesn’t have protections that desktop Firefox does and will leak local IP addresses.
I ought to actually disable it again for 96.

Edit: a Mull v96.1.1-3 is compiling with WebRTC disabled again. and that will be the same for when it lands on F-Droid this week

Edit 2: a Mull v96.1.1-3 is up with this silly issue fixed

You are absolutely right there.
My thinking in my initial proposal was that while not support rooting it might be possible for SkewedZeppelin to package AdAway (and maybe even AFWall+ which has absoutely no un-rooted capabilities) as privileged system app of sorts. In that case it might be possible operate directly on the hosts file without VPN.

Sorry. That idea was only indirectly hinted in my initial proposal. But I guess SkewedZeppelin got me right nontheless since his reply was that he would have to make that work for multiple versions of Android.

i am on 96.1.1 and it isnt working
btw wouldnt it be better to just change that in about:config rather than disable at compile time?

@hoolamags
the default must be compiled in, but as a user you can change this via about:config
WebRTC toggle is media.peerconnection.enabled

It should be set to false to disable wertc, right?

@darhma
Yes, false to disable:

1 Like

Your qualified comments always thrill me. But go ahead, keep responding like an ass in kindergarten.

Because i would like to use DivestOS on my Poco F1, would it possibly work if i were to use the vendor files from another Android 11 ROM so that the camera is functional? Been looking into LeOS as that ROM seems good.

@SkewedZeppelin Just installed the latest HDX 8.9 Apollo build and i had to go back to install the previous build as spotify stopped working (no internet connection) & zedge kept crashing. These issues maybe the same for HDX 7 Thor too.

@ushilives
new build is up that should fix your issue.

1 Like

Yay thanks

1 Like

@SkewedZeppelin is it possible a build for sony xz1 compact ?

Hi there.
First, I want to say thank you to Tad, what you’re doing is awesome and very important.
Second, I want to ask - what happened to many device builds that were on the download page, and now they’re not?
I decided to buy a phone specifically to install DivestOS, now I can’t download a build for it :expressionless: and for some other devices too. Are they discontinued or they will come back?

Why not mention which one? 'tis a secret?

2 Likes

According to what is written on the divestos support group on xmpp there has been a problem due to a kernel patch that has involved a lot of devices, soon the correct downloads should be available again.

Here are some quotes from messages on xmpp written by @SkewedZeppelin:

yes it is a kernel issue
specifically a broken patch for CVE-2021-4203

alioth, amber, avicii, bramble, coral, discovery, flame, guacamole*, hotdog*, pioneer, redfin, sunfish, vayu, voyager, z2_plus

Rebuild of the 20 affected devices is starting

15 of the builds (all the 18.1 ones) are uploading now

And I’m starting on the remaining 5 (17.1 ones)

Here you will find more information: News - DivestOS Mobile

2 Likes