Files
AXP-Resurection/specs/005-restricted-signature-spoofing/quickstart.md
T
sunfish-admin 12d2179c20 AXP Magisk resurrection track: Speckit 009 port AXP/LOS22 to LOS23.
Ship Magisk like GOLDEN; KernelSU optional recycle only; parallel to sunfish-a16-rom standby.
2026-09-16 21:56:22 +00:00

2.7 KiB

Quickstart: 005 first working stack (LAB only)

Device: LAB 11231JEC207477 — never GOLDEN 11071JEC203839

Goal

One flash proves: microG + patched Play + restricted spoofing + modern location docs. Not banking (006), not root (007).

Prerequisites

  • Artifact zip from 005 bacon (includes REPLACE_PREBUILT + updated privapp)
  • Laptop adb/fastboot; hashes verified
  • Oracle notes (optional): .local-artifacts/002-golden/20260915-spoofing-phonesky/README.md

Flash

Follow docs/003-flash-lab.md pattern with the 005 zip (dtbo → boot/recovery → format if needed → sideload). Say No to additional packages.

After first boot

SERIAL=11231JEC207477
adb -s "$SERIAL" shell getprop ro.lineage.version
adb -s "$SERIAL" shell pm path com.google.android.gms
adb -s "$SERIAL" shell pm path com.google.android.gsf
adb -s "$SERIAL" shell pm path com.android.vending
# expect all three present — no remount push

Spoofing

  1. Enable Developer options
  2. Enable Allow signature spoofing (settings get secure allow_signature_fake → 1)
  3. Open microG Settings → Self-Check
  4. Grant spoofing for GmsCore and Play when prompted (or App info → permissions)
  5. Confirm Self-Check correct signature for GmsCore and Play/Companion
adb -s "$SERIAL" shell settings get secure allow_signature_fake
adb -s "$SERIAL" shell dumpsys package com.google.android.gms | grep FAKE_PACKAGE_SIGNATURE
adb -s "$SERIAL" shell dumpsys package com.android.vending | grep FAKE_PACKAGE_SIGNATURE

Play auth

  1. Open Play Store; sign in
  2. Confirm UI stays up (no FGS crash loop)
  3. Optional logcat gate: no UNREGISTERED_ON_API_CONSOLE for Phonesky

In-app Play self-update may still fail (AXP-like) — acceptable.

Modern location

  1. microG Settings → Location
  2. Enable network location as shown
  3. Configure service URL: https://api.beacondb.net (BeaconDB; MLS is dead)
  4. Do not install Déjà Vu / Nominatim NLP backend APKs

Pass criteria (SC)

  • Toggle + allow_signature_fake=1 (LAB 2026-09-15)
  • Self-Check correct signature for gms + vending
  • Play sign-in without API-console fingerprint error
  • All three packages from zip without remount (gms/gsf system; vending upgraded in-place for exact-alarm — next bacon restores system path)
  • BeaconDB steps recorded; no UnifiedNlp backends required
  • No Magisk/KSU on the build

Failure

Capture logcat (vending, GmsAuthenticator, SelfCheck, PackageManager). Do not flash GOLDEN. Packaging-only regressions → fix under vendor overlay; spoofing regressions → frameworks/Settings patches.