74 lines
3.6 KiB
Markdown
74 lines
3.6 KiB
Markdown
# AXPR23 — end of life (2026-10-26)
|
|
|
|
Status: **EOL / archived**. No new features, no new AXPR23 builds. AXPR24
|
|
(LOS24 / Android 17) is the active line. AXPR23 remains the reference for how
|
|
the LOS port, the AXP packaging and the WebView integration were done.
|
|
|
|
## Final shipped artifact
|
|
|
|
- ZIP: `AXP-Resurection-Pro-23.2-20261025-sunfish.zip`
|
|
- The signed ZIP is retained in the build archive; generated ROM artifacts are
|
|
intentionally not stored in Git.
|
|
- SHA-256: `9d205fd3cc945438dfff3a23b129bf88516c7654f5922bc2ee4d478f9485eef0`
|
|
- Status at build: `FLASH_READY`
|
|
- Signed with the project release key
|
|
(`C=DE, O=AXP-Resurection, OU=sunfish-a16, CN=release`), cert SHA-256
|
|
`694a8941b64850a2acd0739c3757286c918eb16cc9788a2d7201222f351f1876`.
|
|
- Installed on the designated reference sunfish via A/B `adb sideload` without
|
|
a wipe; it booted and was verified.
|
|
|
|
## Verified state on the flashed device
|
|
|
|
- `ro.lineage.version`: `23.2-20261025-PRO-sunfish`.
|
|
- WebView: `org.axpos.aosmium_wv` only, native provider through Lineage's static
|
|
RRO (`framework-res__lineage_sunfish__auto_generated_rro_product.apk`), order:
|
|
Google entries (all `availableByDefault=false`) → AOSmium
|
|
(`availableByDefault=true`) → AOSP. LOS `webview` prebuilt removed from the
|
|
image by `apply_009_single_webview.py`.
|
|
- Runtime WebView smoke (harness `com.axpr.wvtest`): HTTPS load, reduced Vanadium
|
|
UA, JS, WASM, Canvas2D, WebGL 2.0, WebCrypto, Blob fetch, localStorage,
|
|
AudioContext, WebRTC — all pass; sandboxed renderer with seccomp.
|
|
- `hardened_malloc`: linked statically into 64-bit libc
|
|
(`h_malloc_info`, `h_malloc_trim`, … present in the runtime APEX libc);
|
|
32-bit stays Scudo.
|
|
- `configstore` HAL crash loop: gone (0 occurrences; `disable_configstore` stub
|
|
present, HAL binary and rc absent).
|
|
- No `FATAL EXCEPTION`, ANR, watchdog, tombstone or lowmemorykiller events in the
|
|
audit window. Remaining errors are AOSP telephony/RIL/SIM messages and
|
|
expected avc denials from apps probing `/proc` or the sensors HAL touching
|
|
`diag_device`.
|
|
|
|
## Known device-side caveat (not part of the ROM)
|
|
|
|
Vector 2.2 (bootloader-spoof host) ships a `sepolicy.rule` that Magisk 30.7 does
|
|
not load, and it lacks the Android 16 `artd` path, so dexopt fails while Vector
|
|
is installed. Policy-only Magisk module
|
|
`axpr-vector-dex2oat` (v3) fixes it:
|
|
|
|
- `/sdcard/Download/axpr-vector-dex2oat-v3.zip`
|
|
- SHA-256 `e30194c26070031debad0ad0eabff1065b386de7b103b714220a5c6ae51a9881`
|
|
- Delivered via `post-fs-data.sh` + `magiskpolicy --live` (no binaries, no hooks).
|
|
- With it: `VectorDex2Oat` spoofs its cmdline, `dex2oat returned code 0`,
|
|
`cmd package compile` succeeds.
|
|
- v3 installed on GOLDEN on 2026-10-26 and verified live: policy rules present
|
|
(`artd xposed_file`), `cmd package compile -m verify -f com.aurora.store` =
|
|
Success, 0 `art_exec` aborts. Persistence across reboot is the only remaining
|
|
confirmation (v3 ships the complete rule set in `policy.rules`).
|
|
|
|
Details and the full rule list: `docs/010-axpr-webview-los23-port.md`.
|
|
|
|
## Upstream context
|
|
|
|
LineageOS 23.2 for sunfish is frozen: last nightly `20261008` (SDK 36, patch
|
|
level 2026-09-01); `24.0` nightlies start `20261015` (SDK 37, patch level
|
|
2026-10-01). LineageOS does not keep both lines per device. Therefore AXPR23
|
|
cannot receive further upstream security patches and is intentionally closed.
|
|
|
|
## What stays authoritative for AXPR24
|
|
|
|
- The LOS→AXP port method (`scripts/009-*.sh`, `apply_009_*.py`).
|
|
- AXP packaging/signing shape (release keys, AVB flags, Magisk preroot).
|
|
- WebView adaptation chain Vanadium → Mulch → AOSmium, the prebuilt module
|
|
pattern and the provider overlay/RRO lesson.
|
|
- The device-side IME/kernel notes in `docs/009-*`.
|